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", 0x2000, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x804}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0\x00', 0x0, 0x0) 22:41:04 executing program 3: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) socketpair(0x1d, 0x0, 0x0, &(0x7f0000000180)) 22:41:04 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 22:41:04 executing program 5: add_key$keyring(&(0x7f0000000c00), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) 22:41:04 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002480), 0x200) [ 747.508311][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 747.516286][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 747.524262][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.532235][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 747.540250][T13681] 22:41:04 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 747.568639][T13681] index not increased! 20ffd000 <= 20ffd000 [ 747.600873][T13729] fuse: Bad value for 'fd' 22:41:04 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000c00), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) 22:41:04 executing program 4: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xffffbf69}, 0x8) [ 747.614946][T13681] BUG at mt_find:6473 (1) [ 747.620455][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter, 0x48) [ 747.666528][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:04 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x395000, 0x0) 22:41:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0xaf07}) [ 747.874491][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 747.891326][T13727] can: request_module (can-proto-0) failed. [ 747.957666][T13681] 0-536866815: 0000000000000000 [ 747.986448][T13681] 536866816-536870911: ffff88801cede380 [ 747.993153][T13681] 536870912-553631743: ffff88801cede0e0 [ 748.030498][T13681] 553631744-553639935: 0000000000000000 [ 748.038068][T13681] 553639936-553635839: ffff8880772027e0 [ 748.044031][T13681] 553635840-553644031: ffff888077202a80 [ 748.050492][T13681] 553644032-553648127: ffff8880266220e0 [ 748.056695][T13681] 553648128-553652223: ffff88801cede000 [ 748.062632][T13681] 553652224-116819886079: 0000000000000000 [ 748.069833][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 748.076414][T13681] 116824080384-93825007087615: 0000000000000000 [ 748.083506][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 748.093709][T13681] 93825007226880-140323535712255: 0000000000000000 [ 748.101491][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 748.108834][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 748.165265][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 748.172266][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 748.179508][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 748.196368][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 748.213703][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 748.234061][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 748.241219][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 748.256368][ T1202] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.262710][ T1202] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.265005][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 748.293624][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 748.317247][T13681] 140323557900288-140323557904383: 0000000000000000 [ 748.324264][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 748.392557][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 748.435009][T13681] 140323558305792-140323558326271: 0000000000000000 [ 748.442021][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 748.465203][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 748.575257][T13681] 140323570171904-140323571208191: 0000000000000000 [ 748.585772][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 748.613612][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 748.644045][T13681] 140323571343360-140734793707519: 0000000000000000 [ 748.664424][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 748.684836][T13681] 140734793842688-140734795161599: 0000000000000000 [ 748.691932][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 748.719577][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 748.726732][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 748.744662][T13681] Pass: 11700773 Run:11700853 [ 748.749552][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 748.759489][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 748.769578][T13681] Call Trace: [ 748.772875][T13681] [ 748.775833][T13681] dump_stack_lvl+0xd1/0x138 [ 748.780476][T13681] mt_find.cold+0x8b/0x90 [ 748.784857][T13681] ? mas_find+0x1d0/0x1d0 [ 748.789245][T13681] find_vma+0x10c/0x1b0 [ 748.793444][T13681] ? can_vma_merge_before+0x390/0x390 [ 748.798872][T13681] ? walk_page_test+0x78/0x180 [ 748.803704][T13681] walk_page_range+0x2b1/0x4a0 [ 748.808515][T13681] ? __walk_page_range+0x780/0x780 [ 748.813674][T13681] mlock_fixup+0x650/0x810 [ 748.818128][T13681] apply_vma_lock_flags+0x23d/0x350 [ 748.823352][T13681] ? mlock_fixup+0x810/0x810 [ 748.827974][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 748.833887][T13681] do_mlock+0x25a/0x6d0 [ 748.838064][T13681] ? folio_evictable+0x270/0x270 [ 748.843029][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 748.848939][T13681] __x64_sys_mlock+0x59/0x80 [ 748.853549][T13681] do_syscall_64+0x39/0xb0 [ 748.857986][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 748.863892][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 748.868313][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 748.887925][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 748.896345][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 748.904322][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 748.912306][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 748.920290][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.928363][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 748.936400][T13681] [ 749.025010][T13681] index not increased! 20ffd000 <= 20ffd000 [ 749.030970][T13681] BUG at mt_find:6473 (1) [ 749.046386][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 749.064940][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 749.144958][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 749.244992][T13681] 0-536866815: 0000000000000000 [ 749.250482][T13681] 536866816-536870911: ffff88801cede380 [ 749.256486][T13681] 536870912-553631743: ffff88801cede0e0 [ 749.275019][T13681] 553631744-553639935: 0000000000000000 [ 749.280987][T13681] 553639936-553635839: ffff8880772027e0 [ 749.316403][T13681] 553635840-553644031: ffff888077202a80 [ 749.323381][T13681] 553644032-553648127: ffff8880266220e0 [ 749.354923][T13681] 553648128-553652223: ffff88801cede000 [ 749.361411][T13681] 553652224-116819886079: 0000000000000000 [ 749.484955][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 749.491444][T13681] 116824080384-93825007087615: 0000000000000000 [ 749.534921][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 749.541843][T13681] 93825007226880-140323535712255: 0000000000000000 [ 749.564964][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 749.571974][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 749.694771][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 749.705105][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 749.712278][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 749.729451][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 749.745026][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 749.762429][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 749.772612][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 749.792971][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 749.812062][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 749.823218][T13681] 140323557900288-140323557904383: 0000000000000000 [ 749.840963][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 749.853928][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 749.871726][T13681] 140323558305792-140323558326271: 0000000000000000 [ 749.885006][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 749.902420][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 749.969988][T13681] 140323570171904-140323571208191: 0000000000000000 [ 749.985777][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 749.992787][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 750.014802][T13681] 140323571343360-140734793707519: 0000000000000000 [ 750.034984][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 750.042780][T13681] 140734793842688-140734795161599: 0000000000000000 [ 750.063996][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 750.085031][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 750.092250][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 750.099728][T13681] Pass: 11723025 Run:11723106 [ 750.104925][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 750.114858][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 750.124935][T13681] Call Trace: [ 750.128230][T13681] [ 750.131182][T13681] dump_stack_lvl+0xd1/0x138 [ 750.135814][T13681] mt_find.cold+0x8b/0x90 [ 750.140189][T13681] ? mas_find+0x1d0/0x1d0 [ 750.144575][T13681] find_vma+0x10c/0x1b0 [ 750.148765][T13681] ? can_vma_merge_before+0x390/0x390 [ 750.154168][T13681] ? walk_page_test+0x78/0x180 [ 750.158979][T13681] walk_page_range+0x2b1/0x4a0 [ 750.163789][T13681] ? __walk_page_range+0x780/0x780 [ 750.168959][T13681] mlock_fixup+0x650/0x810 [ 750.173429][T13681] apply_vma_lock_flags+0x23d/0x350 [ 750.178669][T13681] ? mlock_fixup+0x810/0x810 [ 750.183318][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 750.189256][T13681] do_mlock+0x25a/0x6d0 [ 750.193456][T13681] ? folio_evictable+0x270/0x270 [ 750.198448][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 750.204387][T13681] __x64_sys_mlock+0x59/0x80 [ 750.209023][T13681] do_syscall_64+0x39/0xb0 [ 750.213493][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 750.219424][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 750.223868][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 750.243600][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 750.252052][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 750.260057][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 750.268059][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 750.276139][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.284132][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 750.292157][T13681] [ 750.302210][T13681] index not increased! 20ffd000 <= 20ffd000 [ 750.308435][T13681] BUG at mt_find:6473 (1) [ 750.312785][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 750.326629][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 750.366182][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 750.427405][T13681] 0-536866815: 0000000000000000 [ 750.432863][T13681] 536866816-536870911: ffff88801cede380 [ 750.439490][T13681] 536870912-553631743: ffff88801cede0e0 [ 750.447832][T13681] 553631744-553639935: 0000000000000000 [ 750.454100][T13681] 553639936-553635839: ffff8880772027e0 [ 750.460552][T13681] 553635840-553644031: ffff888077202a80 [ 750.467166][T13681] 553644032-553648127: ffff8880266220e0 [ 750.473115][T13681] 553648128-553652223: ffff88801cede000 [ 750.479665][T13681] 553652224-116819886079: 0000000000000000 [ 750.486567][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 750.493270][T13681] 116824080384-93825007087615: 0000000000000000 [ 750.500449][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 750.508403][T13681] 93825007226880-140323535712255: 0000000000000000 [ 750.515667][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 750.522922][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 750.586266][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 750.593516][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 750.600999][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 750.608584][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 750.615886][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 750.623136][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 750.630570][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 750.638102][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 750.645842][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 750.660211][T13681] 140323557900288-140323557904383: 0000000000000000 [ 750.681963][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 750.698012][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 750.715028][T13681] 140323558305792-140323558326271: 0000000000000000 [ 750.725382][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 750.742913][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 750.813865][T13681] 140323570171904-140323571208191: 0000000000000000 [ 750.826065][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 750.833326][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 750.853363][T13681] 140323571343360-140734793707519: 0000000000000000 [ 750.863187][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 750.870599][T13681] 140734793842688-140734795161599: 0000000000000000 [ 750.877956][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 750.885210][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 750.892391][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 750.900438][T13681] Pass: 11737361 Run:11737443 [ 750.907246][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 750.917183][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 750.927260][T13681] Call Trace: [ 750.930549][T13681] [ 750.933487][T13681] dump_stack_lvl+0xd1/0x138 [ 750.938101][T13681] mt_find.cold+0x8b/0x90 [ 750.942461][T13681] ? mas_find+0x1d0/0x1d0 [ 750.946819][T13681] find_vma+0x10c/0x1b0 [ 750.950986][T13681] ? can_vma_merge_before+0x390/0x390 [ 750.956376][T13681] ? walk_page_test+0x78/0x180 [ 750.961158][T13681] walk_page_range+0x2b1/0x4a0 [ 750.965945][T13681] ? __walk_page_range+0x780/0x780 [ 750.971092][T13681] mlock_fixup+0x650/0x810 [ 750.975548][T13681] apply_vma_lock_flags+0x23d/0x350 [ 750.980796][T13681] ? mlock_fixup+0x810/0x810 [ 750.985438][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 750.991372][T13681] do_mlock+0x25a/0x6d0 [ 750.995566][T13681] ? folio_evictable+0x270/0x270 [ 751.000534][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 751.006443][T13681] __x64_sys_mlock+0x59/0x80 [ 751.011054][T13681] do_syscall_64+0x39/0xb0 [ 751.015501][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 751.021405][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 751.025826][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 751.045439][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 751.053885][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 751.061875][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 751.069855][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 751.077850][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.086276][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 751.094274][T13681] [ 751.112508][T13681] index not increased! 20ffd000 <= 20ffd000 [ 751.118782][T13681] BUG at mt_find:6473 (1) [ 751.123404][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 751.132484][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 751.189630][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 751.249897][T13681] 0-536866815: 0000000000000000 [ 751.260117][T13681] 536866816-536870911: ffff88801cede380 [ 751.275057][T13681] 536870912-553631743: ffff88801cede0e0 [ 751.291479][T13681] 553631744-553639935: 0000000000000000 [ 751.301713][T13681] 553639936-553635839: ffff8880772027e0 [ 751.315029][T13681] 553635840-553644031: ffff888077202a80 [ 751.321000][T13681] 553644032-553648127: ffff8880266220e0 [ 751.337694][T13681] 553648128-553652223: ffff88801cede000 [ 751.343773][T13681] 553652224-116819886079: 0000000000000000 [ 751.356693][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 751.363364][T13681] 116824080384-93825007087615: 0000000000000000 [ 751.374404][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 751.393232][T13681] 93825007226880-140323535712255: 0000000000000000 [ 751.403450][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 751.414990][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 751.483634][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 751.491411][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 751.498910][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 751.506367][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 751.513348][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 751.520880][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 751.528313][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 751.535615][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 751.542698][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 751.550183][T13681] 140323557900288-140323557904383: 0000000000000000 [ 751.557606][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 751.564604][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 751.581779][T13681] 140323558305792-140323558326271: 0000000000000000 [ 751.589657][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 751.596954][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 751.650182][T13681] 140323570171904-140323571208191: 0000000000000000 [ 751.657529][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 751.664613][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 751.672150][T13681] 140323571343360-140734793707519: 0000000000000000 [ 751.687654][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 751.704943][T13681] 140734793842688-140734795161599: 0000000000000000 [ 751.711956][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 751.731643][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 751.744446][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 751.760431][T13681] Pass: 11773679 Run:11773762 [ 751.772576][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 751.782532][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 751.792618][T13681] Call Trace: [ 751.795921][T13681] [ 751.798880][T13681] dump_stack_lvl+0xd1/0x138 [ 751.803514][T13681] mt_find.cold+0x8b/0x90 [ 751.807888][T13681] ? mas_find+0x1d0/0x1d0 [ 751.812278][T13681] find_vma+0x10c/0x1b0 [ 751.816482][T13681] ? can_vma_merge_before+0x390/0x390 [ 751.821901][T13681] ? walk_page_test+0x78/0x180 [ 751.826725][T13681] walk_page_range+0x2b1/0x4a0 [ 751.831548][T13681] ? __walk_page_range+0x780/0x780 [ 751.836904][T13681] mlock_fixup+0x650/0x810 [ 751.841387][T13681] apply_vma_lock_flags+0x23d/0x350 [ 751.846640][T13681] ? mlock_fixup+0x810/0x810 [ 751.851292][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 751.857239][T13681] do_mlock+0x25a/0x6d0 [ 751.861476][T13681] ? folio_evictable+0x270/0x270 [ 751.866480][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 751.872423][T13681] __x64_sys_mlock+0x59/0x80 [ 751.877065][T13681] do_syscall_64+0x39/0xb0 [ 751.881531][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 751.887463][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 751.891910][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 751.911643][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 751.920098][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 751.928101][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 751.936116][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 751.944124][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.952131][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 751.960163][T13681] [ 751.983269][T13681] index not increased! 20ffd000 <= 20ffd000 [ 751.997484][T13681] BUG at mt_find:6473 (1) [ 752.001878][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 752.011685][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 752.049427][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 752.102530][T13681] 0-536866815: 0000000000000000 [ 752.108159][T13681] 536866816-536870911: ffff88801cede380 [ 752.114105][T13681] 536870912-553631743: ffff88801cede0e0 [ 752.120496][T13681] 553631744-553639935: 0000000000000000 [ 752.126727][T13681] 553639936-553635839: ffff8880772027e0 [ 752.132659][T13681] 553635840-553644031: ffff888077202a80 [ 752.138822][T13681] 553644032-553648127: ffff8880266220e0 [ 752.144753][T13681] 553648128-553652223: ffff88801cede000 [ 752.150977][T13681] 553652224-116819886079: 0000000000000000 [ 752.158032][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 752.164489][T13681] 116824080384-93825007087615: 0000000000000000 [ 752.171510][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 752.179007][T13681] 93825007226880-140323535712255: 0000000000000000 [ 752.187179][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 752.194179][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 752.251516][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 752.259555][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 752.267049][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 752.274115][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 752.281162][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 752.289173][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 752.296240][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 752.303197][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 752.310230][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 752.317240][T13681] 140323557900288-140323557904383: 0000000000000000 [ 752.324194][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 752.331195][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 752.338344][T13681] 140323558305792-140323558326271: 0000000000000000 [ 752.345404][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 752.352373][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 752.405823][T13681] 140323570171904-140323571208191: 0000000000000000 [ 752.412820][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 752.420242][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 752.427453][T13681] 140323571343360-140734793707519: 0000000000000000 [ 752.434429][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 752.441688][T13681] 140734793842688-140734795161599: 0000000000000000 [ 752.448846][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 752.456052][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 752.464572][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 752.472196][T13681] Pass: 11817662 Run:11817746 [ 752.477068][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 752.486990][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 752.497332][T13681] Call Trace: [ 752.500618][T13681] [ 752.503540][T13681] dump_stack_lvl+0xd1/0x138 [ 752.508136][T13681] mt_find.cold+0x8b/0x90 [ 752.512463][T13681] ? mas_find+0x1d0/0x1d0 [ 752.516795][T13681] find_vma+0x10c/0x1b0 [ 752.520943][T13681] ? can_vma_merge_before+0x390/0x390 [ 752.526306][T13681] ? walk_page_test+0x78/0x180 [ 752.531065][T13681] walk_page_range+0x2b1/0x4a0 [ 752.535844][T13681] ? __walk_page_range+0x780/0x780 [ 752.541008][T13681] mlock_fixup+0x650/0x810 [ 752.545478][T13681] apply_vma_lock_flags+0x23d/0x350 [ 752.550719][T13681] ? mlock_fixup+0x810/0x810 [ 752.555358][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 752.561279][T13681] do_mlock+0x25a/0x6d0 [ 752.565441][T13681] ? folio_evictable+0x270/0x270 [ 752.570381][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 752.576276][T13681] __x64_sys_mlock+0x59/0x80 [ 752.580865][T13681] do_syscall_64+0x39/0xb0 [ 752.585293][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 752.591218][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 752.595658][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 752.615284][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 752.623688][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 752.631649][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 752.639623][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 752.647614][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.656385][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 752.664372][T13681] [ 752.673309][T13681] index not increased! 20ffd000 <= 20ffd000 [ 752.679334][T13681] BUG at mt_find:6473 (1) [ 752.683687][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 752.693004][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 752.730878][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 752.780304][T13681] 0-536866815: 0000000000000000 [ 752.788116][T13681] 536866816-536870911: ffff88801cede380 [ 752.794069][T13681] 536870912-553631743: ffff88801cede0e0 [ 752.800991][T13681] 553631744-553639935: 0000000000000000 [ 752.807005][T13681] 553639936-553635839: ffff8880772027e0 [ 752.812927][T13681] 553635840-553644031: ffff888077202a80 [ 752.818923][T13681] 553644032-553648127: ffff8880266220e0 [ 752.824839][T13681] 553648128-553652223: ffff88801cede000 [ 752.830830][T13681] 553652224-116819886079: 0000000000000000 [ 752.837136][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 752.843573][T13681] 116824080384-93825007087615: 0000000000000000 [ 752.850249][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 752.857097][T13681] 93825007226880-140323535712255: 0000000000000000 [ 752.863966][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 752.870982][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 752.929439][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 752.936831][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 752.943884][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 752.951164][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 752.958442][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 752.965866][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 752.972843][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 752.980141][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 752.987465][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 752.994434][T13681] 140323557900288-140323557904383: 0000000000000000 [ 753.002430][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 753.025005][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 753.032714][T13681] 140323558305792-140323558326271: 0000000000000000 [ 753.054767][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 753.062028][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 753.128534][T13681] 140323570171904-140323571208191: 0000000000000000 [ 753.146628][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 753.153644][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 753.172496][T13681] 140323571343360-140734793707519: 0000000000000000 [ 753.184934][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 753.191938][T13681] 140734793842688-140734795161599: 0000000000000000 [ 753.204611][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 753.213401][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 753.214034][ T5130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 753.223264][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 753.236499][ T5130] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 753.236858][T13681] Pass: 11819280 Run:11819365 [ 753.249439][ T5130] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 753.249501][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 753.266305][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 753.276390][T13681] Call Trace: [ 753.279685][T13681] [ 753.281720][ T5130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 753.282619][T13681] dump_stack_lvl+0xd1/0x138 [ 753.290523][ T5130] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 753.294308][T13681] mt_find.cold+0x8b/0x90 [ 753.301652][ T5130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 753.305538][T13681] ? mas_find+0x1d0/0x1d0 [ 753.305584][T13681] find_vma+0x10c/0x1b0 [ 753.305610][T13681] ? can_vma_merge_before+0x390/0x390 [ 753.305636][T13681] ? walk_page_test+0x78/0x180 [ 753.305671][T13681] walk_page_range+0x2b1/0x4a0 [ 753.305708][T13681] ? __walk_page_range+0x780/0x780 [ 753.305758][T13681] mlock_fixup+0x650/0x810 [ 753.305810][T13681] apply_vma_lock_flags+0x23d/0x350 [ 753.305852][T13681] ? mlock_fixup+0x810/0x810 [ 753.305902][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 753.305941][T13681] do_mlock+0x25a/0x6d0 [ 753.305979][T13681] ? folio_evictable+0x270/0x270 [ 753.370732][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 753.376682][T13681] __x64_sys_mlock+0x59/0x80 [ 753.381322][T13681] do_syscall_64+0x39/0xb0 [ 753.385791][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 753.391728][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 753.396188][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 753.415832][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 753.424312][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 753.433018][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 753.441027][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 753.449038][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.457045][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 753.465065][T13681] [ 753.485164][T13681] index not increased! 20ffd000 <= 20ffd000 [ 753.491110][T13681] BUG at mt_find:6473 (1) [ 753.497480][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 753.506630][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 753.559368][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 753.572303][T13745] chnl_net:caif_netlink_parms(): no params data found [ 753.610511][T13681] 0-536866815: 0000000000000000 [ 753.631298][T13681] 536866816-536870911: ffff88801cede380 [ 753.641065][T13681] 536870912-553631743: ffff88801cede0e0 [ 753.647393][T13681] 553631744-553639935: 0000000000000000 [ 753.653349][T13681] 553639936-553635839: ffff8880772027e0 [ 753.659769][T13681] 553635840-553644031: ffff888077202a80 [ 753.666130][T13681] 553644032-553648127: ffff8880266220e0 [ 753.672064][T13681] 553648128-553652223: ffff88801cede000 [ 753.678507][T13681] 553652224-116819886079: 0000000000000000 [ 753.684724][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 753.691838][T13681] 116824080384-93825007087615: 0000000000000000 [ 753.699836][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 753.707250][T13681] 93825007226880-140323535712255: 0000000000000000 [ 753.714543][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 753.740544][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 753.796584][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 753.803624][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 753.805046][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.811257][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 753.826689][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 753.833547][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.833660][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 753.851374][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 753.856451][T13745] device bridge_slave_0 entered promiscuous mode [ 753.859226][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 753.867594][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.872228][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 753.886156][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 753.892442][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.893113][T13681] 140323557900288-140323557904383: 0000000000000000 [ 753.907933][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 753.915304][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 753.915676][T13745] device bridge_slave_1 entered promiscuous mode [ 753.922256][T13681] 140323558305792-140323558326271: 0000000000000000 [ 753.937382][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 753.944361][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 753.996207][T13681] 140323570171904-140323571208191: 0000000000000000 [ 754.003205][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 754.010715][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 754.019039][T13681] 140323571343360-140734793707519: 0000000000000000 [ 754.026381][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 754.035182][T13681] 140734793842688-140734795161599: 0000000000000000 [ 754.042207][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 754.045606][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.050584][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 754.066554][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 754.073984][T13681] Pass: 11830032 Run:11830118 [ 754.078136][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.079237][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 754.097606][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 754.107689][T13681] Call Trace: [ 754.110992][T13681] [ 754.113954][T13681] dump_stack_lvl+0xd1/0x138 [ 754.118597][T13681] mt_find.cold+0x8b/0x90 [ 754.122970][T13681] ? mas_find+0x1d0/0x1d0 [ 754.127521][T13681] find_vma+0x10c/0x1b0 [ 754.131708][T13681] ? can_vma_merge_before+0x390/0x390 [ 754.137124][T13681] ? walk_page_test+0x78/0x180 [ 754.141932][T13681] walk_page_range+0x2b1/0x4a0 [ 754.146735][T13681] ? __walk_page_range+0x780/0x780 [ 754.151880][T13681] mlock_fixup+0x650/0x810 [ 754.156322][T13681] apply_vma_lock_flags+0x23d/0x350 [ 754.161563][T13681] ? mlock_fixup+0x810/0x810 [ 754.166216][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 754.172145][T13681] do_mlock+0x25a/0x6d0 [ 754.176319][T13681] ? folio_evictable+0x270/0x270 [ 754.181306][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 754.187273][T13681] __x64_sys_mlock+0x59/0x80 [ 754.191907][T13681] do_syscall_64+0x39/0xb0 [ 754.196365][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 754.202275][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 754.206694][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 754.226352][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 754.234798][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 754.242786][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 754.250761][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 754.258757][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.266749][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 754.274745][T13681] [ 754.280805][T13681] index not increased! 20ffd000 <= 20ffd000 [ 754.286832][T13681] BUG at mt_find:6473 (1) [ 754.291191][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 754.299739][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 754.339010][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 754.344763][T13745] team0: Port device team_slave_0 added [ 754.395412][T13681] 0-536866815: 0000000000000000 [ 754.400841][T13681] 536866816-536870911: ffff88801cede380 [ 754.406916][T13681] 536870912-553631743: ffff88801cede0e0 [ 754.412852][T13681] 553631744-553639935: 0000000000000000 [ 754.418999][T13681] 553639936-553635839: ffff8880772027e0 [ 754.425011][T13681] 553635840-553644031: ffff888077202a80 [ 754.431121][T13681] 553644032-553648127: ffff8880266220e0 [ 754.433389][T13745] team0: Port device team_slave_1 added [ 754.437131][T13681] 553648128-553652223: ffff88801cede000 [ 754.437161][T13681] 553652224-116819886079: 0000000000000000 [ 754.437185][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 754.437214][T13681] 116824080384-93825007087615: 0000000000000000 [ 754.437237][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 754.437261][T13681] 93825007226880-140323535712255: 0000000000000000 [ 754.437284][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 754.437307][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 754.437535][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 754.554790][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 754.561849][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 754.568903][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 754.575982][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 754.582955][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 754.590058][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 754.597123][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 754.604132][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 754.611238][T13681] 140323557900288-140323557904383: 0000000000000000 [ 754.619264][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 754.620570][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.626297][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 754.626329][T13681] 140323558305792-140323558326271: 0000000000000000 [ 754.626352][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 754.626377][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 [ 754.644947][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.648279][T13681] 0000000000000000 140734793707519 [ 754.654289][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.684621][T13681] ffff888078bac7e0 140734793842687 [ 754.720426][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.732913][T13681] 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 754.733074][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.774917][T13681] 140323570171904-140323571208191: [ 754.787312][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.796480][T13681] 0000000000000000 [ 754.815064][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 754.822186][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 754.842608][T13681] 140323571343360-140734793707519: 0000000000000000 [ 754.845248][T13745] device hsr_slave_0 entered promiscuous mode [ 754.857957][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 754.865297][T13681] 140734793842688-140734795161599: 0000000000000000 [ 754.865653][T13745] device hsr_slave_1 entered promiscuous mode [ 754.872253][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 754.885593][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 754.885631][T13745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.892540][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 754.909811][T13681] Pass: 11830032 Run:11830119 [ 754.914509][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 754.914725][T13745] Cannot create hsr debugfs directory [ 754.924399][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 754.924414][T13681] Call Trace: [ 754.924422][T13681] [ 754.924432][T13681] dump_stack_lvl+0xd1/0x138 [ 754.924472][T13681] mt_find.cold+0x8b/0x90 [ 754.924506][T13681] ? mas_find+0x1d0/0x1d0 [ 754.924554][T13681] find_vma+0x10c/0x1b0 [ 754.924582][T13681] ? can_vma_merge_before+0x390/0x390 [ 754.924613][T13681] ? walk_page_test+0x78/0x180 [ 754.924648][T13681] walk_page_range+0x2b1/0x4a0 [ 754.924687][T13681] ? __walk_page_range+0x780/0x780 [ 754.924740][T13681] mlock_fixup+0x650/0x810 [ 754.988123][T13681] apply_vma_lock_flags+0x23d/0x350 [ 754.993361][T13681] ? mlock_fixup+0x810/0x810 [ 754.997981][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 755.003897][T13681] do_mlock+0x25a/0x6d0 [ 755.008097][T13681] ? folio_evictable+0x270/0x270 [ 755.013210][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 755.019153][T13681] __x64_sys_mlock+0x59/0x80 [ 755.023786][T13681] do_syscall_64+0x39/0xb0 [ 755.028227][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 755.034137][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 755.038563][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 755.058196][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 755.066626][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 755.074601][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 755.082575][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 755.090550][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.098529][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 755.106520][T13681] [ 755.125005][T13681] index not increased! 20ffd000 <= 20ffd000 [ 755.140031][T13681] BUG at mt_find:6473 (1) [ 755.144418][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 755.153023][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 755.191007][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 755.240211][T13681] 0-536866815: 0000000000000000 [ 755.248210][T13681] 536866816-536870911: ffff88801cede380 [ 755.254161][T13681] 536870912-553631743: ffff88801cede0e0 [ 755.260909][T13681] 553631744-553639935: 0000000000000000 [ 755.266953][T13681] 553639936-553635839: ffff8880772027e0 [ 755.273410][T13681] 553635840-553644031: ffff888077202a80 [ 755.279439][T13681] 553644032-553648127: ffff8880266220e0 [ 755.285471][T13681] 553648128-553652223: ffff88801cede000 [ 755.291493][T13681] 553652224-116819886079: 0000000000000000 [ 755.298074][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 755.304544][T13681] 116824080384-93825007087615: 0000000000000000 [ 755.311311][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 755.318368][T13681] 93825007226880-140323535712255: 0000000000000000 [ 755.326338][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 755.333360][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 755.386751][ T5130] Bluetooth: hci6: command 0x0409 tx timeout [ 755.405013][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 755.412026][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 755.435227][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 755.442331][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 755.449979][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 755.457510][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 755.466471][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 755.468423][T13745] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.473452][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 755.473485][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 755.505057][T13681] 140323557900288-140323557904383: 0000000000000000 [ 755.512232][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 755.525191][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 755.532197][T13681] 140323558305792-140323558326271: 0000000000000000 [ 755.562032][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 755.595030][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 755.648835][T13745] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.682048][T13681] 140323570171904-140323571208191: 0000000000000000 [ 755.695044][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 755.702822][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 755.735005][T13681] 140323571343360-140734793707519: 0000000000000000 [ 755.742032][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 755.754156][T13745] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.764650][T13681] 140734793842688-140734795161599: 0000000000000000 [ 755.764746][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 755.764800][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 755.766102][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 755.812392][T13681] Pass: 11830045 Run:11830133 [ 755.821726][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 755.831682][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 755.841771][T13681] Call Trace: [ 755.845066][T13681] [ 755.848020][T13681] dump_stack_lvl+0xd1/0x138 [ 755.852648][T13681] mt_find.cold+0x8b/0x90 [ 755.857019][T13681] ? mas_find+0x1d0/0x1d0 [ 755.861402][T13681] find_vma+0x10c/0x1b0 [ 755.865589][T13681] ? can_vma_merge_before+0x390/0x390 [ 755.870995][T13681] ? walk_page_test+0x78/0x180 [ 755.875802][T13681] walk_page_range+0x2b1/0x4a0 [ 755.880605][T13681] ? __walk_page_range+0x780/0x780 [ 755.885778][T13681] mlock_fixup+0x650/0x810 [ 755.890244][T13681] apply_vma_lock_flags+0x23d/0x350 [ 755.895488][T13681] ? mlock_fixup+0x810/0x810 [ 755.900132][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 755.906063][T13681] do_mlock+0x25a/0x6d0 [ 755.910263][T13681] ? folio_evictable+0x270/0x270 [ 755.915253][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 755.921177][T13681] __x64_sys_mlock+0x59/0x80 [ 755.925792][T13681] do_syscall_64+0x39/0xb0 [ 755.930240][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 755.936160][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 755.940583][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 755.960459][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 755.970115][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 755.978109][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 755.986091][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 755.994073][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.002051][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 756.010048][T13681] [ 756.020089][T13681] index not increased! 20ffd000 <= 20ffd000 [ 756.040177][T13681] BUG at mt_find:6473 (1) [ 756.044572][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 756.075341][T13745] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.087203][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 756.125368][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 756.177125][T13681] 0-536866815: 0000000000000000 [ 756.184063][T13681] 536866816-536870911: ffff88801cede380 [ 756.190565][T13681] 536870912-553631743: ffff88801cede0e0 [ 756.196865][T13681] 553631744-553639935: 0000000000000000 [ 756.202802][T13681] 553639936-553635839: ffff8880772027e0 [ 756.209240][T13681] 553635840-553644031: ffff888077202a80 [ 756.215518][T13681] 553644032-553648127: ffff8880266220e0 [ 756.221548][T13681] 553648128-553652223: ffff88801cede000 [ 756.228017][T13681] 553652224-116819886079: 0000000000000000 [ 756.234229][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 756.241260][T13681] 116824080384-93825007087615: 0000000000000000 [ 756.249847][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 756.257059][T13681] 93825007226880-140323535712255: 0000000000000000 [ 756.263967][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 756.271471][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 756.330545][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 756.346671][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 756.353691][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 756.361200][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 756.368563][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 756.375975][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 756.382958][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 756.392616][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 756.400069][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 756.407431][T13681] 140323557900288-140323557904383: 0000000000000000 [ 756.414419][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 756.421978][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 756.429450][T13681] 140323558305792-140323558326271: 0000000000000000 [ 756.438155][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 756.440591][T13745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 756.448143][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 756.504096][T13681] 140323570171904-140323571208191: 0000000000000000 [ 756.507248][T13745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 756.511234][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 756.524804][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 756.531923][T13681] 140323571343360-140734793707519: 0000000000000000 [ 756.539017][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 756.542334][T13745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 756.554538][T13681] 140734793842688-140734795161599: 0000000000000000 [ 756.561860][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 756.566002][T13745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 756.569123][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 756.582587][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 756.592438][T13681] Pass: 11830050 Run:11830139 [ 756.597326][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 756.607257][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 756.617344][T13681] Call Trace: [ 756.620654][T13681] [ 756.623607][T13681] dump_stack_lvl+0xd1/0x138 [ 756.628248][T13681] mt_find.cold+0x8b/0x90 [ 756.632632][T13681] ? mas_find+0x1d0/0x1d0 [ 756.637021][T13681] find_vma+0x10c/0x1b0 [ 756.641219][T13681] ? can_vma_merge_before+0x390/0x390 [ 756.646637][T13681] ? walk_page_test+0x78/0x180 [ 756.651436][T13681] walk_page_range+0x2b1/0x4a0 [ 756.656246][T13681] ? __walk_page_range+0x780/0x780 [ 756.661421][T13681] mlock_fixup+0x650/0x810 [ 756.665914][T13681] apply_vma_lock_flags+0x23d/0x350 [ 756.671181][T13681] ? mlock_fixup+0x810/0x810 [ 756.675835][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 756.681780][T13681] do_mlock+0x25a/0x6d0 [ 756.685990][T13681] ? folio_evictable+0x270/0x270 [ 756.690991][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 756.696942][T13681] __x64_sys_mlock+0x59/0x80 [ 756.701582][T13681] do_syscall_64+0x39/0xb0 [ 756.706055][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 756.711989][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 756.716431][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 756.736074][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 756.739163][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.744499][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 756.759087][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 756.767085][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 756.774142][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 756.775063][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.775081][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 756.775116][T13681] [ 756.802683][T13681] index not increased! 20ffd000 <= 20ffd000 [ 756.809307][T13681] BUG at mt_find:6473 (1) [ 756.813658][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 756.822402][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 756.835899][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 756.859860][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 756.904382][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.940271][T13681] 0-536866815: 0000000000000000 [ 756.945729][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 756.946407][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 756.962913][T13681] 536866816-536870911: ffff88801cede380 [ 756.964232][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.969408][T13681] 536870912-553631743: [ 756.976005][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.988081][T13681] ffff88801cede0e0 [ 756.991697][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 756.991811][T13681] 553631744-553639935: 0000000000000000 [ 757.008858][T13681] 553639936-553635839: ffff8880772027e0 [ 757.014801][T13681] 553635840-553644031: ffff888077202a80 [ 757.016406][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 757.021076][T13681] 553644032-553648127: ffff8880266220e0 [ 757.034757][T13681] 553648128-553652223: ffff88801cede000 [ 757.042663][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.042897][T13681] 553652224-116819886079: [ 757.049822][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.049842][T13681] 0000000000000000 [ 757.065351][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 757.070252][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 757.085397][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 757.094260][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 757.094409][T13681] 116824080384-93825007087615: [ 757.105848][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 757.118135][T13681] 0000000000000000 [ 757.122720][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 757.130725][T13681] 93825007226880-140323535712255: 0000000000000000 [ 757.137749][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 757.144721][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 [ 757.145899][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 757.179905][T13681] ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 757.197972][T13745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 757.230303][T13745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 757.237757][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 757.243730][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 757.257309][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 757.261753][T13681] 140323544104960-140323546202111: [ 757.266395][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 757.279694][T13681] ffff8880208b27e0 [ 757.279712][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 757.279739][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 757.279761][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 757.279825][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 757.279850][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 757.279874][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 757.279897][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 757.279922][T13681] 140323557900288-140323557904383: 0000000000000000 [ 757.279946][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 757.279970][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 757.279994][T13681] 140323558305792-140323558326271: 0000000000000000 [ 757.280014][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 757.280036][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 [ 757.298761][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 757.313080][T13681] 0000000000000000 140734795161599 [ 757.339693][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 757.341478][T13681] ffff888078bac000 140734795177983 [ 757.353012][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 757.356555][T13681] ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 757.452471][T13681] 140323570171904-140323571208191: 0000000000000000 [ 757.459872][ T5130] Bluetooth: hci6: command 0x041b tx timeout [ 757.466197][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 757.473251][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 757.481373][T13681] 140323571343360-140734793707519: 0000000000000000 [ 757.489839][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 757.497195][T13681] 140734793842688-140734795161599: 0000000000000000 [ 757.504175][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 757.512660][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 757.520058][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 757.527875][T13681] Pass: 11843804 Run:11843894 [ 757.532583][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 757.542508][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 757.552596][T13681] Call Trace: [ 757.555903][T13681] [ 757.558857][T13681] dump_stack_lvl+0xd1/0x138 [ 757.563490][T13681] mt_find.cold+0x8b/0x90 [ 757.567864][T13681] ? mas_find+0x1d0/0x1d0 [ 757.572256][T13681] find_vma+0x10c/0x1b0 [ 757.576454][T13681] ? can_vma_merge_before+0x390/0x390 [ 757.581864][T13681] ? walk_page_test+0x78/0x180 [ 757.586671][T13681] walk_page_range+0x2b1/0x4a0 [ 757.591479][T13681] ? __walk_page_range+0x780/0x780 [ 757.596652][T13681] mlock_fixup+0x650/0x810 [ 757.601130][T13681] apply_vma_lock_flags+0x23d/0x350 [ 757.606373][T13681] ? mlock_fixup+0x810/0x810 [ 757.611025][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 757.616975][T13681] do_mlock+0x25a/0x6d0 [ 757.621188][T13681] ? folio_evictable+0x270/0x270 [ 757.626179][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 757.632125][T13681] __x64_sys_mlock+0x59/0x80 [ 757.636764][T13681] do_syscall_64+0x39/0xb0 [ 757.641222][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 757.647126][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 757.651547][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 757.671161][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 757.679580][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 757.687638][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 757.695612][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 757.703609][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.711600][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 757.721164][T13681] [ 757.735373][T13681] index not increased! 20ffd000 <= 20ffd000 [ 757.741330][T13681] BUG at mt_find:6473 (1) [ 757.749371][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 757.757977][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 757.797270][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 757.823216][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 757.850915][T13681] 0-536866815: 0000000000000000 [ 757.860874][T13681] 536866816-536870911: ffff88801cede380 [ 757.867311][T13681] 536870912-553631743: ffff88801cede0e0 [ 757.873250][T13681] 553631744-553639935: 0000000000000000 [ 757.879988][T13681] 553639936-553635839: ffff8880772027e0 [ 757.885799][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 757.886559][T13681] 553635840-553644031: ffff888077202a80 [ 757.901162][T13681] 553644032-553648127: ffff8880266220e0 [ 757.910631][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.917879][T13681] 553648128-553652223: ffff88801cede000 [ 757.928413][T13681] 553652224-116819886079: 0000000000000000 [ 757.935617][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 757.945351][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 757.945880][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 757.951834][T13681] 116824080384-93825007087615: 0000000000000000 [ 757.970907][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 757.978623][T13681] 93825007226880-140323535712255: 0000000000000000 [ 757.986078][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 757.986643][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 757.993038][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 758.015909][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 758.063389][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 758.079588][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 758.088553][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 758.089312][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 758.103422][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 758.110862][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 758.111465][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 758.126694][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 758.135990][T13745] device veth0_vlan entered promiscuous mode [ 758.141393][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 758.149624][T13745] device veth1_vlan entered promiscuous mode [ 758.155571][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 758.162749][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 758.174440][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 758.182453][T13681] 140323557900288-140323557904383: 0000000000000000 [ 758.182488][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 758.182513][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 758.182536][T13681] 140323558305792-140323558326271: 0000000000000000 [ 758.182560][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 758.182584][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 758.191794][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 758.213449][T13681] contents: [ 758.220012][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 758.249338][T13681] 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 758.251366][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 758.290828][T13681] 140323570171904-140323571208191: 0000000000000000 [ 758.307352][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 758.314353][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 758.321782][T13681] 140323571343360-140734793707519: 0000000000000000 [ 758.324285][T13745] device veth0_macvtap entered promiscuous mode [ 758.329198][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 758.343124][T13681] 140734793842688-140734795161599: 0000000000000000 [ 758.350577][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 758.358997][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 758.363152][T13745] device veth1_macvtap entered promiscuous mode [ 758.366490][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 758.380112][T13681] Pass: 11872622 Run:11872713 [ 758.384814][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 758.394737][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 758.404822][T13681] Call Trace: [ 758.408136][T13681] [ 758.408613][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.411067][T13681] dump_stack_lvl+0xd1/0x138 [ 758.426077][T13681] mt_find.cold+0x8b/0x90 [ 758.430436][T13681] ? mas_find+0x1d0/0x1d0 [ 758.434791][T13681] find_vma+0x10c/0x1b0 [ 758.438960][T13681] ? can_vma_merge_before+0x390/0x390 [ 758.444344][T13681] ? walk_page_test+0x78/0x180 [ 758.449127][T13681] walk_page_range+0x2b1/0x4a0 [ 758.453910][T13681] ? __walk_page_range+0x780/0x780 [ 758.459050][T13681] mlock_fixup+0x650/0x810 [ 758.463500][T13681] apply_vma_lock_flags+0x23d/0x350 [ 758.468718][T13681] ? mlock_fixup+0x810/0x810 [ 758.473336][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 758.479249][T13681] do_mlock+0x25a/0x6d0 [ 758.483424][T13681] ? folio_evictable+0x270/0x270 [ 758.488386][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 758.494295][T13681] __x64_sys_mlock+0x59/0x80 [ 758.498903][T13681] do_syscall_64+0x39/0xb0 [ 758.503334][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 758.509237][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 758.513657][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 758.533269][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 758.541689][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 758.549661][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 758.557633][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 758.565608][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.573581][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 758.581571][T13681] [ 758.590390][T13681] index not increased! 20ffd000 <= 20ffd000 [ 758.596422][T13681] BUG at mt_find:6473 (1) [ 758.600777][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 758.605096][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.610036][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 758.634920][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.658560][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 758.687094][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.721055][T13681] 0-536866815: 0000000000000000 [ 758.735649][T13681] 536866816-536870911: ffff88801cede380 [ 758.735720][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.742308][T13681] 536870912-553631743: ffff88801cede0e0 [ 758.742337][T13681] 553631744-553639935: 0000000000000000 [ 758.742360][T13681] 553639936-553635839: ffff8880772027e0 [ 758.742382][T13681] 553635840-553644031: [ 758.754701][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.780462][T13681] ffff888077202a80 [ 758.785248][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.785313][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.785326][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.785341][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.785359][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.785375][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.787104][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.805045][T13681] 553644032-553648127: [ 758.813635][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.835013][T13681] ffff8880266220e0 [ 758.846870][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.873010][T13681] 553648128-553652223: ffff88801cede000 [ 758.889891][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.892641][T13681] 553652224-116819886079: [ 758.903108][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.903122][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.903137][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.903148][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.903162][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.903171][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.903186][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.903201][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.903217][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.909559][T13681] 0000000000000000 [ 758.941153][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.954589][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 759.021702][T13681] 116824080384-93825007087615: 0000000000000000 [ 759.030291][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 759.038776][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 759.039019][T13681] 93825007087616-93825007226879: [ 759.049085][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 759.058433][T13681] ffff8880208b22a0 [ 759.065588][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 759.074994][T13681] 93825007226880-140323535712255: 0000000000000000 [ 759.075742][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 759.081881][T13681] 140323535712256-140323535716351: [ 759.091397][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 759.103919][T13681] ffff8880208b20e0 [ 759.108933][T13745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.121998][T13745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.131144][T13745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.131669][T13681] 140323535716352-140323570171903: [ 759.140752][T13745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.155027][T13681] node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 759.215080][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 759.222179][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 759.229284][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 759.241302][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 759.248732][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 759.256839][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 759.273814][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 759.290103][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 759.298807][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 759.305994][T13681] 140323557900288-140323557904383: 0000000000000000 [ 759.306025][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 759.306050][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 759.306079][T13681] 140323558305792-140323558326271: 0000000000000000 [ 759.306101][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 759.306124][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 759.306349][T13681] 140323570171904-140323571208191: 0000000000000000 [ 759.368412][ T938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.401303][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 759.417486][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 759.424478][T13681] 140323571343360-140734793707519: 0000000000000000 [ 759.431680][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 759.439155][T13681] 140734793842688-140734795161599: 0000000000000000 [ 759.446874][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 759.454025][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 759.462036][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 759.470050][T13681] Pass: 11872623 Run:11872715 [ 759.475343][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 759.485369][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 759.495465][T13681] Call Trace: [ 759.498774][T13681] [ 759.501745][T13681] dump_stack_lvl+0xd1/0x138 [ 759.506113][ T5101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.506367][T13681] mt_find.cold+0x8b/0x90 [ 759.514435][ T5101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.518709][T13681] ? mas_find+0x1d0/0x1d0 [ 759.518756][T13681] find_vma+0x10c/0x1b0 [ 759.518784][T13681] ? can_vma_merge_before+0x390/0x390 [ 759.533097][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 759.534522][T13681] ? walk_page_test+0x78/0x180 [ 759.545020][ T5130] Bluetooth: hci6: command 0x040f tx timeout [ 759.547078][T13681] walk_page_range+0x2b1/0x4a0 [ 759.562745][T13681] ? __walk_page_range+0x780/0x780 [ 759.567952][T13681] mlock_fixup+0x650/0x810 [ 759.572451][T13681] apply_vma_lock_flags+0x23d/0x350 [ 759.575981][ T938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.577691][T13681] ? mlock_fixup+0x810/0x810 [ 759.577750][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 759.595525][T13681] do_mlock+0x25a/0x6d0 [ 759.599717][T13681] ? folio_evictable+0x270/0x270 [ 759.604683][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 759.610594][T13681] __x64_sys_mlock+0x59/0x80 [ 759.615204][T13681] do_syscall_64+0x39/0xb0 [ 759.619640][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 759.625558][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 759.629985][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 759.649604][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 759.658052][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 759.666038][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 759.674023][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 759.682002][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.689987][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 759.697992][T13681] [ 759.702372][T13681] index not increased! 20ffd000 <= 20ffd000 [ 759.713566][T13681] BUG at mt_find:6473 (1) [ 759.718884][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 759.728810][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 759.737830][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 759.770952][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 759.846117][T13681] 0-536866815: 0000000000000000 [ 759.851400][T13681] 536866816-536870911: ffff88801cede380 [ 759.865161][T13681] 536870912-553631743: ffff88801cede0e0 [ 759.872839][T13681] 553631744-553639935: 0000000000000000 22:41:16 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000003080), 0x18c01, 0x0) 22:41:16 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000002a40)) 22:41:16 executing program 2: clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) 22:41:16 executing program 5: sigaltstack(&(0x7f0000000080)={0x0}, 0x0) 22:41:16 executing program 4: memfd_create(&(0x7f0000000300)='source_mac_is_multicast\x00', 0x0) 22:41:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0}}, 0x0) 22:41:16 executing program 5: clock_getres(0x2, &(0x7f0000000940)) [ 759.879535][T13681] 553639936-553635839: ffff8880772027e0 [ 759.891770][T13681] 553635840-553644031: ffff888077202a80 [ 759.899261][T13681] 553644032-553648127: ffff8880266220e0 [ 759.911297][T13681] 553648128-553652223: ffff88801cede000 22:41:16 executing program 1: pselect6(0x40, &(0x7f00000001c0)={0x1}, 0x0, 0x0, 0x0, 0x0) 22:41:16 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) 22:41:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x31, 0x0, &(0x7f0000000280)) 22:41:16 executing program 3: syz_open_dev$evdev(&(0x7f00000004c0), 0xfff, 0x0) [ 759.963983][T13681] 553652224-116819886079: 0000000000000000 22:41:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0xe, 0x0, &(0x7f0000000280)) [ 760.037939][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 760.044447][T13681] 116824080384-93825007087615: 0000000000000000 22:41:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x84, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x84, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX={0x6b}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 22:41:16 executing program 2: openat$autofs(0xffffff9c, 0x0, 0x402000, 0x0) 22:41:16 executing program 4: syz_open_dev$evdev(&(0x7f00000004c0), 0xfff, 0x500) 22:41:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8906, 0x0) 22:41:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0xb, 0x0, &(0x7f0000000280)) 22:41:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4, 0xf}]}, 0x18}}, 0x0) [ 760.136306][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 760.162933][T13681] 93825007226880-140323535712255: 0000000000000000 22:41:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001c40)={0x1, &(0x7f0000001c00)=[{}]}) [ 760.229648][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 760.288056][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 760.387422][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 760.397448][T13797] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 760.407600][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 760.407636][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 760.407660][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 760.407684][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 760.407707][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 760.407730][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 760.407753][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 760.407776][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 760.407798][T13681] 140323557900288-140323557904383: 0000000000000000 [ 760.407819][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 760.407842][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 760.407866][T13681] 140323558305792-140323558326271: 0000000000000000 [ 760.407889][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 760.407912][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 760.556972][T13681] 140323570171904-140323571208191: 0000000000000000 [ 760.564303][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 760.571369][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 760.578559][T13681] 140323571343360-140734793707519: 0000000000000000 [ 760.587285][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 760.594288][T13681] 140734793842688-140734795161599: 0000000000000000 [ 760.601353][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 760.608608][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 760.617382][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 760.624792][T13681] Pass: 11880698 Run:11880791 [ 760.629563][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 760.640271][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 760.650625][T13681] Call Trace: [ 760.653923][T13681] [ 760.656880][T13681] dump_stack_lvl+0xd1/0x138 [ 760.661528][T13681] mt_find.cold+0x8b/0x90 [ 760.665913][T13681] ? mas_find+0x1d0/0x1d0 [ 760.670305][T13681] find_vma+0x10c/0x1b0 [ 760.674487][T13681] ? can_vma_merge_before+0x390/0x390 [ 760.679879][T13681] ? walk_page_test+0x78/0x180 [ 760.684682][T13681] walk_page_range+0x2b1/0x4a0 [ 760.689489][T13681] ? __walk_page_range+0x780/0x780 [ 760.694687][T13681] mlock_fixup+0x650/0x810 [ 760.699175][T13681] apply_vma_lock_flags+0x23d/0x350 [ 760.704429][T13681] ? mlock_fixup+0x810/0x810 [ 760.709070][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 760.715088][T13681] do_mlock+0x25a/0x6d0 [ 760.719294][T13681] ? folio_evictable+0x270/0x270 [ 760.724280][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 760.730198][T13681] __x64_sys_mlock+0x59/0x80 [ 760.734913][T13681] do_syscall_64+0x39/0xb0 [ 760.739376][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 760.745303][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 760.749723][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 760.769359][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 760.778599][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 760.786771][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 760.794764][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 760.802754][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.810750][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 760.818768][T13681] [ 760.829200][T13681] index not increased! 20ffd000 <= 20ffd000 [ 760.835386][T13681] BUG at mt_find:6473 (1) [ 760.839742][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 760.848812][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc0189436, &(0x7f00000003c0)) 22:41:17 executing program 1: syz_open_dev$vcsu(&(0x7f0000000440), 0x6, 0xc01) 22:41:17 executing program 3: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x3}, 0x3f, 0x800, 'id0\x00', 'timer0\x00', 0x0, 0x5, 0x4, 0x253, 0x7}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001840)) socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000019c0)={0x1}, 0x4) r2 = socket(0x0, 0x0, 0x10000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x90, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x90}}, 0x240040c0) 22:41:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8924, &(0x7f00000003c0)) 22:41:17 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) 22:41:17 executing program 5: bpf$MAP_CREATE(0x22, &(0x7f0000000100), 0x48) [ 760.886349][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 22:41:17 executing program 5: r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)) 22:41:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x1600bd77, 0x0, &(0x7f0000000280)) [ 761.011717][T13681] 0-536866815: 0000000000000000 [ 761.027468][T13681] 536866816-536870911: ffff88801cede380 22:41:17 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x2}]}, 0x8) 22:41:17 executing program 0: syz_open_dev$vcsa(&(0x7f00000004c0), 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 22:41:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x17, 0x0, 0x2100, 0x100}, 0x48) 22:41:17 executing program 5: openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 22:41:17 executing program 4: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc001, 0x0, 0x0, 0x0) [ 761.084838][T13681] 536870912-553631743: ffff88801cede0e0 [ 761.119431][T13681] 553631744-553639935: 0000000000000000 22:41:17 executing program 3: io_setup(0x8, &(0x7f0000000100)=0x0) io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 22:41:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x0, 0x0, 0xfff}, 0x48) [ 761.183304][T13681] 553639936-553635839: ffff8880772027e0 22:41:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}, 0x1, 0x0, 0x2}, 0x0) 22:41:17 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) 22:41:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) [ 761.277844][T13681] 553635840-553644031: ffff888077202a80 [ 761.306286][T13681] 553644032-553648127: ffff8880266220e0 22:41:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}}}}) 22:41:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8931, &(0x7f0000000200)) 22:41:17 executing program 5: r0 = getpid() kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) [ 761.339892][T13681] 553648128-553652223: ffff88801cede000 22:41:17 executing program 0: io_setup(0x8, &(0x7f00000017c0)) 22:41:17 executing program 3: r0 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 761.386736][T13681] 553652224-116819886079: 0000000000000000 22:41:18 executing program 2: setpriority(0x1, 0x0, 0x551d00a) 22:41:18 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, 0x0) [ 761.432722][T13681] 116819886080-116824080383: ffff88801cede2a0 22:41:18 executing program 5: mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/76) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 22:41:18 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x8400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 22:41:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x0, 0x0, 0x7fff}, 0x48) [ 761.518290][T13681] 116824080384-93825007087615: 0000000000000000 [ 761.551710][T13681] 93825007087616-93825007226879: ffff8880208b22a0 22:41:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x84, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x11}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX={0x6b}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}}, 0x0) 22:41:18 executing program 4: get_mempolicy(0x0, &(0x7f0000000040), 0xfffffe00, &(0x7f0000fff000/0x1000)=nil, 0x2) 22:41:18 executing program 2: unshare(0x40400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) [ 761.610554][T13681] 93825007226880-140323535712255: 0000000000000000 [ 761.625106][ T5130] Bluetooth: hci6: command 0x0419 tx timeout 22:41:18 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x2, 0x4, 0x7, 0x3ff}, {0x0, 0x0, 0x0, 0x8}, {0x1ff, 0x8}, {0x0, 0x0, 0x8}]}, 0x8) socketpair(0x0, 0x0, 0x0, 0x0) [ 761.651193][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 761.689524][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:41:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0x8, 0x5, 0x401}, 0x48) [ 761.693424][T13861] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 761.746530][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 761.763185][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 761.770289][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 761.777390][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 761.784389][T13681] 140323550396416-140323552493567: ffff8880208b21c0 22:41:18 executing program 0: unshare(0x40000000) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) unshare(0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r1) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffb1df, @hyper}, 0x10, 0x80000) 22:41:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'wg1\x00', {0x5}}) 22:41:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @multicast1, {[@noop, @timestamp_addr={0x44, 0x54, 0x28, 0x1, 0x0, [{@remote, 0x7fff}, {@private=0xa010100, 0xd9d0}, {@remote, 0x80}, {@empty, 0xf8000000}, {@rand_addr=0x64010102, 0x1}, {@empty, 0xff}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xb0b4}, {@multicast1, 0x800}, {@multicast1, 0xfffffffd}]}, @timestamp={0x44, 0x20, 0x1f, 0x0, 0x6, [0x57, 0xfbb, 0x2, 0x7, 0x100, 0x5, 0x3ff]}, @rr={0x7, 0xb, 0xbf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) 22:41:18 executing program 5: openat$null(0xffffff9c, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f00000126c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 22:41:18 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) [ 761.802055][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 761.819961][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 22:41:18 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000000)={&(0x7f00000008c0)=@qipcrtr, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0xfffffffffffffe33}, 0x0) 22:41:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 22:41:18 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 22:41:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000005c0)={0x14}, 0x14}, 0x300}, 0x0) [ 761.935647][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 761.942668][T13681] 140323557564416-140323557900287: ffff888078bac380 22:41:18 executing program 3: setpriority(0x2, 0x0, 0x1ff) 22:41:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}) 22:41:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8971, &(0x7f00000003c0)) [ 762.029024][T13681] 140323557900288-140323557904383: 0000000000000000 [ 762.121065][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 762.156734][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 762.163892][T13681] 140323558305792-140323558326271: 0000000000000000 [ 762.181800][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 762.199480][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:41:18 executing program 0: unshare(0x2000400) r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 22:41:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) 22:41:18 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000002140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:41:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x28}}, 0x0) 22:41:18 executing program 1: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x2, 0x0) 22:41:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xffffff01, 0x1, 0x100}, 0x5a) 22:41:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 762.314289][T13681] 140323570171904-140323571208191: 0000000000000000 [ 762.328137][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 762.335751][T13681] 140323571212288-140323571343359: ffff888078bacb60 22:41:18 executing program 1: r0 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x19a}) 22:41:18 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x0, 0x13}, {0x0, 0x0, 0x7f}]}, 0x8) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x0, 0x5, 0xfffffffb, &(0x7f0000000740)) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) 22:41:18 executing program 4: syz_open_dev$evdev(&(0x7f0000001ac0), 0x0, 0x40) 22:41:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 762.408690][T13681] 140323571343360-140734793707519: 0000000000000000 22:41:19 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 762.475029][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 762.482053][T13681] 140734793842688-140734795161599: 0000000000000000 22:41:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891f, &(0x7f0000000200)={'syztnl0\x00', 0x0}) 22:41:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x84, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xf, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_INDEX={0x6b}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}}, 0x0) 22:41:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x13, 0x0, &(0x7f0000002200)) 22:41:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x1a, 0x0, &(0x7f0000000280)) 22:41:19 executing program 4: add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) 22:41:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000007f00)={'batadv_slave_0\x00'}) [ 762.622988][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 762.646619][T13927] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 22:41:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x300}, 0x0) 22:41:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) [ 762.675818][T13681] 140734795177984-140734795186175: ffff888078bacee0 22:41:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f00000000c0)={'sit0\x00', 0x0}) 22:41:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x1600bd7e, 0x0, &(0x7f0000000280)) 22:41:19 executing program 3: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000) [ 762.769234][T13681] 140734795186176-18446744073709551615: 0000000000000000 22:41:19 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 22:41:19 executing program 2: r0 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 22:41:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010026bd7000000000001200000008000900000000006800018014000200766c616e30000000000000000000000014000200766574", @ANYRES32=0x0, @ANYBLOB="080003000000000008"], 0x84}}, 0x0) 22:41:19 executing program 5: unshare(0xa00) [ 762.817619][T13681] Pass: 11931523 Run:11931617 [ 762.867427][T13946] sit0: mtu less than device minimum [ 762.885249][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 762.895223][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 762.905312][T13681] Call Trace: [ 762.908707][T13681] [ 762.911660][T13681] dump_stack_lvl+0xd1/0x138 22:41:19 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20442, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 22:41:19 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f00000003c0)="30053068ad3dd9", 0x7, r0) [ 762.916312][T13681] mt_find.cold+0x8b/0x90 [ 762.920712][T13681] ? mas_find+0x1d0/0x1d0 [ 762.925116][T13681] find_vma+0x10c/0x1b0 [ 762.929315][T13681] ? can_vma_merge_before+0x390/0x390 [ 762.934748][T13681] ? walk_page_test+0x78/0x180 [ 762.939564][T13681] walk_page_range+0x2b1/0x4a0 [ 762.944398][T13681] ? __walk_page_range+0x780/0x780 [ 762.949589][T13681] mlock_fixup+0x650/0x810 [ 762.954083][T13681] apply_vma_lock_flags+0x23d/0x350 [ 762.959352][T13681] ? mlock_fixup+0x810/0x810 22:41:19 executing program 3: add_key$keyring(&(0x7f0000000100), 0x0, 0x7fffffffefff, 0x2, 0x0) [ 762.964023][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 762.969976][T13681] do_mlock+0x25a/0x6d0 [ 762.974185][T13681] ? folio_evictable+0x270/0x270 [ 762.979188][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 762.986719][T13681] __x64_sys_mlock+0x59/0x80 [ 762.986768][T13681] do_syscall_64+0x39/0xb0 [ 762.986806][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 763.001840][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 763.006286][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 763.025950][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 763.034415][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 763.042604][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 763.050621][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 763.058738][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 22:41:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') write$FUSE_LK(r0, 0x0, 0x0) 22:41:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000004000)=[{{&(0x7f0000000c00)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="0000f5"], 0x28}}], 0x1, 0x0) [ 763.067015][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 763.075227][T13681] 22:41:19 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0xb, r1, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0) 22:41:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) [ 763.121687][T13961] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 22:41:19 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@dev, @remote, @dev, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3850008, r1}) [ 763.270354][T13681] index not increased! 20ffd000 <= 20ffd000 [ 763.299704][T13681] BUG at mt_find:6473 (1) [ 763.322757][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 22:41:19 executing program 1: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/206, 0xce}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f00000002c0)=""/72, 0x48}], 0x4, &(0x7f0000000880)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/114, 0x2000024a}, {&(0x7f0000000780)=""/84, 0x54}, {&(0x7f0000000800)=""/61, 0x3d}, {&(0x7f0000000840)=""/44, 0x2c}], 0x6, 0x0) 22:41:19 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x5450, 0x0) 22:41:19 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={0x0, 0x38}}, 0x0) 22:41:19 executing program 3: keyctl$search(0x2, 0x0, 0x0, 0x0, 0x0) 22:41:19 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x24402, 0x0) [ 763.345250][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:19 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000001c0)) 22:41:20 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), 0xffffffffffffffff) 22:41:20 executing program 3: keyctl$search(0x11, 0x0, 0x0, 0x0, 0x0) 22:41:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) [ 763.407790][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000013c0)={0x20, r1, 0xa01, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 22:41:20 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x110) [ 763.517046][T13681] 0-536866815: 0000000000000000 22:41:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x2, 0x0) 22:41:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r0) 22:41:20 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x5460, 0x0) [ 763.553128][T13681] 536866816-536870911: ffff88801cede380 22:41:20 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 22:41:20 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0x4, r1, 0x0, 0x0, 0x0) 22:41:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) [ 763.595807][T13681] 536870912-553631743: ffff88801cede0e0 [ 763.601789][T13681] 553631744-553639935: 0000000000000000 22:41:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private0}, 0x1c) 22:41:20 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) 22:41:20 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x40049409, &(0x7f0000000000)) 22:41:20 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004140)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) 22:41:20 executing program 0: keyctl$search(0x5, 0x0, 0x0, 0x0, 0x0) 22:41:20 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0xf107e226bbfa01eb}, 0x20) [ 763.741080][T13681] 553639936-553635839: ffff8880772027e0 22:41:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x24}}, 0x0) [ 763.834978][T13681] 553635840-553644031: ffff888077202a80 [ 763.840993][T13681] 553644032-553648127: ffff8880266220e0 [ 763.968110][T13681] 553648128-553652223: ffff88801cede000 [ 763.995299][T13681] 553652224-116819886079: 0000000000000000 [ 764.010820][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 764.032487][T13681] 116824080384-93825007087615: 0000000000000000 [ 764.047557][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 764.058108][T13681] 93825007226880-140323535712255: 0000000000000000 [ 764.070265][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 764.078163][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 764.134643][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 764.142691][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 764.150792][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 764.158206][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 764.165738][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 764.178232][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 764.187356][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 764.194512][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 764.202081][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 764.209589][T13681] 140323557900288-140323557904383: 0000000000000000 [ 764.217213][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 764.224420][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 764.232024][T13681] 140323558305792-140323558326271: 0000000000000000 [ 764.239437][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 764.246943][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 764.301336][T13681] 140323570171904-140323571208191: 0000000000000000 [ 764.319512][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 764.334666][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 764.350158][T13681] 140323571343360-140734793707519: 0000000000000000 [ 764.365087][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 764.385102][T13681] 140734793842688-140734795161599: 0000000000000000 [ 764.392122][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 764.404494][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 764.417759][T13681] 140734795186176-18446744073709551615: 0000000000000000 22:41:20 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde79c1eb1c4befa5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:41:20 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) 22:41:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xdeb7}]}]}, 0x38}}, 0x0) 22:41:20 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/pid\x00') 22:41:20 executing program 3: syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 22:41:20 executing program 0: brk(0x20) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000480), 0xffffffffffffffff) lstat(&(0x7f0000000900)='./file0/file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0xe400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) [ 764.434596][T13681] Pass: 11948193 Run:11948288 [ 764.472108][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 764.482076][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 764.482629][T14028] fuse: Bad value for 'fd' [ 764.492145][T13681] Call Trace: [ 764.492162][T13681] [ 764.492173][T13681] dump_stack_lvl+0xd1/0x138 [ 764.492214][T13681] mt_find.cold+0x8b/0x90 [ 764.511817][T13681] ? mas_find+0x1d0/0x1d0 [ 764.516217][T13681] find_vma+0x10c/0x1b0 [ 764.520435][T13681] ? can_vma_merge_before+0x390/0x390 [ 764.525856][T13681] ? walk_page_test+0x78/0x180 [ 764.530673][T13681] walk_page_range+0x2b1/0x4a0 [ 764.535500][T13681] ? __walk_page_range+0x780/0x780 [ 764.540689][T13681] mlock_fixup+0x650/0x810 [ 764.545179][T13681] apply_vma_lock_flags+0x23d/0x350 [ 764.550446][T13681] ? mlock_fixup+0x810/0x810 [ 764.555110][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 764.561063][T13681] do_mlock+0x25a/0x6d0 [ 764.565278][T13681] ? folio_evictable+0x270/0x270 [ 764.570308][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 764.576255][T13681] __x64_sys_mlock+0x59/0x80 [ 764.580902][T13681] do_syscall_64+0x39/0xb0 [ 764.585374][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 764.591315][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 764.595772][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 22:41:21 executing program 2: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000006500)='./binderfs2/binder0\x00') 22:41:21 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f00000012c0), 0x434002, 0x0) 22:41:21 executing program 5: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 22:41:21 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5452, &(0x7f0000000200)={'syztnl0\x00', 0x0}) [ 764.615433][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 764.623893][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 764.631903][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 764.639903][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 764.647905][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.655907][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 764.663931][T13681] 22:41:21 executing program 5: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x110) 22:41:21 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) [ 764.695114][T13681] index not increased! 20ffd000 <= 20ffd000 [ 764.701077][T13681] BUG at mt_find:6473 (1) 22:41:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) 22:41:21 executing program 2: sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) [ 764.768117][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:21 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004140)={0xa0, 0xfffffffffffffffe, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) 22:41:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000140), 0x4) 22:41:21 executing program 3: syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 764.816593][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:21 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@dev}, 0x14) 22:41:21 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@rthdr_2292={{0x18}}], 0x18}, 0x0) [ 765.099638][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 765.152656][T13681] 0-536866815: 0000000000000000 [ 765.158759][T13681] 536866816-536870911: ffff88801cede380 [ 765.164799][T13681] 536870912-553631743: ffff88801cede0e0 [ 765.171333][T13681] 553631744-553639935: 0000000000000000 [ 765.177760][T13681] 553639936-553635839: ffff8880772027e0 [ 765.183782][T13681] 553635840-553644031: ffff888077202a80 [ 765.201002][T13681] 553644032-553648127: ffff8880266220e0 [ 765.208728][T13681] 553648128-553652223: ffff88801cede000 [ 765.219866][T13681] 553652224-116819886079: 0000000000000000 [ 765.227125][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 765.233684][T13681] 116824080384-93825007087615: 0000000000000000 [ 765.240896][T13681] 93825007087616-93825007226879: ffff8880208b22a0 22:41:21 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) 22:41:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x7, 0x0, &(0x7f0000001d00)) 22:41:21 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) 22:41:21 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0xf, r1, 0x0, 0x0, 0x0) 22:41:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}}, 0x0) 22:41:21 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000480), 0xffffffffffffffff) [ 765.252705][T13681] 93825007226880-140323535712255: 0000000000000000 [ 765.262907][T13681] 140323535712256-140323535716351: ffff8880208b20e0 22:41:21 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x5452, 0x0) 22:41:21 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004140)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) write$FUSE_POLL(r0, &(0x7f0000000340)={0x18, 0x0, r1}, 0x18) 22:41:21 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0xf, r1, 0x0, 0x0, 0x0) 22:41:21 executing program 5: keyctl$search(0x13, 0x0, 0x0, 0x0, 0x0) [ 765.337049][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:41:21 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) 22:41:21 executing program 4: getrandom(&(0x7f0000000180)=""/240, 0xf0, 0x0) [ 765.565375][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 765.585527][T13681] 140323544104960-140323546202111: ffff8880208b27e0 22:41:22 executing program 0: r0 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 22:41:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 22:41:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0xf, r1, 0x0, 0x0, 0x0) 22:41:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x0, 0x0, 0x1000, &(0x7f0000ff0000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="d3ba060066b9800000c00f326635000400000f30ba6100ec440f20c0663508000000440f22c0b800008ed0550f3018f7bad004b8c3aeef66b9400600000f32"}], 0x1, 0x20, 0x0, 0xfffffffffffffe90) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:41:22 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20442, 0x0) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x8001}}}, 0x60) 22:41:22 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000008840), 0x2) [ 765.610632][T13681] 140323546202112-140323548299263: ffff8880208b2700 22:41:22 executing program 2: sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0) 22:41:22 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0xa, r1, &(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0) 22:41:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0xf, r1, 0x0, 0x0, 0x0) 22:41:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 765.656556][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 765.678748][T13681] 140323550396416-140323552493567: ffff8880208b21c0 22:41:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x20}}, 0x0) [ 765.732051][T13681] 140323552493568-140323556687871: ffff8880208b2380 22:41:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) [ 765.800250][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 765.882248][T13681] 140323556835328-140323557564415: ffff8880293ab000 22:41:22 executing program 0: syz_mount_image$fuse(&(0x7f00000065c0), &(0x7f0000006600)='./file0\x00', 0x0, &(0x7f0000006680)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) 22:41:22 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004140)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) 22:41:22 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) 22:41:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}}, 0x0) 22:41:22 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f00000000c0)) 22:41:22 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0x3, r1, 0x0, 0x0, 0x0) [ 765.938844][T13681] 140323557564416-140323557900287: ffff888078bac380 22:41:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) 22:41:22 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') 22:41:22 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0xb1045557c3ee38fe, &(0x7f0000000200), 0x0, 0x0, 0x0) [ 765.995080][T13681] 140323557900288-140323557904383: 0000000000000000 [ 766.028627][T13681] 140323557904384-140323558268927: ffff888078bac0e0 22:41:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000040)=0xc) 22:41:22 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 22:41:22 executing program 5: keyctl$search(0x4, 0x0, 0x0, 0x0, 0x0) [ 766.096249][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 766.098569][T14122] fuse: Bad value for 'fd' [ 766.167624][T13681] 140323558305792-140323558326271: 0000000000000000 [ 766.203005][T13681] 140323558326272-140323570171903: ffff888078bac700 22:41:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 22:41:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) 22:41:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 22:41:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000980), 0x10) 22:41:22 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000180)=0x8, 0x4) 22:41:22 executing program 5: keyctl$search(0xc, 0x0, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0) [ 766.296342][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:41:22 executing program 4: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/234, 0xea}], 0x1, &(0x7f0000000880)=[{&(0x7f0000000140)=""/56, 0x38}, {0x0}], 0x2, 0x0) 22:41:22 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x2, &(0x7f0000000000)) 22:41:22 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 22:41:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, 0x1c) 22:41:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000940)={&(0x7f0000000380), 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xdeb7}]}]}, 0x38}}, 0x0) 22:41:23 executing program 4: socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001e40), 0xffffffffffffffff) [ 766.645080][T13681] 140323570171904-140323571208191: 0000000000000000 [ 766.666143][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 22:41:23 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000001680), 0xffffffffffffffff) 22:41:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000013c0)={0x14, r1, 0xa01}, 0x14}}, 0x0) 22:41:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0x11, r1, 0x0, 0x0, 0x0) 22:41:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 22:41:23 executing program 3: syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 22:41:23 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3080000, &(0x7f0000000240), 0x0, 0x0, 0x0) 22:41:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000040)) [ 766.695109][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 766.702127][T13681] 140323571343360-140734793707519: 0000000000000000 22:41:23 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, &(0x7f0000000040)) 22:41:23 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc0189436, 0x0) 22:41:23 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 22:41:23 executing program 5: shmget(0x2, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 22:41:23 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x4020940d, &(0x7f0000000000)=r0) [ 766.855039][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 766.887997][T13681] 140734793842688-140734795161599: 0000000000000000 [ 766.956844][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 766.994805][T13681] 140734795177984-140734795186175: ffff888078bacee0 22:41:23 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x6, r1, 0x0, 0x0, 0x0) 22:41:23 executing program 1: ptrace$getregs(0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000000)=""/10) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) syz_clone(0xe0883080, &(0x7f0000002d00)="485c39c2edfe9b8ee75f86c7fd52df", 0xf, &(0x7f0000002dc0), 0x0, 0x0) 22:41:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x5421, &(0x7f0000000000)) 22:41:23 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) add_key(&(0x7f0000000100)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="d6", 0x1, r0) keyctl$search(0x15, r1, 0x0, 0x0, 0x0) 22:41:23 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x110) openat$cuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000019c0), 0x50000, 0x0) 22:41:23 executing program 2: brk(0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000480), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x80) lstat(&(0x7f0000000900)='./file0/file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0xe400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) [ 767.005044][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 767.012487][T13681] Pass: 11980724 Run:11980820 22:41:23 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000980)=""/136) 22:41:23 executing program 5: add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000000)="1e", 0x1, 0xfffffffffffffffb) 22:41:23 executing program 4: syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000480), 0xffffffffffffffff) 22:41:23 executing program 3: syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) [ 767.181374][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 767.191618][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 767.201716][T13681] Call Trace: [ 767.205015][T13681] [ 767.207959][T13681] dump_stack_lvl+0xd1/0x138 [ 767.212576][T13681] mt_find.cold+0x8b/0x90 [ 767.217025][T13681] ? mas_find+0x1d0/0x1d0 [ 767.222111][T13681] find_vma+0x10c/0x1b0 [ 767.226585][T13681] ? can_vma_merge_before+0x390/0x390 [ 767.232099][T13681] ? walk_page_test+0x78/0x180 [ 767.236947][T13681] walk_page_range+0x2b1/0x4a0 [ 767.241810][T13681] ? __walk_page_range+0x780/0x780 [ 767.247931][T13681] mlock_fixup+0x650/0x810 [ 767.253057][T13681] apply_vma_lock_flags+0x23d/0x350 [ 767.259084][T13681] ? mlock_fixup+0x810/0x810 [ 767.264015][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 767.269967][T13681] do_mlock+0x25a/0x6d0 [ 767.274174][T13681] ? folio_evictable+0x270/0x270 [ 767.279181][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 767.285209][T13681] __x64_sys_mlock+0x59/0x80 [ 767.289840][T13681] do_syscall_64+0x39/0xb0 [ 767.294292][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 767.300205][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 767.304628][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 22:41:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) [ 767.324527][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 767.332983][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 767.340979][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 767.349057][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 767.357048][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.365026][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 767.373032][T13681] 22:41:23 executing program 5: socketpair(0x28, 0x0, 0x0, &(0x7f0000000100)) 22:41:23 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xe675fd9ac2cca034}}, 0x0, 0x0, 0x0) [ 767.435488][T13681] index not increased! 20ffd000 <= 20ffd000 [ 767.452024][T13681] BUG at mt_find:6473 (1) [ 767.544279][T14214] fuse: Bad value for 'fd' 22:41:24 executing program 1: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0xfffffffffffffe80) 22:41:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)="d8", 0x1, r0) add_key$keyring(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x6, r1, 0x0, 0x0, 0x0) 22:41:24 executing program 2: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/206, 0xce}, {&(0x7f00000001c0)=""/234, 0xea}], 0x2, &(0x7f0000000880)=[{&(0x7f0000000140)=""/56, 0x38}, {0x0}], 0x2, 0x0) 22:41:24 executing program 0: socket(0x26, 0x5, 0x9500075) 22:41:24 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x438100, 0x0) 22:41:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_GET(r0, 0x0, 0x0) 22:41:24 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="26000000030000000000000004"], 0x26) 22:41:24 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x9d, 0x0, 0x800) 22:41:24 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local}, 0x17) 22:41:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14}, 0x14}}, 0x0) 22:41:24 executing program 2: keyctl$search(0x1d, 0x0, 0x0, 0x0, 0x0) 22:41:24 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x9d, 0x0, 0x800) 22:41:24 executing program 1: process_vm_readv(0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/206, 0xce}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f00000002c0)=""/72, 0x48}], 0x4, &(0x7f0000000880)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000600)=""/216, 0x7fffefc8}, {&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000000780)=""/84, 0x54}, {&(0x7f0000000800)=""/61, 0x3d}, {&(0x7f0000000840)=""/44, 0x2c}], 0x6, 0x0) 22:41:24 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1c", 0x1, r0) keyctl$search(0x6, r1, 0x0, 0x0, 0x0) 22:41:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000004000)=[{{&(0x7f0000000c00)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f0000001fc0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002040)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}}}], 0x28}}], 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@private2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x27, r3}) add_key$keyring(&(0x7f0000000100), 0x0, 0x7fffffffefff, 0x2, 0x0) 22:41:24 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x9d, 0x0, 0x800) 22:41:24 executing program 5: keyctl$search(0x2, 0x0, 0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0) 22:41:24 executing program 2: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000980)=""/136) 22:41:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r0) 22:41:24 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x9d, 0x0, 0x800) 22:41:24 executing program 4: memfd_create(&(0x7f0000000000)='\\-\x17\',t\x00', 0x3) 22:41:24 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000800) 22:41:24 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'gre0\x00', {0x2, 0x0, @empty}}) 22:41:24 executing program 2: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/234, 0xea}], 0x3, &(0x7f0000000880)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000600)=""/216, 0xd8}, {0x0}], 0x3, 0x0) 22:41:24 executing program 3: add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 22:41:24 executing program 4: keyctl$search(0x8, 0x0, 0x0, 0x0, 0x0) 22:41:24 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x5451, 0x0) 22:41:24 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x2c) 22:41:24 executing program 2: mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) 22:41:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, 0xffffffffffffffff, 0x0) 22:41:24 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 22:41:24 executing program 4: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 22:41:24 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000240)="1c", 0x1, r1) 22:41:24 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc01047d0, 0x0) 22:41:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) [ 768.196255][T14271] 9pnet_fd: Insufficient options for proto=fd 22:41:24 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) userfaultfd(0x0) 22:41:24 executing program 1: keyctl$search(0x9, 0x0, 0x0, 0x0, 0x0) 22:41:24 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) [ 768.255876][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1, 0x5}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)='\f', 0x1}, {&(0x7f0000000100)='S', 0x1}], 0x2}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x22}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@hopopts_2292={{0x18}}, @hoplimit={{0x14}}, @rthdr_2292={{0x18}}], 0x48}}], 0x2, 0x0) [ 768.315454][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, 0x0, 0x0) 22:41:25 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 22:41:25 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001680), 0xffffffffffffffff) 22:41:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r0) 22:41:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000240)='\x00~', 0x2, r0) add_key(&(0x7f0000000100)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="d6", 0x1, r0) 22:41:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, 0x0, 0x0, 0x40, &(0x7f0000007280)={0x77359400}) 22:41:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 22:41:25 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 22:41:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 22:41:25 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) accept4$packet(r0, 0x0, 0x0, 0x0) [ 768.533144][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:41:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x100, 0x0, 0x0, &(0x7f0000001000)) [ 768.738951][T13681] 0-536866815: 0000000000000000 [ 768.746306][T13681] 536866816-536870911: ffff88801cede380 [ 768.752292][T13681] 536870912-553631743: ffff88801cede0e0 [ 768.785126][T13681] 553631744-553639935: 0000000000000000 [ 768.815598][T13681] 553639936-553635839: ffff8880772027e0 [ 768.821771][T13681] 553635840-553644031: ffff888077202a80 22:41:25 executing program 0: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 22:41:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) 22:41:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 22:41:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) 22:41:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 22:41:25 executing program 4: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) 22:41:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) [ 768.845102][T13681] 553644032-553648127: ffff8880266220e0 22:41:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 22:41:25 executing program 5: socketpair(0x0, 0xb39f8aa16cd92bd8, 0x0, 0x0) 22:41:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 22:41:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22:41:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=0xffffffffffffffd4) [ 768.940914][T13681] 553648128-553652223: ffff88801cede000 [ 768.975850][T13681] 553652224-116819886079: 0000000000000000 22:41:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10) 22:41:25 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) 22:41:25 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) 22:41:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 769.041963][T13681] 116819886080-116824080383: ffff88801cede2a0 22:41:25 executing program 5: getresgid(&(0x7f0000002ec0), &(0x7f0000002f00), &(0x7f0000002f40)) 22:41:25 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 22:41:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000600)) [ 769.078489][T13681] 116824080384-93825007087615: 0000000000000000 22:41:25 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:41:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 22:41:25 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) [ 769.178432][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 769.214380][T13681] 93825007226880-140323535712255: 0000000000000000 [ 769.295665][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 769.325104][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 769.413066][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 769.435093][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 769.442569][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 769.475149][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 769.482299][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 769.505007][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 769.512045][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 769.525031][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 769.534491][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 769.542469][T13681] 140323557900288-140323557904383: 0000000000000000 [ 769.550395][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 769.557978][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 769.566014][T13681] 140323558305792-140323558326271: 0000000000000000 [ 769.573582][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 769.581253][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 769.637644][T13681] 140323570171904-140323571208191: 0000000000000000 [ 769.645438][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 769.652649][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 769.664198][T13681] 140323571343360-140734793707519: 0000000000000000 22:41:26 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000007a40), 0x2, 0x0) 22:41:26 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000003b80)='./file0/file0\x00', 0x0, 0x0) 22:41:26 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000002ac0)=""/42) 22:41:26 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000001680), 0xa000, 0x0) 22:41:26 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000009cc0)='./file0\x00', 0x8000, 0x0) 22:41:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) [ 769.671459][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 769.693681][T13681] 140734793842688-140734795161599: 0000000000000000 [ 769.703098][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 769.710442][T13681] 140734795177984-140734795186175: ffff888078bacee0 22:41:26 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x13, 0x0, &(0x7f0000000040)) [ 769.737015][T13681] 140734795186176-18446744073709551615: 0000000000000000 22:41:26 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$packet(r0, 0x0, 0x0) [ 769.815267][T13681] Pass: 12027358 Run:12027455 [ 769.820023][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 769.829968][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 769.840441][T13681] Call Trace: [ 769.843757][T13681] [ 769.846750][T13681] dump_stack_lvl+0xd1/0x138 [ 769.851403][T13681] mt_find.cold+0x8b/0x90 [ 769.855797][T13681] ? mas_find+0x1d0/0x1d0 [ 769.860197][T13681] find_vma+0x10c/0x1b0 22:41:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x71, 0x0, &(0x7f0000000080)=0x2000) 22:41:26 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000140), 0x4) [ 769.864410][T13681] ? can_vma_merge_before+0x390/0x390 [ 769.869848][T13681] ? walk_page_test+0x78/0x180 [ 769.874672][T13681] walk_page_range+0x2b1/0x4a0 [ 769.879504][T13681] ? __walk_page_range+0x780/0x780 [ 769.884720][T13681] mlock_fixup+0x650/0x810 [ 769.889237][T13681] apply_vma_lock_flags+0x23d/0x350 [ 769.894506][T13681] ? mlock_fixup+0x810/0x810 [ 769.899291][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 769.905254][T13681] do_mlock+0x25a/0x6d0 [ 769.909486][T13681] ? folio_evictable+0x270/0x270 22:41:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) [ 769.914517][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 769.920486][T13681] __x64_sys_mlock+0x59/0x80 [ 769.925231][T13681] do_syscall_64+0x39/0xb0 [ 769.929716][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 769.935665][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 769.940171][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 22:41:26 executing program 3: timer_create(0x6, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) [ 769.960003][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 769.968461][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 769.976480][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 769.984509][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 769.992533][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.000545][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 770.008580][T13681] 22:41:26 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000140)=0xa, 0x4) 22:41:26 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x49, 0x0, &(0x7f0000000040)) 22:41:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x7, 0x0, &(0x7f0000000080)) 22:41:26 executing program 2: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a2, &(0x7f0000000440)={'gre0\x00', 0x0}) [ 770.057298][T13681] index not increased! 20ffd000 <= 20ffd000 [ 770.090711][T13681] BUG at mt_find:6473 (1) 22:41:26 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000140), 0x4) 22:41:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) [ 770.138220][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x75, 0x0, &(0x7f0000000080)=0x2000) 22:41:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000640)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 22:41:26 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) [ 770.236615][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:26 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000140), 0x4) 22:41:26 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000140), 0x4) 22:41:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c08000030000100000000000002a0000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000003800000000000002a00400000000000000ff0700000400000000000000ff0700000000000000000000000000000404020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040403"], 0x88c}}, 0x0) 22:41:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x12, 0x0, &(0x7f0000000080)=0x2000) 22:41:26 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0xa, 0x0, &(0x7f0000000040)) 22:41:26 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_timeval(r1, 0x1, 0x1, 0x0, &(0x7f0000000040)=0xffd2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', {0x3}, 0x5}) [ 770.425577][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:27 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @local, @mcast1}) 22:41:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001480)={'\x00', 0x0}) [ 770.457501][T14411] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 22:41:27 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x48, 0x0, &(0x7f0000000040)) [ 770.592643][T13681] 0-536866815: 0000000000000000 [ 770.598424][T14411] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 22:41:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x19, 0x0, &(0x7f0000000080)) 22:41:27 executing program 4: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8930, &(0x7f0000000440)={'gre0\x00', 0x0}) 22:41:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x16, 0x0, &(0x7f0000000080)) [ 770.645304][T13681] 536866816-536870911: ffff88801cede380 22:41:27 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, &(0x7f0000000040)) 22:41:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000640)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) [ 770.717302][T13681] 536870912-553631743: ffff88801cede0e0 [ 770.736453][T13681] 553631744-553639935: 0000000000000000 22:41:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000fc0)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'vlan0\x00', {}, 0x40}) getsockopt$inet_pktinfo(r0, 0x4, 0x8, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'pim6reg\x00', {0x2, 0x0, @private}}) 22:41:27 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0xd, 0x0, &(0x7f0000000040)) 22:41:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x7d, 0x0, &(0x7f0000000080)=0x2000) [ 770.781609][T13681] 553639936-553635839: ffff8880772027e0 22:41:27 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000140), 0x4) [ 770.853437][T13681] 553635840-553644031: ffff888077202a80 22:41:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000640)=[@in={0x2, 0x0, @private}], 0x10) [ 770.901218][T13681] 553644032-553648127: ffff8880266220e0 [ 770.943414][T13681] 553648128-553652223: ffff88801cede000 [ 770.952146][T13681] 553652224-116819886079: 0000000000000000 [ 770.959132][T13681] 116819886080-116824080383: ffff88801cede2a0 22:41:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x200, @private2}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000000c0)="6e9a76c070479fbecc2ceb9a1282f20eaa7834be695a3225f0422a4da74f20ff1925ae06baadacc8522aa7c7f1c76820938ec0917cb6751eb11582c61c875900b53d0c70c323dfafe0e4323d27333a61ce6f068eab85daf7e0b6dce49cb3e282a6cb6c1aec43bc9e7bd87146785f844db1befbd1600da77d9f82df96b615454feaae8cf3b06757b6089bf6c3a48328e342a093017b06dd523c415ca35cce191960aaf7beae3352891ee90d907e4efb9b72f9b363c355b1f1b22cf4bc6cdb1e664eacae0112d4e2a51fe6d04212cc6ea42eb1", 0xd2}, {&(0x7f00000001c0)="d43cbe5b19f95da6f53424232ae7c6c3fd90de6f5ec61a3452ba6d6c3f2fc2765724cbad5badf88324f1bbc452ff50dc4d42424a0342c424e8d91639420e650af45e235dadb81d21b334ef20e2fa0bb6fd9066f32633870dbc3f5861d194818622b3a2c23dc60fddf78cd00b679f6b8a3373df0c95543e751b1dd9822f08fb2cfaab022260", 0x85}, {&(0x7f0000000280)="d26e11bd8cf47291906e9cd0f441dfb3874d9db2c405cd466d8e6b234c87a614cfc94c82e3972cb60c181bb9e0ac74ca2a991fb76b3104c993a638f327af9137e7fadb64b2e449254345275a07aae651ecbad062c91d5b0864368aa9855d678d2ac8c2ec3594d5adcf6868e51b9467f439ea19976a7506841ae6d2e621b5dfa7d1cc514eb5ea563390de31e4dbac4c9bbfa7a5a0a986d96635bf328513615fd921f0c3df30590d80a6ce7169d3f3095ccaab674d324ce5805ca5a289ec293376f0aaa93c97b4372dcd3cab3cb11aea3ca335a8bc4dc70239ab534f42d57dfd99781d52ce8da6700e05127b5abfe91c68a3", 0xf1}, {&(0x7f0000000380)="2a4fed846f5964163abcc30c18ee8b73f8f07843ccb9782e0dfb46bae4e11889f14b5ecdc4b65fdffa42e82fd38667c360cac07bf236e195ca14796d7cf05dda427514e32c2bca303ba6c9fc232b", 0x4e}, {&(0x7f0000000400)="dbf527a942871d2565d6c57248c84a6a4090cf003b25de37eb469a336e619bcee40a9fc502b2621bccd5c612777a81e806f4e3544d07ebc4b24a7c3a89d5c7245e256edcd1ef6ddce55962cfb50ff1e1b7655d10e21a73417f091bb5d807509868350db8bedd1c93a4e0add5bc63bc92941d633198819d5e905fe57a30f913fc345fba6201c588592f3c00e595d85a8c863a0c6a8c97c5360fc0df71c758d3a4138bffca8ac3ae08f0b15054e68991fe501cc832d1bfd608b76c415a5fe6c34e7b2b3b", 0xc3}, {&(0x7f0000000500)="6758fee1ace62e27cd815dfa6ca1ef1725e72b1cfaeed302fb83fc015c5e2ba986128250a46e2ce73857e251e22e94f81f5cdaf171f94dfbc47aad0048560c375f857a1be419fcad7e65bf08f0d2ab65e7515d56a9338306553fddd2203e9c0b1a20169fcde8d12025a19b2a772d3126ffeac1e0a5905ff95e1914bd01fb7006e898397c7516594140f92827b91515c4161d6e1d415cab1ac1d52bdca8a2383d211d28d0", 0xa4}, {&(0x7f00000005c0)="3ad06ef470994342686379fa320a7697a999516841edcb997d9c32c58499d093c8638803b979a034e8e73e39d60ecc36e38e44e3bacaea9c71737283ab7f861667025a7e7ac1bffd10d61068c9d24017c5b9eb0bd0c396a43b93c9121437edc1ad181034fb88e1693b90908c75d2578f6abe82b98bc8a94d2cc93fd168c02f97904fc38636", 0x85}, {&(0x7f0000000680)="6e7f03101bc9c1c0fb75dec7f056f4aaefb708784395936a9c2613683270a1ba22721c498634d3a570a66ede03d4aa4bda72e398183a8a4c0cf8a09eaa96d79d7b055d084573544f9581f061161dae", 0x4f}], 0x8}, 0x0) 22:41:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8927, &(0x7f00000005c0)={'macvlan0\x00', 0x0}) 22:41:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000640)=[@in={0x2, 0x0, @private=0xa010102}, @in6={0xa, 0x0, 0x0, @local}], 0x2c) 22:41:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0xb, 0x0, &(0x7f0000000080)=0x2000) 22:41:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x3, 0x0, &(0x7f0000000080)) [ 771.038052][T13681] 116824080384-93825007087615: 0000000000000000 22:41:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 22:41:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_team\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d}}) [ 771.157701][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 771.181625][T13681] 93825007226880-140323535712255: 0000000000000000 [ 771.220075][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 771.307795][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:41:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private2}}) 22:41:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 22:41:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000000)={0xa, 0x0, 0x2000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="b3", 0x1}], 0x1}, 0x0) 22:41:27 executing program 2: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8994, &(0x7f0000000440)={'gre0\x00', 0x0}) 22:41:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8992, &(0x7f0000000440)={'gre0\x00', 0x0}) [ 771.779795][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 771.796611][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 771.806601][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 771.813720][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 771.834177][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 771.841965][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 771.851227][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 771.859474][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 771.867299][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 771.874661][T13681] 140323557900288-140323557904383: 0000000000000000 [ 771.884112][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 771.894482][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 771.902052][T13681] 140323558305792-140323558326271: 0000000000000000 [ 771.909909][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 771.917415][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:41:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000640)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:41:28 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffffffff, 0x4) 22:41:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0xe, 0x0, &(0x7f0000000080)=0x2000) 22:41:28 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 22:41:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000006c0)=ANY=[@ANYBLOB='7&'], 0x18) 22:41:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000000c0)="b5", 0x1}], 0x1}}], 0x1, 0x0) [ 771.979687][T13681] 140323570171904-140323571208191: 0000000000000000 22:41:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x20044010) 22:41:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x162) [ 772.029940][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 772.067088][T13681] 140323571212288-140323571343359: ffff888078bacb60 22:41:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x18, 0x0, 0x0) [ 772.118965][T13681] 140323571343360-140734793707519: 0000000000000000 [ 772.185065][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 772.249851][T13681] 140734793842688-140734795161599: 0000000000000000 [ 772.275039][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 772.282417][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 772.305648][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 772.313850][T13681] Pass: 12117696 Run:12117794 [ 772.319491][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 772.329565][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 772.339667][T13681] Call Trace: [ 772.342967][T13681] [ 772.345947][T13681] dump_stack_lvl+0xd1/0x138 [ 772.350600][T13681] mt_find.cold+0x8b/0x90 [ 772.354963][T13681] ? mas_find+0x1d0/0x1d0 [ 772.359351][T13681] find_vma+0x10c/0x1b0 [ 772.363597][T13681] ? can_vma_merge_before+0x390/0x390 [ 772.369039][T13681] ? walk_page_test+0x78/0x180 [ 772.373887][T13681] walk_page_range+0x2b1/0x4a0 [ 772.378738][T13681] ? __walk_page_range+0x780/0x780 [ 772.383917][T13681] mlock_fixup+0x650/0x810 [ 772.388424][T13681] apply_vma_lock_flags+0x23d/0x350 [ 772.393933][T13681] ? mlock_fixup+0x810/0x810 [ 772.400268][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 772.406214][T13681] do_mlock+0x25a/0x6d0 [ 772.410783][T13681] ? folio_evictable+0x270/0x270 [ 772.415790][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 772.421804][T13681] __x64_sys_mlock+0x59/0x80 [ 772.426529][T13681] do_syscall_64+0x39/0xb0 [ 772.431007][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 772.436968][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 772.441441][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 772.461185][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 772.469682][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 772.477696][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 772.485927][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 772.493965][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.502241][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 772.511613][T13681] [ 772.529289][T13681] index not increased! 20ffd000 <= 20ffd000 [ 772.535435][T13681] BUG at mt_find:6473 (1) [ 772.539788][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:29 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x28, 0x0, &(0x7f0000000040)) 22:41:29 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0xc, 0x0, &(0x7f0000000040)) 22:41:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x2000) 22:41:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='(', 0x1}], 0x1}}], 0x1, 0x0) 22:41:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, 0x0, 0x0, &(0x7f0000003d00)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) 22:41:29 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001600)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@loopback, 0x0, r2}) 22:41:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xb, 0x0, &(0x7f0000000080)) [ 772.548424][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) 22:41:29 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 22:41:29 executing program 2: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f0000000440)={'gre0\x00', 0x0}) 22:41:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0x3}, 0x1c, 0x0}, 0x0) 22:41:29 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000140)=0xffffffff, 0x4) [ 772.656384][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x7b, 0x0, &(0x7f0000000080)=0x2000) 22:41:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @loopback}}}}) 22:41:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newqdisc={0x150, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x150}, 0x1, 0x8100000000000000}, 0x0) 22:41:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x200, @private2}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000000c0)="6e9a76c070479fbecc2ceb9a1282f20eaa7834be695a3225f0422a4da74f20ff1925ae06baadacc8522aa7c7f1c76820938ec0917cb6751eb11582c61c875900b53d0c70c323dfafe0e4323d27333a61ce6f068eab85daf7e0b6dce49cb3e282a6cb6c1aec43bc9e7bd87146785f844db1befbd1600da77d9f82df96b615454feaae8cf3b06757b6089bf6c3a48328e342a093017b06dd523c415ca35cce191960aaf7beae3352891ee90d907e4efb9b72f9b363c355b1f1b22cf4bc6cdb1e664eacae0112d4e2a51fe6d04212cc6ea42eb1", 0xd2}, {&(0x7f00000001c0)="d43cbe5b19f95da6f53424232ae7c6c3fd90de6f5ec61a3452ba6d6c3f2fc2765724cbad5badf88324f1bbc452ff50dc4d42424a0342c424e8d91639420e650af45e235dadb81d21b334ef20e2fa0bb6fd9066f32633870dbc3f5861d194818622b3a2c23dc60fddf78cd00b679f6b8a3373df0c95543e751b1dd9822f08fb2cfaab022260", 0x85}, {&(0x7f0000000280)="d26e11bd8cf47291906e9cd0f441dfb3874d9db2c405cd466d8e6b234c87a614cfc94c82e3972cb60c181bb9e0ac74ca2a991fb76b3104c993a638f327af9137e7fadb64b2e449254345275a07aae651ecbad062c91d5b0864368aa9855d678d2ac8c2ec3594d5adcf6868e51b9467f439ea19976a7506841ae6d2e621b5dfa7d1cc514eb5ea563390de31e4dbac4c9bbfa7a5a0a986d96635bf328513615fd921f0c3df30590d80a6ce7169d3f3095ccaab674d324ce5805ca5a289ec293376f0aaa93c97b4372dcd3cab3cb11aea3ca335a8bc4dc70239ab534f42d57dfd99781d52ce8da6700e05127b5abfe91c68a3", 0xf1}, {&(0x7f0000000380)="2a4fed846f5964163abcc30c18ee8b73f8f07843ccb9782e0dfb46bae4e11889f14b5ecdc4b65fdffa42e82fd38667c360cac07bf236e195ca14796d7cf05dda427514e32c2bca303ba6c9fc232b", 0x4e}, {&(0x7f0000000400)="dbf527a942871d2565d6c57248c84a6a4090cf003b25de37eb469a336e619bcee40a9fc502b2621bccd5c612777a81e8", 0x30}, {&(0x7f0000000500)}, {0x0}], 0x7, &(0x7f00000009c0)=[@rthdr={{0x28, 0x29, 0x39, {0xa0, 0x2, 0x7, 0x6, 0x0, [@private0]}}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x32, 0x10, '\x00', [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @ra={0x5, 0x2, 0x98f}, @calipso={0x7, 0x48, {0x0, 0x10, 0x7, 0xcf5, [0x2, 0x1000, 0x7abd, 0x0, 0x4, 0x3, 0x7ff, 0x40]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0xff00, [0x6, 0x100000000, 0xbd]}}, @ra={0x5, 0x2, 0x3ff}]}}}], 0xc8}, 0x4000) 22:41:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x10, 0x0, &(0x7f0000000080)=0x2000) 22:41:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:41:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 22:41:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 22:41:29 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000140), 0x4) 22:41:29 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x3, 0x4) 22:41:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x10, 0x0, &(0x7f0000000080)) 22:41:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x83, 0x0, &(0x7f0000000080)=0x2000) 22:41:29 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) [ 773.120917][T13681] 0-536866815: 0000000000000000 [ 773.179647][T13681] 536866816-536870911: ffff88801cede380 22:41:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000640)=[@in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x0, 0x0, @local}], 0x2c) 22:41:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000003c80)=[{&(0x7f0000000080)="33babea271718ca84e07a690118af1e5546a67f2870a0794001a10cb79af0911bc3e74d9619cb3659ba9a2", 0x2b}, {&(0x7f0000003c40)="c9b581693d07b401b968ba2c0c3e87c90efef8bf0e98deeb28067304ad5ef83aba1ee0a7d8a01e126dfc64fda3", 0x2d}], 0x2}}], 0x1, 0x0) [ 773.245475][T13681] 536870912-553631743: ffff88801cede0e0 [ 773.261383][T13681] 553631744-553639935: 0000000000000000 [ 773.268762][T13681] 553639936-553635839: ffff8880772027e0 [ 773.289887][T13681] 553635840-553644031: ffff888077202a80 [ 773.315774][T13681] 553644032-553648127: ffff8880266220e0 [ 773.324315][T13681] 553648128-553652223: ffff88801cede000 [ 773.337576][T13681] 553652224-116819886079: 0000000000000000 [ 773.351084][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 773.366857][T13681] 116824080384-93825007087615: 0000000000000000 [ 773.381838][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 773.410482][T13681] 93825007226880-140323535712255: 0000000000000000 [ 773.425908][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 773.442340][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 773.531387][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 773.548587][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 773.564121][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 773.579359][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 773.596604][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 773.611987][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 773.625012][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 773.632172][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 773.642475][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 773.652459][T13681] 140323557900288-140323557904383: 0000000000000000 [ 773.667729][T13681] 140323557904384-140323558268927: ffff888078bac0e0 22:41:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x1600bd7e, 0x0, &(0x7f0000000080)) 22:41:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 22:41:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 22:41:30 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000000140), 0x4) 22:41:30 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x3c, 0x0, &(0x7f0000000040)) 22:41:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="a7aa84b2af867be271936ab3e82a905b97fd0b8ed872b9be6372248028e35286", 0x20}], 0x1, 0x0, 0x1180}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x8, 0x0, 0x9effffff}, 0x0) [ 773.682722][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 773.699694][T13681] 140323558305792-140323558326271: 0000000000000000 [ 773.716311][T13681] 140323558326272-140323570171903: ffff888078bac700 22:41:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x6, &(0x7f0000000100)={&(0x7f0000000180)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x50}}, 0x0) 22:41:30 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000000c0)="6e9a76c070479fbecc2ceb9a1282f20eaa7834be695a3225f0422a4da74f20ff1925ae06baadacc8522aa7c7f1c76820938ec0917cb6751eb11582c61c875900b53d0c70c323dfafe0e4323d27333a61ce6f068eab85daf7e0b6dce49cb3e282a6cb6c1aec43bc9e7bd87146785f844db1befbd1600da77d9f82df96b615454feaae8cf3b06757b6089bf6c3a48328e342a093017b06dd523c415ca35cce191960aaf7beae3352891ee90d907e4efb9b72f9b363c355b1f1b22cf4bc6cdb1e664eacae0112d4e2a51fe6d04212cc6ea42eb1", 0xd2}, {&(0x7f00000001c0)="d43cbe5b19f95da6f53424232ae7c6c3fd90de6f5ec61a3452ba6d6c3f2fc2765724cbad5badf88324f1bbc452ff50dc4d42424a0342c424e8d91639420e650af45e235dadb81d21b334ef20e2fa0bb6fd9066f32633870dbc3f5861d194818622b3a2c23dc60fddf78cd00b679f6b8a3373df0c95543e751b1dd9822f08fb2cfaab022260", 0x85}, {&(0x7f0000000280)="d26e11bd8cf47291906e9cd0f441dfb3874d9db2c405cd466d8e6b234c87a614cfc94c82e3972cb60c181bb9e0ac74ca2a991fb76b3104c993a638f327af9137e7fadb64b2e449254345275a07aae651ecbad062c91d5b0864368aa9855d678d2ac8c2ec3594d5adcf6868e51b9467f439ea19976a7506841ae6d2e621b5dfa7d1cc514eb5ea563390de31e4dbac4c9bbfa7a5a0a986d96635bf328513615fd921f0c3df30590d80a6ce7169d3f3095ccaab674d324ce5805ca5a289ec293376f0aaa93c97b4372dcd3cab3cb11aea3ca335a8bc4dc70239ab534f42d57dfd99781d52ce8da6700e05127b5abfe91c68", 0xf0}, {&(0x7f0000000380)="2a4fed846f5964163abcc30c18ee8b73f8f07843ccb9782e0dfb46bae4e11889f14b5ecdc4b65fdffa42e82fd38667c360cac07bf236e195ca14796d7cf05dda427514e32c2bca303ba6c9fc232b", 0x4e}, {&(0x7f0000000400)="dbf527a942871d2565d6c57248c84a6a4090cf003b25de37eb469a336e619bcee40a9fc502b2621bccd5c612777a81e806f4e3544d07ebc4b24a7c3a89d5c7245e256edcd1ef6ddce55962cfb50ff1e1b7655d10e21a73417f091bb5d807509868350db8bedd1c93a4e0add5bc63bc92941d633198819d5e905fe57a30f913fc345fba6201c588592f3c00e595d85a8c863a0c6a8c97c5360fc0df71c758d3a4138bffca8ac3ae08f0b15054e68991fe501cc832d1bfd608b76c415a5fe6c34e7b2b3b", 0xc3}, {&(0x7f0000000500)="6758fee1ace62e27cd815dfa6ca1ef1725e72b1cfaeed302fb83fc015c5e2ba986128250a46e2ce73857e251e22e94f81f5cdaf171f94dfbc47aad0048560c375f857a1be419fcad7e65bf08f0d2ab65e7515d56a9338306553fddd2203e9c0b1a20169fcde8d12025a19b2a772d3126ffeac1e0a5905ff95e1914bd01fb7006e898397c7516594140f92827b91515c4161d6e1d415cab1ac1d52bdca8a2383d211d28d0", 0xa4}, {&(0x7f00000005c0)="3ad06ef470994342686379fa320a7697a999516841edcb997d9c32c58499d093c8638803b979a034e8e73e39d60ecc36e38e44e3bacaea9c71737283ab7f861667025a7e7ac1bffd10d61068c9d24017c5b9eb0bd0c396a43b93c9121437edc1ad181034fb88e1693b90908c75d2578f6abe82b98bc8a94d2cc93fd168c02f97904fc38636", 0x85}, {&(0x7f0000000680)="6e7f03101bc9c1c0fb75dec7f056f4aaefb708784395936a9c2613683270a1ba22721c498634d3a570a66ede03d4aa4bda72e398183a8a4c0cf8a09eaa96d79d7b055d084573544f9581f061161dae", 0x4f}], 0x8}, 0x0) [ 773.755254][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:41:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, &(0x7f0000000080)) 22:41:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x18}}], 0x18}, 0x0) 22:41:30 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x10, 0x0, &(0x7f0000000040)) 22:41:30 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000140), 0x4) 22:41:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 22:41:30 executing program 2: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8993, &(0x7f0000000440)={'gre0\x00', 0x0}) 22:41:30 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x29, 0x0, &(0x7f0000000040)) 22:41:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000080)) 22:41:30 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x12, 0x0, &(0x7f0000000040)) [ 774.055158][T13681] 140323570171904-140323571208191: 0000000000000000 22:41:30 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x3d, 0x0, &(0x7f0000000040)) 22:41:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xc}, 0x48) [ 774.116274][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 774.149098][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 774.200146][T13681] 140323571343360-140734793707519: 0000000000000000 [ 774.282849][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 774.320207][T13681] 140734793842688-140734795161599: 0000000000000000 [ 774.342628][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 774.356953][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 774.364185][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 774.379012][T13681] Pass: 12136248 Run:12136347 [ 774.384062][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 774.394009][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 774.404094][T13681] Call Trace: [ 774.407401][T13681] [ 774.410363][T13681] dump_stack_lvl+0xd1/0x138 [ 774.415092][T13681] mt_find.cold+0x8b/0x90 [ 774.419552][T13681] ? mas_find+0x1d0/0x1d0 [ 774.423937][T13681] find_vma+0x10c/0x1b0 [ 774.428129][T13681] ? can_vma_merge_before+0x390/0x390 [ 774.433549][T13681] ? walk_page_test+0x78/0x180 [ 774.438468][T13681] walk_page_range+0x2b1/0x4a0 [ 774.443282][T13681] ? __walk_page_range+0x780/0x780 [ 774.448477][T13681] mlock_fixup+0x650/0x810 [ 774.452984][T13681] apply_vma_lock_flags+0x23d/0x350 [ 774.458266][T13681] ? mlock_fixup+0x810/0x810 [ 774.462929][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 774.469079][T13681] do_mlock+0x25a/0x6d0 [ 774.473303][T13681] ? folio_evictable+0x270/0x270 [ 774.478420][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 774.484388][T13681] __x64_sys_mlock+0x59/0x80 [ 774.489148][T13681] do_syscall_64+0x39/0xb0 [ 774.493636][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 774.499588][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 774.504229][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 774.524192][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 774.532744][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 774.540845][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 774.548849][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 774.557057][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.565146][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 774.573167][T13681] [ 774.586517][T13681] index not increased! 20ffd000 <= 20ffd000 [ 774.592574][T13681] BUG at mt_find:6473 (1) [ 774.597567][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 774.606640][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 774.646648][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:31 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000140), 0x4) 22:41:31 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000140), 0x4) 22:41:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x4}]}, 0x18}}, 0x0) 22:41:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@lsrr={0x83, 0x3}]}}}}}) 22:41:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x12, 0x0, &(0x7f00000001c0)) 22:41:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 22:41:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="fd", 0x1}], 0x1, &(0x7f0000000400)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x30}, 0x4000000) [ 774.700047][T13681] 0-536866815: 0000000000000000 [ 774.707115][T13681] 536866816-536870911: ffff88801cede380 [ 774.713195][T13681] 536870912-553631743: ffff88801cede0e0 [ 774.722042][T13681] 553631744-553639935: 0000000000000000 [ 774.728599][T13681] 553639936-553635839: ffff8880772027e0 [ 774.734690][T13681] 553635840-553644031: ffff888077202a80 22:41:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x9, 0x0, &(0x7f0000000080)=0x9b) 22:41:31 executing program 4: syz_emit_ethernet(0x16e, &(0x7f0000000300)=ANY=[@ANYBLOB="137c5cf075dabbbbbbbbbbbb08004b0d0160006800005906"], 0x0) [ 774.804683][T13681] 553644032-553648127: ffff8880266220e0 [ 774.831847][T13681] 553648128-553652223: ffff88801cede000 22:41:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000003c80)=[{&(0x7f0000003c40)="c9", 0x1}], 0x1}}], 0x1, 0x0) 22:41:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x7a, 0x0, &(0x7f0000000080)=0x2000) [ 774.886934][T13681] 553652224-116819886079: 0000000000000000 22:41:31 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 22:41:31 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) 22:41:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) [ 774.975417][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 774.981963][T13681] 116824080384-93825007087615: 0000000000000000 22:41:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x1310, 0x1}, 0x48) [ 775.073639][T13681] 93825007087616-93825007226879: ffff8880208b22a0 22:41:31 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140), 0xff6a) 22:41:31 executing program 4: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}) 22:41:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 22:41:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000001e80)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="ce", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)="f1", 0x1}], 0x1}}], 0x2, 0x0) 22:41:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000007c80)=[{{&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="157a57", 0x3}], 0x1, &(0x7f0000000080)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}], 0x18}}], 0x1, 0x0) [ 775.142881][T13681] 93825007226880-140323535712255: 0000000000000000 22:41:31 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000140), 0x4) 22:41:31 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x80002, 0x4) [ 775.206416][T13681] 140323535712256-140323535716351: ffff8880208b20e0 22:41:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8921, &(0x7f0000000440)={'gre0\x00', 0x0}) [ 775.254108][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:41:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x13, 0x0, &(0x7f0000000080)) 22:41:31 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1e, 0x0, &(0x7f0000000040)) 22:41:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_GET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={0x0}}, 0x0) 22:41:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000980)={&(0x7f0000000240), 0xc, &(0x7f0000000940)={0x0}}, 0x0) [ 775.356273][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 775.363630][T13681] 140323544104960-140323546202111: ffff8880208b27e0 22:41:31 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x47, 0x0, &(0x7f0000000040)) [ 775.416445][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 775.423507][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 775.434214][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 775.441314][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 775.448610][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 22:41:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x18}}], 0x18}, 0x4000804) 22:41:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6}]}, 0x1c}}, 0x0) 22:41:32 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000140), 0x4) 22:41:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)=0x39) [ 775.482329][T13681] 140323556835328-140323557564415: ffff8880293ab000 22:41:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x101, 0x4) [ 775.543775][T13681] 140323557564416-140323557900287: ffff888078bac380 22:41:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x93858a634869d455, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 22:41:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001980)={&(0x7f0000001080), 0xe9, 0x0}, 0x0) 22:41:32 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x37, 0x0, &(0x7f0000000040)) 22:41:32 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x1, &(0x7f0000001140)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000001180)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001800)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:41:32 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x7, 0x0, &(0x7f0000000040)) 22:41:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000007c80)=[{{&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="157a57", 0x3}], 0x1, &(0x7f0000000080)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}], 0x18}}], 0x1, 0x20008090) [ 775.660510][T13681] 140323557900288-140323557904383: 0000000000000000 22:41:32 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x0, 0xffff}) 22:41:32 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000140), 0x4) 22:41:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}}, 0x0) 22:41:32 executing program 2: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89b1, &(0x7f0000000440)={'gre0\x00', 0x0}) [ 775.709826][T13681] 140323557904384-140323558268927: ffff888078bac0e0 22:41:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @rand_addr=0x64010100}}}}) [ 775.770437][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 775.827304][T13681] 140323558305792-140323558326271: 0000000000000000 [ 775.835511][T13681] 140323558326272-140323570171903: ffff888078bac700 22:41:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="b3", 0x1}], 0x1}, 0x0) 22:41:32 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2c, 0x0, &(0x7f0000000040)) 22:41:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) 22:41:32 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x9, 0x0, &(0x7f0000000040)) [ 775.843623][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:41:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x18, 0x0, &(0x7f0000000080)=0x2000) 22:41:32 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, &(0x7f0000000040)) 22:41:32 executing program 2: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 22:41:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private0, @remote, @local}) 22:41:32 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004a00)=""/4125, 0x101d}, {&(0x7f00000039c0)=""/4102, 0x1006}, {&(0x7f00000029c0)=""/4085, 0xff5}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/71, 0x47, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x10000, @remote, 0xfffffffc}, 0x1c) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='k', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 22:41:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0xb, 0x0, &(0x7f0000000080)) 22:41:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x22, 0x0, &(0x7f0000000080)) 22:41:32 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004a00)=""/4125, 0x101d}, {&(0x7f00000039c0)=""/4102, 0x1006}, {&(0x7f00000029c0)=""/4085, 0xff5}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/71, 0x47, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x10000, @remote, 0xfffffffc}, 0x1c) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='k', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 776.166347][T13681] 140323570171904-140323571208191: 0000000000000000 [ 776.215562][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 776.260675][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 776.278972][T13681] 140323571343360-140734793707519: 0000000000000000 [ 776.303096][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 776.322042][T13681] 140734793842688-140734795161599: 0000000000000000 [ 776.349345][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 776.359688][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 776.367959][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 776.376255][T13681] Pass: 12196470 Run:12196570 [ 776.381263][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 776.391226][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 776.401336][T13681] Call Trace: [ 776.404826][T13681] [ 776.407789][T13681] dump_stack_lvl+0xd1/0x138 [ 776.413002][T13681] mt_find.cold+0x8b/0x90 [ 776.417368][T13681] ? mas_find+0x1d0/0x1d0 [ 776.421714][T13681] find_vma+0x10c/0x1b0 [ 776.425893][T13681] ? can_vma_merge_before+0x390/0x390 [ 776.431751][T13681] ? walk_page_test+0x78/0x180 [ 776.437099][T13681] walk_page_range+0x2b1/0x4a0 [ 776.441923][T13681] ? __walk_page_range+0x780/0x780 [ 776.447136][T13681] mlock_fixup+0x650/0x810 [ 776.451628][T13681] apply_vma_lock_flags+0x23d/0x350 [ 776.456953][T13681] ? mlock_fixup+0x810/0x810 [ 776.461768][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 776.467722][T13681] do_mlock+0x25a/0x6d0 [ 776.471910][T13681] ? folio_evictable+0x270/0x270 [ 776.476917][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 776.482849][T13681] __x64_sys_mlock+0x59/0x80 [ 776.487476][T13681] do_syscall_64+0x39/0xb0 [ 776.491956][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 776.498021][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 776.502569][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 776.524118][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 776.533419][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 776.541892][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 776.549990][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 776.558347][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.566474][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 776.574566][T13681] [ 776.589642][T13681] index not increased! 20ffd000 <= 20ffd000 [ 776.604998][T13681] BUG at mt_find:6473 (1) [ 776.609391][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 776.618757][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 776.656256][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 776.707886][T13681] 0-536866815: 0000000000000000 [ 776.713263][T13681] 536866816-536870911: ffff88801cede380 22:41:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="b3", 0x1}], 0x1}, 0x0) 22:41:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x18, 0x0, &(0x7f0000000080)) 22:41:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x1e, 0x0, &(0x7f0000000080)=0x2000) 22:41:33 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xfffffff9}, 0x1c) 22:41:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:41:33 executing program 2: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8995, &(0x7f0000000440)={'gre0\x00', 0x0}) [ 776.732165][T13681] 536870912-553631743: ffff88801cede0e0 [ 776.745088][T13681] 553631744-553639935: 0000000000000000 [ 776.767341][T13681] 553639936-553635839: ffff8880772027e0 22:41:33 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x1600bd59, &(0x7f0000000140), 0x4) 22:41:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings}) 22:41:33 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000140), 0x4) 22:41:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f0000000440)={'gre0\x00', 0x0}) [ 776.807477][T13681] 553635840-553644031: ffff888077202a80 [ 776.813636][T13681] 553644032-553648127: ffff8880266220e0 22:41:33 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x70}}], 0x30}}], 0x1, 0x0) 22:41:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x7, 0x0, &(0x7f0000000080)=0x4) [ 776.866320][T13681] 553648128-553652223: ffff88801cede000 [ 776.875668][T13681] 553652224-116819886079: 0000000000000000 [ 776.901636][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 776.953530][T13681] 116824080384-93825007087615: 0000000000000000 [ 776.993051][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 777.007162][T13681] 93825007226880-140323535712255: 0000000000000000 [ 777.014345][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 777.021786][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 777.082661][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 777.089936][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 777.097376][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 777.104514][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 777.111708][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 777.119219][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 777.127290][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 777.134385][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 777.141796][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 777.149794][T13681] 140323557900288-140323557904383: 0000000000000000 [ 777.157043][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 777.164244][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 777.172205][T13681] 140323558305792-140323558326271: 0000000000000000 [ 777.179474][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 777.189763][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 777.241857][T13681] 140323570171904-140323571208191: 0000000000000000 [ 777.249170][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 777.256368][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 777.263495][T13681] 140323571343360-140734793707519: 0000000000000000 [ 777.271601][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 777.280729][T13681] 140734793842688-140734795161599: 0000000000000000 [ 777.288377][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 777.298959][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 777.307845][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 777.315793][T13681] Pass: 12206270 Run:12206371 [ 777.320587][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 777.330488][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 777.340900][T13681] Call Trace: [ 777.344172][T13681] [ 777.347097][T13681] dump_stack_lvl+0xd1/0x138 [ 777.351690][T13681] mt_find.cold+0x8b/0x90 [ 777.356018][T13681] ? mas_find+0x1d0/0x1d0 [ 777.360351][T13681] find_vma+0x10c/0x1b0 [ 777.364511][T13681] ? can_vma_merge_before+0x390/0x390 [ 777.369981][T13681] ? walk_page_test+0x78/0x180 [ 777.374928][T13681] walk_page_range+0x2b1/0x4a0 [ 777.379776][T13681] ? __walk_page_range+0x780/0x780 [ 777.384945][T13681] mlock_fixup+0x650/0x810 [ 777.389403][T13681] apply_vma_lock_flags+0x23d/0x350 [ 777.394627][T13681] ? mlock_fixup+0x810/0x810 [ 777.399247][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 777.405198][T13681] do_mlock+0x25a/0x6d0 [ 777.409570][T13681] ? folio_evictable+0x270/0x270 [ 777.414561][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 777.420671][T13681] __x64_sys_mlock+0x59/0x80 [ 777.425302][T13681] do_syscall_64+0x39/0xb0 [ 777.429772][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 777.435685][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 777.440108][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 777.460006][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 777.468698][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 777.476766][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 777.484747][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 777.492730][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.500710][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 777.508792][T13681] [ 777.522514][T13681] index not increased! 20ffd000 <= 20ffd000 [ 777.529067][T13681] BUG at mt_find:6473 (1) [ 777.533818][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 777.543546][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 777.583152][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 777.634471][T13681] 0-536866815: 0000000000000000 [ 777.654035][T13681] 536866816-536870911: ffff88801cede380 22:41:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)='`', 0x1}], 0x1, &(0x7f0000000540)=[@tclass={{0x14}}, @hoplimit={{0x14}}], 0x30}, 0x0) 22:41:34 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'sit0\x00', 0x0}) 22:41:34 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2b, 0x0, &(0x7f0000000040)) 22:41:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_batadv\x00'}) 22:41:34 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000140), 0x4) 22:41:34 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000140), 0x4) [ 777.663213][T13681] 536870912-553631743: ffff88801cede0e0 [ 777.669678][T13681] 553631744-553639935: 0000000000000000 [ 777.675827][T13681] 553639936-553635839: ffff8880772027e0 22:41:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x8, 0x0, &(0x7f0000000080)) 22:41:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 22:41:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000003c80)=[{&(0x7f0000000080)="33babea271718ca84e07a690118af1e5546a67f2870a0794001a10cb79af0911bc3e74d9619cb3659ba9", 0x2a}, {&(0x7f0000003c40)="c9b581693d07b401b968ba2c0c3e", 0xe}], 0x2}}], 0x1, 0x0) [ 777.705180][T13681] 553635840-553644031: ffff888077202a80 [ 777.720447][T13681] 553644032-553648127: ffff8880266220e0 22:41:34 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000140), 0x4) 22:41:34 executing program 4: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8948, &(0x7f0000000440)={'gre0\x00', 0x0}) 22:41:34 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2f, 0x0, &(0x7f0000000040)) 22:41:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @private}, 0x10) 22:41:34 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) [ 777.797148][T13681] 553648128-553652223: ffff88801cede000 22:41:34 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140), 0x4) 22:41:34 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 22:41:34 executing program 2: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x4020940d, &(0x7f0000000440)={'gre0\x00', 0x0}) 22:41:34 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000140), 0x4) 22:41:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x13, 0x0, &(0x7f0000000080)=0x9b) [ 777.885093][T13681] 553652224-116819886079: 0000000000000000 [ 777.919428][T13681] 116819886080-116824080383: ffff88801cede2a0 22:41:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x17, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 22:41:34 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}) [ 777.971776][T13681] 116824080384-93825007087615: 0000000000000000 22:41:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 22:41:34 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) [ 778.019168][T13681] 93825007087616-93825007226879: ffff8880208b22a0 22:41:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x38c0dbb297793abb, 0x0, 0x0, 0x0, 0x45}, 0x12041) 22:41:34 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) 22:41:34 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000140), 0x4) [ 778.062008][T13681] 93825007226880-140323535712255: 0000000000000000 22:41:34 executing program 4: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8942, &(0x7f0000000440)={'gre0\x00', 0x0}) 22:41:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) 22:41:34 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000140), 0x4) [ 778.155920][T13681] 140323535712256-140323535716351: ffff8880208b20e0 22:41:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xe, 0x0, &(0x7f0000000080)) 22:41:34 executing program 4: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}) 22:41:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000000c0)='n', 0x1}, {&(0x7f00000001c0)}, {0x0}], 0x3, &(0x7f00000009c0)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x7, 0x6, 0x0, [@private0]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x0, 0x4, '\x00', [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @ra]}}}], 0x68}, 0x4000) 22:41:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)='n', 0x1}], 0x1}, 0x4000) [ 778.211226][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:41:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x15, 0x0, &(0x7f0000000080)) 22:41:34 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @private=0xa010101}}}}) 22:41:34 executing program 5: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40049409, 0x0) 22:41:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB="90140000", @ANYRES16, @ANYBLOB="01"], 0x1490}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 22:41:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) 22:41:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2, 0x5162}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@tclass={{0x14}}, @hoplimit={{0x14}}], 0x30}, 0x0) 22:41:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x2c}}, 0x0) 22:41:35 executing program 2: epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xffffffff) [ 778.448449][T13681] 140323535716352-140323544104959: ffff8880208b2620 22:41:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x6c, 0x0, &(0x7f0000000080)=0x2000) 22:41:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @remote}}}}) [ 778.490128][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 778.522398][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 778.589971][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 778.639478][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 778.659751][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 778.682471][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 778.703938][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 778.727184][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 778.750163][T13681] 140323557900288-140323557904383: 0000000000000000 [ 778.772082][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 778.789888][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 778.797679][T13681] 140323558305792-140323558326271: 0000000000000000 [ 778.804696][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 778.813603][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 778.863773][T13681] 140323570171904-140323571208191: 0000000000000000 [ 778.873527][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 778.880800][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 778.888248][T13681] 140323571343360-140734793707519: 0000000000000000 [ 778.895915][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 778.903059][T13681] 140734793842688-140734795161599: 0000000000000000 [ 778.910354][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 778.918768][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 778.926121][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 778.933626][T13681] Pass: 12244852 Run:12244954 [ 778.938489][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 778.948429][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 778.958518][T13681] Call Trace: [ 778.961821][T13681] [ 778.964802][T13681] dump_stack_lvl+0xd1/0x138 [ 778.969430][T13681] mt_find.cold+0x8b/0x90 [ 778.973797][T13681] ? mas_find+0x1d0/0x1d0 [ 778.978162][T13681] find_vma+0x10c/0x1b0 [ 778.982349][T13681] ? can_vma_merge_before+0x390/0x390 [ 778.987757][T13681] ? walk_page_test+0x78/0x180 [ 778.992549][T13681] walk_page_range+0x2b1/0x4a0 [ 778.997331][T13681] ? __walk_page_range+0x780/0x780 [ 779.002514][T13681] mlock_fixup+0x650/0x810 [ 779.007024][T13681] apply_vma_lock_flags+0x23d/0x350 [ 779.012260][T13681] ? mlock_fixup+0x810/0x810 [ 779.016894][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 779.022818][T13681] do_mlock+0x25a/0x6d0 [ 779.027008][T13681] ? folio_evictable+0x270/0x270 [ 779.031977][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 779.037890][T13681] __x64_sys_mlock+0x59/0x80 [ 779.042534][T13681] do_syscall_64+0x39/0xb0 [ 779.047013][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 779.052945][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 779.057377][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 779.077080][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 779.085512][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 779.093488][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 779.101472][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 779.109457][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.117439][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 779.125433][T13681] [ 779.136772][T13681] index not increased! 20ffd000 <= 20ffd000 [ 779.143025][T13681] BUG at mt_find:6473 (1) 22:41:35 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 22:41:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 22:41:35 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x22, 0x0, &(0x7f0000000040)) 22:41:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="b3", 0x1}], 0x1}, 0x0) 22:41:35 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000140), 0x4) 22:41:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) [ 779.147953][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 779.157525][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) 22:41:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x0, 0x0, 0x9, 0x6, 0x1}, 0x48) [ 779.229323][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)="e7", 0x1}], 0x2}, 0x4000000) 22:41:35 executing program 5: r0 = socket$inet(0x2, 0x3, 0x62) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8949, &(0x7f0000000440)={'gre0\x00', 0x0}) [ 779.311336][T13681] 0-536866815: 0000000000000000 22:41:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x1600bd78, 0x0, &(0x7f0000000080)) 22:41:35 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) [ 779.338342][T13681] 536866816-536870911: ffff88801cede380 22:41:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x0, 0x0, 0x14}, 0x48) 22:41:35 executing program 2: pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, 0x0, 0x0) 22:41:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', 0x0}) [ 779.387426][T13681] 536870912-553631743: ffff88801cede0e0 [ 779.418969][T13681] 553631744-553639935: 0000000000000000 22:41:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x25, 0x0, &(0x7f0000000080)=0x2000) [ 779.461537][T13681] 553639936-553635839: ffff8880772027e0 [ 779.497959][T13681] 553635840-553644031: ffff888077202a80 [ 779.539844][T13681] 553644032-553648127: ffff8880266220e0 22:41:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x6bf, &(0x7f0000000080)={@in={{0x2, 0x7, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "9549673be6be4b401a7268c4b3244907d674ae8968d462044e4420ebca4d81ba9ab0eda00f7421bee02e0e78495c732368cf76058e67fc9b1cb6b2f461378f4a12a9cbc2547769926f11f7e83da3dfe4"}, 0xd8) 22:41:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000003c80)=[{&(0x7f0000003c40)="c9b581693d07b401b968ba2c0c3e87c90efef8bf0e98deeb28067304ad5ef83aba1ee0a7d8a01e12", 0x28}], 0x1}}], 0x1, 0x0) 22:41:36 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140), 0x4) 22:41:36 executing program 4: pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x77, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "776b4914cf9449e627ffa26b40bfb536c1bfd23598675e9644daddc2ac60ed831f3116185bbcaa7e3854a095171f540ef191de6518264a82afb0e7ebdc6bf83ba190dfa744a8a58fe2279bca6253c681fa98b181d0c45f09edeaf27c46b2c6fa75905970ee6adc9e7f7c978d1009d6c59b8f745a56d27c7d691881ac16a4f24d9b06bdfccfb855a0547d1365bacb288182cf8bf9eff05a649510cd51b993034d498f7834eb3d4ce9efbec6a0d98656ab37ae7f2904997d17fc24613bd2c002082e291ed4a46da2fb61633882d7e26338f8c6b7dff07e42efc4ae9f5862a432cc1c1834831ec7a1640d524e221e568cc3615a6dc8e974a529f72dc394bd7a0314ce4b35f02c156a4b303703f4710ac91a56768afc2113f19276dcf2a4969dc1bb916a252c102fe5ffb901b3776300d19adb48634eceec3d72a8c732d0f6b7403d1f745407cfe2b379ef0326c596f882d468f40941a9deabb09f8a8819f667534987db051e3f65511ef7d3aa7b54477fe7a53da1d2f9531cc8b7bf941eee737afc66504f8d0589dec060ace4c6acd5feb64b2429630bee840d2e3bfcc60640e6408155e4f28f373192890d3d6b2275f7e94f21154ab8fdb8b2d93f3b40897d0ac47563bd93e9e45491f33f5bab93d8f33a8c215736435d79702488a22e052b4b8e12746478256597de05f4e9715036c0918cf62003bdd59924dabfec7b87c48bd84463e1573c066f1e646159021e86ab8ee1592b1bd60aaf3201a61ed0591bff468567bfae7ec222245c56594eb88305fec08a96f8fd09ef3ba94eec06133adeea2b8c9d13e944c23f7fa13bbba31b29277fcf0df495891b27b5db992107c43dfa3fb209d8d6f2c4d3b041f6c8d8ac9d140859109d869efc96f9d49656dc42ca9f19bc55fc8fa4d1541c5754ab3e43826c8e45b667b44f0b8d714798c132a510a0462bcb6e0cb07e6734ca055f19cdc1e0d932d6b4b6ef401f7d7c8a831de96f6c7aa99203b4949c372f70cd4c496042a554eabe13666561bda974ec725086258f41491d26ee98fdcdee38ee5cfa2dadce5e9e6e53697fc92defd245a30554830a20052b0b4109be88e2a060c602de70c387c48ce5f0b91d6c43c69c2bc2218fdab7002ecf88790611953a28f5b2bd53f80d3d47af2dc0b1e6d3fbaebbf3eb502116f50db5bf9e6dfc8df7710a5d9ffe3f44985487888e6dba6d4335f936a62ff873b5c03a0affd54c5fb9d00b2bd0de9370caaf2aecc7843bafa3e58c669a672f7f2e8621cd6c9db598ad4cf957addca6e77c0a23e9cc16791b4f274a637e80a2e1e24c864a67c8fa91980c2ebab57a7994506d744cb8611df1bde3fcc66d1648bcde51161a080e37f327f7dfca9cd015a91b7c8c57d05c53f6c48fbbc0c45ca8f6a377c39c4426c16a8e3b99484f3d71b36bad291572a62c09ebfff49de16e2e234290fd8a9a12523b2d3d6718fc3dd32c354fe308f9bc98c81ee1e9430da3e626455876ca444a11ac9f723003b65b1bfb0e36722c01ea2a9938682e21fe4b666d71b56c14c59fb7dbbc6dfff2b37cdc1836f9cb8a58c347bc7a73f9cfe87842a326f0908df8add21bc6455480e13411519fd09645b932d6f27d8929272b1664fb2f782dec0febe09109f19e0f6b9928b91626832bbca7460484b45f34359707328590f468ac0c961b570bca658da60071eed6e210668f7ed62bb913f2f7afb92c9d284366118b125ee786bca864821fa2cd7bd8b4169e070c897ed321953cead1ff170b30292579aa4b70ceff4230eaedad0b2c13a8d2980902506e3e59ef849c7ed9b9da93d9dbf60f4a19c25ec14861f9f646eccab98fcec5b05b518769b77dbe390478a531ec09966b2b4a86b2f7d0e559bedc2c02f4859811c3b628459d641935240b2acfd8638794635cceccaa04dbc41fecddf28f8a205f725475be9de143423ad449e1a5e81d4176d740abff07300be04aab65f099b8f108750fbbec11806e590f4bcbc8101b723be77b2323a143dea6ee9ef6bfdc40c5e4895f8daf1dc7cbe52198b9353d758e11fe3275dca0870c1983d56679da5151417195851ab53129e0e1e5b2ee37a736e5e4d18b2084dbc8140beb4c3bb54374ec571093024d28ee484451cb36b55883d581fe3c2366dc2300d747a341c9d195d34d7fe412cc3a335593dca3633015300a23b9d384d40af226713bb0cb98da0b1086d9a77e26b210104ffa02acb7c6a47bf8229d12d3f94a91d5d5f828b099522bf0a62fa89b48a8f50303ed6c83c1325a13f499f80911424a97b156d8c3627c3144cafcefec94d84fb9fe302dbcc788786f9149ead331274b3491e1aac3ca0785837a26d2445fa6d62594bc118f0be8f5bed12ab7fb48f29b5bfa7664007949943933e1909557aff36b8e55d17b4a40b798063ca6e61793563ee4e076afb06e5efa7775190290189a1130a7813f1fa5d123a6a7d7b986c86e9a14bca46bc0d15d10fb35864ffd09b423f6ccdd44a7e18458f1384d1873ab1904ec97cfba69b8b70b18066fa9f6d08bace3debe99d59cfb60f37f5601a21c44bc235a7a8eea292301d372ff22fc4d5937fd4e0eb31e97b47508f84a4ba28bc427ed020f35369ac611340c6e12ea047bbafb4ea2732067516d21901d55a674bb9ed69bf76fd32f71b302783677e3cb1cdd718c4ce70e7b3e9006135de9e2dbc41a738efff26d23d900d849c6a90c36a0f0657deb402ef5510b3571f6b79d1e8302278942aaa1cf9f1e046e8fd0306dfdc62ad2d9ec94dda56206dde66c59769cd05d1edff1dbbc942d57a31eea2852689f1f8ac993f126469ea6767c490e7162457620403a31281ae1de92b85728dfd8ba65dccdbfdefcb8d8341fd7c92ea3f8521ab5a81e098c6be3e5a15615e459cdb2be21d545497bb7ea81f4a6f6b6105360135db80feb170d91e50d35882a83fe296e119121c5cf0ef58df3f7dbea11584584380351270befc4080b46723aeacf16f223b768b80c1bc44d58724b35ebdbc35e3d187409f3b5d152335d5789fc08974239cc0c9fdd532a86874c406a093d588e3c2527f31f021738843910f9f32abf1c2045c597e91bfb9deb1cbff49e0b75e88d2e84935ae6f73ade0c3f60932286f0940c03dcfbe293b8fc78a1137b04ae1c02963c69c621705ff5c97b44a9309a008adba77a532c257742764f117386f981ca4e939a77aac0c479badcefe496f70188b04c2227e6ec0b968e0149c43ad230cadc46097236ebbac5b42e79210e87a8eb31f25ec12571208b876da83b97b29334d186b4a8752e5f9af7370e50218308959cd8b5bd3ab438bcc6bc50991e12e6127c52f223e00a2a1443f4e59e354f11627dab33ac63e0fc5523b91d53efbcaec2de2120701834cabc01691bc098bfa21cd7ed110454a851a8340074ceb82bf2bcc8b636c3df269d86a9498ec4413aa69cef44", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1001) 22:41:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0x50}}, 0x0) 22:41:36 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) [ 779.588897][T13681] 553648128-553652223: ffff88801cede000 22:41:36 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000180)) 22:41:36 executing program 1: pipe(&(0x7f0000001140)) bpf$ITER_CREATE(0x21, 0x0, 0x0) 22:41:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2}]}, {0x0, [0x0]}}, &(0x7f00000000c0)=""/247, 0x27, 0xf7, 0x1}, 0x20) 22:41:36 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x4c46, 0x4) [ 779.648642][T13681] 553652224-116819886079: 0000000000000000 22:41:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 22:41:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x13, &(0x7f0000000080)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "9549673be6be4b401a7268c4b3244907d674ae8968d462044e4420ebca4d81ba9ab0eda00f7421bee02e0e78495c732368cf76058e67fc9b1cb6b2f461378f4a12a9cbc2547769926f11f7e83da3dfe4"}, 0xd8) [ 779.728187][T13681] 116819886080-116824080383: ffff88801cede2a0 22:41:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf, 0x0, 0x7f00}}, 0x14}, 0xe}, 0x0) 22:41:36 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x80108906, 0x0) 22:41:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 22:41:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x5, &(0x7f0000000080)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "9549673be6be4b401a7268c4b3244907d674ae8968d462044e4420ebca4d81ba9ab0eda00f7421bee02e0e78495c732368cf76058e67fc9b1cb6b2f461378f4a12a9cbc2547769926f11f7e83da3dfe4"}, 0xd8) [ 779.772167][T13681] 116824080384-93825007087615: 0000000000000000 22:41:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={0x0}}, 0x0) 22:41:36 executing program 1: socket$inet(0x2, 0xa, 0x0) socket$inet(0x2, 0xa, 0x6) 22:41:36 executing program 5: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x20, 0xfff], [0x8000000000000000, 0x0, 0x2f8b9765, 0x0, 0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x102, 0x1, 0x0, 0x66, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3ff, 0x0, 0x0, 0xb84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x3f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000003680), r0) 22:41:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5421, &(0x7f0000000040)) readv(r0, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/15, 0xf}], 0x1) 22:41:36 executing program 4: pipe(&(0x7f0000000ac0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 22:41:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x1}]}]}}, &(0x7f0000000300)=""/167, 0x36, 0xa7, 0x1}, 0x20) [ 779.918160][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 779.957390][T13681] 93825007226880-140323535712255: 0000000000000000 22:41:36 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff) 22:41:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000e00)={'nat\x00', 0x4, "a923d68e"}, &(0x7f0000000f40)=0x28) [ 780.006726][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 780.035415][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 780.162117][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 780.182357][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 780.191875][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 780.199936][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 780.209198][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 780.216882][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 780.224019][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 780.231679][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 780.239242][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 780.248105][T13681] 140323557900288-140323557904383: 0000000000000000 [ 780.265043][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 780.272723][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 780.280642][T13681] 140323558305792-140323558326271: 0000000000000000 [ 780.288199][T13681] 140323558326272-140323570171903: ffff888078bac700 22:41:36 executing program 0: syz_genetlink_get_family_id$ieee802154(&(0x7f0000003680), 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000003700), 0xffffffffffffffff) 22:41:36 executing program 2: pipe(&(0x7f0000000a80)={0xffffffffffffffff}) read(r0, 0x0, 0x0) 22:41:36 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000001880)) 22:41:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f0000003c80)=[{&(0x7f0000000080)="33babea271718ca84e07a690118af1e5546a67f2870a0794001a10cb79af0911bc3e74d9619cb3659ba9a2", 0x2b}, {&(0x7f00000001c0)="6406187b20a0dbfdebb54170ae1af28de1825210d5ee4964a4a080c1a7e1b2bc796691d9abf67fc376e51b3f72807b4e4f9abd38bcb9e9fe8f026c107eb96c6c41406aecbc8b7c812e8828da5e594ada69fb48a91db8d5f3492e0cf9d345015c8acfda6046df40bf8d8cc55beb", 0x6d}, {&(0x7f0000003c40)="c9b581693d07b401b968ba2c0c3e87c90efef8bf0e98deeb28067304ad5ef83aba1ee0a7d8a01e126dfc64fda32d69c897", 0x31}], 0x3, &(0x7f0000003d00)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) 22:41:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x0, {{0x2, 0x0, @remote}}}, 0x88) 22:41:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {}]}]}}, &(0x7f0000000300)=""/167, 0x36, 0xa7, 0x1}, 0x20) [ 780.295687][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:41:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001600)={0x0, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 22:41:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, &(0x7f0000000040)) 22:41:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000040)=@raw=[@ldst], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:41:36 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000dc0)=@raw=[@alu], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 22:41:36 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r0, 0x0, 0x0) [ 780.378127][T13681] 140323570171904-140323571208191: 0000000000000000 [ 780.410191][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 22:41:37 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {}]}, @var={0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000300)=""/167, 0x47, 0xa7, 0x1}, 0x20) [ 780.464308][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 780.505728][T13681] 140323571343360-140734793707519: 0000000000000000 22:41:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x1, 0xa3, &(0x7f0000000380)=""/163, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:41:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r1, 0x721}, 0x14}}, 0x0) 22:41:37 executing program 3: syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) 22:41:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x4, &(0x7f0000000080)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "9549673be6be4b401a7268c4b3244907d674ae8968d462044e4420ebca4d81ba9ab0eda00f7421bee02e0e78495c732368cf76058e67fc9b1cb6b2f461378f4a12a9cbc2547769926f11f7e83da3dfe4"}, 0xd8) 22:41:37 executing program 4: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x0, 0x0, [], [0x8000000000000000, 0x9821, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x81, 0x0, 0x102, 0x1, 0x0, 0x66, 0x1, 0x0, 0x0, 0x8, 0x800, 0x7, 0x1, 0x10000, 0xa7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x8000000000000001, 0x0, 0xfffffffffffffff9, 0x3, 0xb1d, 0x9, 0x0, 0x9, 0xe2f, 0x6, 0x3, 0x0, 0x7, 0x0, 0x9, 0x100, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa22f, 0x22, 0x8, 0x7, 0x80, 0x3f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x200, 0x2, 0x3, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x8000000000000000]}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002fc0)={0x1, 0x58, &(0x7f0000002f40)}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000003700), 0xffffffffffffffff) [ 780.552160][T13681] 140734793707520-140734793842687: ffff888078bac7e0 22:41:37 executing program 1: pipe(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r0, 0x0, 0x0) 22:41:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0xc0800) 22:41:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 780.606260][T13681] 140734793842688-140734795161599: 0000000000000000 [ 780.613377][T13681] 140734795161600-140734795177983: ffff888078bac000 22:41:37 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 22:41:37 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000005680), 0xffffffffffffffff) 22:41:37 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=0x0, @ANYBLOB="01"], 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0xa3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 22:41:37 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) [ 780.725076][T13681] 140734795177984-140734795186175: ffff888078bacee0 22:41:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x800, 0x1004, 0x1}, 0x48) 22:41:37 executing program 3: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)) 22:41:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0xb05, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) 22:41:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) [ 780.780756][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 780.860095][T13681] Pass: 12292364 Run:12292467 [ 780.864856][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 780.874782][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 780.884968][T13681] Call Trace: [ 780.888367][T13681] [ 780.891344][T13681] dump_stack_lvl+0xd1/0x138 [ 780.896604][T13681] mt_find.cold+0x8b/0x90 [ 780.901001][T13681] ? mas_find+0x1d0/0x1d0 [ 780.905417][T13681] find_vma+0x10c/0x1b0 22:41:37 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5450, 0x0) 22:41:37 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0}}, 0x0) [ 780.909636][T13681] ? can_vma_merge_before+0x390/0x390 [ 780.915380][T13681] ? walk_page_test+0x78/0x180 [ 780.921419][T13681] walk_page_range+0x2b1/0x4a0 [ 780.929205][T13681] ? __walk_page_range+0x780/0x780 [ 780.934798][T13681] mlock_fixup+0x650/0x810 [ 780.939417][T13681] apply_vma_lock_flags+0x23d/0x350 [ 780.944788][T13681] ? mlock_fixup+0x810/0x810 [ 780.949552][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 780.955510][T13681] do_mlock+0x25a/0x6d0 22:41:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) [ 780.959863][T13681] ? folio_evictable+0x270/0x270 [ 780.964918][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 780.970867][T13681] __x64_sys_mlock+0x59/0x80 [ 780.975511][T13681] do_syscall_64+0x39/0xb0 [ 780.980155][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 780.986451][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 780.990962][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 781.010709][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 781.019177][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 781.027185][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 781.035192][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 781.043329][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.051862][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 22:41:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001640), r0) [ 781.060159][T13681] 22:41:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000030a05000000000000000000020000000900010073797a3000000000080003400000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 22:41:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a40)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) [ 781.197757][T13681] index not increased! 20ffd000 <= 20ffd000 [ 781.245365][T13681] BUG at mt_find:6473 (1) [ 781.250973][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 781.279336][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x1, &(0x7f0000000980)=@raw=[@jmp], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0xfffffffffffffffe, 0x0, 0x10, 0x0}, 0x80) 22:41:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xff, 0x0, 0x0, 0x1004, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 22:41:37 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x10, 0x0) 22:41:37 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 22:41:37 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2d, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 22:41:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000900)={0xfffffffffffffffc, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)={0x14, 0x1, 0x3, 0x5}, 0x14}}, 0x0) [ 781.322123][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 781.385052][T13681] 0-536866815: 0000000000000000 22:41:37 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={0x0, 0x0, 0x18}, 0x10) 22:41:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x16, 0x0, 0x6, 0x7}, 0x48) 22:41:38 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x0, 0x5}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "38eedd", 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xfe, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 22:41:38 executing program 2: r0 = epoll_create(0x4) close(r0) [ 781.487267][T13681] 536866816-536870911: ffff88801cede380 [ 781.496875][T13681] 536870912-553631743: ffff88801cede0e0 [ 781.515662][T13681] 553631744-553639935: 0000000000000000 22:41:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x17, &(0x7f0000000080)={@in={{0x2, 0xffff, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "9549673be6be4b401a7268c4b3244907d674ae8968d462044e4420ebca4d81ba9ab0eda00f7421bee02e0e78495c732368cf76058e67fc9b1cb6b2f461378f4a12a9cbc2547769926f11f7e83da3dfe4"}, 0xd8) 22:41:38 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)={0x4c}, 0x4c}}, 0x0) 22:41:38 executing program 2: r0 = socket$inet(0x2, 0x3, 0x10000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @multicast1, @empty}, 0xc) pipe(&(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f00000000c0)=@raw=[@ldst, @ldst={0x2, 0x1, 0x3, 0xa, 0x5, 0xc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) [ 781.539065][T13681] 553639936-553635839: ffff8880772027e0 [ 781.560317][T13681] 553635840-553644031: ffff888077202a80 [ 781.579930][T13681] 553644032-553648127: ffff8880266220e0 [ 781.598807][T13681] 553648128-553652223: ffff88801cede000 [ 781.612214][T13681] 553652224-116819886079: 0000000000000000 [ 781.619222][T13681] 116819886080-116824080383: ffff88801cede2a0 22:41:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x891e, &(0x7f0000000040)) [ 781.652893][T13681] 116824080384-93825007087615: 0000000000000000 [ 781.694752][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 781.717418][T13681] 93825007226880-140323535712255: 0000000000000000 [ 781.729980][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 781.753107][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 781.823658][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 781.831163][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 781.845575][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 781.862762][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 781.873100][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 781.884833][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 781.892251][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 781.899515][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 781.906692][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 781.913738][T13681] 140323557900288-140323557904383: 0000000000000000 [ 781.920871][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 781.931864][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 781.939290][T13681] 140323558305792-140323558326271: 0000000000000000 [ 781.947285][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 781.955992][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 782.007906][T13681] 140323570171904-140323571208191: 0000000000000000 [ 782.024204][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 782.032042][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 782.049361][T13681] 140323571343360-140734793707519: 0000000000000000 [ 782.062798][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 782.075600][T13681] 140734793842688-140734795161599: 0000000000000000 [ 782.082704][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 782.102717][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 782.111794][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 782.121659][T13681] Pass: 12313845 Run:12313949 [ 782.126965][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 782.137342][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 782.147530][T13681] Call Trace: [ 782.150831][T13681] [ 782.153773][T13681] dump_stack_lvl+0xd1/0x138 [ 782.158395][T13681] mt_find.cold+0x8b/0x90 [ 782.163030][T13681] ? mas_find+0x1d0/0x1d0 [ 782.167488][T13681] find_vma+0x10c/0x1b0 [ 782.171685][T13681] ? can_vma_merge_before+0x390/0x390 [ 782.177365][T13681] ? walk_page_test+0x78/0x180 [ 782.182180][T13681] walk_page_range+0x2b1/0x4a0 [ 782.186994][T13681] ? __walk_page_range+0x780/0x780 [ 782.192178][T13681] mlock_fixup+0x650/0x810 [ 782.196661][T13681] apply_vma_lock_flags+0x23d/0x350 [ 782.201910][T13681] ? mlock_fixup+0x810/0x810 [ 782.206565][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 782.212603][T13681] do_mlock+0x25a/0x6d0 [ 782.216789][T13681] ? folio_evictable+0x270/0x270 [ 782.221814][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 782.227782][T13681] __x64_sys_mlock+0x59/0x80 [ 782.232451][T13681] do_syscall_64+0x39/0xb0 [ 782.237022][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 782.242960][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 782.248191][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 782.267943][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 782.276409][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 782.284462][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 782.292569][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 782.300596][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 22:41:38 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000000)={{0x0, @local, 0x0, 0x0, 'fo\x00'}, {@remote}}, 0x44) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000980)) 22:41:38 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x2, 0x0) [ 782.308616][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 782.317004][T13681] [ 782.345719][T13681] index not increased! 20ffd000 <= 20ffd000 [ 782.351801][T13681] BUG at mt_find:6473 (1) [ 782.357605][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:38 executing program 1: socketpair(0x25, 0x3, 0x5, &(0x7f0000000000)) 22:41:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8916, 0x0) 22:41:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 22:41:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) 22:41:38 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000300)=""/167, 0x36, 0xa7, 0x1}, 0x20) 22:41:38 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2d, 0x10, 0x0}, 0x80) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) [ 782.366533][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:39 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)={'syz0', "b578c651a24790d7bafdb2796652eb789479e37cf131cfbd828e75b1da2330bf9ea5e67086854d045fc2ca9972ef841ea23f7ff83cd7bed24b0883b6f751650977b9f01cdf355a40249466ed9f38620178b9bdd0a83a145cf89e9162af62bc02f5d750824b46f413aa9a6430edd24a55225a6fa6296a5d2a75d8c693a83b7f6506dfa29dee2695563a7b6396"}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 22:41:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="ec", 0x1) 22:41:39 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xfd6c, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000140)=0x54) [ 782.448355][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 782.580712][T13681] 0-536866815: 0000000000000000 22:41:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x48) 22:41:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x9, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x0, @private1}}, 0x0, 0x0, 0x0, 0x0, "9549673be6be4b401a7268c4b3244907d674ae8968d462044e4420ebca4d81ba9ab0eda00f7421bee02e0e78495c732368cf76058e67fc9b1cb6b2f461378f4a12a9cbc2547769926f11f7e83da3dfe4"}, 0xd8) [ 782.603350][T13681] 536866816-536870911: ffff88801cede380 [ 782.630949][T13681] 536870912-553631743: ffff88801cede0e0 [ 782.662802][T13681] 553631744-553639935: 0000000000000000 [ 782.690954][T13681] 553639936-553635839: ffff8880772027e0 [ 782.725864][T13681] 553635840-553644031: ffff888077202a80 [ 782.763099][T13681] 553644032-553648127: ffff8880266220e0 [ 782.786568][T13681] 553648128-553652223: ffff88801cede000 [ 782.809777][T13681] 553652224-116819886079: 0000000000000000 [ 782.832164][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 782.860818][T13681] 116824080384-93825007087615: 0000000000000000 [ 782.881324][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 782.901717][T13681] 93825007226880-140323535712255: 0000000000000000 [ 782.928620][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 782.949717][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 783.042601][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 783.057412][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 783.084472][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 783.110144][T13681] 140323548299264-140323550396415: ffff8880208b28c0 22:41:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)) 22:41:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x68}}, 0x0) 22:41:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000030a05000000000000000000020000000900010073797a3000000000080003400000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 22:41:39 executing program 0: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) [ 783.142432][T13681] 140323550396416-140323552493567: ffff8880208b21c0 22:41:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x443ff56558604a15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 783.189585][T13681] 140323552493568-140323556687871: ffff8880208b2380 22:41:39 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8940, 0x0) [ 783.238924][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 783.266367][T13681] 140323556835328-140323557564415: ffff8880293ab000 22:41:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 22:41:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 22:41:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3801}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) [ 783.344256][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 783.375020][T13681] 140323557900288-140323557904383: 0000000000000000 [ 783.413803][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 783.490497][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 783.512588][T13681] 140323558305792-140323558326271: 0000000000000000 [ 783.532114][T13681] 140323558326272-140323570171903: ffff888078bac700 22:41:40 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xfd6c, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000140)=0x54) 22:41:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'geneve1\x00', 0x3801}) ioctl$TUNGETVNETLE(r0, 0x800454dd, 0x0) 22:41:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x16}, 0x48) 22:41:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x0, 0x0, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 22:41:40 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001100), 0x8) 22:41:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) [ 783.549472][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:41:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x20000000}, 0x48) 22:41:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3801}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) 22:41:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3801}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 22:41:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3801}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 22:41:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x2, &(0x7f00000000c0)={'syzkaller1\x00'}) 22:41:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc01047d0, &(0x7f00000000c0)={'syzkaller1\x00'}) [ 783.835992][T13681] 140323570171904-140323571208191: 0000000000000000 [ 783.874995][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 783.904945][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 783.911974][T13681] 140323571343360-140734793707519: 0000000000000000 [ 783.954581][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 784.015110][T13681] 140734793842688-140734795161599: 0000000000000000 [ 784.022134][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 784.044995][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 784.052021][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 784.085122][T13681] Pass: 12340312 Run:12340417 [ 784.089863][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 784.099963][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 784.110054][T13681] Call Trace: [ 784.113358][T13681] [ 784.116323][T13681] dump_stack_lvl+0xd1/0x138 [ 784.120970][T13681] mt_find.cold+0x8b/0x90 [ 784.125530][T13681] ? mas_find+0x1d0/0x1d0 [ 784.130298][T13681] find_vma+0x10c/0x1b0 [ 784.134776][T13681] ? can_vma_merge_before+0x390/0x390 [ 784.141280][T13681] ? walk_page_test+0x78/0x180 [ 784.146369][T13681] walk_page_range+0x2b1/0x4a0 [ 784.151213][T13681] ? __walk_page_range+0x780/0x780 [ 784.156415][T13681] mlock_fixup+0x650/0x810 [ 784.160915][T13681] apply_vma_lock_flags+0x23d/0x350 [ 784.166166][T13681] ? mlock_fixup+0x810/0x810 [ 784.170835][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 784.176870][T13681] do_mlock+0x25a/0x6d0 [ 784.181069][T13681] ? folio_evictable+0x270/0x270 [ 784.186059][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 784.191991][T13681] __x64_sys_mlock+0x59/0x80 [ 784.196631][T13681] do_syscall_64+0x39/0xb0 [ 784.201093][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 784.207023][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 784.211473][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 784.231213][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 784.239697][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 784.247709][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 784.255708][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 784.263712][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.271724][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 784.279762][T13681] [ 784.315157][T13681] index not increased! 20ffd000 <= 20ffd000 [ 784.321128][T13681] BUG at mt_find:6473 (1) [ 784.326056][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 784.334511][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 784.574061][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 784.645058][T13681] 0-536866815: 0000000000000000 [ 784.655026][T13681] 536866816-536870911: ffff88801cede380 [ 784.660991][T13681] 536870912-553631743: ffff88801cede0e0 [ 784.694969][T13681] 553631744-553639935: 0000000000000000 [ 784.700935][T13681] 553639936-553635839: ffff8880772027e0 [ 784.715242][T13681] 553635840-553644031: ffff888077202a80 [ 784.721206][T13681] 553644032-553648127: ffff8880266220e0 [ 784.745563][T13681] 553648128-553652223: ffff88801cede000 [ 784.770129][T13681] 553652224-116819886079: 0000000000000000 [ 784.794566][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 784.824956][T13681] 116824080384-93825007087615: 0000000000000000 [ 784.841042][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 784.857456][T13681] 93825007226880-140323535712255: 0000000000000000 22:41:41 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xfd6c, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000140)=0x54) 22:41:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x14}}], 0x18}, 0x4000040) 22:41:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x2}, 0x48) 22:41:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x16, 0x5, 0x0, 0xfffffe01}, 0x48) 22:41:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3839}) 22:41:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 784.873899][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 784.959216][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 785.078151][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 785.095111][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 785.241237][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 785.285050][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 785.309994][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 785.333944][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 785.381717][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 785.423696][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 785.459350][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 785.494715][T13681] 140323557900288-140323557904383: 0000000000000000 [ 785.518115][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 785.535141][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 785.542182][T13681] 140323558305792-140323558326271: 0000000000000000 [ 785.554980][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 785.562072][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 785.737975][T13681] 140323570171904-140323571208191: 0000000000000000 [ 785.765064][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 785.772093][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 785.794962][T13681] 140323571343360-140734793707519: 0000000000000000 [ 785.804338][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 785.827670][T13681] 140734793842688-140734795161599: 0000000000000000 [ 785.842899][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 785.862051][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 785.891553][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 785.908405][T13681] Pass: 12344377 Run:12344483 [ 785.919112][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 785.929092][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 785.939233][T13681] Call Trace: [ 785.942531][T13681] [ 785.945481][T13681] dump_stack_lvl+0xd1/0x138 [ 785.950113][T13681] mt_find.cold+0x8b/0x90 [ 785.954489][T13681] ? mas_find+0x1d0/0x1d0 [ 785.958880][T13681] find_vma+0x10c/0x1b0 [ 785.963067][T13681] ? can_vma_merge_before+0x390/0x390 [ 785.968845][T13681] ? walk_page_test+0x78/0x180 [ 785.973672][T13681] walk_page_range+0x2b1/0x4a0 [ 785.978494][T13681] ? __walk_page_range+0x780/0x780 [ 785.983690][T13681] mlock_fixup+0x650/0x810 [ 785.992789][T13681] apply_vma_lock_flags+0x23d/0x350 [ 785.998063][T13681] ? mlock_fixup+0x810/0x810 [ 786.003084][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 786.009032][T13681] do_mlock+0x25a/0x6d0 [ 786.013326][T13681] ? folio_evictable+0x270/0x270 [ 786.018327][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 786.024360][T13681] __x64_sys_mlock+0x59/0x80 [ 786.029011][T13681] do_syscall_64+0x39/0xb0 [ 786.033477][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 786.039424][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 786.043885][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 786.063534][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 786.071995][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 786.080008][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 786.088015][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 786.096018][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.104016][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 786.112049][T13681] [ 786.235129][T13681] index not increased! 20ffd000 <= 20ffd000 [ 786.241109][T13681] BUG at mt_find:6473 (1) [ 786.255021][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 786.263617][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 786.306267][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 786.358327][T13681] 0-536866815: 0000000000000000 [ 786.363707][T13681] 536866816-536870911: ffff88801cede380 [ 786.371424][T13681] 536870912-553631743: ffff88801cede0e0 [ 786.380012][T13681] 553631744-553639935: 0000000000000000 [ 786.414751][T13681] 553639936-553635839: ffff8880772027e0 [ 786.442108][T13681] 553635840-553644031: ffff888077202a80 [ 786.466870][T13681] 553644032-553648127: ffff8880266220e0 [ 786.475133][T13681] 553648128-553652223: ffff88801cede000 [ 786.481499][T13681] 553652224-116819886079: 0000000000000000 [ 786.487950][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 786.497546][T13681] 116824080384-93825007087615: 0000000000000000 [ 786.504308][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 786.511512][T13681] 93825007226880-140323535712255: 0000000000000000 [ 786.518643][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 786.526305][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 786.583333][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 786.600814][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 786.608150][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 786.615483][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 786.622573][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 786.629961][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 786.637337][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 786.644422][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 786.651657][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 786.660270][T13681] 140323557900288-140323557904383: 0000000000000000 [ 786.667588][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 786.674680][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 786.682052][T13681] 140323558305792-140323558326271: 0000000000000000 [ 786.691017][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 786.699510][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 786.750034][T13681] 140323570171904-140323571208191: 0000000000000000 [ 786.757423][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 786.764563][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 786.771976][T13681] 140323571343360-140734793707519: 0000000000000000 [ 786.779135][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 786.786562][T13681] 140734793842688-140734795161599: 0000000000000000 [ 786.793674][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 786.803737][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 786.811063][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 786.818654][T13681] Pass: 12344385 Run:12344492 [ 786.823668][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 786.833602][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 786.843688][T13681] Call Trace: [ 786.846994][T13681] [ 786.849955][T13681] dump_stack_lvl+0xd1/0x138 [ 786.854603][T13681] mt_find.cold+0x8b/0x90 [ 786.858982][T13681] ? mas_find+0x1d0/0x1d0 [ 786.863366][T13681] find_vma+0x10c/0x1b0 [ 786.867546][T13681] ? can_vma_merge_before+0x390/0x390 [ 786.872946][T13681] ? walk_page_test+0x78/0x180 [ 786.877733][T13681] walk_page_range+0x2b1/0x4a0 [ 786.882517][T13681] ? __walk_page_range+0x780/0x780 [ 786.887669][T13681] mlock_fixup+0x650/0x810 [ 786.892119][T13681] apply_vma_lock_flags+0x23d/0x350 [ 786.897387][T13681] ? mlock_fixup+0x810/0x810 [ 786.902010][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 786.907942][T13681] do_mlock+0x25a/0x6d0 [ 786.912125][T13681] ? folio_evictable+0x270/0x270 [ 786.917096][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 786.923010][T13681] __x64_sys_mlock+0x59/0x80 [ 786.927707][T13681] do_syscall_64+0x39/0xb0 [ 786.932148][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 786.938057][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 786.942499][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 786.962148][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 786.970580][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 786.978561][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 786.986540][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 786.994518][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.002493][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 787.010512][T13681] [ 787.050666][T13681] index not increased! 20ffd000 <= 20ffd000 [ 787.064969][T13681] BUG at mt_find:6473 (1) [ 787.070760][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 787.090323][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 787.151349][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 787.218989][T13681] 0-536866815: 0000000000000000 [ 787.224425][T13681] 536866816-536870911: ffff88801cede380 [ 787.243876][T13681] 536870912-553631743: ffff88801cede0e0 [ 787.258468][T13681] 553631744-553639935: 0000000000000000 [ 787.275340][T13681] 553639936-553635839: ffff8880772027e0 [ 787.281312][T13681] 553635840-553644031: ffff888077202a80 [ 787.294920][T13681] 553644032-553648127: ffff8880266220e0 [ 787.306212][T13681] 553648128-553652223: ffff88801cede000 [ 787.313334][T13681] 553652224-116819886079: 0000000000000000 [ 787.335064][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 787.341623][T13681] 116824080384-93825007087615: 0000000000000000 [ 787.348659][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 787.357157][T13681] 93825007226880-140323535712255: 0000000000000000 [ 787.364074][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 787.371143][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 787.430017][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 787.437172][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 787.444160][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 787.451248][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 787.458433][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 787.468377][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 787.475521][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 787.482556][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 787.501202][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 787.525105][T13681] 140323557900288-140323557904383: 0000000000000000 [ 787.532108][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 787.539177][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 787.546287][T13681] 140323558305792-140323558326271: 0000000000000000 [ 787.553289][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 787.561374][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 787.613278][T13681] 140323570171904-140323571208191: 0000000000000000 [ 787.622454][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 787.629639][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 787.636736][T13681] 140323571343360-140734793707519: 0000000000000000 [ 787.644070][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 787.651209][T13681] 140734793842688-140734795161599: 0000000000000000 [ 787.658387][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 787.665524][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 787.672505][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 787.680030][T13681] Pass: 12344387 Run:12344495 [ 787.684747][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 787.694688][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 787.704786][T13681] Call Trace: [ 787.708103][T13681] [ 787.711057][T13681] dump_stack_lvl+0xd1/0x138 [ 787.715690][T13681] mt_find.cold+0x8b/0x90 [ 787.720208][T13681] ? mas_find+0x1d0/0x1d0 [ 787.724598][T13681] find_vma+0x10c/0x1b0 [ 787.728789][T13681] ? can_vma_merge_before+0x390/0x390 [ 787.734303][T13681] ? walk_page_test+0x78/0x180 [ 787.739117][T13681] walk_page_range+0x2b1/0x4a0 [ 787.743947][T13681] ? __walk_page_range+0x780/0x780 [ 787.749225][T13681] mlock_fixup+0x650/0x810 [ 787.753778][T13681] apply_vma_lock_flags+0x23d/0x350 [ 787.759740][T13681] ? mlock_fixup+0x810/0x810 [ 787.764398][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 787.770353][T13681] do_mlock+0x25a/0x6d0 [ 787.774572][T13681] ? folio_evictable+0x270/0x270 [ 787.779588][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 787.785527][T13681] __x64_sys_mlock+0x59/0x80 [ 787.790260][T13681] do_syscall_64+0x39/0xb0 [ 787.794726][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 787.800654][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 787.805098][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 787.824751][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 787.833205][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 787.841203][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 787.849204][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 787.857203][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.865201][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 787.873237][T13681] [ 787.879785][T13681] index not increased! 20ffd000 <= 20ffd000 [ 787.885820][T13681] BUG at mt_find:6473 (1) [ 787.890197][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 787.898771][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 787.964109][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 788.019033][T13681] 0-536866815: 0000000000000000 [ 788.024478][T13681] 536866816-536870911: ffff88801cede380 [ 788.032894][T13681] 536870912-553631743: ffff88801cede0e0 [ 788.039000][T13681] 553631744-553639935: 0000000000000000 [ 788.045256][T13681] 553639936-553635839: ffff8880772027e0 [ 788.051205][T13681] 553635840-553644031: ffff888077202a80 [ 788.057338][T13681] 553644032-553648127: ffff8880266220e0 [ 788.063502][T13681] 553648128-553652223: ffff88801cede000 [ 788.069570][T13681] 553652224-116819886079: 0000000000000000 [ 788.084946][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 788.091439][T13681] 116824080384-93825007087615: 0000000000000000 [ 788.124923][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 788.144929][T13681] 93825007226880-140323535712255: 0000000000000000 [ 788.151852][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 788.175938][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 788.246704][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 788.253715][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 788.274999][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 788.282050][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 788.304982][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 788.311994][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 788.334927][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 788.341957][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 788.364999][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 788.372009][T13681] 140323557900288-140323557904383: 0000000000000000 [ 788.394955][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 788.401978][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 788.424994][T13681] 140323558305792-140323558326271: 0000000000000000 [ 788.444938][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 788.452053][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 788.566357][T13681] 140323570171904-140323571208191: 0000000000000000 [ 788.573377][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 788.595003][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 788.602088][T13681] 140323571343360-140734793707519: 0000000000000000 [ 788.624969][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 788.631980][T13681] 140734793842688-140734795161599: 0000000000000000 [ 788.654962][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 788.661974][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 788.685069][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 788.692517][T13681] Pass: 12344387 Run:12344496 [ 788.704981][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 788.714941][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 788.725066][T13681] Call Trace: [ 788.728371][T13681] [ 788.731323][T13681] dump_stack_lvl+0xd1/0x138 [ 788.735964][T13681] mt_find.cold+0x8b/0x90 [ 788.740341][T13681] ? mas_find+0x1d0/0x1d0 [ 788.744733][T13681] find_vma+0x10c/0x1b0 [ 788.749034][T13681] ? can_vma_merge_before+0x390/0x390 [ 788.754423][T13681] ? walk_page_test+0x78/0x180 [ 788.759207][T13681] walk_page_range+0x2b1/0x4a0 [ 788.763993][T13681] ? __walk_page_range+0x780/0x780 [ 788.769136][T13681] mlock_fixup+0x650/0x810 [ 788.773584][T13681] apply_vma_lock_flags+0x23d/0x350 [ 788.778925][T13681] ? mlock_fixup+0x810/0x810 [ 788.783570][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 788.789954][T13681] do_mlock+0x25a/0x6d0 [ 788.794354][T13681] ? folio_evictable+0x270/0x270 [ 788.799356][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 788.805284][T13681] __x64_sys_mlock+0x59/0x80 [ 788.809932][T13681] do_syscall_64+0x39/0xb0 [ 788.814376][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 788.820282][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 788.824706][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 788.844428][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 788.852963][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 788.860966][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 788.868952][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 788.876938][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.884915][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 788.892916][T13681] [ 788.905040][T13681] index not increased! 20ffd000 <= 20ffd000 [ 788.910984][T13681] BUG at mt_find:6473 (1) [ 788.924918][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 788.933474][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 789.025060][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 789.092721][T13681] 0-536866815: 0000000000000000 [ 789.104903][T13681] 536866816-536870911: ffff88801cede380 [ 789.110850][T13681] 536870912-553631743: ffff88801cede0e0 [ 789.134914][T13681] 553631744-553639935: 0000000000000000 [ 789.140968][T13681] 553639936-553635839: ffff8880772027e0 [ 789.154401][T13681] 553635840-553644031: ffff888077202a80 [ 789.174325][T13681] 553644032-553648127: ffff8880266220e0 [ 789.180473][T13681] 553648128-553652223: ffff88801cede000 [ 789.207728][T13681] 553652224-116819886079: 0000000000000000 [ 789.213954][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 789.235051][T13681] 116824080384-93825007087615: 0000000000000000 [ 789.241725][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 789.271981][T13681] 93825007226880-140323535712255: 0000000000000000 [ 789.279168][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 789.295020][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 789.393955][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 789.406775][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 789.413779][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 789.435065][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 789.442086][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 789.469536][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 789.477313][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 789.484414][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 789.509086][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 789.524943][T13681] 140323557900288-140323557904383: 0000000000000000 [ 789.531948][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 789.555072][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 789.585014][T13681] 140323558305792-140323558326271: 0000000000000000 [ 789.592040][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 789.613998][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 789.678524][T13681] 140323570171904-140323571208191: 0000000000000000 22:41:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1}) 22:41:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) 22:41:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dummy0\x00', 0x8000}) 22:41:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r0}, 0x10) 22:41:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3801}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 22:41:46 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xfd6c, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000140)=0x54) [ 789.695190][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 789.702212][T13681] 140323571212288-140323571343359: ffff888078bacb60 22:41:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 22:41:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x8}, 0x48) 22:41:46 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1d4473abb88549ca, 0x0) [ 789.748665][T13681] 140323571343360-140734793707519: 0000000000000000 22:41:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x0, 0x101, 0x3f, 0x8}, 0x48) [ 789.835734][T13681] 140734793707520-140734793842687: ffff888078bac7e0 22:41:46 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10001) 22:41:46 executing program 1: socketpair(0x2c, 0x3, 0xfff, &(0x7f0000001b00)) 22:41:46 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc4203, 0x0) [ 789.891933][T13681] 140734793842688-140734795161599: 0000000000000000 22:41:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_ethernet(0x40, &(0x7f0000000c40), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00), 0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000800), 0x60, 0x0) [ 789.937155][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 789.975197][T13681] 140734795177984-140734795186175: ffff888078bacee0 22:41:46 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x32}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000005c0), 0x10, 0x0) 22:41:46 executing program 1: socketpair(0x1, 0x803, 0x0, &(0x7f0000000000)) [ 790.008532][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 790.041430][T13681] Pass: 12351138 Run:12351248 [ 790.076468][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 790.086442][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 790.096537][T13681] Call Trace: [ 790.099845][T13681] [ 790.102802][T13681] dump_stack_lvl+0xd1/0x138 [ 790.107443][T13681] mt_find.cold+0x8b/0x90 [ 790.111830][T13681] ? mas_find+0x1d0/0x1d0 [ 790.116218][T13681] find_vma+0x10c/0x1b0 [ 790.120413][T13681] ? can_vma_merge_before+0x390/0x390 [ 790.125834][T13681] ? walk_page_test+0x78/0x180 [ 790.131434][T13681] walk_page_range+0x2b1/0x4a0 [ 790.136268][T13681] ? __walk_page_range+0x780/0x780 [ 790.141532][T13681] mlock_fixup+0x650/0x810 [ 790.146011][T13681] apply_vma_lock_flags+0x23d/0x350 [ 790.151356][T13681] ? mlock_fixup+0x810/0x810 [ 790.156022][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 790.161981][T13681] do_mlock+0x25a/0x6d0 [ 790.166192][T13681] ? folio_evictable+0x270/0x270 [ 790.171179][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 790.177113][T13681] __x64_sys_mlock+0x59/0x80 [ 790.181749][T13681] do_syscall_64+0x39/0xb0 [ 790.186232][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 790.192170][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 790.196628][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 790.216281][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 790.224729][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 790.232724][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 790.241412][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 790.249403][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.257403][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 790.265425][T13681] 22:41:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000000)) [ 790.385994][T13681] index not increased! 20ffd000 <= 20ffd000 [ 790.423506][T13681] BUG at mt_find:6473 (1) [ 790.454387][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 790.476430][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 790.518576][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 790.596882][T13681] 0-536866815: 0000000000000000 [ 790.602330][T13681] 536866816-536870911: ffff88801cede380 [ 790.609884][T13681] 536870912-553631743: ffff88801cede0e0 [ 790.616004][T13681] 553631744-553639935: 0000000000000000 [ 790.634650][T13681] 553639936-553635839: ffff8880772027e0 [ 790.646377][T13681] 553635840-553644031: ffff888077202a80 [ 790.652336][T13681] 553644032-553648127: ffff8880266220e0 [ 790.672609][T13681] 553648128-553652223: ffff88801cede000 [ 790.685009][T13681] 553652224-116819886079: 0000000000000000 [ 790.699210][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 790.714279][T13681] 116824080384-93825007087615: 0000000000000000 [ 790.727749][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 790.745009][T13681] 93825007226880-140323535712255: 0000000000000000 [ 790.760853][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 790.776098][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:41:47 executing program 0: pselect6(0x6c, &(0x7f0000000380), &(0x7f00000003c0), 0x0, &(0x7f0000000480), 0x0) 22:41:47 executing program 2: pipe2(&(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 22:41:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights], 0x10}, 0x0) 22:41:47 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x10}], 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000005c0), 0x10, 0x0) 22:41:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000340)) 22:41:47 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 22:41:47 executing program 5: socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) 22:41:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea4000000000010902240001000000000904ffff010301000009210000000122010009058103a126"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x4, {0x4, 0x0, "2791"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x20, 0x1, 0x3, "2ae4cb"}, 0x0}) [ 790.848849][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 790.874737][T13681] 140323544104960-140323546202111: ffff8880208b27e0 22:41:47 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r1, 0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006ec0)={0x2020}, 0x2020) gettid() signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 22:41:47 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) readv(r1, 0x0, 0x0) mkdir(0x0, 0x0) chmod(&(0x7f0000000040)='./file0/file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006ec0)={0x2020}, 0x2020) r2 = gettid() rt_tgsigqueueinfo(r2, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f00000000c0)={[0xffffffffffffeb3c]}, 0x8, 0x0) 22:41:47 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000001080), 0x0, 0x0, 0x2) [ 790.931047][T13681] 140323546202112-140323548299263: ffff8880208b2700 22:41:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 790.990459][T13681] 140323548299264-140323550396415: ffff8880208b28c0 22:41:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x10001, 0x4) 22:41:47 executing program 1: clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x7}, 0x0, &(0x7f0000000480)={0x0, r0+60000000}, 0x0) 22:41:47 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000001080), 0x0, 0x0, 0x0) 22:41:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 22:41:47 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 22:41:47 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x1}) 22:41:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0xc1) [ 791.112438][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 791.149116][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 791.209694][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 791.248709][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 791.284990][ T5938] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 791.334158][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 791.341459][T13681] 140323557900288-140323557904383: 0000000000000000 [ 791.350731][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 791.358137][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 791.366298][T13681] 140323558305792-140323558326271: 0000000000000000 [ 791.375274][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 791.395257][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 791.457608][T13681] 140323570171904-140323571208191: 0000000000000000 [ 791.464629][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 791.472065][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 791.482162][T13681] 140323571343360-140734793707519: 0000000000000000 [ 791.501566][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 791.509580][T13681] 140734793842688-140734795161599: 0000000000000000 [ 791.519262][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 791.527945][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 791.535609][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 791.543112][T13681] Pass: 12361174 Run:12361285 [ 791.548258][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 791.558207][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 791.568879][T13681] Call Trace: [ 791.572160][T13681] [ 791.575111][T13681] dump_stack_lvl+0xd1/0x138 [ 791.579728][T13681] mt_find.cold+0x8b/0x90 [ 791.584076][T13681] ? mas_find+0x1d0/0x1d0 [ 791.588430][T13681] find_vma+0x10c/0x1b0 [ 791.592594][T13681] ? can_vma_merge_before+0x390/0x390 [ 791.598153][T13681] ? walk_page_test+0x78/0x180 [ 791.602931][T13681] walk_page_range+0x2b1/0x4a0 [ 791.608929][T13681] ? __walk_page_range+0x780/0x780 [ 791.614070][T13681] mlock_fixup+0x650/0x810 [ 791.618520][T13681] apply_vma_lock_flags+0x23d/0x350 [ 791.623747][T13681] ? mlock_fixup+0x810/0x810 [ 791.628369][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 791.634284][T13681] do_mlock+0x25a/0x6d0 [ 791.638465][T13681] ? folio_evictable+0x270/0x270 [ 791.643434][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 791.649367][T13681] __x64_sys_mlock+0x59/0x80 [ 791.653994][T13681] do_syscall_64+0x39/0xb0 [ 791.658442][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 791.664353][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 791.668786][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 791.688432][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 791.696857][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 791.704835][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 791.712815][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 791.720878][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.728857][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 791.736853][T13681] [ 791.750561][T13681] index not increased! 20ffd000 <= 20ffd000 [ 791.756679][T13681] BUG at mt_find:6473 (1) [ 791.761987][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 791.771112][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 791.812570][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 791.867176][T13681] 0-536866815: 0000000000000000 [ 791.872446][T13681] 536866816-536870911: ffff88801cede380 [ 791.879393][T13681] 536870912-553631743: ffff88801cede0e0 [ 791.885716][T13681] 553631744-553639935: 0000000000000000 [ 791.891692][T13681] 553639936-553635839: ffff8880772027e0 [ 791.898376][T13681] 553635840-553644031: ffff888077202a80 [ 791.904307][T13681] 553644032-553648127: ffff8880266220e0 [ 791.910292][T13681] 553648128-553652223: ffff88801cede000 [ 791.916640][ T5938] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 791.926289][T13681] 553652224-116819886079: 0000000000000000 [ 791.932552][ T5938] usb 4-1: config 0 has no interface number 0 [ 791.938992][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 791.945572][ T5938] usb 4-1: config 0 interface 255 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.950712][T13681] 116824080384-93825007087615: [ 791.956831][ T5938] usb 4-1: config 0 interface 255 altsetting 255 endpoint 0x81 has invalid maxpacket 9889, setting to 1024 [ 791.956869][ T5938] usb 4-1: config 0 interface 255 has no altsetting 0 [ 791.956912][ T5938] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 791.956942][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.969809][ T5938] usb 4-1: config 0 descriptor?? [ 791.978835][T13681] 0000000000000000 [ 792.011414][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 792.018614][T13681] 93825007226880-140323535712255: 0000000000000000 [ 792.025341][T15143] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 792.026780][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 792.039916][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 792.101461][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 792.108682][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 792.118620][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 792.127113][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 792.134104][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 792.141579][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 792.148989][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 792.156341][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 792.163315][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 792.170792][T13681] 140323557900288-140323557904383: 0000000000000000 [ 792.178497][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 792.185867][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 792.192843][T13681] 140323558305792-140323558326271: 0000000000000000 [ 792.200902][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 792.208327][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 792.265656][T13681] 140323570171904-140323571208191: 0000000000000000 [ 792.272955][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 792.280720][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 792.288155][T13681] 140323571343360-140734793707519: 0000000000000000 [ 792.295567][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 792.302788][T13681] 140734793842688-140734795161599: 0000000000000000 [ 792.311272][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 792.318762][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 792.326156][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 792.334349][T13681] Pass: 12361195 Run:12361307 [ 792.340684][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 792.350613][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 792.360664][T13681] Call Trace: [ 792.363934][T13681] [ 792.366859][T13681] dump_stack_lvl+0xd1/0x138 [ 792.371451][T13681] mt_find.cold+0x8b/0x90 [ 792.375782][T13681] ? mas_find+0x1d0/0x1d0 [ 792.380119][T13681] find_vma+0x10c/0x1b0 [ 792.384274][T13681] ? can_vma_merge_before+0x390/0x390 [ 792.389646][T13681] ? walk_page_test+0x78/0x180 [ 792.394424][T13681] walk_page_range+0x2b1/0x4a0 [ 792.399223][T13681] ? __walk_page_range+0x780/0x780 [ 792.404374][T13681] mlock_fixup+0x650/0x810 [ 792.408818][T13681] apply_vma_lock_flags+0x23d/0x350 [ 792.414038][T13681] ? mlock_fixup+0x810/0x810 [ 792.418658][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 792.424658][T13681] do_mlock+0x25a/0x6d0 [ 792.428841][T13681] ? folio_evictable+0x270/0x270 [ 792.433834][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 792.439750][T13681] __x64_sys_mlock+0x59/0x80 [ 792.444365][T13681] do_syscall_64+0x39/0xb0 [ 792.448803][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 792.454707][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 792.459132][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 792.479525][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 792.487968][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 792.495954][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 792.503936][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 792.511914][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.519886][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 792.527881][T13681] [ 792.548716][T13681] index not increased! 20ffd000 <= 20ffd000 [ 792.554674][T13681] BUG at mt_find:6473 (1) [ 792.570324][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 792.583067][ T5938] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input255 [ 792.596284][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 792.641903][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 792.691385][T13681] 0-536866815: 0000000000000000 [ 792.696773][T13681] 536866816-536870911: ffff88801cede380 [ 792.702714][T13681] 536870912-553631743: ffff88801cede0e0 [ 792.724987][T13681] 553631744-553639935: 0000000000000000 [ 792.730949][T13681] 553639936-553635839: ffff8880772027e0 [ 792.738169][T13681] 553635840-553644031: ffff888077202a80 [ 792.744117][T13681] 553644032-553648127: ffff8880266220e0 [ 792.752393][T13681] 553648128-553652223: ffff88801cede000 [ 792.759171][ T5938] cp2112 0003:10C4:EA90.0001: Part Number: 0xE4 Device Version: 0xCB [ 792.768548][T13681] 553652224-116819886079: 0000000000000000 [ 792.774957][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 792.781421][T13681] 116824080384-93825007087615: 0000000000000000 [ 792.803869][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 792.810938][T13681] 93825007226880-140323535712255: 0000000000000000 [ 792.824970][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 792.831978][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 792.890232][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 792.897853][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 792.905334][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 792.912437][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 792.923274][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 792.930761][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 792.938155][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 792.946526][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 792.953633][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 792.965296][ T5938] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 792.981398][T13681] 140323557900288-140323557904383: 0000000000000000 [ 792.997066][ T5938] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 793.006895][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 793.020400][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 793.033300][ T5938] usb 4-1: USB disconnect, device number 9 [ 793.039396][T13681] 140323558305792-140323558326271: 0000000000000000 [ 793.050820][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 793.067359][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 793.124459][T13681] 140323570171904-140323571208191: 0000000000000000 [ 793.131948][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 793.142458][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 793.151227][T13681] 140323571343360-140734793707519: 0000000000000000 [ 793.158934][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 793.166628][T13681] 140734793842688-140734795161599: 0000000000000000 [ 793.173721][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 793.181263][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 793.188730][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 793.196531][T13681] Pass: 12361447 Run:12361560 [ 793.201408][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 793.211322][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 793.221405][T13681] Call Trace: [ 793.224701][T13681] [ 793.227647][T13681] dump_stack_lvl+0xd1/0x138 [ 793.232262][T13681] mt_find.cold+0x8b/0x90 [ 793.236612][T13681] ? mas_find+0x1d0/0x1d0 [ 793.240969][T13681] find_vma+0x10c/0x1b0 [ 793.245133][T13681] ? can_vma_merge_before+0x390/0x390 [ 793.250608][T13681] ? walk_page_test+0x78/0x180 [ 793.255401][T13681] walk_page_range+0x2b1/0x4a0 [ 793.260193][T13681] ? __walk_page_range+0x780/0x780 [ 793.265336][T13681] mlock_fixup+0x650/0x810 [ 793.269865][T13681] apply_vma_lock_flags+0x23d/0x350 [ 793.275088][T13681] ? mlock_fixup+0x810/0x810 [ 793.279707][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 793.285623][T13681] do_mlock+0x25a/0x6d0 [ 793.289806][T13681] ? folio_evictable+0x270/0x270 [ 793.294771][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 793.300682][T13681] __x64_sys_mlock+0x59/0x80 [ 793.305291][T13681] do_syscall_64+0x39/0xb0 [ 793.309727][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 793.315645][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 793.320067][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 793.339684][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 793.348104][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 793.356079][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 793.364054][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 793.372040][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.380016][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 793.388010][T13681] [ 793.444440][T13681] index not increased! 20ffd000 <= 20ffd000 [ 793.450605][T13681] BUG at mt_find:6473 (1) [ 793.464950][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 793.473425][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 793.528909][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 793.582850][T13681] 0-536866815: 0000000000000000 [ 793.588745][T13681] 536866816-536870911: ffff88801cede380 22:41:50 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001b40), 0x8, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 22:41:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000000)=0xe) 22:41:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x4, "db269ebb"}, &(0x7f0000000000)=0x28) 22:41:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x7, 0x0, 0x0) 22:41:50 executing program 3: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x0, r0+10000000}, {0x0, 0x3938700}}, 0x0) 22:41:50 executing program 2: mq_open(&(0x7f0000000000)='A\xab', 0x1, 0x0, 0x0) 22:41:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 793.594679][T13681] 536870912-553631743: ffff88801cede0e0 [ 793.600973][T13681] 553631744-553639935: 0000000000000000 [ 793.607144][T13681] 553639936-553635839: ffff8880772027e0 [ 793.623914][T13681] 553635840-553644031: ffff888077202a80 22:41:50 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28}, 0xfffffeaa) write$FUSE_DIRENT(r0, 0x0, 0x160) 22:41:50 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[], 0xfffffe7e) write$P9_RWALK(r0, 0x0, 0x0) 22:41:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) [ 793.699323][T13681] 553644032-553648127: ffff8880266220e0 22:41:50 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28}, 0xfffffeaa) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 22:41:50 executing program 5: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[], 0xfffffe7e) write$P9_RREAD(r0, 0x0, 0x0) 22:41:50 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) [ 793.747720][T13681] 553648128-553652223: ffff88801cede000 [ 793.772929][T13681] 553652224-116819886079: 0000000000000000 22:41:50 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_devices(r0, 0x0, 0xfffffff4) 22:41:50 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x20040, 0x122) [ 793.856001][T13681] 116819886080-116824080383: ffff88801cede2a0 22:41:50 executing program 2: pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, 0xfffffffffffffffc, 0x0) 22:41:50 executing program 5: open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x21) 22:41:50 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8102, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x33) [ 793.914408][T13681] 116824080384-93825007087615: 0000000000000000 [ 793.951313][T13681] 93825007087616-93825007226879: ffff8880208b22a0 22:41:50 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[], 0xfffffe7e) write$P9_RRENAMEAT(r0, 0x0, 0x0) [ 794.019259][T13681] 93825007226880-140323535712255: 0000000000000000 [ 794.043157][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 794.087106][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 794.192874][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 794.209188][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 794.220474][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 794.230228][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 794.237907][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 794.245299][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 794.252413][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 794.260020][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 794.267693][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 794.287307][T13681] 140323557900288-140323557904383: 0000000000000000 [ 794.302266][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 794.320444][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 794.337299][T13681] 140323558305792-140323558326271: 0000000000000000 [ 794.352253][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 794.367508][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 794.423174][T13681] 140323570171904-140323571208191: 0000000000000000 [ 794.430926][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 794.438366][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 794.445763][T13681] 140323571343360-140734793707519: 0000000000000000 [ 794.452921][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 794.460393][T13681] 140734793842688-140734795161599: 0000000000000000 [ 794.467827][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 794.475328][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 794.484374][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 794.492288][T13681] Pass: 12369822 Run:12369936 [ 794.497599][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 794.507530][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 794.517610][T13681] Call Trace: [ 794.520911][T13681] [ 794.523865][T13681] dump_stack_lvl+0xd1/0x138 [ 794.528503][T13681] mt_find.cold+0x8b/0x90 [ 794.532874][T13681] ? mas_find+0x1d0/0x1d0 [ 794.537255][T13681] find_vma+0x10c/0x1b0 [ 794.541437][T13681] ? can_vma_merge_before+0x390/0x390 [ 794.546844][T13681] ? walk_page_test+0x78/0x180 [ 794.551649][T13681] walk_page_range+0x2b1/0x4a0 [ 794.556463][T13681] ? __walk_page_range+0x780/0x780 [ 794.561647][T13681] mlock_fixup+0x650/0x810 [ 794.566123][T13681] apply_vma_lock_flags+0x23d/0x350 [ 794.571384][T13681] ? mlock_fixup+0x810/0x810 [ 794.576036][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 794.581989][T13681] do_mlock+0x25a/0x6d0 [ 794.586202][T13681] ? folio_evictable+0x270/0x270 [ 794.591199][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 794.598083][T13681] __x64_sys_mlock+0x59/0x80 [ 794.602721][T13681] do_syscall_64+0x39/0xb0 [ 794.607185][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 794.613116][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 794.617567][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 22:41:51 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0xf) 22:41:51 executing program 4: semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f00000000c0)) 22:41:51 executing program 5: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 22:41:51 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80400, 0x72) 22:41:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003b00)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x1) 22:41:51 executing program 2: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)='%:\'}(%!\'\\].&\x00', 0xd, 0x0) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0xffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 794.637205][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 794.645735][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 794.653732][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 794.661729][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 794.669730][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.677725][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 794.685748][T13681] 22:41:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003b00)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)=[{0x10}], 0x10}, 0x0) 22:41:51 executing program 5: open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000540)='./file0\x00', 0x200, 0x0) 22:41:51 executing program 4: accept$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0xc) 22:41:51 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x0) 22:41:51 executing program 1: connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x10, 0x0, 0x1, 0x0) 22:41:51 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000005c0)) 22:41:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="a1f9f2afdd82549ce47891188ab3bfe13f3fa4dff2a87e4f9a23e9e9222605242a0d6e2caf94b94492fcc668818d02df0f69ff3d549c47f0f19815ce56bec1b6f772f643d1348c93400616da90e36c536978497b30742035f54b1d79a505979280e1a76ec3150594ed736a987313388164ed336dc6f759283bedfe6fe62c73b76e8f2649d599dec74b450f0d301d842fbd", 0x91}, {&(0x7f00000001c0)="d5", 0x1}, {0x0}, {&(0x7f0000000280)="94", 0x1}], 0x4}, 0x8) 22:41:51 executing program 2: pipe2(&(0x7f0000006c00)={0xffffffffffffffff}, 0x0) bind$inet(r0, 0x0, 0x0) 22:41:51 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) 22:41:51 executing program 1: r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) [ 795.015108][T13681] index not increased! 20ffd000 <= 20ffd000 [ 795.055102][T13681] BUG at mt_find:6473 (1) [ 795.074715][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:51 executing program 0: mprotect(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0) 22:41:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003b00)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000005140)={&(0x7f0000003c80)=@in={0x2, 0x2}, 0xc, 0x0}, 0x1) 22:41:51 executing program 5: getrlimit(0x0, &(0x7f0000006600)) 22:41:51 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) recvmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 22:41:51 executing program 4: accept$unix(0xffffffffffffffff, &(0x7f00000051c0)=@abs, 0x0) 22:41:51 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) 22:41:51 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) [ 795.105245][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:51 executing program 1: semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f00000000c0)) semctl$GETALL(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000200)=""/68) 22:41:51 executing program 3: fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x7) 22:41:51 executing program 4: syz_emit_ethernet(0x72, &(0x7f0000000a80)=ANY=[@ANYBLOB="ff"], 0x0) 22:41:51 executing program 5: open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x20004b42, 0x0) chmod(&(0x7f0000001480)='./file0\x00', 0x0) fchmod(0xffffffffffffffff, 0x0) 22:41:51 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000006540)={0x0, 0x0, 0x0}, 0x0) getrlimit(0x0, &(0x7f0000006600)) [ 795.259415][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 795.435276][T13681] 0-536866815: 0000000000000000 [ 795.443047][T13681] 536866816-536870911: ffff88801cede380 [ 795.458204][T13681] 536870912-553631743: ffff88801cede0e0 [ 795.473261][T13681] 553631744-553639935: 0000000000000000 [ 795.492354][T13681] 553639936-553635839: ffff8880772027e0 [ 795.512881][T13681] 553635840-553644031: ffff888077202a80 [ 795.520337][T13681] 553644032-553648127: ffff8880266220e0 22:41:52 executing program 0: fcntl$getown(0xffffffffffffff9c, 0x5) 22:41:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003b00)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000005140)={&(0x7f0000003c80)=@in={0x2, 0x2}, 0xc, &(0x7f0000004000)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000004040)=[{0x808, 0x0, 0x0, "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"}], 0x808}, 0x0) 22:41:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000001780), 0x10, 0x0, &(0x7f0000001840)) [ 795.539845][T13681] 553648128-553652223: ffff88801cede000 [ 795.585073][T13681] 553652224-116819886079: 0000000000000000 [ 795.591311][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 795.619180][T13681] 116824080384-93825007087615: 0000000000000000 [ 795.643087][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 795.655828][T13681] 93825007226880-140323535712255: 0000000000000000 [ 795.662748][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 795.670409][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 795.729362][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 795.736814][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 795.743869][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 795.752848][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 795.760962][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 795.768471][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 795.776317][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 795.783383][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 795.790751][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 795.798134][T13681] 140323557900288-140323557904383: 0000000000000000 [ 795.805627][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 795.813900][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 795.821444][T13681] 140323558305792-140323558326271: 0000000000000000 [ 795.828794][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 795.836163][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 795.890022][T13681] 140323570171904-140323571208191: 0000000000000000 [ 795.897669][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 795.904745][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 795.913547][T13681] 140323571343360-140734793707519: 0000000000000000 [ 795.920868][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 795.928210][T13681] 140734793842688-140734795161599: 0000000000000000 [ 795.935849][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 795.942931][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 795.950592][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 795.959743][T13681] Pass: 12383869 Run:12383984 [ 795.964546][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 795.974473][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 795.984643][T13681] Call Trace: [ 795.987941][T13681] [ 795.990868][T13681] dump_stack_lvl+0xd1/0x138 [ 795.995478][T13681] mt_find.cold+0x8b/0x90 [ 795.999816][T13681] ? mas_find+0x1d0/0x1d0 [ 796.004173][T13681] find_vma+0x10c/0x1b0 [ 796.008324][T13681] ? can_vma_merge_before+0x390/0x390 [ 796.013720][T13681] ? walk_page_test+0x78/0x180 [ 796.018532][T13681] walk_page_range+0x2b1/0x4a0 [ 796.023358][T13681] ? __walk_page_range+0x780/0x780 [ 796.028503][T13681] mlock_fixup+0x650/0x810 [ 796.032972][T13681] apply_vma_lock_flags+0x23d/0x350 [ 796.038220][T13681] ? mlock_fixup+0x810/0x810 [ 796.042865][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 796.048789][T13681] do_mlock+0x25a/0x6d0 [ 796.052974][T13681] ? folio_evictable+0x270/0x270 [ 796.057944][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 796.063858][T13681] __x64_sys_mlock+0x59/0x80 [ 796.068472][T13681] do_syscall_64+0x39/0xb0 [ 796.072910][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 796.078814][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 796.083237][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 796.102877][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 796.111307][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 796.119290][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 796.127271][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 796.135250][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 22:41:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) 22:41:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000280)="94", 0x1}], 0x3}, 0x0) 22:41:52 executing program 5: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000008c0)) 22:41:52 executing program 3: writev(0xffffffffffffff9c, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) 22:41:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003b80)) 22:41:52 executing program 0: pipe2(&(0x7f00000017c0)={0xffffffffffffffff}, 0x0) fchown(r0, 0x0, 0x0) 22:41:52 executing program 1: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001300)) 22:41:52 executing program 5: fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) [ 796.143229][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 796.151226][T13681] 22:41:52 executing program 3: r0 = socket$inet6(0x18, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000180)={0x18, 0x2}, 0xc) 22:41:52 executing program 4: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 22:41:52 executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0) getrusage(0x0, &(0x7f0000000500)) 22:41:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000007c0), 0x10, 0x0, &(0x7f0000000800)) 22:41:52 executing program 3: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/103) 22:41:52 executing program 5: shmat(0x0, &(0x7f0000ff5000/0x4000)=nil, 0x0) shmdt(0x0) 22:41:52 executing program 2: r0 = socket$inet6(0x18, 0x3, 0x0) getsockname$inet6(r0, 0x0, 0x0) 22:41:52 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x7fffffff}) [ 796.302803][T13681] index not increased! 20ffd000 <= 20ffd000 [ 796.315100][T13681] BUG at mt_find:6473 (1) 22:41:52 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x0, 0x2}, 0x10) [ 796.351577][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 796.415114][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 796.501404][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003b00)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000005140)={&(0x7f0000003c80)=@in={0x2, 0x2}, 0xc, 0x0}, 0x0) 22:41:53 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 22:41:53 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000001780), 0x10, 0x0, 0x0) 22:41:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fchown(r0, 0x0, 0x0) 22:41:53 executing program 4: pipe2(&(0x7f0000000bc0)={0xffffffffffffffff}, 0x0) connect$inet6(r0, 0x0, 0x0) 22:41:53 executing program 2: socket$inet(0x2, 0x3, 0x4b) [ 796.570129][T13681] 0-536866815: 0000000000000000 22:41:53 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCCONS(r0, 0x80047462) 22:41:53 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 22:41:53 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffff9c) 22:41:53 executing program 3: fchmodat(0xffffffffffffff9c, 0x0, 0x0) [ 796.619954][T13681] 536866816-536870911: ffff88801cede380 22:41:53 executing program 4: mprotect(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) 22:41:53 executing program 1: mmap(&(0x7f0000e90000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 796.629998][T13681] 536870912-553631743: ffff88801cede0e0 [ 796.711967][T13681] 553631744-553639935: 0000000000000000 [ 796.773243][T13681] 553639936-553635839: ffff8880772027e0 [ 796.809274][T13681] 553635840-553644031: ffff888077202a80 22:41:53 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) select(0x40, &(0x7f0000000680), &(0x7f00000006c0)={0x10000057e}, 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x8}, 0x0, 0x0) 22:41:53 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, @val, {@ipv4}}, 0x0) 22:41:53 executing program 3: syz_emit_ethernet(0x1fbf, &(0x7f0000000040)={@empty, @random="eebd24d0c12a", @val, {@ipv6}}, 0x0) 22:41:53 executing program 4: socket$inet(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x8}, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000140)={0xce}, 0x0) 22:41:53 executing program 1: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @remote, @val, {@ipv4}}, 0x0) 22:41:53 executing program 2: open$dir(&(0x7f0000000000)='./file1\x00', 0xa20, 0xddb9e124a12077fc) 22:41:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0xffffffffffffffd1, &(0x7f0000000200)=[{&(0x7f0000000140)="00716b07095de7aa7ffa3e8686558c6f8d2383630122b73a5389483c48158226006a8c94ce304fca834d4c54a338c32e72b57a954af24fe93553516720a82e4ea30c9366e10535249aa58cec2158c88157b2859cdf9ef804c47852eeca5a676bd0416ea586284bc39324f361ed8125d4c62ee7a02e0adb00655874d22b6c6b8ed2b14430848c4029b48d9ab242637f5d9dafaf3472218fb17ce03419106295a321857fa8c1d0dd6f0872bb51bcd9ba1c54ca67b49137b8", 0xb7}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000000000000ffff000001000000", @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYRES32, @ANYBLOB="00000010"], 0x28, 0x404}, 0x0) [ 796.822892][T13681] 553644032-553648127: ffff8880266220e0 [ 796.829013][T13681] 553648128-553652223: ffff88801cede000 22:41:53 executing program 1: socket$inet(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x8}, 0x0) 22:41:53 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 22:41:53 executing program 5: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = getuid() lchown(&(0x7f0000000000)='./file0\x00', r0, 0xffffffffffffffff) 22:41:53 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) [ 796.889028][T13681] 553652224-116819886079: 0000000000000000 [ 796.902145][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 796.909026][T13681] 116824080384-93825007087615: 0000000000000000 22:41:53 executing program 3: mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) [ 796.954801][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 796.968984][T13681] 93825007226880-140323535712255: 0000000000000000 [ 797.040285][T13681] 140323535712256-140323535716351: ffff8880208b20e0 22:41:53 executing program 0: mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 22:41:53 executing program 5: syz_emit_ethernet(0x2fbf, &(0x7f0000000040)={@remote, @broadcast, @val, {@ipv6}}, 0x0) 22:41:53 executing program 1: pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080)) 22:41:53 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 22:41:53 executing program 2: open$dir(&(0x7f00000000c0)='.\x00', 0x20, 0x0) 22:41:53 executing program 3: mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) [ 797.085329][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:41:53 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 22:41:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[], 0xa, 0x0, 0x0, &(0x7f0000000480)=[@rights, @cred], 0x30}, 0x0) 22:41:53 executing program 1: pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000d00)='E', 0x1}, {0x0}, {0x0}], 0x3) 22:41:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') 22:41:53 executing program 5: syz_emit_ethernet(0xe, &(0x7f0000000040)={@broadcast}, 0x0) 22:41:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000640)=0x8) [ 797.275650][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 797.282741][T13681] 140323544104960-140323546202111: ffff8880208b27e0 22:41:53 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = getegid() chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r0) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, r0) 22:41:53 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x811, r0, 0x0) 22:41:53 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ftruncate(r0, 0x0) 22:41:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') 22:41:53 executing program 3: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1811, 0xffffffffffffffff, 0x0) [ 797.362349][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 797.398538][T13681] 140323548299264-140323550396415: ffff8880208b28c0 22:41:54 executing program 1: open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 22:41:54 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 22:41:54 executing program 4: pipe2(&(0x7f00000017c0)={0xffffffffffffffff}, 0x0) getpeername$inet(r0, 0x0, 0x0) 22:41:54 executing program 5: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xa20, 0x0) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/167, 0xa7}], 0x1, 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 22:41:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') [ 797.467675][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 797.531336][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 797.557502][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 797.564531][T13681] 140323556835328-140323557564415: ffff8880293ab000 22:41:54 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000001040)={@local, @broadcast, @val, {@ipv4}}, 0x0) 22:41:54 executing program 1: syz_emit_ethernet(0x149, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60035d3a01130000fe8000000000000000000000000000bbff020000000000000000000000000001040190"], 0x0) [ 797.688886][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 797.715729][T13681] 140323557900288-140323557904383: 0000000000000000 [ 797.722739][T13681] 140323557904384-140323558268927: ffff888078bac0e0 22:41:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) 22:41:54 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x15) 22:41:54 executing program 5: sendto(0xffffffffffffffff, &(0x7f00000000c0)="f60d3f3b883123f96bc598be2793ad32a696635f41107afc3b0e3a1c55017d580857856c22c94e12d27ab8842b70ce892d73d04178eb5aa26274f3200d6985d95089a0e16b447cd580f12ac42f8be42bf334bcd3303ebfdcc236805d9e516c8bb2c2c8c942bbf57e3d588756e789a93b842a77486d0f5307199232dbaad182d0baa47db2fc393c3f2f475483325c86be33313816a65fde282ad5ca59147be45ed95554817f2d27015941627b2ecd8ebf24a35f7c0e57df86eb5be76b283cfdb8c4fac9935476e7e588374b8ec1e561a4513323a24fe9ec2f9488fd02f7c766e6406a61bdb89e09dc15a1e063416097e42ca391e254b9201812555133580da4b679284e02094129f0ee78a73d0ba3da1bf439edba897529efd6bec68d73601f37e3ce247f7fc5278dafde03666a55ea28958b14cb65db117a375a87256e1424a43a74dc8730506ab17bffd5234df6974f5775c060b9eba3cd848c9c4a038e06d5491475ab9ca0bba2a1889f9dc616d7379d0184f9bfb9d15b674d0f22f0d05b9a2dae98f0beada77f449ed7d718a5efeb9eb15855c7d718bc99d42bc3133e203947c9e3043724626a47157a5639db9ba00e55533408c8e23af4b23942b5a943f00819ec295e7bc916b791c8cf51befe46a73eac57bb281436f4ea0bdbffe5f5c479dd496c2a68fd4f7b6b792eec8c5213a25e6b211f751f33fe788f7505674f56fd349023c3514c340ff43ddd34035de5fcd09eb1dcc06fc9021209f009ac57d1b26cdd9d62408367965791043be81b5041fe49176ac20a8bf34a29ddc28f3eea501a5088d637c80c75dc1509f720ff3a95535c14adcc4478884d1b2b5db8c08e5c97b04891dde50f921c4ac4ddb0c0ac6cad74b7bc169cf7b0dca4f49e446fdf8f236da7c30dcca3d520d13a93bf59880dfef011db184f09f337bee4409d7f3f753f93c49944ad98aec4995a4ff76a146e049c1343f60024a1c77318a8a6664e62d71e95f0fe461f927b0920cc5fe5c71b7f615a38b283e3a9ea", 0x2da, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x10, 0x0, &(0x7f00000003c0)) 22:41:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') 22:41:54 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 22:41:54 executing program 1: syz_emit_ethernet(0x7ff, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60035d3a07c90000fe800000000000000000000000bbff02000000000000000000000002"], 0x0) 22:41:54 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) [ 797.756650][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 797.763669][T13681] 140323558305792-140323558326271: 0000000000000000 22:41:54 executing program 2: open$dir(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 22:41:54 executing program 5: stat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 22:41:54 executing program 3: setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x3}}, 0x0) 22:41:54 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x8}, 0x0) [ 797.840536][T13681] 140323558326272-140323570171903: ffff888078bac700 22:41:54 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10}], 0x10}, 0x5) [ 797.876651][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:41:54 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 22:41:54 executing program 2: setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0xfffffffffffffffd}}, 0x0) 22:41:54 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x0, 0x1012, r0, 0x0) 22:41:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x8}, 0x10) 22:41:54 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22:41:54 executing program 4: syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @empty, @val, {@ipv6}}, 0x0) [ 798.041225][T13681] 140323570171904-140323571208191: 0000000000000000 [ 798.049643][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 22:41:54 executing program 2: r0 = geteuid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x0) 22:41:54 executing program 5: syz_emit_ethernet(0x7ff, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60035d3a07c90000fe0000004100000000000000000100000000000000000003"], 0x0) 22:41:54 executing program 3: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) 22:41:54 executing program 1: mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000feb000/0x2000)=nil, 0x2000) 22:41:54 executing program 4: syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @empty, @val, {@ipv6}}, 0x0) [ 798.116255][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 798.153966][T13681] 140323571343360-140734793707519: 0000000000000000 22:41:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000080), 0x10000000000000d3, 0x0, 0x0) [ 798.191784][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 798.263993][T13681] 140734793842688-140734795161599: 0000000000000000 22:41:54 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@random="1d566525e819", @local, @val, {@ipv6}}, 0x0) 22:41:54 executing program 1: syz_emit_ethernet(0x7bf, &(0x7f0000000000)={@empty, @random="15f5c7ce2e56", @val, {@generic={0x0, "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"}}}, 0x0) 22:41:54 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) write(r0, 0x0, 0x0) 22:41:54 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 22:41:54 executing program 4: syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @empty, @val, {@ipv6}}, 0x0) 22:41:54 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffffffffffffa}) 22:41:54 executing program 1: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x101}, {0x0, 0x3}}, &(0x7f0000000140)) [ 798.310662][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 798.333913][T13681] 140734795177984-140734795186175: ffff888078bacee0 22:41:54 executing program 4: syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @empty, @val, {@ipv6}}, 0x0) 22:41:54 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0xfffffffffffffdde}, 0x0) 22:41:54 executing program 3: r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0xa20, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) 22:41:54 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 798.397726][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 798.435082][T13681] Pass: 12424570 Run:12424686 [ 798.439864][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 798.449791][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 798.459887][T13681] Call Trace: [ 798.463193][T13681] [ 798.466152][T13681] dump_stack_lvl+0xd1/0x138 [ 798.470795][T13681] mt_find.cold+0x8b/0x90 [ 798.475190][T13681] ? mas_find+0x1d0/0x1d0 [ 798.479580][T13681] find_vma+0x10c/0x1b0 [ 798.484209][T13681] ? can_vma_merge_before+0x390/0x390 [ 798.489629][T13681] ? walk_page_test+0x78/0x180 22:41:55 executing program 1: socket$inet(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000140)={0x9}, &(0x7f00000001c0)={0x9}, &(0x7f0000000200)={0x8}, 0x0) [ 798.494448][T13681] walk_page_range+0x2b1/0x4a0 [ 798.499286][T13681] ? __walk_page_range+0x780/0x780 [ 798.504474][T13681] mlock_fixup+0x650/0x810 [ 798.508965][T13681] apply_vma_lock_flags+0x23d/0x350 [ 798.514223][T13681] ? mlock_fixup+0x810/0x810 [ 798.518885][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 798.524842][T13681] do_mlock+0x25a/0x6d0 [ 798.529061][T13681] ? folio_evictable+0x270/0x270 [ 798.534068][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 798.540013][T13681] __x64_sys_mlock+0x59/0x80 [ 798.544670][T13681] do_syscall_64+0x39/0xb0 [ 798.549142][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 798.555085][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 798.559543][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 798.579193][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 798.587652][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 798.595662][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 798.603669][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 798.611682][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.619690][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 798.627716][T13681] 22:41:55 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0) 22:41:55 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 22:41:55 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @local, @val, {@ipv6}}, 0x0) 22:41:55 executing program 1: syz_emit_ethernet(0x1fbf, &(0x7f0000000100)={@random="4f663215751f", @empty, @val, {@ipv6}}, 0x0) 22:41:55 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) 22:41:55 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8) 22:41:55 executing program 2: socket(0x0, 0x0, 0x7e) 22:41:55 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f00000001c0)=[{r1, 0x4}], 0x1, 0x0) dup2(r1, r0) 22:41:55 executing program 4: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 798.721557][T13681] index not increased! 20ffd000 <= 20ffd000 [ 798.755488][T13681] BUG at mt_find:6473 (1) 22:41:55 executing program 5: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f0000000480)='./file0\x00', 0x200, 0x0) 22:41:55 executing program 1: clock_gettime(0x13, 0x0) [ 798.825397][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 798.836045][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:55 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="5184e86c4f3600000000000086dd60b321e900140000000000000055b1aa768b0000000000ffff"], 0x0) [ 798.978970][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) 22:41:55 executing program 4: utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000024c0)={{}, {0x0, 0x529bcac4}}, 0x0) 22:41:55 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCNOTTY(r0, 0x20007471) 22:41:55 executing program 1: clock_gettime(0x3a6a4754e2848d16, 0x0) 22:41:55 executing program 3: r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0xa20, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2}) 22:41:55 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 22:41:55 executing program 2: r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x609, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) [ 799.104926][T13681] 0-536866815: 0000000000000000 22:41:55 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1}, 0xc) 22:41:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002200), 0xfffffffffffffe9f, 0x0, &(0x7f0000002240)) 22:41:55 executing program 1: syz_emit_ethernet(0x1267, &(0x7f00000026c0)=ANY=[@ANYBLOB="ffffffffffffd8c4d664370586dd69ab41c412312905fe8000000000000000000000000000bbff"], 0x0) 22:41:55 executing program 4: syz_emit_ethernet(0x23bf, &(0x7f0000000040)={@remote, @broadcast, @val, {@ipv6}}, 0x0) [ 799.125933][T13681] 536866816-536870911: ffff88801cede380 [ 799.147433][T13681] 536870912-553631743: ffff88801cede0e0 22:41:55 executing program 2: syz_emit_ethernet(0x7ff, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60035d3a07c90000fe800000000000000000000000bbff0200000000f7"], 0x0) [ 799.207315][T13681] 553631744-553639935: 0000000000000000 22:41:55 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x2012, r0, 0x0) 22:41:55 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r0) 22:41:55 executing program 3: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 22:41:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x1000000000000206, 0x0, 0x0) [ 799.259587][T13681] 553639936-553635839: ffff8880772027e0 22:41:55 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) 22:41:55 executing program 4: syz_emit_ethernet(0x23bf, &(0x7f0000000040)={@empty, @random="eebd24d0c12a", @val, {@ipv6}}, 0x0) 22:41:55 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 22:41:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000a80), 0x4) [ 799.303948][T13681] 553635840-553644031: ffff888077202a80 [ 799.354786][T13681] 553644032-553648127: ffff8880266220e0 [ 799.403133][T13681] 553648128-553652223: ffff88801cede000 [ 799.440650][T13681] 553652224-116819886079: 0000000000000000 [ 799.458584][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 799.467648][T13681] 116824080384-93825007087615: 0000000000000000 [ 799.475899][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 799.483025][T13681] 93825007226880-140323535712255: 0000000000000000 [ 799.491053][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 799.510614][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 799.588427][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 799.598968][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 799.606436][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 799.613480][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 799.621926][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 799.631426][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 799.638902][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 799.646313][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 799.653353][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 799.660591][T13681] 140323557900288-140323557904383: 0000000000000000 [ 799.667865][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 799.675034][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 799.682108][T13681] 140323558305792-140323558326271: 0000000000000000 [ 799.689192][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 799.705026][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 799.758135][T13681] 140323570171904-140323571208191: 0000000000000000 [ 799.765370][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 799.772432][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 799.780145][T13681] 140323571343360-140734793707519: 0000000000000000 [ 799.787339][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 799.794389][T13681] 140734793842688-140734795161599: 0000000000000000 [ 799.802563][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 799.810831][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 799.818022][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 799.825597][T13681] Pass: 12451838 Run:12451955 [ 799.830393][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 799.840312][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 799.850373][T13681] Call Trace: [ 799.853650][T13681] [ 799.857009][T13681] dump_stack_lvl+0xd1/0x138 [ 799.861622][T13681] mt_find.cold+0x8b/0x90 [ 799.865962][T13681] ? mas_find+0x1d0/0x1d0 [ 799.870301][T13681] find_vma+0x10c/0x1b0 [ 799.874463][T13681] ? can_vma_merge_before+0x390/0x390 [ 799.879838][T13681] ? walk_page_test+0x78/0x180 [ 799.884608][T13681] walk_page_range+0x2b1/0x4a0 [ 799.889392][T13681] ? __walk_page_range+0x780/0x780 [ 799.894543][T13681] mlock_fixup+0x650/0x810 [ 799.899007][T13681] apply_vma_lock_flags+0x23d/0x350 [ 799.904251][T13681] ? mlock_fixup+0x810/0x810 [ 799.908896][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 799.914833][T13681] do_mlock+0x25a/0x6d0 [ 799.919033][T13681] ? folio_evictable+0x270/0x270 [ 799.924005][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 799.929916][T13681] __x64_sys_mlock+0x59/0x80 [ 799.934527][T13681] do_syscall_64+0x39/0xb0 [ 799.938961][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 799.944868][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 799.949294][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 799.968910][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 799.977332][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 22:41:56 executing program 5: mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ff0000/0x2000)=nil, 0x2000) 22:41:56 executing program 1: socket$inet(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000680), &(0x7f00000006c0)={0x57e}, 0x0, 0x0) select(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x8}, 0x0) 22:41:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r0, 0x6, 0x0) 22:41:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) listen(r0, 0x0) 22:41:56 executing program 3: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 22:41:56 executing program 0: r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x609, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa010, r0, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) [ 799.985308][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 799.993282][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 800.001269][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.009268][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 800.017284][T13681] [ 800.028638][T13681] index not increased! 20ffd000 <= 20ffd000 [ 800.034601][T13681] BUG at mt_find:6473 (1) [ 800.044088][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:56 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) select(0x40, &(0x7f0000000680), &(0x7f00000006c0)={0x10000057e}, 0x0, 0x0) 22:41:56 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv4}}, 0x0) 22:41:56 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000040)=0xff07) 22:41:56 executing program 5: syz_emit_ethernet(0x7ff, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60035d3a07c90000fe8000000000000000070b5b179ce78014"], 0x0) [ 800.084011][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:56 executing program 2: msgget(0x3, 0x354) 22:41:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x40) 22:41:56 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000000)=""/40) [ 800.179820][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 800.327052][T13681] 0-536866815: 0000000000000000 [ 800.333098][T13681] 536866816-536870911: ffff88801cede380 [ 800.360845][T13681] 536870912-553631743: ffff88801cede0e0 [ 800.371028][T13681] 553631744-553639935: 0000000000000000 [ 800.377296][T13681] 553639936-553635839: ffff8880772027e0 [ 800.383354][T13681] 553635840-553644031: ffff888077202a80 [ 800.405181][T13681] 553644032-553648127: ffff8880266220e0 [ 800.411315][T13681] 553648128-553652223: ffff88801cede000 [ 800.419737][T13681] 553652224-116819886079: 0000000000000000 [ 800.426441][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 800.433055][T13681] 116824080384-93825007087615: 0000000000000000 [ 800.440119][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 800.447104][T13681] 93825007226880-140323535712255: 0000000000000000 [ 800.454058][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 800.461209][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 800.518063][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 800.533161][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 800.540311][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 800.547745][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 800.554833][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 800.562110][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 800.569297][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 800.576471][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 800.583520][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 800.590628][T13681] 140323557900288-140323557904383: 0000000000000000 [ 800.597713][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 800.604702][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 800.611800][T13681] 140323558305792-140323558326271: 0000000000000000 [ 800.618869][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 800.628438][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 800.678693][T13681] 140323570171904-140323571208191: 0000000000000000 [ 800.685753][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 800.692732][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 800.699810][T13681] 140323571343360-140734793707519: 0000000000000000 [ 800.706859][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 800.713833][T13681] 140734793842688-140734795161599: 0000000000000000 [ 800.720902][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 800.728650][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 800.738133][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 800.745729][T13681] Pass: 12457762 Run:12457880 [ 800.750443][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 800.760353][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 800.770408][T13681] Call Trace: [ 800.773702][T13681] [ 800.776656][T13681] dump_stack_lvl+0xd1/0x138 [ 800.781295][T13681] mt_find.cold+0x8b/0x90 [ 800.785628][T13681] ? mas_find+0x1d0/0x1d0 [ 800.789965][T13681] find_vma+0x10c/0x1b0 [ 800.794133][T13681] ? can_vma_merge_before+0x390/0x390 [ 800.799504][T13681] ? walk_page_test+0x78/0x180 [ 800.804285][T13681] walk_page_range+0x2b1/0x4a0 [ 800.809073][T13681] ? __walk_page_range+0x780/0x780 [ 800.814247][T13681] mlock_fixup+0x650/0x810 [ 800.818723][T13681] apply_vma_lock_flags+0x23d/0x350 [ 800.823960][T13681] ? mlock_fixup+0x810/0x810 [ 800.828574][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 800.834495][T13681] do_mlock+0x25a/0x6d0 [ 800.838730][T13681] ? folio_evictable+0x270/0x270 [ 800.843697][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 800.849634][T13681] __x64_sys_mlock+0x59/0x80 [ 800.854259][T13681] do_syscall_64+0x39/0xb0 [ 800.858704][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 800.864619][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 800.869044][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 800.888665][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 800.897094][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 800.905076][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 800.913056][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 800.921048][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 22:41:57 executing program 1: semget(0x1, 0x2, 0x101) 22:41:57 executing program 2: semget(0x3, 0x4, 0x50) 22:41:57 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) fchmod(r0, 0x0) 22:41:57 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @broadcast, @val, {@ipv6}}, 0x0) 22:41:57 executing program 4: semget(0x2, 0x3, 0x80) 22:41:57 executing program 0: r0 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) [ 800.929038][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 800.937037][T13681] [ 800.945059][T13681] index not increased! 20ffd000 <= 20ffd000 [ 800.951019][T13681] BUG at mt_find:6473 (1) 22:41:57 executing program 4: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f0000000000)=[{0xe389c9b3260224b3}], 0x1) 22:41:57 executing program 2: semget$private(0x0, 0x2, 0x1aa) 22:41:57 executing program 5: msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000200)=""/4096) 22:41:57 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x28) 22:41:57 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000000)=""/98) [ 801.025051][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:41:57 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r0, 0x0, 0x0) 22:41:57 executing program 0: semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000000)=""/66) [ 801.085271][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:41:57 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000000)=""/238) 22:41:57 executing program 4: semget$private(0x0, 0x3, 0x1a) 22:41:57 executing program 3: semget$private(0x0, 0x2, 0xb8) 22:41:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x50, 0x0, 0x0) 22:41:57 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r0, 0x0, 0x66) 22:41:57 executing program 5: semget$private(0x0, 0x1, 0x261) 22:41:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000007800)={0x0, 0x0, 0x0, 0xffffffffffffff22}, 0x0) 22:41:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x101) 22:41:57 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) 22:41:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001500)) 22:41:57 executing program 0: semget$private(0x0, 0x3, 0x11) 22:41:57 executing program 4: shmget(0x2, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 22:41:57 executing program 5: pselect6(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x0) 22:41:57 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000380)={0x0}) [ 801.404989][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:41:58 executing program 1: semget$private(0x0, 0x3, 0x191) 22:41:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f00000000c0)) 22:41:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x43) 22:41:58 executing program 5: r0 = epoll_create(0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 22:41:58 executing program 3: r0 = msgget(0x2, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001100)=""/40) 22:41:58 executing program 2: r0 = msgget(0x2, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002040)={{0x1, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 22:41:58 executing program 1: semget(0x1, 0x2, 0x110) [ 801.571727][T13681] 0-536866815: 0000000000000000 22:41:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002600)={0x0, 0x0, 0x0}, 0xc000) 22:41:58 executing program 2: semget$private(0x0, 0x2, 0x22) 22:41:58 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) getpgrp(r1) [ 801.615516][T13681] 536866816-536870911: ffff88801cede380 22:41:58 executing program 3: r0 = syz_io_uring_setup(0x496a, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0x8000000) 22:41:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140), &(0x7f0000000040)=0xfffffffffffffd83) 22:41:58 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 22:41:58 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000009640)='ns/user\x00') [ 801.670436][T13681] 536870912-553631743: ffff88801cede0e0 [ 801.699432][T13681] 553631744-553639935: 0000000000000000 22:41:58 executing program 0: semget(0x3, 0x0, 0x708) 22:41:58 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) [ 801.749432][T13681] 553639936-553635839: ffff8880772027e0 22:41:58 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF(r0, 0x5404, 0x0) 22:41:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 801.808554][T13681] 553635840-553644031: ffff888077202a80 [ 801.814537][T13681] 553644032-553648127: ffff8880266220e0 22:41:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x8054) 22:41:58 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 22:41:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000007800)={0x0, 0x0, 0x0}, 0x0) [ 801.852193][T13681] 553648128-553652223: ffff88801cede000 22:41:58 executing program 3: r0 = epoll_create1(0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 22:41:58 executing program 1: pselect6(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280)={0xa82e}, 0x0, 0x0) 22:41:58 executing program 2: msgsnd(0x0, &(0x7f0000000300)=ANY=[], 0x41, 0x0) [ 801.913625][T13681] 553652224-116819886079: 0000000000000000 22:41:58 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$yama_ptrace_scope(r0, 0x0, 0x0) 22:41:58 executing program 4: r0 = msgget(0x2, 0x0) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/193) [ 801.974771][T13681] 116819886080-116824080383: ffff88801cede2a0 22:41:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000540)=[{&(0x7f00000000c0)="0b8a80858a38ab05b8431a657db5a9486d68c477ce92c6df81a7000167cca37541fe526692", 0x25}, {&(0x7f0000000180)="7dbd55b4055ac194ee8ce55f96fd8cfaef56cb91c8c703cc08122aa6798794e2866836480b22277dce35a04d75562b34faab00facabf39687b7732009ac3062022a06c0f45ca732b4f2d9b64349092554fa822324434e7190d8b327cfdcdbafb78264ab5becc66f7ff6b44e503256d8a55c7", 0x72}, {&(0x7f0000000200)="cd491204b88042fb08c6705a1eed9d1aa7db4ddb2b85ea86100883c6da9a2d6bb279495b5572345735c735602db1f3cc6b81024da69431c4cc929adf9217c68881823f39f162dfa57cd90ff81725094ed8ec050350d1613f34fb36ff2a95a75e67347609b65a7f382dca1d83b67eaa78994873a691bfc1ad843a2ef47e1c2b2c4b21280fe8ab", 0x86}, {&(0x7f00000002c0)="ca3fe12342ae2d1e54a1c8f723894c31ea6c6508a5d0c9991cb5e82cb32586734fd7917a5d0bce9c3b92b8e19ae06d1e3c4c85f6fef24737302912b0b85fd1a096a00e03ca8dde203de7382ca0a20b01724a6b60257be40dbd73fd0fbf0933a042b79b4fd24fe6a02d7f521a59bbdf3c7281facb", 0x74}], 0x4, &(0x7f00000005c0)=[@cred], 0x20}, 0x6) 22:41:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) 22:41:58 executing program 5: open$dir(&(0x7f0000000080)='./file0\x00', 0x840, 0x0) 22:41:58 executing program 1: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) 22:41:58 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1c34c1, 0x0) 22:41:58 executing program 4: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300) [ 802.096160][T13681] 116824080384-93825007087615: 0000000000000000 [ 802.117720][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 802.127437][T13681] 93825007226880-140323535712255: 0000000000000000 22:41:58 executing program 4: socket(0x0, 0x10000000, 0x5) 22:41:58 executing program 3: pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) accept$inet(r0, 0x0, 0x0) 22:41:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x200) [ 802.169590][T13681] 140323535712256-140323535716351: ffff8880208b20e0 22:41:58 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt(r0, 0x0, 0x0, &(0x7f0000000340)=""/52, &(0x7f0000000380)=0x34) 22:41:58 executing program 4: semget$private(0x0, 0x2, 0x0) r0 = semget(0x0, 0x7, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) semget(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 22:41:58 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) [ 802.207354][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:41:58 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) dup(r1) 22:41:58 executing program 3: mknod$loop(&(0x7f00000009c0)='./file0\x00', 0x0, 0x0) 22:41:58 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) acct(&(0x7f0000000280)='./file0\x00') 22:41:58 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 22:41:58 executing program 5: pipe2(&(0x7f00000005c0), 0x0) 22:41:58 executing program 4: syz_clone(0x20308100, 0x0, 0x0, 0x0, 0x0, 0x0) 22:41:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)) 22:41:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x8000000}]}}, &(0x7f00000000c0)=""/150, 0x26, 0x96, 0x1}, 0x20) 22:41:58 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="f6751869931b14d43900ce8ac2537129c9e87df4b30a3c40a7baaaa6cafad281e1bb774e4387b6dd4c95c3d921f9a61d722a93657f0f78c994e1a85339b44b257e5d49f240182104b5fcae66b2b39fdce2fea3e5f4ec91d634c867c8f2857a19c6c70608bcb2", 0x66}, {&(0x7f0000000100)="a01a1e54cb7cfe3e41b6de0631e2fae5992def00e73493d35397596e985fc92c6ec92f1f66660c190520d0c33c0dc41f24b633fab1f299108b7c52a64fa3fce7", 0x40}, {&(0x7f0000000140)="9f98ccd2425999317dbbf3d92287ef98d60ab242b691cc65b449d574a6ad1fb534a60d7a7b570260daba8a8054e3d5dd50b6b0abc06d7edea4d34bf715c09c3f4dc05bedad462395a241e2d2f2d770080274bf7171b9f90a9393307646ebcf5ce6536ec2368ce2e611cf10fd713a8f680a6b8e5bcdf9c4a9449005490f41f7b94f8e4f3d24584d34fc35575a1d28065cc3ee3e606e6ce631d0b422ce010e3a5eb7e2394f4ab6fac28af5c8b147bed8a43be4af90ccc91f9fa9e2cbebc2633041ed7a498d480ab4773df4dbcd55de1bce2ca54ff9dd894346ddf2f48f879759fec11db481c06bb72856859e8f97b5", 0xee}, {&(0x7f0000000300)="592ea1d0a2ff7ca0177276bf8a487cdad97ddb254ae213b09d7a7a21a03ff15739ddbf4b28678ff0fcb00ae87267a5fe073c46463dce5797536d7c1c0ef21cadabbd5271dbf3f9e02e114ca28b396c628eded6de47e11c3d87216937a5725db3265cbd2f37c883eaf861efabed1fdc94bae1a41e52d9c827d76fe4988cc81cfd7bc7d7523c7c968fb9c74c191c5d81c871e3d88c64d8b61b7ebb0a4f8942be16f5cccd080cfef60ab50ab97585c4e41fc9a5bc89d0af40ca08218787899045ccac4930c463208ddd9eca02b116499bf7ad0e797849bed2a9e62273a56d09fa3bbffc2b49c059f8fef3d1286218b73cc7d3c2c12371", 0xf5}, {&(0x7f0000000400)="56bb887030ea93b20c4233df095ef840788a548c461c6d65943610a07488f36831eda63f27533b0254f344a22b529fc643aaba1a3cbe94bdd3381b0002076ec1d2f695a41561688c339a0f9add973ceff71c9aeae6", 0x55}, {&(0x7f0000000480)="13b8d65791abb736eef3307058bf341e5527ee615b9a886ce18309f3b89311f57ff99e17c969453fded283769a85f5e646fc9836eab88e11fc4c1591b841fcc30bf6422e549c5650193a1b30effaae37791ca4450a437d8a6776d1caecc98f7f71e379132ba1a138ed87fd90e68dc758de3b167583da43d3fa7f677257e676993b6f7f", 0x83}, {&(0x7f0000000540)="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", 0xb60}], 0x7}, 0x0) 22:41:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x841) 22:41:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1b, 0x0, 0x16, 0x0, 0x0, 0x1}, 0x48) 22:41:59 executing program 3: syz_clone(0x40000000, &(0x7f0000000400), 0x0, 0x0, 0x0, &(0x7f00000004c0)) [ 802.583456][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 802.621643][T13681] 140323544104960-140323546202111: ffff8880208b27e0 22:41:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) 22:41:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) 22:41:59 executing program 5: bpf$MAP_CREATE(0x12, &(0x7f0000000ac0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 802.659188][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 802.708561][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 802.737582][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 802.744623][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 802.769150][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 802.778415][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 802.791088][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 802.805127][T13681] 140323557900288-140323557904383: 0000000000000000 [ 802.813147][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 802.822801][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 802.837911][T13681] 140323558305792-140323558326271: 0000000000000000 [ 802.851824][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 802.860971][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:41:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) close(r0) 22:41:59 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') close(r0) 22:41:59 executing program 1: bpf$MAP_CREATE(0x2, 0x0, 0xb) 22:41:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) 22:41:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x0, 0x0, 0x0, 0x0, 0x18, 0x1}, 0x48) 22:41:59 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, r0}, 0x38) [ 802.913750][T13681] 140323570171904-140323571208191: 0000000000000000 [ 802.921745][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 802.935153][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 802.942173][T13681] 140323571343360-140734793707519: 0000000000000000 [ 802.956449][T13681] 140734793707520-140734793842687: ffff888078bac7e0 22:41:59 executing program 1: bpf$MAP_CREATE(0x23, &(0x7f0000000ac0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 802.963800][T13681] 140734793842688-140734795161599: 0000000000000000 [ 802.971453][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 802.995066][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 803.002362][T13681] 140734795186176-18446744073709551615: 0000000000000000 22:41:59 executing program 1: syz_clone(0x1c2000, 0x0, 0x0, 0x0, 0x0, 0x0) 22:41:59 executing program 4: syz_clone(0xa8020000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="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") [ 803.022939][T13681] Pass: 12497243 Run:12497362 22:41:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:41:59 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f0000000740)=""/153, 0x2a, 0x99, 0x1}, 0x20) [ 803.051545][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 803.061519][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 803.071615][T13681] Call Trace: [ 803.074912][T13681] [ 803.077871][T13681] dump_stack_lvl+0xd1/0x138 [ 803.082517][T13681] mt_find.cold+0x8b/0x90 [ 803.086908][T13681] ? mas_find+0x1d0/0x1d0 [ 803.091295][T13681] find_vma+0x10c/0x1b0 [ 803.095497][T13681] ? can_vma_merge_before+0x390/0x390 [ 803.100917][T13681] ? walk_page_test+0x78/0x180 [ 803.105754][T13681] walk_page_range+0x2b1/0x4a0 [ 803.110562][T13681] ? __walk_page_range+0x780/0x780 [ 803.115708][T13681] mlock_fixup+0x650/0x810 [ 803.120156][T13681] apply_vma_lock_flags+0x23d/0x350 [ 803.125379][T13681] ? mlock_fixup+0x810/0x810 [ 803.130000][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 803.135913][T13681] do_mlock+0x25a/0x6d0 [ 803.140094][T13681] ? folio_evictable+0x270/0x270 [ 803.145063][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 803.150971][T13681] __x64_sys_mlock+0x59/0x80 [ 803.155586][T13681] do_syscall_64+0x39/0xb0 [ 803.160029][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 803.165933][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 803.170363][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 803.189983][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 803.198411][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 803.206476][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 803.214452][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 803.222427][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.230401][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 803.238397][T13681] 22:41:59 executing program 2: socketpair(0x2, 0x0, 0x0, &(0x7f0000000540)) 22:41:59 executing program 3: syz_clone(0x2ea00000, 0x0, 0x0, 0x0, 0x0, 0x0) 22:41:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x16, 0x0, 0x3f, 0x3}, 0x48) 22:41:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 22:41:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 22:42:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)="04", &(0x7f0000000400), 0x8, r0}, 0x38) 22:42:00 executing program 5: syz_clone(0x0, &(0x7f0000000100)="89ba7d7b700e972bcde41762e69ef695cbc7ce924180cef167d858430c3d2c26474bdd0e2915a07a83d04e94664594ecad7390b9b2d1c9aaecf308ee8e931c3babc4178a99bbea5df9f4b0fe2fbf1a49883fed5ba42cdaf4b00200d49031d5ffffffff", 0x63, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = syz_clone(0x10000000, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000ac0), 0x0) syz_open_procfs$namespace(r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000080)='ns/time_for_children\x00'}, 0x30) 22:42:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'netpci0\x00'}) 22:42:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x28, 0x0}, 0x2002) 22:42:00 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)="60b440f2205aed94be4012377fcb55b28a5f38c0110f58af6c58b4eda70a1dc625e251f141081fde65077051d4af88dcfdc87d6057aaa2a60de1a484582740a6703075b88f0a691ca1ede5f246d27f3a12", 0x0}, 0x38) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)}, 0x10) 22:42:00 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="090490c67fa5eb9996ff3ac375a255b209e454662239fdd63cf3badb42a70b14c633db3abe364dc8fdfffc8d39995468109544a768d475a704b49148f015a597ff334a55cdfbe10f29bcbe6f11cf2b4cc3745be29e37b0ea30ca6e5bf505370bf81ae53218594c85e282c7ae464595b4f289daca108201968c230cab69c95d3201134f0704d8d85e46d21870ecb1812aad55aa36a8205cc37cf5198a1ad3019467fc950244c0d1cb572da6ff97c80960c4f29c5ac42bc3b0b37fe7eb44bdd050ae73d1f909adc6109cba5d4e91151b61e91b25c687e775b940cccbef5d5000f0369e15b8bcf31e", 0xe7}, {&(0x7f0000000180)="999df447b991b576995ed2b413f67d3f56ad72de8001d28f3058fbcec0d32d09a1e730ce5b52014ca0e2528d1f6758ee0aef2c32a13efaa4a0342b7c00161b92596bc354c01dc20d530a4dc4fc9148c57c61fdf25cf26bd899ae597d2f1a2aed4e8d457eb208e20221b82f6bb0ebd28486734e6eebb2148b410582b4247b371fffd559c441f1581dece8b57ea8ced44238bb37d0ff8eeffe04e4705f8f9f311aa7b99d051ab3cf6792529824bfa857ced74df8ec7baf87aae9bb8d70507e9369488c632064ca7dbe384d0063fe4aa92e759182cdfcb3aa9ad3d731e234d94c633b76c708d77bcb100aa6c9cc5a570c41fcbb", 0xf2}, {&(0x7f0000000280)="f262818e8017415430be23359eb95a30922975ab0370be558a3607c51304f7ccee240e45faf53dcf17043b213d688165128b71d5e129c78a1b9fc442794816d0b8470f13f900641e03c1f8884075f95f2d4ec15b1a41b851d2b0f704fb1f8971faaae33b48acf2b8d6ba5b3baf2bbfaae80755e0711c570aba83f20ac9f63c66bb0d73c8a15d1a0547ea0c48fb15a320f49669f2643e808b616ef1fa417c64d9082533", 0xa3}, {&(0x7f0000000340)="0246a5ced0d071558c38102333a56cb9e5079453c36297cf439d1ae71abc", 0x1e}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="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", 0xc27}], 0x6}, 0x0) 22:42:00 executing program 5: syz_clone(0x0, &(0x7f0000000100)="89ba7d7b700e972bcde41762e69ef695cbc7ce924180cef167d858430c3d2c26474bdd0e2915a07a83d04e94664594ecad7390b9b2d1c9aaecf308ee8e931c3babc4178a99bbea5df9f4b0fe2fbf1a49883fed5ba42cdaf4b00200d49031d5ffffffff", 0x63, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = syz_clone(0x10000000, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000ac0), 0x0) syz_open_procfs$namespace(r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000080)='ns/time_for_children\x00'}, 0x30) 22:42:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x800, 0x81, &(0x7f0000000600)=""/129, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:42:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x0, 0x0, 0x0, 0x7}, 0x48) 22:42:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 22:42:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x1ff}, 0x48) 22:42:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) 22:42:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000014c0), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 22:42:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x5452, &(0x7f0000000900)) 22:42:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1}) close(r0) [ 803.928382][T13681] index not increased! 20ffd000 <= 20ffd000 [ 803.934351][T13681] BUG at mt_find:6473 (1) [ 803.990970][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 804.035004][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 804.135103][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 804.224086][T13681] 0-536866815: 0000000000000000 [ 804.245091][T13681] 536866816-536870911: ffff88801cede380 [ 804.265994][T13681] 536870912-553631743: ffff88801cede0e0 [ 804.285033][T13681] 553631744-553639935: 0000000000000000 [ 804.326526][T13681] 553639936-553635839: ffff8880772027e0 [ 804.355472][T13681] 553635840-553644031: ffff888077202a80 [ 804.378464][T13681] 553644032-553648127: ffff8880266220e0 [ 804.391254][T13681] 553648128-553652223: ffff88801cede000 [ 804.404270][T13681] 553652224-116819886079: 0000000000000000 [ 804.416075][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 804.427350][T13681] 116824080384-93825007087615: 0000000000000000 [ 804.437565][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 804.447847][T13681] 93825007226880-140323535712255: 0000000000000000 [ 804.462072][T13681] 140323535712256-140323535716351: ffff8880208b20e0 22:42:01 executing program 1: syz_clone(0x800800, 0xffffffffffffffff, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) syz_clone(0x40000000, &(0x7f0000000400)="ca601d6ccda3f24f452187cd87bf9d2bdc86b33af7d328ad76a6e6200acc595e11ce907e256bdfa7ec7f2af425ecd872a608ba4b4d1c1f48", 0x38, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="bccdfea1f29a9407bcd5aeb89d3821a69f1ad23c9c74ae1a89e11653ab87ff622364b372d763546b7dff36486e9df69c4a07bfdd644a2e6b20ec07b2560f0f0b1904c480d35190df3efb92791cc010758dcfabafd5b65fac1a7a438cbef6f6c410d32179242b9c2dff3e750a3b") r0 = syz_clone(0x0, &(0x7f0000000180), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) syz_open_procfs$namespace(r0, 0x0) 22:42:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1b, 0x0, 0x0, 0x8000000, 0x0, 0x1}, 0x48) 22:42:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 22:42:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0) 22:42:01 executing program 5: syz_clone(0x0, &(0x7f0000000100)="89ba7d7b700e972bcde41762e69ef695cbc7ce924180cef167d858430c3d2c26474bdd0e2915a07a83d04e94664594ecad7390b9b2d1c9aaecf308ee8e931c3babc4178a99bbea5df9f4b0fe2fbf1a49883fed5ba42cdaf4b00200d49031d5ffffffff", 0x63, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = syz_clone(0x10000000, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000ac0), 0x0) syz_open_procfs$namespace(r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000080)='ns/time_for_children\x00'}, 0x30) 22:42:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040)}, 0x20) [ 804.477133][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:42:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xb, 0x0, 0x0, 0x3}, 0x48) 22:42:01 executing program 3: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:42:01 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 804.704994][T13681] 140323535716352-140323544104959: ffff8880208b2620 22:42:01 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000740)=""/153, 0x2e, 0x99, 0x1}, 0x20) [ 804.773638][T13681] 140323544104960-140323546202111: ffff8880208b27e0 22:42:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r0}, 0x10) [ 804.844934][T13681] 140323546202112-140323548299263: ffff8880208b2700 22:42:01 executing program 2: syz_clone(0x40000000, &(0x7f0000000400), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="bccdfea1f29a9407bcd5aeb89d3821a69f1ad23c9c74ae1a89e11653ab87ff622364b372d763546b7dff36486e9df69c4a07bfdd644a2e6b20ec07b2560f0f0b1904c480d35190df3efb92791cc010758dcfabaf") syz_clone(0x0, &(0x7f0000000180)="e6e741b9ee3456e8c4052a5b530a3d0e1afc0f8fa7e83444e4921e67401c0137deefdb035b64ead431008b358256a26be6b0771aa8622b6919de2fcc51f7cb2bdde8e67bb398a03b2132bee6a26145336ecc707faf8fd2c0dc8da992a0871abc4e5b414903cdb8b200812e3633c220fec8e03676803056469745a8180b8526907b25a2a2921c4844fead2502648221d02ddf5cb640f3c3350357ef2ed63896edb2ebed4396ce2393ac", 0xa9, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="af98d08adadc3a4d2232212bca832e3251cddff8aa1400658945d1e59729d349ad6583d585cee6bd52c95efebc3dc3ee3285268b5feba49a6261") [ 804.889406][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 804.962846][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 805.010727][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 805.099416][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 805.180120][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 805.231129][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 805.277812][T13681] 140323557900288-140323557904383: 0000000000000000 [ 805.284838][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 805.398302][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 805.464977][T13681] 140323558305792-140323558326271: 0000000000000000 [ 805.472039][T13681] 140323558326272-140323570171903: ffff888078bac700 22:42:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@generic={0x23}, @func]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 805.549449][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 805.715068][T13681] 140323570171904-140323571208191: 0000000000000000 [ 805.722238][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 805.729666][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 805.737523][T13681] 140323571343360-140734793707519: 0000000000000000 [ 805.746522][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 805.753527][T13681] 140734793842688-140734795161599: 0000000000000000 [ 805.765060][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 805.772071][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 805.779855][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 805.788272][T13681] Pass: 12570336 Run:12570456 [ 805.793000][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 805.802931][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 805.813114][T13681] Call Trace: [ 805.816431][T13681] [ 805.819395][T13681] dump_stack_lvl+0xd1/0x138 [ 805.824043][T13681] mt_find.cold+0x8b/0x90 [ 805.828435][T13681] ? mas_find+0x1d0/0x1d0 [ 805.832833][T13681] find_vma+0x10c/0x1b0 [ 805.837038][T13681] ? can_vma_merge_before+0x390/0x390 [ 805.842459][T13681] ? walk_page_test+0x78/0x180 [ 805.847277][T13681] walk_page_range+0x2b1/0x4a0 [ 805.852101][T13681] ? __walk_page_range+0x780/0x780 [ 805.857284][T13681] mlock_fixup+0x650/0x810 [ 805.861766][T13681] apply_vma_lock_flags+0x23d/0x350 [ 805.867025][T13681] ? mlock_fixup+0x810/0x810 [ 805.871677][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 805.877617][T13681] do_mlock+0x25a/0x6d0 [ 805.881822][T13681] ? folio_evictable+0x270/0x270 [ 805.886822][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 805.892760][T13681] __x64_sys_mlock+0x59/0x80 [ 805.897408][T13681] do_syscall_64+0x39/0xb0 [ 805.901877][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 805.907814][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 805.912264][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 805.931982][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 805.940449][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 805.948477][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 805.956488][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 805.964510][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.972523][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 805.980559][T13681] [ 806.045052][T13681] index not increased! 20ffd000 <= 20ffd000 [ 806.054982][T13681] BUG at mt_find:6473 (1) [ 806.105009][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 806.120139][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 806.264978][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 806.454989][T13681] 0-536866815: 0000000000000000 [ 806.474930][T13681] 536866816-536870911: ffff88801cede380 [ 806.480932][T13681] 536870912-553631743: ffff88801cede0e0 [ 806.525027][T13681] 553631744-553639935: 0000000000000000 [ 806.531009][T13681] 553639936-553635839: ffff8880772027e0 [ 806.565198][T13681] 553635840-553644031: ffff888077202a80 [ 806.571192][T13681] 553644032-553648127: ffff8880266220e0 [ 806.608600][T13681] 553648128-553652223: ffff88801cede000 [ 806.614581][T13681] 553652224-116819886079: 0000000000000000 [ 806.664743][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 806.700685][T13681] 116824080384-93825007087615: 0000000000000000 [ 806.745375][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 806.752228][T13681] 93825007226880-140323535712255: 0000000000000000 [ 806.815723][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 806.822753][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 807.075170][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 807.082210][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 807.120408][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 807.146954][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 807.175808][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 807.203054][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 807.233688][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 807.261095][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 807.288621][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 807.326188][T13681] 140323557900288-140323557904383: 0000000000000000 [ 807.359081][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 807.393475][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 807.426480][T13681] 140323558305792-140323558326271: 0000000000000000 [ 807.459339][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 807.495801][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 807.715528][T13681] 140323570171904-140323571208191: 0000000000000000 [ 807.722565][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 807.765144][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 807.772184][T13681] 140323571343360-140734793707519: 0000000000000000 [ 807.815009][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 807.822073][T13681] 140734793842688-140734795161599: 0000000000000000 [ 807.864977][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 807.871997][T13681] 140734795177984-140734795186175: ffff888078bacee0 22:42:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0xc, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 22:42:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) 22:42:04 executing program 3: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:42:04 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) 22:42:04 executing program 5: syz_clone(0x0, &(0x7f0000000100)="89ba7d7b700e972bcde41762e69ef695cbc7ce924180cef167d858430c3d2c26474bdd0e2915a07a83d04e94664594ecad7390b9b2d1c9aaecf308ee8e931c3babc4178a99bbea5df9f4b0fe2fbf1a49883fed5ba42cdaf4b00200d49031d5ffffffff", 0x63, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = syz_clone(0x10000000, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000ac0), 0x0) syz_open_procfs$namespace(r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000080)='ns/time_for_children\x00'}, 0x30) 22:42:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 807.915139][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 807.979227][T13681] Pass: 12601627 Run:12601748 [ 807.983974][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 807.993905][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 808.003998][T13681] Call Trace: [ 808.007304][T13681] [ 808.010271][T13681] dump_stack_lvl+0xd1/0x138 [ 808.014921][T13681] mt_find.cold+0x8b/0x90 [ 808.019307][T13681] ? mas_find+0x1d0/0x1d0 [ 808.023718][T13681] find_vma+0x10c/0x1b0 22:42:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) [ 808.027928][T13681] ? can_vma_merge_before+0x390/0x390 [ 808.033346][T13681] ? walk_page_test+0x78/0x180 [ 808.038165][T13681] walk_page_range+0x2b1/0x4a0 [ 808.042993][T13681] ? __walk_page_range+0x780/0x780 [ 808.048178][T13681] mlock_fixup+0x650/0x810 [ 808.052665][T13681] apply_vma_lock_flags+0x23d/0x350 [ 808.058318][T13681] ? mlock_fixup+0x810/0x810 [ 808.062983][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 808.068942][T13681] do_mlock+0x25a/0x6d0 [ 808.073162][T13681] ? folio_evictable+0x270/0x270 22:42:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, &(0x7f0000000ac0)=""/4096, &(0x7f0000000080), &(0x7f0000000640)="4925b56df5c46e527b2e1004eab12890747a3024f3ab1d0adf24412bcfd57765e42649277079e66fd8e6f398766d", 0xfff, r0}, 0x38) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x20, 0x6}, 0x14) [ 808.078172][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 808.084131][T13681] __x64_sys_mlock+0x59/0x80 [ 808.088786][T13681] do_syscall_64+0x39/0xb0 [ 808.093262][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 808.099209][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 808.103667][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 22:42:04 executing program 4: syz_clone(0x91245080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 808.123323][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 808.131781][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 808.139798][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 808.147813][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 808.155828][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.163839][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 808.171878][T13681] 22:42:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) 22:42:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9) [ 808.512782][T13681] index not increased! 20ffd000 <= 20ffd000 22:42:05 executing program 3: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 808.655028][T13681] BUG at mt_find:6473 (1) [ 808.712892][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 808.764019][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:42:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x1, &(0x7f0000000080)=@raw=[@func], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:42:05 executing program 4: bpf$BPF_BTF_LOAD(0x10, &(0x7f00000001c0)={0x0, &(0x7f0000000380)=""/157, 0x80, 0x9d}, 0x20) 22:42:05 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080), 0x8000000000000001) 22:42:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1}, 0xc) 22:42:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x16, 0x4a, 0x0, 0x3}, 0x48) [ 809.076714][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:42:05 executing program 4: bpf$MAP_CREATE(0x2, 0x0, 0x7800) 22:42:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 22:42:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) 22:42:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) [ 809.215258][T13681] 0-536866815: 0000000000000000 [ 809.234996][T13681] 536866816-536870911: ffff88801cede380 [ 809.240971][T13681] 536870912-553631743: ffff88801cede0e0 22:42:05 executing program 3: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 809.364998][T13681] 553631744-553639935: 0000000000000000 [ 809.425962][T13681] 553639936-553635839: ffff8880772027e0 22:42:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) [ 809.485051][T13681] 553635840-553644031: ffff888077202a80 22:42:06 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f0000000180)) [ 809.534498][T13681] 553644032-553648127: ffff8880266220e0 22:42:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x17, 0x0, 0xffff, 0x8000000, 0x1020, 0x1}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x12, 0x0, 0xf8000000, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x2, 0x8000, 0x8a4, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x9}, 0x48) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r1, r2, 0xe}, 0x10) openat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/12, 0xc, 0x0, &(0x7f0000000040)=""/136, 0x88}}, 0x10) [ 809.578099][T13681] 553648128-553652223: ffff88801cede000 [ 809.611594][T13681] 553652224-116819886079: 0000000000000000 22:42:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) [ 809.648253][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 809.687085][T13681] 116824080384-93825007087615: 0000000000000000 [ 809.697292][ T1202] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.703629][ T1202] ieee802154 phy1 wpan1: encryption failed: -22 22:42:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0xc0189436, &(0x7f0000000900)) [ 809.763198][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 809.799817][T13681] 93825007226880-140323535712255: 0000000000000000 [ 809.845541][T13681] 140323535712256-140323535716351: ffff8880208b20e0 22:42:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="f6751869931b14d43900ce8ac2537129c9e87df4b30a3c40a7baaaa6cafad281e1bb774e4387b6dd4c95c3d921f9a61d722a93657f0f78c994e1a85339b44b257e5d49f240182104b5fcae66b2b39fdce2fea3e5f4ec91d634c867c8f2857a19c6c70608bcb2", 0x66}, {&(0x7f0000000100)="a01a1e54cb7cfe3e41b6de0631e2fae5992def00e73493d35397596e985fc92c6ec92f1f66660c190520d0c33c0dc41f24b633fab1f299108b7c52a64fa3fce7", 0x40}, {&(0x7f0000000140)="9f98ccd2425999317dbbf3d92287ef98d60ab242b691cc65b449d574a6ad1fb534a60d7a7b570260daba8a8054e3d5dd50b6b0abc06d7edea4d34bf715c09c3f4dc05bedad462395a241e2d2f2d770080274bf7171b9f90a9393307646ebcf5ce6536ec2368ce2e611cf10fd713a8f680a6b8e5bcdf9c4a9449005490f41f7b94f8e4f3d24584d34fc35575a1d28065cc3ee3e606e6ce631d0b422ce010e3a5eb7e2394f4ab6fac28af5c8b147bed8a43be4af90ccc91f9fa9e2cbebc2633041ed7a498d480ab4773df4dbcd55de1bce2ca54ff9dd894346ddf2f48f879759fec11db481c06bb72856859e8f97b5", 0xee}, {&(0x7f0000000400)="56bb887030ea93b20c4233df095ef840788a548c461c6d65943610a07488f36831eda63f27533b0254f344a22b529fc643aaba1a3cbe94bdd3381b0002076ec1d2f695a41561688c339a0f9add973ceff71c9aeae6", 0x55}, {&(0x7f0000000480)="13b8d65791abb736eef3307058bf341e5527ee615b9a886ce18309f3b89311f57ff99e17c969453fded283769a85f5e646fc9836eab88e11fc4c1591b841fcc30bf6422e549c5650193a1b30effaae37791ca4450a437d8a6776d1caecc98f7f71e379132ba1a138ed87fd90e68dc758de3b167583da43d3fa7f677257e676993b6f7f", 0x83}, {&(0x7f0000000540)="315ced9b3b3d417e53078608db733cf30263ae3032b59c2658888afd208496f4562d564eef5069757b2a0633312e0aa2bf777824bc97ab8fa276ec5c8dead9cce8ee0829d21265ea5851152402dabf1332d6341db00a6f6940b54be13c4f57a38f94a210ff98350aeb390ccd16a54448e560b5617e2dfe14228541b45a7b5105edc28e87b450a598326bb1b58879570e4ccfa865b3bbb9d5990e9b304d38446e4b25e65ba5a932a9ea4bd23f44c67f595942f0e9bbf6de4084fc238d42d504424fe17e79682384d5eea8805d671d224e7d856165dca7695b5d3c164ffaec27268004abd1ae763c497cb6db2f12b1dcaf8c9999dc32eaafc222813a8359694e4b021b42de17f43b73e3f26013c2bc393dd8ea2439b5589ac346c4ea5f94404bf30e811eb980bbf75b3c4e5558052c828cff0b380fc374144d9545cfc2bd01dd4a6dc898ffac4627f05b4fbf1c21f00a67a987b90bdbe85c01e2065f8e9d4c9892bc18f8a7c21d1369a400b1762afca94fa28365ca73185072d2befccef18794079e3c1c3ed2af1891c72fc7759464da4a46654ce213fb6c12fdc6a2c256fc014b777dbd4fa5db0ef4d7ee01e0d3788be4348ed0a175e168c667be83ee4047ceed1a2c39858dd05746cdb79733271f6d413146fe19644f619658026056b5f9c9da846c7992d634669e7ab26404b05686b0936188b5c466094e3ffcaf7947dc1a22ef6a6c1d52cd70a5a9687dd2ba4421dd5dfe675870d0363837efe9a2421759908df1243f6aa45349fbc0e08ea59e83c87d76f7f0836c8486daae31cf6b30ce24c4ec92359faa02dba57380e63740dc211e68470072042c9e8a97bf3fdac83a3bc49623f4481d66af08680e3b01d93f9bf56b492a5c5f446cf22ffdd2fbc1f1ff7cf8d2541bdc8ecc9cd8f22dfcfb2a547e1660d9d57d3eba08b38c55606e30c3384e8f1ef578e5c56412eba49d15103321ab9b6d5914444eaa23cf3e2f2a1c1a78d79fd03aaaec5300748b9994848fb44dcf8db7b38ce57acb0f6cf2af79255a04bfceb36909e793020ab8e9d00d0815a92dd22c4d8f0900ac15e3b13df5c4d1d679bd2d5ef70ff499123bf340c6357464df532713310df5a2ccf5c0a8bf8671bfdc78d07cf4a524e0b74d50c06565d616ef5700e6d400b085110fdb7acdc504cc2947a566c0b6003cb5de438048e05abd5ec9c5204f6c245ddff7da50868cde3c61465ff4ad781090eaab81fc14061226e8d0d84de3e0ad73f2c8a27b4dcd4e1c1424c9e654ba81bb478702ff7d4ef00ab50796c8302923116c9baf2fda46971d17150d1ffc6e9a0ac7d0ae456ad5d94af15a6a07517ac7cbc3a088f036a8cc4c1a535d8b6d7de94e5b9afa3bd87abe9edea112e88a1dbe12fc427c20298b2df0690d5f67cb1eacaa9385005689c36bc050a2e1aed61ce45aa4cd0ee5d1587f93667d77085c83e1eeaef6b72ac8d9f960a61b320ec6be77b21c007b3a0eb34fa09d65e0f86b77dbac3a001ce01500b8b8bdf5dc1fdd8bfe27400e024a8a3fe9438f812d354d727a63ea15c032017d586554de0c0b700ff5fdeb2f25209b6acfc42a7b1c9390f5158cdab2b11f7164e9dda3b9b72f2ae5af007a8ced9855a494044a273b7ca12cdb6d54816d41fe164bc41404a7366ada9530ec16f333cda213dd9deaa740cb0ccf979253d3f00cfb64ff651788114c9bf832c907aa7780a599706de6a2876d018230dafea26230d29d389545b0bdd0da70184c2e95bc2cd8f6b77132bcef7657ba97042a3f784a7e09435142e2dda586265f37e8e56e874cfbba4f6f985a949b80f645496b24f5057a2b2fd4d68b4cab2d04beec26e246e352d0ff7655ddfa1abfeb3eb69500cac3001f2e55196ddde642ea192caf950570047886715ee506708d08df29de1052a0e81715bccfbd3f4d1e90479b52b5f6d353d222823d031b64a80739df6fec5510ceaf18518e4da18698e2829b5a70a6e223c5557435acd54fc5664dca4d52fd2cbb835c4b0e0f7d52b2ec7d30fc3a0602e3750bb96a68ec6b174b0e30973b13285f71a6630af7adef69af8e6ca3597cea37c546c40c358a5d2ce2dd4b03be7d93cb8140463485671b7475f87c7af02f7eefb25c5f2b04785195b79f4e2d130a1ce3abbe08fbec199a682733b35a19bee29b20595e62df4b4091ee30e52e4f446197ed14ba76e9d45b674397ce3aa1ccc252957e8c60440935fa899fb927ff5c05813072125fe0fab92dbc2dbbd6be8bf8b36a2d8ebce48b8990d66f198339597130551b68203401ebcb32d6ee0fb068d1344f948cc42c40203ccc86fec51a8ff034f9ed559004c29217c508b51a7e9fa5b06c15f949f9c47c32d2e29e7b70715e9ae1bb32931237d37706754f15d792e76f4a058a805b81f7b59c013d62feb75f68385417c5db77e269037a345033a5e3ed8aecc2f69bedc27c4461408b15be65c8db7ffdf3371a395da66fcbe35963119716a87cc3d5b14289c9f666be79067a4303b6049596df0d8181ce9281fab51df980966648c6f8e831fa7a06a4661522e10038e170ae7a44725af5db5caef5ddd105d4b741e4ea578c41423a306a746afae8da2e4a301e794e46b8347553d752bcf3622f01d537b45131e66d33213d953c04ac106b626bb1e9c8be54880a86552b80c5b3c3b4d082e1117b411205b5e3fc63246b1811d76e25fbb9ace00cfee1c1337043338b1f817d557b9eb5e441a0c4dfc12e6627df07664cfe923480e076d7215319189a83c5dc5730535f67777bff8407d447c0a9a087fc3754f259d10b318bba911be03f20eaa2e3e920a643749305db7a10972185a5fedfbcb131f8e22b1e4fb5a9c986e09faa70bc1ee1851e95f462b78b4027632e06f9f3a0c57ceaef4fbd216d8101f65890b266ce9523158fa0e3a15df5b66297c0671e6020514de828c44417fb0ca62750a5f99ada41c15e124b083ca9ff5fcc85bebd2a5fe9631d57470632c282b431ed94e5478070bafe7bfb5e1c1a6fa0db84e54187f103d8b695630fefb7a2fc9f19adeca4cc6b1d42403a3b9c971037c579dfb5e3dfc808787bf085af2247d2f8c5b4e0ab3c1180113346cf242d454c3dab10525d41dcf50bf16d7e12f1b170ded66681cb8df111ccf289734e19854ff7b2453f03c839abcb9311cc0188e1e56d0efbfd6f824906041fe14b96dd7356e6f357fe68c04bf3e0a8fe2574d4135457889d5a2c229093c3e650e3c7e19cfee715fa8693b0c8f4699a7ee2120d38ddff30435cf15824e522436682fce4646afad3c402997378109f7b62d93c4bb832a6f900f2331e861a286825b87b32346a4c961b8952fdecd9d8078e0fdeeeeb8928c3ec7d3631da2c67d35bdc9c11d00436ff8016e0fd9e693b95e144251403a19a568b89a79c14e5d9ef77d4be6afc155795f50a9b99aa3d2217f77b2087ef9c7908b30f1f574ac3f052a93ab5ce9b9518b0f92a34838fcd73746247a55ce2967d241943739ad718f9b802d9e07ea39a389c2aee8c52e31d9191a54c271e9b676072f35845b9ab360eefff2addd8f606e026badb096d630b39756314d6b55ff1ac61910de2aa6110d3a2d6654d53dc7aa0561ad1db0c9967b41700687d4ba6785517685aee0b2bc879716fc5a3bbaebfda378536b5c3635670dcd582623c054e0ddebde5a8dce70c167bf672715ed05e3085b5b1242b00b138781dcf820213d415bd53396ad81c81cd3abe1a4f06511a8f22b68c42b31bca7b24f5c85e9e082994e8664fac03122d0a1e363f3adc779a610274eba9f9e9fc0d9e338fcfca112365fd8f8fe4dc5b08506e1f342520e7bb2237c6de6f08bb671a3859dcfc3883cc83ad9541aaa43d8e496ed37e6114fcbe1b6365a03577728eae5dc7f190837a42b4e689cfbbf86f265ecbcd42e4385661e14027d7380dc224b1fe75ae4c24aaefcb950766171aed743e7f4488411b019c9dbcb4ee4fbf9f6d024021e956fec4ba5007d8e65fcd1d65593d8a4e82039a9e2b9a576c2327b6f65b8b3d704d84a11bcdd534f4b8ffc9687652286b5fd693eb4165dc25a6f4d0c8b415a16a4784b328e6cde0e1d4b4bec498895be4b01e01fae91044e6ea33cc861b4b1dd12787e3514bd27fa8e567983d0ee2a7f2adc20802fc59ebffc22514b1a86cf8738bf30e1d9362f4a80a301312653257afc104355eb98086e28dd0b53310df7dfd2210a9107e0eb5fc0f4935223b7515f6edcc3cb9cc04c4763e480e78232bb3f99365b69714a6ec0d3d495c4c7d2632855c8d98d2d8a9f024696535923d5547edc9d3d5d06a9550472e82d0b2775b382a7de8b9c3a0c5bf3be9a7e861e9a1c7e9e424b27fc0b600278826d89825041a0167fa99fc577af5643843eaaff6ff8ab26d1e6bfb101ff39c26cf5ec5e65ab61a49448b824288b13e621b0b03ddda66fe21bfc73f4dd272bfcf0805a36b8a7aeebe24", 0xc55}], 0x6}, 0x0) 22:42:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000ac0), 0x0}, 0x20) 22:42:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4a, 0x7f, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, 0x0, 0x0, 0x7}, 0x20) 22:42:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x20) [ 809.931864][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:42:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={r0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x20) [ 810.075132][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 810.082302][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 810.096160][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 810.103268][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 810.111039][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 810.118477][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 810.127385][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 810.134377][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 810.141878][T13681] 140323557564416-140323557900287: ffff888078bac380 22:42:06 executing program 5: recvmsg$unix(0xffffffffffffffff, 0x0, 0x80000000) [ 810.169911][T13681] 140323557900288-140323557904383: 0000000000000000 22:42:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 22:42:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x0, 0x0, 0x0, 0x1a44}, 0x48) [ 810.258795][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 810.294524][T13681] 140323558268928-140323558305791: ffff888078bac460 22:42:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8010743f, 0x0) 22:42:06 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) 22:42:06 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x1}], &(0x7f0000000040)='GPL\x00', 0x7, 0xef, &(0x7f0000000240)=""/239, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 810.400388][T13681] 140323558305792-140323558326271: 0000000000000000 22:42:07 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)="18", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)=[{0x0, 0x2}, {&(0x7f0000001740)=""/130, 0x82}], 0x2}, 0x0) [ 810.480374][T13681] 140323558326272-140323570171903: ffff888078bac700 22:42:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb00}, 0x48) 22:42:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 810.556467][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:42:07 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)="18", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000003880)=""/4079, 0xfef}], 0x1}, 0x0) 22:42:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x5, 0x1}, 0x48) 22:42:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x8, 0x8, 0x200, 0x0, 0x1}, 0x48) 22:42:07 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140), 0x1, 0x0, 0xfd6b}, 0x0) 22:42:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}]}}, &(0x7f0000000300)=""/129, 0x3e, 0x81, 0x1}, 0x20) 22:42:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) 22:42:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001880)={&(0x7f0000000600)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) 22:42:07 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001700)=""/41, 0x29}], 0x300}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[], &(0x7f0000002880)=""/4096, 0xd9, 0x1000, 0x1}, 0x20) 22:42:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x1001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 22:42:07 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa2680, 0x0) close(r0) [ 811.070860][T13681] 140323570171904-140323571208191: 0000000000000000 22:42:07 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000300)=@framed={{}, [@generic={0x61}]}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x8f, &(0x7f00000003c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:42:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) [ 811.130622][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 22:42:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) [ 811.182980][T13681] 140323571212288-140323571343359: ffff888078bacb60 22:42:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0xc004743e, 0x0) [ 811.258318][T13681] 140323571343360-140734793707519: 0000000000000000 22:42:07 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)="9ffdd97ab27e20d33d3fb4162c103a1e17012182", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001700)=""/41, 0x13}], 0xa}, 0x0) 22:42:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 22:42:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000040)=@abs, 0xff13, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/204, 0xcc}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/195, 0xc3}], 0x3, &(0x7f00000005c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}, 0x0) [ 811.364284][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 811.442744][T13681] 140734793842688-140734795161599: 0000000000000000 22:42:08 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10) [ 811.499886][T13681] 140734795161600-140734795177983: ffff888078bac000 22:42:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x0, 0x0, 0x0, 0x142, 0x1}, 0x48) [ 811.566546][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 811.663483][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 811.744623][T13681] Pass: 12648654 Run:12648776 [ 811.781295][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 811.791270][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 811.801363][T13681] Call Trace: [ 811.804675][T13681] [ 811.807628][T13681] dump_stack_lvl+0xd1/0x138 [ 811.812273][T13681] mt_find.cold+0x8b/0x90 [ 811.816649][T13681] ? mas_find+0x1d0/0x1d0 [ 811.821041][T13681] find_vma+0x10c/0x1b0 [ 811.825245][T13681] ? can_vma_merge_before+0x390/0x390 [ 811.830654][T13681] ? walk_page_test+0x78/0x180 [ 811.835465][T13681] walk_page_range+0x2b1/0x4a0 [ 811.840277][T13681] ? __walk_page_range+0x780/0x780 [ 811.845453][T13681] mlock_fixup+0x650/0x810 [ 811.849939][T13681] apply_vma_lock_flags+0x23d/0x350 [ 811.855197][T13681] ? mlock_fixup+0x810/0x810 [ 811.859849][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 811.865795][T13681] do_mlock+0x25a/0x6d0 [ 811.870021][T13681] ? folio_evictable+0x270/0x270 [ 811.875030][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 811.880969][T13681] __x64_sys_mlock+0x59/0x80 [ 811.885609][T13681] do_syscall_64+0x39/0xb0 [ 811.890066][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 811.895975][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 811.900405][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 811.920026][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 811.928451][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 811.936432][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 811.944409][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 811.952384][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.960373][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 811.968476][T13681] 22:42:08 executing program 1: syz_clone(0x1000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 22:42:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 22:42:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x0, 0x1}, 0x48) 22:42:08 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) 22:42:08 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001700)=""/41, 0x29}], 0x300}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b8000000090000000b0000000500000f03682a8d92aebe8ee7fe1b000000010000000400000003000000020000006b00000050000000040000007f000000030000000500000081000000cae1000003000000bd7900007f0000009896ece8521c6f18480002010000000e0000000700000f0100010000e6050000000800000004000000f70000000200000004000000ff000000000040000400000002000000280600000400000004000000fdffffff030000000300000002000000020000009209"], &(0x7f0000002880)=""/4096, 0xd9, 0x1000, 0x1}, 0x20) 22:42:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, &(0x7f0000000100)=""/245, 0x32, 0xf5, 0x1}, 0x20) 22:42:08 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="9f", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001700)=""/41, 0x29}], 0x300}, 0x0) 22:42:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="9f", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001840)={0x0, 0x7fffefd7, &(0x7f0000001800)=[{&(0x7f0000001700)=""/41, 0x29}], 0xa}, 0x0) 22:42:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) [ 812.335947][T13681] index not increased! 20ffd000 <= 20ffd000 [ 812.367276][T13681] BUG at mt_find:6473 (1) 22:42:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@func], &(0x7f0000000240)='GPL\x00', 0x6, 0xbd, &(0x7f0000000280)=""/189, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 812.416289][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:42:09 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="9f", 0x1}], 0x1}, 0x0) close(r0) [ 812.483624][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:42:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x4, 0x1}, 0x48) 22:42:09 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="9f", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=""/223, 0xdf}, 0x0) 22:42:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) 22:42:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x400000}]}}, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) 22:42:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000200000d"], &(0x7f0000000140)=""/164, 0x32, 0xa4, 0x1}, 0x20) [ 813.014979][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:42:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x48) 22:42:09 executing program 4: unlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22:42:09 executing program 0: syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)='j') 22:42:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000240)=""/253, 0x2a, 0xfd, 0x800001}, 0x20) 22:42:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0xc, 0x1}, 0x48) 22:42:09 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="9f", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001700)=""/41, 0x29}], 0x1}, 0x140) 22:42:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0}, 0x20) 22:42:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x4, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000240)=""/253, 0x2a, 0xfd, 0x800001}, 0x20) [ 813.323855][T13681] 0-536866815: 0000000000000000 22:42:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x102) 22:42:09 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001700)=""/41, 0x29}], 0x300}, 0x0) 22:42:10 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0x17, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x10) [ 813.445002][T13681] 536866816-536870911: ffff88801cede380 [ 813.451073][T13681] 536870912-553631743: ffff88801cede0e0 [ 813.528711][T13681] 553631744-553639935: 0000000000000000 22:42:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18000000}, 0x48) 22:42:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000280), 0x0}, 0x20) [ 813.574608][T13681] 553639936-553635839: ffff8880772027e0 [ 813.604702][T13681] 553635840-553644031: ffff888077202a80 [ 813.648759][T13681] 553644032-553648127: ffff8880266220e0 22:42:10 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 22:42:10 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/141, 0x8d, 0x0, &(0x7f0000000300)=""/75, 0x4b}}, 0x10) [ 813.700963][T13681] 553648128-553652223: ffff88801cede000 22:42:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10140) [ 813.760496][T13681] 553652224-116819886079: 0000000000000000 22:42:10 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000300)=@framed={{}, [@generic={0x61, 0x0, 0x0, 0x0, 0x4d1}]}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x8f, &(0x7f00000003c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 813.833791][T13681] 116819886080-116824080383: ffff88801cede2a0 22:42:10 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/141, 0x8d, 0x0, &(0x7f0000000300)=""/75, 0x4b}}, 0x10) [ 813.904558][T13681] 116824080384-93825007087615: 0000000000000000 22:42:10 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x0, 0x4b, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x8, 0x200, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) [ 813.997996][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 814.039468][T13681] 93825007226880-140323535712255: 0000000000000000 22:42:10 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/141, 0x8d, 0x0, &(0x7f0000000300)=""/75, 0x4b}}, 0x10) [ 814.089063][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 814.163374][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:42:10 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x1c, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:42:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 22:42:10 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) close(r0) 22:42:10 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x6c803, 0x0) 22:42:10 executing program 1: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0}, 0x38) 22:42:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x8, 0x8, 0x200, 0x0, 0x1}, 0x48) 22:42:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x8, 0x8, 0x200, 0x0, 0x1}, 0x48) 22:42:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff000000}, 0x48) 22:42:11 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/245, 0x2a, 0xf5, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/141, 0x8d, 0x0, &(0x7f0000000300)=""/75, 0x4b}}, 0x10) [ 814.456277][T13681] 140323535716352-140323544104959: ffff8880208b2620 22:42:11 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x0, 0x3, &(0x7f0000002380)=@framed, &(0x7f00000023c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 814.516770][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 814.530977][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 814.563007][T13681] 140323548299264-140323550396415: ffff8880208b28c0 22:42:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x3, &(0x7f0000002940)=@framed, &(0x7f0000002980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002bc0), 0x8, 0x10, 0x0}, 0x80) 22:42:11 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002200)={0x0, &(0x7f0000000140)=""/4096, 0x0, 0x0, 0x5c}, 0x38) [ 814.605991][T13681] 140323550396416-140323552493567: ffff8880208b21c0 22:42:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0xd, 0x3, &(0x7f0000002380)=@framed, &(0x7f00000023c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:42:11 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x16, &(0x7f0000002b80)=""/22, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002bc0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002c00), 0x10, 0x0, 0x0, 0x0, &(0x7f0000002c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x6ad6, 0x5b, &(0x7f0000002a00)=""/91, 0x40f00, 0x12, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000002a80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x577217ab}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002f80)={&(0x7f0000002dc0)="94f1e9d206609609f19c47486af6796ada57e400248e6bea0e320e52eec443f4ffbdc0576ebc55e529fe", &(0x7f0000002e00)=""/98, &(0x7f0000002e80)="85", &(0x7f0000002f00)="b4d0d6e60d35529b9c1da5a309bdac957d5ade3ce4e79e7cb021881a8396bbb4669b9dc82a552f6afb8c7c66f0baef87137ee0d64aca3af6", 0x200, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000003100), 0x4) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000034c0)={&(0x7f0000003140)="31f9a29d96ead1c455cb42e12072897c906f00e964bf7486c09fc5ce9faf238d3e4be6921c4469c789ee4f1e8fa1a01659e32fb04cb4fa30f0c17818550bceebb6ac5158523f1d7d88594edcacda5a7b8d8b167fd5ccc515581873e26e6f295043a344cf4eb5c00014257dc59fe116c1c0a04aa9df4603953231bbe746feef49bcf67aae32377219871962a628a00b2e9960571c4bc9d865470777331e48485a5a32613d431ecd80341dc30a8dfbbfeb156d1cb1621e2ca860bf753e88", &(0x7f0000003240)=""/250, 0x0, &(0x7f00000033c0)="d9ac04b340761693945e645ba8d0284e1dc3becf8a5402e2501d0236d8cfe2f44a97ac661000bb197ab3d11c8b4feedad59293eb9515c325fadfc96933a4749cd5395261b87456d942f8fab55779b7673b4255b6b152aea7e4e10851bf28d4480c422b55f517aeeadcf1c42a3b91a643a197533702345d84cf0febe556e0906e1e4a743907a9844c265aaad1ede0d154911bbd77ff603dd1f36a3c", 0x0, 0xffffffffffffffff, 0x4}, 0x38) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 814.671555][T13681] 140323552493568-140323556687871: ffff8880208b2380 22:42:11 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x3, &(0x7f0000002940)=@framed, &(0x7f0000002980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002bc0)={0x1, 0x2ac}, 0x8, 0x10, &(0x7f0000002c00), 0x10}, 0x80) 22:42:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000001500)=ANY=[@ANYBLOB="620af8ff0c200421bfa10000000000000701000000feffffb702000003000000bd120000000000008500000006000000b70000000000000095006134000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f130c5077da80fb982c1e9400c693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4ce4c0af9360a1f7a4e6b607130c89f18c0f4089d8b85880000c29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468972089b302d7bff8f06fa1918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e5f7880bd5b167e20d00de6f460b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa684803000000006fa5043aa3926b81e3b59c9b081d6a080000f2e92b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a758f3eb0f33e2183ecc3c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700cf0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c85a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda8c42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433253ffffffff631c7771429d120000003341bf4a00fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe01589646efd1cf870cd7bb2366fde4a59429738fcc917a57f94f6c453cea793cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e8c7123d8ecbbc55bf404571be54c72d978cf2804107f0238abcc090068e57040906df0042e06000000000000002c06f815312e0c6dd022c074eb8a322fb0bf47c0a8d154b405c37fea23bcaafaaf34f3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879c336345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3ff372b5f2ee10cebb2c5ea1393fdf04285bf16b99c9cc0ad18570b6f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1d14216bdf57d2a40d40b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a43010100009f4f9ecee27defd83871c5f99b355b72d538ba4958ea8e4aa37094191e4778818cb4b5b8465b46719410096e7e60fc3541a2c905a1a95e9571bf38aebd1517a8250df98674152f94e32409e2a3bce10db6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f94a6e1cec709db72718ec076517e42186086e29c61137abf9010000007750890200d627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6002777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401020000793ac4428f1da1f68df75cf43f8ecc8d372660f7395764761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d730621976e8e3cf3d55b7f0469250a5989cef0e10773920ed3ccee4472c3eb80159daed092511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5fda6fa3d0c4f21fde058a7a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd0e1a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6602f8999e0311da5b8378bc841e1787e3a8128dda381a26eb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e966d0afedaff7c415ff682a4044b3381cc2df28278c9a6824c0004000000000000925cc0956bffa8e950ff6149f41ae6edd8302000f728cd9807933c3e16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaab37d4f98a934b0f900e0eb639878a45e4629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e6043522000171d004f1c5520f061378f94fb453786c3a604de000083b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f41610963b48930658e2d6125a26085b11345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebab659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330447d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27df9a70f1a7c6046237ddfb0b26e1973222263603498010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d3bdf9401b533019e90f7b06b189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f68f17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f1629a34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac5cdac24b0c23c3d2671b793afb44b7126e17c2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9ef10773db59505ae33708c728844c872df4e7748c1f9d2cb0b29754f928c59306ce105ca18cb72f0944d0e4feaf109bd0285bdaf1b41520a1089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf69d910ca4ce0e075658ede42192cf393a50dcc197b033a2fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f14ec5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb37c74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea00100000000000000734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069007735512c87c7572a1e7596f89e5c3d5e70640c90815f77b7b13dd43d9be585a1e1e84900000000000000000000000000b422fc160a458ee5a91a2473e6e56fdabec6c73ce8983fc68f0b7cdcdde63230abf3e6f54a07620e8aa116ce9e84fc3cd5e8288a333dce00007d5b6a137d9fc6600b42da833973b01f1d29b6ea87eb858670633b2f7ee68d292b1d91c52b7c9ef67a6c7654a68737f2e89324b3890ea231a3000000000000000000000000000000005f6e2b522e751015aa45fba5c4ab71d9ef163ab96097b11e0ad23c80f551307fb8df15139014c9081061b0a1649941cea2d4c0abed1d3e227a3674e4afc18be75fcbb5ead60a9c28f517d9d2a581ce6131af4d8562009623954151130ebd9ba782cc25f7be57b7fa4b0b3d662e4a2c2c1e37a5d6b254e6c3ebbf57c2037b0c4ad8bb814ecbfeab7428cf94a6a0aa4ab9e97209216a194c2ffd3f928f4d48e1b5615341e4bd53df20d0d56418382b69035943a8aabe2a86632eec534f86fa52e76702cc8ce0e848da0904dd5f6c18d03efc1b9984cb1a88fac9289c3a0d7ef52b7cdb1561a6fa2c4c1042dc23a5ebc301436282a54dbb42861958329c25644d8f2d8385c01f2728c7b5b4f5a04eb4a804c7f9ab5e35aebfa3ecfb380666eaf410c415dbb941928b0dd2101ef2a5e1884d3bf5d3856e44fe98f1376a9444a209a616d7496c2c5223a54a46b8b166c96df8f6a4b69de147903ddc323e52bfe2339671fb17273dbf68875dcbf67f13c4f453c70543c6de4a371b5723e77dbe73aba459dc18fade41fcf25c03ff593c058dfa8e410bbc000000000000000046c8e0f177f56cb8250cda9f98a85e017d4deb5b413ece074b981ed29f9c0e03eb10c6272f9e372cccc4917f301a8e7faa32d8e0143dd9abef2c294119c5437d54a7e6ed40382910f9ab555f378762940bd6ab997a78de1c017d32d736ec56e74c861854f5e0da1653456b0c6a770ecd59a489b5d43b0b9dcd0986b416708e3b80534275b3408b244303cd9557fef65db8a3c13889f2a13cc151cdbe378d7b929c9527d739961bc4c203"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff000000}, 0x48) 22:42:11 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000002640)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x0, 0x0, 0x0, &(0x7f00000029c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000003a40), 0x0, 0x0) [ 814.723045][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 22:42:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x3, &(0x7f0000002940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000002980)='GPL\x00', 0x9c86c01, 0xd2, &(0x7f00000029c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:42:11 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 22:42:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000026c0)={0x18, 0x1, &(0x7f0000002300)=@raw=[@alu={0x0, 0x0, 0x4}], &(0x7f0000002380)='syzkaller\x00', 0x6, 0xa3, &(0x7f00000023c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 814.787235][T13681] 140323556835328-140323557564415: ffff8880293ab000 22:42:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) 22:42:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@base={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) 22:42:11 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000030c0)={@map, 0xffffffffffffffff, 0x4e}, 0x10) [ 814.832172][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 814.920551][T13681] 140323557900288-140323557904383: 0000000000000000 22:42:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x0, 0x0, 0x0, &(0x7f00000023c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:42:11 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 22:42:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x0, 0x0, 0x0, &(0x7f00000029c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) syz_clone(0x0, 0x0, 0x0, &(0x7f0000003a40), 0x0, 0x0) [ 814.978479][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 815.057816][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 815.102010][T13681] 140323558305792-140323558326271: 0000000000000000 [ 815.126605][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 815.160985][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:42:11 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 22:42:11 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000014c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000001500), 0x9) 22:42:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff000000}, 0x48) 22:42:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000026c0)={0x18, 0x3, &(0x7f0000002300)=@raw=[@alu={0x4}, @initr0], &(0x7f0000002380)='syzkaller\x00', 0x6, 0xa3, &(0x7f00000023c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:42:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 22:42:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c40)={0x0, 0x3, &(0x7f0000002940)=@framed, &(0x7f0000002980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:42:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0xc) 22:42:11 executing program 4: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 22:42:11 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@random="2139bcaff3a4", @broadcast, @val, {@ipv4}}, 0x0) [ 815.278368][T13681] 140323570171904-140323571208191: 0000000000000000 22:42:11 executing program 1: r0 = socket(0x1, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) dup2(r1, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000040)={0x10, 0x2}, 0x10) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) r4 = dup2(r2, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000000)={r5}, &(0x7f0000000080)=0x8) [ 815.338201][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 815.368859][T13681] 140323571212288-140323571343359: ffff888078bacb60 22:42:11 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x33, 0x0, 0x0) 22:42:11 executing program 0: ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x20045568, 0x0) [ 815.484592][T13681] 140323571343360-140734793707519: 0000000000000000 [ 815.528884][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 815.587950][T13681] 140734793842688-140734795161599: 0000000000000000 [ 815.639324][T13681] 140734795161600-140734795177983: ffff888078bac000 22:42:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) 22:42:12 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) 22:42:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5609, &(0x7f0000000100)) 22:42:12 executing program 0: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 22:42:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000200), &(0x7f0000000100)=0xb0) 22:42:12 executing program 4: nanosleep(&(0x7f00000001c0)={0x1000}, 0x0) [ 815.692224][T13681] 140734795177984-140734795186175: ffff888078bacee0 22:42:12 executing program 3: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 22:42:12 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random="2139bcaff3a4", @broadcast, @val, {@ipv4}}, 0x0) [ 815.787738][T13681] 140734795186176-18446744073709551615: 0000000000000000 22:42:12 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0x50000000) [ 815.833488][T13681] Pass: 12719072 Run:12719195 [ 815.879498][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 815.889462][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 815.899557][T13681] Call Trace: [ 815.902868][T13681] [ 815.905823][T13681] dump_stack_lvl+0xd1/0x138 [ 815.910469][T13681] mt_find.cold+0x8b/0x90 [ 815.914859][T13681] ? mas_find+0x1d0/0x1d0 [ 815.919255][T13681] find_vma+0x10c/0x1b0 [ 815.923456][T13681] ? can_vma_merge_before+0x390/0x390 [ 815.928878][T13681] ? walk_page_test+0x78/0x180 [ 815.933687][T13681] walk_page_range+0x2b1/0x4a0 [ 815.938480][T13681] ? __walk_page_range+0x780/0x780 [ 815.943626][T13681] mlock_fixup+0x650/0x810 [ 815.948071][T13681] apply_vma_lock_flags+0x23d/0x350 [ 815.953297][T13681] ? mlock_fixup+0x810/0x810 [ 815.957916][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 815.963830][T13681] do_mlock+0x25a/0x6d0 [ 815.968023][T13681] ? folio_evictable+0x270/0x270 [ 815.972989][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 815.978900][T13681] __x64_sys_mlock+0x59/0x80 [ 815.983512][T13681] do_syscall_64+0x39/0xb0 [ 815.987962][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 815.993868][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 815.998313][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 816.017947][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 22:42:12 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 22:42:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x10) [ 816.026397][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 816.034377][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 816.042359][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 816.050334][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.058308][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 816.066303][T13681] 22:42:12 executing program 3: syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@broadcast, @random="d02c93ff20c3", @val, {@ipv6}}, 0x0) 22:42:12 executing program 5: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') 22:42:12 executing program 2: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/149) 22:42:12 executing program 3: bind(0xffffffffffffffff, &(0x7f0000001200)=@in={0x10, 0x2}, 0x10) [ 816.451828][T13681] index not increased! 20ffd000 <= 20ffd000 [ 816.467234][T13681] BUG at mt_find:6473 (1) [ 816.484177][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e 22:42:13 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x33, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x8) 22:42:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@dstaddrv4={0x10, 0x84, 0x9, @loopback}], 0x10}, 0x0) [ 816.512290][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 22:42:13 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000140)={@random="2139bcaff3a4", @broadcast, @val, {@ipv4}}, 0x0) 22:42:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000007c0)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x4f, 0x0, 0x0, &(0x7f0000000000)=[@init={0x14}], 0x14}, 0x0) 22:42:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 22:42:13 executing program 5: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') [ 816.568299][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d 22:42:13 executing program 2: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x10, 0xffffffffffffffff, 0x0) [ 816.645818][T13681] 0-536866815: 0000000000000000 22:42:13 executing program 1: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7) 22:42:13 executing program 3: shmat(0x0, &(0x7f0000ff0000/0x10000)=nil, 0x0) shmat(0x0, &(0x7f0000fea000/0x4000)=nil, 0x0) [ 816.693267][T13681] 536866816-536870911: ffff88801cede380 22:42:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 816.741003][T13681] 536870912-553631743: ffff88801cede0e0 22:42:13 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@random="2139bcaff3a4", @broadcast, @val, {@ipv4}}, 0x0) 22:42:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 816.803603][T13681] 553631744-553639935: 0000000000000000 [ 816.840310][T13681] 553639936-553635839: ffff8880772027e0 [ 816.925144][T13681] 553635840-553644031: ffff888077202a80 [ 816.949154][T13681] 553644032-553648127: ffff8880266220e0 22:42:13 executing program 0: chown(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) 22:42:13 executing program 2: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 22:42:13 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="33d847a0cc47", @empty, @val, {@ipv6}}, 0x0) 22:42:13 executing program 5: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') 22:42:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 22:42:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 816.998050][T13681] 553648128-553652223: ffff88801cede000 [ 817.004142][T13681] 553652224-116819886079: 0000000000000000 22:42:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000100), &(0x7f0000000300)=0x1fa) 22:42:13 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 22:42:13 executing program 2: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x7fffffffffffffff) 22:42:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 817.109742][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 817.126512][T13681] 116824080384-93825007087615: 0000000000000000 22:42:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) accept$inet(r0, 0x0, 0x0) 22:42:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 22:42:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f0000003580)="10", 0x1, 0x0, &(0x7f0000003680)=@in={0x10, 0x2}, 0x10) 22:42:13 executing program 4: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 22:42:13 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='I', 0x1, 0x0, &(0x7f00000001c0)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r0, 0x1) [ 817.197126][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 817.235326][T13681] 93825007226880-140323535712255: 0000000000000000 [ 817.316751][T13681] 140323535712256-140323535716351: ffff8880208b20e0 22:42:13 executing program 5: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') 22:42:13 executing program 1: r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ff3000/0x4000)=nil) shmat(r0, &(0x7f0000fea000/0x4000)=nil, 0x1000) 22:42:13 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) [ 817.350797][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d 22:42:14 executing program 1: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7) 22:42:14 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 22:42:14 executing program 1: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 22:42:14 executing program 2: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 817.691576][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 817.757337][T13681] 140323544104960-140323546202111: ffff8880208b27e0 22:42:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 22:42:14 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000480)=@in6={0x1c, 0x1c}, 0x1c) 22:42:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 22:42:14 executing program 2: ioctl$EVIOCGID(0xffffffffffffffff, 0x40084502, 0x0) 22:42:14 executing program 1: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ff3000/0x4000)=nil) shmat(r0, &(0x7f0000fea000/0x4000)=nil, 0x1000) [ 817.802730][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 817.867339][T13681] 140323548299264-140323550396415: ffff8880208b28c0 22:42:14 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="2139bcaff3a4", @broadcast, @val, {@ipv4}}, 0x0) 22:42:14 executing program 5: nanosleep(&(0x7f00000001c0), 0x0) [ 817.934306][T13681] 140323550396416-140323552493567: ffff8880208b21c0 22:42:14 executing program 4: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 22:42:14 executing program 1: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 817.986712][T13681] 140323552493568-140323556687871: ffff8880208b2380 22:42:14 executing program 2: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 22:42:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind(r0, &(0x7f0000001200)=@in={0x10, 0x2}, 0x10) 22:42:14 executing program 0: r0 = socket(0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) dup2(0xffffffffffffffff, r0) [ 818.069416][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 818.142810][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 818.212287][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 818.270290][T13681] 140323557900288-140323557904383: 0000000000000000 [ 818.304495][T13681] 140323557904384-140323558268927: ffff888078bac0e0 22:42:14 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 22:42:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) flock(r0, 0x0) 22:42:14 executing program 2: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 22:42:14 executing program 1: shmat(0x0, &(0x7f0000fea000/0x4000)=nil, 0x0) [ 818.333325][T13681] 140323558268928-140323558305791: ffff888078bac460 22:42:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000300)) 22:42:14 executing program 4: msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) [ 818.389532][T13681] 140323558305792-140323558326271: 0000000000000000 22:42:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@init={0x14}, @sndrcv={0x2c}], 0x40}, 0x0) 22:42:15 executing program 0: clock_nanosleep(0x5, 0x0, &(0x7f0000000000), 0x0) 22:42:15 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000140)={@random="2139bcaff3a4", @broadcast, @val, {@ipv4}}, 0x0) 22:42:15 executing program 3: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 22:42:15 executing program 4: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) [ 818.503106][T13681] 140323558326272-140323570171903: ffff888078bac700 22:42:15 executing program 1: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 22:42:15 executing program 2: shmat(0x0, &(0x7f0000ff0000/0x10000)=nil, 0x0) shmdt(0x0) [ 818.528914][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 22:42:15 executing program 3: accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x0) 22:42:15 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)=""/19, 0x0) 22:42:15 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 22:42:15 executing program 2: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)=""/19, &(0x7f0000000780)=0x13) 22:42:15 executing program 3: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) [ 818.745153][T16306] ffff88807b180400[4] piv 553627647 < prev_piv 553635839 [ 818.782206][T16306] BUG at mas_validate_limits:7046 (1) [ 818.825201][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 818.846637][T13681] 140323570171904-140323571208191: 0000000000000000 [ 818.873571][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 818.906380][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 818.977803][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 819.011008][T13681] 140323571343360-140734793707519: 0000000000000000 [ 819.041346][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 819.066222][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 0000000000000000 0 000000000000000c 22:42:15 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000140)={@random="2139bcaff3a4", @broadcast, @val, {@ipv4}}, 0x0) 22:42:15 executing program 5: getsockopt$inet_int(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 22:42:15 executing program 2: syz_emit_ethernet(0x72, &(0x7f0000000140)={@random="2139bcaff3a4", @broadcast, @val, {@ipv4}}, 0x0) 22:42:15 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=',', 0x1}, {0x0, 0xf}, {&(0x7f0000000280)="8b", 0x1}], 0x3}, 0x0) [ 819.067083][T13681] 140734793842688-140734795161599: [ 819.195165][T16306] 0-536866815: 0000000000000000 [ 819.243695][T13681] 0000000000000000 [ 819.260818][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 819.306721][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 819.313835][T16306] 536870912-553623551: ffff8880aabbda80 [ 819.344283][T16306] 553623552-553635839: 0000000000000000 [ 819.351078][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 819.358528][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 819.385049][T16306] 553627648-553648127: ffff88801ccdf380 [ 819.393337][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 819.405035][T16306] 553648128-553652223: ffff8880aabbdb60 [ 819.411063][T13681] Pass: 12898358 Run:12898483 [ 819.424977][T16306] 553652224-116827226111: 0000000000000000 [ 819.431274][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 819.441899][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 819.452100][T13681] Call Trace: [ 819.455405][T13681] [ 819.458403][T13681] dump_stack_lvl+0xd1/0x138 [ 819.463150][T13681] mt_find.cold+0x8b/0x90 [ 819.467545][T13681] ? mas_find+0x1d0/0x1d0 [ 819.471947][T13681] find_vma+0x10c/0x1b0 [ 819.476149][T13681] ? can_vma_merge_before+0x390/0x390 [ 819.481568][T13681] ? walk_page_test+0x78/0x180 [ 819.486477][T13681] walk_page_range+0x2b1/0x4a0 [ 819.491290][T13681] ? __walk_page_range+0x780/0x780 [ 819.496552][T13681] mlock_fixup+0x650/0x810 [ 819.501037][T13681] apply_vma_lock_flags+0x23d/0x350 [ 819.506289][T13681] ? mlock_fixup+0x810/0x810 [ 819.510959][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 819.516994][T13681] do_mlock+0x25a/0x6d0 [ 819.521211][T13681] ? folio_evictable+0x270/0x270 [ 819.526311][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 819.532255][T13681] __x64_sys_mlock+0x59/0x80 [ 819.536901][T13681] do_syscall_64+0x39/0xb0 [ 819.541465][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 819.547407][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 819.551852][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 819.571500][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 819.580045][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 819.588054][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 819.596056][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 819.604152][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.612159][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 819.620184][T13681] [ 819.633479][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 819.640364][T16306] 116831420416-93825021313023: 0000000000000000 [ 819.655024][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 819.661949][T16306] 93825021452288-140495695114239: 0000000000000000 [ 819.675033][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 819.695594][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 819.785055][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 819.805134][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 819.812283][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 819.825093][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 819.845069][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 819.852179][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 819.865057][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 819.885082][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 819.892211][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 819.905091][T16306] 140495717302272-140495717306367: 0000000000000000 [ 819.925096][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 819.932235][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 819.945113][T16306] 140495717707776-140495717728255: 0000000000000000 [ 819.952216][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 819.967832][T13681] index not increased! 20ffd000 <= 20ffd000 [ 819.973795][T13681] BUG at mt_find:6473 (1) [ 819.985111][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 820.044962][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 820.053452][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 820.105116][T16306] 140495729573888-140495730151423: 0000000000000000 [ 820.112198][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 820.161445][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 820.168607][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 820.181947][T16306] 140495730286592-140724016734207: 0000000000000000 [ 820.195884][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 820.203035][T16306] 140724016869376-140724018196479: 0000000000000000 [ 820.225003][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 820.232121][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 820.239289][T13681] 0-536866815: 0000000000000000 [ 820.244543][T13681] 536866816-536870911: ffff88801cede380 [ 820.250668][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 820.265053][T16306] Pass: 12899202 Run:12899328 [ 820.269839][T13681] 536870912-553631743: ffff88801cede0e0 [ 820.275935][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 820.285871][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 820.295965][T16306] Call Trace: [ 820.299250][T16306] [ 820.302187][T16306] dump_stack_lvl+0xd1/0x138 [ 820.306802][T16306] mt_validate.cold+0xc36/0xde8 [ 820.311679][T16306] ? kmem_cache_free+0xec/0x4e0 [ 820.316547][T16306] ? mast_topiary+0x1370/0x1370 [ 820.321454][T16306] validate_mm_mt+0xa7/0x1b0 [ 820.326080][T16306] ? remove_vma+0x130/0x130 [ 820.330622][T16306] __split_vma+0x9b/0x740 [ 820.334975][T16306] ? expand_stack+0x20/0x20 [ 820.339489][T16306] ? vma_shrink+0x5b0/0x5b0 [ 820.344017][T16306] split_vma+0xc6/0x110 [ 820.348185][T16306] mlock_fixup+0x56a/0x810 [ 820.352631][T16306] apply_vma_lock_flags+0x23d/0x350 [ 820.357854][T16306] ? mlock_fixup+0x810/0x810 [ 820.362476][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 820.368400][T16306] do_mlock+0x25a/0x6d0 [ 820.372586][T16306] ? folio_evictable+0x270/0x270 [ 820.377551][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 820.383465][T16306] __x64_sys_mlock+0x59/0x80 [ 820.388083][T16306] do_syscall_64+0x39/0xb0 [ 820.392528][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 820.398434][T16306] RIP: 0033:0x7fc7b548c0c9 [ 820.402890][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 820.422634][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 820.431067][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 820.439045][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 820.447031][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 820.455006][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.462980][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 820.470978][T16306] [ 820.492201][T13681] 553631744-553639935: 0000000000000000 [ 820.515070][T13681] 553639936-553635839: ffff8880772027e0 [ 820.521035][T13681] 553635840-553644031: ffff888077202a80 [ 820.554974][T13681] 553644032-553648127: ffff8880266220e0 [ 820.560949][T13681] 553648128-553652223: ffff88801cede000 [ 820.584963][T13681] 553652224-116819886079: 0000000000000000 [ 820.604969][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 820.611459][T13681] 116824080384-93825007087615: 0000000000000000 [ 820.644950][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 820.651792][T13681] 93825007226880-140323535712255: 0000000000000000 [ 820.675064][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 820.682085][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 820.779034][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 820.795577][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 820.802614][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 820.825053][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 820.832097][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 820.857774][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 820.864801][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 820.884995][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 820.892015][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 820.915054][T13681] 140323557900288-140323557904383: 0000000000000000 [ 820.922069][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 820.935303][T16306] index not increased! 20ffb000 <= 20ffb000 [ 820.941252][T16306] BUG at mt_find:6473 (1) [ 820.955144][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 820.962213][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 820.969365][T13681] 140323558305792-140323558326271: 0000000000000000 [ 821.002530][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 821.025742][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 821.071996][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 821.083745][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 821.211862][T13681] 140323570171904-140323571208191: [ 821.285073][T16306] 0-536866815: 0000000000000000 [ 821.305308][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 821.325140][T16306] 536870912-553623551: ffff8880aabbda80 [ 821.331487][T16306] 553623552-553635839: 0000000000000000 [ 821.345112][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 821.351163][T16306] 553627648-553639935: ffff88801ccdf380 [ 821.367880][T16306] 553639936-553648127: ffff88823bd4cf60 [ 821.376398][T13681] 0000000000000000 [ 821.380168][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 821.385033][T16306] 553648128-553652223: ffff8880aabbdb60 [ 821.404943][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 821.405068][T16306] 553652224-116827226111: [ 821.413042][T13681] 140323571343360-140734793707519: [ 821.414389][T16306] 0000000000000000 [ 821.445101][T16306] 116827226112-116831420415: [ 821.445134][T13681] 0000000000000000 [ 821.445149][T13681] 140734793707520-140734793842687: [ 821.450250][T16306] ffff8880aabbdc40 [ 821.453881][T13681] ffff888078bac7e0 [ 821.453895][T13681] 140734793842688-140734795161599: 0000000000000000 [ 821.453921][T13681] 140734795161600-140734795177983: [ 821.495066][T16306] 116831420416-93825021313023: [ 821.505939][T13681] ffff888078bac000 [ 821.516551][T16306] 0000000000000000 [ 821.535123][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 821.535547][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 821.545487][T16306] 93825021452288-140495695114239: 0000000000000000 [ 821.574991][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 821.580633][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 821.592297][T13681] Pass: 12900320 Run:12900447 [ 821.592340][T16306] 140495695118336-140495729573887: [ 821.609034][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 821.614464][T16306] node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e [ 821.624327][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 821.624342][T13681] Call Trace: [ 821.624350][T13681] [ 821.624359][T13681] dump_stack_lvl+0xd1/0x138 [ 821.624401][T13681] mt_find.cold+0x8b/0x90 [ 821.624434][T13681] ? mas_find+0x1d0/0x1d0 [ 821.624477][T13681] find_vma+0x10c/0x1b0 [ 821.624505][T13681] ? can_vma_merge_before+0x390/0x390 [ 821.655053][T16306] contents: [ 821.657247][T13681] ? walk_page_test+0x78/0x180 [ 821.657292][T13681] walk_page_range+0x2b1/0x4a0 [ 821.661653][T16306] ffff8880aabbdee0 140495703506943 [ 821.665743][T13681] ? __walk_page_range+0x780/0x780 [ 821.665792][T13681] mlock_fixup+0x650/0x810 [ 821.665839][T13681] apply_vma_lock_flags+0x23d/0x350 [ 821.665877][T13681] ? mlock_fixup+0x810/0x810 [ 821.665933][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 821.665974][T13681] do_mlock+0x25a/0x6d0 [ 821.666015][T13681] ? folio_evictable+0x270/0x270 [ 821.666066][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 821.666103][T13681] __x64_sys_mlock+0x59/0x80 [ 821.666140][T13681] do_syscall_64+0x39/0xb0 [ 821.666174][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 821.666203][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 821.666223][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 821.768514][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 821.776942][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 821.784923][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 821.792986][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 821.800961][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.808938][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 821.816933][T13681] [ 821.826601][T16306] ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 821.894938][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 821.901972][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 821.927988][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 821.935491][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 821.942489][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 821.952092][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 821.959567][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 821.967211][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 821.974222][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 821.982028][T16306] 140495717302272-140495717306367: 0000000000000000 [ 821.989680][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 821.997031][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 822.004065][T16306] 140495717707776-140495717728255: 0000000000000000 [ 822.011842][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 822.029935][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 822.082170][T13681] index not increased! 20ffd000 <= 20ffd000 [ 822.088242][T13681] BUG at mt_find:6473 (1) [ 822.092611][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 822.102048][T16306] 140495729573888-140495730151423: 0000000000000000 [ 822.109449][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 822.148061][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 822.163482][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 822.170668][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 822.236120][T16306] 140495730286592-140724016734207: 0000000000000000 [ 822.243239][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 822.294979][T16306] 140724016869376-140724018196479: 0000000000000000 [ 822.305227][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 822.312258][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 822.325606][T13681] 0-536866815: 0000000000000000 [ 822.332415][T13681] 536866816-536870911: ffff88801cede380 [ 822.352109][T13681] 536870912-553631743: ffff88801cede0e0 [ 822.358730][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 822.367717][T13681] 553631744-553639935: 0000000000000000 [ 822.373673][T13681] 553639936-553635839: ffff8880772027e0 [ 822.380562][T16306] Pass: 12904511 Run:12904639 [ 822.386980][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 822.396928][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 822.406324][T13681] 553635840-553644031: [ 822.407027][T16306] Call Trace: [ 822.407037][T16306] [ 822.407047][T16306] dump_stack_lvl+0xd1/0x138 [ 822.411554][T13681] ffff888077202a80 [ 822.414826][T16306] mt_find.cold+0x8b/0x90 [ 822.424988][T13681] 553644032-553648127: [ 822.426055][T16306] ? mas_find+0x1d0/0x1d0 [ 822.426103][T16306] find_vma+0x10c/0x1b0 [ 822.430554][T13681] ffff8880266220e0 [ 822.434912][T16306] ? can_vma_merge_before+0x390/0x390 [ 822.434947][T16306] walk_page_range+0x184/0x4a0 [ 822.434977][T16306] ? mlock_page_drain_local+0x250/0x4e0 [ 822.435017][T16306] ? __walk_page_range+0x780/0x780 [ 822.435062][T16306] mlock_fixup+0x650/0x810 [ 822.435108][T16306] apply_vma_lock_flags+0x23d/0x350 [ 822.435147][T16306] ? mlock_fixup+0x810/0x810 [ 822.435200][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 822.435242][T16306] do_mlock+0x25a/0x6d0 [ 822.435285][T16306] ? folio_evictable+0x270/0x270 [ 822.435335][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 822.435372][T16306] __x64_sys_mlock+0x59/0x80 [ 822.435410][T16306] do_syscall_64+0x39/0xb0 [ 822.435447][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 822.435477][T16306] RIP: 0033:0x7fc7b548c0c9 [ 822.435499][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 822.435522][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 822.435548][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 822.435566][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 822.435583][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 822.435599][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.435615][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 822.435652][T16306] [ 822.453463][T16306] index not increased! 20ffb000 <= 20ffb000 [ 822.475011][T13681] 553648128-553652223: [ 822.507954][T16306] BUG at mt_find:6473 (1) [ 822.544974][T13681] ffff88801cede000 [ 822.568544][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 822.587168][T13681] 553652224-116819886079: [ 822.613747][T16306] 0-18446744073709551615: [ 822.617045][T13681] 0000000000000000 [ 822.642638][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 822.650216][T13681] 116824080384-93825007087615: 0000000000000000 [ 822.657299][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 822.664145][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 822.664166][T13681] 93825007226880-140323535712255: [ 822.671740][T16306] contents: 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 822.678023][T13681] 0000000000000000 [ 822.711255][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 822.718595][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 822.726746][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 [ 822.779689][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 822.796536][T16306] contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 822.805002][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 822.846547][T16306] 0-536866815: 0000000000000000 [ 822.846581][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 822.846606][T16306] 536870912-553623551: ffff8880aabbda80 [ 822.846629][T16306] 553623552-553635839: 0000000000000000 [ 822.846652][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 822.846675][T16306] 553627648-553639935: ffff88801ccdf380 [ 822.846698][T16306] 553639936-553648127: ffff88823bd4cf60 [ 822.846722][T16306] 553648128-553652223: ffff8880aabbdb60 [ 822.846745][T16306] 553652224-116827226111: 0000000000000000 [ 822.846768][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 822.846792][T16306] 116831420416-93825021313023: 0000000000000000 [ 822.846813][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 822.853361][T13681] 140323546202112-140323548299263: [ 822.871778][T16306] 93825021452288-140495695114239: [ 822.891313][T13681] ffff8880208b2700 [ 822.894355][T16306] 0000000000000000 [ 822.901636][T13681] 140323548299264-140323550396415: [ 822.935035][T16306] 140495695114240-140495695118335: [ 822.936819][T13681] ffff8880208b28c0 [ 822.942398][T16306] ffff8880aabbde00 [ 822.947515][T13681] 140323550396416-140323552493567: [ 822.955680][T16306] 140495695118336-140495729573887: [ 822.956229][T13681] ffff8880208b21c0 [ 822.959631][T16306] node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e [ 822.965241][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 822.965274][T13681] 140323556687872-140323556835327: [ 822.985103][T16306] contents: [ 822.989456][T13681] ffff8880293ab0e0 [ 822.994495][T16306] ffff8880aabbdee0 140495703506943 [ 822.999295][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 823.014514][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 823.015383][T16306] ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 [ 823.021617][T13681] 140323557900288-140323557904383: [ 823.021832][T16306] ffff8880aabae380 140495716089855 [ 823.041312][T13681] 0000000000000000 [ 823.052881][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 823.060099][T16306] ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 823.068857][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 823.099287][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 823.102129][T13681] 140323558305792-140323558326271: [ 823.109198][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 823.115026][T13681] 0000000000000000 [ 823.122780][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 823.132540][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 823.140104][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 823.140139][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 [ 823.152720][T16306] 140495709798400-140495711895551: [ 823.155069][T13681] 0000000000000000 0 [ 823.197243][T16306] ffff8880aabae2a0 [ 823.208160][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 823.210468][T13681] 0000000000000000 0 [ 823.215918][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 823.224325][T13681] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 823.227620][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 823.244715][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 823.253296][T13681] 140323570171904-140323571208191: 0000000000000000 [ 823.253698][T16306] 140495717302272-140495717306367: 0000000000000000 [ 823.267843][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 823.270083][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 823.282216][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 823.285026][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 823.289527][T16306] 140495717707776-140495717728255: 0000000000000000 [ 823.303411][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 823.304992][T13681] 140323571343360-140734793707519: 0000000000000000 [ 823.321749][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 823.335050][T13681] 140734793707520-140734793842687: [ 823.376210][T16306] 140495729573888-140495730151423: 0000000000000000 [ 823.388694][T13681] ffff888078bac7e0 [ 823.389817][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 823.392499][T13681] 140734793842688-140734795161599: 0000000000000000 [ 823.406874][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 823.413848][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 823.420962][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 823.421391][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 823.436300][T13681] Pass: 12904511 Run:12904640 [ 823.441876][T16306] 140495730286592-140724016734207: 0000000000000000 [ 823.454984][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 823.462781][T16306] 140724016734208-140724016869375: [ 823.471991][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 823.472013][T13681] Call Trace: [ 823.472022][T13681] [ 823.472033][T13681] dump_stack_lvl+0xd1/0x138 [ 823.472071][T13681] mt_find.cold+0x8b/0x90 [ 823.472111][T13681] ? mas_find+0x1d0/0x1d0 [ 823.486257][T16306] ffff8880aabae9a0 [ 823.487708][T13681] find_vma+0x10c/0x1b0 [ 823.490966][T16306] 140724016869376-140724018196479: [ 823.493886][T13681] ? can_vma_merge_before+0x390/0x390 [ 823.498661][T16306] 0000000000000000 [ 823.502928][T13681] ? walk_page_test+0x78/0x180 [ 823.507263][T16306] 140724018196480-140724018212863: [ 823.510946][T13681] walk_page_range+0x2b1/0x4a0 [ 823.544913][T13681] ? __walk_page_range+0x780/0x780 [ 823.550063][T13681] mlock_fixup+0x650/0x810 [ 823.554513][T13681] apply_vma_lock_flags+0x23d/0x350 [ 823.559735][T13681] ? mlock_fixup+0x810/0x810 [ 823.564355][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 823.570276][T13681] do_mlock+0x25a/0x6d0 [ 823.574481][T13681] ? folio_evictable+0x270/0x270 [ 823.579466][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 823.585390][T13681] __x64_sys_mlock+0x59/0x80 [ 823.590008][T13681] do_syscall_64+0x39/0xb0 [ 823.594450][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 823.600382][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 823.604807][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 823.624423][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 823.632848][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 823.640823][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 823.648796][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 823.656772][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.664749][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 823.672739][T13681] [ 823.681212][T16306] ffff8880aabaea80 [ 823.687660][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 823.694655][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 823.703607][T13681] index not increased! 20ffd000 <= 20ffd000 [ 823.709873][T13681] BUG at mt_find:6473 (1) [ 823.714227][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 823.722948][T16306] Pass: 12904511 Run:12904641 [ 823.727920][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 823.737842][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 823.739796][T13681] 0-18446744073709551615: [ 823.747894][T16306] Call Trace: [ 823.747905][T16306] [ 823.747915][T16306] dump_stack_lvl+0xd1/0x138 [ 823.747954][T16306] mt_find.cold+0x8b/0x90 [ 823.752364][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 823.755638][T16306] ? mas_find+0x1d0/0x1d0 [ 823.755685][T16306] find_vma+0x10c/0x1b0 [ 823.758588][T13681] contents: 93708183007232 [ 823.763164][T16306] ? can_vma_merge_before+0x390/0x390 [ 823.769059][T13681] 20480 [ 823.775069][T16306] walk_page_range+0x2b1/0x4a0 [ 823.775109][T16306] ? mlock_page_drain_local+0x250/0x4e0 [ 823.775150][T16306] ? __walk_page_range+0x780/0x780 [ 823.779677][T13681] 18446603338914365440 [ 823.783631][T16306] mlock_fixup+0x650/0x810 [ 823.804953][T13681] 0 [ 823.806717][T16306] apply_vma_lock_flags+0x23d/0x350 [ 823.811799][T13681] 0 0 [ 823.815939][T16306] ? mlock_fixup+0x810/0x810 [ 823.815990][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 823.821486][T13681] 0 [ 823.822872][T16306] do_mlock+0x25a/0x6d0 [ 823.828079][T13681] 0 [ 823.830718][T16306] ? folio_evictable+0x270/0x270 [ 823.855393][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 823.861312][T16306] __x64_sys_mlock+0x59/0x80 [ 823.865930][T16306] do_syscall_64+0x39/0xb0 [ 823.870369][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 823.876276][T16306] RIP: 0033:0x7fc7b548c0c9 [ 823.880699][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 823.900320][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 823.908746][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 823.916722][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 823.924700][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 823.932681][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.940660][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 823.948678][T16306] [ 823.970433][T13681] 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 823.994949][T16306] index not increased! 20ffb000 <= 20ffb000 [ 824.000996][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 824.050276][T16306] BUG at mt_find:6473 (1) [ 824.050295][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 824.050317][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: [ 824.064714][T13681] 0-536866815: [ 824.074917][T16306] 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 824.128253][T13681] 0000000000000000 [ 824.132039][T13681] 536866816-536870911: ffff88801cede380 [ 824.144981][T13681] 536870912-553631743: ffff88801cede0e0 [ 824.145025][T16306] 0-140495695118335: [ 824.150913][T13681] 553631744-553639935: 0000000000000000 [ 824.165720][T16306] node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 824.174619][T13681] 553639936-553635839: ffff8880772027e0 [ 824.254985][T13681] 553635840-553644031: ffff888077202a80 [ 824.260970][T13681] 553644032-553648127: ffff8880266220e0 [ 824.264984][T16306] 0-536866815: 0000000000000000 [ 824.272132][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 824.277627][T13681] 553648128-553652223: ffff88801cede000 [ 824.285486][T13681] 553652224-116819886079: 0000000000000000 [ 824.291698][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 824.294929][T16306] 536870912-553623551: ffff8880aabbda80 [ 824.304059][T16306] 553623552-553635839: 0000000000000000 [ 824.310265][T13681] 116824080384-93825007087615: 0000000000000000 [ 824.325027][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 824.326938][T16306] 553635840-553627647: [ 824.331832][T13681] 93825007226880-140323535712255: 0000000000000000 [ 824.354933][T16306] ffff88801ccdf1c0 [ 824.355493][T13681] 140323535712256-140323535716351: [ 824.358677][T16306] 553627648-553639935: ffff88801ccdf380 [ 824.364216][T13681] ffff8880208b20e0 [ 824.379964][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 824.384939][T16306] 553639936-553648127: [ 824.444962][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 824.465106][T16306] ffff88823bd4cf60 [ 824.468875][T16306] 553648128-553652223: ffff8880aabbdb60 [ 824.474796][T16306] 553652224-116827226111: 0000000000000000 [ 824.484725][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 824.505008][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 824.512016][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 824.519709][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 824.534961][T16306] 116831420416-93825021313023: 0000000000000000 [ 824.535004][T13681] 140323550396416-140323552493567: [ 824.541578][T16306] 93825021313024-93825021452287: [ 824.541599][T13681] ffff8880208b21c0 [ 824.565153][T16306] ffff8880aabbdd20 [ 824.568917][T16306] 93825021452288-140495695114239: 0000000000000000 [ 824.574916][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 824.583578][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 824.590916][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 824.605056][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 824.614915][T13681] 140323556835328-140323557564415: [ 824.681186][T16306] 140495695118336-140495703506943: [ 824.704925][T13681] ffff8880293ab000 [ 824.705008][T16306] ffff8880aabbdee0 [ 824.710499][T13681] 140323557564416-140323557900287: [ 824.714202][T16306] 140495703506944-140495705604095: [ 824.734908][T13681] ffff888078bac380 [ 824.735280][T16306] ffff8880aabae000 [ 824.740468][T13681] 140323557900288-140323557904383: [ 824.744174][T16306] 140495705604096-140495707701247: [ 824.754921][T13681] 0000000000000000 [ 824.764228][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 824.766391][T16306] ffff8880aabae0e0 [ 824.785200][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 824.796163][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 824.803159][T13681] 140323558305792-140323558326271: 0000000000000000 [ 824.804974][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 824.825001][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 824.831214][T16306] 140495711895552-140495716089855: [ 824.831979][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 824.837797][T16306] ffff8880aabae380 [ 824.854936][T13681] contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 824.868260][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 824.922014][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 824.934969][T13681] 140323570171904-140323571208191: 0000000000000000 [ 824.941975][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 824.945036][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 824.964987][T16306] 140495717302272-140495717306367: 0000000000000000 [ 824.965077][T13681] 140323571212288-140323571343359: [ 824.971965][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 824.995014][T13681] ffff888078bacb60 [ 824.998801][T13681] 140323571343360-140734793707519: 0000000000000000 [ 825.002301][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 825.025032][T16306] 140495717707776-140495717728255: 0000000000000000 [ 825.032075][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 825.039152][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 825.046247][T13681] 140734793842688-140734795161599: 0000000000000000 [ 825.053221][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 825.062017][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 825.113444][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 825.145068][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 825.152519][T13681] Pass: 12904516 Run:12904647 [ 825.164967][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 825.174918][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 825.184994][T13681] Call Trace: [ 825.188290][T13681] [ 825.191238][T13681] dump_stack_lvl+0xd1/0x138 [ 825.195041][T16306] 140495729573888-140495730151423: [ 825.195854][T13681] mt_find.cold+0x8b/0x90 [ 825.195869][T16306] 0000000000000000 [ 825.205861][T16306] 140495730151424-140495730155519: [ 825.209445][T13681] ? mas_find+0x1d0/0x1d0 [ 825.219367][T13681] find_vma+0x10c/0x1b0 [ 825.223561][T13681] ? can_vma_merge_before+0x390/0x390 [ 825.225009][T16306] ffff88801ccdf000 [ 825.228946][T13681] ? walk_page_test+0x78/0x180 [ 825.232648][T16306] 140495730155520-140495730286591: [ 825.237411][T13681] walk_page_range+0x2b1/0x4a0 [ 825.237457][T13681] ? __walk_page_range+0x780/0x780 [ 825.237503][T13681] mlock_fixup+0x650/0x810 [ 825.237553][T13681] apply_vma_lock_flags+0x23d/0x350 [ 825.237591][T13681] ? mlock_fixup+0x810/0x810 [ 825.267257][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 825.273182][T13681] do_mlock+0x25a/0x6d0 [ 825.277364][T13681] ? folio_evictable+0x270/0x270 [ 825.282333][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 825.288243][T13681] __x64_sys_mlock+0x59/0x80 [ 825.292854][T13681] do_syscall_64+0x39/0xb0 [ 825.297288][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 825.303193][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 825.307618][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 825.327327][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 825.335755][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 825.343735][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 825.351713][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 825.359720][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.367694][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 825.375687][T13681] [ 825.385238][T13681] index not increased! 20ffd000 <= 20ffd000 [ 825.391183][T13681] BUG at mt_find:6473 (1) [ 825.396016][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 825.406843][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 825.424930][T16306] ffff88801ccdf460 [ 825.444490][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 825.494910][T16306] 140495730286592-140724016734207: 0000000000000000 [ 825.503768][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 825.511050][T13681] 0-536866815: 0000000000000000 [ 825.511081][T13681] 536866816-536870911: ffff88801cede380 [ 825.511104][T13681] 536870912-553631743: ffff88801cede0e0 [ 825.511128][T13681] 553631744-553639935: 0000000000000000 [ 825.511150][T13681] 553639936-553635839: ffff8880772027e0 [ 825.511174][T13681] 553635840-553644031: ffff888077202a80 [ 825.511197][T13681] 553644032-553648127: ffff8880266220e0 [ 825.511220][T13681] 553648128-553652223: ffff88801cede000 [ 825.511243][T13681] 553652224-116819886079: 0000000000000000 [ 825.511265][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 825.511286][T13681] 116824080384-93825007087615: 0000000000000000 [ 825.511308][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 825.511329][T13681] 93825007226880-140323535712255: 0000000000000000 [ 825.511349][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 825.511373][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 825.511609][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 825.511633][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 825.511656][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 825.511681][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 825.511705][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 825.511728][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 825.511751][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 825.511775][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 825.511798][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 825.511822][T13681] 140323557900288-140323557904383: 0000000000000000 [ 825.511844][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 825.511868][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 825.511892][T13681] 140323558305792-140323558326271: 0000000000000000 [ 825.511915][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 825.511940][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 [ 825.534512][T16306] 140724016869376-140724018196479: [ 825.595131][T13681] 0000000000000000 140734795161599 [ 825.614415][T16306] 0000000000000000 [ 825.734995][T13681] ffff888078bac000 140734795177983 [ 825.742742][T16306] 140724018196480-140724018212863: [ 825.766435][T13681] ffff888078bacee0 140734795186175 [ 825.779677][T16306] ffff8880aabaea80 [ 825.816608][T13681] 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 825.832233][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 825.855189][T13681] 140323570171904-140323571208191: 0000000000000000 [ 825.857829][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 825.866134][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 825.882671][T16306] Pass: 12904516 Run:12904648 [ 825.887671][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 825.894930][T13681] 140323571212288-140323571343359: [ 825.897575][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 825.897591][T16306] Call Trace: [ 825.897600][T16306] [ 825.903119][T13681] ffff888078bacb60 [ 825.913159][T16306] dump_stack_lvl+0xd1/0x138 [ 825.913200][T16306] mt_find.cold+0x8b/0x90 [ 825.913234][T16306] ? mas_find+0x1d0/0x1d0 [ 825.913278][T16306] find_vma+0x10c/0x1b0 [ 825.940638][T16306] ? can_vma_merge_before+0x390/0x390 [ 825.944957][T13681] 140323571343360-140734793707519: [ 825.946059][T16306] ? walk_page_test+0x78/0x180 [ 825.946072][T13681] 0000000000000000 [ 825.946098][T16306] walk_page_range+0x2b1/0x4a0 [ 825.951617][T13681] 140734793707520-140734793842687: [ 825.956365][T16306] ? __walk_page_range+0x780/0x780 [ 825.956413][T16306] mlock_fixup+0x650/0x810 [ 825.956463][T16306] apply_vma_lock_flags+0x23d/0x350 [ 825.974981][T13681] ffff888078bac7e0 [ 825.975548][T16306] ? mlock_fixup+0x810/0x810 [ 825.979951][T13681] 140734793842688-140734795161599: [ 825.985481][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 825.985533][T16306] do_mlock+0x25a/0x6d0 [ 825.985575][T16306] ? folio_evictable+0x270/0x270 [ 825.985622][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 825.985655][T16306] __x64_sys_mlock+0x59/0x80 [ 825.985692][T16306] do_syscall_64+0x39/0xb0 [ 825.985730][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 825.992243][T13681] 0000000000000000 [ 825.994036][T16306] RIP: 0033:0x7fc7b548c0c9 [ 826.015382][T13681] 140734795161600-140734795177983: [ 826.020716][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 826.020742][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 826.020764][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 826.020781][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 826.020796][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 826.020812][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.020827][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 826.020863][T16306] [ 826.052278][T16306] index not increased! 20ffb000 <= 20ffb000 [ 826.087768][T13681] ffff888078bac000 [ 826.123906][T16306] BUG at mt_find:6473 (1) [ 826.123929][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 826.136384][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 826.157195][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 826.165732][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 826.234955][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 826.236300][T13681] Pass: 12904516 Run:12904649 [ 826.322241][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 826.332203][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 826.336901][T16306] 0-536866815: [ 826.342263][T13681] Call Trace: [ 826.342273][T13681] [ 826.342284][T13681] dump_stack_lvl+0xd1/0x138 [ 826.346149][T16306] 0000000000000000 [ 826.349341][T13681] mt_find.cold+0x8b/0x90 [ 826.352259][T16306] 536866816-536870911: [ 826.356844][T13681] ? mas_find+0x1d0/0x1d0 [ 826.356890][T13681] find_vma+0x10c/0x1b0 [ 826.360579][T16306] ffff8880aabbd9a0 [ 826.364889][T13681] ? can_vma_merge_before+0x390/0x390 [ 826.364923][T13681] ? walk_page_test+0x78/0x180 [ 826.369402][T16306] 536870912-553623551: [ 826.373710][T13681] walk_page_range+0x2b1/0x4a0 [ 826.380552][T16306] ffff8880aabbda80 [ 826.381543][T13681] ? __walk_page_range+0x780/0x780 [ 826.387246][T16306] 553623552-553635839: [ 826.391656][T13681] mlock_fixup+0x650/0x810 [ 826.396460][T16306] 0000000000000000 [ 826.400875][T13681] apply_vma_lock_flags+0x23d/0x350 [ 826.404566][T16306] 553635840-553627647: [ 826.409657][T13681] ? mlock_fixup+0x810/0x810 [ 826.409705][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 826.415028][T16306] ffff88801ccdf1c0 [ 826.418596][T13681] do_mlock+0x25a/0x6d0 [ 826.422291][T16306] 553627648-553639935: [ 826.427475][T13681] ? folio_evictable+0x270/0x270 [ 826.427523][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 826.427557][T13681] __x64_sys_mlock+0x59/0x80 [ 826.427590][T13681] do_syscall_64+0x39/0xb0 [ 826.427628][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 826.427657][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 826.427679][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 826.427701][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 826.427725][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 826.427740][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 826.427755][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 826.427771][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.427786][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 826.427826][T13681] [ 826.467346][T13681] index not increased! 20ffd000 <= 20ffd000 [ 826.548964][T16306] ffff88801ccdf380 [ 826.566199][T13681] BUG at mt_find:6473 (1) [ 826.574588][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 826.587979][T16306] 553639936-553648127: ffff88823bd4cf60 [ 826.588405][T13681] 0-18446744073709551615: [ 826.593940][T16306] 553648128-553652223: ffff8880aabbdb60 [ 826.605974][T16306] 553652224-116827226111: 0000000000000000 [ 826.606037][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 826.612172][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 826.626394][T16306] 116831420416-93825021313023: 0000000000000000 [ 826.634208][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 826.636966][T13681] contents: 93708183007232 20480 18446603338914365440 0 0 [ 826.641173][T16306] 93825021452288-140495695114239: [ 826.641634][T13681] 0 [ 826.648541][T16306] 0000000000000000 [ 826.648555][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 826.648582][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 [ 826.665576][T13681] 0 [ 826.668902][T16306] 000000000000000d [ 826.727302][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 826.735539][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 826.742713][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 826.749811][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 826.756329][T13681] 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 [ 826.756844][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 826.778116][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 826.784034][T13681] 0000000000000000 0 [ 826.785168][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 826.785196][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 826.785221][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 826.785243][T16306] 140495717302272-140495717306367: 0000000000000000 [ 826.785264][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 826.790391][T13681] 0000000000000000 0 [ 826.796256][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 826.796285][T16306] 140495717707776-140495717728255: 0000000000000000 [ 826.796308][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 826.796332][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 [ 826.803540][T13681] 0000000000000000 0 [ 826.810313][T16306] ffff88801ccdf000 140495730155519 [ 826.818063][T13681] 0000000000000000 0 [ 826.834965][T16306] ffff88801ccdf460 140495730286591 [ 826.840730][T13681] 0000000000000000 0 [ 826.843399][T16306] 0000000000000000 140724016734207 [ 826.851448][T13681] 0000000000000000 0 [ 826.874720][T16306] ffff8880aabae9a0 140724016869375 [ 826.892757][T13681] 0000000000000000 [ 826.904957][T16306] 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 826.907213][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 826.953969][T16306] 140495729573888-140495730151423: [ 826.986653][T13681] 0-536866815: 0000000000000000 [ 826.996021][T16306] 0000000000000000 [ 826.998658][T13681] 536866816-536870911: [ 827.001537][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 827.001569][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 827.001594][T16306] 140495730286592-140724016734207: 0000000000000000 [ 827.001619][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 827.001645][T16306] 140724016869376-140724018196479: 0000000000000000 [ 827.001669][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 827.001694][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 827.001718][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 827.001740][T16306] Pass: 12904516 Run:12904650 [ 827.001755][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 827.001780][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 827.001794][T16306] Call Trace: [ 827.001803][T16306] [ 827.001812][T16306] dump_stack_lvl+0xd1/0x138 [ 827.001852][T16306] mt_find.cold+0x8b/0x90 [ 827.001889][T16306] ? mas_find+0x1d0/0x1d0 [ 827.001939][T16306] find_vma+0x10c/0x1b0 [ 827.001967][T16306] ? can_vma_merge_before+0x390/0x390 [ 827.001996][T16306] ? walk_page_test+0x78/0x180 [ 827.002029][T16306] walk_page_range+0x2b1/0x4a0 [ 827.002065][T16306] ? __walk_page_range+0x780/0x780 [ 827.002115][T16306] mlock_fixup+0x650/0x810 [ 827.002166][T16306] apply_vma_lock_flags+0x23d/0x350 [ 827.002210][T16306] ? mlock_fixup+0x810/0x810 [ 827.002263][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 827.002304][T16306] do_mlock+0x25a/0x6d0 [ 827.002348][T16306] ? folio_evictable+0x270/0x270 [ 827.002400][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 827.002435][T16306] __x64_sys_mlock+0x59/0x80 [ 827.002474][T16306] do_syscall_64+0x39/0xb0 [ 827.002511][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 827.002541][T16306] RIP: 0033:0x7fc7b548c0c9 [ 827.002563][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 827.002587][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 827.002613][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 827.002630][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 827.002647][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 827.002662][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.002677][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 827.002715][T16306] [ 827.002736][T16306] index not increased! 20ffb000 <= 20ffb000 [ 827.002751][T16306] BUG at mt_find:6473 (1) [ 827.002765][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 827.002787][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: 93708189892608 20480 18446603349691330560 0 [ 827.021675][T13681] ffff88801cede380 [ 827.021694][T13681] 536870912-553631743: [ 827.049805][T16306] 0 [ 827.057522][T13681] ffff88801cede0e0 [ 827.057541][T13681] 553631744-553639935: 0000000000000000 [ 827.057566][T13681] 553639936-553635839: ffff8880772027e0 [ 827.057590][T13681] 553635840-553644031: ffff888077202a80 [ 827.057612][T13681] 553644032-553648127: ffff8880266220e0 [ 827.057634][T13681] 553648128-553652223: ffff88801cede000 [ 827.057656][T13681] 553652224-116819886079: 0000000000000000 [ 827.057677][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 827.057699][T13681] 116824080384-93825007087615: 0000000000000000 [ 827.057719][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 827.057742][T13681] 93825007226880-140323535712255: 0000000000000000 [ 827.057764][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 827.057787][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 827.058011][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 827.058034][T13681] 140323544104960-140323546202111: [ 827.068002][T16306] 0 [ 827.070401][T13681] ffff8880208b27e0 [ 827.080774][T16306] 0 [ 827.111888][T13681] 140323546202112-140323548299263: [ 827.115882][T16306] 0 [ 827.120174][T13681] ffff8880208b2700 [ 827.129943][T16306] 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 827.135340][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 827.135366][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 827.135389][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 827.135413][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 827.135455][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 827.135478][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 827.135500][T13681] 140323557900288-140323557904383: 0000000000000000 [ 827.135524][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 827.135547][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 827.154999][T16306] 0-140495695118335: [ 827.157558][T13681] 140323558305792-140323558326271: [ 827.160601][T16306] node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 [ 827.171854][T13681] 0000000000000000 [ 827.190061][T16306] contents: [ 827.210927][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 827.210956][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 827.211170][T13681] 140323570171904-140323571208191: 0000000000000000 [ 827.211194][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 827.211218][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 827.211243][T13681] 140323571343360-140734793707519: 0000000000000000 [ 827.211265][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 827.211289][T13681] 140734793842688-140734795161599: 0000000000000000 [ 827.211311][T13681] 140734795161600-140734795177983: [ 827.247150][T16306] 0000000000000000 536866815 [ 827.260145][T13681] ffff888078bac000 [ 827.260164][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 827.260221][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 827.260303][T13681] Pass: 12904527 Run:12904662 [ 827.260319][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 827.260346][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 827.260360][T13681] Call Trace: [ 827.260368][T13681] [ 827.279185][T16306] ffff8880aabbd9a0 536870911 [ 827.282010][T13681] dump_stack_lvl+0xd1/0x138 [ 827.305131][T16306] ffff8880aabbda80 553623551 [ 827.307189][T13681] mt_find.cold+0x8b/0x90 [ 827.310892][T16306] 0000000000000000 553635839 [ 827.316809][T13681] ? mas_find+0x1d0/0x1d0 [ 827.316852][T13681] find_vma+0x10c/0x1b0 [ 827.316878][T13681] ? can_vma_merge_before+0x390/0x390 [ 827.316904][T13681] ? walk_page_test+0x78/0x180 [ 827.316938][T13681] walk_page_range+0x2b1/0x4a0 [ 827.316976][T13681] ? __walk_page_range+0x780/0x780 [ 827.317028][T13681] mlock_fixup+0x650/0x810 [ 827.336200][T16306] ffff88801ccdf1c0 553627647 [ 827.340707][T13681] apply_vma_lock_flags+0x23d/0x350 [ 827.363461][T16306] ffff88801ccdf380 553639935 [ 827.366597][T13681] ? mlock_fixup+0x810/0x810 [ 827.366651][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 827.366689][T13681] do_mlock+0x25a/0x6d0 [ 827.366730][T13681] ? folio_evictable+0x270/0x270 [ 827.366781][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 827.366814][T13681] __x64_sys_mlock+0x59/0x80 [ 827.366849][T13681] do_syscall_64+0x39/0xb0 [ 827.385057][T16306] ffff88823bd4cf60 553648127 [ 827.435290][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 827.435330][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 827.435350][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 827.435369][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 827.435391][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 827.435413][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 827.435427][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 827.435442][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.435457][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 827.435495][T13681] [ 827.442646][T13681] index not increased! 20ffd000 <= 20ffd000 [ 827.491800][T16306] ffff8880aabbdb60 553652223 [ 827.507429][T13681] BUG at mt_find:6473 (1) [ 827.522555][T16306] 0000000000000000 116827226111 [ 827.529596][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 827.529618][T13681] 0-18446744073709551615: [ 827.555007][T16306] ffff8880aabbdc40 116831420415 [ 827.577799][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 827.580523][T16306] 0000000000000000 93825021313023 [ 827.581586][T13681] contents: 93708183007232 [ 827.595155][T16306] ffff8880aabbdd20 93825021452287 [ 827.656972][T13681] 20480 [ 827.710592][T16306] 0000000000000000 140495695114239 [ 827.717413][T13681] 18446603338914365440 [ 827.719553][T16306] ffff8880aabbde00 140495695118335 [ 827.742809][T13681] 0 [ 827.745861][T16306] 0000000000000000 0 [ 827.762035][T13681] 0 [ 827.773990][T16306] 000000000000000d [ 827.774724][T13681] 0 [ 827.778737][T16306] 0-536866815: [ 827.794979][T13681] 0 [ 827.800702][T16306] 0000000000000000 [ 827.803396][T13681] 0 [ 827.808218][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 827.808304][T16306] 536870912-553623551: ffff8880aabbda80 [ 827.831500][T13681] 0 [ 827.848231][T16306] 553623552-553635839: [ 827.857780][T13681] 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 827.857910][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 [ 827.871058][T16306] 0000000000000000 [ 827.903123][T13681] ffff8880266220e0 553648127 [ 827.914707][T16306] 553635840-553627647: [ 827.928941][T13681] ffff88801cede000 553652223 [ 827.945047][T16306] ffff88801ccdf1c0 [ 827.949942][T13681] 0000000000000000 116819886079 [ 827.969664][T16306] 553627648-553639935: ffff88801ccdf380 [ 827.969699][T16306] 553639936-553648127: ffff88823bd4cf60 [ 827.969722][T16306] 553648128-553652223: ffff8880aabbdb60 [ 827.969744][T16306] 553652224-116827226111: 0000000000000000 [ 827.969763][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 827.969782][T16306] 116831420416-93825021313023: 0000000000000000 [ 827.969804][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 827.969825][T16306] 93825021452288-140495695114239: 0000000000000000 [ 827.969848][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 827.969876][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 827.970108][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 827.970132][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 827.970155][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 827.970179][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 827.970204][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 827.970225][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 827.970246][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 827.970270][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 827.970294][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 827.970318][T16306] 140495717302272-140495717306367: 0000000000000000 [ 827.970342][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 827.970365][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 827.970390][T16306] 140495717707776-140495717728255: 0000000000000000 [ 827.970413][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 827.970437][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 [ 827.990926][T13681] ffff88801cede2a0 116824080383 [ 828.004975][T16306] ffff88801ccdf460 140495730286591 [ 828.007256][T13681] 0000000000000000 93825007087615 [ 828.010857][T16306] 0000000000000000 140724016734207 [ 828.015448][T13681] ffff8880208b22a0 93825007226879 [ 828.035060][T16306] ffff8880aabae9a0 140724016869375 [ 828.036537][T13681] 0000000000000000 140323535712255 [ 828.039863][T16306] 0000000000000000 140724018196479 [ 828.042500][T13681] ffff8880208b20e0 140323535716351 [ 828.054953][T16306] ffff8880aabaea80 140724018212863 [ 828.058465][T13681] 0000000000000000 0 [ 828.060992][T16306] ffff8880aabaeb60 140724018221055 [ 828.063496][T13681] 000000000000000d [ 828.083188][T16306] 0000000000000000 18446744073709551615 [ 828.099615][T13681] 0-536866815: [ 828.134703][T16306] 0000000000000000 0 [ 828.152987][T13681] 0000000000000000 [ 828.166122][T16306] 0000000000000000 0 [ 828.185607][T13681] 536866816-536870911: [ 828.191644][T16306] 0000000000000000 0 [ 828.196077][T13681] ffff88801cede380 [ 828.214996][T16306] 0000000000000000 0 [ 828.259873][T13681] 536870912-553631743: [ 828.314439][T16306] 0000000000000000 0 [ 828.326015][T13681] ffff88801cede0e0 [ 828.345044][T16306] 0000000000000000 0 [ 828.350209][T13681] 553631744-553639935: [ 828.373877][T16306] 0000000000000008 [ 828.376607][T13681] 0000000000000000 [ 828.381060][T16306] 140495729573888-140495730151423: [ 828.389884][T13681] 553639936-553635839: ffff8880772027e0 [ 828.389913][T13681] 553635840-553644031: ffff888077202a80 [ 828.389938][T13681] 553644032-553648127: ffff8880266220e0 [ 828.389962][T13681] 553648128-553652223: ffff88801cede000 [ 828.389985][T13681] 553652224-116819886079: 0000000000000000 [ 828.390008][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 828.390032][T13681] 116824080384-93825007087615: 0000000000000000 [ 828.395300][T16306] 0000000000000000 [ 828.395313][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 828.395366][T16306] 140495730155520-140495730286591: [ 828.442361][T13681] 93825007087616-93825007226879: [ 828.453166][T16306] ffff88801ccdf460 [ 828.454917][T13681] ffff8880208b22a0 [ 828.457441][T16306] 140495730286592-140724016734207: [ 828.461340][T13681] 93825007226880-140323535712255: [ 828.474951][T16306] 0000000000000000 [ 828.481364][T13681] 0000000000000000 [ 828.482453][T16306] 140724016734208-140724016869375: [ 828.487066][T13681] 140323535712256-140323535716351: [ 828.511773][T16306] ffff8880aabae9a0 [ 828.512661][T13681] ffff8880208b20e0 [ 828.518245][T16306] 140724016869376-140724018196479: [ 828.537752][T13681] 140323535716352-140323570171903: [ 828.542132][T16306] 0000000000000000 [ 828.598835][T13681] node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e [ 828.602159][T16306] 140724018196480-140724018212863: [ 828.604332][T13681] contents: ffff8880208b2620 140323544104959 [ 828.609939][T16306] ffff8880aabaea80 [ 828.609952][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 828.609976][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 828.610001][T16306] Pass: 12904527 Run:12904663 [ 828.610016][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 828.610042][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 828.610057][T16306] Call Trace: [ 828.610064][T16306] [ 828.610075][T16306] dump_stack_lvl+0xd1/0x138 [ 828.610115][T16306] mt_find.cold+0x8b/0x90 [ 828.610153][T16306] ? mas_find+0x1d0/0x1d0 [ 828.610197][T16306] find_vma+0x10c/0x1b0 [ 828.631158][T13681] ffff8880208b27e0 140323546202111 [ 828.634043][T16306] ? can_vma_merge_before+0x390/0x390 [ 828.638123][T13681] ffff8880208b2700 140323548299263 [ 828.645273][T16306] ? walk_page_test+0x78/0x180 [ 828.645313][T16306] walk_page_range+0x2b1/0x4a0 [ 828.645348][T16306] ? __walk_page_range+0x780/0x780 [ 828.651588][T13681] ffff8880208b28c0 140323550396415 [ 828.657106][T16306] mlock_fixup+0x650/0x810 [ 828.657158][T16306] apply_vma_lock_flags+0x23d/0x350 [ 828.661299][T13681] ffff8880208b21c0 140323552493567 [ 828.667778][T16306] ? mlock_fixup+0x810/0x810 [ 828.667837][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 828.667874][T16306] do_mlock+0x25a/0x6d0 [ 828.667916][T16306] ? folio_evictable+0x270/0x270 [ 828.667963][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 828.668002][T16306] __x64_sys_mlock+0x59/0x80 [ 828.668040][T16306] do_syscall_64+0x39/0xb0 [ 828.668077][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 828.668105][T16306] RIP: 0033:0x7fc7b548c0c9 [ 828.668125][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 828.668148][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 828.668174][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 828.668192][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 828.668208][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 828.668225][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.668240][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 828.668274][T16306] [ 828.694741][T13681] ffff8880208b2380 140323556687871 [ 828.701509][T16306] index not increased! 20ffb000 <= 20ffb000 [ 828.704582][T13681] ffff8880293ab0e0 140323556835327 [ 828.708313][T16306] BUG at mt_find:6473 (1) [ 828.729821][T13681] ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 [ 828.735917][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 828.740931][T13681] ffff888078bac700 140323570171903 [ 828.746073][T16306] 0-18446744073709551615: [ 828.775048][T13681] 0000000000000000 0 [ 828.775916][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 828.780427][T13681] 000000000000000d [ 828.780440][T13681] 140323535716352-140323544104959: [ 828.788077][T16306] contents: [ 828.804915][T13681] ffff8880208b2620 [ 828.808707][T16306] 93708189892608 [ 828.811423][T13681] 140323544104960-140323546202111: [ 828.819085][T16306] 20480 [ 828.834914][T13681] ffff8880208b27e0 [ 828.842217][T16306] 18446603349691330560 [ 828.858120][T13681] 140323546202112-140323548299263: [ 828.880175][T16306] 0 [ 828.898404][T13681] ffff8880208b2700 [ 828.918903][T16306] 0 [ 828.951571][T13681] 140323548299264-140323550396415: [ 828.956195][T16306] 0 [ 828.964914][T13681] ffff8880208b28c0 [ 828.965720][T16306] 0 [ 828.968886][T13681] 140323550396416-140323552493567: [ 828.974410][T16306] 0 [ 828.994636][T13681] ffff8880208b21c0 [ 829.008654][T16306] 0 [ 829.027384][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 829.055061][T16306] 0 | 02 02| ffff88807b18040c 140495695118335 [ 829.059715][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 829.065949][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 829.066047][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 829.066127][T13681] 140323557900288-140323557904383: 0000000000000000 [ 829.066150][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 829.066174][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 829.066197][T13681] 140323558305792-140323558326271: 0000000000000000 [ 829.066218][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 829.066242][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 829.075700][T16306] ffff88807dda800c 140495729573887 [ 829.094398][T13681] contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 829.094605][T13681] 140323570171904-140323571208191: 0000000000000000 [ 829.094631][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 829.094656][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 829.094680][T13681] 140323571343360-140734793707519: 0000000000000000 [ 829.094703][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 829.094727][T13681] 140734793842688-140734795161599: 0000000000000000 [ 829.094751][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 829.094774][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 829.094799][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 829.094823][T13681] Pass: 12904527 Run:12904664 [ 829.094838][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 829.094867][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 829.094880][T13681] Call Trace: [ 829.094887][T13681] [ 829.094897][T13681] dump_stack_lvl+0xd1/0x138 [ 829.094937][T13681] mt_find.cold+0x8b/0x90 [ 829.094975][T13681] ? mas_find+0x1d0/0x1d0 [ 829.095022][T13681] find_vma+0x10c/0x1b0 [ 829.095047][T13681] ? can_vma_merge_before+0x390/0x390 [ 829.107334][T16306] ffff88802b3c080c 18446744073709551615 [ 829.108910][T13681] ? walk_page_test+0x78/0x180 [ 829.116327][T16306] 0000000000000000 0 [ 829.122750][T13681] walk_page_range+0x2b1/0x4a0 [ 829.134165][T16306] 0000000000000000 0 [ 829.138923][T13681] ? __walk_page_range+0x780/0x780 [ 829.138978][T13681] mlock_fixup+0x650/0x810 [ 829.139027][T13681] apply_vma_lock_flags+0x23d/0x350 [ 829.139066][T13681] ? mlock_fixup+0x810/0x810 [ 829.139113][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 829.139151][T13681] do_mlock+0x25a/0x6d0 [ 829.139192][T13681] ? folio_evictable+0x270/0x270 [ 829.139260][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 829.139297][T13681] __x64_sys_mlock+0x59/0x80 [ 829.139333][T13681] do_syscall_64+0x39/0xb0 [ 829.139377][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 829.139407][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 829.139429][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 829.139451][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 829.139477][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 829.139493][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 829.183716][T16306] 0000000000000000 0 [ 829.187184][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 829.187202][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.187215][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 829.187250][T13681] [ 829.212810][T13681] index not increased! 20ffd000 <= 20ffd000 [ 829.218456][T16306] 0000000000000000 0 [ 829.225258][T13681] BUG at mt_find:6473 (1) [ 829.231390][T16306] 0000000000000000 0 [ 829.250829][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 829.260165][T16306] 0000000000000000 0 [ 829.284722][T13681] 0-18446744073709551615: [ 829.287127][T16306] 0000000000000000 [ 829.294324][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 829.294575][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 829.294803][T13681] 0-536866815: [ 829.301881][T16306] 0-140495695118335: [ 829.334803][T13681] 0000000000000000 [ 829.338637][T16306] node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 [ 829.343364][T13681] 536866816-536870911: [ 829.349308][T16306] ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 829.349393][T16306] 0-536866815: [ 829.367748][T13681] ffff88801cede380 [ 829.369095][T16306] 0000000000000000 [ 829.373450][T13681] 536870912-553631743: [ 829.388653][T16306] 536866816-536870911: [ 829.429931][T13681] ffff88801cede0e0 [ 829.435994][T16306] ffff8880aabbd9a0 [ 829.462495][T13681] 553631744-553639935: [ 829.467811][T16306] 536870912-553623551: [ 829.485036][T13681] 0000000000000000 [ 829.488633][T16306] ffff8880aabbda80 [ 829.491699][T13681] 553639936-553635839: [ 829.496478][T16306] 553623552-553635839: [ 829.585743][T13681] ffff8880772027e0 [ 829.590910][T16306] 0000000000000000 [ 829.593468][T13681] 553635840-553644031: [ 829.597258][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 829.597282][T16306] 553627648-553639935: ffff88801ccdf380 [ 829.597304][T16306] 553639936-553648127: ffff88823bd4cf60 [ 829.597327][T16306] 553648128-553652223: ffff8880aabbdb60 [ 829.597350][T16306] 553652224-116827226111: 0000000000000000 [ 829.597373][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 829.597396][T16306] 116831420416-93825021313023: 0000000000000000 [ 829.597419][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 829.597442][T16306] 93825021452288-140495695114239: 0000000000000000 [ 829.597465][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 829.597490][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 [ 829.683086][T13681] ffff888077202a80 [ 829.685200][T16306] 0000000000000000 0 000000000000000d [ 829.685224][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 829.685248][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 829.685272][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 829.685296][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 829.685320][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 829.685343][T16306] 140495711895552-140495716089855: [ 829.697312][T13681] 553644032-553648127: ffff8880266220e0 [ 829.697342][T13681] 553648128-553652223: ffff88801cede000 [ 829.697364][T13681] 553652224-116819886079: 0000000000000000 [ 829.697384][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 829.697406][T13681] 116824080384-93825007087615: 0000000000000000 [ 829.697429][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 829.697452][T13681] 93825007226880-140323535712255: 0000000000000000 [ 829.697476][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 829.697500][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: [ 829.704386][T16306] ffff8880aabae380 [ 829.723936][T13681] ffff8880208b2620 140323544104959 [ 829.724457][T16306] 140495716089856-140495716237311: [ 829.738144][T13681] ffff8880208b27e0 140323546202111 [ 829.742261][T16306] ffff8880aabae460 [ 829.763142][T13681] ffff8880208b2700 140323548299263 [ 829.768488][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 829.768520][T16306] 140495716966400-140495717302271: [ 829.775858][T13681] ffff8880208b28c0 140323550396415 [ 829.835499][T16306] ffff8880aabae620 [ 829.860400][T13681] ffff8880208b21c0 140323552493567 [ 829.870912][T16306] 140495717302272-140495717306367: [ 829.884991][T13681] ffff8880208b2380 140323556687871 [ 829.898019][T16306] 0000000000000000 [ 829.898036][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 829.898060][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 829.898082][T16306] 140495717707776-140495717728255: 0000000000000000 [ 829.898106][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 829.898127][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 [ 829.920812][T13681] ffff8880293ab0e0 140323556835327 [ 829.949708][T16306] 0000000000000000 0 [ 829.953444][T13681] ffff8880293ab000 140323557564415 [ 829.957007][T16306] 0000000000000000 0 [ 829.965080][T13681] ffff888078bac380 140323557900287 [ 829.967833][T16306] 0000000000000000 0 [ 829.983363][T13681] 0000000000000000 140323557904383 [ 829.988724][T16306] 0000000000000000 0 0000000000000000 0 0000000000000008 [ 829.988763][T16306] 140495729573888-140495730151423: [ 829.997124][T13681] ffff888078bac0e0 140323558268927 [ 830.000941][T16306] 0000000000000000 [ 830.004231][T13681] ffff888078bac460 140323558305791 [ 830.008896][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 830.008924][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 830.008947][T16306] 140495730286592-140724016734207: 0000000000000000 [ 830.008970][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 830.008993][T16306] 140724016869376-140724018196479: 0000000000000000 [ 830.009014][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 830.009035][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 830.009058][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 830.009081][T16306] Pass: 12904527 Run:12904665 [ 830.009094][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 830.009118][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 830.009132][T16306] Call Trace: [ 830.009141][T16306] [ 830.009151][T16306] dump_stack_lvl+0xd1/0x138 [ 830.009218][T16306] mt_find.cold+0x8b/0x90 [ 830.009256][T16306] ? mas_find+0x1d0/0x1d0 [ 830.009302][T16306] find_vma+0x10c/0x1b0 [ 830.009329][T16306] ? can_vma_merge_before+0x390/0x390 [ 830.009361][T16306] ? walk_page_test+0x78/0x180 [ 830.009393][T16306] walk_page_range+0x2b1/0x4a0 [ 830.009429][T16306] ? __walk_page_range+0x780/0x780 [ 830.009483][T16306] mlock_fixup+0x650/0x810 [ 830.009546][T16306] apply_vma_lock_flags+0x23d/0x350 [ 830.009589][T16306] ? mlock_fixup+0x810/0x810 [ 830.009641][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 830.009685][T16306] do_mlock+0x25a/0x6d0 [ 830.009729][T16306] ? folio_evictable+0x270/0x270 [ 830.009780][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 830.009816][T16306] __x64_sys_mlock+0x59/0x80 [ 830.009856][T16306] do_syscall_64+0x39/0xb0 [ 830.009901][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 830.009932][T16306] RIP: 0033:0x7fc7b548c0c9 [ 830.009954][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 830.009979][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 830.010004][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 830.010022][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 830.010039][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 830.010055][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.010070][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 830.010108][T16306] [ 830.011168][T16306] index not increased! 20ffb000 <= 20ffb000 [ 830.034958][T13681] 0000000000000000 140323558326271 [ 830.094019][T16306] BUG at mt_find:6473 (1) [ 830.124367][T13681] ffff888078bac700 140323570171903 [ 830.149545][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 830.149782][T13681] 0000000000000000 0 [ 830.156335][T16306] 0-18446744073709551615: [ 830.164918][T13681] 000000000000000d [ 830.169452][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 830.184992][T13681] 140323535716352-140323544104959: [ 830.192063][T16306] contents: [ 830.211874][T13681] ffff8880208b2620 [ 830.216631][T16306] 93708189892608 [ 830.227818][T13681] 140323544104960-140323546202111: [ 830.272493][T16306] 20480 [ 830.284503][T13681] ffff8880208b27e0 [ 830.294200][T16306] 18446603349691330560 [ 830.304695][T13681] 140323546202112-140323548299263: [ 830.313962][T16306] 0 [ 830.327534][T13681] ffff8880208b2700 [ 830.337115][T16306] 0 [ 830.348884][T13681] 140323548299264-140323550396415: [ 830.358752][T16306] 0 [ 830.400712][T13681] ffff8880208b28c0 [ 830.408622][T16306] 0 [ 830.414918][T13681] 140323550396416-140323552493567: [ 830.425101][T16306] 0 [ 830.444941][T13681] ffff8880208b21c0 [ 830.452106][T16306] 0 [ 830.452442][T13681] 140323552493568-140323556687871: [ 830.460452][T16306] 0 [ 830.481207][T13681] ffff8880208b2380 [ 830.482894][T16306] | 02 02| [ 830.493934][T13681] 140323556687872-140323556835327: [ 830.499656][T16306] ffff88807b18040c 140495695118335 [ 830.505214][T13681] ffff8880293ab0e0 [ 830.508195][T16306] ffff88807dda800c 140495729573887 [ 830.513201][T13681] 140323556835328-140323557564415: [ 830.529147][T16306] ffff88802b3c080c 18446744073709551615 [ 830.546555][T13681] ffff8880293ab000 [ 830.552413][T16306] 0000000000000000 0 [ 830.558215][T13681] 140323557564416-140323557900287: [ 830.575852][T16306] 0000000000000000 0 [ 830.580610][T13681] ffff888078bac380 [ 830.583410][T16306] 0000000000000000 0 [ 830.587232][T13681] 140323557900288-140323557904383: 0000000000000000 [ 830.587400][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 830.587424][T13681] 140323558268928-140323558305791: [ 830.592885][T16306] 0000000000000000 0 [ 830.614349][T13681] ffff888078bac460 [ 830.616211][T16306] 0000000000000000 0 [ 830.622826][T13681] 140323558305792-140323558326271: [ 830.629796][T16306] 0000000000000000 0 [ 830.644941][T13681] 0000000000000000 [ 830.647725][T16306] 0000000000000000 [ 830.650504][T13681] 140323558326272-140323570171903: [ 830.654203][T16306] 0-140495695118335: [ 830.663858][T13681] ffff888078bac700 [ 830.663874][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 830.683301][T16306] node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 830.735085][T13681] 140323570171904-140323571208191: 0000000000000000 [ 830.783470][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 830.784972][T16306] 0-536866815: 0000000000000000 [ 830.790960][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 830.802772][T13681] 140323571343360-140734793707519: 0000000000000000 [ 830.804956][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 830.810328][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 830.823889][T13681] 140734793842688-140734795161599: 0000000000000000 [ 830.830679][T16306] 536870912-553623551: ffff8880aabbda80 [ 830.833633][T13681] 140734795161600-140734795177983: [ 830.837068][T16306] 553623552-553635839: 0000000000000000 [ 830.848693][T13681] ffff888078bac000 [ 830.852439][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 830.852468][T16306] 553627648-553639935: ffff88801ccdf380 [ 830.864615][T16306] 553639936-553648127: ffff88823bd4cf60 [ 830.870656][T16306] 553648128-553652223: ffff8880aabbdb60 [ 830.870962][T13681] 140734795177984-140734795186175: [ 830.876627][T16306] 553652224-116827226111: 0000000000000000 [ 830.876652][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 830.876674][T16306] 116831420416-93825021313023: 0000000000000000 [ 830.876697][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 830.876720][T16306] 93825021452288-140495695114239: 0000000000000000 [ 830.876743][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 830.876767][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 [ 830.895270][T13681] ffff888078bacee0 [ 830.895288][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 830.895315][T13681] Pass: 12904537 Run:12904676 [ 830.895329][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 830.895352][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 830.895366][T13681] Call Trace: [ 830.895375][T13681] [ 830.895386][T13681] dump_stack_lvl+0xd1/0x138 [ 830.903477][T16306] ffff8880aabae540 140495716966399 [ 830.908694][T13681] mt_find.cold+0x8b/0x90 [ 830.908732][T13681] ? mas_find+0x1d0/0x1d0 [ 830.908775][T13681] find_vma+0x10c/0x1b0 [ 830.908802][T13681] ? can_vma_merge_before+0x390/0x390 [ 830.917001][T16306] ffff8880aabae620 140495717302271 [ 830.922558][T13681] ? walk_page_test+0x78/0x180 [ 830.958794][T16306] 0000000000000000 140495717306367 [ 830.965216][T13681] walk_page_range+0x2b1/0x4a0 [ 830.965258][T13681] ? __walk_page_range+0x780/0x780 [ 830.965307][T13681] mlock_fixup+0x650/0x810 [ 830.970066][T16306] ffff8880aabae700 140495717670911 [ 830.979958][T13681] apply_vma_lock_flags+0x23d/0x350 [ 830.980014][T13681] ? mlock_fixup+0x810/0x810 [ 830.980057][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 830.980094][T13681] do_mlock+0x25a/0x6d0 [ 830.980137][T13681] ? folio_evictable+0x270/0x270 [ 830.980187][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 830.980222][T13681] __x64_sys_mlock+0x59/0x80 [ 830.980258][T13681] do_syscall_64+0x39/0xb0 [ 830.980294][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 830.980322][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 830.993203][T16306] ffff8880aabae7e0 140495717707775 [ 830.993668][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 830.996706][T16306] 0000000000000000 140495717728255 [ 831.001191][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 831.010564][T16306] ffff8880aabae8c0 140495729573887 [ 831.010691][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 831.015083][T16306] 0000000000000000 0 [ 831.019143][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 831.024491][T16306] 000000000000000d [ 831.029665][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 831.029682][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.029696][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 831.029738][T13681] [ 831.069639][T13681] index not increased! 20ffd000 <= 20ffd000 [ 831.070593][T16306] 140495695118336-140495703506943: [ 831.077128][T13681] BUG at mt_find:6473 (1) [ 831.084959][T16306] ffff8880aabbdee0 [ 831.086360][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 831.091670][T16306] 140495703506944-140495705604095: [ 831.096572][T13681] 0-18446744073709551615: [ 831.113960][T16306] ffff8880aabae000 [ 831.116881][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 831.142110][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 831.142145][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 831.142170][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 831.142193][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 831.142223][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 831.142243][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 831.159983][T13681] contents: [ 831.164312][T16306] 140495716966400-140495717302271: [ 831.168733][T13681] 93708183007232 [ 831.188839][T16306] ffff8880aabae620 [ 831.196736][T13681] 20480 [ 831.205070][T16306] 140495717302272-140495717306367: [ 831.207849][T13681] 18446603338914365440 [ 831.213313][T16306] 0000000000000000 [ 831.219659][T13681] 0 [ 831.238219][T16306] 140495717306368-140495717670911: [ 831.244270][T13681] 0 [ 831.258364][T16306] ffff8880aabae700 [ 831.258382][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 831.284000][T13681] 0 [ 831.295291][T16306] 140495717707776-140495717728255: [ 831.306922][T13681] 0 [ 831.323365][T16306] 0000000000000000 [ 831.330801][T13681] 0 [ 831.333204][T16306] 140495717728256-140495729573887: [ 831.336020][T13681] 0 [ 831.342527][T16306] ffff8880aabae8c0 [ 831.344831][T13681] 0 [ 831.365012][T16306] 140495729573888-18446744073709551615: [ 831.366969][T13681] | 02 02| [ 831.369991][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 [ 831.372477][T13681] ffff88801c1d3c0c 140323535716351 [ 831.390763][T16306] contents: [ 831.409963][T13681] ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 831.421691][T16306] 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 831.450089][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 831.497921][T16306] 140495729573888-140495730151423: [ 831.536962][T13681] 0-536866815: 0000000000000000 [ 831.551190][T13681] 536866816-536870911: ffff88801cede380 [ 831.557365][T13681] 536870912-553631743: ffff88801cede0e0 [ 831.557758][T16306] 0000000000000000 [ 831.563977][T13681] 553631744-553639935: 0000000000000000 [ 831.574215][T13681] 553639936-553635839: ffff8880772027e0 [ 831.574931][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 831.580242][T13681] 553635840-553644031: ffff888077202a80 [ 831.594590][T13681] 553644032-553648127: ffff8880266220e0 [ 831.600607][T13681] 553648128-553652223: ffff88801cede000 [ 831.602065][T16306] 140495730155520-140495730286591: [ 831.606622][T13681] 553652224-116819886079: 0000000000000000 [ 831.606714][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 831.606768][T13681] 116824080384-93825007087615: 0000000000000000 [ 831.606815][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 831.606861][T13681] 93825007226880-140323535712255: 0000000000000000 [ 831.606882][T13681] 140323535712256-140323535716351: [ 831.630584][T16306] ffff88801ccdf460 [ 831.631975][T13681] ffff8880208b20e0 [ 831.649495][T16306] 140495730286592-140724016734207: [ 831.653084][T13681] 140323535716352-140323570171903: [ 831.658039][T16306] 0000000000000000 [ 831.669640][T13681] node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 831.683626][T16306] 140724016734208-140724016869375: [ 831.727427][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 831.735212][T16306] ffff8880aabae9a0 [ 831.740336][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 831.749916][T16306] 140724016869376-140724018196479: 0000000000000000 [ 831.751786][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 831.765897][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 831.772842][T16306] 140724018196480-140724018212863: [ 831.772866][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 831.781701][T16306] ffff8880aabaea80 [ 831.785763][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 831.796624][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 831.796690][T16306] 140724018212864-140724018221055: [ 831.803586][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 831.816747][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 831.816861][T16306] ffff8880aabaeb60 [ 831.823728][T13681] 140323557900288-140323557904383: 0000000000000000 [ 831.834707][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 831.840869][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 831.843494][T13681] 140323558268928-140323558305791: [ 831.849503][T16306] Pass: 12904537 Run:12904677 [ 831.861181][T13681] ffff888078bac460 [ 831.862999][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 831.874834][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 831.875085][T13681] 140323558305792-140323558326271: [ 831.884887][T16306] Call Trace: [ 831.884898][T16306] [ 831.884908][T16306] dump_stack_lvl+0xd1/0x138 [ 831.884947][T16306] mt_find.cold+0x8b/0x90 [ 831.884982][T16306] ? mas_find+0x1d0/0x1d0 [ 831.885029][T16306] find_vma+0x10c/0x1b0 [ 831.885061][T16306] ? can_vma_merge_before+0x390/0x390 [ 831.905427][T13681] 0000000000000000 [ 831.905711][T16306] ? walk_page_test+0x78/0x180 [ 831.910025][T13681] 140323558326272-140323570171903: [ 831.914169][T16306] walk_page_range+0x2b1/0x4a0 [ 831.933294][T13681] ffff888078bac700 [ 831.933689][T16306] ? __walk_page_range+0x780/0x780 [ 831.938971][T13681] 140323570171904-18446744073709551615: [ 831.942148][T16306] mlock_fixup+0x650/0x810 [ 831.957676][T16306] apply_vma_lock_flags+0x23d/0x350 [ 831.962948][T16306] ? mlock_fixup+0x810/0x810 [ 831.965113][T13681] node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: [ 831.967585][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 831.967602][T13681] 0000000000000000 140323571208191 [ 831.967632][T16306] do_mlock+0x25a/0x6d0 [ 831.977599][T13681] ffff88801ccdfa80 140323571212287 [ 831.981992][T16306] ? folio_evictable+0x270/0x270 [ 832.000904][T13681] ffff888078bacb60 140323571343359 [ 832.001464][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 832.012617][T16306] __x64_sys_mlock+0x59/0x80 [ 832.014643][T13681] 0000000000000000 140734793707519 [ 832.017242][T16306] do_syscall_64+0x39/0xb0 [ 832.017279][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 832.017306][T16306] RIP: 0033:0x7fc7b548c0c9 [ 832.017326][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 832.017346][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 832.017370][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 832.017388][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 832.017404][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 832.017420][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.017436][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 832.017472][T16306] [ 832.054399][T16306] index not increased! 20ffb000 <= 20ffb000 [ 832.078155][T13681] ffff888078bac7e0 140734793842687 [ 832.083863][T16306] BUG at mt_find:6473 (1) [ 832.105001][T13681] 0000000000000000 140734795161599 [ 832.106894][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 832.109823][T13681] ffff888078bac000 140734795177983 [ 832.115857][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 [ 832.134970][T13681] ffff888078bacee0 140734795186175 [ 832.163589][T16306] | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 832.190743][T13681] 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 832.210239][T13681] 140323570171904-140323571208191: 0000000000000000 [ 832.217537][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 832.223531][T16306] 0-140495695118335: [ 832.224487][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 832.234979][T16306] node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 832.236286][T13681] 140323571343360-140734793707519: 0000000000000000 [ 832.292791][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 832.297705][T16306] 0-536866815: 0000000000000000 [ 832.305071][T13681] 140734793842688-140734795161599: 0000000000000000 [ 832.305104][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 832.305125][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 832.305155][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 832.305179][T13681] Pass: 12904537 Run:12904678 [ 832.305193][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 832.305219][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 832.305233][T13681] Call Trace: [ 832.305242][T13681] [ 832.305252][T13681] dump_stack_lvl+0xd1/0x138 [ 832.305294][T13681] mt_find.cold+0x8b/0x90 [ 832.312233][T16306] 536866816-536870911: [ 832.319126][T13681] ? mas_find+0x1d0/0x1d0 [ 832.319179][T13681] find_vma+0x10c/0x1b0 [ 832.326125][T16306] ffff8880aabbd9a0 [ 832.333452][T13681] ? can_vma_merge_before+0x390/0x390 [ 832.338134][T16306] 536870912-553623551: [ 832.347976][T13681] ? walk_page_test+0x78/0x180 [ 832.348015][T13681] walk_page_range+0x2b1/0x4a0 [ 832.409184][T13681] ? __walk_page_range+0x780/0x780 [ 832.414335][T13681] mlock_fixup+0x650/0x810 [ 832.418780][T13681] apply_vma_lock_flags+0x23d/0x350 [ 832.424004][T13681] ? mlock_fixup+0x810/0x810 [ 832.428622][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 832.434535][T13681] do_mlock+0x25a/0x6d0 [ 832.438716][T13681] ? folio_evictable+0x270/0x270 [ 832.443682][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 832.449593][T13681] __x64_sys_mlock+0x59/0x80 [ 832.454205][T13681] do_syscall_64+0x39/0xb0 [ 832.458641][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 832.464544][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 832.468965][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 832.488600][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 832.497024][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 832.504998][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 832.512986][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 832.520960][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.528934][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 832.536926][T13681] [ 832.545764][T16306] ffff8880aabbda80 [ 832.549654][T16306] 553623552-553635839: 0000000000000000 [ 832.559732][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 832.566093][T16306] 553627648-553639935: ffff88801ccdf380 [ 832.572930][T16306] 553639936-553648127: ffff88823bd4cf60 [ 832.579473][T16306] 553648128-553652223: ffff8880aabbdb60 [ 832.585839][T16306] 553652224-116827226111: 0000000000000000 [ 832.592035][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 832.598957][T16306] 116831420416-93825021313023: 0000000000000000 [ 832.601138][T13681] index not increased! 20ffd000 <= 20ffd000 [ 832.605959][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 832.615040][T13681] BUG at mt_find:6473 (1) [ 832.618919][T16306] 93825021452288-140495695114239: [ 832.622824][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 832.622847][T13681] 0-18446744073709551615: [ 832.628629][T16306] 0000000000000000 [ 832.648454][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 832.650001][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 832.655976][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 832.666382][T13681] contents: [ 832.719938][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 832.731379][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 832.737861][T13681] 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 [ 832.739105][T16306] 140495705604096-140495707701247: [ 832.743096][T13681] | 02 02| [ 832.746739][T16306] ffff8880aabae0e0 [ 832.755098][T13681] ffff88801c1d3c0c 140323535716351 [ 832.758136][T16306] 140495707701248-140495709798399: [ 832.758907][T13681] ffff88801c1d300c 140323570171903 [ 832.764138][T16306] ffff8880aabae1c0 [ 832.782398][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 832.785050][T13681] ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 832.789766][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 832.813605][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 832.819637][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 [ 832.821185][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 832.851136][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 832.858511][T16306] 140495717302272-140495717306367: 0000000000000000 [ 832.864225][T13681] ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 832.895342][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 832.895373][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 832.895394][T16306] 140495717707776-140495717728255: 0000000000000000 [ 832.895416][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 832.895440][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 832.895664][T16306] 140495729573888-140495730151423: 0000000000000000 [ 832.895688][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 832.895712][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 832.895736][T16306] 140495730286592-140724016734207: 0000000000000000 [ 832.895759][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 832.895783][T16306] 140724016869376-140724018196479: 0000000000000000 [ 832.895805][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 832.895829][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 832.895852][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 832.895875][T16306] Pass: 12904537 Run:12904679 [ 832.895889][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 832.895916][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 832.895931][T16306] Call Trace: [ 832.895939][T16306] [ 832.895949][T16306] dump_stack_lvl+0xd1/0x138 [ 832.895992][T16306] mt_find.cold+0x8b/0x90 [ 832.896031][T16306] ? mas_find+0x1d0/0x1d0 [ 832.896085][T16306] find_vma+0x10c/0x1b0 [ 832.896114][T16306] ? can_vma_merge_before+0x390/0x390 [ 832.896145][T16306] ? walk_page_test+0x78/0x180 [ 832.896181][T16306] walk_page_range+0x2b1/0x4a0 [ 832.896220][T16306] ? __walk_page_range+0x780/0x780 [ 832.896269][T16306] mlock_fixup+0x650/0x810 [ 832.923773][T13681] 0-536866815: [ 832.924087][T16306] apply_vma_lock_flags+0x23d/0x350 [ 832.985822][T13681] 0000000000000000 [ 832.987420][T16306] ? mlock_fixup+0x810/0x810 [ 832.994341][T13681] 536866816-536870911: [ 833.001268][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 833.001306][T16306] do_mlock+0x25a/0x6d0 [ 833.001344][T16306] ? folio_evictable+0x270/0x270 [ 833.001391][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 833.001430][T16306] __x64_sys_mlock+0x59/0x80 [ 833.001467][T16306] do_syscall_64+0x39/0xb0 [ 833.160616][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 833.166534][T16306] RIP: 0033:0x7fc7b548c0c9 [ 833.170959][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 833.190577][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 833.198999][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 833.206981][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 833.214961][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 833.222937][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.230914][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 833.238906][T16306] [ 833.256226][T13681] ffff88801cede380 [ 833.257187][T16306] index not increased! 20ffb000 <= 20ffb000 [ 833.259985][T13681] 536870912-553631743: [ 833.266943][T16306] BUG at mt_find:6473 (1) [ 833.274977][T13681] ffff88801cede0e0 [ 833.276336][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 833.279501][T13681] 553631744-553639935: [ 833.289998][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 833.304946][T13681] 0000000000000000 [ 833.333576][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 833.349490][T13681] 553639936-553635839: [ 833.390023][T16306] 0-536866815: 0000000000000000 [ 833.396575][T13681] ffff8880772027e0 [ 833.401109][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 833.409486][T13681] 553635840-553644031: ffff888077202a80 [ 833.409532][T16306] 536870912-553623551: ffff8880aabbda80 [ 833.421417][T16306] 553623552-553635839: 0000000000000000 [ 833.425100][T13681] 553644032-553648127: ffff8880266220e0 [ 833.430438][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 833.433585][T13681] 553648128-553652223: [ 833.439199][T16306] 553627648-553639935: ffff88801ccdf380 [ 833.439223][T16306] 553639936-553648127: ffff88823bd4cf60 [ 833.439244][T16306] 553648128-553652223: ffff8880aabbdb60 [ 833.439267][T16306] 553652224-116827226111: 0000000000000000 [ 833.439289][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 833.439314][T16306] 116831420416-93825021313023: 0000000000000000 [ 833.439337][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 833.439360][T16306] 93825021452288-140495695114239: 0000000000000000 [ 833.439380][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 833.439405][T16306] 140495695118336-140495729573887: [ 833.455105][T13681] ffff88801cede000 [ 833.455846][T16306] node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e [ 833.461690][T13681] 553652224-116819886079: [ 833.467912][T16306] contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 833.484941][T13681] 0000000000000000 [ 833.496734][T16306] 140495695118336-140495703506943: [ 833.515014][T13681] 116819886080-116824080383: [ 833.523130][T16306] ffff8880aabbdee0 [ 833.524298][T13681] ffff88801cede2a0 [ 833.524312][T13681] 116824080384-93825007087615: [ 833.571367][T16306] 140495703506944-140495705604095: [ 833.587938][T13681] 0000000000000000 [ 833.589817][T16306] ffff8880aabae000 [ 833.592985][T13681] 93825007087616-93825007226879: [ 833.599409][T16306] 140495705604096-140495707701247: [ 833.608632][T13681] ffff8880208b22a0 [ 833.624925][T16306] ffff8880aabae0e0 [ 833.631732][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 833.642192][T13681] 93825007226880-140323535712255: 0000000000000000 [ 833.649211][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 833.650411][T16306] 140495709798400-140495711895551: [ 833.656218][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 833.675253][T16306] ffff8880aabae2a0 [ 833.719386][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 833.728838][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 833.737577][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 833.740612][T16306] 140495711895552-140495716089855: [ 833.744541][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 833.760126][T16306] ffff8880aabae380 [ 833.763883][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 833.769044][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 833.779334][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 833.785143][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 833.786871][T13681] 140323556687872-140323556835327: [ 833.793273][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 833.801532][T13681] ffff8880293ab0e0 [ 833.811052][T16306] 140495717302272-140495717306367: 0000000000000000 [ 833.818442][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 833.823322][T16306] 140495717306368-140495717670911: [ 833.825916][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 833.834129][T16306] ffff8880aabae700 [ 833.839005][T13681] 140323557900288-140323557904383: 0000000000000000 [ 833.847324][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 833.851004][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 833.863515][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 833.865017][T16306] 140495717707776-140495717728255: 0000000000000000 [ 833.871856][T13681] 140323558305792-140323558326271: 0000000000000000 [ 833.884581][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 833.892025][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 833.893577][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 833.952161][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 833.956212][T13681] 140323570171904-140323571208191: 0000000000000000 [ 834.012891][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 834.020401][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 834.023876][T16306] 140495729573888-140495730151423: [ 834.027700][T13681] 140323571343360-140734793707519: 0000000000000000 [ 834.034918][T16306] 0000000000000000 [ 834.040764][T13681] 140734793707520-140734793842687: [ 834.043903][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 834.050013][T13681] ffff888078bac7e0 [ 834.060934][T13681] 140734793842688-140734795161599: 0000000000000000 [ 834.069705][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 834.076022][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 834.077094][T13681] 140734795177984-140734795186175: [ 834.083615][T16306] 140495730286592-140724016734207: 0000000000000000 [ 834.089563][T13681] ffff888078bacee0 [ 834.100528][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 834.110037][T13681] Pass: 12904557 Run:12904700 [ 834.111949][T16306] 140724016734208-140724016869375: [ 834.114727][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 834.123069][T16306] ffff8880aabae9a0 [ 834.130131][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 834.130146][T13681] Call Trace: [ 834.130154][T13681] [ 834.130163][T13681] dump_stack_lvl+0xd1/0x138 [ 834.133884][T16306] 140724016869376-140724018196479: [ 834.143924][T13681] mt_find.cold+0x8b/0x90 [ 834.143967][T13681] ? mas_find+0x1d0/0x1d0 [ 834.147251][T16306] 0000000000000000 [ 834.150167][T13681] find_vma+0x10c/0x1b0 [ 834.154730][T16306] 140724018196480-140724018212863: [ 834.160271][T13681] ? can_vma_merge_before+0x390/0x390 [ 834.160314][T13681] ? walk_page_test+0x78/0x180 [ 834.160347][T13681] walk_page_range+0x2b1/0x4a0 [ 834.164649][T16306] ffff8880aabaea80 [ 834.168969][T13681] ? __walk_page_range+0x780/0x780 [ 834.169025][T13681] mlock_fixup+0x650/0x810 [ 834.169068][T13681] apply_vma_lock_flags+0x23d/0x350 [ 834.169107][T13681] ? mlock_fixup+0x810/0x810 [ 834.169160][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 834.169201][T13681] do_mlock+0x25a/0x6d0 [ 834.169241][T13681] ? folio_evictable+0x270/0x270 [ 834.169290][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 834.169327][T13681] __x64_sys_mlock+0x59/0x80 [ 834.169366][T13681] do_syscall_64+0x39/0xb0 [ 834.169397][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 834.184927][T16306] 140724018212864-140724018221055: [ 834.188164][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 834.192913][T16306] ffff8880aabaeb60 [ 834.197653][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 834.197675][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 834.197700][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 834.204612][T16306] 140724018221056-18446744073709551615: [ 834.206482][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 834.206499][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 834.206515][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.212551][T16306] 0000000000000000 [ 834.216091][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 834.216128][T13681] [ 834.227114][T13681] index not increased! 20ffd000 <= 20ffd000 [ 834.250894][T16306] Pass: 12904557 Run:12904700 [ 834.272252][T13681] BUG at mt_find:6473 (1) [ 834.304946][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 834.308211][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 834.313435][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 834.313451][T16306] Call Trace: [ 834.313459][T16306] [ 834.313473][T16306] dump_stack_lvl+0xd1/0x138 [ 834.313511][T16306] mt_find.cold+0x8b/0x90 [ 834.313546][T16306] ? mas_find+0x1d0/0x1d0 [ 834.313591][T16306] find_vma+0x10c/0x1b0 [ 834.313618][T16306] ? can_vma_merge_before+0x390/0x390 [ 834.313649][T16306] ? walk_page_test+0x78/0x180 [ 834.313685][T16306] walk_page_range+0x2b1/0x4a0 [ 834.313722][T16306] ? __walk_page_range+0x780/0x780 [ 834.313775][T16306] mlock_fixup+0x650/0x810 [ 834.313826][T16306] apply_vma_lock_flags+0x23d/0x350 [ 834.313870][T16306] ? mlock_fixup+0x810/0x810 [ 834.313923][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 834.313964][T16306] do_mlock+0x25a/0x6d0 [ 834.314006][T16306] ? folio_evictable+0x270/0x270 [ 834.314057][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 834.314091][T16306] __x64_sys_mlock+0x59/0x80 [ 834.314130][T16306] do_syscall_64+0x39/0xb0 [ 834.314168][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 834.314199][T16306] RIP: 0033:0x7fc7b548c0c9 [ 834.314222][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 834.314246][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 834.314271][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 834.314287][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 834.314301][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 834.314315][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.314329][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 834.314367][T16306] [ 834.315973][T16306] index not increased! 20ffb000 <= 20ffb000 [ 834.345057][T13681] 0-18446744073709551615: [ 834.353847][T16306] BUG at mt_find:6473 (1) [ 834.374970][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 834.403634][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 834.424475][T13681] contents: [ 834.434671][T16306] 0-18446744073709551615: [ 834.452377][T13681] 93708183007232 [ 834.465964][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 834.474405][T13681] 20480 [ 834.485238][T16306] contents: [ 834.494209][T13681] 18446603338914365440 [ 834.503941][T16306] 93708189892608 [ 834.526102][T13681] 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 [ 834.550093][T16306] 20480 [ 834.580675][T13681] 0000000000000000 0 [ 834.588535][T16306] 18446603349691330560 [ 834.604989][T13681] 0000000000000000 0 [ 834.608640][T16306] 0 [ 834.611855][T13681] 0000000000000000 0 [ 834.620702][T16306] 0 [ 834.634967][T13681] 0000000000000000 0 [ 834.649894][T16306] 0 [ 834.679166][T13681] 0000000000000000 0 [ 834.679573][T16306] 0 [ 834.681687][T13681] 0000000000000000 [ 834.688669][T16306] 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 834.705000][T13681] 0-140323535716351: [ 834.716903][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 834.730907][T13681] node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 [ 834.772943][T16306] 0-536866815: 0000000000000000 [ 834.786439][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 834.792379][T16306] 536870912-553623551: ffff8880aabbda80 [ 834.801740][T16306] 553623552-553635839: 0000000000000000 [ 834.802222][T13681] contents: [ 834.809107][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 834.814045][T13681] 0000000000000000 536866815 [ 834.819063][T16306] 553627648-553639935: [ 834.825940][T13681] ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 834.835625][T16306] ffff88801ccdf380 [ 834.873016][T13681] 0-536866815: 0000000000000000 [ 834.878349][T13681] 536866816-536870911: ffff88801cede380 [ 834.884274][T13681] 536870912-553631743: ffff88801cede0e0 [ 834.888099][T16306] 553639936-553648127: ffff88823bd4cf60 [ 834.892580][T13681] 553631744-553639935: 0000000000000000 [ 834.902339][T13681] 553639936-553635839: ffff8880772027e0 [ 834.908647][T16306] 553648128-553652223: ffff8880aabbdb60 [ 834.908844][T13681] 553635840-553644031: ffff888077202a80 [ 834.914779][T16306] 553652224-116827226111: [ 834.920747][T13681] 553644032-553648127: ffff8880266220e0 [ 834.920775][T13681] 553648128-553652223: ffff88801cede000 [ 834.920799][T13681] 553652224-116819886079: 0000000000000000 [ 834.920821][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 834.920843][T13681] 116824080384-93825007087615: 0000000000000000 [ 834.943212][T16306] 0000000000000000 [ 834.945326][T13681] 93825007087616-93825007226879: [ 834.951715][T16306] 116827226112-116831420415: [ 834.966566][T13681] ffff8880208b22a0 [ 834.967156][T16306] ffff8880aabbdc40 [ 834.975329][T13681] 93825007226880-140323535712255: 0000000000000000 [ 834.979536][T16306] 116831420416-93825021313023: 0000000000000000 [ 834.993535][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 834.996498][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 835.000415][T16306] 93825021452288-140495695114239: 0000000000000000 [ 835.014546][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 835.014991][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e [ 835.021626][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 835.035050][T13681] contents: [ 835.092691][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 835.103605][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 835.110711][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 835.117933][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 835.123727][T13681] ffff8880208b2620 140323544104959 [ 835.124992][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 835.125020][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 835.125044][T16306] 140495716089856-140495716237311: [ 835.144988][T13681] ffff8880208b27e0 140323546202111 [ 835.145700][T16306] ffff8880aabae460 [ 835.150788][T13681] ffff8880208b2700 140323548299263 [ 835.155921][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 835.155947][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 835.156006][T16306] 140495717302272-140495717306367: 0000000000000000 [ 835.156059][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 835.156108][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 835.156153][T16306] 140495717707776-140495717728255: [ 835.175007][T13681] ffff8880208b28c0 140323550396415 [ 835.179506][T16306] 0000000000000000 [ 835.194926][T13681] ffff8880208b21c0 140323552493567 [ 835.202847][T16306] 140495717728256-140495729573887: [ 835.214479][T13681] ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 835.235211][T16306] ffff8880aabae8c0 [ 835.261790][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 835.262807][T16306] 140495729573888-18446744073709551615: [ 835.269853][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 835.269882][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 835.269905][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 835.269929][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 835.289354][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 [ 835.290064][T13681] 140323552493568-140323556687871: [ 835.312124][T16306] contents: [ 835.313073][T13681] ffff8880208b2380 [ 835.321275][T16306] 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 835.337529][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 835.376937][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 835.383931][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 835.391391][T13681] 140323557900288-140323557904383: 0000000000000000 [ 835.393479][T16306] 140495729573888-140495730151423: [ 835.398610][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 835.398640][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 835.398665][T13681] 140323558305792-140323558326271: 0000000000000000 [ 835.398689][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 835.398715][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 [ 835.414983][T16306] 0000000000000000 [ 835.422520][T13681] 0000000000000000 0 [ 835.428568][T16306] 140495730151424-140495730155519: [ 835.445094][T13681] 0000000000000000 0 [ 835.473319][T16306] ffff88801ccdf000 [ 835.492914][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 835.500313][T16306] 140495730286592-140724016734207: 0000000000000000 [ 835.507637][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 835.513227][T13681] 0000000000000000 0 [ 835.514590][T16306] 140724016869376-140724018196479: 0000000000000000 [ 835.518793][T13681] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 835.534485][T13681] 140323570171904-140323571208191: 0000000000000000 [ 835.534950][T16306] 140724018196480-140724018212863: [ 835.543483][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 835.551617][T16306] ffff8880aabaea80 [ 835.556191][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 835.556218][T13681] 140323571343360-140734793707519: 0000000000000000 [ 835.556241][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 835.556265][T13681] 140734793842688-140734795161599: 0000000000000000 [ 835.556289][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 835.556313][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 835.556336][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 835.556358][T13681] Pass: 12904558 Run:12904703 [ 835.556373][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 835.556399][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 835.556414][T13681] Call Trace: [ 835.556421][T13681] [ 835.556430][T13681] dump_stack_lvl+0xd1/0x138 [ 835.573509][T16306] 140724018212864-140724018221055: [ 835.574002][T13681] mt_find.cold+0x8b/0x90 [ 835.581388][T16306] ffff8880aabaeb60 [ 835.587891][T13681] ? mas_find+0x1d0/0x1d0 [ 835.587939][T13681] find_vma+0x10c/0x1b0 [ 835.595291][T16306] 140724018221056-18446744073709551615: [ 835.601780][T13681] ? can_vma_merge_before+0x390/0x390 [ 835.623425][T16306] 0000000000000000 [ 835.623666][T13681] ? walk_page_test+0x78/0x180 [ 835.634118][T16306] Pass: 12904558 Run:12904703 [ 835.636977][T13681] walk_page_range+0x2b1/0x4a0 [ 835.637019][T13681] ? __walk_page_range+0x780/0x780 [ 835.701012][T13681] mlock_fixup+0x650/0x810 [ 835.705483][T13681] apply_vma_lock_flags+0x23d/0x350 [ 835.710728][T13681] ? mlock_fixup+0x810/0x810 [ 835.715387][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 835.721314][T13681] do_mlock+0x25a/0x6d0 [ 835.725503][T13681] ? folio_evictable+0x270/0x270 [ 835.730483][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 835.736400][T13681] __x64_sys_mlock+0x59/0x80 [ 835.741018][T13681] do_syscall_64+0x39/0xb0 [ 835.745468][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 835.751392][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 835.755835][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 835.775476][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 835.783912][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 835.791896][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 835.799879][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 835.807865][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.815854][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 835.823852][T13681] [ 835.839820][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 835.840174][T13681] index not increased! 20ffd000 <= 20ffd000 [ 835.849751][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 835.849765][T16306] Call Trace: [ 835.849773][T16306] [ 835.849783][T16306] dump_stack_lvl+0xd1/0x138 [ 835.849824][T16306] mt_find.cold+0x8b/0x90 [ 835.849857][T16306] ? mas_find+0x1d0/0x1d0 [ 835.849899][T16306] find_vma+0x10c/0x1b0 [ 835.849925][T16306] ? can_vma_merge_before+0x390/0x390 [ 835.849956][T16306] ? walk_page_test+0x78/0x180 [ 835.849991][T16306] walk_page_range+0x2b1/0x4a0 [ 835.850028][T16306] ? __walk_page_range+0x780/0x780 [ 835.850082][T16306] mlock_fixup+0x650/0x810 [ 835.850134][T16306] apply_vma_lock_flags+0x23d/0x350 [ 835.850177][T16306] ? mlock_fixup+0x810/0x810 [ 835.850232][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 835.850272][T16306] do_mlock+0x25a/0x6d0 [ 835.850316][T16306] ? folio_evictable+0x270/0x270 [ 835.850367][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 835.850404][T16306] __x64_sys_mlock+0x59/0x80 [ 835.850449][T16306] do_syscall_64+0x39/0xb0 [ 835.850487][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 835.850519][T16306] RIP: 0033:0x7fc7b548c0c9 [ 835.850542][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 835.850566][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 835.850592][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 835.850607][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 835.850621][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 835.850635][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.850648][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 835.850685][T16306] [ 835.874961][T16306] index not increased! 20ffb000 <= 20ffb000 [ 835.878166][T13681] BUG at mt_find:6473 (1) [ 835.882368][T16306] BUG at mt_find:6473 (1) [ 835.886752][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 835.886773][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 [ 835.904926][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 835.906160][T13681] | 02 02| [ 835.911184][T16306] 0-18446744073709551615: [ 835.915630][T13681] ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 835.915807][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 [ 835.934958][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 835.937821][T13681] 0000000000000000 0 [ 835.940920][T16306] contents: 93708189892608 [ 835.952818][T13681] 000000000000000d [ 835.974958][T16306] 20480 [ 835.987357][T13681] 0-536866815: [ 836.012803][T16306] 18446603349691330560 [ 836.037574][T13681] 0000000000000000 [ 836.041909][T16306] 0 [ 836.048062][T13681] 536866816-536870911: [ 836.062580][T16306] 0 [ 836.094929][T13681] ffff88801cede380 [ 836.096912][T16306] 0 [ 836.132478][T13681] 536870912-553631743: [ 836.187546][T16306] 0 [ 836.191922][T13681] ffff88801cede0e0 [ 836.193357][T16306] 0 [ 836.204183][T13681] 553631744-553639935: [ 836.222619][T16306] 0 [ 836.232345][T13681] 0000000000000000 [ 836.243501][T13681] 553639936-553635839: ffff8880772027e0 [ 836.244110][T16306] 0 [ 836.250007][T13681] 553635840-553644031: ffff888077202a80 [ 836.255677][T16306] | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 836.260644][T13681] 553644032-553648127: [ 836.260651][T16306] 0000000000000000 [ 836.260663][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 836.296324][T13681] ffff8880266220e0 [ 836.343589][T16306] 0-536866815: 0000000000000000 [ 836.343644][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 836.343668][T16306] 536870912-553623551: ffff8880aabbda80 [ 836.343691][T16306] 553623552-553635839: 0000000000000000 [ 836.343714][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 836.343736][T16306] 553627648-553639935: ffff88801ccdf380 [ 836.347622][T16306] 553639936-553648127: [ 836.370456][T13681] 553648128-553652223: ffff88801cede000 [ 836.394443][T13681] 553652224-116819886079: 0000000000000000 [ 836.394509][T16306] ffff88823bd4cf60 [ 836.400943][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 836.400971][T13681] 116824080384-93825007087615: 0000000000000000 [ 836.400994][T13681] 93825007087616-93825007226879: [ 836.415071][T16306] 553648128-553652223: [ 836.421033][T13681] ffff8880208b22a0 [ 836.432327][T13681] 93825007226880-140323535712255: [ 836.432343][T16306] ffff8880aabbdb60 [ 836.432358][T16306] 553652224-116827226111: [ 836.438191][T13681] 0000000000000000 [ 836.438235][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 836.438291][T13681] 140323535716352-140323570171903: [ 836.442694][T16306] 0000000000000000 [ 836.447842][T13681] node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e [ 836.464961][T16306] 116827226112-116831420415: [ 836.469809][T13681] contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 [ 836.481370][T16306] ffff8880aabbdc40 [ 836.481385][T16306] 116831420416-93825021313023: [ 836.500124][T13681] ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 836.514069][T16306] 0000000000000000 [ 836.547324][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 836.555010][T16306] 93825021452288-140495695114239: 0000000000000000 [ 836.555829][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 836.562045][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 836.578229][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 836.584416][T13681] 140323544104960-140323546202111: [ 836.633660][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 836.648056][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 836.653541][T13681] ffff8880208b27e0 [ 836.658130][T16306] 140495705604096-140495707701247: [ 836.658945][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 836.664492][T16306] ffff8880aabae0e0 [ 836.676820][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 836.683813][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 836.689265][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 836.691319][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 836.697970][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 836.705226][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 836.711929][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 836.725789][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 836.733132][T16306] 140495716237312-140495716966399: [ 836.734735][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 836.747181][T16306] ffff8880aabae540 [ 836.747357][T13681] 140323557564416-140323557900287: [ 836.751007][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 836.758080][T13681] ffff888078bac380 [ 836.767593][T16306] 140495717302272-140495717306367: 0000000000000000 [ 836.780488][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 836.784003][T13681] 140323557900288-140323557904383: 0000000000000000 [ 836.787751][T16306] 140495717670912-140495717707775: [ 836.794586][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 836.800624][T16306] ffff8880aabae7e0 [ 836.811331][T16306] 140495717707776-140495717728255: 0000000000000000 [ 836.818751][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 836.820940][T13681] 140323558268928-140323558305791: [ 836.825986][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 836.833246][T13681] ffff888078bac460 [ 836.882813][T16306] 140495729573888-140495730151423: [ 836.891079][T13681] 140323558305792-140323558326271: [ 836.897788][T16306] 0000000000000000 [ 836.905042][T13681] 0000000000000000 [ 836.910821][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 836.918093][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 836.919106][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 836.934936][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 836.984487][T16306] 140495730286592-140724016734207: 0000000000000000 [ 836.985441][T13681] 140323570171904-140323571208191: 0000000000000000 [ 836.991967][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 837.008959][T16306] 140724016869376-140724018196479: 0000000000000000 [ 837.015043][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 837.016188][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 837.025281][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 837.030044][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 837.044119][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 837.050949][T13681] 140323571343360-140734793707519: 0000000000000000 [ 837.052076][T16306] Pass: 12904566 Run:12904713 [ 837.063607][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 837.065061][T13681] 140734793707520-140734793842687: [ 837.073599][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 837.073616][T13681] ffff888078bac7e0 [ 837.079155][T16306] Call Trace: [ 837.079165][T16306] [ 837.079175][T16306] dump_stack_lvl+0xd1/0x138 [ 837.079214][T16306] mt_find.cold+0x8b/0x90 [ 837.079249][T16306] ? mas_find+0x1d0/0x1d0 [ 837.079296][T16306] find_vma+0x10c/0x1b0 [ 837.079321][T16306] ? can_vma_merge_before+0x390/0x390 [ 837.079347][T16306] ? walk_page_test+0x78/0x180 [ 837.079382][T16306] walk_page_range+0x2b1/0x4a0 [ 837.079418][T16306] ? __walk_page_range+0x780/0x780 [ 837.079471][T16306] mlock_fixup+0x650/0x810 [ 837.079523][T16306] apply_vma_lock_flags+0x23d/0x350 [ 837.079567][T16306] ? mlock_fixup+0x810/0x810 [ 837.079620][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 837.079661][T16306] do_mlock+0x25a/0x6d0 [ 837.079705][T16306] ? folio_evictable+0x270/0x270 [ 837.079756][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 837.079789][T16306] __x64_sys_mlock+0x59/0x80 [ 837.079827][T16306] do_syscall_64+0x39/0xb0 [ 837.079865][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 837.079895][T16306] RIP: 0033:0x7fc7b548c0c9 [ 837.079917][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 837.079941][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 837.079966][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 837.079984][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 837.080000][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 837.080016][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.080031][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 837.080070][T16306] [ 837.085985][T16306] index not increased! 20ffb000 <= 20ffb000 [ 837.109323][T13681] 140734793842688-140734795161599: [ 837.130417][T16306] BUG at mt_find:6473 (1) [ 837.151990][T13681] 0000000000000000 [ 837.153488][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 837.158913][T13681] 140734795161600-140734795177983: [ 837.175022][T16306] 0-18446744073709551615: [ 837.180767][T13681] ffff888078bac000 [ 837.184706][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 837.189878][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 837.189908][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 837.189961][T13681] Pass: 12904566 Run:12904714 [ 837.189977][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 837.190003][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 837.190018][T13681] Call Trace: [ 837.190026][T13681] [ 837.190036][T13681] dump_stack_lvl+0xd1/0x138 [ 837.204931][T16306] contents: [ 837.220031][T13681] mt_find.cold+0x8b/0x90 [ 837.220077][T13681] ? mas_find+0x1d0/0x1d0 [ 837.233302][T16306] 93708189892608 [ 837.236459][T13681] find_vma+0x10c/0x1b0 [ 837.236492][T13681] ? can_vma_merge_before+0x390/0x390 [ 837.257731][T16306] 20480 [ 837.260417][T13681] ? walk_page_test+0x78/0x180 [ 837.281591][T16306] 18446603349691330560 [ 837.282817][T13681] walk_page_range+0x2b1/0x4a0 [ 837.287563][T16306] 0 [ 837.290838][T13681] ? __walk_page_range+0x780/0x780 [ 837.313429][T16306] 0 [ 837.320430][T13681] mlock_fixup+0x650/0x810 [ 837.320485][T13681] apply_vma_lock_flags+0x23d/0x350 [ 837.327923][T16306] 0 [ 837.334770][T13681] ? mlock_fixup+0x810/0x810 [ 837.339773][T16306] 0 [ 837.349310][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 837.349354][T13681] do_mlock+0x25a/0x6d0 [ 837.349394][T13681] ? folio_evictable+0x270/0x270 [ 837.349439][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 837.349477][T13681] __x64_sys_mlock+0x59/0x80 [ 837.349515][T13681] do_syscall_64+0x39/0xb0 [ 837.349553][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 837.349583][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 837.349605][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 837.349628][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 837.349651][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 837.349665][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 837.349680][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 837.375476][T16306] 0 [ 837.378249][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.384408][T16306] 0 [ 837.386187][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 837.386229][T13681] [ 837.393092][T13681] index not increased! 20ffd000 <= 20ffd000 [ 837.430713][T16306] 0 [ 837.433072][T13681] BUG at mt_find:6473 (1) [ 837.435566][T16306] | 02 02| [ 837.454577][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 837.470880][T16306] ffff88807b18040c 140495695118335 [ 837.485729][T13681] 0-18446744073709551615: [ 837.505833][T16306] ffff88807dda800c 140495729573887 [ 837.528294][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 837.530971][T16306] ffff88802b3c080c 18446744073709551615 [ 837.537099][T13681] contents: [ 837.547083][T16306] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 837.547161][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 837.547396][T16306] 0-536866815: 0000000000000000 [ 837.547419][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 837.547484][T16306] 536870912-553623551: [ 837.565050][T13681] 93708183007232 [ 837.576920][T16306] ffff8880aabbda80 [ 837.576937][T16306] 553623552-553635839: 0000000000000000 [ 837.576961][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 837.576983][T16306] 553627648-553639935: ffff88801ccdf380 [ 837.577038][T16306] 553639936-553648127: ffff88823bd4cf60 [ 837.577089][T16306] 553648128-553652223: ffff8880aabbdb60 [ 837.577137][T16306] 553652224-116827226111: [ 837.586500][T13681] 20480 [ 837.604919][T16306] 0000000000000000 [ 837.609779][T13681] 18446603338914365440 [ 837.614849][T16306] 116827226112-116831420415: [ 837.633725][T13681] 0 [ 837.692107][T16306] ffff8880aabbdc40 [ 837.692125][T16306] 116831420416-93825021313023: 0000000000000000 [ 837.692149][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 837.692173][T16306] 93825021452288-140495695114239: 0000000000000000 [ 837.692198][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 837.692222][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 837.692462][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 837.692488][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 837.692513][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 837.692538][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 837.692562][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 837.692587][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 837.692611][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 837.692635][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 837.692659][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 837.692684][T16306] 140495717302272-140495717306367: 0000000000000000 [ 837.692707][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 837.692732][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 837.692754][T16306] 140495717707776-140495717728255: 0000000000000000 [ 837.692776][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 837.692800][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 [ 837.711822][T13681] 0 [ 837.724150][T16306] 0000000000000000 140724018196479 [ 837.744501][T13681] 0 [ 837.752583][T16306] ffff8880aabaea80 140724018212863 [ 837.765314][T13681] 0 [ 837.774392][T16306] ffff8880aabaeb60 140724018221055 [ 837.784570][T13681] 0 [ 837.796008][T16306] 0000000000000000 18446744073709551615 [ 837.900268][T13681] 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 837.900405][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 837.900631][T13681] 0-536866815: 0000000000000000 [ 837.900655][T13681] 536866816-536870911: ffff88801cede380 [ 837.900678][T13681] 536870912-553631743: ffff88801cede0e0 [ 837.900701][T13681] 553631744-553639935: 0000000000000000 [ 837.900723][T13681] 553639936-553635839: ffff8880772027e0 [ 837.900743][T13681] 553635840-553644031: ffff888077202a80 [ 837.900766][T13681] 553644032-553648127: ffff8880266220e0 [ 837.900789][T13681] 553648128-553652223: ffff88801cede000 [ 837.900812][T13681] 553652224-116819886079: 0000000000000000 [ 837.900835][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 837.900859][T13681] 116824080384-93825007087615: 0000000000000000 [ 837.900883][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 837.900907][T13681] 93825007226880-140323535712255: 0000000000000000 [ 837.900930][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 837.900954][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 [ 837.925483][T16306] 0000000000000000 0 [ 837.930692][T13681] ffff8880293ab0e0 140323556835327 [ 837.937508][T16306] 0000000000000000 0 [ 837.954173][T13681] ffff8880293ab000 140323557564415 [ 837.977749][T16306] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 837.977810][T16306] 140495729573888-140495730151423: 0000000000000000 [ 838.010383][T13681] ffff888078bac380 140323557900287 [ 838.104331][T16306] 140495730151424-140495730155519: [ 838.108116][T13681] 0000000000000000 140323557904383 [ 838.112175][T16306] ffff88801ccdf000 [ 838.130526][T13681] ffff888078bac0e0 140323558268927 [ 838.135560][T16306] 140495730155520-140495730286591: [ 838.155013][T13681] ffff888078bac460 140323558305791 [ 838.155451][T16306] ffff88801ccdf460 [ 838.161987][T13681] 0000000000000000 140323558326271 [ 838.194080][T16306] 140495730286592-140724016734207: [ 838.220314][T13681] ffff888078bac700 140323570171903 [ 838.223257][T16306] 0000000000000000 [ 838.241433][T13681] 0000000000000000 0 [ 838.243980][T16306] 140724016734208-140724016869375: [ 838.247367][T13681] 000000000000000d [ 838.265445][T16306] ffff8880aabae9a0 [ 838.267346][T13681] 140323535716352-140323544104959: [ 838.272410][T16306] 140724016869376-140724018196479: [ 838.278038][T13681] ffff8880208b2620 [ 838.278053][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 838.278145][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 838.278170][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 838.278217][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 838.278264][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 838.294935][T16306] 0000000000000000 [ 838.296911][T13681] 140323556687872-140323556835327: [ 838.300539][T16306] 140724018196480-140724018212863: [ 838.326325][T13681] ffff8880293ab0e0 [ 838.330544][T16306] ffff8880aabaea80 [ 838.334242][T13681] 140323556835328-140323557564415: [ 838.341570][T16306] 140724018212864-140724018221055: [ 838.369752][T13681] ffff8880293ab000 [ 838.370722][T16306] ffff8880aabaeb60 [ 838.373874][T13681] 140323557564416-140323557900287: [ 838.377861][T16306] 140724018221056-18446744073709551615: [ 838.385058][T13681] ffff888078bac380 [ 838.389340][T16306] 0000000000000000 [ 838.392556][T13681] 140323557900288-140323557904383: [ 838.397537][T16306] Pass: 12904566 Run:12904715 [ 838.415013][T13681] 0000000000000000 [ 838.417453][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 838.421589][T13681] 140323557904384-140323558268927: [ 838.426207][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 838.426221][T16306] Call Trace: [ 838.426228][T16306] [ 838.426239][T16306] dump_stack_lvl+0xd1/0x138 [ 838.426279][T16306] mt_find.cold+0x8b/0x90 [ 838.426311][T16306] ? mas_find+0x1d0/0x1d0 [ 838.426353][T16306] find_vma+0x10c/0x1b0 [ 838.426379][T16306] ? can_vma_merge_before+0x390/0x390 [ 838.426411][T16306] ? walk_page_test+0x78/0x180 [ 838.426447][T16306] walk_page_range+0x2b1/0x4a0 [ 838.426485][T16306] ? __walk_page_range+0x780/0x780 [ 838.436315][T13681] ffff888078bac0e0 [ 838.440175][T16306] mlock_fixup+0x650/0x810 [ 838.458851][T13681] 140323558268928-140323558305791: [ 838.459022][T16306] apply_vma_lock_flags+0x23d/0x350 [ 838.461930][T13681] ffff888078bac460 [ 838.466513][T16306] ? mlock_fixup+0x810/0x810 [ 838.466562][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 838.466599][T16306] do_mlock+0x25a/0x6d0 [ 838.466646][T16306] ? folio_evictable+0x270/0x270 [ 838.466697][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 838.466733][T16306] __x64_sys_mlock+0x59/0x80 [ 838.466769][T16306] do_syscall_64+0x39/0xb0 [ 838.466803][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 838.563341][T16306] RIP: 0033:0x7fc7b548c0c9 [ 838.567770][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 838.587382][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 838.595799][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 838.603771][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 838.611745][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 838.619717][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.627690][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 838.635681][T16306] [ 838.641325][T13681] 140323558305792-140323558326271: 0000000000000000 [ 838.648439][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 838.655516][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 838.675503][T16306] index not increased! 20ffb000 <= 20ffb000 [ 838.705436][T13681] 140323570171904-140323571208191: 0000000000000000 [ 838.705469][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 838.705494][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 838.705518][T13681] 140323571343360-140734793707519: 0000000000000000 [ 838.705542][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 838.705566][T13681] 140734793842688-140734795161599: 0000000000000000 [ 838.705590][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 838.705612][T13681] 140734795177984-140734795186175: [ 838.725848][T16306] BUG at mt_find:6473 (1) [ 838.727710][T13681] ffff888078bacee0 [ 838.734141][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 838.740397][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 838.740427][T13681] Pass: 12904566 Run:12904716 [ 838.740442][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 838.740467][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 838.740481][T13681] Call Trace: [ 838.760997][T16306] 0-18446744073709551615: [ 838.761677][T13681] [ 838.767653][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 838.771503][T13681] dump_stack_lvl+0xd1/0x138 [ 838.775729][T16306] contents: [ 838.783609][T13681] mt_find.cold+0x8b/0x90 [ 838.791518][T16306] 93708189892608 [ 838.795635][T13681] ? mas_find+0x1d0/0x1d0 [ 838.795686][T13681] find_vma+0x10c/0x1b0 [ 838.795712][T13681] ? can_vma_merge_before+0x390/0x390 [ 838.795739][T13681] ? walk_page_test+0x78/0x180 [ 838.795774][T13681] walk_page_range+0x2b1/0x4a0 [ 838.795811][T13681] ? __walk_page_range+0x780/0x780 [ 838.795864][T13681] mlock_fixup+0x650/0x810 [ 838.795911][T13681] apply_vma_lock_flags+0x23d/0x350 [ 838.795954][T13681] ? mlock_fixup+0x810/0x810 [ 838.796006][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 838.796048][T13681] do_mlock+0x25a/0x6d0 [ 838.796091][T13681] ? folio_evictable+0x270/0x270 [ 838.796138][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 838.796172][T13681] __x64_sys_mlock+0x59/0x80 [ 838.826349][T16306] 20480 [ 838.826731][T13681] do_syscall_64+0x39/0xb0 [ 838.834257][T16306] 18446603349691330560 [ 838.838824][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 838.838853][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 838.838874][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 838.843154][T16306] 0 [ 838.848896][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 838.848922][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 838.848938][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 838.848954][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 838.848969][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.848983][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 838.849016][T13681] [ 838.879911][T13681] index not increased! 20ffd000 <= 20ffd000 [ 838.881617][T16306] 0 [ 838.886441][T13681] BUG at mt_find:6473 (1) [ 838.894914][T16306] 0 [ 838.896402][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 838.901712][T16306] 0 [ 838.906361][T13681] 0-18446744073709551615: [ 838.919971][T16306] 0 [ 838.925011][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 838.940934][T16306] 0 [ 838.944008][T13681] contents: [ 838.963517][T16306] 0 [ 838.992526][T13681] 93708183007232 [ 839.015105][T16306] | 02 02| [ 839.024585][T13681] 20480 [ 839.043938][T16306] ffff88807b18040c 140495695118335 [ 839.045186][T13681] 18446603338914365440 [ 839.049275][T16306] ffff88807dda800c 140495729573887 [ 839.059090][T13681] 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 839.062161][T16306] ffff88802b3c080c 18446744073709551615 [ 839.075013][T13681] 0000000000000000 0 [ 839.077220][T16306] 0000000000000000 0 [ 839.082325][T13681] 0000000000000000 [ 839.086552][T16306] 0000000000000000 0 0000000000000000 0 [ 839.115578][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 839.189608][T16306] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 839.198716][T13681] 0-536866815: 0000000000000000 [ 839.203957][T13681] 536866816-536870911: ffff88801cede380 [ 839.210233][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 839.262229][T13681] 536870912-553631743: ffff88801cede0e0 [ 839.262301][T16306] 0-536866815: [ 839.271422][T13681] 553631744-553639935: [ 839.275069][T16306] 0000000000000000 [ 839.275374][T13681] 0000000000000000 [ 839.280359][T16306] 536866816-536870911: [ 839.283439][T13681] 553639936-553635839: ffff8880772027e0 [ 839.294994][T16306] ffff8880aabbd9a0 [ 839.297843][T13681] 553635840-553644031: ffff888077202a80 [ 839.305091][T16306] 536870912-553623551: ffff8880aabbda80 [ 839.307464][T13681] 553644032-553648127: [ 839.313252][T16306] 553623552-553635839: 0000000000000000 [ 839.317820][T13681] ffff8880266220e0 [ 839.317832][T13681] 553648128-553652223: ffff88801cede000 [ 839.317887][T13681] 553652224-116819886079: 0000000000000000 [ 839.317909][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 839.341937][T16306] 553635840-553627647: [ 839.347799][T13681] 116824080384-93825007087615: 0000000000000000 [ 839.347826][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 839.347851][T13681] 93825007226880-140323535712255: 0000000000000000 [ 839.347875][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 839.347899][T13681] 140323535716352-140323570171903: [ 839.366437][T16306] ffff88801ccdf1c0 [ 839.366457][T16306] 553627648-553639935: ffff88801ccdf380 [ 839.366484][T16306] 553639936-553648127: ffff88823bd4cf60 [ 839.366506][T16306] 553648128-553652223: ffff8880aabbdb60 [ 839.366526][T16306] 553652224-116827226111: 0000000000000000 [ 839.366547][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 839.396021][T13681] node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 [ 839.420550][T16306] 116831420416-93825021313023: 0000000000000000 [ 839.420582][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 839.445999][T13681] ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 839.490742][T16306] 93825021452288-140495695114239: 0000000000000000 [ 839.501316][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 839.509591][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 839.510829][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 839.516890][T16306] 140495695118336-140495729573887: [ 839.523749][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 839.529658][T16306] node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 839.553570][T13681] 140323548299264-140323550396415: [ 839.589815][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 839.602671][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 839.604676][T13681] ffff8880208b28c0 [ 839.612802][T16306] 140495705604096-140495707701247: [ 839.613547][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 839.619463][T16306] ffff8880aabae0e0 [ 839.630551][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 839.638787][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 839.646216][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 839.650431][T13681] 140323552493568-140323556687871: [ 839.653266][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 839.665038][T13681] ffff8880208b2380 [ 839.666451][T16306] 140495716237312-140495716966399: [ 839.669553][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 839.675554][T16306] ffff8880aabae540 [ 839.686335][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 839.693306][T16306] 140495717302272-140495717306367: 0000000000000000 [ 839.695234][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 839.701070][T16306] 140495717306368-140495717670911: [ 839.709004][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 839.714926][T16306] ffff8880aabae700 [ 839.721618][T13681] 140323557900288-140323557904383: 0000000000000000 [ 839.732315][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 839.741580][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 839.749576][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 839.756735][T13681] 140323558305792-140323558326271: 0000000000000000 [ 839.756951][T16306] 140495717707776-140495717728255: [ 839.763685][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 839.769461][T16306] 0000000000000000 [ 839.780572][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 839.784974][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 839.787611][T16306] 140495729573888-18446744073709551615: [ 839.793647][T13681] contents: [ 839.798845][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 839.816518][T13681] 0000000000000000 140323571208191 [ 839.858755][T16306] 140495729573888-140495730151423: 0000000000000000 [ 839.870555][T13681] ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 839.871503][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 839.914949][T13681] 140323570171904-140323571208191: 0000000000000000 [ 839.915761][T16306] 140495730155520-140495730286591: [ 839.922219][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 839.933277][T16306] ffff88801ccdf460 [ 839.945707][T16306] 140495730286592-140724016734207: 0000000000000000 [ 839.952876][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 839.958417][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 839.960362][T16306] 140724016869376-140724018196479: 0000000000000000 [ 839.977064][T13681] 140323571343360-140734793707519: 0000000000000000 [ 839.978066][T16306] 140724018196480-140724018212863: [ 839.984018][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 839.990010][T16306] ffff8880aabaea80 [ 839.996795][T13681] 140734793842688-140734795161599: 0000000000000000 [ 840.007557][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 840.014533][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 840.014958][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 840.029462][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 840.030084][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 840.044658][T13681] Pass: 12904566 Run:12904717 [ 840.046353][T16306] Pass: 12904566 Run:12904717 [ 840.053216][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 840.063901][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 840.073964][T13681] Call Trace: [ 840.077247][T13681] [ 840.080183][T13681] dump_stack_lvl+0xd1/0x138 [ 840.084889][T13681] mt_find.cold+0x8b/0x90 [ 840.089250][T13681] ? mas_find+0x1d0/0x1d0 [ 840.093623][T13681] find_vma+0x10c/0x1b0 [ 840.097792][T13681] ? can_vma_merge_before+0x390/0x390 [ 840.103176][T13681] ? walk_page_test+0x78/0x180 [ 840.107968][T13681] walk_page_range+0x2b1/0x4a0 [ 840.113466][T13681] ? __walk_page_range+0x780/0x780 [ 840.118634][T13681] mlock_fixup+0x650/0x810 [ 840.123088][T13681] apply_vma_lock_flags+0x23d/0x350 [ 840.128321][T13681] ? mlock_fixup+0x810/0x810 [ 840.132955][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 840.138872][T13681] do_mlock+0x25a/0x6d0 [ 840.143055][T13681] ? folio_evictable+0x270/0x270 [ 840.148033][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 840.153961][T13681] __x64_sys_mlock+0x59/0x80 [ 840.158586][T13681] do_syscall_64+0x39/0xb0 [ 840.163046][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 840.168968][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 840.173392][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 840.193011][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 840.201439][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 840.209423][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 840.217407][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 840.225391][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.233373][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 840.242072][T13681] [ 840.245099][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 840.249056][T13681] index not increased! 20ffd000 <= 20ffd000 [ 840.255002][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 840.255018][T16306] Call Trace: [ 840.255027][T16306] [ 840.255037][T16306] dump_stack_lvl+0xd1/0x138 [ 840.255077][T16306] mt_find.cold+0x8b/0x90 [ 840.255116][T16306] ? mas_find+0x1d0/0x1d0 [ 840.255158][T16306] find_vma+0x10c/0x1b0 [ 840.255184][T16306] ? can_vma_merge_before+0x390/0x390 [ 840.255215][T16306] ? walk_page_test+0x78/0x180 [ 840.255251][T16306] walk_page_range+0x2b1/0x4a0 [ 840.255289][T16306] ? __walk_page_range+0x780/0x780 [ 840.255342][T16306] mlock_fixup+0x650/0x810 [ 840.255394][T16306] apply_vma_lock_flags+0x23d/0x350 [ 840.255436][T16306] ? mlock_fixup+0x810/0x810 [ 840.255488][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 840.255528][T16306] do_mlock+0x25a/0x6d0 [ 840.255572][T16306] ? folio_evictable+0x270/0x270 [ 840.255621][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 840.255657][T16306] __x64_sys_mlock+0x59/0x80 [ 840.255695][T16306] do_syscall_64+0x39/0xb0 [ 840.255733][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 840.255764][T16306] RIP: 0033:0x7fc7b548c0c9 [ 840.255786][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 840.255810][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 840.255836][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 840.255854][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 840.255869][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 840.255883][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.255899][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 840.255936][T16306] [ 840.295887][T16306] index not increased! 20ffb000 <= 20ffb000 [ 840.302090][T13681] BUG at mt_find:6473 (1) [ 840.324925][T16306] BUG at mt_find:6473 (1) [ 840.329681][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 840.330141][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 840.336610][T13681] 0-18446744073709551615: [ 840.354917][T16306] 0-18446744073709551615: [ 840.359706][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 840.360360][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 840.366665][T13681] contents: [ 840.383785][T16306] contents: [ 840.390952][T13681] 93708183007232 [ 840.416882][T16306] 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 840.417209][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 840.417426][T16306] 0-536866815: 0000000000000000 [ 840.417446][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 840.417466][T16306] 536870912-553623551: ffff8880aabbda80 [ 840.417487][T16306] 553623552-553635839: 0000000000000000 [ 840.417507][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 840.417527][T16306] 553627648-553639935: ffff88801ccdf380 [ 840.417546][T16306] 553639936-553648127: ffff88823bd4cf60 [ 840.417568][T16306] 553648128-553652223: ffff8880aabbdb60 [ 840.417590][T16306] 553652224-116827226111: 0000000000000000 [ 840.417610][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 840.417632][T16306] 116831420416-93825021313023: 0000000000000000 [ 840.417655][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 840.417679][T16306] 93825021452288-140495695114239: 0000000000000000 [ 840.417730][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 840.417754][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 840.417971][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 840.417996][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 840.418020][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 840.418045][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 840.418069][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 840.418091][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 840.418118][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 840.418139][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 840.418161][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 840.418185][T16306] 140495717302272-140495717306367: 0000000000000000 [ 840.418208][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 840.418231][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 840.418255][T16306] 140495717707776-140495717728255: 0000000000000000 [ 840.418277][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 840.418301][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 840.418541][T16306] 140495729573888-140495730151423: 0000000000000000 [ 840.418563][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 840.418587][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 840.418611][T16306] 140495730286592-140724016734207: 0000000000000000 [ 840.418633][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 840.418656][T16306] 140724016869376-140724018196479: 0000000000000000 [ 840.418676][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 840.418734][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 840.418755][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 840.433346][T13681] 20480 [ 840.444942][T16306] Pass: 12904566 Run:12904719 [ 840.447141][T13681] 18446603338914365440 [ 840.452575][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 840.459291][T13681] 0 [ 840.461202][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 840.471441][T13681] 0 [ 840.477982][T16306] Call Trace: [ 840.477993][T16306] [ 840.478003][T16306] dump_stack_lvl+0xd1/0x138 [ 840.478041][T16306] mt_find.cold+0x8b/0x90 [ 840.478073][T16306] ? mas_find+0x1d0/0x1d0 [ 840.478121][T16306] find_vma+0x10c/0x1b0 [ 840.483516][T13681] 0 [ 840.486893][T16306] ? can_vma_merge_before+0x390/0x390 [ 840.486927][T16306] ? walk_page_test+0x78/0x180 [ 840.486961][T16306] walk_page_range+0x2b1/0x4a0 [ 840.486994][T16306] ? __walk_page_range+0x780/0x780 [ 840.487041][T16306] mlock_fixup+0x650/0x810 [ 840.495328][T13681] 0 [ 840.502116][T16306] apply_vma_lock_flags+0x23d/0x350 [ 840.506609][T13681] 0 [ 840.508643][T16306] ? mlock_fixup+0x810/0x810 [ 840.512254][T13681] 0 0 [ 840.540574][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 840.540616][T16306] do_mlock+0x25a/0x6d0 [ 840.540655][T16306] ? folio_evictable+0x270/0x270 [ 840.540701][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 840.540736][T16306] __x64_sys_mlock+0x59/0x80 [ 840.540774][T16306] do_syscall_64+0x39/0xb0 [ 840.540807][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 840.594078][T13681] | 02 02| [ 840.594565][T16306] RIP: 0033:0x7fc7b548c0c9 [ 840.600870][T13681] ffff88801c1d3c0c 140323535716351 [ 840.606309][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 840.606333][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 840.606358][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 840.606374][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 840.606390][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 840.606405][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.606420][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 840.612599][T13681] ffff88801c1d300c 140323570171903 [ 840.618175][T16306] [ 840.646881][T16306] index not increased! 20ffb000 <= 20ffb000 [ 840.650093][T13681] ffff8880184ce20c 18446744073709551615 [ 840.655475][T16306] BUG at mt_find:6473 (1) [ 840.680175][T13681] 0000000000000000 0 [ 840.760022][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 840.789953][T13681] 0000000000000000 0 [ 840.817400][T16306] 0-18446744073709551615: [ 840.825457][T13681] 0000000000000000 0 [ 840.831718][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 840.902238][T13681] 0000000000000000 0 [ 840.908485][T16306] contents: [ 840.925590][T13681] 0000000000000000 0 [ 840.946681][T16306] 93708189892608 [ 840.954597][T13681] 0000000000000000 0 [ 840.959411][T16306] 20480 [ 840.991169][T13681] 0000000000000000 [ 841.005467][T16306] 18446603349691330560 [ 841.015082][T13681] 0-140323535716351: [ 841.031763][T16306] 0 [ 841.044494][T13681] node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 [ 841.051322][T16306] 0 [ 841.053593][T13681] contents: [ 841.059790][T16306] 0 [ 841.075029][T13681] 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 841.075220][T13681] 0-536866815: 0000000000000000 [ 841.075244][T13681] 536866816-536870911: ffff88801cede380 [ 841.075267][T13681] 536870912-553631743: ffff88801cede0e0 [ 841.075290][T13681] 553631744-553639935: 0000000000000000 [ 841.075312][T13681] 553639936-553635839: ffff8880772027e0 [ 841.075335][T13681] 553635840-553644031: ffff888077202a80 [ 841.075357][T13681] 553644032-553648127: ffff8880266220e0 [ 841.075379][T13681] 553648128-553652223: ffff88801cede000 [ 841.075402][T13681] 553652224-116819886079: 0000000000000000 [ 841.075425][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 841.075448][T13681] 116824080384-93825007087615: 0000000000000000 [ 841.075470][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 841.075493][T13681] 93825007226880-140323535712255: 0000000000000000 [ 841.075523][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 841.075548][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 841.075781][T13681] 140323535716352-140323544104959: [ 841.096635][T16306] 0 [ 841.134988][T13681] ffff8880208b2620 [ 841.144040][T16306] 0 [ 841.165017][T13681] 140323544104960-140323546202111: [ 841.175735][T16306] 0 [ 841.184945][T13681] ffff8880208b27e0 [ 841.187545][T16306] 0 [ 841.204995][T13681] 140323546202112-140323548299263: [ 841.209841][T16306] | 02 02| [ 841.213623][T13681] ffff8880208b2700 [ 841.218207][T16306] ffff88807b18040c 140495695118335 [ 841.222931][T13681] 140323548299264-140323550396415: [ 841.237834][T16306] ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 841.257778][T13681] ffff8880208b28c0 [ 841.280311][T16306] 0000000000000000 0 [ 841.283261][T13681] 140323550396416-140323552493567: [ 841.284401][T16306] 0000000000000000 [ 841.325987][T13681] ffff8880208b21c0 [ 841.345275][T16306] 0-140495695118335: [ 841.350346][T13681] 140323552493568-140323556687871: [ 841.354247][T16306] node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 [ 841.360288][T13681] ffff8880208b2380 [ 841.360324][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 841.360350][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 841.360405][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 841.360453][T13681] 140323557900288-140323557904383: [ 841.385124][T16306] contents: [ 841.399686][T13681] 0000000000000000 [ 841.399705][T13681] 140323557904384-140323558268927: [ 841.431868][T16306] 0000000000000000 536866815 [ 841.499456][T13681] ffff888078bac0e0 [ 841.523185][T16306] ffff8880aabbd9a0 536870911 [ 841.553187][T13681] 140323558268928-140323558305791: [ 841.562260][T16306] ffff8880aabbda80 553623551 [ 841.565071][T13681] ffff888078bac460 [ 841.570879][T16306] 0000000000000000 553635839 [ 841.589333][T13681] 140323558305792-140323558326271: 0000000000000000 [ 841.589370][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 841.589395][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 [ 841.612232][T16306] ffff88801ccdf1c0 553627647 [ 841.616361][T13681] 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 841.616453][T13681] 140323570171904-140323571208191: 0000000000000000 [ 841.616483][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 841.616507][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 841.616532][T13681] 140323571343360-140734793707519: 0000000000000000 [ 841.616555][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 841.616578][T13681] 140734793842688-140734795161599: 0000000000000000 [ 841.625492][T13681] 140734795161600-140734795177983: [ 841.630208][T16306] ffff88801ccdf380 553639935 [ 841.630759][T13681] ffff888078bac000 [ 841.635527][T16306] ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 [ 841.654075][T13681] 140734795177984-140734795186175: [ 841.654538][T16306] 0000000000000000 140495695114239 [ 841.674986][T13681] ffff888078bacee0 [ 841.705184][T16306] ffff8880aabbde00 140495695118335 [ 841.726208][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 841.737050][T16306] 0000000000000000 0 [ 841.747075][T13681] Pass: 12904567 Run:12904721 [ 841.747095][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 841.747122][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 841.747137][T13681] Call Trace: [ 841.747146][T13681] [ 841.747157][T13681] dump_stack_lvl+0xd1/0x138 [ 841.747198][T13681] mt_find.cold+0x8b/0x90 [ 841.747235][T13681] ? mas_find+0x1d0/0x1d0 [ 841.747280][T13681] find_vma+0x10c/0x1b0 [ 841.747307][T13681] ? can_vma_merge_before+0x390/0x390 [ 841.764926][T16306] 000000000000000d [ 841.768098][T13681] ? walk_page_test+0x78/0x180 [ 841.779634][T16306] 0-536866815: [ 841.782012][T13681] walk_page_range+0x2b1/0x4a0 [ 841.801560][T16306] 0000000000000000 [ 841.805437][T13681] ? __walk_page_range+0x780/0x780 [ 841.805496][T13681] mlock_fixup+0x650/0x810 [ 841.805545][T13681] apply_vma_lock_flags+0x23d/0x350 [ 841.805589][T13681] ? mlock_fixup+0x810/0x810 [ 841.805642][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 841.805683][T13681] do_mlock+0x25a/0x6d0 [ 841.805749][T13681] ? folio_evictable+0x270/0x270 [ 841.805801][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 841.805838][T13681] __x64_sys_mlock+0x59/0x80 [ 841.805877][T13681] do_syscall_64+0x39/0xb0 [ 841.805920][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 841.805947][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 841.814921][T16306] 536866816-536870911: [ 841.820033][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 841.844933][T16306] ffff8880aabbd9a0 [ 841.846197][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 [ 841.873722][T16306] 536870912-553623551: [ 841.875676][T13681] ORIG_RAX: 0000000000000095 [ 841.875688][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 841.875704][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 841.875719][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 841.879861][T16306] ffff8880aabbda80 [ 841.885211][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.885228][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 841.885266][T13681] [ 841.890546][T16306] 553623552-553635839: [ 841.918936][T13681] index not increased! 20ffd000 <= 20ffd000 [ 841.922104][T16306] 0000000000000000 [ 841.927360][T13681] BUG at mt_find:6473 (1) [ 841.935482][T16306] 553635840-553627647: [ 841.936847][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 841.941542][T16306] ffff88801ccdf1c0 [ 841.947409][T13681] 0-18446744073709551615: [ 841.964927][T16306] 553627648-553639935: [ 841.966824][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 841.971255][T16306] ffff88801ccdf380 [ 841.995982][T13681] contents: [ 842.019454][T16306] 553639936-553648127: [ 842.043129][T13681] 93708183007232 [ 842.069022][T16306] ffff88823bd4cf60 [ 842.069042][T16306] 553648128-553652223: ffff8880aabbdb60 [ 842.069068][T16306] 553652224-116827226111: [ 842.072849][T13681] 20480 [ 842.077931][T16306] 0000000000000000 [ 842.103486][T13681] 18446603338914365440 [ 842.130721][T16306] 116827226112-116831420415: [ 842.146725][T13681] 0 [ 842.153368][T16306] ffff8880aabbdc40 [ 842.166058][T16306] 116831420416-93825021313023: 0000000000000000 [ 842.171116][T13681] 0 [ 842.172673][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 842.182380][T16306] 93825021452288-140495695114239: 0000000000000000 [ 842.185098][T13681] 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 842.190203][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 842.222808][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 842.228482][T13681] 0-140323535716351: [ 842.281181][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 842.292915][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 842.295107][T13681] node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 842.303642][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 842.358946][T13681] 0-536866815: 0000000000000000 [ 842.364806][T13681] 536866816-536870911: ffff88801cede380 [ 842.366710][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 842.370823][T13681] 536870912-553631743: ffff88801cede0e0 [ 842.384028][T13681] 553631744-553639935: 0000000000000000 [ 842.390314][T13681] 553639936-553635839: ffff8880772027e0 [ 842.390425][T16306] 140495709798400-140495711895551: [ 842.397958][T13681] 553635840-553644031: ffff888077202a80 [ 842.411931][T13681] 553644032-553648127: ffff8880266220e0 [ 842.412025][T16306] ffff8880aabae2a0 [ 842.418731][T13681] 553648128-553652223: ffff88801cede000 [ 842.428204][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 842.428301][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 842.428351][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 842.428404][T16306] 140495716966400-140495717302271: [ 842.435942][T13681] 553652224-116819886079: [ 842.454971][T16306] ffff8880aabae620 [ 842.455502][T13681] 0000000000000000 [ 842.460125][T16306] 140495717302272-140495717306367: [ 842.463616][T13681] 116819886080-116824080383: [ 842.467540][T16306] 0000000000000000 [ 842.473337][T13681] ffff88801cede2a0 [ 842.485870][T13681] 116824080384-93825007087615: 0000000000000000 [ 842.492503][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 842.492922][T16306] 140495717306368-140495717670911: [ 842.499665][T13681] 93825007226880-140323535712255: 0000000000000000 [ 842.499731][T13681] 140323535712256-140323535716351: [ 842.513263][T16306] ffff8880aabae700 [ 842.513281][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 842.513309][T16306] 140495717707776-140495717728255: 0000000000000000 [ 842.513332][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 842.513357][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 [ 842.542568][T13681] ffff8880208b20e0 [ 842.586701][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 842.596597][T16306] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 842.655175][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 842.660708][T16306] 140495729573888-140495730151423: 0000000000000000 [ 842.674531][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 842.681603][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 842.681972][T13681] 140323544104960-140323546202111: [ 842.688693][T16306] 140495730286592-140724016734207: 0000000000000000 [ 842.688720][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 842.688744][T16306] 140724016869376-140724018196479: 0000000000000000 [ 842.704946][T13681] ffff8880208b27e0 [ 842.709137][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 842.724996][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 842.726920][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 842.734073][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 842.750075][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 842.756201][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 842.757429][T13681] 140323552493568-140323556687871: [ 842.764418][T16306] Pass: 12904567 Run:12904722 [ 842.764435][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 842.770455][T13681] ffff8880208b2380 [ 842.774622][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 842.774639][T16306] Call Trace: [ 842.774648][T16306] [ 842.774658][T16306] dump_stack_lvl+0xd1/0x138 [ 842.785560][T13681] 140323556687872-140323556835327: [ 842.788262][T16306] mt_find.cold+0x8b/0x90 [ 842.798903][T13681] ffff8880293ab0e0 [ 842.801628][T16306] ? mas_find+0x1d0/0x1d0 [ 842.804662][T13681] 140323556835328-140323557564415: [ 842.809180][T16306] find_vma+0x10c/0x1b0 [ 842.809216][T16306] ? can_vma_merge_before+0x390/0x390 [ 842.809245][T16306] ? walk_page_test+0x78/0x180 [ 842.809276][T16306] walk_page_range+0x2b1/0x4a0 [ 842.809311][T16306] ? __walk_page_range+0x780/0x780 [ 842.818177][T13681] ffff8880293ab000 [ 842.819199][T16306] mlock_fixup+0x650/0x810 [ 842.822972][T13681] 140323557564416-140323557900287: [ 842.827243][T16306] apply_vma_lock_flags+0x23d/0x350 [ 842.827284][T16306] ? mlock_fixup+0x810/0x810 [ 842.827331][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 842.827370][T16306] do_mlock+0x25a/0x6d0 [ 842.833840][T13681] ffff888078bac380 [ 842.837050][T16306] ? folio_evictable+0x270/0x270 [ 842.837108][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 842.837143][T16306] __x64_sys_mlock+0x59/0x80 [ 842.837178][T16306] do_syscall_64+0x39/0xb0 [ 842.843659][T13681] 140323557900288-140323557904383: [ 842.847385][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 842.847423][T16306] RIP: 0033:0x7fc7b548c0c9 [ 842.847444][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 842.847466][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 842.847490][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 842.847504][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 842.847520][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 842.853566][T13681] 0000000000000000 [ 842.857388][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.857407][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 842.857443][T16306] [ 842.865886][T16306] index not increased! 20ffb000 <= 20ffb000 [ 842.893588][T13681] 140323557904384-140323558268927: [ 842.927382][T16306] BUG at mt_find:6473 (1) [ 842.929183][T13681] ffff888078bac0e0 [ 842.932291][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 842.951990][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 842.965073][T13681] 140323558305792-140323558326271: [ 842.971711][T16306] 0-18446744073709551615: [ 842.995061][T13681] 0000000000000000 [ 842.997669][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 843.005072][T13681] 140323558326272-140323570171903: [ 843.008151][T16306] contents: [ 843.013727][T13681] ffff888078bac700 [ 843.024818][T16306] 93708189892608 20480 18446603349691330560 0 [ 843.044269][T13681] 140323570171904-18446744073709551615: [ 843.067813][T16306] 0 [ 843.071390][T13681] node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 843.074493][T16306] 0 [ 843.078300][T13681] contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 [ 843.093552][T16306] 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 843.114770][T13681] ffff888078bacb60 140323571343359 [ 843.139332][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 843.164982][T13681] 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 843.197627][T16306] 0-536866815: [ 843.230814][T13681] 140323570171904-140323571208191: 0000000000000000 [ 843.243946][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 843.247293][T16306] 0000000000000000 [ 843.251324][T13681] 140323571212288-140323571343359: [ 843.254631][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 843.260592][T13681] ffff888078bacb60 [ 843.270471][T13681] 140323571343360-140734793707519: 0000000000000000 [ 843.277777][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 843.279840][T16306] 536870912-553623551: [ 843.284729][T13681] 140734793842688-140734795161599: 0000000000000000 [ 843.296801][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 843.300501][T16306] ffff8880aabbda80 [ 843.303755][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 843.316437][T16306] 553623552-553635839: 0000000000000000 [ 843.324308][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 843.326685][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 843.330447][T16306] 553627648-553639935: ffff88801ccdf380 [ 843.343587][T16306] 553639936-553648127: ffff88823bd4cf60 [ 843.349635][T16306] 553648128-553652223: ffff8880aabbdb60 [ 843.352014][T13681] Pass: 12904567 Run:12904723 [ 843.355661][T16306] 553652224-116827226111: 0000000000000000 [ 843.355694][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 843.355719][T16306] 116831420416-93825021313023: 0000000000000000 [ 843.355743][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 843.355765][T16306] 93825021452288-140495695114239: 0000000000000000 [ 843.355787][T16306] 140495695114240-140495695118335: [ 843.365905][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 843.366700][T16306] ffff8880aabbde00 [ 843.373027][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 843.379690][T16306] 140495695118336-140495729573887: [ 843.386363][T13681] Call Trace: [ 843.386375][T13681] [ 843.386385][T13681] dump_stack_lvl+0xd1/0x138 [ 843.393218][T16306] node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e [ 843.398747][T13681] mt_find.cold+0x8b/0x90 [ 843.398786][T13681] ? mas_find+0x1d0/0x1d0 [ 843.408671][T16306] contents: [ 843.412366][T13681] find_vma+0x10c/0x1b0 [ 843.434929][T16306] ffff8880aabbdee0 140495703506943 [ 843.438566][T13681] ? can_vma_merge_before+0x390/0x390 [ 843.447559][T16306] ffff8880aabae000 140495705604095 [ 843.450403][T13681] ? walk_page_test+0x78/0x180 [ 843.454708][T16306] ffff8880aabae0e0 140495707701247 [ 843.457979][T13681] walk_page_range+0x2b1/0x4a0 [ 843.458018][T13681] ? __walk_page_range+0x780/0x780 [ 843.462157][T16306] ffff8880aabae1c0 140495709798399 [ 843.467361][T13681] mlock_fixup+0x650/0x810 [ 843.467408][T13681] apply_vma_lock_flags+0x23d/0x350 [ 843.467445][T13681] ? mlock_fixup+0x810/0x810 [ 843.467494][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 843.467535][T13681] do_mlock+0x25a/0x6d0 [ 843.467577][T13681] ? folio_evictable+0x270/0x270 [ 843.467625][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 843.467662][T13681] __x64_sys_mlock+0x59/0x80 [ 843.467701][T13681] do_syscall_64+0x39/0xb0 [ 843.467737][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 843.467764][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 843.558009][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 843.577651][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 843.586074][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 843.594049][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 843.602023][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 843.610028][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.618000][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 843.625993][T13681] [ 843.632881][T16306] ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 843.667361][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 843.674344][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 843.681436][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 843.688283][T13681] index not increased! 20ffd000 <= 20ffd000 [ 843.688498][T16306] 140495707701248-140495709798399: [ 843.694273][T13681] BUG at mt_find:6473 (1) [ 843.694289][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 843.710528][T16306] ffff8880aabae1c0 [ 843.717188][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 843.724160][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 843.727533][T13681] 0-18446744073709551615: [ 843.733093][T16306] 140495716089856-140495716237311: [ 843.733353][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 843.740294][T16306] ffff8880aabae460 [ 843.754743][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 843.756217][T13681] contents: 93708183007232 20480 18446603338914365440 0 0 [ 843.761764][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 843.776396][T16306] 140495717302272-140495717306367: 0000000000000000 [ 843.783395][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 843.785066][T13681] 0 0 0 [ 843.790461][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 843.795358][T13681] 0 0 | 02 02| [ 843.800567][T16306] 140495717707776-140495717728255: 0000000000000000 [ 843.810999][T13681] ffff88801c1d3c0c 140323535716351 [ 843.811120][T16306] 140495717728256-140495729573887: [ 843.815245][T13681] ffff88801c1d300c 140323570171903 [ 843.818545][T16306] ffff8880aabae8c0 [ 843.830894][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 843.835001][T13681] ffff8880184ce20c 18446744073709551615 [ 843.886397][T16306] 140495729573888-140495730151423: 0000000000000000 [ 843.899117][T13681] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 843.899201][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 843.922093][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 843.972734][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 843.980347][T16306] 140495730286592-140724016734207: 0000000000000000 [ 843.989216][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 843.998747][T16306] 140724016869376-140724018196479: 0000000000000000 [ 844.003113][T13681] 0-536866815: [ 844.006025][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 844.010778][T13681] 0000000000000000 [ 844.017384][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 844.025166][T13681] 536866816-536870911: ffff88801cede380 [ 844.028547][T16306] 140724018221056-18446744073709551615: [ 844.033907][T13681] 536870912-553631743: ffff88801cede0e0 [ 844.042034][T16306] 0000000000000000 [ 844.051721][T16306] Pass: 12904567 Run:12904724 [ 844.056728][T13681] 553631744-553639935: 0000000000000000 [ 844.061060][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 844.062641][T13681] 553639936-553635839: [ 844.072513][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 844.072528][T16306] Call Trace: [ 844.072536][T16306] [ 844.072547][T16306] dump_stack_lvl+0xd1/0x138 [ 844.072587][T16306] mt_find.cold+0x8b/0x90 [ 844.077997][T13681] ffff8880772027e0 [ 844.087110][T16306] ? mas_find+0x1d0/0x1d0 [ 844.087159][T16306] find_vma+0x10c/0x1b0 [ 844.090917][T13681] 553635840-553644031: [ 844.093365][T16306] ? can_vma_merge_before+0x390/0x390 [ 844.098321][T13681] ffff888077202a80 [ 844.102265][T16306] ? walk_page_test+0x78/0x180 [ 844.108962][T13681] 553644032-553648127: [ 844.110540][T16306] walk_page_range+0x2b1/0x4a0 [ 844.114676][T13681] ffff8880266220e0 [ 844.119250][T16306] ? __walk_page_range+0x780/0x780 [ 844.119298][T16306] mlock_fixup+0x650/0x810 [ 844.119345][T16306] apply_vma_lock_flags+0x23d/0x350 [ 844.125913][T13681] 553648128-553652223: [ 844.128392][T16306] ? mlock_fixup+0x810/0x810 [ 844.133132][T13681] ffff88801cede000 [ 844.137627][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 844.137669][T16306] do_mlock+0x25a/0x6d0 [ 844.144606][T13681] 553652224-116819886079: [ 844.146117][T16306] ? folio_evictable+0x270/0x270 [ 844.146172][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 844.151798][T13681] 0000000000000000 [ 844.155679][T16306] __x64_sys_mlock+0x59/0x80 [ 844.155721][T16306] do_syscall_64+0x39/0xb0 [ 844.155757][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 844.155784][T16306] RIP: 0033:0x7fc7b548c0c9 [ 844.155817][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 844.161282][T13681] 116819886080-116824080383: [ 844.165488][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 844.165514][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 844.165531][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 844.170103][T13681] ffff88801cede2a0 [ 844.173804][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 844.181135][T13681] 116824080384-93825007087615: [ 844.183812][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.188889][T13681] 0000000000000000 [ 844.193478][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 844.199674][T13681] 93825007087616-93825007226879: [ 844.203076][T16306] [ 844.208555][T13681] ffff8880208b22a0 [ 844.273751][T16306] index not increased! 20ffb000 <= 20ffb000 [ 844.279749][T13681] 93825007226880-140323535712255: [ 844.285267][T16306] BUG at mt_find:6473 (1) [ 844.290490][T13681] 0000000000000000 [ 844.311480][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 844.315573][T13681] 140323535712256-140323535716351: [ 844.318313][T16306] 0-18446744073709551615: [ 844.322014][T13681] ffff8880208b20e0 [ 844.343151][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 844.351458][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 844.432097][T16306] contents: 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 844.465066][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 844.514038][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 844.514071][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 844.514093][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 844.514115][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 844.534824][T16306] 0-536866815: [ 844.535248][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 844.535277][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 844.535301][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 844.535325][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 844.535348][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 844.535379][T13681] 140323557900288-140323557904383: 0000000000000000 [ 844.535403][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 844.545141][T16306] 0000000000000000 [ 844.547614][T13681] 140323558268928-140323558305791: [ 844.553932][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 844.553961][T16306] 536870912-553623551: ffff8880aabbda80 [ 844.553985][T16306] 553623552-553635839: 0000000000000000 [ 844.554007][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 844.554030][T16306] 553627648-553639935: ffff88801ccdf380 [ 844.554053][T16306] 553639936-553648127: ffff88823bd4cf60 [ 844.554076][T16306] 553648128-553652223: [ 844.575036][T13681] ffff888078bac460 [ 844.577422][T16306] ffff8880aabbdb60 [ 844.582103][T13681] 140323558305792-140323558326271: [ 844.589329][T16306] 553652224-116827226111: [ 844.608563][T13681] 0000000000000000 [ 844.611947][T16306] 0000000000000000 [ 844.625009][T13681] 140323558326272-140323570171903: [ 844.629537][T16306] 116827226112-116831420415: [ 844.644946][T13681] ffff888078bac700 [ 844.648750][T16306] ffff8880aabbdc40 [ 844.649226][T13681] 140323570171904-18446744073709551615: [ 844.656324][T16306] 116831420416-93825021313023: [ 844.683068][T13681] node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 844.692132][T16306] 0000000000000000 [ 844.713356][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 844.720511][T16306] 93825021452288-140495695114239: 0000000000000000 [ 844.722605][T13681] contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 [ 844.727684][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 844.768510][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 844.798388][T13681] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 844.838215][T13681] 140323570171904-140323571208191: 0000000000000000 [ 844.839915][T16306] 140495695118336-140495703506943: [ 844.845237][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 844.845263][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 844.845290][T13681] 140323571343360-140734793707519: 0000000000000000 [ 844.845310][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 844.845334][T13681] 140734793842688-140734795161599: 0000000000000000 [ 844.845357][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 844.845380][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 844.845404][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 844.845428][T13681] Pass: 12904567 Run:12904725 [ 844.845443][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 844.845468][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 844.845482][T13681] Call Trace: [ 844.845490][T13681] [ 844.845501][T13681] dump_stack_lvl+0xd1/0x138 [ 844.865348][T16306] ffff8880aabbdee0 [ 844.871825][T13681] mt_find.cold+0x8b/0x90 [ 844.880824][T16306] 140495703506944-140495705604095: [ 844.885665][T13681] ? mas_find+0x1d0/0x1d0 [ 844.885714][T13681] find_vma+0x10c/0x1b0 [ 844.892868][T16306] ffff8880aabae000 [ 844.899559][T13681] ? can_vma_merge_before+0x390/0x390 [ 844.899593][T13681] ? walk_page_test+0x78/0x180 [ 844.899625][T13681] walk_page_range+0x2b1/0x4a0 [ 844.899657][T13681] ? __walk_page_range+0x780/0x780 [ 844.899707][T13681] mlock_fixup+0x650/0x810 [ 844.899758][T13681] apply_vma_lock_flags+0x23d/0x350 [ 844.899801][T13681] ? mlock_fixup+0x810/0x810 [ 844.899853][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 844.899891][T13681] do_mlock+0x25a/0x6d0 [ 844.899932][T13681] ? folio_evictable+0x270/0x270 [ 844.899982][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 844.900020][T13681] __x64_sys_mlock+0x59/0x80 [ 844.900055][T13681] do_syscall_64+0x39/0xb0 [ 844.900091][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 844.900121][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 844.900143][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 844.900165][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 844.900190][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 844.900206][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 844.900221][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 844.900237][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.900257][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 844.900300][T13681] [ 844.938316][T13681] index not increased! 20ffd000 <= 20ffd000 [ 844.945543][T16306] 140495705604096-140495707701247: [ 844.947660][T13681] BUG at mt_find:6473 (1) [ 844.955243][T16306] ffff8880aabae0e0 [ 844.957362][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 844.974483][T16306] 140495707701248-140495709798399: [ 844.981829][T13681] 0-18446744073709551615: [ 844.994463][T16306] ffff8880aabae1c0 [ 845.000769][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 845.006324][T16306] 140495709798400-140495711895551: [ 845.011395][T13681] contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 845.011603][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 845.011829][T13681] 0-536866815: 0000000000000000 [ 845.011853][T13681] 536866816-536870911: ffff88801cede380 [ 845.011877][T13681] 536870912-553631743: ffff88801cede0e0 [ 845.011900][T13681] 553631744-553639935: 0000000000000000 [ 845.011923][T13681] 553639936-553635839: ffff8880772027e0 [ 845.011946][T13681] 553635840-553644031: ffff888077202a80 [ 845.011967][T13681] 553644032-553648127: ffff8880266220e0 [ 845.011990][T13681] 553648128-553652223: ffff88801cede000 [ 845.012013][T13681] 553652224-116819886079: 0000000000000000 [ 845.012035][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 845.012060][T13681] 116824080384-93825007087615: 0000000000000000 [ 845.012084][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 845.012108][T13681] 93825007226880-140323535712255: 0000000000000000 [ 845.012131][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 845.012166][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 845.012403][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 845.012428][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 845.012452][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 845.012476][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 845.012497][T13681] 140323550396416-140323552493567: [ 845.036993][T16306] ffff8880aabae2a0 [ 845.037012][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 845.075093][T13681] ffff8880208b21c0 [ 845.092470][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 845.092502][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 845.092524][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 845.092579][T16306] 140495717302272-140495717306367: 0000000000000000 [ 845.092637][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 845.092662][T16306] 140495717670912-140495717707775: [ 845.117688][T13681] 140323552493568-140323556687871: [ 845.120447][T16306] ffff8880aabae7e0 [ 845.140790][T13681] ffff8880208b2380 [ 845.148440][T16306] 140495717707776-140495717728255: [ 845.166725][T13681] 140323556687872-140323556835327: [ 845.171152][T16306] 0000000000000000 [ 845.184997][T13681] ffff8880293ab0e0 [ 845.256374][T16306] 140495717728256-140495729573887: [ 845.283020][T13681] 140323556835328-140323557564415: [ 845.305012][T16306] ffff8880aabae8c0 [ 845.316836][T13681] ffff8880293ab000 [ 845.334958][T16306] 140495729573888-18446744073709551615: [ 845.341872][T13681] 140323557564416-140323557900287: [ 845.418949][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 [ 845.453646][T13681] ffff888078bac380 [ 845.460238][T16306] contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 [ 845.483440][T13681] 140323557900288-140323557904383: [ 845.493459][T16306] 0000000000000000 0 [ 845.511473][T13681] 0000000000000000 [ 845.514587][T16306] 0000000000000000 0 [ 845.516000][T13681] 140323557904384-140323558268927: [ 845.525775][T16306] 0000000000000000 0 [ 845.531112][T13681] ffff888078bac0e0 [ 845.534594][T16306] 0000000000000000 0 [ 845.540010][T13681] 140323558268928-140323558305791: [ 845.592148][T16306] 0000000000000000 0 0000000000000000 0 0000000000000008 [ 845.592192][T16306] 140495729573888-140495730151423: 0000000000000000 [ 845.592218][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 845.592240][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 845.592261][T16306] 140495730286592-140724016734207: 0000000000000000 [ 845.592282][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 845.592313][T16306] 140724016869376-140724018196479: 0000000000000000 [ 845.592335][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 845.592359][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 845.592382][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 845.592406][T16306] Pass: 12904584 Run:12904743 [ 845.592420][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 845.592446][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 845.592461][T16306] Call Trace: [ 845.592469][T16306] [ 845.592479][T16306] dump_stack_lvl+0xd1/0x138 [ 845.592521][T16306] mt_find.cold+0x8b/0x90 [ 845.592560][T16306] ? mas_find+0x1d0/0x1d0 [ 845.592606][T16306] find_vma+0x10c/0x1b0 [ 845.592635][T16306] ? can_vma_merge_before+0x390/0x390 [ 845.592667][T16306] ? walk_page_test+0x78/0x180 [ 845.592703][T16306] walk_page_range+0x2b1/0x4a0 [ 845.592740][T16306] ? __walk_page_range+0x780/0x780 [ 845.592795][T16306] mlock_fixup+0x650/0x810 [ 845.592845][T16306] apply_vma_lock_flags+0x23d/0x350 [ 845.592888][T16306] ? mlock_fixup+0x810/0x810 [ 845.592941][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 845.592984][T16306] do_mlock+0x25a/0x6d0 [ 845.593027][T16306] ? folio_evictable+0x270/0x270 [ 845.593080][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 845.593113][T16306] __x64_sys_mlock+0x59/0x80 [ 845.602539][T13681] ffff888078bac460 [ 845.602715][T16306] do_syscall_64+0x39/0xb0 [ 845.606532][T13681] 140323558305792-140323558326271: [ 845.610382][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 845.616069][T13681] 0000000000000000 [ 845.619867][T16306] RIP: 0033:0x7fc7b548c0c9 [ 845.623572][T13681] 140323558326272-140323570171903: [ 845.627530][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 845.627553][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 845.627578][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 845.627595][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 845.633119][T13681] ffff888078bac700 [ 845.640117][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 845.640134][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.640148][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 845.640183][T16306] [ 845.661328][T16306] index not increased! 20ffb000 <= 20ffb000 [ 845.684285][T13681] 140323570171904-18446744073709551615: [ 845.711954][T16306] BUG at mt_find:6473 (1) [ 845.728164][T13681] node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 845.743429][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 845.748062][T13681] contents: [ 845.751026][T16306] 0-18446744073709551615: [ 845.755207][T13681] 0000000000000000 140323571208191 [ 845.794959][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 845.798248][T13681] ffff88801ccdfa80 140323571212287 [ 845.801289][T16306] contents: [ 845.806203][T13681] ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 845.806500][T13681] 140323570171904-140323571208191: [ 845.813743][T16306] 93708189892608 [ 845.817315][T13681] 0000000000000000 [ 845.821012][T16306] 20480 [ 845.825460][T13681] 140323571208192-140323571212287: [ 845.844956][T16306] 18446603349691330560 [ 845.846956][T13681] ffff88801ccdfa80 [ 845.851113][T16306] 0 0 [ 845.871556][T13681] 140323571212288-140323571343359: [ 845.897032][T16306] 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 845.897211][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 [ 845.922304][T13681] ffff888078bacb60 [ 845.950845][T16306] ffff88801ccdf1c0 553627647 [ 845.952659][T13681] 140323571343360-140734793707519: [ 845.961163][T16306] ffff88801ccdf380 553639935 [ 845.974959][T13681] 0000000000000000 [ 845.982347][T16306] ffff88823bd4cf60 553648127 [ 846.001763][T13681] 140734793707520-140734793842687: [ 846.046587][T16306] ffff8880aabbdb60 553652223 [ 846.050920][T13681] ffff888078bac7e0 [ 846.054396][T16306] 0000000000000000 116827226111 [ 846.057157][T13681] 140734793842688-140734795161599: [ 846.109837][T16306] ffff8880aabbdc40 116831420415 [ 846.150802][T13681] 0000000000000000 [ 846.158320][T16306] 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 846.174411][T13681] 140734795161600-140734795177983: [ 846.187389][T16306] 0-536866815: 0000000000000000 [ 846.199365][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 846.205028][T13681] ffff888078bac000 [ 846.205556][T16306] 536870912-553623551: ffff8880aabbda80 [ 846.209288][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 846.223922][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 846.224951][T16306] 553623552-553635839: 0000000000000000 [ 846.231467][T13681] Pass: 12904584 Run:12904744 [ 846.242248][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 846.244924][T16306] 553635840-553627647: [ 846.252152][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 846.252170][T16306] ffff88801ccdf1c0 [ 846.256648][T13681] Call Trace: [ 846.256659][T13681] [ 846.256668][T13681] dump_stack_lvl+0xd1/0x138 [ 846.256707][T13681] mt_find.cold+0x8b/0x90 [ 846.273105][T16306] 553627648-553639935: [ 846.273740][T13681] ? mas_find+0x1d0/0x1d0 [ 846.276880][T16306] ffff88801ccdf380 [ 846.281254][T13681] find_vma+0x10c/0x1b0 [ 846.302325][T13681] ? can_vma_merge_before+0x390/0x390 [ 846.303710][T16306] 553639936-553648127: [ 846.307718][T13681] ? walk_page_test+0x78/0x180 [ 846.307753][T13681] walk_page_range+0x2b1/0x4a0 [ 846.312243][T16306] ffff88823bd4cf60 [ 846.316990][T13681] ? __walk_page_range+0x780/0x780 [ 846.317042][T13681] mlock_fixup+0x650/0x810 [ 846.321761][T16306] 553648128-553652223: [ 846.325476][T13681] apply_vma_lock_flags+0x23d/0x350 [ 846.330579][T16306] ffff8880aabbdb60 [ 846.334991][T13681] ? mlock_fixup+0x810/0x810 [ 846.335041][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 846.335078][T13681] do_mlock+0x25a/0x6d0 [ 846.335116][T13681] ? folio_evictable+0x270/0x270 [ 846.335173][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 846.335210][T13681] __x64_sys_mlock+0x59/0x80 [ 846.335249][T13681] do_syscall_64+0x39/0xb0 [ 846.335286][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 846.335315][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 846.335336][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 846.335359][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 846.335385][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 846.335402][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 846.437490][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 846.445467][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.453440][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 846.461525][T13681] [ 846.474930][T16306] 553652224-116827226111: 0000000000000000 [ 846.481158][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 846.483730][T13681] index not increased! 20ffd000 <= 20ffd000 [ 846.494264][T13681] BUG at mt_find:6473 (1) [ 846.500490][T16306] 116831420416-93825021313023: 0000000000000000 [ 846.507360][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 846.514169][T16306] 93825021452288-140495695114239: 0000000000000000 [ 846.514837][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 846.521126][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 846.536530][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 846.543404][T13681] 0-18446744073709551615: [ 846.594623][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 846.604973][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 846.607719][T16306] 140495703506944-140495705604095: [ 846.607726][T13681] 0000000000000000 0 0000000000000000 0 [ 846.637828][T16306] ffff8880aabae000 [ 846.637870][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 846.637919][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 846.637944][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 846.637965][T16306] 140495711895552-140495716089855: [ 846.657238][T13681] 0000000000000000 [ 846.659951][T16306] ffff8880aabae380 [ 846.675204][T13681] 0-140323535716351: [ 846.685527][T16306] 140495716089856-140495716237311: [ 846.687230][T13681] node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 [ 846.690889][T16306] ffff8880aabae460 [ 846.696905][T13681] contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 846.723861][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 846.760808][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 846.767907][T16306] 140495717302272-140495717306367: 0000000000000000 [ 846.775093][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 846.775479][T13681] 0-536866815: [ 846.782134][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 846.793039][T16306] 140495717707776-140495717728255: 0000000000000000 [ 846.794982][T13681] 0000000000000000 [ 846.800145][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 846.807081][T13681] 536866816-536870911: ffff88801cede380 [ 846.820042][T13681] 536870912-553631743: ffff88801cede0e0 [ 846.824343][T16306] 140495729573888-18446744073709551615: [ 846.826387][T13681] 553631744-553639935: 0000000000000000 [ 846.826414][T13681] 553639936-553635839: ffff8880772027e0 [ 846.842163][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 [ 846.844490][T13681] 553635840-553644031: ffff888077202a80 [ 846.858775][T13681] 553644032-553648127: ffff8880266220e0 [ 846.860872][T16306] contents: [ 846.864694][T13681] 553648128-553652223: ffff88801cede000 [ 846.868256][T16306] 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 846.874406][T13681] 553652224-116819886079: 0000000000000000 [ 846.924369][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 846.932831][T13681] 116824080384-93825007087615: 0000000000000000 [ 846.939812][T16306] 140495729573888-140495730151423: 0000000000000000 [ 846.940117][T13681] 93825007087616-93825007226879: [ 846.948749][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 846.961675][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 846.963285][T13681] ffff8880208b22a0 [ 846.969276][T16306] 140495730286592-140724016734207: [ 846.972808][T13681] 93825007226880-140323535712255: 0000000000000000 [ 846.979049][T16306] 0000000000000000 [ 846.989569][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 846.994926][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 846.996973][T16306] 140724016869376-140724018196479: [ 847.003473][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 847.068319][T16306] 0000000000000000 [ 847.072264][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 847.079343][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 847.086396][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 847.086577][T16306] 140724018221056-18446744073709551615: [ 847.093347][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 847.099388][T16306] 0000000000000000 [ 847.099400][T16306] Pass: 12904584 Run:12904745 [ 847.099412][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 847.099437][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 847.099451][T16306] Call Trace: [ 847.099459][T16306] [ 847.099469][T16306] dump_stack_lvl+0xd1/0x138 [ 847.099510][T16306] mt_find.cold+0x8b/0x90 [ 847.099546][T16306] ? mas_find+0x1d0/0x1d0 [ 847.099593][T16306] find_vma+0x10c/0x1b0 [ 847.099620][T16306] ? can_vma_merge_before+0x390/0x390 [ 847.099650][T16306] ? walk_page_test+0x78/0x180 [ 847.099683][T16306] walk_page_range+0x2b1/0x4a0 [ 847.122336][T13681] 140323546202112-140323548299263: [ 847.124881][T16306] ? __walk_page_range+0x780/0x780 [ 847.124938][T16306] mlock_fixup+0x650/0x810 [ 847.134988][T13681] ffff8880208b2700 [ 847.138250][T16306] apply_vma_lock_flags+0x23d/0x350 [ 847.141156][T13681] 140323548299264-140323550396415: [ 847.145730][T16306] ? mlock_fixup+0x810/0x810 [ 847.145783][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 847.150064][T13681] ffff8880208b28c0 [ 847.154378][T16306] do_mlock+0x25a/0x6d0 [ 847.174927][T13681] 140323550396416-140323552493567: [ 847.178923][T16306] ? folio_evictable+0x270/0x270 [ 847.184010][T13681] ffff8880208b21c0 [ 847.188414][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 847.188449][T16306] __x64_sys_mlock+0x59/0x80 [ 847.198389][T13681] 140323552493568-140323556687871: [ 847.202911][T16306] do_syscall_64+0x39/0xb0 [ 847.224927][T13681] ffff8880208b2380 [ 847.226769][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 847.231693][T13681] 140323556687872-140323556835327: [ 847.235389][T16306] RIP: 0033:0x7fc7b548c0c9 [ 847.235410][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 847.235431][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 847.235454][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 847.235471][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 847.243627][T13681] ffff8880293ab0e0 [ 847.245924][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 847.245943][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.245957][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 847.245992][T16306] [ 847.280005][T16306] index not increased! 20ffb000 <= 20ffb000 [ 847.312144][T13681] 140323556835328-140323557564415: [ 847.312704][T16306] BUG at mt_find:6473 (1) [ 847.324091][T13681] ffff8880293ab000 [ 847.343235][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 847.349281][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 847.349307][T13681] 140323557900288-140323557904383: 0000000000000000 [ 847.349328][T13681] 140323557904384-140323558268927: [ 847.368461][T16306] 0-18446744073709551615: [ 847.380485][T13681] ffff888078bac0e0 [ 847.394948][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 847.400536][T13681] 140323558268928-140323558305791: [ 847.414924][T16306] contents: [ 847.416370][T13681] ffff888078bac460 [ 847.422576][T16306] 93708189892608 [ 847.430397][T13681] 140323558305792-140323558326271: 0000000000000000 [ 847.441466][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 847.443564][T16306] 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 847.448791][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 847.488839][T16306] 0000000000000000 0 [ 847.524258][T13681] 140323570171904-140323571208191: 0000000000000000 [ 847.540008][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 847.543841][T16306] 0000000000000000 0 0000000000000000 0 0000000000000000 [ 847.547389][T13681] 140323571212288-140323571343359: [ 847.554356][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 847.574932][T13681] ffff888078bacb60 [ 847.610413][T16306] 0-536866815: 0000000000000000 [ 847.621407][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 847.629125][T16306] 536870912-553623551: ffff8880aabbda80 [ 847.630202][T13681] 140323571343360-140734793707519: [ 847.635173][T16306] 553623552-553635839: 0000000000000000 [ 847.635200][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 847.635223][T16306] 553627648-553639935: ffff88801ccdf380 [ 847.635246][T16306] 553639936-553648127: ffff88823bd4cf60 [ 847.635271][T16306] 553648128-553652223: ffff8880aabbdb60 [ 847.635294][T16306] 553652224-116827226111: 0000000000000000 [ 847.635317][T16306] 116827226112-116831420415: [ 847.672453][T13681] 0000000000000000 [ 847.684971][T16306] ffff8880aabbdc40 [ 847.687260][T13681] 140734793707520-140734793842687: [ 847.689512][T16306] 116831420416-93825021313023: 0000000000000000 [ 847.695388][T13681] ffff888078bac7e0 [ 847.706082][T13681] 140734793842688-140734795161599: 0000000000000000 [ 847.713065][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 847.716368][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 847.720583][T13681] 140734795177984-140734795186175: [ 847.729183][T16306] 93825021452288-140495695114239: 0000000000000000 [ 847.734942][T13681] ffff888078bacee0 [ 847.741734][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 847.752421][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 847.758654][T13681] 140734795186176-18446744073709551615: [ 847.808717][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 847.822105][T13681] 0000000000000000 [ 847.822497][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 847.836868][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 847.841081][T13681] Pass: 12904584 Run:12904746 [ 847.843828][T16306] 140495707701248-140495709798399: [ 847.848737][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 847.849192][T16306] ffff8880aabae1c0 [ 847.854381][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 847.874941][T16306] 140495709798400-140495711895551: [ 847.878020][T13681] Call Trace: [ 847.878031][T13681] [ 847.878043][T13681] dump_stack_lvl+0xd1/0x138 [ 847.883567][T16306] ffff8880aabae2a0 [ 847.886835][T13681] mt_find.cold+0x8b/0x90 [ 847.886869][T13681] ? mas_find+0x1d0/0x1d0 [ 847.886911][T13681] find_vma+0x10c/0x1b0 [ 847.886934][T13681] ? can_vma_merge_before+0x390/0x390 [ 847.886962][T13681] ? walk_page_test+0x78/0x180 [ 847.887004][T13681] walk_page_range+0x2b1/0x4a0 [ 847.887042][T13681] ? __walk_page_range+0x780/0x780 [ 847.887094][T13681] mlock_fixup+0x650/0x810 [ 847.901318][T16306] 140495711895552-140495716089855: [ 847.902652][T13681] apply_vma_lock_flags+0x23d/0x350 [ 847.907584][T16306] ffff8880aabae380 [ 847.911178][T13681] ? mlock_fixup+0x810/0x810 [ 847.925664][T16306] 140495716089856-140495716237311: [ 847.926049][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 847.933141][T16306] ffff8880aabae460 [ 847.935530][T13681] do_mlock+0x25a/0x6d0 [ 847.935575][T13681] ? folio_evictable+0x270/0x270 [ 847.935620][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 847.935655][T13681] __x64_sys_mlock+0x59/0x80 [ 847.935694][T13681] do_syscall_64+0x39/0xb0 [ 847.935732][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 847.935762][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 847.935783][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 847.935806][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 847.935831][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 847.935848][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 847.935863][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 847.935878][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.952792][T16306] 140495716237312-140495716966399: [ 847.954902][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 847.954938][T13681] [ 847.962677][T13681] index not increased! 20ffd000 <= 20ffd000 [ 847.985643][T16306] ffff8880aabae540 [ 848.000836][T13681] BUG at mt_find:6473 (1) [ 848.005804][T16306] 140495716966400-140495717302271: [ 848.044174][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 848.080697][T16306] ffff8880aabae620 [ 848.087042][T13681] 0-18446744073709551615: [ 848.089279][T16306] 140495717302272-140495717306367: [ 848.097002][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 848.097243][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 [ 848.112415][T16306] 0000000000000000 [ 848.135992][T13681] ffff88801cede2a0 116824080383 [ 848.196028][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 848.208276][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 848.215330][T16306] 140495717707776-140495717728255: 0000000000000000 [ 848.220049][T13681] 0000000000000000 93825007087615 [ 848.222282][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 848.234414][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 848.235099][T13681] ffff8880208b22a0 93825007226879 [ 848.286859][T16306] 140495729573888-140495730151423: 0000000000000000 [ 848.300568][T13681] 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 848.300970][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 848.322226][T13681] 0-536866815: 0000000000000000 [ 848.327661][T13681] 536866816-536870911: ffff88801cede380 [ 848.333592][T13681] 536870912-553631743: ffff88801cede0e0 [ 848.335193][T16306] 140495730155520-140495730286591: [ 848.341543][T13681] 553631744-553639935: [ 848.347186][T16306] ffff88801ccdf460 [ 848.347203][T16306] 140495730286592-140724016734207: 0000000000000000 [ 848.347229][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 848.351720][T13681] 0000000000000000 [ 848.364987][T16306] 140724016869376-140724018196479: [ 848.369415][T13681] 553639936-553635839: [ 848.373054][T16306] 0000000000000000 [ 848.378637][T13681] ffff8880772027e0 [ 848.378649][T13681] 553635840-553644031: ffff888077202a80 [ 848.378670][T13681] 553644032-553648127: ffff8880266220e0 [ 848.378691][T13681] 553648128-553652223: ffff88801cede000 [ 848.378713][T13681] 553652224-116819886079: 0000000000000000 [ 848.378736][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 848.378760][T13681] 116824080384-93825007087615: 0000000000000000 [ 848.397480][T16306] 140724018196480-140724018212863: [ 848.402615][T13681] 93825007087616-93825007226879: [ 848.423964][T16306] ffff8880aabaea80 [ 848.428241][T13681] ffff8880208b22a0 [ 848.433668][T16306] 140724018212864-140724018221055: [ 848.442864][T13681] 93825007226880-140323535712255: [ 848.443946][T16306] ffff8880aabaeb60 [ 848.447158][T13681] 0000000000000000 [ 848.466186][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 848.471347][T16306] 140724018221056-18446744073709551615: [ 848.473147][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 848.492974][T16306] 0000000000000000 [ 848.540889][T16306] Pass: 12904584 Run:12904747 [ 848.547792][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 848.552593][T13681] 140323535716352-140323544104959: [ 848.557700][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 848.557716][T16306] Call Trace: [ 848.557724][T16306] [ 848.557734][T16306] dump_stack_lvl+0xd1/0x138 [ 848.557773][T16306] mt_find.cold+0x8b/0x90 [ 848.557804][T16306] ? mas_find+0x1d0/0x1d0 [ 848.557850][T16306] find_vma+0x10c/0x1b0 [ 848.557878][T16306] ? can_vma_merge_before+0x390/0x390 [ 848.557931][T16306] ? walk_page_test+0x78/0x180 [ 848.557966][T16306] walk_page_range+0x2b1/0x4a0 [ 848.557999][T16306] ? __walk_page_range+0x780/0x780 [ 848.569102][T13681] ffff8880208b2620 [ 848.573604][T16306] mlock_fixup+0x650/0x810 [ 848.578561][T13681] 140323544104960-140323546202111: [ 848.579803][T16306] apply_vma_lock_flags+0x23d/0x350 [ 848.584360][T13681] ffff8880208b27e0 [ 848.588675][T16306] ? mlock_fixup+0x810/0x810 [ 848.588724][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 848.593757][T13681] 140323546202112-140323548299263: [ 848.597193][T16306] do_mlock+0x25a/0x6d0 [ 848.597239][T16306] ? folio_evictable+0x270/0x270 [ 848.602807][T13681] ffff8880208b2700 [ 848.607352][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 848.607389][T16306] __x64_sys_mlock+0x59/0x80 [ 848.607426][T16306] do_syscall_64+0x39/0xb0 [ 848.607461][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 848.607497][T16306] RIP: 0033:0x7fc7b548c0c9 [ 848.607518][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 848.607540][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 848.607564][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 848.607581][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 848.607597][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 848.607614][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.607629][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 848.607667][T16306] [ 848.616616][T16306] index not increased! 20ffb000 <= 20ffb000 [ 848.644958][T13681] 140323548299264-140323550396415: [ 848.648469][T16306] BUG at mt_find:6473 (1) [ 848.651749][T13681] ffff8880208b28c0 [ 848.657250][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 848.675426][T13681] 140323550396416-140323552493567: [ 848.675742][T16306] 0-18446744073709551615: [ 848.680242][T13681] ffff8880208b21c0 [ 848.684637][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 848.703774][T13681] 140323552493568-140323556687871: [ 848.729047][T16306] contents: [ 848.731742][T13681] ffff8880208b2380 [ 848.740274][T16306] 93708189892608 [ 848.755996][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 848.756030][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 848.756055][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 848.756079][T13681] 140323557900288-140323557904383: 0000000000000000 [ 848.756101][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 848.756125][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 848.756146][T13681] 140323558305792-140323558326271: 0000000000000000 [ 848.756166][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 848.768588][T16306] 20480 [ 848.774052][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 [ 848.780065][T16306] 18446603349691330560 [ 848.799376][T13681] ffff888078bacb60 140323571343359 [ 848.802643][T16306] 0 [ 848.814913][T13681] 0000000000000000 140734793707519 [ 848.818514][T16306] 0 [ 848.825041][T13681] ffff888078bac7e0 140734793842687 [ 848.827500][T16306] 0 [ 848.834520][T13681] 0000000000000000 140734795161599 [ 848.841394][T16306] 0 [ 848.863340][T13681] ffff888078bac000 140734795177983 [ 848.904981][T16306] 0 [ 848.914688][T13681] ffff888078bacee0 140734795186175 [ 848.934745][T16306] 0 [ 848.936975][T13681] 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 848.940128][T16306] 0 [ 848.944798][T13681] 0000000000000000 0 [ 848.947865][T16306] | 02 02| [ 848.957193][T13681] 0000000000000000 0 [ 848.973401][T16306] ffff88807b18040c 140495695118335 [ 848.979692][T13681] 0000000000000000 0 [ 848.981742][T16306] ffff88807dda800c 140495729573887 [ 848.984162][T13681] 0000000000000008 [ 848.996395][T16306] ffff88802b3c080c 18446744073709551615 [ 849.006430][T13681] 140323570171904-140323571208191: 0000000000000000 [ 849.006459][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 849.006482][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 849.006505][T13681] 140323571343360-140734793707519: 0000000000000000 [ 849.006561][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 849.006610][T13681] 140734793842688-140734795161599: 0000000000000000 [ 849.006654][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 849.006679][T13681] 140734795177984-140734795186175: [ 849.019330][T16306] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 849.019409][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 [ 849.036115][T13681] ffff888078bacee0 [ 849.054296][T16306] ffff8880aabbdb60 553652223 [ 849.054445][T13681] 140734795186176-18446744073709551615: [ 849.063005][T16306] 0000000000000000 116827226111 [ 849.084945][T13681] 0000000000000000 [ 849.110053][T16306] ffff8880aabbdc40 116831420415 [ 849.128314][T13681] Pass: 12904584 Run:12904748 [ 849.132160][T16306] 0000000000000000 93825021313023 [ 849.144640][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 849.154969][T16306] ffff8880aabbdd20 93825021452287 [ 849.159658][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 849.159674][T13681] Call Trace: [ 849.159683][T13681] [ 849.159692][T13681] dump_stack_lvl+0xd1/0x138 [ 849.159731][T13681] mt_find.cold+0x8b/0x90 [ 849.159766][T13681] ? mas_find+0x1d0/0x1d0 [ 849.159810][T13681] find_vma+0x10c/0x1b0 [ 849.159837][T13681] ? can_vma_merge_before+0x390/0x390 [ 849.159869][T13681] ? walk_page_test+0x78/0x180 [ 849.159905][T13681] walk_page_range+0x2b1/0x4a0 [ 849.159938][T13681] ? __walk_page_range+0x780/0x780 [ 849.159999][T13681] mlock_fixup+0x650/0x810 [ 849.160051][T13681] apply_vma_lock_flags+0x23d/0x350 [ 849.160094][T13681] ? mlock_fixup+0x810/0x810 [ 849.160145][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 849.160187][T13681] do_mlock+0x25a/0x6d0 [ 849.160230][T13681] ? folio_evictable+0x270/0x270 [ 849.160285][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 849.160320][T13681] __x64_sys_mlock+0x59/0x80 [ 849.160358][T13681] do_syscall_64+0x39/0xb0 [ 849.160396][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 849.160426][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 849.160449][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 849.160473][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 849.160497][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 849.160512][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 849.160526][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 849.160540][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.160554][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 849.160591][T13681] [ 849.165524][T13681] index not increased! 20ffd000 <= 20ffd000 [ 849.174926][T16306] 0000000000000000 140495695114239 [ 849.176682][T13681] BUG at mt_find:6473 (1) [ 849.179747][T16306] ffff8880aabbde00 140495695118335 [ 849.182680][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 849.194952][T16306] 0000000000000000 0 [ 849.195748][T13681] 0-18446744073709551615: [ 849.199807][T16306] 000000000000000d [ 849.205355][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 849.209846][T16306] 0-536866815: [ 849.214594][T13681] contents: 93708183007232 [ 849.241150][T16306] 0000000000000000 [ 849.244964][T13681] 20480 [ 849.249375][T16306] 536866816-536870911: [ 849.274949][T13681] 18446603338914365440 [ 849.277228][T16306] ffff8880aabbd9a0 [ 849.312118][T13681] 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 849.339050][T16306] 536870912-553623551: [ 849.344940][T13681] 0000000000000000 0 [ 849.347796][T16306] ffff8880aabbda80 [ 849.355382][T13681] 0000000000000000 0 [ 849.358845][T16306] 553623552-553635839: [ 849.374983][T13681] 0000000000000000 [ 849.386049][T16306] 0000000000000000 [ 849.386066][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 849.386092][T16306] 553627648-553639935: ffff88801ccdf380 [ 849.386114][T16306] 553639936-553648127: ffff88823bd4cf60 [ 849.386137][T16306] 553648128-553652223: ffff8880aabbdb60 [ 849.386159][T16306] 553652224-116827226111: 0000000000000000 [ 849.386180][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 849.386203][T16306] 116831420416-93825021313023: 0000000000000000 [ 849.386226][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 849.386249][T16306] 93825021452288-140495695114239: 0000000000000000 [ 849.386273][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 849.386297][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 [ 849.414973][T13681] 0-140323535716351: [ 849.417487][T16306] ffff8880aabae700 140495717670911 [ 849.421517][T13681] node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 [ 849.425443][T16306] ffff8880aabae7e0 140495717707775 [ 849.459213][T13681] contents: [ 849.463200][T16306] 0000000000000000 140495717728255 [ 849.480319][T13681] 0000000000000000 536866815 [ 849.480892][T16306] ffff8880aabae8c0 140495729573887 [ 849.494990][T13681] ffff88801cede380 536870911 [ 849.498757][T16306] 0000000000000000 0 [ 849.504747][T13681] ffff88801cede0e0 553631743 [ 849.511205][T16306] 000000000000000d [ 849.511216][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 849.511240][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 849.511265][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 849.511289][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 849.511313][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 849.511337][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 849.511360][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 849.511383][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 849.511414][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 849.511439][T16306] 140495717302272-140495717306367: 0000000000000000 [ 849.511461][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 849.511485][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 849.511509][T16306] 140495717707776-140495717728255: 0000000000000000 [ 849.511532][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 849.511556][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 [ 849.525207][T13681] 0000000000000000 553639935 [ 849.544981][T16306] ffff8880aabae9a0 140724016869375 [ 849.586761][T13681] ffff8880772027e0 553635839 [ 849.604655][T16306] 0000000000000000 140724018196479 [ 849.607315][T13681] ffff888077202a80 553644031 [ 849.615152][T16306] ffff8880aabaea80 140724018212863 [ 849.616754][T13681] ffff8880266220e0 553648127 [ 849.621516][T16306] ffff8880aabaeb60 140724018221055 [ 849.629114][T13681] ffff88801cede000 553652223 [ 849.643346][T16306] 0000000000000000 18446744073709551615 [ 849.647024][T13681] 0000000000000000 116819886079 [ 849.655124][T16306] 0000000000000000 0 [ 849.660194][T13681] ffff88801cede2a0 116824080383 [ 849.674967][T16306] 0000000000000000 0 [ 849.682754][T13681] 0000000000000000 93825007087615 [ 849.709424][T16306] 0000000000000000 0 [ 849.734356][T13681] ffff8880208b22a0 93825007226879 [ 849.773789][T16306] 0000000000000000 0 [ 849.781209][T13681] 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 849.794986][T16306] 0000000000000000 0 [ 849.795938][T13681] 0-536866815: [ 849.801020][T16306] 0000000000000000 0 [ 849.805731][T13681] 0000000000000000 [ 849.805743][T13681] 536866816-536870911: ffff88801cede380 [ 849.805763][T13681] 536870912-553631743: ffff88801cede0e0 [ 849.805816][T13681] 553631744-553639935: 0000000000000000 [ 849.805870][T13681] 553639936-553635839: ffff8880772027e0 [ 849.805947][T13681] 553635840-553644031: ffff888077202a80 [ 849.805970][T13681] 553644032-553648127: ffff8880266220e0 [ 849.805993][T13681] 553648128-553652223: ffff88801cede000 [ 849.806016][T13681] 553652224-116819886079: 0000000000000000 [ 849.806038][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 849.806061][T13681] 116824080384-93825007087615: 0000000000000000 [ 849.806084][T13681] 93825007087616-93825007226879: [ 849.825982][T16306] 0000000000000008 [ 849.829672][T13681] ffff8880208b22a0 [ 849.834737][T16306] 140495729573888-140495730151423: [ 849.838781][T13681] 93825007226880-140323535712255: 0000000000000000 [ 849.838806][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 849.838891][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 [ 849.858952][T16306] 0000000000000000 [ 849.859608][T13681] ffff8880208b28c0 140323550396415 [ 849.863241][T16306] 140495730151424-140495730155519: [ 849.867109][T13681] ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 849.867257][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 849.867280][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 849.884968][T16306] ffff88801ccdf000 [ 849.891228][T13681] 140323546202112-140323548299263: [ 849.893430][T16306] 140495730155520-140495730286591: [ 849.899417][T13681] ffff8880208b2700 [ 849.899463][T13681] 140323548299264-140323550396415: [ 849.922041][T16306] ffff88801ccdf460 [ 849.923511][T13681] ffff8880208b28c0 [ 849.950485][T16306] 140495730286592-140724016734207: [ 849.955746][T13681] 140323550396416-140323552493567: [ 849.974981][T16306] 0000000000000000 [ 849.998671][T13681] ffff8880208b21c0 [ 850.055434][T16306] 140724016734208-140724016869375: [ 850.059024][T13681] 140323552493568-140323556687871: [ 850.062197][T16306] ffff8880aabae9a0 [ 850.068183][T13681] ffff8880208b2380 [ 850.092388][T16306] 140724016869376-140724018196479: [ 850.122584][T13681] 140323556687872-140323556835327: [ 850.134170][T16306] 0000000000000000 [ 850.134925][T13681] ffff8880293ab0e0 [ 850.140122][T16306] 140724018196480-140724018212863: [ 850.143816][T13681] 140323556835328-140323557564415: [ 850.148635][T16306] ffff8880aabaea80 [ 850.163789][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 850.165440][T13681] ffff8880293ab000 [ 850.174486][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 850.174991][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 850.182118][T13681] 140323557900288-140323557904383: 0000000000000000 [ 850.197423][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 850.204409][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 850.205014][T16306] Pass: 12904585 Run:12904750 [ 850.211887][T13681] 140323558305792-140323558326271: 0000000000000000 [ 850.223148][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 850.229552][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 850.233398][T13681] 140323570171904-18446744073709551615: [ 850.240553][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 850.240569][T16306] Call Trace: [ 850.240576][T16306] [ 850.240587][T16306] dump_stack_lvl+0xd1/0x138 [ 850.240628][T16306] mt_find.cold+0x8b/0x90 [ 850.247072][T13681] node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 850.256464][T16306] ? mas_find+0x1d0/0x1d0 [ 850.256513][T16306] find_vma+0x10c/0x1b0 [ 850.260241][T13681] contents: [ 850.262708][T16306] ? can_vma_merge_before+0x390/0x390 [ 850.267757][T13681] 0000000000000000 140323571208191 [ 850.271611][T16306] ? walk_page_test+0x78/0x180 [ 850.279713][T13681] ffff88801ccdfa80 140323571212287 [ 850.283466][T16306] walk_page_range+0x2b1/0x4a0 [ 850.288868][T13681] ffff888078bacb60 140323571343359 [ 850.290884][T16306] ? __walk_page_range+0x780/0x780 [ 850.296591][T13681] 0000000000000000 140734793707519 [ 850.301433][T16306] mlock_fixup+0x650/0x810 [ 850.306500][T13681] ffff888078bac7e0 140734793842687 [ 850.311348][T16306] apply_vma_lock_flags+0x23d/0x350 [ 850.322248][T13681] 0000000000000000 140734795161599 [ 850.326426][T16306] ? mlock_fixup+0x810/0x810 [ 850.326486][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 850.326524][T16306] do_mlock+0x25a/0x6d0 [ 850.326562][T16306] ? folio_evictable+0x270/0x270 [ 850.326609][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 850.326642][T16306] __x64_sys_mlock+0x59/0x80 [ 850.326677][T16306] do_syscall_64+0x39/0xb0 [ 850.386516][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 850.392433][T16306] RIP: 0033:0x7fc7b548c0c9 [ 850.396860][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 850.416479][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 850.424909][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 850.432885][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 850.440898][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 850.448892][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.456880][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 850.464883][T16306] [ 850.472773][T13681] ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 850.500789][T13681] 140323570171904-140323571208191: 0000000000000000 [ 850.508180][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 850.515513][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 850.522498][T13681] 140323571343360-140734793707519: 0000000000000000 [ 850.523889][T16306] index not increased! 20ffb000 <= 20ffb000 [ 850.529989][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 850.542645][T13681] 140734793842688-140734795161599: 0000000000000000 [ 850.544920][T16306] BUG at mt_find:6473 (1) [ 850.550161][T13681] 140734795161600-140734795177983: [ 850.553907][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 850.553930][T16306] 0-18446744073709551615: [ 850.559922][T13681] ffff888078bac000 [ 850.578303][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 850.581127][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 850.585585][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 850.585613][T13681] Pass: 12904585 Run:12904751 [ 850.585627][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 850.605857][T16306] contents: [ 850.615081][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 850.615098][T13681] Call Trace: [ 850.615106][T13681] [ 850.615117][T13681] dump_stack_lvl+0xd1/0x138 [ 850.615158][T13681] mt_find.cold+0x8b/0x90 [ 850.618433][T16306] 93708189892608 [ 850.628474][T13681] ? mas_find+0x1d0/0x1d0 [ 850.628520][T13681] find_vma+0x10c/0x1b0 [ 850.631790][T16306] 20480 [ 850.634711][T13681] ? can_vma_merge_before+0x390/0x390 [ 850.639309][T16306] 18446603349691330560 [ 850.643590][T13681] ? walk_page_test+0x78/0x180 [ 850.672839][T13681] walk_page_range+0x2b1/0x4a0 [ 850.677637][T13681] ? __walk_page_range+0x780/0x780 [ 850.682784][T13681] mlock_fixup+0x650/0x810 [ 850.687239][T13681] apply_vma_lock_flags+0x23d/0x350 [ 850.692460][T13681] ? mlock_fixup+0x810/0x810 [ 850.697103][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 850.703047][T13681] do_mlock+0x25a/0x6d0 [ 850.707240][T13681] ? folio_evictable+0x270/0x270 [ 850.712211][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 850.718120][T13681] __x64_sys_mlock+0x59/0x80 [ 850.722733][T13681] do_syscall_64+0x39/0xb0 [ 850.727255][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 850.733159][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 850.737582][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 850.757216][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 850.765643][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 850.773624][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 850.781603][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 850.789576][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.797553][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 850.805546][T13681] [ 850.824990][T16306] 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 850.831732][T13681] index not increased! 20ffd000 <= 20ffd000 [ 850.856190][T13681] BUG at mt_find:6473 (1) [ 850.860541][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 850.867827][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 850.869880][T13681] 0-18446744073709551615: [ 850.923807][T16306] 0-536866815: 0000000000000000 [ 850.935034][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 850.937865][T16306] 536866816-536870911: [ 850.972488][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 850.985117][T16306] ffff8880aabbd9a0 [ 851.033020][T13681] 0-536866815: 0000000000000000 [ 851.040639][T13681] 536866816-536870911: ffff88801cede380 [ 851.046676][T13681] 536870912-553631743: ffff88801cede0e0 [ 851.052610][T13681] 553631744-553639935: 0000000000000000 [ 851.054451][T16306] 536870912-553623551: [ 851.058710][T13681] 553639936-553635839: ffff8880772027e0 [ 851.058738][T13681] 553635840-553644031: ffff888077202a80 [ 851.058761][T13681] 553644032-553648127: ffff8880266220e0 [ 851.058784][T13681] 553648128-553652223: [ 851.073115][T16306] ffff8880aabbda80 [ 851.075572][T13681] ffff88801cede000 [ 851.081818][T16306] 553623552-553635839: [ 851.085856][T13681] 553652224-116819886079: [ 851.094916][T16306] 0000000000000000 [ 851.098264][T13681] 0000000000000000 [ 851.102514][T16306] 553635840-553627647: [ 851.107593][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 851.122201][T13681] 116824080384-93825007087615: 0000000000000000 [ 851.124966][T16306] ffff88801ccdf1c0 [ 851.129304][T13681] 93825007087616-93825007226879: [ 851.132515][T16306] 553627648-553639935: ffff88801ccdf380 [ 851.144571][T13681] ffff8880208b22a0 [ 851.150428][T13681] 93825007226880-140323535712255: 0000000000000000 [ 851.154949][T16306] 553639936-553648127: ffff88823bd4cf60 [ 851.157764][T13681] 140323535712256-140323535716351: [ 851.163211][T16306] 553648128-553652223: ffff8880aabbdb60 [ 851.169191][T13681] ffff8880208b20e0 [ 851.178852][T16306] 553652224-116827226111: 0000000000000000 [ 851.185414][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 851.192571][T16306] 116827226112-116831420415: [ 851.243487][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 851.257751][T16306] ffff8880aabbdc40 [ 851.259054][T13681] 140323544104960-140323546202111: [ 851.261493][T16306] 116831420416-93825021313023: 0000000000000000 [ 851.274022][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 851.274968][T13681] ffff8880208b27e0 [ 851.280879][T16306] 93825021452288-140495695114239: 0000000000000000 [ 851.285268][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 851.291507][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 851.306474][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 851.313309][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 851.373380][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 851.380517][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 851.383556][T13681] 140323552493568-140323556687871: [ 851.387909][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 851.395001][T13681] ffff8880208b2380 [ 851.400532][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 851.412934][T13681] 140323556687872-140323556835327: [ 851.412933][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 851.424098][T13681] ffff8880293ab0e0 [ 851.427131][T16306] 140495709798400-140495711895551: [ 851.429411][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 851.435367][T16306] ffff8880aabae2a0 [ 851.446211][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 851.453538][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 851.457983][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 851.461021][T16306] 140495716237312-140495716966399: [ 851.467721][T13681] 140323557900288-140323557904383: 0000000000000000 [ 851.476152][T16306] ffff8880aabae540 [ 851.481870][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 851.491057][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 851.492750][T16306] 140495716966400-140495717302271: [ 851.498080][T13681] 140323558305792-140323558326271: 0000000000000000 [ 851.498104][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 851.498128][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 851.511553][T16306] ffff8880aabae620 [ 851.534267][T13681] 0000000000000008 [ 851.576072][T13681] 140323570171904-140323571208191: 0000000000000000 [ 851.583069][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 851.591980][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 851.594610][T16306] 140495717302272-140495717306367: [ 851.599217][T13681] 140323571343360-140734793707519: 0000000000000000 [ 851.599245][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 851.599270][T13681] 140734793842688-140734795161599: 0000000000000000 [ 851.599293][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 851.599316][T13681] 140734795177984-140734795186175: [ 851.614927][T16306] 0000000000000000 [ 851.621716][T13681] ffff888078bacee0 [ 851.634934][T16306] 140495717306368-140495717670911: [ 851.639245][T13681] 140734795186176-18446744073709551615: [ 851.642796][T16306] ffff8880aabae700 [ 851.646722][T13681] 0000000000000000 [ 851.664675][T16306] 140495717670912-140495717707775: [ 851.666027][T13681] Pass: 12904587 Run:12904754 [ 851.666045][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 851.671571][T16306] ffff8880aabae7e0 [ 851.676229][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 851.676244][T13681] Call Trace: [ 851.676252][T13681] [ 851.676262][T13681] dump_stack_lvl+0xd1/0x138 [ 851.676302][T13681] mt_find.cold+0x8b/0x90 [ 851.692410][T16306] 140495717707776-140495717728255: [ 851.699947][T13681] ? mas_find+0x1d0/0x1d0 [ 851.699997][T13681] find_vma+0x10c/0x1b0 [ 851.703256][T16306] 0000000000000000 [ 851.706178][T13681] ? can_vma_merge_before+0x390/0x390 [ 851.706211][T13681] ? walk_page_test+0x78/0x180 [ 851.710783][T16306] 140495717728256-140495729573887: [ 851.715097][T13681] walk_page_range+0x2b1/0x4a0 [ 851.715135][T13681] ? __walk_page_range+0x780/0x780 [ 851.715180][T13681] mlock_fixup+0x650/0x810 [ 851.715228][T13681] apply_vma_lock_flags+0x23d/0x350 [ 851.715271][T13681] ? mlock_fixup+0x810/0x810 [ 851.715331][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 851.715373][T13681] do_mlock+0x25a/0x6d0 [ 851.715412][T13681] ? folio_evictable+0x270/0x270 [ 851.715463][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 851.715497][T13681] __x64_sys_mlock+0x59/0x80 [ 851.715532][T13681] do_syscall_64+0x39/0xb0 [ 851.715570][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 851.715600][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 851.715623][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 851.715648][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 [ 851.737346][T16306] ffff8880aabae8c0 [ 851.738714][T13681] ORIG_RAX: 0000000000000095 [ 851.743466][T16306] 140495729573888-18446744073709551615: [ 851.748988][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 851.749006][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 851.749020][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 851.749034][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.749049][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 851.755285][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 [ 851.758898][T13681] [ 851.763276][T16306] contents: 0000000000000000 140495730151423 [ 851.771338][T13681] index not increased! 20ffd000 <= 20ffd000 [ 851.794979][T16306] ffff88801ccdf000 140495730155519 [ 851.799432][T13681] BUG at mt_find:6473 (1) [ 851.803462][T16306] ffff88801ccdf460 140495730286591 [ 851.809425][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 851.809482][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 [ 851.851090][T16306] 0000000000000000 140724016734207 [ 851.871185][T13681] 0 [ 851.893329][T16306] ffff8880aabae9a0 140724016869375 [ 851.904708][T13681] 0 [ 851.913266][T16306] 0000000000000000 140724018196479 [ 851.913580][T13681] 0 [ 851.919468][T16306] ffff8880aabaea80 140724018212863 [ 851.934275][T13681] 0 [ 851.942572][T16306] ffff8880aabaeb60 140724018221055 [ 851.943785][T13681] 0 [ 851.961527][T16306] 0000000000000000 18446744073709551615 [ 851.975379][T13681] | 02 02| [ 851.979323][T16306] 0000000000000000 0 [ 851.981464][T13681] ffff88801c1d3c0c 140323535716351 [ 851.986935][T16306] 0000000000000000 0 [ 852.004307][T13681] ffff88801c1d300c 140323570171903 [ 852.014164][T16306] 0000000000000000 0 [ 852.024932][T13681] ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 852.031712][T16306] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 852.056548][T16306] 140495729573888-140495730151423: 0000000000000000 [ 852.062166][T13681] 0-140323535716351: [ 852.063510][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 852.074304][T13681] node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 [ 852.077831][T16306] 140495730155520-140495730286591: [ 852.082593][T13681] contents: [ 852.085500][T16306] ffff88801ccdf460 [ 852.085515][T16306] 140495730286592-140724016734207: 0000000000000000 [ 852.085541][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 852.085566][T16306] 140724016869376-140724018196479: 0000000000000000 [ 852.085590][T16306] 140724018196480-140724018212863: [ 852.091552][T13681] 0000000000000000 536866815 [ 852.094758][T16306] ffff8880aabaea80 [ 852.104991][T13681] ffff88801cede380 536870911 [ 852.106098][T16306] 140724018212864-140724018221055: [ 852.112745][T13681] ffff88801cede0e0 553631743 [ 852.119651][T16306] ffff8880aabaeb60 [ 852.143926][T13681] 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 852.154728][T16306] 140724018221056-18446744073709551615: [ 852.187892][T13681] 0-536866815: 0000000000000000 [ 852.197616][T16306] 0000000000000000 [ 852.199917][T13681] 536866816-536870911: ffff88801cede380 [ 852.209020][T13681] 536870912-553631743: ffff88801cede0e0 [ 852.209075][T16306] Pass: 12904587 Run:12904755 [ 852.220127][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 852.224944][T13681] 553631744-553639935: [ 852.230031][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 852.230049][T13681] 0000000000000000 [ 852.234527][T16306] Call Trace: [ 852.234538][T16306] [ 852.234548][T16306] dump_stack_lvl+0xd1/0x138 [ 852.234588][T16306] mt_find.cold+0x8b/0x90 [ 852.234622][T16306] ? mas_find+0x1d0/0x1d0 [ 852.234666][T16306] find_vma+0x10c/0x1b0 [ 852.234692][T16306] ? can_vma_merge_before+0x390/0x390 [ 852.234723][T16306] ? walk_page_test+0x78/0x180 [ 852.234759][T16306] walk_page_range+0x2b1/0x4a0 [ 852.234798][T16306] ? __walk_page_range+0x780/0x780 [ 852.234852][T16306] mlock_fixup+0x650/0x810 [ 852.234897][T16306] apply_vma_lock_flags+0x23d/0x350 [ 852.234936][T16306] ? mlock_fixup+0x810/0x810 [ 852.234989][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 852.235030][T16306] do_mlock+0x25a/0x6d0 [ 852.235073][T16306] ? folio_evictable+0x270/0x270 [ 852.235124][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 852.235162][T16306] __x64_sys_mlock+0x59/0x80 [ 852.235201][T16306] do_syscall_64+0x39/0xb0 [ 852.235244][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 852.235274][T16306] RIP: 0033:0x7fc7b548c0c9 [ 852.235296][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 852.235319][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 852.235346][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 852.235364][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 852.235380][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 852.235397][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.235414][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 852.235450][T16306] [ 852.264996][T13681] 553639936-553635839: [ 852.288683][T16306] index not increased! 20ffb000 <= 20ffb000 [ 852.314375][T13681] ffff8880772027e0 [ 852.320675][T16306] BUG at mt_find:6473 (1) [ 852.322776][T13681] 553635840-553644031: [ 852.328942][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 852.353691][T13681] ffff888077202a80 [ 852.382924][T16306] 0-18446744073709551615: [ 852.414929][T13681] 553644032-553648127: [ 852.418722][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 852.421451][T13681] ffff8880266220e0 [ 852.429838][T16306] contents: [ 852.445010][T13681] 553648128-553652223: [ 852.446644][T16306] 93708189892608 [ 852.453691][T13681] ffff88801cede000 [ 852.457874][T16306] 20480 [ 852.462056][T13681] 553652224-116819886079: [ 852.466861][T16306] 18446603349691330560 [ 852.487844][T13681] 0000000000000000 [ 852.490373][T16306] 0 [ 852.493204][T13681] 116819886080-116824080383: [ 852.496359][T16306] 0 [ 852.517268][T13681] ffff88801cede2a0 [ 852.521607][T16306] 0 [ 852.523495][T13681] 116824080384-93825007087615: 0000000000000000 [ 852.526261][T16306] 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 852.533455][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 852.568595][T13681] 93825007226880-140323535712255: 0000000000000000 [ 852.573442][T16306] 0-140495695118335: [ 852.576256][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 852.585110][T16306] node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 852.587926][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 852.636318][T16306] 0-536866815: 0000000000000000 [ 852.699924][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 852.706190][T16306] 536870912-553623551: ffff8880aabbda80 [ 852.712128][T16306] 553623552-553635839: 0000000000000000 [ 852.718533][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 852.722063][T13681] 140323535716352-140323544104959: [ 852.724449][T16306] 553627648-553639935: ffff88801ccdf380 [ 852.739352][T16306] 553639936-553648127: ffff88823bd4cf60 [ 852.744939][T13681] ffff8880208b2620 [ 852.748949][T16306] 553648128-553652223: [ 852.748987][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 852.753483][T16306] ffff8880aabbdb60 [ 852.764265][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 852.771450][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 852.773491][T16306] 553652224-116827226111: [ 852.778469][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 852.790293][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 852.795380][T16306] 0000000000000000 [ 852.800032][T13681] 140323556687872-140323556835327: [ 852.800966][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 852.806575][T13681] ffff8880293ab0e0 [ 852.806588][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 852.806610][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 852.806665][T13681] 140323557900288-140323557904383: 0000000000000000 [ 852.806716][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 852.806767][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 852.806811][T13681] 140323558305792-140323558326271: 0000000000000000 [ 852.806834][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 852.826394][T16306] 116831420416-93825021313023: [ 852.831050][T13681] 140323570171904-18446744073709551615: [ 852.845736][T16306] 0000000000000000 [ 852.854270][T13681] node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 852.878232][T16306] 93825021313024-93825021452287: [ 852.891490][T13681] contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 852.906653][T16306] ffff8880aabbdd20 [ 852.943620][T16306] 93825021452288-140495695114239: 0000000000000000 [ 852.952534][T13681] 140323570171904-140323571208191: 0000000000000000 [ 852.959054][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 852.959697][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 852.973462][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 852.980706][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 852.981133][T13681] 140323571343360-140734793707519: 0000000000000000 [ 853.037335][T16306] 140495695118336-140495703506943: [ 853.043324][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 853.049312][T16306] ffff8880aabbdee0 [ 853.063154][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 853.070591][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 853.077783][T13681] 140734793842688-140734795161599: 0000000000000000 [ 853.077916][T16306] 140495707701248-140495709798399: [ 853.084738][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 853.092091][T16306] ffff8880aabae1c0 [ 853.101566][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 853.108871][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 853.110973][T13681] 140734795177984-140734795186175: [ 853.116114][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 853.124920][T13681] ffff888078bacee0 [ 853.129158][T16306] 140495716237312-140495716966399: [ 853.132323][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 853.138861][T16306] ffff8880aabae540 [ 853.149427][T13681] Pass: 12904587 Run:12904756 [ 853.155435][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 853.165362][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 853.165566][T16306] 140495716966400-140495717302271: [ 853.175417][T13681] Call Trace: [ 853.175427][T13681] [ 853.175436][T13681] dump_stack_lvl+0xd1/0x138 [ 853.175475][T13681] mt_find.cold+0x8b/0x90 [ 853.175508][T13681] ? mas_find+0x1d0/0x1d0 [ 853.175552][T13681] find_vma+0x10c/0x1b0 [ 853.175579][T13681] ? can_vma_merge_before+0x390/0x390 [ 853.175611][T13681] ? walk_page_test+0x78/0x180 [ 853.175646][T13681] walk_page_range+0x2b1/0x4a0 [ 853.175687][T13681] ? __walk_page_range+0x780/0x780 [ 853.194629][T16306] ffff8880aabae620 [ 853.196330][T13681] mlock_fixup+0x650/0x810 [ 853.196386][T13681] apply_vma_lock_flags+0x23d/0x350 [ 853.196427][T13681] ? mlock_fixup+0x810/0x810 [ 853.196477][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 853.196518][T13681] do_mlock+0x25a/0x6d0 [ 853.196560][T13681] ? folio_evictable+0x270/0x270 [ 853.203236][T16306] 140495717302272-140495717306367: [ 853.205042][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 853.205082][T13681] __x64_sys_mlock+0x59/0x80 [ 853.205120][T13681] do_syscall_64+0x39/0xb0 [ 853.205157][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 853.205187][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 853.205210][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 853.205234][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 853.205260][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 853.210624][T16306] 0000000000000000 [ 853.215363][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 853.215379][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 853.215393][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.215407][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 853.215440][T13681] [ 853.218366][T13681] index not increased! 20ffd000 <= 20ffd000 [ 853.222606][T16306] 140495717306368-140495717670911: [ 853.234918][T13681] BUG at mt_find:6473 (1) [ 853.239300][T16306] ffff8880aabae700 [ 853.243404][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 853.249648][T16306] 140495717670912-140495717707775: [ 853.275029][T13681] 0-18446744073709551615: [ 853.311616][T16306] ffff8880aabae7e0 [ 853.340866][T13681] node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 [ 853.347898][T16306] 140495717707776-140495717728255: [ 853.371263][T13681] contents: [ 853.374016][T16306] 0000000000000000 [ 853.379360][T13681] 93708183007232 [ 853.395231][T16306] 140495717728256-140495729573887: [ 853.395976][T13681] 20480 [ 853.401404][T16306] ffff8880aabae8c0 [ 853.405864][T13681] 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 [ 853.424037][T16306] 140495729573888-18446744073709551615: [ 853.426168][T13681] ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 853.426254][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 [ 853.430623][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 [ 853.433653][T13681] ffff88801cede0e0 553631743 [ 853.452770][T16306] contents: [ 853.467055][T13681] 0000000000000000 553639935 [ 853.497003][T16306] 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 853.520436][T13681] ffff8880772027e0 553635839 [ 853.559751][T16306] 140495729573888-140495730151423: 0000000000000000 [ 853.573455][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 853.577515][T13681] ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 [ 853.580488][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 853.592809][T16306] 140495730286592-140724016734207: [ 853.600030][T13681] ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 853.612627][T16306] 0000000000000000 [ 853.625949][T13681] 0-536866815: 0000000000000000 [ 853.634731][T13681] 536866816-536870911: ffff88801cede380 [ 853.641082][T13681] 536870912-553631743: ffff88801cede0e0 [ 853.647103][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 853.647429][T13681] 553631744-553639935: [ 853.654059][T16306] 140724016869376-140724018196479: 0000000000000000 [ 853.668775][T13681] 0000000000000000 [ 853.672530][T13681] 553639936-553635839: ffff8880772027e0 [ 853.674817][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 853.682178][T13681] 553635840-553644031: ffff888077202a80 [ 853.691588][T13681] 553644032-553648127: ffff8880266220e0 [ 853.698064][T13681] 553648128-553652223: ffff88801cede000 [ 853.701540][T16306] 140724018212864-140724018221055: [ 853.703976][T13681] 553652224-116819886079: [ 853.703994][T16306] ffff8880aabaeb60 [ 853.710133][T13681] 0000000000000000 [ 853.722344][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 853.724947][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 853.729169][T13681] 116824080384-93825007087615: 0000000000000000 [ 853.743328][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 853.744962][T16306] Pass: 12904588 Run:12904758 [ 853.750641][T13681] 93825007226880-140323535712255: [ 853.754760][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 853.761789][T13681] 0000000000000000 [ 853.771296][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 853.771310][T16306] Call Trace: [ 853.771319][T16306] [ 853.771330][T16306] dump_stack_lvl+0xd1/0x138 [ 853.771369][T16306] mt_find.cold+0x8b/0x90 [ 853.771402][T16306] ? mas_find+0x1d0/0x1d0 [ 853.771445][T16306] find_vma+0x10c/0x1b0 [ 853.771471][T16306] ? can_vma_merge_before+0x390/0x390 [ 853.771502][T16306] ? walk_page_test+0x78/0x180 [ 853.771537][T16306] walk_page_range+0x2b1/0x4a0 [ 853.771575][T16306] ? __walk_page_range+0x780/0x780 [ 853.771629][T16306] mlock_fixup+0x650/0x810 [ 853.771681][T16306] apply_vma_lock_flags+0x23d/0x350 [ 853.771723][T16306] ? mlock_fixup+0x810/0x810 [ 853.771776][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 853.771818][T16306] do_mlock+0x25a/0x6d0 [ 853.771860][T16306] ? folio_evictable+0x270/0x270 [ 853.771911][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 853.771949][T16306] __x64_sys_mlock+0x59/0x80 [ 853.771986][T16306] do_syscall_64+0x39/0xb0 [ 853.777986][T13681] 140323535712256-140323535716351: [ 853.785745][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 853.785782][T16306] RIP: 0033:0x7fc7b548c0c9 [ 853.785802][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 853.789652][T13681] ffff8880208b20e0 [ 853.791998][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 [ 853.800773][T13681] 140323535716352-140323570171903: [ 853.800871][T16306] ORIG_RAX: 0000000000000095 [ 853.806076][T13681] node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e [ 853.809314][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 853.814667][T13681] contents: ffff8880208b2620 140323544104959 [ 853.819417][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 853.819437][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 853.819450][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.819464][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 853.819497][T16306] [ 853.829432][T16306] index not increased! 20ffb000 <= 20ffb000 [ 853.829454][T16306] BUG at mt_find:6473 (1) [ 853.829469][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 853.829489][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: [ 853.855034][T13681] ffff8880208b27e0 140323546202111 [ 853.882686][T16306] 93708189892608 [ 853.893294][T13681] ffff8880208b2700 140323548299263 [ 853.924460][T16306] 20480 [ 853.932918][T13681] ffff8880208b28c0 140323550396415 [ 853.967421][T16306] 18446603349691330560 [ 853.969967][T13681] ffff8880208b21c0 140323552493567 [ 853.978881][T16306] 0 [ 853.995211][T13681] ffff8880208b2380 140323556687871 [ 854.020706][T16306] 0 [ 854.043281][T13681] ffff8880293ab0e0 140323556835327 [ 854.045623][T16306] 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 [ 854.060244][T13681] ffff8880293ab000 140323557564415 [ 854.064044][T16306] 0000000000000000 0 [ 854.075199][T13681] ffff888078bac380 140323557900287 [ 854.084083][T16306] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 854.104237][T13681] 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 854.108752][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 854.145888][T13681] 140323535716352-140323544104959: [ 854.184023][T16306] 0-536866815: 0000000000000000 [ 854.194940][T13681] ffff8880208b2620 [ 854.196408][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 854.199706][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 854.212881][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 854.214979][T16306] 536870912-553623551: ffff8880aabbda80 [ 854.219909][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 854.232789][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 854.234987][T16306] 553623552-553635839: 0000000000000000 [ 854.240244][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 854.252740][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 854.254962][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 854.260255][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 854.272737][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 854.274966][T16306] 553627648-553639935: ffff88801ccdf380 [ 854.282495][T13681] 140323557900288-140323557904383: 0000000000000000 [ 854.297491][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 854.301355][T16306] 553639936-553648127: [ 854.304469][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 854.316548][T13681] 140323558305792-140323558326271: 0000000000000000 [ 854.323149][T16306] ffff88823bd4cf60 [ 854.323502][T13681] 140323558326272-140323570171903: [ 854.327389][T16306] 553648128-553652223: [ 854.327755][T13681] ffff888078bac700 [ 854.332931][T16306] ffff8880aabbdb60 [ 854.337985][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 854.355064][T16306] 553652224-116827226111: [ 854.400395][T13681] 140323570171904-140323571208191: 0000000000000000 [ 854.412913][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 854.412957][T16306] 0000000000000000 [ 854.420677][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 854.431359][T13681] 140323571343360-140734793707519: 0000000000000000 [ 854.435041][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 854.438760][T13681] 140734793707520-140734793842687: [ 854.444747][T16306] 116831420416-93825021313023: 0000000000000000 [ 854.450668][T13681] ffff888078bac7e0 [ 854.457088][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 854.467675][T16306] 93825021452288-140495695114239: 0000000000000000 [ 854.474920][T13681] 140734793842688-140734795161599: 0000000000000000 [ 854.475845][T16306] 140495695114240-140495695118335: [ 854.482274][T13681] 140734795161600-140734795177983: [ 854.482281][T16306] ffff8880aabbde00 [ 854.482295][T16306] 140495695118336-140495729573887: [ 854.499014][T13681] ffff888078bac000 [ 854.499168][T16306] node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e [ 854.504401][T13681] 140734795177984-140734795186175: [ 854.516554][T16306] contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 854.533226][T13681] ffff888078bacee0 [ 854.569910][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 854.580661][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 854.584923][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 854.590668][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 854.603111][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 854.604918][T13681] Pass: 12904591 Run:12904762 [ 854.610646][T16306] 140495709798400-140495711895551: [ 854.614727][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 854.614755][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 854.622191][T16306] ffff8880aabae2a0 [ 854.630136][T13681] Call Trace: [ 854.630146][T13681] [ 854.630155][T13681] dump_stack_lvl+0xd1/0x138 [ 854.630195][T13681] mt_find.cold+0x8b/0x90 [ 854.630229][T13681] ? mas_find+0x1d0/0x1d0 [ 854.630269][T13681] find_vma+0x10c/0x1b0 [ 854.630294][T13681] ? can_vma_merge_before+0x390/0x390 [ 854.672946][T13681] ? walk_page_test+0x78/0x180 [ 854.677738][T13681] walk_page_range+0x2b1/0x4a0 [ 854.682522][T13681] ? __walk_page_range+0x780/0x780 [ 854.687661][T13681] mlock_fixup+0x650/0x810 [ 854.692109][T13681] apply_vma_lock_flags+0x23d/0x350 [ 854.697333][T13681] ? mlock_fixup+0x810/0x810 [ 854.701954][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 854.707867][T13681] do_mlock+0x25a/0x6d0 [ 854.712045][T13681] ? folio_evictable+0x270/0x270 [ 854.717017][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 854.722927][T13681] __x64_sys_mlock+0x59/0x80 [ 854.727540][T13681] do_syscall_64+0x39/0xb0 [ 854.731978][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 854.737883][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 854.742306][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 854.761917][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 854.770339][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 854.778328][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 854.786318][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 854.794304][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.802283][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 854.810277][T13681] [ 854.818395][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 854.825741][T13681] index not increased! 20ffd000 <= 20ffd000 [ 854.831674][T13681] BUG at mt_find:6473 (1) [ 854.834931][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 854.836609][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 854.842943][T16306] 140495716237312-140495716966399: [ 854.851727][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 854.864929][T16306] ffff8880aabae540 [ 854.897343][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 [ 854.900202][T16306] 140495716966400-140495717302271: [ 854.915035][T13681] ffff8880772027e0 553635839 [ 854.920088][T16306] ffff8880aabae620 [ 854.933951][T16306] 140495717302272-140495717306367: 0000000000000000 [ 854.934997][T13681] ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 [ 854.943962][T16306] 140495717306368-140495717670911: [ 854.953368][T13681] 0000000000000000 116819886079 [ 854.953462][T16306] ffff8880aabae700 [ 854.970146][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 854.971973][T13681] ffff88801cede2a0 116824080383 [ 854.977436][T16306] 140495717707776-140495717728255: 0000000000000000 [ 854.989891][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 854.994974][T13681] 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 855.000232][T16306] 140495729573888-18446744073709551615: node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 855.029324][T13681] 0-536866815: [ 855.068193][T16306] 140495729573888-140495730151423: 0000000000000000 [ 855.076474][T13681] 0000000000000000 [ 855.079636][T16306] 140495730151424-140495730155519: [ 855.082702][T13681] 536866816-536870911: ffff88801cede380 [ 855.088616][T16306] ffff88801ccdf000 [ 855.098923][T13681] 536870912-553631743: ffff88801cede0e0 [ 855.105589][T13681] 553631744-553639935: 0000000000000000 [ 855.111530][T13681] 553639936-553635839: ffff8880772027e0 [ 855.113747][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 855.118068][T13681] 553635840-553644031: [ 855.124591][T16306] 140495730286592-140724016734207: 0000000000000000 [ 855.129554][T13681] ffff888077202a80 [ 855.140983][T13681] 553644032-553648127: ffff8880266220e0 [ 855.147281][T13681] 553648128-553652223: ffff88801cede000 [ 855.152719][T16306] 140724016734208-140724016869375: [ 855.153189][T13681] 553652224-116819886079: 0000000000000000 [ 855.158967][T16306] ffff8880aabae9a0 [ 855.168914][T16306] 140724016869376-140724018196479: 0000000000000000 [ 855.176320][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 855.179283][T13681] 116819886080-116824080383: [ 855.183285][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 855.197373][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 855.202933][T13681] ffff88801cede2a0 [ 855.206819][T16306] Pass: 12904591 Run:12904763 [ 855.213441][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 855.217648][T13681] 116824080384-93825007087615: [ 855.223342][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 855.223359][T16306] Call Trace: [ 855.223369][T16306] [ 855.228950][T13681] 0000000000000000 [ 855.238574][T16306] dump_stack_lvl+0xd1/0x138 [ 855.238616][T16306] mt_find.cold+0x8b/0x90 [ 855.242111][T13681] 93825007087616-93825007226879: [ 855.244820][T16306] ? mas_find+0x1d0/0x1d0 [ 855.248726][T13681] ffff8880208b22a0 [ 855.253109][T16306] find_vma+0x10c/0x1b0 [ 855.264918][T13681] 93825007226880-140323535712255: [ 855.267070][T16306] ? can_vma_merge_before+0x390/0x390 [ 855.270773][T13681] 0000000000000000 [ 855.276732][T16306] ? walk_page_test+0x78/0x180 [ 855.276768][T16306] walk_page_range+0x2b1/0x4a0 [ 855.290000][T13681] 140323535712256-140323535716351: [ 855.291279][T16306] ? __walk_page_range+0x780/0x780 [ 855.296056][T13681] ffff8880208b20e0 [ 855.300777][T16306] mlock_fixup+0x650/0x810 [ 855.319725][T16306] apply_vma_lock_flags+0x23d/0x350 [ 855.324925][T13681] 140323535716352-140323570171903: [ 855.324959][T16306] ? mlock_fixup+0x810/0x810 [ 855.324972][T13681] node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e [ 855.325011][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 855.330351][T13681] contents: ffff8880208b2620 140323544104959 [ 855.334924][T16306] do_mlock+0x25a/0x6d0 [ 855.334967][T16306] ? folio_evictable+0x270/0x270 [ 855.342946][T13681] ffff8880208b27e0 140323546202111 [ 855.348371][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 855.354518][T13681] ffff8880208b2700 140323548299263 [ 855.358660][T16306] __x64_sys_mlock+0x59/0x80 [ 855.358699][T16306] do_syscall_64+0x39/0xb0 [ 855.358734][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 855.358761][T16306] RIP: 0033:0x7fc7b548c0c9 [ 855.358780][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 855.358802][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 855.358828][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 855.358845][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 855.358862][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 855.358879][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.358896][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 855.358934][T16306] [ 855.385037][T16306] index not increased! 20ffb000 <= 20ffb000 [ 855.385057][T16306] BUG at mt_find:6473 (1) [ 855.385072][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 855.385093][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: 93708189892608 [ 855.391027][T13681] ffff8880208b28c0 140323550396415 [ 855.420740][T16306] 20480 [ 855.446077][T13681] ffff8880208b21c0 140323552493567 [ 855.453422][T16306] 18446603349691330560 [ 855.462517][T13681] ffff8880208b2380 140323556687871 [ 855.495017][T16306] 0 [ 855.504289][T13681] ffff8880293ab0e0 140323556835327 [ 855.518310][T16306] 0 [ 855.522378][T13681] ffff8880293ab000 140323557564415 [ 855.535022][T16306] 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 855.535191][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 [ 855.541207][T13681] ffff888078bac380 140323557900287 [ 855.542872][T16306] contents: 0000000000000000 536866815 [ 855.576936][T13681] 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 855.609374][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 855.611868][T16306] ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 855.624167][T13681] 140323544104960-140323546202111: [ 855.657075][T16306] 0-536866815: 0000000000000000 [ 855.657104][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 855.657127][T16306] 536870912-553623551: ffff8880aabbda80 [ 855.677986][T13681] ffff8880208b27e0 [ 855.679776][T16306] 553623552-553635839: [ 855.683427][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 855.688217][T16306] 0000000000000000 [ 855.695768][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 855.706698][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 855.714401][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 855.720425][T16306] 553627648-553639935: ffff88801ccdf380 [ 855.721863][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 855.733549][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 855.739222][T16306] 553639936-553648127: ffff88823bd4cf60 [ 855.741080][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 855.753708][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 855.755022][T16306] 553648128-553652223: ffff8880aabbdb60 [ 855.761181][T13681] 140323557900288-140323557904383: 0000000000000000 [ 855.773810][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 855.776224][ T28] INFO: task syz-executor.0:13679 blocked for more than 143 seconds. [ 855.786117][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 855.794969][T16306] 553652224-116827226111: 0000000000000000 [ 855.796900][ T28] Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 855.801965][T16306] 116827226112-116831420415: [ 855.809440][T13681] 140323558305792-140323558326271: 0000000000000000 [ 855.823969][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 855.825101][T16306] ffff8880aabbdc40 [ 855.831463][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 855.834627][T16306] 116831420416-93825021313023: [ 855.843566][T13681] 140323570171904-18446744073709551615: [ 855.849107][ T28] task:syz-executor.0 state:D [ 855.855381][T13681] node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 855.858782][T16306] 0000000000000000 [ 855.860165][T13681] contents: 0000000000000000 140323571208191 [ 855.872211][ T28] stack:27872 pid:13679 ppid:5116 flags:0x00000004 [ 855.875093][T16306] 93825021313024-93825021452287: [ 855.878772][ T28] Call Trace: [ 855.894116][T13681] ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 855.895038][T16306] ffff8880aabbdd20 [ 855.935625][ T28] [ 855.939262][ T28] __schedule+0x25d0/0x5a70 [ 855.943838][ T28] ? lock_chain_count+0x20/0x20 [ 855.949918][ T28] ? find_held_lock+0x2d/0x110 [ 855.955905][ T28] ? io_schedule_timeout+0x150/0x150 [ 855.961241][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 [ 855.967451][ T28] schedule+0xde/0x1b0 [ 855.971568][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 855.977571][T13681] 140323570171904-140323571208191: 0000000000000000 [ 855.979871][T16306] 93825021452288-140495695114239: [ 855.984530][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 855.997596][ T28] ? down_write+0x220/0x220 [ 856.002157][ T28] ? lock_release+0x810/0x810 [ 856.004088][T16306] 0000000000000000 [ 856.007379][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 856.010726][T16306] 140495695114240-140495695118335: [ 856.016274][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 856.016302][T13681] 140323571343360-140734793707519: 0000000000000000 [ 856.016325][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 856.016347][T13681] 140734793842688-140734795161599: 0000000000000000 [ 856.040698][T16306] ffff8880aabbde00 [ 856.047561][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 856.052555][T16306] 140495695118336-140495729573887: [ 856.055826][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 856.065581][T16306] node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 856.084702][ T28] ? lock_acquire+0x32/0xc0 [ 856.134928][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 856.135035][T16306] 140495695118336-140495703506943: [ 856.141904][T13681] 140734795177984-140734795186175: [ 856.141924][T16306] ffff8880aabbdee0 [ 856.159173][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 856.164951][T13681] ffff888078bacee0 [ 856.166623][T16306] 140495705604096-140495707701247: [ 856.169855][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 856.183105][T13681] Pass: 12904591 Run:12904764 [ 856.188019][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 856.197941][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 856.208002][T13681] Call Trace: [ 856.211283][T13681] [ 856.214218][T13681] dump_stack_lvl+0xd1/0x138 [ 856.218831][T13681] mt_find.cold+0x8b/0x90 [ 856.223177][T13681] ? mas_find+0x1d0/0x1d0 [ 856.227540][T13681] find_vma+0x10c/0x1b0 [ 856.231715][T13681] ? can_vma_merge_before+0x390/0x390 [ 856.237104][T13681] ? walk_page_test+0x78/0x180 [ 856.241886][T13681] walk_page_range+0x2b1/0x4a0 [ 856.246672][T13681] ? __walk_page_range+0x780/0x780 [ 856.251812][T13681] mlock_fixup+0x650/0x810 [ 856.256270][T13681] apply_vma_lock_flags+0x23d/0x350 [ 856.261491][T13681] ? mlock_fixup+0x810/0x810 [ 856.266117][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 856.272047][T13681] do_mlock+0x25a/0x6d0 [ 856.276228][T13681] ? folio_evictable+0x270/0x270 [ 856.281192][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 856.287111][T13681] __x64_sys_mlock+0x59/0x80 [ 856.291741][T13681] do_syscall_64+0x39/0xb0 [ 856.296176][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 856.302080][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 856.306504][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 856.326122][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 856.334560][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 856.342535][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 856.350508][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 856.358483][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.366459][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 856.374453][T13681] [ 856.383629][T16306] ffff8880aabae0e0 [ 856.385014][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 856.387468][T16306] 140495707701248-140495709798399: [ 856.392664][ T28] down_read+0xe6/0x450 [ 856.403223][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 856.404929][T16306] ffff8880aabae1c0 [ 856.409397][ T28] do_user_addr_fault+0xa51/0x1210 [ 856.412692][T16306] 140495709798400-140495711895551: [ 856.418784][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 856.432082][ T28] exc_page_fault+0x98/0x170 [ 856.437128][ T28] asm_exc_page_fault+0x26/0x30 [ 856.441428][T16306] ffff8880aabae2a0 [ 856.442003][ T28] RIP: 0033:0x7f9f9fc276c6 [ 856.445939][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 856.450819][ T28] RSP: 002b:00007fff5f64dcf8 EFLAGS: 00010287 [ 856.463399][ T28] RAX: 0000001b33022000 RBX: 00007f9f9fdac018 RCX: 0000001b33020000 [ 856.464943][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 856.471945][T13681] index not increased! 20ffd000 <= 20ffd000 [ 856.484715][ T28] RDX: 0000001b33022004 RSI: 0000001b3302157c RDI: 00000000a23d7945 [ 856.493576][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 856.494333][T13681] BUG at mt_find:6473 (1) [ 856.505449][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 856.513890][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 856.515227][T16306] 140495716966400-140495717302271: [ 856.552014][ T28] RBP: 00000000a23d7945 R08: 0000001b33420000 R09: 00000000a23d7949 [ 856.565756][ T28] R10: 00007fff5f792090 R11: 00000000000205ce R12: 00007f9f9fda0000 [ 856.570005][T16306] ffff8880aabae620 [ 856.573732][ T28] R13: 0000000000000001 R14: 0000000000008d9c R15: ffffffff8166960a [ 856.585522][T16306] 140495717302272-140495717306367: 0000000000000000 [ 856.585940][ T28] ? desc_read_finalized_seq+0x12a/0x1c0 [ 856.592683][T16306] 140495717306368-140495717670911: [ 856.599812][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 0000000000000000 0 000000000000000d [ 856.612010][T16306] ffff8880aabae700 [ 856.656275][ T28] [ 856.662248][ T28] [ 856.662248][ T28] Showing all threads with locks held in the system: [ 856.671910][ T28] task:rcu_tasks_kthre state:I stack:29056 pid:12 ppid:2 flags:0x00004000 [ 856.675103][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 856.681634][ T28] Call Trace: [ 856.691758][ T28] [ 856.694732][ T28] __schedule+0x25d0/0x5a70 [ 856.699661][ T28] ? lock_chain_count+0x20/0x20 [ 856.702201][T16306] 140495717707776-140495717728255: 0000000000000000 [ 856.704547][ T28] ? find_held_lock+0x2d/0x110 [ 856.718054][T13681] 0-536866815: 0000000000000000 [ 856.723300][T13681] 536866816-536870911: ffff88801cede380 [ 856.724992][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 856.729332][ T28] ? io_schedule_timeout+0x150/0x150 [ 856.743090][ T28] ? mark_held_locks+0x9f/0xe0 [ 856.748008][ T28] schedule+0xde/0x1b0 [ 856.748914][T16306] 140495729573888-18446744073709551615: [ 856.752101][ T28] rcu_tasks_one_gp+0x484/0xcd0 [ 856.752117][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 [ 856.752165][ T28] rcu_tasks_kthread+0x77/0xa0 [ 856.764941][T16306] contents: [ 856.770554][T13681] 536870912-553631743: ffff88801cede0e0 [ 856.784591][T13681] 553631744-553639935: 0000000000000000 [ 856.790611][T13681] 553639936-553635839: ffff8880772027e0 [ 856.791039][T16306] 0000000000000000 140495730151423 [ 856.796623][ T28] ? synchronize_rcu_tasks_trace+0x70/0x70 [ 856.796662][ T28] kthread+0x2e8/0x3a0 [ 856.796688][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 856.796721][ T28] ret_from_fork+0x1f/0x30 [ 856.796784][ T28] [ 856.796794][ T28] 1 lock held by rcu_tasks_kthre/12: [ 856.796815][ T28] #0: ffffffff8c7929f0 [ 856.814936][T16306] ffff88801ccdf000 140495730155519 [ 856.817685][T13681] 553635840-553644031: [ 856.822000][T16306] ffff88801ccdf460 140495730286591 [ 856.826482][T13681] ffff888077202a80 [ 856.846332][T16306] 0000000000000000 140724016734207 [ 856.850905][ T28] ( [ 856.854566][T16306] ffff8880aabae9a0 140724016869375 [ 856.860331][T13681] 553644032-553648127: [ 856.868117][ T28] rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 [ 856.881536][T13681] ffff8880266220e0 [ 856.885593][T13681] 553648128-553652223: ffff88801cede000 [ 856.887804][T16306] 0000000000000000 140724018196479 [ 856.891503][T13681] 553652224-116819886079: 0000000000000000 [ 856.903655][ T28] task:rcu_tasks_trace state:I stack:29224 pid:13 ppid:2 flags:0x00004000 [ 856.907452][T16306] ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 856.914255][T13681] 116819886080-116824080383: [ 856.937265][ T28] Call Trace: [ 856.947387][ T28] [ 856.950361][ T28] __schedule+0x25d0/0x5a70 [ 856.951355][T16306] 140495729573888-140495730151423: [ 856.955296][ T28] ? lock_chain_count+0x20/0x20 [ 856.964056][T16306] 0000000000000000 [ 856.966022][T13681] ffff88801cede2a0 [ 856.969772][T16306] 140495730151424-140495730155519: [ 856.973378][T13681] 116824080384-93825007087615: 0000000000000000 [ 856.986284][ T28] ? find_held_lock+0x2d/0x110 [ 856.991104][ T28] ? io_schedule_timeout+0x150/0x150 [ 856.996522][T16306] ffff88801ccdf000 [ 856.996540][T16306] 140495730155520-140495730286591: [ 857.000566][ T28] ? mark_held_locks+0x9f/0xe0 [ 857.011284][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 857.018731][ T28] schedule+0xde/0x1b0 [ 857.022859][ T28] rcu_tasks_one_gp+0x484/0xcd0 [ 857.027583][T16306] ffff88801ccdf460 [ 857.028258][T13681] 93825007226880-140323535712255: 0000000000000000 [ 857.031530][T16306] 140495730286592-140724016734207: [ 857.038675][ T28] rcu_tasks_kthread+0x77/0xa0 [ 857.052568][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 857.056570][T16306] 0000000000000000 [ 857.060144][ T28] ? synchronize_rcu_tasks_trace+0x70/0x70 [ 857.063256][T16306] 140724016734208-140724016869375: [ 857.069763][T13681] 140323535716352-140323570171903: [ 857.076081][ T28] kthread+0x2e8/0x3a0 [ 857.085915][T16306] ffff8880aabae9a0 [ 857.089668][T16306] 140724016869376-140724018196479: 0000000000000000 [ 857.095057][T13681] node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 857.097269][T16306] 140724018196480-140724018212863: [ 857.154288][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 857.167194][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 857.167392][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 857.174149][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 857.187052][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 857.193382][ T28] ret_from_fork+0x1f/0x30 [ 857.194093][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 857.203982][ T28] [ 857.208775][ T28] 1 lock held by rcu_tasks_trace/13: [ 857.214074][ T28] #0: ffffffff8c7926f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 [ 857.214409][T13681] 140323552493568-140323556687871: [ 857.225917][ T28] task:getty state:S stack:23336 pid:4751 ppid:1 flags:0x00000000 [ 857.234938][T13681] ffff8880208b2380 [ 857.240836][T16306] ffff8880aabaea80 [ 857.245185][T13681] 140323556687872-140323556835327: [ 857.249991][ T28] Call Trace: [ 857.254307][T13681] ffff8880293ab0e0 [ 857.255741][ T28] [ 857.255758][ T28] __schedule+0x25d0/0x5a70 [ 857.255798][ T28] ? __flush_work+0x8b8/0xb60 [ 857.255830][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 857.255857][ T28] ? trace_lock_acquire+0x1f1/0x290 [ 857.255888][ T28] ? io_schedule_timeout+0x150/0x150 [ 857.255929][ T28] schedule+0xde/0x1b0 [ 857.255952][ T28] schedule_timeout+0x1e1/0x2a0 [ 857.255983][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 857.256020][ T28] ? __up_read+0x192/0x720 [ 857.256053][ T28] ? down_read+0x19c/0x450 [ 857.256081][ T28] ? up_write+0x520/0x520 [ 857.273377][T13681] 140323556835328-140323557564415: [ 857.276893][T16306] 140724018212864-140724018221055: [ 857.281899][T13681] ffff8880293ab000 [ 857.286869][T16306] ffff8880aabaeb60 [ 857.286884][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 857.286911][T16306] Pass: 12905130 Run:12905304 [ 857.286926][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 857.286952][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 857.286967][T16306] Call Trace: [ 857.286975][T16306] [ 857.376117][T16306] dump_stack_lvl+0xd1/0x138 [ 857.380738][T16306] mt_find.cold+0x8b/0x90 [ 857.385096][T16306] ? mas_find+0x1d0/0x1d0 [ 857.389464][T16306] find_vma+0x10c/0x1b0 [ 857.393633][T16306] ? can_vma_merge_before+0x390/0x390 [ 857.399073][T16306] ? walk_page_test+0x78/0x180 [ 857.403891][T16306] walk_page_range+0x2b1/0x4a0 [ 857.408760][T16306] ? __walk_page_range+0x780/0x780 [ 857.413932][T16306] mlock_fixup+0x650/0x810 [ 857.418393][T16306] apply_vma_lock_flags+0x23d/0x350 [ 857.423626][T16306] ? mlock_fixup+0x810/0x810 [ 857.428271][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 857.434389][T16306] do_mlock+0x25a/0x6d0 [ 857.439451][T16306] ? folio_evictable+0x270/0x270 [ 857.444432][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 857.450346][T16306] __x64_sys_mlock+0x59/0x80 [ 857.454963][T16306] do_syscall_64+0x39/0xb0 [ 857.459400][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 857.465302][T16306] RIP: 0033:0x7fc7b548c0c9 [ 857.469722][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 857.489352][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 857.497774][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 857.505766][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 857.513771][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 857.521757][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.529733][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 857.537747][T16306] [ 857.546577][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 857.553588][T13681] 140323557900288-140323557904383: 0000000000000000 [ 857.563811][ T28] wait_woken+0x197/0x200 [ 857.568320][ T28] n_tty_read+0x1055/0x13e0 [ 857.572959][ T28] ? n_tty_receive_buf_closing+0x5b0/0x5b0 [ 857.578908][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 857.585985][ T28] ? __init_waitqueue_head+0x150/0x150 [ 857.591516][ T28] tty_read+0x30e/0x5a0 [ 857.595806][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 857.602770][T13681] 140323558305792-140323558326271: 0000000000000000 [ 857.609856][ T28] ? do_SAK+0x70/0x70 [ 857.613884][ T28] ? fsnotify_perm.part.0+0x221/0x610 [ 857.619387][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 857.626486][ T28] ? apparmor_file_permission+0x272/0x4e0 [ 857.632267][ T28] ? security_file_permission+0xaf/0xd0 [ 857.637920][T16306] index not increased! 20ffb000 <= 20ffb000 [ 857.637946][T13681] 140323570171904-18446744073709551615: [ 857.643822][T16306] BUG at mt_find:6473 (1) [ 857.643839][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 857.651102][ T28] vfs_read+0x681/0x930 [ 857.668142][T13681] node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 857.668766][T16306] 0-18446744073709551615: [ 857.715396][ T28] ? kernel_read+0x1c0/0x1c0 [ 857.724465][ T28] ? __fget_light+0x20a/0x270 [ 857.729385][T16306] node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 857.729714][ T28] ksys_read+0x12b/0x250 [ 857.771690][T13681] 140323570171904-140323571208191: 0000000000000000 [ 857.779517][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 857.786635][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 857.786944][T13681] 140323571212288-140323571343359: [ 857.836405][ T28] ? vfs_write+0xe10/0xe10 [ 857.846902][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 857.852849][ T28] do_syscall_64+0x39/0xb0 [ 857.856026][T16306] 0-536866815: 0000000000000000 [ 857.858027][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 857.869030][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 857.869716][ T28] RIP: 0033:0x7f3b8cbaf8fe [ 857.881289][ T28] RSP: 002b:00007ffecffe22a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 857.889852][ T28] RAX: ffffffffffffffda RBX: 0000556eb3a5c910 RCX: 00007f3b8cbaf8fe [ 857.893287][T16306] 536870912-553623551: [ 857.897975][T13681] ffff888078bacb60 [ 857.897990][T13681] 140323571343360-140734793707519: 0000000000000000 [ 857.898016][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 857.898040][T13681] 140734793842688-140734795161599: 0000000000000000 [ 857.898062][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 857.898085][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 857.921049][T16306] ffff8880aabbda80 [ 857.927400][ T28] RDX: 0000000000000001 RSI: 00007ffecffe22c0 RDI: 0000000000000000 [ 857.927423][ T28] RBP: 0000556eb3a5c970 R08: 0000000000000007 R09: 0000556eb3a5dcd0 [ 857.927440][ T28] R10: 0000000000000063 R11: 0000000000000246 R12: 0000556eb3a5c9ac [ 857.927458][ T28] R13: 00007ffecffe22c0 R14: 0000000000000000 R15: 0000556eb3a5c9ac [ 857.927496][ T28] [ 857.927506][ T28] 2 locks held by getty/4751: [ 857.945184][T16306] 553623552-553635839: [ 857.945540][ T28] #0: [ 857.953224][T16306] 0000000000000000 [ 857.961310][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 857.961341][T13681] Pass: 12905130 Run:12905305 [ 857.961356][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 857.961384][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 857.961399][T13681] Call Trace: [ 857.961408][T13681] [ 857.961418][T13681] dump_stack_lvl+0xd1/0x138 [ 857.961457][T13681] mt_find.cold+0x8b/0x90 [ 857.961495][T13681] ? mas_find+0x1d0/0x1d0 [ 857.961540][T13681] find_vma+0x10c/0x1b0 [ 857.987848][T16306] 553635840-553627647: [ 857.989909][T13681] ? can_vma_merge_before+0x390/0x390 [ 857.992825][T16306] ffff88801ccdf1c0 [ 857.996524][T13681] ? walk_page_test+0x78/0x180 [ 857.996558][T13681] walk_page_range+0x2b1/0x4a0 [ 857.996592][T13681] ? __walk_page_range+0x780/0x780 [ 858.004285][T16306] 553627648-553639935: [ 858.008611][T13681] mlock_fixup+0x650/0x810 [ 858.041707][T16306] ffff88801ccdf380 [ 858.043719][T13681] apply_vma_lock_flags+0x23d/0x350 [ 858.048444][T16306] 553639936-553648127: [ 858.052155][T13681] ? mlock_fixup+0x810/0x810 [ 858.056988][T16306] ffff88823bd4cf60 [ 858.062003][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 858.116901][T13681] do_mlock+0x25a/0x6d0 [ 858.121091][T13681] ? folio_evictable+0x270/0x270 [ 858.126059][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 858.131968][T13681] __x64_sys_mlock+0x59/0x80 [ 858.136578][T13681] do_syscall_64+0x39/0xb0 [ 858.141014][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 858.146939][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 858.151360][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 858.170979][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 858.179402][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 858.187377][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 858.195350][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 858.203341][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.211335][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 858.219356][T13681] [ 858.234818][ T28] ffff888027b6c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 858.244341][ T28] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 858.254658][ T28] task:kworker/u4:0 state:R running task stack:26320 pid:5101 ppid:2 flags:0x00004000 [ 858.262049][T13681] index not increased! 20ffd000 <= 20ffd000 [ 858.266485][ T28] Workqueue: 0x0 (bat_events) [ 858.271759][T13681] BUG at mt_find:6473 (1) [ 858.277679][ T28] Call Trace: [ 858.285152][ T28] [ 858.288108][ T28] ? __lock_acquire+0x166e/0x5660 [ 858.293163][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 858.294928][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 858.299265][T16306] 553648128-553652223: ffff8880aabbdb60 [ 858.313702][T16306] 553652224-116827226111: 0000000000000000 [ 858.314922][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 [ 858.320082][ T28] ? irqentry_exit+0x35/0x80 [ 858.324965][T13681] 20480 [ 858.332814][T16306] 116827226112-116831420415: ffff8880aabbdc40 [ 858.346906][ T28] ? io_schedule_timeout+0x150/0x150 [ 858.352236][ T28] ? lock_acquire.part.0+0x11a/0x350 [ 858.354742][T13681] 18446603338914365440 [ 858.357643][T16306] 116831420416-93825021313023: 0000000000000000 [ 858.357673][T16306] 93825021313024-93825021452287: ffff8880aabbdd20 [ 858.357697][T16306] 93825021452288-140495695114239: 0000000000000000 [ 858.357721][T16306] 140495695114240-140495695118335: ffff8880aabbde00 [ 858.357746][T16306] 140495695118336-140495729573887: node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e contents: ffff8880aabbdee0 140495703506943 ffff8880aabae000 140495705604095 ffff8880aabae0e0 140495707701247 ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 [ 858.365510][T13681] 0 [ 858.368804][ T28] ? psi_task_switch+0x2de/0x950 [ 858.391146][T13681] 0 [ 858.440277][T16306] ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 858.456389][T13681] 0 0 0 0 0 | 02 02| [ 858.459229][T16306] 140495695118336-140495703506943: [ 858.459519][T13681] ffff88801c1d3c0c 140323535716351 [ 858.463210][T16306] ffff8880aabbdee0 [ 858.479039][T16306] 140495703506944-140495705604095: ffff8880aabae000 [ 858.486147][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 858.493128][T16306] 140495707701248-140495709798399: ffff8880aabae1c0 [ 858.500312][T16306] 140495709798400-140495711895551: ffff8880aabae2a0 [ 858.500421][T13681] ffff88801c1d300c 140323570171903 [ 858.507324][T16306] 140495711895552-140495716089855: ffff8880aabae380 [ 858.507349][T16306] 140495716089856-140495716237311: ffff8880aabae460 [ 858.507373][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 858.507397][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 858.507422][T16306] 140495717302272-140495717306367: 0000000000000000 [ 858.507446][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 858.507469][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 858.507491][T16306] 140495717707776-140495717728255: 0000000000000000 [ 858.507515][T16306] 140495717728256-140495729573887: ffff8880aabae8c0 [ 858.507539][T16306] 140495729573888-18446744073709551615: [ 858.524941][T13681] ffff8880184ce20c 18446744073709551615 [ 858.526797][ T28] ? preempt_schedule_notrace_thunk+0x1a/0x20 [ 858.533566][T13681] 0000000000000000 0 [ 858.540577][ T28] ? batadv_nc_worker+0xf7/0xfe0 [ 858.540668][ T28] ? preempt_schedule_notrace+0x5f/0xe0 [ 858.540698][ T28] ? preempt_schedule_notrace_thunk+0x1a/0x20 [ 858.540742][ T28] ? trace_lock_acquire+0x1e7/0x290 [ 858.561730][T13681] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 858.561801][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 [ 858.570121][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 [ 858.603860][T13681] 0000000000000000 553639935 [ 858.609974][ T28] ? batadv_iv_ogm_forward.constprop.0+0x1190/0x1190 [ 858.643824][T13681] ffff8880772027e0 553635839 [ 858.652136][T16306] contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 858.652337][T16306] 140495729573888-140495730151423: [ 858.674951][T13681] ffff888077202a80 553644031 [ 858.677549][T16306] 0000000000000000 [ 858.732499][ T28] ? batadv_orig_node_new+0x870/0x870 [ 858.738171][ T28] ? process_one_work+0x9bf/0x1750 [ 858.743340][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 858.748890][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 858.754474][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 858.759534][ T28] ? lock_acquire+0x32/0xc0 [ 858.764065][ T28] ? worker_thread+0x16d/0x1090 [ 858.769111][ T28] ? worker_thread+0x669/0x1090 [ 858.774016][ T28] ? process_one_work+0x1750/0x1750 [ 858.777721][T13681] ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 [ 858.779317][T16306] 140495730151424-140495730155519: [ 858.794388][ T28] ? kthread+0x2e8/0x3a0 [ 858.804330][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 858.808191][T13681] 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 ffff8880208b20e0 140323535716351 [ 858.810164][T16306] ffff88801ccdf000 [ 858.823901][ T28] ? ret_from_fork+0x1f/0x30 [ 858.823968][ T28] [ 858.823977][ T28] no locks held by kworker/u4:0/5101. [ 858.824011][ T28] task:syz-executor.0 state:D stack:27872 pid:13679 ppid:5116 flags:0x00000004 [ 858.824052][ T28] Call Trace: [ 858.824061][ T28] [ 858.824076][ T28] __schedule+0x25d0/0x5a70 [ 858.824103][ T28] ? lock_chain_count+0x20/0x20 [ 858.824142][ T28] ? find_held_lock+0x2d/0x110 [ 858.844972][T13681] 0000000000000000 0 [ 858.850741][T16306] 140495730155520-140495730286591: [ 858.853919][T13681] 000000000000000d [ 858.856953][T16306] ffff88801ccdf460 [ 858.856967][T16306] 140495730286592-140724016734207: 0000000000000000 [ 858.856993][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 858.857016][T16306] 140724016869376-140724018196479: 0000000000000000 [ 858.857039][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 858.857063][T16306] 140724018212864-140724018221055: ffff8880aabaeb60 [ 858.857087][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 858.857111][T16306] Pass: 12905130 Run:12905306 [ 858.857126][T16306] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 858.857151][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 858.874928][T13681] 0-536866815: [ 858.875194][T16306] Call Trace: [ 858.880721][T13681] 0000000000000000 [ 858.884425][T16306] [ 858.891870][T13681] 536866816-536870911: [ 858.895036][T16306] dump_stack_lvl+0xd1/0x138 [ 858.895079][T16306] mt_find.cold+0x8b/0x90 [ 858.895114][T16306] ? mas_find+0x1d0/0x1d0 [ 858.902318][T13681] ffff88801cede380 [ 858.908953][T16306] find_vma+0x10c/0x1b0 [ 858.908986][T16306] ? can_vma_merge_before+0x390/0x390 [ 858.999903][T16306] ? walk_page_test+0x78/0x180 [ 859.004697][T16306] walk_page_range+0x2b1/0x4a0 [ 859.009480][T16306] ? __walk_page_range+0x780/0x780 [ 859.014621][T16306] mlock_fixup+0x650/0x810 [ 859.019064][T16306] apply_vma_lock_flags+0x23d/0x350 [ 859.024290][T16306] ? mlock_fixup+0x810/0x810 [ 859.028908][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 859.034825][T16306] do_mlock+0x25a/0x6d0 [ 859.039007][T16306] ? folio_evictable+0x270/0x270 [ 859.043971][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 859.049880][T16306] __x64_sys_mlock+0x59/0x80 [ 859.054489][T16306] do_syscall_64+0x39/0xb0 [ 859.058926][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 859.064836][T16306] RIP: 0033:0x7fc7b548c0c9 [ 859.069259][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 859.088963][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 859.097383][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 859.105363][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 859.113341][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 859.121315][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.129290][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 859.137282][T16306] [ 859.146626][T13681] 536870912-553631743: ffff88801cede0e0 [ 859.152584][T13681] 553631744-553639935: 0000000000000000 [ 859.154979][ T28] ? io_schedule_timeout+0x150/0x150 [ 859.163802][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 [ 859.164405][T13681] 553639936-553635839: ffff8880772027e0 [ 859.176169][T13681] 553635840-553644031: ffff888077202a80 [ 859.182117][T13681] 553644032-553648127: ffff8880266220e0 [ 859.184974][ T28] schedule+0xde/0x1b0 [ 859.188544][T13681] 553648128-553652223: [ 859.192083][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 859.198137][T13681] ffff88801cede000 [ 859.207018][T13681] 553652224-116819886079: 0000000000000000 [ 859.213212][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 859.214983][ T28] ? down_write+0x220/0x220 [ 859.220271][T13681] 116824080384-93825007087615: [ 859.224121][ T28] ? lock_release+0x810/0x810 [ 859.224157][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 859.229867][T13681] 0000000000000000 [ 859.243712][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 859.247838][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 859.252333][T13681] 93825007226880-140323535712255: 0000000000000000 [ 859.263181][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 859.267499][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 859.271056][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 859.284918][ T28] ? lock_acquire+0x32/0xc0 [ 859.342464][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 859.349858][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 859.357764][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 859.358762][T13681] 140323546202112-140323548299263: [ 859.363091][ T28] down_read+0xe6/0x450 [ 859.363106][T13681] ffff8880208b2700 [ 859.363128][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 859.369398][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 859.385022][ T28] do_user_addr_fault+0xa51/0x1210 [ 859.390662][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 859.404493][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 859.405150][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 859.412073][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 859.424335][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 859.430188][ T28] exc_page_fault+0x98/0x170 [ 859.431851][T13681] 140323557564416-140323557900287: ffff888078bac380 [ 859.436198][T16306] index not increased! 20ffb000 <= 20ffb000 [ 859.442972][T13681] 140323557900288-140323557904383: 0000000000000000 [ 859.454924][ T28] asm_exc_page_fault+0x26/0x30 [ 859.456766][T13681] 140323557904384-140323558268927: [ 859.461134][ T28] RIP: 0033:0x7f9f9fc276c6 [ 859.468501][T13681] ffff888078bac0e0 [ 859.475450][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 859.482428][T13681] 140323558305792-140323558326271: 0000000000000000 [ 859.483702][T16306] BUG at mt_find:6473 (1) [ 859.490236][T13681] 140323558326272-140323570171903: ffff888078bac700 [ 859.496571][ T28] RSP: 002b:00007fff5f64dcf8 EFLAGS: 00010287 [ 859.501799][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 859.502575][T13681] 140323570171904-18446744073709551615: [ 859.508133][ T28] [ 859.524763][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 contents: 93708189892608 20480 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 859.535100][T13681] node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 [ 859.564560][ T28] RAX: 0000001b33022000 RBX: 00007f9f9fdac018 RCX: 0000001b33020000 [ 859.579796][T13681] contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 859.580736][ T28] RDX: 0000001b33022004 RSI: 0000001b3302157c RDI: 00000000a23d7945 [ 859.633913][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 000000000000000d [ 859.683016][T13681] 140323570171904-140323571208191: 0000000000000000 [ 859.683281][ T28] RBP: 00000000a23d7945 R08: 0000001b33420000 R09: 00000000a23d7949 [ 859.698521][T16306] 0-536866815: 0000000000000000 [ 859.703760][T16306] 536866816-536870911: ffff8880aabbd9a0 [ 859.705028][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 859.712522][ T28] R10: 00007fff5f792090 R11: 00000000000205ce R12: 00007f9f9fda0000 [ 859.724970][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 859.726327][T16306] 536870912-553623551: [ 859.732786][T13681] 140323571343360-140734793707519: 0000000000000000 [ 859.740605][ T28] R13: 0000000000000001 R14: 0000000000008d9c R15: ffffffff8166960a [ 859.753367][T16306] ffff8880aabbda80 [ 859.755033][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 859.757536][T16306] 553623552-553635839: [ 859.764064][T13681] 140734793842688-140734795161599: 0000000000000000 [ 859.769157][ T28] ? desc_read_finalized_seq+0x12a/0x1c0 [ 859.782978][T16306] 0000000000000000 [ 859.787025][ T28] [ 859.790067][ T28] 1 lock held by syz-executor.0/13679: [ 859.796083][T16306] 553635840-553627647: ffff88801ccdf1c0 [ 859.802029][T16306] 553627648-553639935: ffff88801ccdf380 [ 859.805128][T13681] 140734795161600-140734795177983: [ 859.809946][ T28] #0: [ 859.810002][T13681] ffff888078bac000 [ 859.816050][T16306] 553639936-553648127: ffff88823bd4cf60 [ 859.824991][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 859.829023][ T28] ffff888026331c98 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1210 [ 859.844614][ T28] task:syz-executor.0 state:R running task stack:26944 pid:13681 ppid:5116 flags:0x00004006 [ 859.844939][T13681] 140734795186176-18446744073709551615: [ 859.858864][T16306] 553648128-553652223: [ 859.864984][T13681] 0000000000000000 [ 859.865352][T16306] ffff8880aabbdb60 [ 859.869489][T13681] Pass: 12905130 Run:12905307 [ 859.873226][T16306] 553652224-116827226111: [ 859.882175][ T28] Call Trace: [ 859.887033][T13681] CPU: 1 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 859.890947][T16306] 0000000000000000 [ 859.900147][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 859.900163][T13681] Call Trace: [ 859.900171][T13681] [ 859.900181][T13681] dump_stack_lvl+0xd1/0x138 [ 859.900221][T13681] mt_find.cold+0x8b/0x90 [ 859.904178][ T28] [ 859.913965][T13681] ? mas_find+0x1d0/0x1d0 [ 859.914010][T13681] find_vma+0x10c/0x1b0 [ 859.914036][T13681] ? can_vma_merge_before+0x390/0x390 [ 859.914063][T13681] ? walk_page_test+0x78/0x180 [ 859.914096][T13681] walk_page_range+0x2b1/0x4a0 [ 859.914132][T13681] ? __walk_page_range+0x780/0x780 [ 859.914183][T13681] mlock_fixup+0x650/0x810 [ 859.914234][T13681] apply_vma_lock_flags+0x23d/0x350 [ 859.914277][T13681] ? mlock_fixup+0x810/0x810 [ 859.914330][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 859.914371][T13681] do_mlock+0x25a/0x6d0 [ 859.914414][T13681] ? folio_evictable+0x270/0x270 [ 859.914464][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 859.914502][T13681] __x64_sys_mlock+0x59/0x80 [ 859.914539][T13681] do_syscall_64+0x39/0xb0 [ 859.921421][T16306] 116827226112-116831420415: [ 859.925320][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 859.925357][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 859.925378][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 859.930311][T16306] ffff8880aabbdc40 [ 859.932633][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 [ 859.937410][ T28] ? console_unlock+0xb8/0x1f0 [ 859.941072][T13681] ORIG_RAX: 0000000000000095 [ 859.946828][T16306] 116831420416-93825021313023: [ 859.951164][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 859.956231][ T28] ? console_flush_all+0x6e0/0x6e0 [ 859.961005][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 859.965747][T16306] 0000000000000000 [ 859.970586][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 859.975540][ T28] ? vprintk_emit+0x3fa/0x600 [ 859.981024][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.988336][T16306] 93825021313024-93825021452287: [ 859.990073][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 859.996700][ T28] ? lock_acquire+0x32/0xc0 [ 860.000533][T13681] [ 860.028695][T13681] index not increased! 20ffd000 <= 20ffd000 [ 860.054931][T16306] ffff8880aabbdd20 [ 860.055729][T13681] BUG at mt_find:6473 (1) [ 860.060288][T16306] 93825021452288-140495695114239: [ 860.065589][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 860.065640][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 [ 860.085386][T16306] 0000000000000000 [ 860.086969][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 860.090573][T16306] 140495695114240-140495695118335: [ 860.098598][T13681] 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 860.098838][T13681] 0-140323535716351: node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 contents: 0000000000000000 536866815 ffff88801cede380 536870911 ffff88801cede0e0 553631743 0000000000000000 553639935 ffff8880772027e0 553635839 ffff888077202a80 553644031 ffff8880266220e0 553648127 ffff88801cede000 553652223 0000000000000000 116819886079 ffff88801cede2a0 116824080383 0000000000000000 93825007087615 ffff8880208b22a0 93825007226879 0000000000000000 140323535712255 [ 860.121889][T16306] ffff8880aabbde00 [ 860.136272][ T28] ? vprintk_emit+0x1e9/0x600 [ 860.140789][T16306] 140495695118336-140495729573887: [ 860.143790][ T28] ? vprintk_emit+0x1ee/0x600 [ 860.148505][T16306] node ffff88807dda8000 depth 1 type 1 parent ffff88807dda880e [ 860.167617][ T28] ? vprintk+0x84/0xa0 [ 860.193247][T16306] contents: [ 860.232219][ T28] ? _printk+0xbe/0xf1 [ 860.271149][T13681] ffff8880208b20e0 140323535716351 [ 860.286555][T16306] ffff8880aabbdee0 140495703506943 [ 860.297648][T13681] 0000000000000000 0 000000000000000d [ 860.297674][T13681] 0-536866815: 0000000000000000 [ 860.297695][T13681] 536866816-536870911: ffff88801cede380 [ 860.297717][T13681] 536870912-553631743: ffff88801cede0e0 [ 860.297770][T13681] 553631744-553639935: 0000000000000000 [ 860.297818][T13681] 553639936-553635839: ffff8880772027e0 [ 860.315003][ T28] ? record_print_text.cold+0x16/0x16 [ 860.319858][T13681] 553635840-553644031: [ 860.326899][T16306] ffff8880aabae000 140495705604095 [ 860.332601][T13681] ffff888077202a80 [ 860.344991][ T28] ? mt_dump_entry+0xb3/0xf4 [ 860.349263][T13681] 553644032-553648127: [ 860.353158][ T28] ? mt_dump_node+0x3ec/0x927 [ 860.358693][T13681] ffff8880266220e0 [ 860.362240][T16306] ffff8880aabae0e0 140495707701247 [ 860.367107][T13681] 553648128-553652223: [ 860.385166][T16306] ffff8880aabae1c0 140495709798399 ffff8880aabae2a0 140495711895551 ffff8880aabae380 140495716089855 ffff8880aabae460 140495716237311 ffff8880aabae540 140495716966399 ffff8880aabae620 140495717302271 0000000000000000 140495717306367 ffff8880aabae700 140495717670911 ffff8880aabae7e0 140495717707775 0000000000000000 140495717728255 ffff8880aabae8c0 140495729573887 0000000000000000 0 000000000000000d [ 860.393360][T13681] ffff88801cede000 [ 860.433578][T13681] 553652224-116819886079: 0000000000000000 [ 860.440104][T13681] 116819886080-116824080383: ffff88801cede2a0 [ 860.440212][ T28] ? mt_dump_node+0x851/0x927 [ 860.447005][T13681] 116824080384-93825007087615: 0000000000000000 [ 860.458401][T16306] 140495695118336-140495703506943: ffff8880aabbdee0 [ 860.465027][ T28] ? mt_dump.cold+0xf2/0x115 [ 860.465965][T16306] 140495703506944-140495705604095: [ 860.469952][ T28] ? mt_find.cold+0x48/0x90 [ 860.475883][T13681] 93825007087616-93825007226879: ffff8880208b22a0 [ 860.487687][T16306] ffff8880aabae000 [ 860.491438][T16306] 140495705604096-140495707701247: ffff8880aabae0e0 [ 860.494355][ T28] ? mas_find+0x1d0/0x1d0 [ 860.501761][T13681] 93825007226880-140323535712255: 0000000000000000 [ 860.505105][ T28] ? find_vma+0x10c/0x1b0 [ 860.510208][T16306] 140495707701248-140495709798399: [ 860.514072][ T28] ? can_vma_merge_before+0x390/0x390 [ 860.514111][ T28] ? walk_page_test+0x78/0x180 [ 860.520068][T13681] 140323535712256-140323535716351: ffff8880208b20e0 [ 860.538615][ T28] ? walk_page_range+0x2b1/0x4a0 [ 860.542396][T16306] ffff8880aabae1c0 [ 860.543595][ T28] ? __walk_page_range+0x780/0x780 [ 860.548075][T13681] 140323535716352-140323570171903: node ffff88801c1d3000 depth 1 type 1 parent ffff88801c1d2e0e contents: ffff8880208b2620 140323544104959 ffff8880208b27e0 140323546202111 ffff8880208b2700 140323548299263 ffff8880208b28c0 140323550396415 ffff8880208b21c0 140323552493567 ffff8880208b2380 140323556687871 ffff8880293ab0e0 140323556835327 ffff8880293ab000 140323557564415 ffff888078bac380 140323557900287 0000000000000000 140323557904383 ffff888078bac0e0 140323558268927 ffff888078bac460 140323558305791 0000000000000000 140323558326271 ffff888078bac700 140323570171903 0000000000000000 0 000000000000000d [ 860.607746][ T28] ? mlock_fixup+0x650/0x810 [ 860.607844][ T28] ? apply_vma_lock_flags+0x23d/0x350 [ 860.607886][ T28] ? mlock_fixup+0x810/0x810 [ 860.607937][ T28] ? __ia32_sys_get_robust_list+0x400/0x400 [ 860.607979][ T28] ? do_mlock+0x25a/0x6d0 [ 860.608018][ T28] ? folio_evictable+0x270/0x270 [ 860.608064][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 860.617230][T16306] 140495709798400-140495711895551: [ 860.618084][ T28] ? __x64_sys_mlock+0x59/0x80 [ 860.622571][T16306] ffff8880aabae2a0 [ 860.630572][ T28] ? do_syscall_64+0x39/0xb0 [ 860.647661][T16306] 140495711895552-140495716089855: [ 860.651490][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 860.654720][T16306] ffff8880aabae380 [ 860.675030][ T28] [ 860.675046][ T28] 1 lock held by syz-executor.0/13681: [ 860.675069][ T28] task:syz-executor.4 state:D stack:28112 pid:16302 ppid:5134 flags:0x00000004 [ 860.680295][T16306] 140495716089856-140495716237311: [ 860.694992][ T28] Call Trace: [ 860.697133][T16306] ffff8880aabae460 [ 860.702105][ T28] [ 860.705761][T13681] 140323535716352-140323544104959: ffff8880208b2620 [ 860.722355][ T28] __schedule+0x25d0/0x5a70 [ 860.722596][T16306] 140495716237312-140495716966399: ffff8880aabae540 [ 860.727328][ T28] ? lock_chain_count+0x20/0x20 [ 860.735218][T13681] 140323544104960-140323546202111: ffff8880208b27e0 [ 860.740520][ T28] ? io_schedule_timeout+0x150/0x150 [ 860.747043][T16306] 140495716966400-140495717302271: ffff8880aabae620 [ 860.759429][T13681] 140323546202112-140323548299263: ffff8880208b2700 [ 860.765072][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 [ 860.766653][T16306] 140495717302272-140495717306367: 0000000000000000 [ 860.772259][ T28] schedule+0xde/0x1b0 [ 860.783400][T13681] 140323548299264-140323550396415: ffff8880208b28c0 [ 860.790856][T13681] 140323550396416-140323552493567: ffff8880208b21c0 [ 860.790886][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 860.798050][T16306] 140495717306368-140495717670911: ffff8880aabae700 [ 860.810717][T13681] 140323552493568-140323556687871: ffff8880208b2380 [ 860.810782][ T28] ? down_write+0x220/0x220 [ 860.818554][T13681] 140323556687872-140323556835327: ffff8880293ab0e0 [ 860.833175][ T28] ? lock_release+0x810/0x810 [ 860.834675][T16306] 140495717670912-140495717707775: ffff8880aabae7e0 [ 860.838175][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 860.845204][T16306] 140495717707776-140495717728255: 0000000000000000 [ 860.857587][T13681] 140323556835328-140323557564415: ffff8880293ab000 [ 860.857649][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 860.864543][T13681] 140323557564416-140323557900287: [ 860.870404][T16306] 140495717728256-140495729573887: [ 860.876207][T13681] ffff888078bac380 [ 860.885085][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 860.885900][T16306] ffff8880aabae8c0 [ 860.891026][ T28] ? lock_acquire+0x32/0xc0 [ 860.894535][T16306] 140495729573888-18446744073709551615: [ 860.901281][T13681] 140323557900288-140323557904383: 0000000000000000 [ 860.916160][T16306] node ffff88802b3c0800 depth 1 type 1 parent ffff88807dda8816 contents: 0000000000000000 140495730151423 ffff88801ccdf000 140495730155519 ffff88801ccdf460 140495730286591 0000000000000000 140724016734207 ffff8880aabae9a0 140724016869375 0000000000000000 140724018196479 ffff8880aabaea80 140724018212863 ffff8880aabaeb60 140724018221055 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 860.925165][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 860.967385][T13681] 140323557904384-140323558268927: ffff888078bac0e0 [ 860.976811][T13681] 140323558268928-140323558305791: ffff888078bac460 [ 860.983802][T13681] 140323558305792-140323558326271: 0000000000000000 [ 860.990253][ T28] down_read+0xe6/0x450 [ 860.991451][T13681] 140323558326272-140323570171903: [ 860.995121][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 861.003714][T13681] ffff888078bac700 [ 861.006582][ T28] do_user_addr_fault+0xa51/0x1210 [ 861.014920][T13681] 140323570171904-18446744073709551615: node ffff8880184ce200 depth 1 type 1 parent ffff88801c1d2e16 contents: 0000000000000000 140323571208191 ffff88801ccdfa80 140323571212287 ffff888078bacb60 140323571343359 0000000000000000 140734793707519 ffff888078bac7e0 140734793842687 0000000000000000 140734795161599 ffff888078bac000 140734795177983 ffff888078bacee0 140734795186175 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 861.015549][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 861.059896][T16306] 140495729573888-140495730151423: 0000000000000000 [ 861.074965][ T28] exc_page_fault+0x98/0x170 [ 861.075428][T16306] 140495730151424-140495730155519: ffff88801ccdf000 [ 861.080138][ T28] asm_exc_page_fault+0x26/0x30 [ 861.087092][T16306] 140495730155520-140495730286591: ffff88801ccdf460 [ 861.087121][T16306] 140495730286592-140724016734207: 0000000000000000 [ 861.087144][T16306] 140724016734208-140724016869375: ffff8880aabae9a0 [ 861.104991][ T28] RIP: 0033:0x7fc7b54276c6 [ 861.106316][T13681] 0000000000000000 0 [ 861.112876][ T28] RSP: 002b:00007ffcdd0941f8 EFLAGS: 00010287 [ 861.117404][T13681] 0000000000000000 0 0000000000000000 0 0000000000000008 [ 861.117440][T13681] 140323570171904-140323571208191: 0000000000000000 [ 861.117465][T13681] 140323571208192-140323571212287: ffff88801ccdfa80 [ 861.117490][T13681] 140323571212288-140323571343359: ffff888078bacb60 [ 861.117513][T13681] 140323571343360-140734793707519: [ 861.134994][ T28] [ 861.142919][T16306] 140724016869376-140724018196479: [ 861.164513][ T28] RAX: 0000001b33722000 RBX: 00007fc7b55ac018 RCX: 0000001b33720000 [ 861.164898][T16306] 0000000000000000 [ 861.174221][ T28] RDX: 0000001b33722004 RSI: 0000001b33721690 RDI: 00000000c8117f22 [ 861.181145][T13681] 0000000000000000 [ 861.194263][T16306] 140724018196480-140724018212863: ffff8880aabaea80 [ 861.201453][T13681] 140734793707520-140734793842687: ffff888078bac7e0 [ 861.201607][ T28] RBP: 00000000c8117f22 R08: 0000001b33b20000 R09: 00000000c8117f26 [ 861.208661][T16306] 140724018212864-140724018221055: [ 861.217108][T13681] 140734793842688-140734795161599: 0000000000000000 [ 861.229777][T16306] ffff8880aabaeb60 [ 861.230016][ T28] R10: 00007ffcdd1db090 R11: 0000000000025294 R12: 00007fc7b55a0000 [ 861.233816][T16306] 140724018221056-18446744073709551615: 0000000000000000 [ 861.250171][T13681] 140734795161600-140734795177983: ffff888078bac000 [ 861.257513][T16306] Pass: 12905132 Run:12905310 [ 861.262208][T16306] CPU: 0 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 861.264679][ T28] R13: 0000000000000001 R14: 0000000000002882 R15: ffffffff84793640 [ 861.272097][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 861.272112][T16306] Call Trace: [ 861.272122][T16306] [ 861.272131][T16306] dump_stack_lvl+0xd1/0x138 [ 861.272172][T16306] mt_find.cold+0x8b/0x90 [ 861.272203][T16306] ? mas_find+0x1d0/0x1d0 [ 861.272250][T16306] find_vma+0x10c/0x1b0 [ 861.272277][T16306] ? can_vma_merge_before+0x390/0x390 [ 861.294616][ T28] ? serial8250_console_write+0xd00/0x1010 [ 861.296497][T16306] ? walk_page_test+0x78/0x180 [ 861.296534][T16306] walk_page_range+0x2b1/0x4a0 [ 861.296570][T16306] ? __walk_page_range+0x780/0x780 [ 861.296618][T16306] mlock_fixup+0x650/0x810 [ 861.296668][T16306] apply_vma_lock_flags+0x23d/0x350 [ 861.296710][T16306] ? mlock_fixup+0x810/0x810 [ 861.296761][T16306] ? __ia32_sys_get_robust_list+0x400/0x400 [ 861.301704][ T28] [ 861.305673][T16306] do_mlock+0x25a/0x6d0 [ 861.305717][T16306] ? folio_evictable+0x270/0x270 [ 861.305768][T16306] ? syscall_enter_from_user_mode+0x26/0xb0 [ 861.305806][T16306] __x64_sys_mlock+0x59/0x80 [ 861.305844][T16306] do_syscall_64+0x39/0xb0 [ 861.305880][T16306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 861.305909][T16306] RIP: 0033:0x7fc7b548c0c9 [ 861.305930][T16306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 861.305951][T16306] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 861.305977][T16306] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 861.311614][ T28] 1 lock held by syz-executor.4/16302: [ 861.314424][T16306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 861.446981][T16306] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 861.454991][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.463003][T16306] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 861.471119][T16306] [ 861.482461][T13681] 140734795177984-140734795186175: ffff888078bacee0 [ 861.490182][ T28] #0: ffff888028c5f698 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1210 [ 861.500842][T13681] 140734795186176-18446744073709551615: 0000000000000000 [ 861.508646][ T28] task:syz-executor.4 state:R running task stack:26944 pid:16306 ppid:5134 flags:0x00004006 [ 861.519843][T13681] Pass: 12905132 Run:12905310 [ 861.524553][T13681] CPU: 0 PID: 13681 Comm: syz-executor.0 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 861.534471][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 861.544573][T13681] Call Trace: [ 861.547856][T13681] [ 861.550797][T13681] dump_stack_lvl+0xd1/0x138 [ 861.555438][T13681] mt_find.cold+0x8b/0x90 [ 861.559800][T13681] ? mas_find+0x1d0/0x1d0 [ 861.564154][T13681] find_vma+0x10c/0x1b0 [ 861.568326][T13681] ? can_vma_merge_before+0x390/0x390 [ 861.573714][T13681] ? walk_page_test+0x78/0x180 [ 861.578497][T13681] walk_page_range+0x2b1/0x4a0 [ 861.583282][T13681] ? __walk_page_range+0x780/0x780 [ 861.588446][T13681] mlock_fixup+0x650/0x810 [ 861.592922][T13681] apply_vma_lock_flags+0x23d/0x350 [ 861.598174][T13681] ? mlock_fixup+0x810/0x810 [ 861.602828][T13681] ? __ia32_sys_get_robust_list+0x400/0x400 [ 861.608762][T13681] do_mlock+0x25a/0x6d0 [ 861.612956][T13681] ? folio_evictable+0x270/0x270 [ 861.617928][T13681] ? syscall_enter_from_user_mode+0x26/0xb0 [ 861.623866][T13681] __x64_sys_mlock+0x59/0x80 [ 861.628502][T13681] do_syscall_64+0x39/0xb0 [ 861.632949][T13681] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 861.638893][T13681] RIP: 0033:0x7f9f9fc8c0c9 [ 861.643328][T13681] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 861.662975][T13681] RSP: 002b:00007f9fa09f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 861.671406][T13681] RAX: ffffffffffffffda RBX: 00007f9f9fdabf80 RCX: 00007f9f9fc8c0c9 [ 861.679384][T13681] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 861.687359][T13681] RBP: 00007f9f9fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 861.695337][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.703315][T13681] R13: 00007fff5f64dd2f R14: 00007f9fa09f9300 R15: 0000000000022000 [ 861.711308][T13681] [ 861.718341][ T28] Call Trace: [ 861.721786][ T28] [ 861.724750][ T28] __schedule+0x25d0/0x5a70 [ 861.729381][ T28] ? preempt_count_add+0x78/0x140 [ 861.734471][ T28] ? io_schedule_timeout+0x150/0x150 [ 861.739859][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 861.746152][ T28] preempt_schedule_irq+0x52/0xa0 [ 861.751225][ T28] irqentry_exit+0x35/0x80 [ 861.756447][ T28] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 861.761958][ T28] RIP: 0010:dump_stack_lvl+0x130/0x138 [ 861.763772][T16306] index not increased! 20ffb000 <= 20ffb000 [ 861.768010][ T28] Code: Unable to access opcode bytes at 0x20ffafd6. [ 861.773541][T16306] BUG at mt_find:6473 (1) [ 861.773557][T16306] maple_tree(ffff888028c5f500) flags 309, height 2 root ffff88807dda881e [ 861.773579][T16306] 0-18446744073709551615: node ffff88807dda8800 depth 0 type 3 parent ffff888028c5f501 [ 861.780892][ T28] RSP: 20ffb000:ffffffff8a03323a EFLAGS: 20ffb000 [ 861.799653][T16306] contents: [ 861.803359][ T28] ORIG_RAX: ffff888028c5f548 [ 861.817849][ T28] RAX: 00000000ffffffff RBX: 0000000000000000 RCX: ffff888000000000 [ 861.823177][T16306] 93708189892608 [ 861.826098][ T28] RDX: 0000000000000309 RSI: 0000000000000003 RDI: ffff888028c5f500 [ 861.826118][ T28] RBP: ffffffff8a032d52 R08: d9986d9f9f47a200 R09: ffff888079380000 [ 861.826135][ T28] R10: ffff888000000002 R11: ffff888028c5f500 R12: ffff88807dda8800 [ 861.831004][T16306] 20480 [ 861.840904][ T28] R13: ffff88807dda88b0 R14: 0000000000000002 R15: 000000000000000a [ 861.866568][T16306] 18446603349691330560 0 0 0 0 0 0 0 | 02 02| ffff88807b18040c 140495695118335 ffff88807dda800c 140495729573887 ffff88802b3c080c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 861.866936][ T28] ? mt_dump_node+0x6bf/0x927 [ 861.898523][ T28] ? mt_dump.cold+0xf2/0x115 [ 861.903166][ T28] ? mt_find.cold+0x48/0x90 [ 861.908144][ T28] ? mas_find+0x1d0/0x1d0 [ 861.912538][ T28] ? find_vma+0x10c/0x1b0 [ 861.914787][T16306] 0-140495695118335: node ffff88807b180400 depth 1 type 1 parent ffff88807dda8806 contents: 0000000000000000 536866815 ffff8880aabbd9a0 536870911 ffff8880aabbda80 553623551 0000000000000000 553635839 ffff88801ccdf1c0 553627647 ffff88801ccdf380 553639935 ffff88823bd4cf60 553648127 ffff8880aabbdb60 553652223 0000000000000000 116827226111 ffff8880aabbdc40 116831420415 0000000000000000 93825021313023 ffff8880aabbdd20 93825021452287 0000000000000000 140495695114239 ffff8880aabbde00 140495695118335 0000000000000000 0 [ 861.917312][T13681] index not increased! 20ffd000 <= 20ffd000 [ 861.917329][T13681] BUG at mt_find:6473 (1) [ 861.979520][ T28] ? can_vma_merge_before+0x390/0x390 [ 861.985261][ T28] ? walk_page_test+0x78/0x180 [ 861.990080][ T28] ? walk_page_range+0x2b1/0x4a0 [ 861.995551][ T28] ? __walk_page_range+0x780/0x780 [ 862.000733][ T28] ? mlock_fixup+0x650/0x810 [ 862.003443][T16306] 000000000000000d [ 862.005808][ T28] ? apply_vma_lock_flags+0x23d/0x350 [ 862.015296][T16306] 0-536866815: 0000000000000000 [ 862.015923][ T28] ? mlock_fixup+0x810/0x810 [ 862.020723][T16306] 536866816-536870911: [ 862.025608][ T28] ? __ia32_sys_get_robust_list+0x400/0x400 [ 862.035011][T16306] ffff8880aabbd9a0 [ 862.037025][ T28] ? do_mlock+0x25a/0x6d0 [ 862.040180][T16306] 536870912-553623551: [ 862.044509][ T28] ? folio_evictable+0x270/0x270 [ 862.054803][T13681] maple_tree(ffff888026331b00) flags 309, height 2 root ffff88801c1d2e1e [ 862.064498][T13681] 0-18446744073709551615: node ffff88801c1d2e00 depth 0 type 3 parent ffff888026331b01 contents: 93708183007232 20480 18446603338914365440 0 0 0 0 0 0 0 | 02 02| ffff88801c1d3c0c 140323535716351 ffff88801c1d300c 140323570171903 ffff8880184ce20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 862.065143][T16306] ffff8880aabbda80 [ 862.105087][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 862.111479][ T28] ? __x64_sys_mlock+0x59/0x80 [ 862.117213][ T28] ? do_syscall_64+0x39/0xb0 [ 862.121868][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 862.128406][ T28] [ 862.129279][T16306] 553623552-553635839: [ 862.131435][ T28] 3 locks held by syz-executor.4/16306: [ 862.131479][ T28] [ 862.144266][ T28] ============================================= [ 862.144266][ T28] [ 862.144695][T16306] 0000000000000000 [ 862.153597][T13681] 0-140323535716351: [ 862.156754][ T28] NMI backtrace for cpu 0 [ 862.165257][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 862.172243][T16306] 553635840-553627647: [ 862.174543][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 862.174563][T16306] ffff88801ccdf1c0 [ 862.179047][ T28] Call Trace: [ 862.179058][ T28] [ 862.179067][ T28] dump_stack_lvl+0xd1/0x138 [ 862.179102][ T28] nmi_cpu_backtrace.cold+0x24/0x18a [ 862.179145][ T28] nmi_trigger_cpumask_backtrace+0x32f/0x3c0 [ 862.179171][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 862.179201][ T28] watchdog+0xcae/0x1050 [ 862.179253][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 862.179292][ T28] kthread+0x2e8/0x3a0 [ 862.179313][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 862.179341][ T28] ret_from_fork+0x1f/0x30 [ 862.179385][ T28] [ 862.180065][ T28] Sending NMI from CPU 0 to CPUs 1: [ 862.209091][T16306] 553627648-553639935: [ 862.209817][ C1] NMI backtrace for cpu 1 [ 862.209828][ C1] CPU: 1 PID: 16306 Comm: syz-executor.4 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 862.209848][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 862.209860][ C1] RIP: 0010:io_serial_in+0x87/0xa0 [ 862.209891][ C1] Code: 95 09 fd 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 16 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 e8 4c 7c 57 fd eb a6 e8 a5 7c 57 fd eb e3 [ 862.209910][ C1] RSP: 0018:ffffc900058f7360 EFLAGS: 00000002 [ 862.209925][ C1] RAX: dffffc0000000060 RBX: 00000000000003fd RCX: 0000000000000000 [ 862.209937][ C1] RDX: 00000000000003fd RSI: ffffffff84781770 RDI: ffffffff91eee7c0 [ 862.209949][ C1] RBP: ffffffff91eee780 R08: 0000000000000001 R09: 000000000000001f [ 862.209961][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 862.209973][ C1] R13: 0000000000000020 R14: fffffbfff23ddd48 R15: dffffc0000000000 [ 862.209986][ C1] FS: 00007fc7b6189700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 862.210004][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 862.210018][ C1] CR2: 000000c003c55000 CR3: 00000000a0339000 CR4: 00000000003506e0 [ 862.210029][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 862.210040][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 862.210052][ C1] Call Trace: [ 862.210058][ C1] [ 862.210067][ C1] wait_for_lsr+0xd7/0x180 [ 862.210095][ C1] serial8250_console_write+0xccf/0x1010 [ 862.210126][ C1] ? serial8250_config_port+0x39d0/0x39d0 [ 862.210154][ C1] ? console_emit_next_record.constprop.0+0x28c/0x890 [ 862.210177][ C1] ? rcu_read_lock_sched_held+0x3e/0x70 [ 862.210196][ C1] ? trace_lock_acquire+0x1f1/0x290 [ 862.210215][ C1] ? console_emit_next_record.constprop.0+0x28c/0x890 [ 862.210236][ C1] ? lock_acquire+0x32/0xc0 [ 862.210253][ C1] ? console_emit_next_record.constprop.0+0x28c/0x890 [ 862.210278][ C1] console_emit_next_record.constprop.0+0x3d8/0x890 [ 862.210302][ C1] ? devkmsg_read+0x730/0x730 [ 862.210330][ C1] console_flush_all+0x547/0x6e0 [ 862.210351][ C1] console_unlock+0xb8/0x1f0 [ 862.210369][ C1] ? console_flush_all+0x6e0/0x6e0 [ 862.210388][ C1] ? vprintk_emit+0x3fa/0x600 [ 862.210407][ C1] ? lock_acquire+0x32/0xc0 [ 862.210424][ C1] ? vprintk_emit+0x3fa/0x600 [ 862.210445][ C1] vprintk_emit+0x1bd/0x600 [ 862.210464][ C1] ? __wake_up_klogd.part.0+0x99/0xf0 [ 862.210484][ C1] vprintk+0x84/0xa0 [ 862.210504][ C1] _printk+0xbe/0xf1 [ 862.210528][ C1] ? record_print_text.cold+0x16/0x16 [ 862.210552][ C1] ? _printk+0xbe/0xf1 [ 862.210575][ C1] ? record_print_text.cold+0x16/0x16 [ 862.210603][ C1] mt_dump_range+0x62/0x6b [ 862.210631][ C1] mt_dump_entry+0x2d/0xf4 [ 862.210663][ C1] mt_dump_node+0x3ec/0x927 [ 862.210693][ C1] mt_dump_node+0x851/0x927 [ 862.210723][ C1] mt_dump.cold+0xf2/0x115 [ 862.210749][ C1] mt_find.cold+0x48/0x90 [ 862.210775][ C1] ? mas_find+0x1d0/0x1d0 [ 862.210799][ C1] find_vma+0x10c/0x1b0 [ 862.210820][ C1] ? can_vma_merge_before+0x390/0x390 [ 862.210842][ C1] ? walk_page_test+0x78/0x180 [ 862.210867][ C1] walk_page_range+0x2b1/0x4a0 [ 862.210893][ C1] ? __walk_page_range+0x780/0x780 [ 862.210924][ C1] mlock_fixup+0x650/0x810 [ 862.210957][ C1] apply_vma_lock_flags+0x23d/0x350 [ 862.210988][ C1] ? mlock_fixup+0x810/0x810 [ 862.211021][ C1] ? __ia32_sys_get_robust_list+0x400/0x400 [ 862.211050][ C1] do_mlock+0x25a/0x6d0 [ 862.211081][ C1] ? folio_evictable+0x270/0x270 [ 862.211114][ C1] ? syscall_enter_from_user_mode+0x26/0xb0 [ 862.211139][ C1] __x64_sys_mlock+0x59/0x80 [ 862.211170][ C1] do_syscall_64+0x39/0xb0 [ 862.211198][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 862.211222][ C1] RIP: 0033:0x7fc7b548c0c9 [ 862.211238][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 862.211255][ C1] RSP: 002b:00007fc7b6189168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 862.211273][ C1] RAX: ffffffffffffffda RBX: 00007fc7b55abf80 RCX: 00007fc7b548c0c9 [ 862.211285][ C1] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 862.211298][ C1] RBP: 00007fc7b54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 862.211309][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.211320][ C1] R13: 00007ffcdd09422f R14: 00007fc7b6189300 R15: 0000000000022000 [ 862.211339][ C1] [ 862.223162][T13681] node ffff88801c1d3c00 depth 1 type 1 parent ffff88801c1d2e06 [ 862.250719][T16306] ffff88801ccdf380 [ 862.262642][T13681] contents: [ 862.281952][T16306] 553639936-553648127: [ 862.286504][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 862.286518][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 862.286542][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 862.286555][ T28] Call Trace: [ 862.286561][ T28] [ 862.286569][ T28] dump_stack_lvl+0xd1/0x138 [ 862.286608][ T28] panic+0x2cc/0x626 [ 862.286639][ T28] ? panic_print_sys_info.part.0+0x112/0x112 [ 862.286674][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 862.286713][ T28] ? watchdog.cold+0x130/0x158 [ 862.286747][ T28] watchdog.cold+0x141/0x158 [ 862.286777][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 862.286815][ T28] kthread+0x2e8/0x3a0 [ 862.286838][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 862.286864][ T28] ret_from_fork+0x1f/0x30 [ 862.286908][ T28] [ 862.291372][ T28] Kernel Offset: disabled [ 862.814295][ T28] Rebooting in 86400 seconds..