program: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f00000020c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="02030e00ec074802010e0200c52cf7c20675e005b02f88a8eb2b88a8dac8897c6b112002faffffff", 0x28, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @broadcast, 'veth0_to_bond\x00'}}, 0x1e) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000fc7000/0x2000)=nil, 0x2000) munlock(&(0x7f00002ab000/0x4000)=nil, 0x4000) munlock(&(0x7f0000dc1000/0x3000)=nil, 0x3000) munlockall() (fail_nth: 1) [ 68.171933][ T5311] Bluetooth: hci0: command tx timeout [ 68.226984][ T5327] FAULT_INJECTION: forcing a failure. [ 68.226984][ T5327] name failslab, interval 1, probability 0, space 0, times 1 [ 68.237477][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 68.237498][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.237505][ T5327] Call Trace: [ 68.237509][ T5327] [ 68.237514][ T5327] dump_stack_lvl+0x241/0x360 [ 68.237629][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.237643][ T5327] ? __pfx__printk+0x10/0x10 [ 68.237656][ T5327] ? __lock_acquire+0xad5/0xd80 [ 68.237673][ T5327] ? __pfx___might_resched+0x10/0x10 [ 68.237686][ T5327] should_fail_ex+0x424/0x570 [ 68.237732][ T5327] should_failslab+0xac/0x100 [ 68.237745][ T5327] kmem_cache_alloc_noprof+0x78/0x390 [ 68.237756][ T5327] ? mas_alloc_nodes+0x267/0x7e0 [ 68.237794][ T5327] mas_alloc_nodes+0x267/0x7e0 [ 68.237810][ T5327] mas_preallocate+0x5ea/0x950 [ 68.237824][ T5327] ? register_lock_class+0x54/0x330 [ 68.237842][ T5327] ? __pfx_mas_preallocate+0x10/0x10 [ 68.237856][ T5327] ? __lock_acquire+0xad5/0xd80 [ 68.237874][ T5327] ? __asan_memset+0x23/0x50 [ 68.237888][ T5327] ? init_multi_vma_prep+0x383/0x460 [ 68.237903][ T5327] commit_merge+0x25a/0x730 [ 68.237922][ T5327] ? __pfx_commit_merge+0x10/0x10 [ 68.237938][ T5327] ? dup_anon_vma+0x7d/0x2b0 [ 68.237956][ T5327] ? vma_merge_existing_range+0xb46/0x1750 [ 68.237968][ T5327] vma_merge_existing_range+0x11f1/0x1750 [ 68.237985][ T5327] ? vma_merge_existing_range+0x7d1/0x1750 [ 68.237996][ T5327] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 68.238011][ T5327] vma_modify+0x76/0x450 [ 68.238026][ T5327] vma_modify_flags+0x3b2/0x430 [ 68.238044][ T5327] ? __pfx_vma_modify_flags+0x10/0x10 [ 68.238072][ T5327] mlock_fixup+0x21a/0x350 [ 68.238090][ T5327] apply_mlockall_flags+0x309/0x410 [ 68.238102][ T5327] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 68.238116][ T5327] ? __do_sys_munlockall+0x5a/0x220 [ 68.238137][ T5327] __do_sys_munlockall+0x10a/0x220 [ 68.238154][ T5327] do_syscall_64+0xf3/0x210 [ 68.238166][ T5327] ? clear_bhb_loop+0x45/0xa0 [ 68.238179][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.238189][ T5327] RIP: 0033:0x7ff72238e169 [ 68.238199][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.238208][ T5327] RSP: 002b:00007ff7231a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 68.238222][ T5327] RAX: ffffffffffffffda RBX: 00007ff7225b5fa0 RCX: 00007ff72238e169 [ 68.238229][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.238235][ T5327] RBP: 00007ff7231a7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.238240][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.238246][ T5327] R13: 0000000000000000 R14: 00007ff7225b5fa0 R15: 00007fffb34d46a8 [ 68.238264][ T5327] [ 68.238275][ T5327] vmg ffffc9000d3bfc40 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start) [ 68.357440][ T5327] vmg ffffc9000d3bfc40 state: mm ffff8880126b1400 pgoff 2ee [ 68.357440][ T5327] vmi ffffc9000d3bfde0 [200000130000,2000002ab000) [ 68.357440][ T5327] prev ffff88803dac8640 middle ffff88803dac8640 next 0000000000000000 target 0000000000000000 [ 68.357440][ T5327] start 200000130000 end 2000002ab000 flags 82000f8 [ 68.357440][ T5327] file ffff8880408a51c0 anon_vma 0000000000000000 policy 0000000000000000 [ 68.357440][ T5327] uffd_ctx 0000000000000000 [ 68.357440][ T5327] anon_name 0000000000000000 [ 68.357440][ T5327] state 0 [ 68.357440][ T5327] just_expand 0 [ 68.357440][ T5327] __adjust_middle_start 0 __adjust_next_start 0 [ 68.357440][ T5327] __remove_middle 0 __remove_next 0 [ 68.383315][ T5327] vmg ffffc9000d3bfc40 mm: [ 68.385148][ T5327] mm ffff8880126b1400 task_size 140737488351232 [ 68.385148][ T5327] mmap_base 140699422625792 mmap_legacy_base 46933372542976 [ 68.385148][ T5327] pgd ffff888043f18000 mm_users 3 mm_count 4 pgtables_bytes 159744 map_count 43 [ 68.385148][ T5327] hiwater_rss 220d hiwater_vm 597e total_vm 597c locked_vm df5 [ 68.385148][ T5327] pinned_vm 0 data_vm 15c9 exec_vm 1a4 stack_vm 21 [ 68.385148][ T5327] start_code 7ff722249000 end_code 7ff7223ea529 start_data 7ff722590000 end_data 7ff722590000 [ 68.385148][ T5327] start_brk 555587d95000 brk 555587db7000 start_stack 7fffb34d4f10 [ 68.385148][ T5327] arg_start 7fffb34d6f04 arg_end 7fffb34d6f20 env_start 7fffb34d6f20 env_end 7fffb34d6fea [ 68.385148][ T5327] binfmt ffffffff8eeb4040 flags 800007fd [ 68.385148][ T5327] ioctx_table 0000000000000000 [ 68.385148][ T5327] owner ffff8880001fc880 exe_file ffff8880412ce8c0 [ 68.385148][ T5327] notifier_subscriptions ffff888040e78200 [ 68.385148][ T5327] numa_next_scan 4294944166 numa_scan_offset 0 numa_scan_seq 1 [ 68.385148][ T5327] tlb_flush_pending 0 [ 68.385148][ T5327] def_flags: 0x0() [ 68.424349][ T5327] vmg ffffc9000d3bfc40 prev: [ 68.426677][ T5327] vma ffff88803dac8640 start 0000200000130000 end 00002000002ab000 mm ffff8880126b1400 [ 68.426677][ T5327] prot 120 anon_vma 0000000000000000 vm_ops ffffffff8c54ab00 [ 68.426677][ T5327] pgoff 2ee file ffff8880408a51c0 private_data 0000000000000000 [ 68.426677][ T5327] refcnt 1 [ 68.426677][ T5327] flags: 0x82020f8(shared|mayread|maywrite|mayexec|mayshare|locked|noreserve|softdirty) [ 68.442762][ T5327] vmg ffffc9000d3bfc40 middle: [ 68.445066][ T5327] vma ffff88803dac8640 start 0000200000130000 end 00002000002ab000 mm ffff8880126b1400 [ 68.445066][ T5327] prot 120 anon_vma 0000000000000000 vm_ops ffffffff8c54ab00 [ 68.445066][ T5327] pgoff 2ee file ffff8880408a51c0 private_data 0000000000000000 [ 68.445066][ T5327] refcnt 1 [ 68.445066][ T5327] flags: 0x82020f8(shared|mayread|maywrite|mayexec|mayshare|locked|noreserve|softdirty) [ 68.459585][ T5327] vmg ffffc9000d3bfc40 next: (NULL) [ 68.463465][ T5327] vmg ffffc9000d3bfc40 vmi: [ 68.465398][ T5327] MAS: tree=ffff8880126b1440 enode=ffff8880432abc0c [ 68.465412][ T5327] (ma_active) [ 68.468040][ T5327] Store Type: [ 68.469498][ T5327] node_store [ 68.472768][ T5327] [3/15] index=200000130000 last=2000002aafff [ 68.475486][ T5327] min=0 max=200001000fff alloc=0000000000000000, depth=1, flags=0 [ 68.478911][ T5327] maple_tree(ffff8880126b1440) flags 30B, height 2 root ffff88801208c01e [ 68.483301][ T5327] 0-ffffffffffffffff: node ffff88801208c000 depth 0 type 3 parent ffff8880126b1441 contents: 1ffffffff000 355586d94000 a000 ffff80004cb29000 0 0 0 0 0 0 | 03 03| ffff8880432abc0c 200001000FFF ffff88804325f80c 7FF71F7F9FFF ffff888043c22a0c 7FF7230EDFFF ffff888000c9e00c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 68.497187][ T5327] 0-200001000fff: node ffff8880432abc00 depth 1 type 1 parent ffff88801208c006 contents: 0000000000000000 1FFFFFFFEFFF ffff888043fdab40 1FFFFFFFFFFF ffff8880128fb780 20000012FFFF ffff88803dac8640 2000002AAFFF ffff88803dac8000 2000002AEFFF ffff88803dac83c0 20000092FFFF ffff88801288e280 2000009FCFFF ffff88803dac8140 200000CEAFFF 0000000000000000 200000CECFFF ffff88803dac8dc0 200000DC0FFF ffff88803dac8b40 200000DC3FFF ffff88803dac8a00 200000FC6FFF ffff88803dac8c80 200000FC8FFF ffff88803dac88c0 200000FFCFFF ffff88803c8b5140 200000FFFFFF ffff888043fda8c0 [ 68.517701][ T5327] 0-1fffffffefff: 0000000000000000 [ 68.520020][ T5327] 1ffffffff000-1fffffffffff: ffff888043fdab40 [ 68.523097][ T5327] 200000000000-20000012ffff: ffff8880128fb780 [ 68.525878][ T5327] 200000130000-2000002aafff: ffff88803dac8640 [ 68.529520][ T5327] 2000002ab000-2000002aefff: ffff88803dac8000 [ 68.533216][ T5327] 2000002af000-20000092ffff: ffff88803dac83c0 [ 68.535864][ T5327] 200000930000-2000009fcfff: ffff88801288e280 [ 68.538482][ T5327] 2000009fd000-200000ceafff: ffff88803dac8140 [ 68.541554][ T5327] 200000ceb000-200000cecfff: 0000000000000000 [ 68.544330][ T5327] 200000ced000-200000dc0fff: ffff88803dac8dc0 [ 68.547839][ T5327] 200000dc1000-200000dc3fff: ffff88803dac8b40 [ 68.551642][ T5327] 200000dc4000-200000fc6fff: ffff88803dac8a00 [ 68.554498][ T5327] 200000fc7000-200000fc8fff: ffff88803dac8c80 [ 68.557247][ T5327] 200000fc9000-200000ffcfff: ffff88803dac88c0 [ 68.559858][ T5327] 200000ffd000-200000ffffff: ffff88803c8b5140 [ 68.563547][ T5327] 200001000000-200001000fff: ffff888043fda8c0 [ 68.566529][ T5327] 200001001000-7ff71f7f9fff: node ffff88804325f800 depth 1 type 1 parent ffff88801208c00e contents: 0000000000000000 555587D94FFF ffff888043fda780 555587DB6FFF 0000000000000000 7FF71E7F5FFF ffff888043fda640 7FF71E7F6FFF ffff888043fda500 7FF71EFF6FFF ffff888043fda3c0 7FF71EFF7FFF ffff888043fda280 7FF71F7F7FFF ffff888043fda140 7FF71F7F9FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000007 [ 68.585949][ T5327] 200001001000-555587d94fff: 0000000000000000 [ 68.588567][ T5327] 555587d95000-555587db6fff: ffff888043fda780 [ 68.591896][ T5327] 555587db7000-7ff71e7f5fff: 0000000000000000 [ 68.594433][ T5327] 7ff71e7f6000-7ff71e7f6fff: ffff888043fda640 [ 68.596920][ T5327] 7ff71e7f7000-7ff71eff6fff: ffff888043fda500 [ 68.599510][ T5327] 7ff71eff7000-7ff71eff7fff: ffff888043fda3c0 [ 68.603250][ T5327] 7ff71eff8000-7ff71f7f7fff: ffff888043fda280 [ 68.605647][ T5327] 7ff71f7f8000-7ff71f7f9fff: ffff888043fda140 [ 68.608124][ T5327] 7ff71f7fa000-7ff7230edfff: node ffff888043c22a00 depth 1 type 1 parent ffff88801208c016 contents: ffff888043fda000 7FF71FFF9FFF ffff888043083000 7FF71FFFBFFF ffff888043083280 7FF7207FBFFF ffff888043083140 7FF7207FDFFF ffff888043083dc0 7FF720FFDFFF ffff888043083c80 7FF720FFEFFF ffff888043083b40 7FF721DFEFFF ffff888043083a00 7FF7221FFFFF ffff8880430838c0 7FF722248FFF ffff888043083780 7FF7223EAFFF ffff888043083640 7FF722497FFF ffff888043083500 7FF72257CFFF ffff8880430833c0 7FF722585FFF 0000000000000000 7FF72258FFFF ffff88803c8b5780 7FF7230EDFFF 000000000000000e [ 68.628803][ T5327] 7ff71f7fa000-7ff71fff9fff: ffff888043fda000 [ 68.632504][ T5327] 7ff71fffa000-7ff71fffbfff: ffff888043083000 [ 68.635202][ T5327] 7ff71fffc000-7ff7207fbfff: ffff888043083280 [ 68.637821][ T5327] 7ff7207fc000-7ff7207fdfff: ffff888043083140 [ 68.641545][ T5327] 7ff7207fe000-7ff720ffdfff: ffff888043083dc0 [ 68.644222][ T5327] 7ff720ffe000-7ff720ffefff: ffff888043083c80 [ 68.646832][ T5327] 7ff720fff000-7ff721dfefff: ffff888043083b40 [ 68.649396][ T5327] 7ff721dff000-7ff7221fffff: ffff888043083a00 [ 68.652596][ T5327] 7ff722200000-7ff722248fff: ffff8880430838c0 [ 68.655132][ T5327] 7ff722249000-7ff7223eafff: ffff888043083780 [ 68.657756][ T5327] 7ff7223eb000-7ff722497fff: ffff888043083640 [ 68.661308][ T5327] 7ff722498000-7ff72257cfff: ffff888043083500 [ 68.663893][ T5327] 7ff72257d000-7ff722585fff: ffff8880430833c0 [ 68.666472][ T5327] 7ff722586000-7ff72258ffff: 0000000000000000 [ 68.669080][ T5327] 7ff722590000-7ff7230edfff: ffff88803c8b5780 [ 68.672255][ T5327] 7ff7230ee000-ffffffffffffffff: node ffff888000c9e000 depth 1 type 1 parent ffff88801208c01e contents: 0000000000000000 7FF723165FFF ffff88803c8b58c0 7FF723166FFF ffff88803c8b5b40 7FF723186FFF ffff88803c8b5640 7FF723187FFF ffff88803c8b5dc0 7FF7231A7FFF ffff88803c8b5500 7FF7231A8FFF ffff88803c8b5280 7FF7231ACFFF ffff88803c8b5000 7FF7231AEFFF ffff88803c8b5c80 7FF7231B0FFF 0000000000000000 7FFFB34B5FFF ffff88803c8b5a00 7FFFB34D6FFF 0000000000000000 FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 000000000000000b [ 68.693698][ T5327] 7ff7230ee000-7ff723165fff: 0000000000000000 [ 68.696437][ T5327] 7ff723166000-7ff723166fff: ffff88803c8b58c0 [ 68.699191][ T5327] 7ff723167000-7ff723186fff: ffff88803c8b5b40 [ 68.702667][ T5327] 7ff723187000-7ff723187fff: ffff88803c8b5640 [ 68.705356][ T5327] 7ff723188000-7ff7231a7fff: ffff88803c8b5dc0 [ 68.708018][ T5327] 7ff7231a8000-7ff7231a8fff: ffff88803c8b5500 [ 68.711556][ T5327] 7ff7231a9000-7ff7231acfff: ffff88803c8b5280 [ 68.714229][ T5327] 7ff7231ad000-7ff7231aefff: ffff88803c8b5000 [ 68.717275][ T5327] 7ff7231af000-7ff7231b0fff: ffff88803c8b5c80 [ 68.719892][ T5327] 7ff7231b1000-7fffb34b5fff: 0000000000000000 [ 68.723050][ T5327] 7fffb34b6000-7fffb34d6fff: ffff88803c8b5a00 [ 68.726086][ T5327] 7fffb34d7000-ffffffffffffffff: 0000000000000000 [ 68.729057][ T5327] ------------[ cut here ]------------ [ 68.731505][ T5327] WARNING: CPU: 0 PID: 5327 at mm/vma.c:768 vma_merge_existing_range+0x13c6/0x1750 [ 68.735361][ T5327] Modules linked in: [ 68.737159][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 68.742140][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.747037][ T5327] RIP: 0010:vma_merge_existing_range+0x13c6/0x1750 [ 68.749710][ T5327] Code: 90 e9 e0 ef ff ff e8 49 dc a4 ff 90 0f 0b 90 e9 c8 ee ff ff e8 3b dc a4 ff 48 8b 3c 24 48 c7 c6 40 65 56 8c e8 0b 4d f1 ff 90 <0f> 0b 90 e9 4d ef ff ff e8 1d dc a4 ff e9 a8 f0 ff ff e8 13 dc a4 [ 68.757261][ T5327] RSP: 0018:ffffc9000d3bfa60 EFLAGS: 00010286 [ 68.759639][ T5327] RAX: ffffffff8c27cff5 RBX: 0000200000130000 RCX: ffff888000b42440 [ 68.762819][ T5327] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 68.765896][ T5327] RBP: ffffc9000d3bfb90 R08: ffffffff8c27cef0 R09: 1ffff11003f847d2 [ 68.769156][ T5327] R10: dffffc0000000000 R11: ffffed1003f847d3 R12: 0000200000130000 [ 68.772518][ T5327] R13: ffffffff93686020 R14: 1ffff92001a77f8c R15: 00002000002ab000 [ 68.775792][ T5327] FS: 00007ff7231a76c0(0000) GS:ffff88808c59a000(0000) knlGS:0000000000000000 [ 68.779269][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.781890][ T5327] CR2: 0000556de41e0208 CR3: 0000000043f18000 CR4: 0000000000352ef0 [ 68.784995][ T5327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.787970][ T5327] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.791012][ T5327] Call Trace: [ 68.792309][ T5327] [ 68.793406][ T5327] ? vma_merge_existing_range+0x7d1/0x1750 [ 68.795659][ T5327] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 68.798004][ T5327] vma_modify+0x76/0x450 [ 68.799679][ T5327] vma_modify_flags+0x3b2/0x430 [ 68.801670][ T5327] ? __pfx_vma_modify_flags+0x10/0x10 [ 68.803779][ T5327] mlock_fixup+0x21a/0x350 [ 68.805502][ T5327] apply_mlockall_flags+0x309/0x410 [ 68.807559][ T5327] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 68.809623][ T5327] ? __do_sys_munlockall+0x5a/0x220 [ 68.811787][ T5327] __do_sys_munlockall+0x10a/0x220 [ 68.813740][ T5327] do_syscall_64+0xf3/0x210 [ 68.815477][ T5327] ? clear_bhb_loop+0x45/0xa0 [ 68.817380][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.819628][ T5327] RIP: 0033:0x7ff72238e169 [ 68.821555][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.828708][ T5327] RSP: 002b:00007ff7231a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 68.831913][ T5327] RAX: ffffffffffffffda RBX: 00007ff7225b5fa0 RCX: 00007ff72238e169 [ 68.835126][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.838090][ T5327] RBP: 00007ff7231a7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.841366][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.844341][ T5327] R13: 0000000000000000 R14: 00007ff7225b5fa0 R15: 00007fffb34d46a8 [ 68.847423][ T5327] [ 68.848631][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.851453][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 68.855966][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.860041][ T5327] Call Trace: [ 68.861355][ T5327] [ 68.862555][ T5327] dump_stack_lvl+0x241/0x360 [ 68.864389][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.866405][ T5327] ? __pfx__printk+0x10/0x10 [ 68.868244][ T5327] ? vscnprintf+0x5d/0x90 [ 68.869952][ T5327] panic+0x349/0x880 [ 68.871552][ T5327] ? __warn+0x174/0x4d0 [ 68.873159][ T5327] ? __pfx_panic+0x10/0x10 [ 68.874943][ T5327] __warn+0x344/0x4d0 [ 68.876311][ T5327] ? vma_merge_existing_range+0x13c6/0x1750 [ 68.878720][ T5327] report_bug+0x2b3/0x500 [ 68.880424][ T5327] ? vma_merge_existing_range+0x13c6/0x1750 [ 68.882784][ T5327] ? vma_merge_existing_range+0x13c6/0x1750 [ 68.885157][ T5327] ? vma_merge_existing_range+0x13c8/0x1750 [ 68.887587][ T5327] handle_bug+0x89/0x170 [ 68.889289][ T5327] exc_invalid_op+0x1a/0x50 [ 68.891182][ T5327] asm_exc_invalid_op+0x1a/0x20 [ 68.893161][ T5327] RIP: 0010:vma_merge_existing_range+0x13c6/0x1750 [ 68.895730][ T5327] Code: 90 e9 e0 ef ff ff e8 49 dc a4 ff 90 0f 0b 90 e9 c8 ee ff ff e8 3b dc a4 ff 48 8b 3c 24 48 c7 c6 40 65 56 8c e8 0b 4d f1 ff 90 <0f> 0b 90 e9 4d ef ff ff e8 1d dc a4 ff e9 a8 f0 ff ff e8 13 dc a4 [ 68.903288][ T5327] RSP: 0018:ffffc9000d3bfa60 EFLAGS: 00010286 [ 68.905639][ T5327] RAX: ffffffff8c27cff5 RBX: 0000200000130000 RCX: ffff888000b42440 [ 68.908741][ T5327] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 68.911579][ T5327] RBP: ffffc9000d3bfb90 R08: ffffffff8c27cef0 R09: 1ffff11003f847d2 [ 68.914734][ T5327] R10: dffffc0000000000 R11: ffffed1003f847d3 R12: 0000200000130000 [ 68.917945][ T5327] R13: ffffffff93686020 R14: 1ffff92001a77f8c R15: 00002000002ab000 [ 68.921037][ T5327] ? mt_dump_node+0x1860/0x2290 [ 68.923005][ T5327] ? mt_dump_node+0x1965/0x2290 [ 68.924899][ T5327] ? vma_merge_existing_range+0x7d1/0x1750 [ 68.927144][ T5327] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 68.929453][ T5327] vma_modify+0x76/0x450 [ 68.931128][ T5327] vma_modify_flags+0x3b2/0x430 [ 68.932937][ T5327] ? __pfx_vma_modify_flags+0x10/0x10 [ 68.934931][ T5327] mlock_fixup+0x21a/0x350 [ 68.936659][ T5327] apply_mlockall_flags+0x309/0x410 [ 68.938614][ T5327] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 68.940862][ T5327] ? __do_sys_munlockall+0x5a/0x220 [ 68.942884][ T5327] __do_sys_munlockall+0x10a/0x220 [ 68.944891][ T5327] do_syscall_64+0xf3/0x210 [ 68.946702][ T5327] ? clear_bhb_loop+0x45/0xa0 [ 68.948566][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.950873][ T5327] RIP: 0033:0x7ff72238e169 [ 68.952549][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.959813][ T5327] RSP: 002b:00007ff7231a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 68.963084][ T5327] RAX: ffffffffffffffda RBX: 00007ff7225b5fa0 RCX: 00007ff72238e169 [ 68.966200][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.969239][ T5327] RBP: 00007ff7231a7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.972336][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.975221][ T5327] R13: 0000000000000000 R14: 00007ff7225b5fa0 R15: 00007fffb34d46a8 [ 68.978096][ T5327] [ 68.979588][ T5327] Kernel Offset: disabled [ 68.981280][ T5327] Rebooting in 86400 seconds..