07f9f6cf6c300 R15: 0000000000022000 [ 575.840225][ T8075] [ 575.850212][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 575.856249][ T8075] BUG at mt_find:6473 (1) [ 575.860590][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 575.869659][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 575.906627][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 575.956140][ T8075] 0-536866815: 0000000000000000 [ 575.961395][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 575.969070][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 575.977386][ T8075] 553631744-553635839: 0000000000000000 [ 575.983442][ T8075] 553635840-553631743: ffff88801cae0e00 [ 575.990200][ T8075] 553631744-553644031: ffff88801cae0d20 [ 575.997564][ T8075] 553644032-553648127: ffff888020c88460 [ 576.003600][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 576.009719][ T8075] 553652224-116829323263: 0000000000000000 [ 576.016547][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 576.023106][ T8075] 116833517568-93825021800447: 0000000000000000 [ 576.031730][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 576.045699][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 576.053445][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 576.061072][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 576.119263][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 576.126390][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 576.133348][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 576.140426][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 576.148476][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 576.155485][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 576.162435][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 576.169523][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 576.176716][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 576.183653][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 576.191387][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 576.198624][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 576.205843][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 576.214876][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 576.222419][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 576.274038][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 576.281116][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 576.288126][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 576.295141][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 576.302106][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 576.309135][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 576.316228][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 576.323941][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 576.330971][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 576.338409][ T8075] Pass: 10149316 Run:10149391 [ 576.343070][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 576.352874][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 576.362917][ T8075] Call Trace: [ 576.366183][ T8075] [ 576.369110][ T8075] dump_stack_lvl+0xd1/0x138 [ 576.373697][ T8075] mt_find.cold+0x8b/0x90 [ 576.378031][ T8075] ? mas_find+0x1d0/0x1d0 [ 576.382357][ T8075] find_vma+0x10c/0x1b0 [ 576.386511][ T8075] ? can_vma_merge_before+0x390/0x390 [ 576.391891][ T8075] ? walk_page_test+0x78/0x180 [ 576.396681][ T8075] walk_page_range+0x2b1/0x4a0 [ 576.401491][ T8075] ? __walk_page_range+0x780/0x780 [ 576.406633][ T8075] mlock_fixup+0x650/0x810 [ 576.411058][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 576.416251][ T8075] ? mlock_fixup+0x810/0x810 [ 576.420838][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 576.426727][ T8075] do_mlock+0x25a/0x6d0 [ 576.430877][ T8075] ? folio_evictable+0x270/0x270 [ 576.435810][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 576.441695][ T8075] __x64_sys_mlock+0x59/0x80 [ 576.446296][ T8075] do_syscall_64+0x39/0xb0 [ 576.450750][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 576.456662][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 576.461099][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 576.480730][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 576.489148][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 576.497118][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 576.505096][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 576.513065][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.521035][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 576.529021][ T8075] [ 576.535263][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 576.541211][ T8075] BUG at mt_find:6473 (1) [ 576.545793][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 576.554237][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 576.591763][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 576.642460][ T8075] 0-536866815: 0000000000000000 [ 576.648925][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 576.655282][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 576.661222][ T8075] 553631744-553635839: 0000000000000000 [ 576.667380][ T8075] 553635840-553631743: ffff88801cae0e00 [ 576.673276][ T8075] 553631744-553644031: ffff88801cae0d20 [ 576.679575][ T8075] 553644032-553648127: ffff888020c88460 [ 576.685655][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 576.691542][ T8075] 553652224-116829323263: 0000000000000000 [ 576.698061][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 576.704493][ T8075] 116833517568-93825021800447: 0000000000000000 [ 576.711606][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 576.718994][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 576.726187][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 576.733800][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 576.791597][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 576.798748][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 576.805828][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 576.812798][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 576.822603][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 576.829655][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 576.837714][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 576.844695][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 576.851728][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 576.858753][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 576.865766][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 576.872714][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 576.879751][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 576.886760][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 576.894318][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 576.947639][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 576.954650][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 576.961694][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 576.968700][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 576.975731][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 576.982702][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 576.989692][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 576.996790][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 577.003740][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 577.011182][ T8075] Pass: 10149316 Run:10149392 [ 577.015951][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 577.025949][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 577.036024][ T8075] Call Trace: [ 577.039317][ T8075] [ 577.042264][ T8075] dump_stack_lvl+0xd1/0x138 [ 577.046899][ T8075] mt_find.cold+0x8b/0x90 [ 577.051266][ T8075] ? mas_find+0x1d0/0x1d0 [ 577.055621][ T8075] find_vma+0x10c/0x1b0 [ 577.059763][ T8075] ? can_vma_merge_before+0x390/0x390 [ 577.065138][ T8075] ? walk_page_test+0x78/0x180 [ 577.069930][ T8075] walk_page_range+0x2b1/0x4a0 [ 577.074725][ T8075] ? __walk_page_range+0x780/0x780 [ 577.079836][ T8075] mlock_fixup+0x650/0x810 [ 577.084259][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 577.089477][ T8075] ? mlock_fixup+0x810/0x810 [ 577.094085][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 577.099994][ T8075] do_mlock+0x25a/0x6d0 [ 577.104162][ T8075] ? folio_evictable+0x270/0x270 [ 577.109118][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 577.115019][ T8075] __x64_sys_mlock+0x59/0x80 [ 577.119620][ T8075] do_syscall_64+0x39/0xb0 [ 577.124047][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 577.129944][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 577.134357][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 577.153967][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 577.162386][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 577.170444][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 577.178413][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 577.186381][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.194348][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 577.202335][ T8075] [ 577.209327][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 577.216015][ T8075] BUG at mt_find:6473 (1) [ 577.220388][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 577.229039][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 577.266931][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 577.316396][ T8075] 0-536866815: 0000000000000000 [ 577.321641][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 577.330962][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 577.336946][ T8075] 553631744-553635839: 0000000000000000 [ 577.342850][ T8075] 553635840-553631743: ffff88801cae0e00 [ 577.349558][ T8075] 553631744-553644031: ffff88801cae0d20 [ 577.355838][ T8075] 553644032-553648127: ffff888020c88460 [ 577.361753][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 577.367719][ T8075] 553652224-116829323263: 0000000000000000 [ 577.373879][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 577.380345][ T8075] 116833517568-93825021800447: 0000000000000000 [ 577.387064][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 577.393840][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 577.400717][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 577.407752][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 577.465312][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 577.472310][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 577.479928][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 577.487132][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 577.494083][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 577.501396][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 577.508668][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 577.515855][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 577.522813][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 577.529817][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 577.536835][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 577.543788][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 577.550804][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 577.558131][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 577.566450][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 577.618104][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 577.625230][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 577.632175][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 577.639177][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 577.646185][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 577.653136][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 577.660609][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 577.667629][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 577.674577][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 577.683545][ T8075] Pass: 10149316 Run:10149393 [ 577.688341][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 577.698175][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 577.708236][ T8075] Call Trace: [ 577.711599][ T8075] [ 577.714531][ T8075] dump_stack_lvl+0xd1/0x138 [ 577.719140][ T8075] mt_find.cold+0x8b/0x90 [ 577.723489][ T8075] ? mas_find+0x1d0/0x1d0 [ 577.727833][ T8075] find_vma+0x10c/0x1b0 [ 577.731988][ T8075] ? can_vma_merge_before+0x390/0x390 [ 577.737365][ T8075] ? walk_page_test+0x78/0x180 [ 577.742138][ T8075] walk_page_range+0x2b1/0x4a0 [ 577.746954][ T8075] ? __walk_page_range+0x780/0x780 [ 577.752083][ T8075] mlock_fixup+0x650/0x810 [ 577.756524][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 577.761739][ T8075] ? mlock_fixup+0x810/0x810 [ 577.766349][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 577.772256][ T8075] do_mlock+0x25a/0x6d0 [ 577.776424][ T8075] ? folio_evictable+0x270/0x270 [ 577.781412][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 577.787314][ T8075] __x64_sys_mlock+0x59/0x80 [ 577.791919][ T8075] do_syscall_64+0x39/0xb0 [ 577.796343][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 577.802253][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 577.806673][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 577.826283][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 577.834696][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 577.842665][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 577.850635][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 577.858603][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.866574][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 577.874559][ T8075] [ 577.883460][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 577.889493][ T8075] BUG at mt_find:6473 (1) [ 577.893847][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 577.902553][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 577.939790][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 577.990346][ T8075] 0-536866815: 0000000000000000 [ 577.998850][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 578.004781][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 578.010746][ T8075] 553631744-553635839: 0000000000000000 [ 578.016703][ T8075] 553635840-553631743: ffff88801cae0e00 [ 578.022609][ T8075] 553631744-553644031: ffff88801cae0d20 [ 578.028572][ T8075] 553644032-553648127: ffff888020c88460 [ 578.034494][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 578.040454][ T8075] 553652224-116829323263: 0000000000000000 [ 578.046703][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 578.053133][ T8075] 116833517568-93825021800447: 0000000000000000 [ 578.059779][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 578.066913][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 578.073780][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 578.080791][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 578.138652][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 578.146085][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 578.153037][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 578.160042][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 578.167574][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 578.174544][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 578.181568][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 578.188569][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 578.195584][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 578.202531][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 578.209510][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 578.216493][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 578.223437][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 578.230508][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 578.237690][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 578.287854][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 578.296889][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 578.303865][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 578.311048][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 578.318026][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 578.325049][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 578.332011][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 578.338987][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 578.345965][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 578.353321][ T8075] Pass: 10149316 Run:10149394 [ 578.358093][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 578.367906][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 578.377967][ T8075] Call Trace: [ 578.381238][ T8075] [ 578.384163][ T8075] dump_stack_lvl+0xd1/0x138 [ 578.388774][ T8075] mt_find.cold+0x8b/0x90 [ 578.393103][ T8075] ? mas_find+0x1d0/0x1d0 [ 578.397441][ T8075] find_vma+0x10c/0x1b0 [ 578.401591][ T8075] ? can_vma_merge_before+0x390/0x390 [ 578.406958][ T8075] ? walk_page_test+0x78/0x180 [ 578.411750][ T8075] walk_page_range+0x2b1/0x4a0 [ 578.421646][ T8075] ? __walk_page_range+0x780/0x780 [ 578.426787][ T8075] mlock_fixup+0x650/0x810 [ 578.431221][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 578.436434][ T8075] ? mlock_fixup+0x810/0x810 [ 578.441048][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 578.446954][ T8075] do_mlock+0x25a/0x6d0 [ 578.451120][ T8075] ? folio_evictable+0x270/0x270 [ 578.456074][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 578.461973][ T8075] __x64_sys_mlock+0x59/0x80 [ 578.466571][ T8075] do_syscall_64+0x39/0xb0 [ 578.470997][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 578.476896][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 578.481324][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 578.500934][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 578.509364][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 578.517368][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 578.525443][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 578.533413][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.541383][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 578.549389][ T8075] [ 578.558648][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 578.564606][ T8075] BUG at mt_find:6473 (1) [ 578.569130][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 578.578770][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 578.617388][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 578.668317][ T8075] 0-536866815: 0000000000000000 [ 578.673559][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 578.680418][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 578.686398][ T8075] 553631744-553635839: 0000000000000000 [ 578.692351][ T8075] 553635840-553631743: ffff88801cae0e00 [ 578.698361][ T8075] 553631744-553644031: ffff88801cae0d20 [ 578.704294][ T8075] 553644032-553648127: ffff888020c88460 [ 578.710309][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 578.716359][ T8075] 553652224-116829323263: 0000000000000000 [ 578.724534][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 578.731443][ T8075] 116833517568-93825021800447: 0000000000000000 [ 578.738083][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 578.744888][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 578.751751][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 11:33:03 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:33:03 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) 11:33:03 executing program 5: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 11:33:03 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:33:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:33:03 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 578.758747][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 578.816061][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 578.823071][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 578.830158][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 578.837183][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 578.844147][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 11:33:03 executing program 2: syz_clone(0x320eb080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 578.872686][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 578.904160][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 578.939396][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 578.976063][ T8114] random: crng reseeded on system resumption [ 579.000725][ T8075] 140322691440640-140322691776511: ffff888075eddd20 11:33:03 executing program 2: r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000000c0)=0xf2) [ 579.058791][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 579.071438][ T27] audit: type=1800 audit(1673263983.900:51): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1158 res=0 errno=0 [ 579.154278][ T8075] 140322691780608-140322692145151: ffff888075edde00 11:33:04 executing program 2: futex(0x0, 0xb, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) [ 579.232264][ T8075] 140322692145152-140322692182015: ffff888075eddee0 11:33:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 579.304524][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 579.347756][ T8075] 140322692202496-140322704048127: ffff888075edd000 11:33:04 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 579.388451][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 11:33:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) [ 579.505271][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 579.522628][ T8075] 140322704506880-140322704510975: ffff88807c795380 11:33:04 executing program 2: syz_io_uring_setup(0x3bbe, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x38b}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 579.570507][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 579.628346][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 579.640577][ T8135] random: crng reseeded on system resumption [ 579.685376][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 579.692878][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 579.700138][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 579.708114][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 579.721063][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 579.733765][ T8075] Pass: 10162285 Run:10162364 [ 579.742088][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 579.751968][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 579.762055][ T8075] Call Trace: [ 579.765364][ T8075] [ 579.768316][ T8075] dump_stack_lvl+0xd1/0x138 [ 579.772957][ T8075] mt_find.cold+0x8b/0x90 [ 579.777321][ T8075] ? mas_find+0x1d0/0x1d0 [ 579.781671][ T8075] find_vma+0x10c/0x1b0 [ 579.785830][ T8075] ? can_vma_merge_before+0x390/0x390 [ 579.791207][ T8075] ? walk_page_test+0x78/0x180 [ 579.795979][ T8075] walk_page_range+0x2b1/0x4a0 [ 579.800752][ T8075] ? __walk_page_range+0x780/0x780 [ 579.805883][ T8075] mlock_fixup+0x650/0x810 [ 579.810332][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 579.815546][ T8075] ? mlock_fixup+0x810/0x810 [ 579.820153][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 579.826058][ T8075] do_mlock+0x25a/0x6d0 [ 579.830225][ T8075] ? folio_evictable+0x270/0x270 [ 579.835182][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 579.841080][ T8075] __x64_sys_mlock+0x59/0x80 [ 579.845682][ T8075] do_syscall_64+0x39/0xb0 [ 579.850108][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 579.856034][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 579.860463][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 579.880074][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 579.888488][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 579.896457][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 579.904425][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 579.912393][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.920363][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 579.928351][ T8075] 11:33:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 579.984892][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 580.015697][ T8075] BUG at mt_find:6473 (1) [ 580.033117][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 580.067441][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 580.105354][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.264932][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 580.494995][ T8075] 0-536866815: 0000000000000000 [ 580.500441][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 580.513165][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 580.527559][ T8075] 553631744-553635839: 0000000000000000 [ 580.540223][ T8075] 553635840-553631743: ffff88801cae0e00 [ 580.552997][ T8075] 553631744-553644031: ffff88801cae0d20 [ 580.572659][ T8075] 553644032-553648127: ffff888020c88460 [ 580.593863][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 580.613240][ T8075] 553652224-116829323263: 0000000000000000 [ 580.634672][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 580.659074][ T8075] 116833517568-93825021800447: 0000000000000000 [ 580.676410][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 580.690044][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 580.706115][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 580.721126][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 580.776618][ C1] vkms_vblank_simulate: vblank timer overrun 11:33:05 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 580.860433][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 580.874220][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 580.890577][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 580.903626][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 580.932011][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 580.947759][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 580.960969][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 580.970747][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 580.983759][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 580.992383][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 581.006691][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 581.014384][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 581.038014][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 581.052760][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 581.062194][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 581.112021][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.165770][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 581.178110][ T27] audit: type=1800 audit(1673263986.010:52): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1162 res=0 errno=0 [ 581.285224][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 581.300278][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 581.342850][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 581.391111][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 581.422729][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 581.460450][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 581.489693][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 581.520132][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 581.553719][ T8075] Pass: 10188712 Run:10188792 [ 581.570495][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 581.580373][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 581.590459][ T8075] Call Trace: [ 581.593752][ T8075] [ 581.596693][ T8075] dump_stack_lvl+0xd1/0x138 [ 581.601319][ T8075] mt_find.cold+0x8b/0x90 [ 581.605679][ T8075] ? mas_find+0x1d0/0x1d0 [ 581.610049][ T8075] find_vma+0x10c/0x1b0 [ 581.614241][ T8075] ? can_vma_merge_before+0x390/0x390 [ 581.619643][ T8075] ? walk_page_test+0x78/0x180 [ 581.624441][ T8075] walk_page_range+0x2b1/0x4a0 [ 581.629240][ T8075] ? __walk_page_range+0x780/0x780 [ 581.634403][ T8075] mlock_fixup+0x650/0x810 [ 581.638867][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 581.644104][ T8075] ? mlock_fixup+0x810/0x810 [ 581.648744][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 581.654675][ T8075] do_mlock+0x25a/0x6d0 [ 581.658875][ T8075] ? folio_evictable+0x270/0x270 [ 581.663859][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 581.669783][ T8075] __x64_sys_mlock+0x59/0x80 [ 581.674495][ T8075] do_syscall_64+0x39/0xb0 [ 581.679040][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 581.684960][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 581.689398][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.709046][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 581.717493][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 581.725489][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 581.733480][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 581.741472][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.749462][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 581.757484][ T8075] [ 581.760628][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.775893][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 581.782128][ T8075] BUG at mt_find:6473 (1) [ 581.791350][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 581.818942][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 581.856836][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.867130][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 581.916132][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.923824][ T8075] 0-536866815: 0000000000000000 [ 581.929176][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 581.935381][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 581.941311][ T8075] 553631744-553635839: 0000000000000000 [ 581.947626][ T8075] 553635840-553631743: ffff88801cae0e00 [ 581.953559][ T8075] 553631744-553644031: ffff88801cae0d20 [ 581.961305][ T8075] 553644032-553648127: ffff888020c88460 [ 581.972224][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 581.978319][ T8075] 553652224-116829323263: 0000000000000000 [ 581.984676][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 581.999338][ T8075] 116833517568-93825021800447: 0000000000000000 [ 582.008717][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 582.020773][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 582.031733][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 582.043994][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 582.099035][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.107637][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 582.114665][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 582.121872][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 582.128971][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 582.137565][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 582.144578][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 582.151766][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 582.159000][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 582.172653][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 582.179884][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 582.193321][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 582.201749][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 582.215234][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 582.222246][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 582.229561][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 582.279677][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.296818][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 582.303821][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 582.310898][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 582.319309][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 582.326454][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 582.333428][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 582.340503][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 582.347876][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 582.355208][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 582.362604][ T8075] Pass: 10257915 Run:10257996 [ 582.368608][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 582.378442][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 582.388486][ T8075] Call Trace: [ 582.391750][ T8075] [ 582.394668][ T8075] dump_stack_lvl+0xd1/0x138 [ 582.399276][ T8075] mt_find.cold+0x8b/0x90 [ 582.404001][ T8075] ? mas_find+0x1d0/0x1d0 [ 582.408375][ T8075] find_vma+0x10c/0x1b0 [ 582.412565][ T8075] ? can_vma_merge_before+0x390/0x390 [ 582.417967][ T8075] ? walk_page_test+0x78/0x180 [ 582.422734][ T8075] walk_page_range+0x2b1/0x4a0 [ 582.427516][ T8075] ? __walk_page_range+0x780/0x780 [ 582.432656][ T8075] mlock_fixup+0x650/0x810 [ 582.437071][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 582.442259][ T8075] ? mlock_fixup+0x810/0x810 [ 582.446871][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 582.452787][ T8075] do_mlock+0x25a/0x6d0 [ 582.456959][ T8075] ? folio_evictable+0x270/0x270 [ 582.461946][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 582.467861][ T8075] __x64_sys_mlock+0x59/0x80 [ 582.472484][ T8075] do_syscall_64+0x39/0xb0 [ 582.476927][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 582.482876][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 582.487299][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 582.506939][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 582.515479][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 582.523474][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 582.531443][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 582.539405][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.547375][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 582.555383][ T8075] [ 582.562998][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 582.569481][ T8075] BUG at mt_find:6473 (1) [ 582.573823][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 582.582296][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 582.619233][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 582.671957][ T8075] 0-536866815: 0000000000000000 [ 582.677314][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 582.683230][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 582.689206][ T8075] 553631744-553635839: 0000000000000000 [ 582.695230][ T8075] 553635840-553631743: ffff88801cae0e00 [ 582.701139][ T8075] 553631744-553644031: ffff88801cae0d20 [ 582.707099][ T8075] 553644032-553648127: ffff888020c88460 [ 582.713016][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 582.719144][ T8075] 553652224-116829323263: 0000000000000000 [ 582.728132][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 582.734554][ T8075] 116833517568-93825021800447: 0000000000000000 [ 582.743234][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 582.752012][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 582.760862][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 582.769802][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 582.824768][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.835941][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 582.842977][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 582.850070][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 582.857116][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 582.864069][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 582.871078][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 582.878575][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 582.885665][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 582.892626][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 582.899598][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 582.906607][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 582.913556][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 582.920533][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 582.927516][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 582.934526][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 582.988469][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 582.995501][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 583.002460][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 583.009563][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 583.016554][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 583.023501][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 583.030482][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 583.037487][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 583.044437][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 583.051875][ T8075] Pass: 10257915 Run:10257997 [ 583.056594][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 583.067198][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 583.077273][ T8075] Call Trace: [ 583.080561][ T8075] [ 583.083488][ T8075] dump_stack_lvl+0xd1/0x138 [ 583.088858][ T8075] mt_find.cold+0x8b/0x90 [ 583.093189][ T8075] ? mas_find+0x1d0/0x1d0 [ 583.097527][ T8075] find_vma+0x10c/0x1b0 [ 583.101690][ T8075] ? can_vma_merge_before+0x390/0x390 [ 583.107241][ T8075] ? walk_page_test+0x78/0x180 [ 583.112012][ T8075] walk_page_range+0x2b1/0x4a0 [ 583.116786][ T8075] ? __walk_page_range+0x780/0x780 [ 583.121916][ T8075] mlock_fixup+0x650/0x810 [ 583.126355][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 583.131564][ T8075] ? mlock_fixup+0x810/0x810 [ 583.136180][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 583.142087][ T8075] do_mlock+0x25a/0x6d0 [ 583.146257][ T8075] ? folio_evictable+0x270/0x270 [ 583.151210][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 583.157113][ T8075] __x64_sys_mlock+0x59/0x80 [ 583.161730][ T8075] do_syscall_64+0x39/0xb0 [ 583.166178][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 583.172094][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 583.176515][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 583.196131][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 583.204545][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 583.212514][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 583.220483][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 583.228452][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.236424][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 583.244447][ T8075] [ 583.258377][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 583.264377][ T8075] BUG at mt_find:6473 (1) [ 583.268827][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 583.277356][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 583.314110][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.321461][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 583.370429][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.386813][ T8075] 0-536866815: 0000000000000000 [ 583.393097][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 583.399099][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 583.405120][ T8075] 553631744-553635839: 0000000000000000 [ 583.411096][ T8075] 553635840-553631743: ffff88801cae0e00 [ 583.417121][ T8075] 553631744-553644031: ffff88801cae0d20 [ 583.423133][ T8075] 553644032-553648127: ffff888020c88460 [ 583.429182][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 583.435250][ T8075] 553652224-116829323263: 0000000000000000 [ 583.441538][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 583.448109][ T8075] 116833517568-93825021800447: 0000000000000000 [ 583.459920][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 583.466859][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 583.473750][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 583.489963][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 583.527075][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 583.544992][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.555171][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 583.570904][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 583.572656][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 583.585997][ T4392] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 583.592222][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 583.598772][ T4392] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 583.600739][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 583.608160][ T4392] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 583.614382][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 583.621969][ T4392] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 583.628553][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 583.642814][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 583.652817][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 583.659990][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 583.667029][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 583.674003][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 583.684045][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 583.691210][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 583.698937][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 583.707414][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 583.758330][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 583.765816][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 583.772970][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 583.780889][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 583.800437][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 583.811318][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 583.822211][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 583.833096][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 583.849911][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 583.857906][ T8075] Pass: 10266664 Run:10266747 [ 583.862654][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 583.872491][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 583.875123][ T8146] chnl_net:caif_netlink_parms(): no params data found [ 583.882547][ T8075] Call Trace: [ 583.882559][ T8075] [ 583.895553][ T8075] dump_stack_lvl+0xd1/0x138 [ 583.900185][ T8075] mt_find.cold+0x8b/0x90 [ 583.905337][ T8075] ? mas_find+0x1d0/0x1d0 [ 583.909721][ T8075] find_vma+0x10c/0x1b0 [ 583.913867][ T8075] ? can_vma_merge_before+0x390/0x390 [ 583.919239][ T8075] ? walk_page_test+0x78/0x180 [ 583.924011][ T8075] walk_page_range+0x2b1/0x4a0 [ 583.928784][ T8075] ? __walk_page_range+0x780/0x780 [ 583.933915][ T8075] mlock_fixup+0x650/0x810 [ 583.938352][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 583.943559][ T8075] ? mlock_fixup+0x810/0x810 [ 583.948167][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 583.954071][ T8075] do_mlock+0x25a/0x6d0 [ 583.958237][ T8075] ? folio_evictable+0x270/0x270 [ 583.963190][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 583.969092][ T8075] __x64_sys_mlock+0x59/0x80 [ 583.973690][ T8075] do_syscall_64+0x39/0xb0 [ 583.978114][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 583.984008][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 583.988427][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 584.008039][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 584.016455][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 584.024429][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 584.032397][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 584.040373][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.048343][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 584.056328][ T8075] [ 584.059412][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.071259][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 584.077347][ T8075] BUG at mt_find:6473 (1) [ 584.081839][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 584.096215][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 584.133887][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 584.185723][ T8075] 0-536866815: 0000000000000000 [ 584.190992][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 584.197081][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 584.203007][ T8075] 553631744-553635839: 0000000000000000 [ 584.209498][ T8075] 553635840-553631743: ffff88801cae0e00 [ 584.212092][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.215474][ T8075] 553631744-553644031: ffff88801cae0d20 [ 584.215503][ T8075] 553644032-553648127: ffff888020c88460 [ 584.215523][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 584.234478][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.240352][ T8075] 553652224-116829323263: 0000000000000000 [ 584.240379][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 584.240401][ T8075] 116833517568-93825021800447: 0000000000000000 [ 584.240423][ T8075] 93825021800448-93825021939711: [ 584.256159][ T8146] device bridge_slave_0 entered promiscuous mode [ 584.260076][ T8075] ffff88808b414000 [ 584.277558][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.278462][ T8075] 93825021939712-140322669588479: [ 584.282122][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.289771][ T8075] 0000000000000000 [ 584.289785][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 584.289811][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 [ 584.306126][ T8146] device bridge_slave_1 entered promiscuous mode [ 584.308532][ T8075] 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 584.377843][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 584.390271][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.392970][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 584.406752][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 584.414789][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 584.417996][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.424398][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 584.440602][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 584.447809][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 584.454853][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 584.461958][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 584.469089][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 584.476238][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 584.483208][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 584.490282][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 584.498536][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 584.503474][ T8146] team0: Port device team_slave_0 added [ 584.511384][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 584.524657][ T8146] team0: Port device team_slave_1 added [ 584.561636][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.573865][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 584.581841][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 584.589085][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 584.596232][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 584.603320][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 584.610382][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 584.611973][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.617944][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 584.617978][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 584.618000][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 584.618024][ T8075] Pass: 10270537 Run:10270621 [ 584.618037][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 584.618063][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 584.618077][ T8075] Call Trace: [ 584.618085][ T8075] [ 584.618095][ T8075] dump_stack_lvl+0xd1/0x138 [ 584.618133][ T8075] mt_find.cold+0x8b/0x90 [ 584.685801][ T8075] ? mas_find+0x1d0/0x1d0 [ 584.690152][ T8075] find_vma+0x10c/0x1b0 [ 584.694313][ T8075] ? can_vma_merge_before+0x390/0x390 [ 584.699689][ T8075] ? walk_page_test+0x78/0x180 [ 584.704459][ T8075] walk_page_range+0x2b1/0x4a0 [ 584.709230][ T8075] ? __walk_page_range+0x780/0x780 [ 584.714389][ T8075] mlock_fixup+0x650/0x810 [ 584.718856][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 584.724093][ T8075] ? mlock_fixup+0x810/0x810 [ 584.728713][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 584.734623][ T8075] do_mlock+0x25a/0x6d0 [ 584.738792][ T8075] ? folio_evictable+0x270/0x270 [ 584.743747][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 584.749648][ T8075] __x64_sys_mlock+0x59/0x80 [ 584.754246][ T8075] do_syscall_64+0x39/0xb0 [ 584.758670][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 584.764565][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 584.768981][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 584.788587][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 584.797002][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 584.804970][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 584.812937][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 584.820906][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.828875][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 584.836860][ T8075] [ 584.843765][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 584.849882][ T8075] BUG at mt_find:6473 (1) [ 584.854238][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 584.858248][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.863501][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 584.899522][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.927259][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.929661][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 584.993889][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.001399][ T8075] 0-536866815: 0000000000000000 [ 585.006762][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 585.012742][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 585.013721][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.018765][ T8075] 553631744-553635839: 0000000000000000 [ 585.018794][ T8075] 553635840-553631743: ffff88801cae0e00 [ 585.018816][ T8075] 553631744-553644031: ffff88801cae0d20 [ 585.018836][ T8075] 553644032-553648127: ffff888020c88460 [ 585.018858][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 585.018879][ T8075] 553652224-116829323263: 0000000000000000 [ 585.018906][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 585.018928][ T8075] 116833517568-93825021800447: 0000000000000000 [ 585.018950][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 585.018971][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 585.018992][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 585.019015][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 [ 585.035540][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.039913][ T8075] ffff888075edd9a0 140322680078335 [ 585.044585][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.155697][ T8075] ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 585.196411][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 585.203579][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 585.211690][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 585.218772][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 585.225874][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 585.228468][ T8146] device hsr_slave_0 entered promiscuous mode [ 585.233718][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 585.247231][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 585.254222][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 585.254523][ T8146] device hsr_slave_1 entered promiscuous mode [ 585.262294][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 585.275843][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 585.282830][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 585.282911][ T8146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.290261][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 585.304785][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 585.305460][ T8146] Cannot create hsr debugfs directory [ 585.312133][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 585.325050][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 585.379093][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 585.386435][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 585.393459][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 585.400976][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 585.408339][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 585.415690][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 585.422775][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 585.430194][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 585.447895][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 585.455938][ T8075] Pass: 10270537 Run:10270622 [ 585.460645][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 585.470483][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 585.480557][ T8075] Call Trace: [ 585.483847][ T8075] [ 585.486788][ T8075] dump_stack_lvl+0xd1/0x138 [ 585.492165][ T8075] mt_find.cold+0x8b/0x90 [ 585.496494][ T8075] ? mas_find+0x1d0/0x1d0 [ 585.500847][ T8075] find_vma+0x10c/0x1b0 [ 585.504991][ T8075] ? can_vma_merge_before+0x390/0x390 [ 585.510361][ T8075] ? walk_page_test+0x78/0x180 [ 585.515128][ T8075] walk_page_range+0x2b1/0x4a0 [ 585.519927][ T8075] ? __walk_page_range+0x780/0x780 [ 585.525066][ T8075] mlock_fixup+0x650/0x810 [ 585.529481][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 585.534671][ T8075] ? mlock_fixup+0x810/0x810 [ 585.539285][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 585.545215][ T8075] do_mlock+0x25a/0x6d0 [ 585.549389][ T8075] ? folio_evictable+0x270/0x270 [ 585.554340][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 585.560223][ T8075] __x64_sys_mlock+0x59/0x80 [ 585.564812][ T8075] do_syscall_64+0x39/0xb0 [ 585.569269][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 585.575197][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 585.579599][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 585.599192][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 585.607604][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 585.615576][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 585.623562][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 585.631537][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.641590][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 585.649585][ T8075] [ 585.655512][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 585.661665][ T8075] BUG at mt_find:6473 (1) [ 585.666103][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 585.674547][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 [ 585.675089][ T48] Bluetooth: hci6: command 0x0409 tx timeout [ 585.701091][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 585.722064][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 585.772781][ T8075] 0-536866815: 0000000000000000 [ 585.778302][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 585.786742][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 585.792704][ T8075] 553631744-553635839: 0000000000000000 [ 585.798809][ T8075] 553635840-553631743: ffff88801cae0e00 [ 585.804745][ T8075] 553631744-553644031: ffff88801cae0d20 [ 585.805613][ T8146] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.810792][ T8075] 553644032-553648127: ffff888020c88460 [ 585.827159][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 585.833079][ T8075] 553652224-116829323263: 0000000000000000 [ 585.839334][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 585.846782][ T8075] 116833517568-93825021800447: 0000000000000000 [ 585.853408][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 585.860287][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 585.867230][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 585.874201][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 585.931816][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 585.938904][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 585.946198][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 585.954151][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 585.961279][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 585.978507][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 585.991081][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 586.002209][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 586.015705][ T8146] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.019105][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 586.043910][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 586.061444][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 586.069951][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 586.084939][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 586.094645][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 586.110313][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 586.164228][ T8146] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.172619][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 586.181613][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 586.188994][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 586.196305][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 586.203512][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 586.211993][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 586.228641][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 586.241392][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 586.264249][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 586.272010][ T8075] Pass: 10270537 Run:10270623 [ 586.278393][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 586.288248][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 586.298330][ T8075] Call Trace: [ 586.301619][ T8075] [ 586.304568][ T8075] dump_stack_lvl+0xd1/0x138 [ 586.309190][ T8075] mt_find.cold+0x8b/0x90 [ 586.313551][ T8075] ? mas_find+0x1d0/0x1d0 [ 586.317921][ T8075] find_vma+0x10c/0x1b0 [ 586.322096][ T8075] ? can_vma_merge_before+0x390/0x390 [ 586.327492][ T8075] ? walk_page_test+0x78/0x180 [ 586.332285][ T8075] walk_page_range+0x2b1/0x4a0 [ 586.337102][ T8075] ? __walk_page_range+0x780/0x780 [ 586.342259][ T8075] mlock_fixup+0x650/0x810 [ 586.346717][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 586.351952][ T8075] ? mlock_fixup+0x810/0x810 [ 586.356589][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 586.362524][ T8075] do_mlock+0x25a/0x6d0 [ 586.366720][ T8075] ? folio_evictable+0x270/0x270 [ 586.371702][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 586.377626][ T8075] __x64_sys_mlock+0x59/0x80 [ 586.382245][ T8075] do_syscall_64+0x39/0xb0 [ 586.386696][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 586.392610][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 586.397219][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 586.416848][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 586.425285][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 586.433270][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 586.441256][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 586.449241][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.457227][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 586.465237][ T8075] [ 586.487189][ T8146] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.509024][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 586.519273][ T8075] BUG at mt_find:6473 (1) [ 586.523636][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 586.541442][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 586.582330][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 586.642584][ T8075] 0-536866815: 0000000000000000 [ 586.650849][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 586.663605][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 586.673787][ T8075] 553631744-553635839: 0000000000000000 [ 586.690594][ T8075] 553635840-553631743: ffff88801cae0e00 [ 586.696951][ T8075] 553631744-553644031: ffff88801cae0d20 [ 586.702892][ T8075] 553644032-553648127: ffff888020c88460 [ 586.708558][ T8146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 586.709302][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 586.722616][ T8075] 553652224-116829323263: 0000000000000000 [ 586.729248][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 586.731665][ T8146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 586.736032][ T8075] 116833517568-93825021800447: 0000000000000000 [ 586.749394][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 586.756995][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 586.757023][ T8146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 586.763875][ T8075] 140322669588480-140322669592575: [ 586.777297][ T8146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 586.779832][ T8075] ffff888075edd7e0 [ 586.794547][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 586.852340][ T8146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.871356][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 586.879147][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 586.887500][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 586.891422][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 586.894464][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 586.910918][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 586.911846][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 586.919277][ T8075] 140322686369792-140322690564095: [ 586.929224][ T8146] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.932990][ T8075] ffff888075edda80 [ 586.941199][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.941832][ T8075] 140322690564096-140322690711551: [ 586.945937][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.959924][ T8075] ffff888075eddb60 [ 586.968442][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.978684][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.982991][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 587.003546][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 587.009577][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 587.011095][ T8075] 140322691776512-140322691780607: [ 587.019381][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 587.023491][ T8075] 0000000000000000 [ 587.026690][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 587.035705][ T8075] 140322691780608-140322692145151: [ 587.039394][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.052720][ T8075] ffff888075edde00 [ 587.057776][ T5187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.061524][ T8075] 140322692145152-140322692182015: [ 587.069766][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 587.077517][ T8075] ffff888075eddee0 [ 587.085915][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 587.093895][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 587.097388][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 587.113637][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 587.117366][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 587.130421][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 587.140740][ T8146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 587.189083][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 587.195534][ T8146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.206204][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 587.211875][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 587.218167][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 587.229984][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 587.232073][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 587.237777][ T8075] 140730494414848-140730494550015: [ 587.247627][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.253654][ T8075] ffff88807c795a80 [ 587.261989][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 587.265380][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 587.275635][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 587.281895][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 587.295950][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 587.303016][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 587.304151][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.310972][ T8075] Pass: 10270538 Run:10270625 [ 587.325007][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 587.334856][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 587.344945][ T8075] Call Trace: [ 587.348242][ T8075] [ 587.351193][ T8075] dump_stack_lvl+0xd1/0x138 [ 587.355829][ T8075] mt_find.cold+0x8b/0x90 [ 587.360200][ T8075] ? mas_find+0x1d0/0x1d0 [ 587.365080][ T8075] find_vma+0x10c/0x1b0 [ 587.369262][ T8075] ? can_vma_merge_before+0x390/0x390 [ 587.374638][ T8075] ? walk_page_test+0x78/0x180 [ 587.379412][ T8075] walk_page_range+0x2b1/0x4a0 [ 587.384189][ T8075] ? __walk_page_range+0x780/0x780 [ 587.389320][ T8075] mlock_fixup+0x650/0x810 [ 587.393754][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 587.398962][ T8075] ? mlock_fixup+0x810/0x810 [ 587.403657][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 587.409559][ T8075] do_mlock+0x25a/0x6d0 [ 587.413729][ T8075] ? folio_evictable+0x270/0x270 [ 587.418685][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 587.424584][ T8075] __x64_sys_mlock+0x59/0x80 [ 587.429532][ T8075] do_syscall_64+0x39/0xb0 [ 587.433958][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 587.439853][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 587.444270][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 587.463877][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 587.472304][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 587.480274][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 587.488252][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 587.496222][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.504189][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 587.512177][ T8075] [ 587.531856][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 587.538794][ T8075] BUG at mt_find:6473 (1) [ 587.543151][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 587.552395][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 587.591770][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 587.653973][ T8075] 0-536866815: 0000000000000000 [ 587.659629][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 587.674464][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 587.682749][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 587.683633][ T8075] 553631744-553635839: 0000000000000000 [ 587.699229][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 587.699379][ T8075] 553635840-553631743: ffff88801cae0e00 [ 587.712690][ T8075] 553631744-553644031: ffff88801cae0d20 [ 587.716342][ T8146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.718944][ T8075] 553644032-553648127: ffff888020c88460 [ 587.731533][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 587.738012][ T8075] 553652224-116829323263: 0000000000000000 [ 587.744219][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 587.752338][ T8075] 116833517568-93825021800447: 0000000000000000 [ 587.759607][ T48] Bluetooth: hci6: command 0x041b tx timeout [ 587.773275][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 587.780271][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 587.787310][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 587.795331][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 587.851488][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 587.863708][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 587.877676][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 587.884688][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 587.893172][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 587.901244][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 587.909057][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 587.917620][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 587.924624][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 587.931764][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 587.938853][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 587.945934][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 587.952912][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 587.960677][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 587.969039][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 588.032553][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 588.039973][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 588.047411][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 588.054407][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 588.061862][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 588.069190][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 588.079545][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 588.091143][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 588.098477][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 588.107734][ T8075] Pass: 10367081 Run:10367169 [ 588.112431][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 588.122274][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 588.133136][ T8075] Call Trace: [ 588.136444][ T8075] [ 588.139390][ T8075] dump_stack_lvl+0xd1/0x138 [ 588.144018][ T8075] mt_find.cold+0x8b/0x90 [ 588.148386][ T8075] ? mas_find+0x1d0/0x1d0 [ 588.152772][ T8075] find_vma+0x10c/0x1b0 [ 588.156976][ T8075] ? can_vma_merge_before+0x390/0x390 [ 588.162391][ T8075] ? walk_page_test+0x78/0x180 [ 588.163509][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 588.167339][ T8075] walk_page_range+0x2b1/0x4a0 [ 588.167377][ T8075] ? __walk_page_range+0x780/0x780 [ 588.167423][ T8075] mlock_fixup+0x650/0x810 [ 588.167471][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 588.167509][ T8075] ? mlock_fixup+0x810/0x810 [ 588.184183][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 588.185416][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 588.185457][ T8075] do_mlock+0x25a/0x6d0 [ 588.185496][ T8075] ? folio_evictable+0x270/0x270 [ 588.185540][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 588.216063][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 588.218023][ T8075] __x64_sys_mlock+0x59/0x80 [ 588.224521][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 588.228824][ T8075] do_syscall_64+0x39/0xb0 [ 588.228864][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 588.228891][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 588.228918][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 588.228939][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 588.228966][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 588.228983][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 588.228999][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 588.229014][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.229028][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 588.229061][ T8075] [ 588.247688][ T8146] device veth0_vlan entered promiscuous mode [ 588.261961][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 588.322067][ T8146] device veth1_vlan entered promiscuous mode [ 588.326215][ T8075] BUG at mt_find:6473 (1) [ 588.361733][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 588.372649][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 588.376083][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 588.387308][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 588.418023][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 588.486577][ T8075] 0-536866815: 0000000000000000 [ 588.491946][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 588.500766][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 588.506135][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 588.511373][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 588.524063][ T8075] 553631744-553635839: 0000000000000000 [ 588.527045][ T8146] device veth0_macvtap entered promiscuous mode [ 588.530793][ T8075] 553635840-553631743: ffff88801cae0e00 [ 588.541646][ T8146] device veth1_macvtap entered promiscuous mode [ 588.542715][ T8075] 553631744-553644031: ffff88801cae0d20 [ 588.556151][ T8075] 553644032-553648127: ffff888020c88460 [ 588.562103][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 588.568415][ T8075] 553652224-116829323263: 0000000000000000 [ 588.574692][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 588.582204][ T8075] 116833517568-93825021800447: 0000000000000000 [ 588.587602][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.589836][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 588.608366][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.608385][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.608402][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.626315][ T8075] 93825021939712-140322669588479: [ 588.640630][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.649272][ T8075] 0000000000000000 [ 588.657058][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.665083][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 588.670336][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.685031][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 [ 588.687892][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.687911][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.725422][ T8075] ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 588.734411][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.768783][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 588.785728][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.792184][ T8075] 140322677981184-140322680078335: [ 588.796404][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.797675][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.809699][ T8075] ffff888075edd9a0 [ 588.828020][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 588.835608][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 588.840579][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 588.843722][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 588.852356][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 588.858724][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 588.864667][ T8075] 140322686369792-140322690564095: [ 588.873586][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 588.880691][ T8075] ffff888075edda80 [ 588.889736][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.899211][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 588.905519][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.920062][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 588.921869][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.927383][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 588.943465][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.944707][ T8075] 140322691776512-140322691780607: [ 588.957554][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.962603][ T8075] 0000000000000000 [ 588.963107][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.973839][ T8075] 140322691780608-140322692145151: [ 588.977631][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.994969][ T8075] ffff888075edde00 [ 589.003569][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.014908][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 589.017101][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.024738][ T8075] 140322692182016-140322692202495: [ 589.034853][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.034867][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.034882][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.036188][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.062848][ T8075] 0000000000000000 [ 589.062868][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 589.062896][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 589.078922][ T8146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.090851][ T8075] contents: [ 589.104212][ T8146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.117527][ T8075] 0000000000000000 140322704506879 [ 589.125246][ T8146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.135908][ T8075] ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 589.139396][ T8146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.183784][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 589.192302][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.192348][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 589.208737][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 589.209689][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.216193][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 589.241432][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 589.249277][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 589.257293][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 589.277183][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 589.284316][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 589.292623][ T8075] Pass: 10376701 Run:10376790 [ 589.297504][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 589.307341][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 589.317427][ T8075] Call Trace: [ 589.320825][ T8075] [ 589.321447][ T5274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.323752][ T8075] dump_stack_lvl+0xd1/0x138 [ 589.336286][ T8075] mt_find.cold+0x8b/0x90 [ 589.340640][ T8075] ? mas_find+0x1d0/0x1d0 [ 589.345461][ T8075] find_vma+0x10c/0x1b0 [ 589.345640][ T5274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.349630][ T8075] ? can_vma_merge_before+0x390/0x390 [ 589.362299][ T8075] ? walk_page_test+0x78/0x180 [ 589.367194][ T8075] walk_page_range+0x2b1/0x4a0 [ 589.372010][ T8075] ? __walk_page_range+0x780/0x780 [ 589.373163][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 589.377172][ T8075] mlock_fixup+0x650/0x810 [ 589.377224][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 589.390100][ T5274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.394004][ T8075] ? mlock_fixup+0x810/0x810 [ 589.403230][ T5274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.406545][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 589.406589][ T8075] do_mlock+0x25a/0x6d0 [ 589.406628][ T8075] ? folio_evictable+0x270/0x270 [ 589.406673][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 589.406707][ T8075] __x64_sys_mlock+0x59/0x80 [ 589.406742][ T8075] do_syscall_64+0x39/0xb0 [ 589.406777][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 589.406805][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 589.406827][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 589.406850][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 589.406875][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 589.406891][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 589.406907][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 589.421024][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 589.424208][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.521777][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 589.529750][ T8075] [ 589.542708][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 589.548883][ T8075] BUG at mt_find:6473 (1) [ 589.553236][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 589.561795][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 589.596435][ T8166] ffff888066308600[4] piv 553631743 < prev_piv 553635839 [ 589.608716][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 589.621178][ T8166] BUG at mas_validate_limits:7046 (1) [ 589.660903][ T8075] 0-536866815: 0000000000000000 [ 589.669349][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 589.675327][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 589.681259][ T8075] 553631744-553635839: 0000000000000000 [ 589.681621][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 589.687257][ T8075] 553635840-553631743: ffff88801cae0e00 [ 589.687284][ T8075] 553631744-553644031: ffff88801cae0d20 [ 589.687306][ T8075] 553644032-553648127: ffff888020c88460 [ 589.687326][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 589.687349][ T8075] 553652224-116829323263: 0000000000000000 [ 589.687370][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 589.687391][ T8075] 116833517568-93825021800447: 0000000000000000 [ 589.687411][ T8075] 93825021800448-93825021939711: [ 589.706295][ T8166] 0-18446744073709551615: [ 589.707645][ T8075] ffff88808b414000 [ 589.713576][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 589.719921][ T8075] 93825021939712-140322669588479: [ 589.733374][ T8166] contents: [ 589.740455][ T8075] 0000000000000000 [ 589.746480][ T8166] 93708216008704 [ 589.749777][ T8075] 140322669588480-140322669592575: [ 589.753103][ T8166] 20480 18446603342792269824 0 0 0 0 0 [ 589.761188][ T8075] ffff888075edd7e0 [ 589.777042][ T8166] 0 [ 589.778719][ T8075] 140322669592576-140322704048127: [ 589.782725][ T8166] 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 [ 589.789251][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 589.813400][ T8166] 0000000000000000 0 [ 589.821092][ T8075] contents: [ 589.821365][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 589.833212][ T8075] ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 589.844353][ T48] Bluetooth: hci6: command 0x040f tx timeout [ 589.896117][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 589.900884][ T8166] 0-139904166133759: [ 589.903088][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 589.903115][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 589.903138][ T8075] 140322682175488-140322684272639: [ 589.911241][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 589.914272][ T8075] ffff888075edd0e0 [ 589.914286][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 589.914311][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 589.921788][ T8166] contents: [ 589.926939][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 589.926965][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 589.926988][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 589.927010][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 589.927033][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 589.927055][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 589.927078][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 589.927099][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 589.927122][ T8075] 140322704048128-18446744073709551615: [ 589.953914][ T8166] 0000000000000000 536866815 [ 589.956755][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 589.965183][ T8166] ffff88807e785620 536870911 [ 589.970794][ T8075] contents: [ 589.985753][ T8166] ffff88807e785700 553631743 [ 589.991764][ T8075] 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 [ 590.005617][ T8166] 0000000000000000 553635839 [ 590.007399][ T8075] ffff88807c795a80 140730494550015 [ 590.012808][ T8166] ffff8880770f5c40 553631743 [ 590.018496][ T8075] 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 590.018614][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 590.018638][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 590.018660][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 590.018683][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 590.018704][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 590.018727][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 590.018748][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 590.018770][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 590.018792][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 590.018814][ T8075] Pass: 10377450 Run:10377541 [ 590.018828][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 590.018853][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 590.036147][ T8166] ffff8880770f5b60 553648127 [ 590.038994][ T8075] Call Trace: [ 590.039009][ T8075] [ 590.039019][ T8075] dump_stack_lvl+0xd1/0x138 [ 590.039063][ T8075] mt_find.cold+0x8b/0x90 [ 590.043891][ T8166] ffff88807e7857e0 553652223 [ 590.057593][ T8075] ? mas_find+0x1d0/0x1d0 [ 590.057644][ T8075] find_vma+0x10c/0x1b0 [ 590.057669][ T8075] ? can_vma_merge_before+0x390/0x390 [ 590.057698][ T8075] ? walk_page_test+0x78/0x180 [ 590.057728][ T8075] walk_page_range+0x2b1/0x4a0 [ 590.057761][ T8075] ? __walk_page_range+0x780/0x780 [ 590.057806][ T8075] mlock_fixup+0x650/0x810 [ 590.057854][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 590.057894][ T8075] ? mlock_fixup+0x810/0x810 [ 590.057943][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 590.057981][ T8075] do_mlock+0x25a/0x6d0 [ 590.058027][ T8075] ? folio_evictable+0x270/0x270 [ 590.058076][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 590.058111][ T8075] __x64_sys_mlock+0x59/0x80 [ 590.058146][ T8075] do_syscall_64+0x39/0xb0 [ 590.058181][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 590.058208][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 590.058230][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 590.058254][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 590.066654][ T8166] 0000000000000000 116783185919 [ 590.068128][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 590.068149][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 590.068164][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 590.068179][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.072891][ T8166] ffff88807e7858c0 116789477375 [ 590.098326][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 590.098366][ T8075] [ 590.099800][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 590.144640][ T8166] 0000000000000000 93825005486079 [ 590.151501][ T8075] BUG at mt_find:6473 (1) [ 590.168229][ T8166] ffff88807e7859a0 93825005625343 [ 590.180392][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 590.196257][ T8166] 0000000000000000 139904166129663 [ 590.197043][ T8075] 0-18446744073709551615: [ 590.199361][ T8166] ffff88807e785a80 139904166133759 0000000000000000 0 0000000000000000 0 000000000000000c [ 590.199414][ T8166] 0-536866815: [ 590.204034][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 590.215940][ T8166] 0000000000000000 [ 590.218076][ T8075] contents: [ 590.221501][ T8166] 536866816-536870911: ffff88807e785620 [ 590.221529][ T8166] 536870912-553631743: ffff88807e785700 [ 590.227342][ T8075] 93708188282880 [ 590.239358][ T8166] 553631744-553635839: [ 590.242734][ T8075] 20480 [ 590.256618][ T8166] 0000000000000000 [ 590.258997][ T8075] 18446603343213248512 [ 590.263945][ T8166] 553635840-553631743: [ 590.267512][ T8075] 0 [ 590.274898][ T8166] ffff8880770f5c40 [ 590.278727][ T8075] 0 [ 590.282813][ T8166] 553631744-553648127: ffff8880770f5b60 [ 590.282842][ T8166] 553648128-553652223: ffff88807e7857e0 [ 590.287678][ T8075] 0 [ 590.300430][ T8166] 553652224-116783185919: [ 590.320387][ T8075] 0 [ 590.337178][ T8166] 0000000000000000 [ 590.340054][ T8075] 0 [ 590.356486][ T8166] 116783185920-116789477375: [ 590.364612][ T8075] 0 [ 590.395661][ T8166] ffff88807e7858c0 [ 590.402730][ T8075] 0 [ 590.417002][ T8166] 116789477376-93825005486079: [ 590.419146][ T8075] | 02 02| [ 590.436350][ T8166] 0000000000000000 [ 590.440668][ T8075] ffff88802228180c 140322669592575 [ 590.444081][ T8166] 93825005486080-93825005625343: [ 590.447372][ T8075] ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 [ 590.462075][ T8166] ffff88807e7859a0 [ 590.464360][ T8075] 0000000000000000 0 [ 590.473381][ T8166] 93825005625344-139904166129663: [ 590.475188][ T8075] 0000000000000000 0 [ 590.484930][ T8166] 0000000000000000 [ 590.486498][ T8075] 0000000000000000 0 [ 590.492241][ T8166] 139904166129664-139904166133759: [ 590.498236][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 590.498281][ T8075] 0-140322669592575: [ 590.507077][ T8166] ffff88807e785a80 [ 590.513711][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 590.531509][ T8166] 139904166133760-139904200589311: [ 590.531931][ T8075] contents: [ 590.534152][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 [ 590.539679][ T8075] 0000000000000000 536866815 [ 590.543704][ T8166] ffff88807e785c40 139904176619519 [ 590.546650][ T8075] ffff88802b7dbc40 536870911 [ 590.551522][ T8166] ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 [ 590.560008][ T8075] ffff88802b7dbd20 553631743 [ 590.580157][ T8166] ffff8880770f5000 139904187105279 [ 590.584061][ T8075] 0000000000000000 553635839 [ 590.593879][ T8166] ffff8880770f50e0 139904187252735 [ 590.597318][ T8075] ffff88801cae0e00 553631743 [ 590.615934][ T8166] ffff8880770f51c0 139904187981823 [ 590.623399][ T8075] ffff88801cae0d20 553644031 [ 590.635531][ T8166] ffff8880770f52a0 139904188317695 [ 590.650073][ T8075] ffff888020c88460 553648127 [ 590.674944][ T8166] 0000000000000000 139904188321791 [ 590.680122][ T8075] ffff88802b7dbe00 553652223 [ 590.696416][ T8166] ffff8880770f5380 139904188686335 [ 590.699165][ T8075] 0000000000000000 116829323263 [ 590.703329][ T8166] ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 [ 590.708904][ T8075] ffff88802b7dbee0 116833517567 [ 590.720877][ T8166] 000000000000000d [ 590.724013][ T8075] 0000000000000000 93825021800447 [ 590.741565][ T8166] 139904166133760-139904174522367: [ 590.747716][ T8075] ffff88808b414000 93825021939711 [ 590.755385][ T8166] ffff88807e785b60 [ 590.762070][ T8075] 0000000000000000 140322669588479 [ 590.775621][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 590.781218][ T8075] ffff888075edd7e0 140322669592575 [ 590.787790][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 590.793271][ T8075] 0000000000000000 0 000000000000000d [ 590.806361][ T8075] 0-536866815: 0000000000000000 [ 590.811661][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 590.817745][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 590.818117][ T8075] 536870912-553631743: [ 590.824695][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 590.824722][ T8166] 139904182910976-139904187105279: [ 590.829540][ T8075] ffff88802b7dbd20 [ 590.846220][ T8075] 553631744-553635839: 0000000000000000 [ 590.848027][ T8166] ffff8880770f5000 [ 590.852195][ T8075] 553635840-553631743: ffff88801cae0e00 [ 590.861490][ T8166] 139904187105280-139904187252735: [ 590.865734][ T8075] 553631744-553644031: [ 590.866028][ T8166] ffff8880770f50e0 [ 590.871412][ T8075] ffff88801cae0d20 [ 590.883764][ T8075] 553644032-553648127: ffff888020c88460 [ 590.884246][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 590.890415][ T8075] 553648128-553652223: [ 590.896721][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 590.896748][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 590.896770][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 590.901779][ T8075] ffff88802b7dbe00 [ 590.915515][ T8166] 139904188686336-139904188723199: [ 590.923263][ T8075] 553652224-116829323263: 0000000000000000 [ 590.938623][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 590.939230][ T8166] ffff8880770f5460 [ 590.945502][ T8075] 116833517568-93825021800447: 0000000000000000 [ 590.956109][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 590.956146][ T8075] 93825021800448-93825021939711: [ 590.963059][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 590.963086][ T8166] 139904200589312-18446744073709551615: [ 590.970987][ T8075] ffff88808b414000 [ 590.986686][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 590.990178][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 [ 590.993634][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 591.013645][ T8166] ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 591.021120][ T8075] 140322669592576-140322704048127: [ 591.029845][ T8166] 0000000000000000 0 [ 591.044038][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 591.109148][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 591.115924][ T8166] 0000000000000000 0 0000000000000000 0 [ 591.116707][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 591.122357][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 591.136560][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 591.137279][ T8166] 0000000000000008 [ 591.143565][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 591.151903][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 591.154348][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 591.168536][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 591.169172][ T8166] 139904201199616-139904201203711: [ 591.176363][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 591.182116][ T8166] ffff8880770f59a0 [ 591.189076][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 591.189105][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 591.206838][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 591.208644][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 591.214686][ T8166] 139904201334784-140730916691967: [ 591.224385][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 591.232351][ T8166] 0000000000000000 [ 591.237078][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 591.237106][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 591.237127][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 [ 591.243550][ T8166] 140730916691968-140730916827135: [ 591.248026][ T8075] ffff88807c795a80 140730494550015 [ 591.262495][ T8166] ffff8880770f5620 [ 591.280499][ T8075] 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 591.295936][ T8166] 140730916827136-140730917257215: [ 591.320480][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 591.329811][ T8166] 0000000000000000 [ 591.336570][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 591.345346][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 591.348067][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 591.361917][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 591.361993][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 591.369636][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 591.385588][ T8075] 140730494414848-140730494550015: [ 591.385599][ T8166] Pass: 10377451 Run:10377543 [ 591.385616][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 591.391144][ T8075] ffff88807c795a80 [ 591.395804][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 591.395819][ T8166] Call Trace: [ 591.395827][ T8166] [ 591.395836][ T8166] dump_stack_lvl+0xd1/0x138 [ 591.406291][ T8075] 140730494550016-140730496278527: [ 591.409335][ T8166] mt_validate.cold+0xc36/0xde8 [ 591.419621][ T8075] 0000000000000000 [ 591.422654][ T8166] ? kmem_cache_free+0xec/0x4e0 [ 591.425802][ T8075] 140730496278528-140730496294911: [ 591.430142][ T8166] ? mast_topiary+0x1370/0x1370 [ 591.438424][ T8075] ffff88807c795b60 [ 591.440594][ T8166] validate_mm_mt+0xa7/0x1b0 [ 591.444414][ T8075] 140730496294912-140730496303103: [ 591.449200][ T8166] ? remove_vma+0x130/0x130 [ 591.449245][ T8166] __split_vma+0x9b/0x740 [ 591.455446][ T8075] ffff88807c795c40 [ 591.459596][ T8166] ? expand_stack+0x20/0x20 [ 591.463292][ T8075] 140730496303104-18446744073709551615: [ 591.467856][ T8166] ? vma_shrink+0x5b0/0x5b0 [ 591.467900][ T8166] split_vma+0xc6/0x110 [ 591.473978][ T8075] 0000000000000000 [ 591.477912][ T8166] mlock_fixup+0x56a/0x810 [ 591.477962][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 591.477998][ T8166] ? mlock_fixup+0x810/0x810 [ 591.478046][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 591.478084][ T8166] do_mlock+0x25a/0x6d0 [ 591.478124][ T8166] ? folio_evictable+0x270/0x270 [ 591.478173][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 591.478208][ T8166] __x64_sys_mlock+0x59/0x80 [ 591.478245][ T8166] do_syscall_64+0x39/0xb0 [ 591.478281][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 591.478310][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 591.478331][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 591.478353][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 [ 591.484345][ T8075] Pass: 10377451 Run:10377543 [ 591.486360][ T8166] ORIG_RAX: 0000000000000095 [ 591.486372][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 591.486391][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 591.486406][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 591.486420][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.486434][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 591.486469][ T8166] [ 591.514549][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 591.520364][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 591.524400][ T8166] BUG at mt_find:6473 (1) [ 591.529665][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 591.529680][ T8075] Call Trace: [ 591.529688][ T8075] [ 591.529696][ T8075] dump_stack_lvl+0xd1/0x138 [ 591.529735][ T8075] mt_find.cold+0x8b/0x90 [ 591.529767][ T8075] ? mas_find+0x1d0/0x1d0 [ 591.529811][ T8075] find_vma+0x10c/0x1b0 [ 591.529836][ T8075] ? can_vma_merge_before+0x390/0x390 [ 591.529866][ T8075] ? walk_page_test+0x78/0x180 [ 591.529901][ T8075] walk_page_range+0x2b1/0x4a0 [ 591.529935][ T8075] ? __walk_page_range+0x780/0x780 [ 591.529985][ T8075] mlock_fixup+0x650/0x810 [ 591.530032][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 591.530072][ T8075] ? mlock_fixup+0x810/0x810 [ 591.530120][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 591.530158][ T8075] do_mlock+0x25a/0x6d0 [ 591.542446][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 591.545104][ T8075] ? folio_evictable+0x270/0x270 [ 591.545155][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 591.545188][ T8075] __x64_sys_mlock+0x59/0x80 [ 591.549794][ T8166] 0-18446744073709551615: [ 591.554146][ T8075] do_syscall_64+0x39/0xb0 [ 591.567647][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 591.584029][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 591.584060][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 591.584081][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 591.584103][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 591.584129][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 591.584145][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 591.584161][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 591.584175][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.584189][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 591.584221][ T8075] [ 591.590101][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 591.595518][ T8166] contents: [ 591.598540][ T8075] BUG at mt_find:6473 (1) [ 591.611083][ T8166] 93708216008704 [ 591.616682][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 591.632512][ T8166] 20480 [ 591.641234][ T8075] 0-18446744073709551615: [ 591.657223][ T8166] 18446603342792269824 [ 591.659997][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 591.664073][ T8166] 0 [ 591.674412][ T8075] contents: [ 591.699488][ T8166] 0 [ 591.707562][ T8075] 93708188282880 [ 591.717131][ T8166] 0 [ 591.719722][ T8075] 20480 [ 591.723741][ T8166] 0 0 0 0 | 02 02| [ 591.735198][ T8075] 18446603343213248512 [ 591.739764][ T8166] ffff88806630860c 139904166133759 [ 591.746331][ T8075] 0 [ 591.752278][ T8166] ffff88806630840c 139904200589311 [ 591.784869][ T8075] 0 [ 591.792700][ T8166] ffff8880267c3a0c 18446744073709551615 [ 591.796334][ T8075] 0 [ 591.814691][ T8166] 0000000000000000 0 [ 591.832782][ T8075] 0 [ 591.840573][ T8166] 0000000000000000 0 [ 591.858794][ T8075] 0 [ 591.863710][ T8166] 0000000000000000 0 [ 591.870724][ T8075] 0 [ 591.872625][ T8166] 0000000000000000 0 [ 591.875580][ T8075] 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 [ 591.880206][ T8166] 0000000000000000 0 [ 591.883534][ T8075] ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 [ 591.893247][ T8166] 0000000000000000 0 [ 591.917530][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 591.917586][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 [ 591.921012][ T48] Bluetooth: hci6: command 0x0419 tx timeout [ 591.923834][ T8075] 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 [ 591.936778][ T8166] 0000000000000000 [ 591.940158][ T8075] 000000000000000d [ 591.943115][ T8166] 0-139904166133759: [ 591.945601][ T8075] 0-536866815: 0000000000000000 [ 591.945624][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 591.956865][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 591.959901][ T8075] 536870912-553631743: [ 591.962598][ T8166] contents: [ 591.966318][ T8075] ffff88802b7dbd20 [ 591.966331][ T8075] 553631744-553635839: 0000000000000000 [ 591.966353][ T8075] 553635840-553631743: ffff88801cae0e00 [ 591.966374][ T8075] 553631744-553644031: [ 591.969852][ T8166] 0000000000000000 536866815 [ 591.972819][ T8075] ffff88801cae0d20 [ 591.972832][ T8075] 553644032-553648127: ffff888020c88460 [ 591.972855][ T8075] 553648128-553652223: [ 591.984935][ T8166] ffff88807e785620 536870911 [ 591.986190][ T8075] ffff88802b7dbe00 [ 592.005061][ T8166] ffff88807e785700 553631743 [ 592.012310][ T8075] 553652224-116829323263: [ 592.012809][ T8166] 0000000000000000 553635839 [ 592.049078][ T8075] 0000000000000000 [ 592.082977][ T8166] ffff8880770f5c40 553631743 [ 592.105095][ T8075] 116829323264-116833517567: [ 592.112856][ T8166] ffff8880770f5b60 553644031 [ 592.117404][ T8075] ffff88802b7dbee0 [ 592.128362][ T8166] ffff8880226cd1c0 553648127 [ 592.130520][ T8075] 116833517568-93825021800447: [ 592.139837][ T8166] ffff88807e7857e0 553652223 [ 592.140932][ T8075] 0000000000000000 [ 592.145935][ T8166] 0000000000000000 116783185919 [ 592.153810][ T8075] 93825021800448-93825021939711: [ 592.155644][ T8166] ffff88807e7858c0 116789477375 [ 592.163276][ T8075] ffff88808b414000 [ 592.164634][ T8166] 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 [ 592.172790][ T8075] 93825021939712-140322669588479: [ 592.174412][ T8166] ffff88807e785a80 139904166133759 [ 592.181817][ T8075] 0000000000000000 [ 592.183520][ T8166] 0000000000000000 0 [ 592.191246][ T8075] 140322669588480-140322669592575: [ 592.193450][ T8166] 000000000000000d [ 592.203582][ T8075] ffff888075edd7e0 [ 592.211924][ T8166] 0-536866815: [ 592.239842][ T8075] 140322669592576-140322704048127: [ 592.241249][ T8166] 0000000000000000 [ 592.244196][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 592.262611][ T8166] 536866816-536870911: [ 592.266041][ T8075] contents: [ 592.269858][ T8166] ffff88807e785620 [ 592.273615][ T8075] ffff888075edd8c0 140322677981183 [ 592.279509][ T8166] 536870912-553631743: [ 592.290401][ T8075] ffff888075edd9a0 140322680078335 [ 592.290793][ T8166] ffff88807e785700 [ 592.300562][ T8075] ffff888075edd2a0 140322682175487 [ 592.314557][ T8166] 553631744-553635839: [ 592.322703][ T8075] ffff888075edd0e0 140322684272639 [ 592.330007][ T8166] 0000000000000000 [ 592.344046][ T8075] ffff888075edd1c0 140322686369791 [ 592.355020][ T8166] 553635840-553631743: [ 592.364029][ T8075] ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 592.374551][ T8166] ffff8880770f5c40 [ 592.401315][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 592.412793][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 592.416820][ T8166] 553631744-553644031: ffff8880770f5b60 [ 592.420285][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 592.432551][ T8166] 553644032-553648127: [ 592.436426][ T8075] 140322682175488-140322684272639: [ 592.436803][ T8166] ffff8880226cd1c0 [ 592.440990][ T8075] ffff888075edd0e0 [ 592.453100][ T8166] 553648128-553652223: ffff88807e7857e0 [ 592.454535][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 592.461133][ T8166] 553652224-116783185919: [ 592.467651][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 592.473680][ T8166] 0000000000000000 [ 592.481814][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 592.484682][ T8166] 116783185920-116789477375: [ 592.491696][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 592.499058][ T8166] ffff88807e7858c0 [ 592.505131][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 592.513253][ T8166] 116789477376-93825005486079: 0000000000000000 [ 592.520284][ T8075] 140322691776512-140322691780607: [ 592.522263][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 592.522291][ T8166] 93825005625344-139904166129663: [ 592.531369][ T8075] 0000000000000000 [ 592.535938][ T8166] 0000000000000000 [ 592.548208][ T8166] 139904166129664-139904166133759: [ 592.548209][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 592.553809][ T8166] ffff88807e785a80 [ 592.564936][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 592.569335][ T8075] 140322692145152-140322692182015: [ 592.621138][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 592.636672][ T8075] ffff888075eddee0 [ 592.650083][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 592.662668][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 592.668323][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 592.670031][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 592.680164][ T8166] 139904176619520-139904178716671: [ 592.728342][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 592.728376][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 592.728406][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 592.728428][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 592.728450][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 592.728472][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 592.728494][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 592.728517][ T8075] 140730496294912-140730496303103: [ 592.752681][ T8166] ffff88807e785d20 [ 592.790634][ T8075] ffff88807c795c40 [ 592.793534][ T8166] 139904178716672-139904180813823: [ 592.797224][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 592.804486][ T8166] ffff88807e785e00 [ 592.811485][ T8075] Pass: 10377749 Run:10377843 [ 592.820580][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 592.823891][ T8166] 139904180813824-139904182910975: [ 592.830398][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 592.830413][ T8075] Call Trace: [ 592.830420][ T8075] [ 592.830429][ T8075] dump_stack_lvl+0xd1/0x138 [ 592.830466][ T8075] mt_find.cold+0x8b/0x90 [ 592.830497][ T8075] ? mas_find+0x1d0/0x1d0 [ 592.830540][ T8075] find_vma+0x10c/0x1b0 [ 592.830564][ T8075] ? can_vma_merge_before+0x390/0x390 [ 592.844591][ T8166] ffff88807e785ee0 [ 592.846316][ T8075] ? walk_page_test+0x78/0x180 [ 592.846356][ T8075] walk_page_range+0x2b1/0x4a0 [ 592.849647][ T8166] 139904182910976-139904187105279: [ 592.852580][ T8075] ? __walk_page_range+0x780/0x780 [ 592.864852][ T8166] ffff8880770f5000 [ 592.865786][ T8075] mlock_fixup+0x650/0x810 [ 592.869900][ T8166] 139904187105280-139904187252735: [ 592.875259][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 592.875298][ T8075] ? mlock_fixup+0x810/0x810 [ 592.875342][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 592.875377][ T8075] do_mlock+0x25a/0x6d0 [ 592.875413][ T8075] ? folio_evictable+0x270/0x270 [ 592.875456][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 592.875490][ T8075] __x64_sys_mlock+0x59/0x80 [ 592.875527][ T8075] do_syscall_64+0x39/0xb0 [ 592.875563][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 592.875591][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 592.885014][ T8166] ffff8880770f50e0 [ 592.888789][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 592.894397][ T8166] 139904187252736-139904187981823: [ 592.899500][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 592.899527][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 592.899543][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 592.899558][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 592.899572][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.899587][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 592.899623][ T8075] [ 592.920259][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 592.937153][ T8166] ffff8880770f51c0 [ 592.939555][ T8075] BUG at mt_find:6473 (1) [ 592.945444][ T8166] 139904187981824-139904188317695: [ 592.957905][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 592.960283][ T8166] ffff8880770f52a0 [ 592.965561][ T8075] 0-18446744073709551615: [ 592.968345][ T8166] 139904188317696-139904188321791: [ 592.988400][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 593.002523][ T8166] 0000000000000000 [ 593.010368][ T8075] contents: [ 593.043107][ T8166] 139904188321792-139904188686335: [ 593.061218][ T8075] 93708188282880 [ 593.069342][ T8166] ffff8880770f5380 [ 593.074673][ T8075] 20480 [ 593.078233][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 593.087456][ T8075] 18446603343213248512 [ 593.088369][ T8166] 139904188723200-139904188743679: [ 593.103475][ T8075] 0 [ 593.108432][ T8166] 0000000000000000 [ 593.112389][ T8075] 0 [ 593.116075][ T8166] 139904188743680-139904200589311: [ 593.128861][ T8075] 0 [ 593.131142][ T8166] ffff8880770f5540 [ 593.137121][ T8075] 0 [ 593.153539][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 593.164257][ T8075] 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 593.219992][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 593.247484][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: [ 593.248727][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 593.267047][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 593.267101][ T8075] 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 [ 593.274054][ T8166] 139904201334784-140730916691967: [ 593.274060][ T8075] ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 [ 593.286606][ T8166] 0000000000000000 [ 593.303138][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 593.306338][ T8075] ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 [ 593.310233][ T8166] 140730916827136-140730917257215: [ 593.310459][ T8075] 0000000000000000 93825021800447 [ 593.323534][ T8166] 0000000000000000 [ 593.341485][ T8075] ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 593.346758][ T8166] 140730917257216-140730917273599: [ 593.359389][ T8075] 0-536866815: [ 593.363980][ T8166] ffff8880770f5700 [ 593.365791][ T8075] 0000000000000000 [ 593.371767][ T8166] 140730917273600-140730917281791: [ 593.372634][ T8075] 536866816-536870911: [ 593.381793][ T8166] ffff8880770f57e0 [ 593.382134][ T8075] ffff88802b7dbc40 [ 593.388840][ T8166] 140730917281792-18446744073709551615: [ 593.390367][ T8075] 536870912-553631743: [ 593.393960][ T8166] 0000000000000000 [ 593.400302][ T8075] ffff88802b7dbd20 [ 593.412079][ T8166] Pass: 10377749 Run:10377844 [ 593.412096][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 593.417090][ T8075] 553631744-553635839: [ 593.426539][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 593.426559][ T8166] Call Trace: [ 593.426568][ T8166] [ 593.426578][ T8166] dump_stack_lvl+0xd1/0x138 [ 593.426615][ T8166] mt_find.cold+0x8b/0x90 [ 593.426647][ T8166] ? mas_find+0x1d0/0x1d0 [ 593.426686][ T8166] find_vma+0x10c/0x1b0 [ 593.426710][ T8166] ? can_vma_merge_before+0x390/0x390 [ 593.426743][ T8166] walk_page_range+0x184/0x4a0 [ 593.426772][ T8166] ? mlock_page_drain_local+0x250/0x4e0 [ 593.426810][ T8166] ? __walk_page_range+0x780/0x780 [ 593.426860][ T8166] mlock_fixup+0x650/0x810 [ 593.426906][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 593.426946][ T8166] ? mlock_fixup+0x810/0x810 [ 593.426995][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 593.427034][ T8166] do_mlock+0x25a/0x6d0 [ 593.427074][ T8166] ? folio_evictable+0x270/0x270 [ 593.427121][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 593.427154][ T8166] __x64_sys_mlock+0x59/0x80 [ 593.427190][ T8166] do_syscall_64+0x39/0xb0 [ 593.427222][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 593.434414][ T8075] 0000000000000000 [ 593.441750][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 593.441776][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 593.441798][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 593.441822][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 593.445603][ T8075] 553635840-553631743: [ 593.448005][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 593.452578][ T8075] ffff88801cae0e00 [ 593.456883][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 593.456898][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.456912][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 593.456945][ T8166] [ 593.494057][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 593.499273][ T8075] 553631744-553644031: [ 593.500901][ T8166] BUG at mt_find:6473 (1) [ 593.514982][ T8075] ffff88801cae0d20 [ 593.516495][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 593.522045][ T8075] 553644032-553648127: [ 593.527493][ T8166] 0-18446744073709551615: [ 593.540158][ T8075] ffff888020c88460 [ 593.541418][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 593.546246][ T8075] 553648128-553652223: [ 593.573128][ T8166] contents: [ 593.574400][ T8075] ffff88802b7dbe00 [ 593.582264][ T8166] 93708216008704 [ 593.594544][ T8075] 553652224-116829323263: [ 593.622446][ T8166] 20480 [ 593.626493][ T8075] 0000000000000000 [ 593.632962][ T8166] 18446603342792269824 [ 593.646227][ T8075] 116829323264-116833517567: [ 593.653934][ T8166] 0 [ 593.658833][ T8075] ffff88802b7dbee0 [ 593.670344][ T8166] 0 [ 593.674364][ T8075] 116833517568-93825021800447: [ 593.679997][ T8166] 0 [ 593.692965][ T8075] 0000000000000000 [ 593.694552][ T8166] 0 [ 593.697679][ T8075] 93825021800448-93825021939711: [ 593.701135][ T8166] 0 [ 593.705512][ T8075] ffff88808b414000 [ 593.710373][ T8166] 0 [ 593.712797][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 593.712825][ T8075] 140322669588480-140322669592575: [ 593.725613][ T8166] 0 [ 593.729721][ T8075] ffff888075edd7e0 [ 593.739336][ T8166] | 02 02| [ 593.751088][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 593.774418][ T8166] ffff88806630860c 139904166133759 [ 593.826651][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 593.834453][ T8166] ffff88806630840c 139904200589311 [ 593.842998][ T8075] 140322677981184-140322680078335: [ 593.844352][ T8166] ffff8880267c3a0c 18446744073709551615 [ 593.848610][ T8075] ffff888075edd9a0 [ 593.854950][ T8166] 0000000000000000 0 [ 593.859998][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 593.870039][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 593.874650][ T8075] 140322682175488-140322684272639: [ 593.874669][ T8166] 0000000000000000 [ 593.885719][ T8075] ffff888075edd0e0 [ 593.898442][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 593.905738][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 593.962259][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 593.970099][ T8166] 0-536866815: 0000000000000000 [ 593.971207][ T8166] 536866816-536870911: [ 593.976395][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 593.982303][ T8166] ffff88807e785620 [ 593.988478][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 593.992845][ T8166] 536870912-553631743: [ 593.999221][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 594.011231][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 594.011560][ T8166] ffff88807e785700 [ 594.018586][ T8075] 140322691780608-140322692145151: [ 594.021942][ T8166] 553631744-553635839: 0000000000000000 [ 594.021968][ T8166] 553635840-553631743: ffff8880770f5c40 [ 594.027868][ T8075] ffff888075edde00 [ 594.039228][ T8166] 553631744-553644031: [ 594.040985][ T8075] 140322692145152-140322692182015: [ 594.043245][ T8166] ffff8880770f5b60 [ 594.048125][ T8075] ffff888075eddee0 [ 594.061072][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 594.061102][ T8166] 553648128-553652223: ffff88807e7857e0 [ 594.069902][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 594.083182][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 594.090606][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 594.094059][ T8166] 553652224-116783185919: [ 594.141694][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 594.157466][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 594.158574][ T8166] 0000000000000000 [ 594.164483][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 594.176230][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 594.178640][ T8075] 140322704642048-140730494414847: [ 594.182663][ T8166] 116789477376-93825005486079: 0000000000000000 [ 594.182687][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 594.182709][ T8166] 93825005625344-139904166129663: [ 594.189108][ T8075] 0000000000000000 [ 594.201690][ T8166] 0000000000000000 [ 594.202103][ T8075] 140730494414848-140730494550015: [ 594.207288][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 594.207316][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 594.211598][ T8075] ffff88807c795a80 [ 594.214734][ T8166] contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 [ 594.220583][ T8075] 140730494550016-140730496278527: [ 594.234951][ T8166] ffff88807e785e00 139904180813823 [ 594.239082][ T8075] 0000000000000000 [ 594.241783][ T8166] ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 [ 594.254784][ T8075] 140730496278528-140730496294911: [ 594.265343][ T8166] ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 [ 594.276430][ T8075] ffff88807c795b60 [ 594.294242][ T8166] 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 594.300902][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 594.319439][ T8166] 139904166133760-139904174522367: [ 594.326410][ T8075] 140730496303104-18446744073709551615: [ 594.326679][ T8166] ffff88807e785b60 [ 594.335348][ T8075] 0000000000000000 [ 594.337969][ T8166] 139904174522368-139904176619519: [ 594.341628][ T8075] Pass: 10377760 Run:10377856 [ 594.356799][ T8166] ffff88807e785c40 [ 594.357441][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 594.360526][ T8166] 139904176619520-139904178716671: [ 594.370305][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 594.370319][ T8075] Call Trace: [ 594.370326][ T8075] [ 594.370334][ T8075] dump_stack_lvl+0xd1/0x138 [ 594.370372][ T8075] mt_find.cold+0x8b/0x90 [ 594.370404][ T8075] ? mas_find+0x1d0/0x1d0 [ 594.370447][ T8075] find_vma+0x10c/0x1b0 [ 594.370472][ T8075] ? can_vma_merge_before+0x390/0x390 [ 594.370501][ T8075] ? walk_page_test+0x78/0x180 [ 594.370533][ T8075] walk_page_range+0x2b1/0x4a0 [ 594.383470][ T8166] ffff88807e785d20 [ 594.386105][ T8075] ? __walk_page_range+0x780/0x780 [ 594.386156][ T8075] mlock_fixup+0x650/0x810 [ 594.389402][ T8166] 139904178716672-139904180813823: [ 594.392331][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 594.448840][ T8075] ? mlock_fixup+0x810/0x810 [ 594.453466][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 594.459377][ T8075] do_mlock+0x25a/0x6d0 [ 594.463548][ T8075] ? folio_evictable+0x270/0x270 [ 594.468508][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 594.474410][ T8075] __x64_sys_mlock+0x59/0x80 [ 594.479010][ T8075] do_syscall_64+0x39/0xb0 [ 594.483434][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 594.489329][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 594.493742][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 594.513438][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 594.521856][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 594.529826][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 594.537796][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 594.545775][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.553742][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 594.561726][ T8075] [ 594.573744][ T8166] ffff88807e785e00 [ 594.577802][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 594.583823][ T8075] BUG at mt_find:6473 (1) [ 594.583888][ T8166] 139904180813824-139904182910975: [ 594.588621][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 594.592942][ T8166] ffff88807e785ee0 [ 594.594176][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 594.610562][ T8166] 139904182910976-139904187105279: [ 594.644887][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 594.651593][ T8166] ffff8880770f5000 [ 594.702955][ T8075] 0-536866815: 0000000000000000 [ 594.711489][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 594.718007][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 594.723690][ T8166] 139904187105280-139904187252735: [ 594.723923][ T8075] 553631744-553635839: 0000000000000000 [ 594.729608][ T8166] ffff8880770f50e0 [ 594.739346][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 594.743384][ T8075] 553635840-553631743: [ 594.746417][ T8166] 139904187981824-139904188317695: [ 594.746696][ T8075] ffff88801cae0e00 [ 594.750913][ T8166] ffff8880770f52a0 [ 594.757838][ T8075] 553631744-553644031: [ 594.762325][ T8166] 139904188317696-139904188321791: [ 594.764669][ T8075] ffff88801cae0d20 [ 594.769485][ T8166] 0000000000000000 [ 594.782358][ T8075] 553644032-553648127: ffff888020c88460 [ 594.782545][ T8166] 139904188321792-139904188686335: [ 594.788426][ T8075] 553648128-553652223: [ 594.788697][ T8166] ffff8880770f5380 [ 594.793963][ T8075] ffff88802b7dbe00 [ 594.806173][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 594.806203][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 594.806226][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 594.806250][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 [ 594.826122][ T8075] 553652224-116829323263: [ 594.828919][ T8166] ffff8880770f58c0 139904201334783 [ 594.850129][ T8075] 0000000000000000 [ 594.859376][ T8166] 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 594.859526][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 594.859550][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 594.859573][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 594.859595][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 594.859617][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 594.859640][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 594.859661][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 594.859684][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 594.859705][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 594.859728][ T8166] Pass: 10377760 Run:10377857 [ 594.859742][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 594.859767][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 594.859781][ T8166] Call Trace: [ 594.859788][ T8166] [ 594.859797][ T8166] dump_stack_lvl+0xd1/0x138 [ 594.859835][ T8166] mt_find.cold+0x8b/0x90 [ 594.859871][ T8166] ? mas_find+0x1d0/0x1d0 [ 594.859920][ T8166] find_vma+0x10c/0x1b0 [ 594.891933][ T8075] 116829323264-116833517567: [ 594.898159][ T8166] ? can_vma_merge_before+0x390/0x390 [ 594.898198][ T8166] walk_page_range+0x2b1/0x4a0 [ 594.905152][ T8075] ffff88802b7dbee0 [ 594.912043][ T8166] ? mlock_page_drain_local+0x250/0x4e0 [ 594.918973][ T8075] 116833517568-93825021800447: [ 594.925867][ T8166] ? __walk_page_range+0x780/0x780 [ 594.925920][ T8166] mlock_fixup+0x650/0x810 [ 594.925962][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 594.925999][ T8166] ? mlock_fixup+0x810/0x810 [ 594.926047][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 594.926082][ T8166] do_mlock+0x25a/0x6d0 [ 594.926120][ T8166] ? folio_evictable+0x270/0x270 [ 594.926160][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 594.926192][ T8166] __x64_sys_mlock+0x59/0x80 [ 594.926224][ T8166] do_syscall_64+0x39/0xb0 [ 594.926257][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 594.926286][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 594.926306][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 594.926330][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 594.926354][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 594.926372][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 594.926387][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 594.926403][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.926418][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 594.926450][ T8166] [ 594.940916][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 594.962956][ T8075] 0000000000000000 [ 594.975845][ T8166] BUG at mt_find:6473 (1) [ 594.983695][ T8075] 93825021800448-93825021939711: [ 594.990034][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 594.991224][ T8075] ffff88808b414000 [ 594.995912][ T8166] 0-18446744073709551615: [ 595.004196][ T8075] 93825021939712-140322669588479: [ 595.009378][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 595.017740][ T8075] 0000000000000000 [ 595.019683][ T8166] contents: [ 595.022997][ T8075] 140322669588480-140322669592575: [ 595.028838][ T8166] 93708216008704 [ 595.045364][ T8075] ffff888075edd7e0 [ 595.050542][ T8166] 20480 [ 595.053479][ T8075] 140322669592576-140322704048127: [ 595.060116][ T8166] 18446603342792269824 [ 595.075761][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 595.083404][ T8166] 0 [ 595.091053][ T8075] contents: [ 595.102912][ T8166] 0 [ 595.126412][ T8075] ffff888075edd8c0 140322677981183 [ 595.131920][ T8166] 0 [ 595.139733][ T8075] ffff888075edd9a0 140322680078335 [ 595.156401][ T8166] 0 [ 595.164035][ T8075] ffff888075edd2a0 140322682175487 [ 595.177381][ T8166] 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 595.177528][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 [ 595.184053][ T8075] ffff888075edd0e0 140322684272639 [ 595.187828][ T8166] ffff8880770f5b60 553644031 [ 595.215836][ T8075] ffff888075edd1c0 140322686369791 [ 595.218640][ T8166] ffff8880226cd1c0 553648127 [ 595.220778][ T8075] ffff888075edda80 140322690564095 [ 595.223966][ T8166] ffff88807e7857e0 553652223 [ 595.229760][ T8075] ffff888075eddb60 140322690711551 [ 595.242832][ T8166] 0000000000000000 116783185919 [ 595.246836][ T8075] ffff888075eddc40 140322691440639 [ 595.251223][ T8166] ffff88807e7858c0 116789477375 [ 595.258587][ T8075] ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 595.258682][ T8075] 140322669592576-140322677981183: [ 595.272056][ T8166] 0000000000000000 93825005486079 [ 595.272989][ T8075] ffff888075edd8c0 [ 595.279521][ T8166] ffff88807e7859a0 93825005625343 [ 595.280520][ T8075] 140322677981184-140322680078335: [ 595.283003][ T8166] 0000000000000000 139904166129663 [ 595.290619][ T8075] ffff888075edd9a0 [ 595.320019][ T8166] ffff88807e785a80 139904166133759 [ 595.335608][ T8075] 140322680078336-140322682175487: [ 595.374779][ T8166] 0000000000000000 0 [ 595.381951][ T8075] ffff888075edd2a0 [ 595.390196][ T8166] 000000000000000d [ 595.408593][ T8075] 140322682175488-140322684272639: [ 595.421707][ T8166] 0-536866815: [ 595.425515][ T8075] ffff888075edd0e0 [ 595.428373][ T8166] 0000000000000000 [ 595.433836][ T8075] 140322684272640-140322686369791: [ 595.447922][ T8166] 536866816-536870911: [ 595.448501][ T8075] ffff888075edd1c0 [ 595.459677][ T8166] ffff88807e785620 [ 595.461732][ T8075] 140322686369792-140322690564095: [ 595.467276][ T8166] 536870912-553631743: [ 595.470903][ T8075] ffff888075edda80 [ 595.492812][ T8166] ffff88807e785700 [ 595.497749][ T8075] 140322690564096-140322690711551: [ 595.504927][ T8166] 553631744-553635839: [ 595.506862][ T8075] ffff888075eddb60 [ 595.511125][ T8166] 0000000000000000 [ 595.515161][ T8075] 140322690711552-140322691440639: [ 595.525782][ T8166] 553635840-553631743: [ 595.531455][ T8075] ffff888075eddc40 [ 595.543266][ T8166] ffff8880770f5c40 [ 595.547152][ T8075] 140322691440640-140322691776511: [ 595.550102][ T8166] 553631744-553644031: [ 595.553888][ T8075] ffff888075eddd20 [ 595.566991][ T8166] ffff8880770f5b60 [ 595.568137][ T8075] 140322691776512-140322691780607: [ 595.571399][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 595.577952][ T8075] 0000000000000000 [ 595.588699][ T8166] 553648128-553652223: ffff88807e7857e0 [ 595.592881][ T8075] 140322691780608-140322692145151: [ 595.596263][ T8166] 553652224-116783185919: 0000000000000000 [ 595.608512][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 595.614879][ T8075] ffff888075edde00 [ 595.615259][ T8166] 116789477376-93825005486079: [ 595.618647][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 595.623833][ T8166] 0000000000000000 [ 595.634545][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 595.641554][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 595.641999][ T8166] 93825005486080-93825005625343: [ 595.648537][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 595.648755][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 595.648777][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 595.648799][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 595.648826][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 595.648846][ T8075] 140730494414848-140730494550015: [ 595.663676][ T8166] ffff88807e7859a0 [ 595.706027][ T8075] ffff88807c795a80 [ 595.721888][ T8166] 93825005625344-139904166129663: [ 595.729850][ T8075] 140730494550016-140730496278527: [ 595.732600][ T8166] 0000000000000000 [ 595.738676][ T8075] 0000000000000000 [ 595.745811][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 595.745846][ T8166] 139904166133760-139904200589311: [ 595.764917][ T8075] 140730496278528-140730496294911: [ 595.780720][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 595.789104][ T8075] ffff88807c795b60 [ 595.838828][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 595.849482][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 595.856793][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 595.863781][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 595.865263][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 595.870811][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 595.888417][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 595.888501][ T8166] 139904182910976-139904187105279: [ 595.895995][ T8075] Pass: 10377761 Run:10377859 [ 595.900624][ T8166] ffff8880770f5000 [ 595.901542][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 595.906471][ T8166] 139904187105280-139904187252735: [ 595.909901][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 595.919953][ T8166] ffff8880770f50e0 [ 595.925219][ T8075] Call Trace: [ 595.925229][ T8075] [ 595.925239][ T8075] dump_stack_lvl+0xd1/0x138 [ 595.935951][ T8166] 139904187252736-139904187981823: [ 595.940411][ T8075] mt_find.cold+0x8b/0x90 [ 595.943668][ T8166] ffff8880770f51c0 [ 595.946588][ T8075] ? mas_find+0x1d0/0x1d0 [ 595.946634][ T8075] find_vma+0x10c/0x1b0 [ 595.952291][ T8166] 139904187981824-139904188317695: [ 595.956719][ T8075] ? can_vma_merge_before+0x390/0x390 [ 595.956752][ T8075] ? walk_page_test+0x78/0x180 [ 595.956783][ T8075] walk_page_range+0x2b1/0x4a0 [ 595.956816][ T8075] ? __walk_page_range+0x780/0x780 [ 595.956864][ T8075] mlock_fixup+0x650/0x810 [ 595.956911][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 595.956952][ T8075] ? mlock_fixup+0x810/0x810 [ 595.956994][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 595.966879][ T8166] ffff8880770f52a0 [ 595.969311][ T8075] do_mlock+0x25a/0x6d0 [ 595.973455][ T8166] 139904188317696-139904188321791: [ 595.978980][ T8075] ? folio_evictable+0x270/0x270 [ 595.979028][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 595.986066][ T8166] 0000000000000000 [ 595.989111][ T8075] __x64_sys_mlock+0x59/0x80 [ 595.993851][ T8166] 139904188321792-139904188686335: [ 595.998935][ T8075] do_syscall_64+0x39/0xb0 [ 595.998971][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 596.004050][ T8166] ffff8880770f5380 [ 596.008584][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 596.008612][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 596.008631][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 596.008654][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 596.008670][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 596.008684][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 596.008698][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.008713][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 596.008749][ T8075] [ 596.011020][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 596.038987][ T8166] 139904188686336-139904188723199: [ 596.043859][ T8075] BUG at mt_find:6473 (1) [ 596.054368][ T8166] ffff8880770f5460 [ 596.057790][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 596.062472][ T8166] 139904188723200-139904188743679: [ 596.075609][ T8075] 0-18446744073709551615: [ 596.080705][ T8166] 0000000000000000 [ 596.106072][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 596.113526][ T8166] 139904188743680-139904200589311: [ 596.122433][ T8075] contents: [ 596.138878][ T8166] ffff8880770f5540 [ 596.146684][ T8075] 93708188282880 [ 596.159843][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 [ 596.177564][ T8075] 20480 [ 596.193677][ T8166] ffff8880770f5700 140730917273599 [ 596.202661][ T8075] 18446603343213248512 [ 596.204745][ T8166] ffff8880770f57e0 140730917281791 [ 596.208367][ T8075] 0 [ 596.219344][ T8166] 0000000000000000 18446744073709551615 [ 596.254268][ T8075] 0 [ 596.259777][ T8166] 0000000000000000 0 [ 596.263459][ T8075] 0 [ 596.265490][ T8166] 0000000000000000 0 0000000000000000 0 [ 596.273936][ T8075] 0 [ 596.277808][ T8166] 0000000000000000 0 [ 596.280641][ T8075] 0 [ 596.286053][ T8166] 0000000000000000 0 [ 596.296721][ T8075] 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 [ 596.300804][ T8166] 0000000000000000 0 0000000000000008 [ 596.315514][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 596.328680][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 596.332701][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 596.343074][ T8166] 139904201199616-139904201203711: [ 596.392268][ T8075] 0-536866815: [ 596.399917][ T8166] ffff8880770f59a0 [ 596.404292][ T8075] 0000000000000000 [ 596.411669][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 596.413426][ T8075] 536866816-536870911: [ 596.418925][ T8166] 139904201334784-140730916691967: [ 596.423007][ T8075] ffff88802b7dbc40 [ 596.423425][ T8166] 0000000000000000 [ 596.432629][ T8075] 536870912-553631743: [ 596.432735][ T8166] 140730916691968-140730916827135: [ 596.440942][ T8075] ffff88802b7dbd20 [ 596.440976][ T8166] ffff8880770f5620 [ 596.449827][ T8075] 553631744-553635839: [ 596.450765][ T8166] 140730916827136-140730917257215: [ 596.454229][ T8075] 0000000000000000 [ 596.458726][ T8166] 0000000000000000 [ 596.464950][ T8075] 553635840-553631743: [ 596.468016][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 596.480765][ T8075] ffff88801cae0e00 [ 596.483571][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 596.491822][ T8075] 553631744-553644031: [ 596.494449][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 596.500322][ T8075] ffff88801cae0d20 [ 596.508685][ T8166] Pass: 10377761 Run:10377860 [ 596.516509][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 596.521743][ T8075] 553644032-553648127: [ 596.526318][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 596.526333][ T8166] Call Trace: [ 596.526341][ T8166] [ 596.526351][ T8166] dump_stack_lvl+0xd1/0x138 [ 596.526389][ T8166] mt_find.cold+0x8b/0x90 [ 596.530880][ T8075] ffff888020c88460 [ 596.540919][ T8166] ? mas_find+0x1d0/0x1d0 [ 596.540964][ T8166] find_vma+0x10c/0x1b0 [ 596.544206][ T8075] 553648128-553652223: [ 596.547122][ T8166] ? can_vma_merge_before+0x390/0x390 [ 596.547154][ T8166] ? walk_page_test+0x78/0x180 [ 596.551717][ T8075] ffff88802b7dbe00 [ 596.556031][ T8166] walk_page_range+0x2b1/0x4a0 [ 596.559745][ T8075] 553652224-116829323263: [ 596.564076][ T8166] ? __walk_page_range+0x780/0x780 [ 596.568224][ T8075] 0000000000000000 [ 596.572713][ T8166] mlock_fixup+0x650/0x810 [ 596.587287][ T8075] 116829323264-116833517567: [ 596.591260][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 596.596249][ T8075] ffff88802b7dbee0 [ 596.601088][ T8166] ? mlock_fixup+0x810/0x810 [ 596.601137][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 596.601174][ T8166] do_mlock+0x25a/0x6d0 [ 596.601213][ T8166] ? folio_evictable+0x270/0x270 [ 596.601261][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 596.601296][ T8166] __x64_sys_mlock+0x59/0x80 [ 596.601331][ T8166] do_syscall_64+0x39/0xb0 [ 596.601367][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 596.601395][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 596.601416][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 596.601441][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 596.601465][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 596.601482][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 596.601497][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 596.601512][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.601527][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 596.601562][ T8166] [ 596.616315][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 596.632504][ T8075] 116833517568-93825021800447: [ 596.634753][ T8166] BUG at mt_find:6473 (1) [ 596.639309][ T8075] 0000000000000000 [ 596.649206][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 596.650101][ T8075] 93825021800448-93825021939711: [ 596.654293][ T8166] 0-18446744073709551615: [ 596.658904][ T8075] ffff88808b414000 [ 596.672278][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 596.689053][ T8075] 93825021939712-140322669588479: [ 596.706727][ T8166] contents: [ 596.715040][ T8075] 0000000000000000 [ 596.731961][ T8166] 93708216008704 [ 596.748848][ T8075] 140322669588480-140322669592575: [ 596.761517][ T8166] 20480 [ 596.772209][ T8075] ffff888075edd7e0 [ 596.776920][ T8166] 18446603342792269824 [ 596.788954][ T8075] 140322669592576-140322704048127: [ 596.792542][ T8166] 0 [ 596.805522][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 596.805737][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 596.805762][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 596.805784][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 596.805807][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 596.805829][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 596.805852][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 596.805874][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 596.805896][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 596.805920][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 596.805943][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 596.805965][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 596.805987][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 596.806008][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 596.806031][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 596.806054][ T8075] 140322704048128-18446744073709551615: [ 596.811015][ T8166] 0 [ 596.825798][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 596.826866][ T8166] 0 [ 596.832142][ T8075] contents: 0000000000000000 140322704506879 [ 596.834626][ T8166] 0 0 [ 596.888702][ T8075] ffff88807c795380 140322704510975 [ 596.909183][ T8166] 0 [ 596.925423][ T8075] ffff88807c7959a0 140322704642047 [ 596.947247][ T8166] 0 [ 596.950217][ T8075] 0000000000000000 140730494414847 [ 596.957412][ T8166] | 02 02| [ 596.964962][ T8075] ffff88807c795a80 140730494550015 [ 596.971007][ T8166] ffff88806630860c 139904166133759 [ 596.984262][ T8075] 0000000000000000 140730496278527 [ 596.984886][ T8166] ffff88806630840c 139904200589311 [ 596.990592][ T8075] ffff88807c795b60 140730496294911 [ 596.992931][ T8166] ffff8880267c3a0c 18446744073709551615 [ 597.000489][ T8075] ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 597.000585][ T8075] 140322704048128-140322704506879: [ 597.004376][ T8166] 0000000000000000 0 [ 597.025914][ T8075] 0000000000000000 [ 597.025931][ T8075] 140322704506880-140322704510975: [ 597.032099][ T8166] 0000000000000000 0 [ 597.042024][ T8075] ffff88807c795380 [ 597.051720][ T8166] 0000000000000000 0 [ 597.052651][ T8075] 140322704510976-140322704642047: [ 597.057865][ T8166] 0000000000000000 0 [ 597.064914][ T8075] ffff88807c7959a0 [ 597.068943][ T8166] 0000000000000000 0 [ 597.095457][ T8075] 140322704642048-140730494414847: [ 597.100703][ T8166] 0000000000000000 0 [ 597.101802][ T8075] 0000000000000000 [ 597.122986][ T8166] 0000000000000000 [ 597.133165][ T8075] 140730494414848-140730494550015: [ 597.134150][ T8166] 0-139904166133759: [ 597.141090][ T8075] ffff88807c795a80 [ 597.143420][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 597.147497][ T8075] 140730494550016-140730496278527: [ 597.160230][ T8166] contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 [ 597.171980][ T8075] 0000000000000000 [ 597.206783][ T8166] ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 597.206868][ T8166] 0-536866815: 0000000000000000 [ 597.206890][ T8166] 536866816-536870911: ffff88807e785620 [ 597.206913][ T8166] 536870912-553631743: ffff88807e785700 [ 597.206934][ T8166] 553631744-553635839: 0000000000000000 [ 597.206957][ T8166] 553635840-553631743: [ 597.224714][ T8075] 140730496278528-140730496294911: [ 597.232992][ T8166] ffff8880770f5c40 [ 597.245237][ T8075] ffff88807c795b60 [ 597.247277][ T8166] 553631744-553644031: [ 597.253055][ T8075] 140730496294912-140730496303103: [ 597.257516][ T8166] ffff8880770f5b60 [ 597.263018][ T8075] ffff88807c795c40 [ 597.274309][ T8166] 553644032-553648127: [ 597.275382][ T8075] 140730496303104-18446744073709551615: [ 597.281122][ T8166] ffff8880226cd1c0 [ 597.284650][ T8075] 0000000000000000 [ 597.296009][ T8166] 553648128-553652223: [ 597.298934][ T8075] Pass: 10377769 Run:10377869 [ 597.302455][ T8166] ffff88807e7857e0 [ 597.306201][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 597.306227][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 597.306241][ T8075] Call Trace: [ 597.306248][ T8075] [ 597.306257][ T8075] dump_stack_lvl+0xd1/0x138 [ 597.306296][ T8075] mt_find.cold+0x8b/0x90 [ 597.306331][ T8075] ? mas_find+0x1d0/0x1d0 [ 597.320232][ T8166] 553652224-116783185919: [ 597.328992][ T8075] find_vma+0x10c/0x1b0 [ 597.329023][ T8075] ? can_vma_merge_before+0x390/0x390 [ 597.329051][ T8075] ? walk_page_test+0x78/0x180 [ 597.329085][ T8075] walk_page_range+0x2b1/0x4a0 [ 597.329120][ T8075] ? __walk_page_range+0x780/0x780 [ 597.388278][ T8075] mlock_fixup+0x650/0x810 [ 597.392717][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 597.397943][ T8075] ? mlock_fixup+0x810/0x810 [ 597.402726][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 597.408632][ T8075] do_mlock+0x25a/0x6d0 [ 597.412898][ T8075] ? folio_evictable+0x270/0x270 [ 597.417854][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 597.423770][ T8075] __x64_sys_mlock+0x59/0x80 [ 597.428372][ T8075] do_syscall_64+0x39/0xb0 [ 597.432798][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 597.438700][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 597.443118][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 597.462920][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 597.471341][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 597.479312][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 597.487283][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 597.495281][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.503260][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 597.511272][ T8075] [ 597.519131][ T8166] 0000000000000000 [ 597.523698][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 597.530316][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 597.536269][ T8075] BUG at mt_find:6473 (1) [ 597.540615][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 597.550146][ T8166] 116789477376-93825005486079: 0000000000000000 [ 597.551473][ T8075] 0-18446744073709551615: [ 597.557159][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 597.562190][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 597.568683][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 597.610540][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 597.611065][ T8075] 0-140322669592575: [ 597.617935][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 597.625473][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 597.680873][ T8166] 139904166133760-139904174522367: [ 597.731675][ T8075] 0-536866815: [ 597.736406][ T8166] ffff88807e785b60 [ 597.737537][ T8075] 0000000000000000 [ 597.741220][ T8166] 139904174522368-139904176619519: [ 597.744752][ T8075] 536866816-536870911: [ 597.753061][ T8166] ffff88807e785c40 [ 597.754223][ T8075] ffff88802b7dbc40 [ 597.761964][ T8166] 139904176619520-139904178716671: [ 597.762448][ T8075] 536870912-553631743: [ 597.770373][ T8166] ffff88807e785d20 [ 597.771956][ T8075] ffff88802b7dbd20 [ 597.779392][ T8166] 139904178716672-139904180813823: [ 597.780059][ T8075] 553631744-553635839: [ 597.783594][ T8166] ffff88807e785e00 [ 597.789495][ T8075] 0000000000000000 [ 597.801712][ T8075] 553635840-553631743: ffff88801cae0e00 [ 597.807895][ T8075] 553631744-553644031: ffff88801cae0d20 [ 597.808852][ T8166] 139904180813824-139904182910975: [ 597.813797][ T8075] 553644032-553648127: ffff888020c88460 [ 597.822610][ T8166] ffff88807e785ee0 [ 597.825711][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 597.836198][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 597.843180][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 597.844370][ T8075] 553652224-116829323263: [ 597.850357][ T8166] 139904187252736-139904187981823: [ 597.854354][ T8075] 0000000000000000 [ 597.855209][ T8166] ffff8880770f51c0 [ 597.855223][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 597.855249][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 597.865650][ T8075] 116829323264-116833517567: [ 597.868271][ T8166] 139904188321792-139904188686335: [ 597.882823][ T8075] ffff88802b7dbee0 [ 597.887398][ T8166] ffff8880770f5380 [ 597.892863][ T8075] 116833517568-93825021800447: [ 597.896794][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 597.896821][ T8166] 139904188723200-139904188743679: [ 597.904891][ T8075] 0000000000000000 [ 597.919481][ T8166] 0000000000000000 [ 597.926790][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 597.931080][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 597.935492][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 [ 597.940827][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 597.967170][ T8166] ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 [ 597.968287][ T8075] 140322669588480-140322669592575: [ 597.968438][ T8166] ffff8880770f5620 140730916827135 [ 597.976513][ T8075] ffff888075edd7e0 [ 597.989646][ T8166] 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 597.991162][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 598.024923][ T8166] 139904200589312-139904201199615: [ 598.025500][ T8075] contents: [ 598.045460][ T8166] 0000000000000000 [ 598.052540][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 598.052738][ T8075] ffff888075edd8c0 140322677981183 [ 598.059833][ T8166] 139904201203712-139904201334783: [ 598.060881][ T8075] ffff888075edd9a0 140322680078335 [ 598.066373][ T8166] ffff8880770f58c0 [ 598.071955][ T8075] ffff888075edd2a0 140322682175487 [ 598.077539][ T8166] 139904201334784-140730916691967: [ 598.087089][ T8075] ffff888075edd0e0 140322684272639 [ 598.087248][ T8166] 0000000000000000 [ 598.092749][ T8075] ffff888075edd1c0 140322686369791 [ 598.098027][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 598.108996][ T8075] ffff888075edda80 140322690564095 [ 598.114145][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 598.124776][ T8075] ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 [ 598.126650][ T8166] 140730917257216-140730917273599: [ 598.126722][ T8075] 000000000000000d [ 598.164365][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 598.171448][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 598.178668][ T8166] ffff8880770f5700 [ 598.179129][ T8075] 140322680078336-140322682175487: [ 598.182402][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 598.195444][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 598.195513][ T8075] ffff888075edd2a0 [ 598.202848][ T8166] Pass: 10377769 Run:10377870 [ 598.212102][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 598.214300][ T8075] 140322682175488-140322684272639: [ 598.221913][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 598.221927][ T8166] Call Trace: [ 598.221933][ T8166] [ 598.221942][ T8166] dump_stack_lvl+0xd1/0x138 [ 598.221981][ T8166] mt_find.cold+0x8b/0x90 [ 598.227550][ T8075] ffff888075edd0e0 [ 598.237569][ T8166] ? mas_find+0x1d0/0x1d0 [ 598.237613][ T8166] find_vma+0x10c/0x1b0 [ 598.237638][ T8166] ? can_vma_merge_before+0x390/0x390 [ 598.237665][ T8166] ? walk_page_test+0x78/0x180 [ 598.237699][ T8166] walk_page_range+0x2b1/0x4a0 [ 598.237734][ T8166] ? __walk_page_range+0x780/0x780 [ 598.237782][ T8166] mlock_fixup+0x650/0x810 [ 598.237828][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 598.237867][ T8166] ? mlock_fixup+0x810/0x810 [ 598.237917][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 598.237957][ T8166] do_mlock+0x25a/0x6d0 [ 598.237996][ T8166] ? folio_evictable+0x270/0x270 [ 598.238043][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 598.238076][ T8166] __x64_sys_mlock+0x59/0x80 [ 598.238112][ T8166] do_syscall_64+0x39/0xb0 [ 598.238146][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 598.238171][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 598.238192][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 598.238216][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 598.238243][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 598.238261][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 598.238277][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 598.238293][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.238315][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 598.238351][ T8166] [ 598.242234][ T8075] 140322684272640-140322686369791: [ 598.247056][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 598.262118][ T8075] ffff888075edd1c0 [ 598.273600][ T8166] BUG at mt_find:6473 (1) [ 598.277541][ T8075] 140322686369792-140322690564095: [ 598.281653][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 598.286361][ T8075] ffff888075edda80 [ 598.296130][ T8166] 0-18446744073709551615: [ 598.310219][ T8075] 140322690564096-140322690711551: [ 598.333830][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 598.337449][ T8075] ffff888075eddb60 [ 598.342323][ T8166] contents: [ 598.370511][ T8075] 140322690711552-140322691440639: [ 598.386188][ T8166] 93708216008704 [ 598.387649][ T8075] ffff888075eddc40 [ 598.394334][ T8166] 20480 [ 598.402310][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 598.402336][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 598.402357][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 598.402378][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 598.402399][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 598.402418][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 598.402440][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 598.402648][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 598.402670][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 598.402692][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 598.419218][ T8166] 18446603342792269824 [ 598.423644][ T8075] 140322704642048-140730494414847: [ 598.430014][ T8166] 0 [ 598.435145][ T8075] 0000000000000000 [ 598.439675][ T8166] 0 [ 598.464602][ T8075] 140730494414848-140730494550015: [ 598.471445][ T8166] 0 [ 598.474022][ T8075] ffff88807c795a80 [ 598.477538][ T8166] 0 [ 598.485008][ T8075] 140730494550016-140730496278527: [ 598.486738][ T8166] 0 [ 598.490173][ T8075] 0000000000000000 [ 598.493002][ T8166] 0 0 [ 598.506602][ T8075] 140730496278528-140730496294911: [ 598.508395][ T8166] | 02 02| [ 598.513852][ T8075] ffff88807c795b60 [ 598.528767][ T8166] ffff88806630860c 139904166133759 [ 598.536804][ T8075] 140730496294912-140730496303103: [ 598.586544][ T8166] ffff88806630840c 139904200589311 [ 598.618610][ T8075] ffff88807c795c40 [ 598.620326][ T8166] ffff8880267c3a0c 18446744073709551615 [ 598.622756][ T8075] 140730496303104-18446744073709551615: [ 598.625643][ T8166] 0000000000000000 0 [ 598.636519][ T8075] 0000000000000000 [ 598.637592][ T8166] 0000000000000000 0 [ 598.639597][ T8075] Pass: 10377769 Run:10377871 [ 598.645421][ T8166] 0000000000000000 0 [ 598.658567][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 598.660789][ T8166] 0000000000000000 0 [ 598.663880][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 598.667626][ T8166] 0000000000000000 0 [ 598.672750][ T8075] Call Trace: [ 598.672760][ T8075] [ 598.678340][ T8166] 0000000000000000 0 [ 598.683449][ T8075] dump_stack_lvl+0xd1/0x138 [ 598.688346][ T8166] 0000000000000000 [ 598.692759][ T8075] mt_find.cold+0x8b/0x90 [ 598.699046][ T8166] 0-139904166133759: [ 598.702676][ T8075] ? mas_find+0x1d0/0x1d0 [ 598.706725][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 598.710434][ T8075] find_vma+0x10c/0x1b0 [ 598.715352][ T8166] contents: [ 598.719031][ T8075] ? can_vma_merge_before+0x390/0x390 [ 598.730127][ T8166] 0000000000000000 536866815 [ 598.732772][ T8075] ? walk_page_test+0x78/0x180 [ 598.743241][ T8166] ffff88807e785620 536870911 [ 598.746801][ T8075] walk_page_range+0x2b1/0x4a0 [ 598.746844][ T8075] ? __walk_page_range+0x780/0x780 [ 598.746890][ T8075] mlock_fixup+0x650/0x810 [ 598.746935][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 598.751557][ T8166] ffff88807e785700 553631743 [ 598.753121][ T8075] ? mlock_fixup+0x810/0x810 [ 598.757489][ T8166] 0000000000000000 553635839 [ 598.761662][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 598.765646][ T8166] ffff8880770f5c40 553631743 [ 598.769662][ T8075] do_mlock+0x25a/0x6d0 [ 598.773800][ T8166] ffff8880770f5b60 553644031 [ 598.778114][ T8075] ? folio_evictable+0x270/0x270 [ 598.778161][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 598.778194][ T8075] __x64_sys_mlock+0x59/0x80 [ 598.778228][ T8075] do_syscall_64+0x39/0xb0 [ 598.786403][ T8166] ffff8880226cd1c0 553648127 [ 598.789888][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 598.793152][ T8166] ffff88807e7857e0 553652223 [ 598.798499][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 598.798522][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 598.798548][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 598.798573][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 598.803994][ T8166] 0000000000000000 116783185919 [ 598.807960][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 598.807978][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 598.807993][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.808007][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 598.808041][ T8075] [ 598.813380][ T8166] ffff88807e7858c0 116789477375 [ 598.846463][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 598.854345][ T8166] 0000000000000000 93825005486079 [ 598.867488][ T8075] BUG at mt_find:6473 (1) [ 598.867776][ T8166] ffff88807e7859a0 93825005625343 [ 598.872567][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 598.878597][ T8166] 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 598.878649][ T8166] 0-536866815: 0000000000000000 [ 598.878672][ T8166] 536866816-536870911: ffff88807e785620 [ 598.878694][ T8166] 536870912-553631743: [ 598.893832][ T8075] 0-18446744073709551615: [ 598.898939][ T8166] ffff88807e785700 [ 598.904448][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 598.907655][ T8166] 553631744-553635839: [ 598.933783][ T8075] contents: [ 598.935731][ T8166] 0000000000000000 [ 598.935745][ T8166] 553635840-553631743: ffff8880770f5c40 [ 598.935768][ T8166] 553631744-553644031: ffff8880770f5b60 [ 598.935791][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 598.935812][ T8166] 553648128-553652223: ffff88807e7857e0 [ 598.935834][ T8166] 553652224-116783185919: 0000000000000000 [ 598.935856][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 598.935879][ T8166] 116789477376-93825005486079: 0000000000000000 [ 598.935900][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 598.935924][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 598.935946][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 598.947380][ T8075] 93708188282880 [ 598.948901][ T8166] 139904166133760-139904200589311: [ 598.981906][ T8075] 20480 [ 598.987700][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 598.994840][ T8075] 18446603343213248512 [ 598.996223][ T8166] contents: [ 599.000991][ T8075] 0 0 [ 599.005584][ T8166] ffff88807e785b60 139904174522367 [ 599.017451][ T8075] 0 [ 599.019301][ T8166] ffff88807e785c40 139904176619519 [ 599.037268][ T8075] 0 0 0 [ 599.043526][ T8166] ffff88807e785d20 139904178716671 [ 599.061715][ T8075] 0 [ 599.067721][ T8166] ffff88807e785e00 139904180813823 [ 599.071858][ T8075] | 02 02| [ 599.072017][ T8166] ffff88807e785ee0 139904182910975 [ 599.081586][ T8075] ffff88802228180c 140322669592575 [ 599.082137][ T8166] ffff8880770f5000 139904187105279 [ 599.101015][ T8075] ffff88802228160c 140322704048127 [ 599.108424][ T8166] ffff8880770f50e0 139904187252735 [ 599.119597][ T8075] ffff88807a4f6c0c 18446744073709551615 [ 599.133857][ T8166] ffff8880770f51c0 139904187981823 [ 599.150863][ T8075] 0000000000000000 0 [ 599.152645][ T8166] ffff8880770f52a0 139904188317695 [ 599.169538][ T8075] 0000000000000000 0 [ 599.172237][ T8166] 0000000000000000 139904188321791 [ 599.176455][ T8075] 0000000000000000 0 [ 599.185529][ T8166] ffff8880770f5380 139904188686335 [ 599.186945][ T8075] 0000000000000000 0 [ 599.193111][ T8166] ffff8880770f5460 139904188723199 [ 599.194516][ T8075] 0000000000000000 0 [ 599.213625][ T8166] 0000000000000000 139904188743679 [ 599.218668][ T8075] 0000000000000000 0 [ 599.225319][ T8166] ffff8880770f5540 139904200589311 [ 599.240626][ T8075] 0000000000000000 [ 599.240640][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 [ 599.252638][ T8166] 0000000000000000 0 [ 599.259267][ T8075] ffff88802b7dbd20 553631743 0000000000000000 553635839 [ 599.264395][ T8166] 000000000000000d [ 599.280560][ T8075] ffff88801cae0e00 553631743 [ 599.282899][ T8166] 139904166133760-139904174522367: [ 599.299299][ T8075] ffff88801cae0d20 553644031 [ 599.301046][ T8166] ffff88807e785b60 [ 599.323400][ T8075] ffff888020c88460 553648127 [ 599.327637][ T8166] 139904174522368-139904176619519: [ 599.330503][ T8075] ffff88802b7dbe00 553652223 [ 599.336104][ T8166] ffff88807e785c40 [ 599.344853][ T8075] 0000000000000000 116829323263 [ 599.345969][ T8166] 139904176619520-139904178716671: [ 599.349364][ T8075] ffff88802b7dbee0 116833517567 [ 599.354025][ T8166] ffff88807e785d20 [ 599.368135][ T8075] 0000000000000000 93825021800447 [ 599.370503][ T8166] 139904178716672-139904180813823: [ 599.373854][ T8075] ffff88808b414000 93825021939711 [ 599.379637][ T8166] ffff88807e785e00 [ 599.390566][ T8075] 0000000000000000 140322669588479 [ 599.398408][ T8166] 139904180813824-139904182910975: [ 599.412060][ T8075] ffff888075edd7e0 140322669592575 [ 599.413318][ T8166] ffff88807e785ee0 [ 599.418618][ T8075] 0000000000000000 0 000000000000000d [ 599.418644][ T8075] 0-536866815: 0000000000000000 [ 599.418666][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 599.431906][ T8166] 139904182910976-139904187105279: [ 599.433051][ T8075] 536870912-553631743: [ 599.439156][ T8166] ffff8880770f5000 [ 599.444368][ T8075] ffff88802b7dbd20 [ 599.451472][ T8166] 139904187105280-139904187252735: [ 599.461822][ T8075] 553631744-553635839: 0000000000000000 [ 599.468575][ T8166] ffff8880770f50e0 [ 599.478734][ T8075] 553635840-553631743: ffff88801cae0e00 [ 599.478764][ T8075] 553631744-553644031: ffff88801cae0d20 [ 599.491658][ T8075] 553644032-553648127: ffff888020c88460 [ 599.491917][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 599.500051][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 599.512139][ T8075] 553652224-116829323263: 0000000000000000 [ 599.513046][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 599.526321][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 599.526349][ T8075] 116833517568-93825021800447: 0000000000000000 [ 599.526370][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 599.533219][ T8166] 139904188317696-139904188321791: [ 599.546449][ T8075] 93825021939712-140322669588479: [ 599.547473][ T8166] 0000000000000000 [ 599.551995][ T8075] 0000000000000000 [ 599.558451][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 599.568471][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 599.572944][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 599.584634][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 599.588859][ T8166] 139904188723200-139904188743679: [ 599.646103][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 599.651907][ T8166] 0000000000000000 [ 599.659918][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 599.672272][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 599.673925][ T8075] 140322680078336-140322682175487: [ 599.680254][ T8166] 139904200589312-18446744073709551615: [ 599.685344][ T8075] ffff888075edd2a0 [ 599.686189][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 599.699211][ T8075] 140322682175488-140322684272639: [ 599.742131][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 599.742160][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 599.742183][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 599.742205][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 599.742226][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 599.742249][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 599.742270][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 599.742293][ T8166] 140730917273600-140730917281791: [ 599.758053][ T8075] ffff888075edd0e0 [ 599.762804][ T8166] ffff8880770f57e0 [ 599.776771][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 599.776803][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 599.776827][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 599.776850][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 599.776872][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 599.776894][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 599.776916][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 599.787678][ T8166] 140730917281792-18446744073709551615: [ 599.797270][ T8075] 140322692145152-140322692182015: [ 599.797932][ T8166] 0000000000000000 [ 599.803216][ T8075] ffff888075eddee0 [ 599.814541][ T8166] Pass: 10377770 Run:10377873 [ 599.818039][ T8075] 140322692182016-140322692202495: [ 599.832614][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 599.838950][ T8075] 0000000000000000 [ 599.845696][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 599.845711][ T8166] Call Trace: [ 599.845718][ T8166] [ 599.845726][ T8166] dump_stack_lvl+0xd1/0x138 [ 599.852660][ T8075] 140322692202496-140322704048127: [ 599.859578][ T8166] mt_find.cold+0x8b/0x90 [ 599.865574][ T8075] ffff888075edd000 [ 599.871079][ T8166] ? mas_find+0x1d0/0x1d0 [ 599.875456][ T8075] 140322704048128-18446744073709551615: [ 599.878490][ T8166] find_vma+0x10c/0x1b0 [ 599.883125][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 599.888651][ T8166] ? can_vma_merge_before+0x390/0x390 [ 599.888681][ T8166] ? walk_page_test+0x78/0x180 [ 599.888714][ T8166] walk_page_range+0x2b1/0x4a0 [ 599.888748][ T8166] ? __walk_page_range+0x780/0x780 [ 599.888797][ T8166] mlock_fixup+0x650/0x810 [ 599.888850][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 599.888891][ T8166] ? mlock_fixup+0x810/0x810 [ 599.888939][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 599.888978][ T8166] do_mlock+0x25a/0x6d0 [ 599.889018][ T8166] ? folio_evictable+0x270/0x270 [ 599.889061][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 599.902972][ T8075] contents: [ 599.912610][ T8166] __x64_sys_mlock+0x59/0x80 [ 599.912649][ T8166] do_syscall_64+0x39/0xb0 [ 599.912684][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 599.916960][ T8075] 0000000000000000 140322704506879 [ 599.918873][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 599.918898][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 599.923463][ T8075] ffff88807c795380 140322704510975 [ 599.928983][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 599.929008][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 599.929023][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 599.929038][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 599.934356][ T8075] ffff88807c7959a0 140322704642047 [ 599.937059][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.937077][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 599.937112][ T8166] [ 599.959293][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 599.963179][ T8075] 0000000000000000 140730494414847 [ 599.964686][ T8166] BUG at mt_find:6473 (1) [ 599.964702][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 599.964722][ T8166] 0-18446744073709551615: [ 599.973186][ T8075] ffff88807c795a80 140730494550015 [ 599.974395][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 599.986136][ T8075] 0000000000000000 140730496278527 [ 599.990207][ T8166] contents: [ 599.994753][ T8075] ffff88807c795b60 140730496294911 [ 600.000689][ T8166] 93708216008704 20480 [ 600.013302][ T8075] ffff88807c795c40 140730496303103 [ 600.016116][ T8166] 18446603342792269824 [ 600.022795][ T8075] 0000000000000000 18446744073709551615 [ 600.023923][ T8166] 0 [ 600.032883][ T8075] 0000000000000000 0 [ 600.034382][ T8166] 0 [ 600.043086][ T8075] 0000000000000000 0 [ 600.044013][ T8166] 0 [ 600.064009][ T8075] 0000000000000000 0 [ 600.094742][ T8166] 0 [ 600.110817][ T8075] 0000000000000000 0 [ 600.115769][ T8166] 0 0 [ 600.126237][ T8075] 0000000000000000 0 [ 600.127016][ T8166] 0 [ 600.132838][ T8075] 0000000000000000 0 [ 600.138148][ T8166] | 02 02| [ 600.150516][ T8075] 0000000000000008 [ 600.150913][ T8166] ffff88806630860c 139904166133759 [ 600.165220][ T8075] 140322704048128-140322704506879: [ 600.176607][ T8166] ffff88806630840c 139904200589311 [ 600.185995][ T8075] 0000000000000000 [ 600.187676][ T8166] ffff8880267c3a0c 18446744073709551615 [ 600.192744][ T8075] 140322704506880-140322704510975: [ 600.196087][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 600.196162][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 [ 600.223307][ T8075] ffff88807c795380 [ 600.224878][ T8166] ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 600.225014][ T8166] 0-536866815: 0000000000000000 [ 600.225036][ T8166] 536866816-536870911: ffff88807e785620 [ 600.225058][ T8166] 536870912-553631743: ffff88807e785700 [ 600.225080][ T8166] 553631744-553635839: 0000000000000000 [ 600.225101][ T8166] 553635840-553631743: [ 600.231405][ T8075] 140322704510976-140322704642047: [ 600.231714][ T8166] ffff8880770f5c40 [ 600.247170][ T8075] ffff88807c7959a0 [ 600.249640][ T8166] 553631744-553644031: [ 600.254855][ T8075] 140322704642048-140730494414847: [ 600.260098][ T8166] ffff8880770f5b60 [ 600.272713][ T8075] 0000000000000000 [ 600.274929][ T8166] 553644032-553648127: [ 600.280095][ T8075] 140730494414848-140730494550015: [ 600.295992][ T8166] ffff8880226cd1c0 [ 600.323114][ T8075] ffff88807c795a80 [ 600.351327][ T8166] 553648128-553652223: ffff88807e7857e0 [ 600.351357][ T8166] 553652224-116783185919: 0000000000000000 [ 600.351379][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 600.351402][ T8166] 116789477376-93825005486079: 0000000000000000 [ 600.351424][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 600.351446][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 600.351465][ T8166] 139904166129664-139904166133759: [ 600.388909][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 600.388943][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 600.388966][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 600.388989][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 600.389011][ T8075] Pass: 10377806 Run:10377910 [ 600.389025][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 600.395450][ T8166] ffff88807e785a80 [ 600.397219][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 600.402751][ T8166] 139904166133760-139904200589311: [ 600.406447][ T8075] Call Trace: [ 600.406457][ T8075] [ 600.406466][ T8075] dump_stack_lvl+0xd1/0x138 [ 600.406503][ T8075] mt_find.cold+0x8b/0x90 [ 600.406536][ T8075] ? mas_find+0x1d0/0x1d0 [ 600.406579][ T8075] find_vma+0x10c/0x1b0 [ 600.406604][ T8075] ? can_vma_merge_before+0x390/0x390 [ 600.412447][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 600.414797][ T8075] ? walk_page_test+0x78/0x180 [ 600.414834][ T8075] walk_page_range+0x2b1/0x4a0 [ 600.414865][ T8075] ? __walk_page_range+0x780/0x780 [ 600.420866][ T8166] contents: [ 600.424117][ T8075] mlock_fixup+0x650/0x810 [ 600.428075][ T8166] ffff88807e785b60 139904174522367 [ 600.433680][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 600.440073][ T8166] ffff88807e785c40 139904176619519 [ 600.446192][ T8075] ? mlock_fixup+0x810/0x810 [ 600.446243][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 600.453253][ T8166] ffff88807e785d20 139904178716671 [ 600.460620][ T8075] do_mlock+0x25a/0x6d0 [ 600.460661][ T8075] ? folio_evictable+0x270/0x270 [ 600.460705][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 600.460741][ T8075] __x64_sys_mlock+0x59/0x80 [ 600.460777][ T8075] do_syscall_64+0x39/0xb0 [ 600.468169][ T8166] ffff88807e785e00 139904180813823 [ 600.473129][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 600.480471][ T8166] ffff88807e785ee0 139904182910975 [ 600.486951][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 600.486975][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 600.486998][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 600.487023][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 600.487038][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 600.487053][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 600.487069][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.487083][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 600.487118][ T8075] [ 600.506005][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 600.509102][ T8166] ffff8880770f5000 139904187105279 [ 600.524457][ T8075] BUG at mt_find:6473 (1) [ 600.533048][ T8166] ffff8880770f50e0 139904187252735 [ 600.536736][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 600.548021][ T8166] ffff8880770f51c0 139904187981823 [ 600.551935][ T8075] 0-18446744073709551615: [ 600.565004][ T8166] ffff8880770f52a0 139904188317695 [ 600.566458][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 600.575197][ T8166] 0000000000000000 139904188321791 [ 600.583807][ T8075] contents: [ 600.588542][ T8166] ffff8880770f5380 139904188686335 [ 600.594540][ T8075] 93708188282880 [ 600.597157][ T8166] ffff8880770f5460 139904188723199 [ 600.613841][ T8075] 20480 [ 600.617675][ T8166] 0000000000000000 139904188743679 [ 600.629712][ T8075] 18446603343213248512 [ 600.633623][ T8166] ffff8880770f5540 139904200589311 [ 600.645258][ T8075] 0 [ 600.649702][ T8166] 0000000000000000 0 [ 600.652683][ T8075] 0 [ 600.658229][ T8166] 000000000000000d [ 600.671431][ T8075] 0 [ 600.673966][ T8166] 139904166133760-139904174522367: [ 600.702227][ T8075] 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 600.702387][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 600.702597][ T8075] 0-536866815: [ 600.711264][ T8166] ffff88807e785b60 [ 600.734208][ T8075] 0000000000000000 [ 600.737736][ T8166] 139904174522368-139904176619519: [ 600.765701][ T8075] 536866816-536870911: [ 600.770856][ T8166] ffff88807e785c40 [ 600.784902][ T8075] ffff88802b7dbc40 [ 600.813649][ T8166] 139904176619520-139904178716671: [ 600.814420][ T8075] 536870912-553631743: [ 600.818885][ T8166] ffff88807e785d20 [ 600.823249][ T8075] ffff88802b7dbd20 [ 600.834273][ T8166] 139904178716672-139904180813823: [ 600.835692][ T8075] 553631744-553635839: [ 600.840879][ T8166] ffff88807e785e00 [ 600.843387][ T8075] 0000000000000000 [ 600.855052][ T8166] 139904180813824-139904182910975: [ 600.858704][ T8075] 553635840-553631743: [ 600.861929][ T8166] ffff88807e785ee0 [ 600.886124][ T8075] ffff88801cae0e00 [ 600.886139][ T8075] 553631744-553644031: ffff88801cae0d20 [ 600.886164][ T8075] 553644032-553648127: ffff888020c88460 [ 600.963664][ T8166] 139904182910976-139904187105279: [ 600.966634][ T8075] 553648128-553652223: [ 600.974633][ T8166] ffff8880770f5000 [ 600.984876][ T8075] ffff88802b7dbe00 [ 600.992131][ T8166] 139904187105280-139904187252735: [ 600.999582][ T8075] 553652224-116829323263: [ 600.999784][ T8166] ffff8880770f50e0 [ 601.006277][ T8075] 0000000000000000 [ 601.016459][ T8166] 139904187252736-139904187981823: [ 601.021492][ T8075] 116829323264-116833517567: [ 601.024016][ T8166] ffff8880770f51c0 [ 601.030032][ T8075] ffff88802b7dbee0 [ 601.043171][ T8166] 139904187981824-139904188317695: [ 601.044329][ T8075] 116833517568-93825021800447: [ 601.048953][ T8166] ffff8880770f52a0 [ 601.053437][ T8075] 0000000000000000 [ 601.058343][ T8166] 139904188317696-139904188321791: [ 601.076118][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 601.076150][ T8075] 93825021939712-140322669588479: [ 601.083115][ T8166] 0000000000000000 [ 601.083552][ T8075] 0000000000000000 [ 601.089114][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 601.089139][ T8166] 139904188686336-139904188723199: [ 601.113299][ T8075] 140322669588480-140322669592575: [ 601.120639][ T8166] ffff8880770f5460 [ 601.121777][ T8075] ffff888075edd7e0 [ 601.125441][ T8166] 139904188723200-139904188743679: [ 601.133447][ T8075] 140322669592576-140322704048127: [ 601.136243][ T8166] 0000000000000000 [ 601.145021][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 601.147349][ T8166] 139904188743680-139904200589311: [ 601.150871][ T8075] contents: [ 601.154541][ T8166] ffff8880770f5540 [ 601.168446][ T8075] ffff888075edd8c0 140322677981183 [ 601.171331][ T8166] 139904200589312-18446744073709551615: [ 601.181340][ T8075] ffff888075edd9a0 140322680078335 [ 601.182570][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 601.185920][ T8075] ffff888075edd2a0 140322682175487 [ 601.189607][ T8166] contents: [ 601.194675][ T8075] ffff888075edd0e0 140322684272639 [ 601.208674][ T8166] 0000000000000000 139904201199615 [ 601.228078][ T8075] ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 601.242587][ T8166] ffff8880770f59a0 139904201203711 [ 601.269987][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 601.270018][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 601.270041][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 601.270064][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 601.270087][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 601.270109][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 601.270131][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 601.270153][ T8075] 140322690711552-140322691440639: [ 601.284678][ T8166] ffff8880770f58c0 139904201334783 [ 601.289483][ T8075] ffff888075eddc40 [ 601.307580][ T8166] 0000000000000000 140730916691967 [ 601.311216][ T8075] 140322691440640-140322691776511: [ 601.324720][ T8166] ffff8880770f5620 140730916827135 [ 601.329303][ T8075] ffff888075eddd20 [ 601.331689][ T8166] 0000000000000000 140730917257215 [ 601.339261][ T8075] 140322691776512-140322691780607: [ 601.345029][ T8166] ffff8880770f5700 140730917273599 [ 601.356565][ T8075] 0000000000000000 [ 601.356584][ T8075] 140322691780608-140322692145151: [ 601.367331][ T8166] ffff8880770f57e0 140730917281791 [ 601.381126][ T8075] ffff888075edde00 [ 601.390728][ T8166] 0000000000000000 18446744073709551615 [ 601.391379][ T8075] 140322692145152-140322692182015: [ 601.395087][ T8166] 0000000000000000 0 [ 601.405050][ T8075] ffff888075eddee0 [ 601.406382][ T8166] 0000000000000000 0 [ 601.414568][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 601.414599][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 601.414623][ T8075] 140322704048128-18446744073709551615: [ 601.423804][ T8166] 0000000000000000 0 [ 601.426074][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 601.432997][ T8166] 0000000000000000 0 [ 601.451603][ T8075] contents: [ 601.451898][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000008 [ 601.466227][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 601.466797][ T8075] 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 [ 601.473306][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 601.512291][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 601.520047][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 601.520118][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 601.540288][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 601.540319][ T8166] 140730916691968-140730916827135: [ 601.547439][ T8075] 140322704506880-140322704510975: [ 601.549606][ T8166] ffff8880770f5620 [ 601.552982][ T8075] ffff88807c795380 [ 601.563918][ T8166] 140730916827136-140730917257215: [ 601.566301][ T8075] 140322704510976-140322704642047: [ 601.568484][ T8166] 0000000000000000 [ 601.571840][ T8075] ffff88807c7959a0 [ 601.582809][ T8166] 140730917257216-140730917273599: [ 601.587787][ T8075] 140322704642048-140730494414847: [ 601.587857][ T8166] ffff8880770f5700 [ 601.593334][ T8075] 0000000000000000 [ 601.608081][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 601.608511][ T8075] 140730494414848-140730494550015: [ 601.618448][ T8166] 140730917281792-18446744073709551615: [ 601.621564][ T8075] ffff88807c795a80 [ 601.624006][ T8166] 0000000000000000 [ 601.633484][ T8075] 140730494550016-140730496278527: [ 601.634165][ T8166] Pass: 10377806 Run:10377911 [ 601.642208][ T8075] 0000000000000000 [ 601.643404][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 601.648216][ T8075] 140730496278528-140730496294911: [ 601.651634][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 601.661582][ T8075] ffff88807c795b60 [ 601.666933][ T8166] Call Trace: [ 601.666942][ T8166] [ 601.666952][ T8166] dump_stack_lvl+0xd1/0x138 [ 601.677349][ T8075] 140730496294912-140730496303103: [ 601.680734][ T8166] mt_find.cold+0x8b/0x90 [ 601.684004][ T8075] ffff88807c795c40 [ 601.686941][ T8166] ? mas_find+0x1d0/0x1d0 [ 601.686982][ T8166] find_vma+0x10c/0x1b0 [ 601.687007][ T8166] ? can_vma_merge_before+0x390/0x390 [ 601.691826][ T8075] 140730496303104-18446744073709551615: [ 601.697128][ T8166] ? walk_page_test+0x78/0x180 [ 601.697162][ T8166] walk_page_range+0x2b1/0x4a0 [ 601.697195][ T8166] ? __walk_page_range+0x780/0x780 [ 601.697244][ T8166] mlock_fixup+0x650/0x810 [ 601.697291][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 601.697332][ T8166] ? mlock_fixup+0x810/0x810 [ 601.697385][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 601.697424][ T8166] do_mlock+0x25a/0x6d0 [ 601.697463][ T8166] ? folio_evictable+0x270/0x270 [ 601.697511][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 601.697544][ T8166] __x64_sys_mlock+0x59/0x80 [ 601.697575][ T8166] do_syscall_64+0x39/0xb0 [ 601.707342][ T8075] 0000000000000000 [ 601.709918][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.714083][ T8075] Pass: 10377806 Run:10377911 [ 601.719516][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 601.719537][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 601.719557][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 601.719580][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 601.719595][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 601.719610][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 601.719624][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.719637][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 601.719672][ T8166] [ 601.721482][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 601.745351][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 601.745381][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 601.745395][ T8075] Call Trace: [ 601.752181][ T8166] BUG at mt_find:6473 (1) [ 601.755150][ T8075] [ 601.755161][ T8075] dump_stack_lvl+0xd1/0x138 [ 601.755199][ T8075] mt_find.cold+0x8b/0x90 [ 601.755231][ T8075] ? mas_find+0x1d0/0x1d0 [ 601.755273][ T8075] find_vma+0x10c/0x1b0 [ 601.755299][ T8075] ? can_vma_merge_before+0x390/0x390 [ 601.755329][ T8075] ? walk_page_test+0x78/0x180 [ 601.755362][ T8075] walk_page_range+0x2b1/0x4a0 [ 601.755396][ T8075] ? __walk_page_range+0x780/0x780 [ 601.755445][ T8075] mlock_fixup+0x650/0x810 [ 601.761794][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 601.765460][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 601.765500][ T8075] ? mlock_fixup+0x810/0x810 [ 601.765545][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 601.770442][ T8166] 0-18446744073709551615: [ 601.776316][ T8075] do_mlock+0x25a/0x6d0 [ 601.776357][ T8075] ? folio_evictable+0x270/0x270 [ 601.776398][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 601.776431][ T8075] __x64_sys_mlock+0x59/0x80 [ 601.784137][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 601.785385][ T8075] do_syscall_64+0x39/0xb0 [ 601.785421][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 601.785449][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 601.789153][ T8166] contents: 93708216008704 [ 601.795021][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 601.795045][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 601.801671][ T8166] 20480 [ 601.804187][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 601.825710][ T8166] 18446603342792269824 [ 601.832163][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 601.840423][ T8166] 0 [ 601.848076][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 601.848093][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.848108][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 601.848143][ T8075] [ 601.876134][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 601.876153][ T8075] BUG at mt_find:6473 (1) [ 601.876168][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 601.876187][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 601.885962][ T8166] 0 [ 601.909510][ T8075] contents: [ 601.909963][ T8166] 0 [ 601.912590][ T8075] 93708188282880 [ 601.920508][ T8166] 0 [ 601.921751][ T8075] 20480 [ 601.932547][ T8166] 0 [ 601.939691][ T8075] 18446603343213248512 [ 601.941365][ T8166] 0 [ 601.946098][ T8075] 0 [ 601.958874][ T8166] 0 [ 601.966484][ T8075] 0 [ 601.970843][ T8166] | 02 02| [ 601.982728][ T8075] 0 [ 601.986845][ T8166] ffff88806630860c 139904166133759 [ 601.989842][ T8075] 0 [ 601.994646][ T8166] ffff88806630840c 139904200589311 [ 602.000565][ T8075] 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 602.017887][ T8166] ffff8880267c3a0c 18446744073709551615 [ 602.034425][ T8075] 0000000000000000 [ 602.070404][ T8166] 0000000000000000 0 [ 602.074924][ T8075] 0-140322669592575: [ 602.077455][ T8166] 0000000000000000 0 [ 602.086941][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 [ 602.087262][ T8166] 0000000000000000 0 [ 602.102672][ T8075] ffff888075edd7e0 140322669592575 [ 602.104326][ T8166] 0000000000000000 0 [ 602.111273][ T8075] 0000000000000000 0 [ 602.114316][ T8166] 0000000000000000 0 [ 602.128898][ T8075] 000000000000000d [ 602.134557][ T8166] 0000000000000000 0 [ 602.150439][ T8075] 0-536866815: [ 602.151137][ T8166] 0000000000000000 [ 602.154688][ T8075] 0000000000000000 [ 602.159551][ T8166] 0-139904166133759: [ 602.160234][ T8075] 536866816-536870911: [ 602.162565][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 602.166849][ T8075] ffff88802b7dbc40 [ 602.174322][ T8166] contents: [ 602.186106][ T8075] 536870912-553631743: [ 602.202814][ T8166] 0000000000000000 536866815 [ 602.225728][ T8075] ffff88802b7dbd20 [ 602.232623][ T8166] ffff88807e785620 536870911 [ 602.247559][ T8075] 553631744-553635839: [ 602.299858][ T8166] ffff88807e785700 553631743 [ 602.302216][ T8075] 0000000000000000 [ 602.303953][ T8166] 0000000000000000 553635839 ffff8880770f5c40 553631743 [ 602.308148][ T8075] 553635840-553631743: [ 602.324998][ T8166] ffff8880770f5b60 553644031 [ 602.328018][ T8075] ffff88801cae0e00 [ 602.332077][ T8166] ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 [ 602.349743][ T8075] 553631744-553644031: [ 602.352938][ T8166] ffff88807e7858c0 116789477375 [ 602.356821][ T8075] ffff88801cae0d20 [ 602.360279][ T8166] 0000000000000000 93825005486079 [ 602.372777][ T8075] 553644032-553648127: [ 602.374149][ T8166] ffff88807e7859a0 93825005625343 [ 602.378131][ T8075] ffff888020c88460 [ 602.385073][ T8166] 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 602.385121][ T8166] 0-536866815: 0000000000000000 [ 602.385143][ T8166] 536866816-536870911: ffff88807e785620 [ 602.385165][ T8166] 536870912-553631743: ffff88807e785700 [ 602.385187][ T8166] 553631744-553635839: 0000000000000000 [ 602.385208][ T8166] 553635840-553631743: [ 602.398004][ T8075] 553648128-553652223: [ 602.398220][ T8166] ffff8880770f5c40 [ 602.420571][ T8075] ffff88802b7dbe00 [ 602.421589][ T8166] 553631744-553644031: [ 602.442500][ T8075] 553652224-116829323263: [ 602.452450][ T8166] ffff8880770f5b60 [ 602.473671][ T8075] 0000000000000000 [ 602.476744][ T8166] 553644032-553648127: [ 602.488520][ T8075] 116829323264-116833517567: [ 602.492099][ T8166] ffff8880226cd1c0 [ 602.503555][ T8075] ffff88802b7dbee0 [ 602.505277][ T8166] 553648128-553652223: [ 602.510078][ T8075] 116833517568-93825021800447: [ 602.513335][ T8166] ffff88807e7857e0 [ 602.527524][ T8075] 0000000000000000 [ 602.530612][ T8166] 553652224-116783185919: [ 602.543608][ T8075] 93825021800448-93825021939711: [ 602.544913][ T8166] 0000000000000000 [ 602.550471][ T8075] ffff88808b414000 [ 602.553942][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 602.565813][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 602.570200][ T8166] 116789477376-93825005486079: 0000000000000000 [ 602.583399][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 602.591053][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 602.591952][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 602.604614][ T8075] 140322669592576-140322704048127: [ 602.606076][ T8166] 139904166129664-139904166133759: [ 602.607087][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 602.611447][ T8166] ffff88807e785a80 [ 602.623470][ T8075] contents: [ 602.624833][ T8166] 139904166133760-139904200589311: [ 602.629996][ T8075] ffff888075edd8c0 140322677981183 [ 602.631555][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 602.646474][ T8075] ffff888075edd9a0 140322680078335 [ 602.698886][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 602.704932][ T8075] ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 602.711651][ T8166] 139904174522368-139904176619519: [ 602.757182][ T8075] 140322669592576-140322677981183: [ 602.761708][ T8166] ffff88807e785c40 [ 602.762865][ T8075] ffff888075edd8c0 [ 602.770565][ T8166] 139904176619520-139904178716671: [ 602.772257][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 602.782659][ T8166] ffff88807e785d20 [ 602.788620][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 602.793815][ T8166] 139904178716672-139904180813823: [ 602.799321][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 602.799347][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 602.799491][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 602.799516][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 602.799538][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 602.799560][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 602.799583][ T8075] 140322691776512-140322691780607: [ 602.848338][ T8166] ffff88807e785e00 [ 602.849687][ T8075] 0000000000000000 [ 602.853897][ T8166] 139904180813824-139904182910975: [ 602.861341][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 602.861370][ T8075] 140322692145152-140322692182015: [ 602.869231][ T8166] ffff88807e785ee0 [ 602.884481][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 602.888285][ T8075] ffff888075eddee0 [ 602.892944][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 602.910280][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 602.914431][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 602.938637][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 602.940864][ T8166] 139904187981824-139904188317695: [ 602.951491][ T8075] 140322704048128-18446744073709551615: [ 602.957401][ T8166] ffff8880770f52a0 [ 602.968561][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 602.970268][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 602.978427][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 602.992586][ T8075] contents: [ 602.992998][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 602.998772][ T8075] 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 [ 603.003439][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 603.027426][ T8075] ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 603.034829][ T8166] 139904188743680-139904200589311: [ 603.055424][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 603.064534][ T8166] ffff8880770f5540 [ 603.068397][ T8075] 140322704506880-140322704510975: [ 603.071790][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 603.077570][ T8075] ffff88807c795380 [ 603.084987][ T8166] contents: [ 603.088896][ T8075] 140322704510976-140322704642047: [ 603.092301][ T8166] 0000000000000000 139904201199615 [ 603.095858][ T8075] ffff88807c7959a0 [ 603.095871][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 603.095895][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 603.095917][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 603.095939][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 603.095960][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 603.111186][ T8166] ffff8880770f59a0 139904201203711 [ 603.118157][ T8075] 140730496303104-18446744073709551615: [ 603.132385][ T8166] ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 [ 603.148622][ T8075] 0000000000000000 [ 603.153956][ T8166] 0000000000000000 140730917257215 [ 603.163809][ T8075] Pass: 10378741 Run:10378848 [ 603.172985][ T8166] ffff8880770f5700 140730917273599 [ 603.174629][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 603.178857][ T8166] ffff8880770f57e0 140730917281791 [ 603.183483][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 603.188696][ T8166] 0000000000000000 18446744073709551615 [ 603.198433][ T8075] Call Trace: [ 603.198442][ T8075] [ 603.198453][ T8075] dump_stack_lvl+0xd1/0x138 [ 603.203805][ T8166] 0000000000000000 0 [ 603.213929][ T8075] mt_find.cold+0x8b/0x90 [ 603.219607][ T8166] 0000000000000000 0 [ 603.222857][ T8075] ? mas_find+0x1d0/0x1d0 [ 603.228880][ T8166] 0000000000000000 0 [ 603.230356][ T8075] find_vma+0x10c/0x1b0 [ 603.234302][ T8166] 0000000000000000 0 [ 603.238606][ T8075] ? can_vma_merge_before+0x390/0x390 [ 603.238634][ T8075] ? walk_page_test+0x78/0x180 [ 603.242601][ T8166] 0000000000000000 0 [ 603.246911][ T8075] walk_page_range+0x2b1/0x4a0 [ 603.250886][ T8166] 0000000000000000 0 [ 603.255042][ T8075] ? __walk_page_range+0x780/0x780 [ 603.255091][ T8075] mlock_fixup+0x650/0x810 [ 603.255139][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 603.255177][ T8075] ? mlock_fixup+0x810/0x810 [ 603.255220][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 603.255253][ T8075] do_mlock+0x25a/0x6d0 [ 603.255289][ T8075] ? folio_evictable+0x270/0x270 [ 603.255342][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 603.255369][ T8075] __x64_sys_mlock+0x59/0x80 [ 603.255400][ T8075] do_syscall_64+0x39/0xb0 [ 603.255433][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.255457][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 603.255478][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 603.255499][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 603.255523][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 603.255539][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 603.255554][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 603.255569][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.255584][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 603.255619][ T8075] [ 603.274397][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 603.292387][ T8166] 0000000000000008 [ 603.301336][ T8075] BUG at mt_find:6473 (1) [ 603.303156][ T8166] 139904200589312-139904201199615: [ 603.308759][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 603.308783][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: [ 603.317540][ T8166] 0000000000000000 [ 603.321202][ T8075] 93708188282880 [ 603.323739][ T8166] 139904201199616-139904201203711: [ 603.332724][ T8075] 20480 [ 603.333554][ T8166] ffff8880770f59a0 [ 603.342215][ T8075] 18446603343213248512 [ 603.346325][ T8166] 139904201203712-139904201334783: [ 603.383136][ T8075] 0 [ 603.388741][ T8166] ffff8880770f58c0 [ 603.403849][ T8075] 0 [ 603.404655][ T8166] 139904201334784-140730916691967: [ 603.425267][ T8075] 0 0 0 [ 603.430219][ T8166] 0000000000000000 [ 603.453217][ T8075] 0 [ 603.457039][ T8166] 140730916691968-140730916827135: [ 603.458102][ T8075] 0 [ 603.462430][ T8166] ffff8880770f5620 [ 603.477554][ T8075] | 02 02| [ 603.479388][ T8166] 140730916827136-140730917257215: [ 603.484358][ T8075] ffff88802228180c 140322669592575 [ 603.487120][ T8166] 0000000000000000 [ 603.495981][ T8075] ffff88802228160c 140322704048127 [ 603.499911][ T8166] 140730917257216-140730917273599: [ 603.501601][ T8075] ffff88807a4f6c0c 18446744073709551615 [ 603.505596][ T8166] ffff8880770f5700 [ 603.514573][ T8075] 0000000000000000 0 [ 603.520786][ T8166] 140730917273600-140730917281791: [ 603.525180][ T8075] 0000000000000000 0 [ 603.529108][ T8166] ffff8880770f57e0 [ 603.534032][ T8075] 0000000000000000 0 [ 603.538035][ T8166] 140730917281792-18446744073709551615: [ 603.567905][ T8075] 0000000000000000 0 [ 603.571735][ T8166] 0000000000000000 [ 603.572191][ T8075] 0000000000000000 0 [ 603.576760][ T8166] Pass: 10378741 Run:10378849 [ 603.584259][ T8075] 0000000000000000 0 [ 603.586285][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 603.590064][ T8075] 0000000000000000 [ 603.593761][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 603.606788][ T8075] 0-140322669592575: [ 603.616144][ T8166] Call Trace: [ 603.616154][ T8166] [ 603.616163][ T8166] dump_stack_lvl+0xd1/0x138 [ 603.616200][ T8166] mt_find.cold+0x8b/0x90 [ 603.616232][ T8166] ? mas_find+0x1d0/0x1d0 [ 603.616276][ T8166] find_vma+0x10c/0x1b0 [ 603.616301][ T8166] ? can_vma_merge_before+0x390/0x390 [ 603.624892][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 603.630077][ T8166] ? walk_page_test+0x78/0x180 [ 603.634208][ T8075] contents: 0000000000000000 536866815 [ 603.637476][ T8166] walk_page_range+0x2b1/0x4a0 [ 603.637513][ T8166] ? __walk_page_range+0x780/0x780 [ 603.637564][ T8166] mlock_fixup+0x650/0x810 [ 603.647429][ T8075] ffff88802b7dbc40 536870911 [ 603.649393][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 603.653684][ T8075] ffff88802b7dbd20 553631743 [ 603.657820][ T8166] ? mlock_fixup+0x810/0x810 [ 603.657869][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 603.657906][ T8166] do_mlock+0x25a/0x6d0 [ 603.657948][ T8166] ? folio_evictable+0x270/0x270 [ 603.657990][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 603.673180][ T8075] 0000000000000000 553635839 [ 603.675637][ T8166] __x64_sys_mlock+0x59/0x80 [ 603.675679][ T8166] do_syscall_64+0x39/0xb0 [ 603.675715][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 603.756099][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 603.760521][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 603.780131][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 603.788545][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 603.796516][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 603.804484][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 603.812452][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.820421][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 603.829622][ T8166] [ 603.838856][ T8075] ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 603.872606][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 603.873015][ T8075] 0-536866815: 0000000000000000 [ 603.884064][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 603.889353][ T8166] BUG at mt_find:6473 (1) [ 603.890398][ T8075] 536870912-553631743: [ 603.894277][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 603.899118][ T8075] ffff88802b7dbd20 [ 603.911401][ T8075] 553631744-553635839: 0000000000000000 [ 603.914908][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 [ 603.917723][ T8075] 553635840-553631743: [ 603.921417][ T8166] 0 [ 603.932531][ T8075] ffff88801cae0e00 [ 603.944736][ T8166] 0 0 0 0 [ 603.944843][ T8075] 553631744-553644031: ffff88801cae0d20 [ 603.944870][ T8075] 553644032-553648127: ffff888020c88460 [ 603.944890][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 603.944911][ T8075] 553652224-116829323263: 0000000000000000 [ 603.944933][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 603.944955][ T8075] 116833517568-93825021800447: 0000000000000000 [ 603.944978][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 603.945000][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 603.945022][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 603.945045][ T8075] 140322669592576-140322704048127: [ 603.950139][ T8166] 0 [ 603.954123][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 603.967596][ T8166] | 02 02| [ 603.975270][ T8075] contents: [ 603.992687][ T8166] ffff88806630860c 139904166133759 [ 604.000344][ T8075] ffff888075edd8c0 140322677981183 [ 604.023012][ T8166] ffff88806630840c 139904200589311 [ 604.025846][ T8075] ffff888075edd9a0 140322680078335 [ 604.034889][ T8166] ffff8880267c3a0c 18446744073709551615 [ 604.039373][ T8075] ffff888075edd2a0 140322682175487 [ 604.044250][ T8166] 0000000000000000 0 [ 604.050831][ T8075] ffff888075edd0e0 140322684272639 [ 604.064759][ T8166] 0000000000000000 0 [ 604.064837][ T8075] ffff888075edd1c0 140322686369791 [ 604.070017][ T8166] 0000000000000000 0 [ 604.076348][ T8075] ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 604.094361][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 604.115795][ T8075] 140322669592576-140322677981183: [ 604.124076][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 604.129841][ T8075] ffff888075edd8c0 [ 604.129855][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 604.129880][ T8075] 140322680078336-140322682175487: [ 604.145073][ T8166] contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 604.162836][ T8075] ffff888075edd2a0 [ 604.204833][ T8166] 0-536866815: 0000000000000000 [ 604.210902][ T8166] 536866816-536870911: ffff88807e785620 [ 604.214980][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 604.217130][ T8166] 536870912-553631743: ffff88807e785700 [ 604.223918][ T8075] 140322684272640-140322686369791: [ 604.229872][ T8166] 553631744-553635839: 0000000000000000 [ 604.239618][ T8075] ffff888075edd1c0 [ 604.241586][ T8166] 553635840-553631743: ffff8880770f5c40 [ 604.249796][ T8075] 140322686369792-140322690564095: [ 604.251429][ T8166] 553631744-553644031: ffff8880770f5b60 [ 604.260260][ T8075] ffff888075edda80 [ 604.263120][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 604.274186][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 604.275551][ T8166] 553648128-553652223: ffff88807e7857e0 [ 604.288712][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 604.289467][ T8166] 553652224-116783185919: 0000000000000000 [ 604.298523][ T8075] 140322691440640-140322691776511: [ 604.302357][ T8166] 116783185920-116789477375: [ 604.302375][ T8075] ffff888075eddd20 [ 604.310383][ T8166] ffff88807e7858c0 [ 604.315230][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 604.324750][ T8166] 116789477376-93825005486079: [ 604.327610][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 604.333012][ T8166] 0000000000000000 [ 604.339908][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 604.344707][ T8166] 93825005486080-93825005625343: [ 604.350728][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 604.357306][ T8166] ffff88807e7859a0 [ 604.363259][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 604.374655][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 604.376471][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 [ 604.383739][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 604.420924][ T8075] ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 604.433322][ T8166] 139904166133760-139904200589311: [ 604.444614][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 604.451549][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 604.457755][ T8075] 140322704506880-140322704510975: [ 604.462982][ T8166] contents: [ 604.465581][ T8075] ffff88807c795380 [ 604.470901][ T8166] ffff88807e785b60 139904174522367 [ 604.474167][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 604.490612][ T8166] ffff88807e785c40 139904176619519 [ 604.493708][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 604.506042][ T8166] ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 604.509997][ T8075] 140730494414848-140730494550015: [ 604.550778][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 604.556763][ T8075] ffff88807c795a80 [ 604.563627][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 604.574361][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 604.579250][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 604.581379][ T8166] 139904178716672-139904180813823: [ 604.590714][ T8075] 140730496278528-140730496294911: [ 604.591751][ T8166] ffff88807e785e00 [ 604.597927][ T8075] ffff88807c795b60 [ 604.604831][ T8166] 139904180813824-139904182910975: [ 604.606316][ T8075] 140730496294912-140730496303103: [ 604.609397][ T8166] ffff88807e785ee0 [ 604.622126][ T8075] ffff88807c795c40 [ 604.624560][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 604.628360][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 604.642947][ T8075] Pass: 10378743 Run:10378852 [ 604.643775][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 604.647966][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 604.654906][ T8166] 139904187252736-139904187981823: [ 604.664499][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 604.664515][ T8075] Call Trace: [ 604.670071][ T8166] ffff8880770f51c0 [ 604.680069][ T8075] [ 604.680082][ T8075] dump_stack_lvl+0xd1/0x138 [ 604.683357][ T8166] 139904187981824-139904188317695: [ 604.687058][ T8075] mt_find.cold+0x8b/0x90 [ 604.691206][ T8166] ffff8880770f52a0 [ 604.694574][ T8075] ? mas_find+0x1d0/0x1d0 [ 604.700126][ T8166] 139904188317696-139904188321791: [ 604.704425][ T8075] find_vma+0x10c/0x1b0 [ 604.722166][ T8075] ? can_vma_merge_before+0x390/0x390 [ 604.727544][ T8075] ? walk_page_test+0x78/0x180 [ 604.732408][ T8075] walk_page_range+0x2b1/0x4a0 [ 604.737178][ T8075] ? __walk_page_range+0x780/0x780 [ 604.742313][ T8075] mlock_fixup+0x650/0x810 [ 604.746745][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 604.751952][ T8075] ? mlock_fixup+0x810/0x810 [ 604.756564][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 604.762466][ T8075] do_mlock+0x25a/0x6d0 [ 604.766635][ T8075] ? folio_evictable+0x270/0x270 [ 604.771590][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 604.777490][ T8075] __x64_sys_mlock+0x59/0x80 [ 604.782089][ T8075] do_syscall_64+0x39/0xb0 [ 604.787396][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 604.793304][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 604.797727][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 604.817338][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 604.825759][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 604.833726][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 604.841700][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 604.849670][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.857636][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 604.865620][ T8075] [ 604.876702][ T8166] 0000000000000000 [ 604.880470][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 604.880853][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 604.887870][ T8166] 139904188686336-139904188723199: [ 604.895645][ T8075] BUG at mt_find:6473 (1) [ 604.899366][ T8166] ffff8880770f5460 [ 604.901205][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 604.910049][ T8166] 139904188723200-139904188743679: [ 604.917926][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 604.931494][ T8166] 0000000000000000 [ 604.964476][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 604.971729][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 604.972243][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 605.031712][ T8166] 139904200589312-139904201199615: [ 605.077395][ T8075] 0-536866815: 0000000000000000 [ 605.084154][ T8166] 0000000000000000 [ 605.089253][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 605.094383][ T8166] 139904201199616-139904201203711: [ 605.100217][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 605.108236][ T8166] ffff8880770f59a0 [ 605.112087][ T8075] 553631744-553635839: 0000000000000000 [ 605.122264][ T8075] 553635840-553631743: ffff88801cae0e00 [ 605.123276][ T8166] 139904201203712-139904201334783: [ 605.128876][ T8075] 553631744-553644031: [ 605.132994][ T8166] ffff8880770f58c0 [ 605.142850][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 605.147532][ T8075] ffff88801cae0d20 [ 605.149937][ T8166] 140730916691968-140730916827135: [ 605.153515][ T8075] 553644032-553648127: ffff888020c88460 [ 605.159133][ T8166] ffff8880770f5620 [ 605.159146][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 605.159191][ T8166] 140730917257216-140730917273599: [ 605.172539][ T8075] 553648128-553652223: [ 605.175776][ T8166] ffff8880770f5700 [ 605.175790][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 605.175814][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 605.175836][ T8166] Pass: 10378743 Run:10378853 [ 605.175849][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 605.175874][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 605.175887][ T8166] Call Trace: [ 605.175895][ T8166] [ 605.175904][ T8166] dump_stack_lvl+0xd1/0x138 [ 605.182638][ T8075] ffff88802b7dbe00 [ 605.185921][ T8166] mt_find.cold+0x8b/0x90 [ 605.185959][ T8166] ? mas_find+0x1d0/0x1d0 [ 605.190040][ T8075] 553652224-116829323263: [ 605.196780][ T8166] find_vma+0x10c/0x1b0 [ 605.196808][ T8166] ? can_vma_merge_before+0x390/0x390 [ 605.205701][ T8075] 0000000000000000 [ 605.208806][ T8166] ? walk_page_test+0x78/0x180 [ 605.218889][ T8075] 116829323264-116833517567: [ 605.228619][ T8166] walk_page_range+0x2b1/0x4a0 [ 605.228660][ T8166] ? __walk_page_range+0x780/0x780 [ 605.232270][ T8075] ffff88802b7dbee0 [ 605.234857][ T8166] mlock_fixup+0x650/0x810 [ 605.234905][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 605.234944][ T8166] ? mlock_fixup+0x810/0x810 [ 605.234993][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 605.235029][ T8166] do_mlock+0x25a/0x6d0 [ 605.235068][ T8166] ? folio_evictable+0x270/0x270 [ 605.235113][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 605.248163][ T8075] 116833517568-93825021800447: [ 605.252041][ T8166] __x64_sys_mlock+0x59/0x80 [ 605.257053][ T8075] 0000000000000000 [ 605.260919][ T8166] do_syscall_64+0x39/0xb0 [ 605.266608][ T8075] 93825021800448-93825021939711: [ 605.269975][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 605.274716][ T8075] ffff88808b414000 [ 605.279718][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 605.279740][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 605.279763][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 605.393734][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 605.401704][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 605.409674][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 605.417648][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.425617][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 605.433600][ T8166] [ 605.442087][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 605.448116][ T8166] BUG at mt_find:6473 (1) [ 605.452802][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 605.470833][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 605.472495][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 605.516620][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: [ 605.517384][ T8075] 140322669588480-140322669592575: [ 605.517504][ T8166] 0000000000000000 536866815 [ 605.527812][ T8075] ffff888075edd7e0 [ 605.527826][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 605.528047][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 605.528069][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 605.528091][ T8075] 140322680078336-140322682175487: [ 605.545624][ T8166] ffff88807e785620 536870911 [ 605.614884][ T8075] ffff888075edd2a0 [ 605.620323][ T8166] ffff88807e785700 553631743 [ 605.621823][ T8075] 140322682175488-140322684272639: [ 605.625969][ T8166] 0000000000000000 553635839 [ 605.630384][ T8075] ffff888075edd0e0 [ 605.636344][ T8166] ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 605.654931][ T8075] 140322684272640-140322686369791: [ 605.676884][ T8166] 0-536866815: 0000000000000000 [ 605.684641][ T8075] ffff888075edd1c0 [ 605.688096][ T8166] 536866816-536870911: [ 605.691498][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 605.696306][ T8166] ffff88807e785620 [ 605.705916][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 605.707520][ T8166] 536870912-553631743: ffff88807e785700 [ 605.721072][ T8166] 553631744-553635839: 0000000000000000 [ 605.727410][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 605.729400][ T8166] 553635840-553631743: [ 605.734368][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 605.740092][ T8166] ffff8880770f5c40 [ 605.749919][ T8166] 553631744-553644031: ffff8880770f5b60 [ 605.753427][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 605.756169][ T8166] 553644032-553648127: [ 605.762818][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 605.767606][ T8166] ffff8880226cd1c0 [ 605.778526][ T8166] 553648128-553652223: ffff88807e7857e0 [ 605.781881][ T8075] 140322692145152-140322692182015: [ 605.784431][ T8166] 553652224-116783185919: 0000000000000000 [ 605.793611][ T8075] ffff888075eddee0 [ 605.798057][ T8166] 116783185920-116789477375: [ 605.804851][ T8075] 140322692182016-140322692202495: [ 605.807118][ T8166] ffff88807e7858c0 [ 605.813434][ T8075] 0000000000000000 [ 605.816696][ T8166] 116789477376-93825005486079: 0000000000000000 [ 605.830221][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 605.837941][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 605.837968][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 605.837990][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 605.851437][ T8075] 140322704048128-18446744073709551615: [ 605.854284][ T8166] 139904166133760-139904200589311: [ 605.858912][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 [ 605.867215][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 605.870314][ T8075] ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 605.892286][ T8166] contents: [ 605.929910][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 605.937138][ T8166] ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 [ 605.942833][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 605.969919][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 605.977196][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 605.978679][ T8166] ffff8880770f50e0 139904187252735 [ 605.984149][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 605.994837][ T8166] ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 [ 605.996788][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 606.010794][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 606.010818][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 606.010841][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 606.010864][ T8075] Pass: 10380388 Run:10380499 [ 606.010878][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 606.010904][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 606.010918][ T8075] Call Trace: [ 606.010931][ T8075] [ 606.010941][ T8075] dump_stack_lvl+0xd1/0x138 [ 606.010978][ T8075] mt_find.cold+0x8b/0x90 [ 606.011011][ T8075] ? mas_find+0x1d0/0x1d0 [ 606.030636][ T8166] ffff8880770f5460 139904188723199 [ 606.031793][ T8075] find_vma+0x10c/0x1b0 [ 606.039175][ T8166] 0000000000000000 139904188743679 [ 606.043782][ T8075] ? can_vma_merge_before+0x390/0x390 [ 606.054012][ T8166] ffff8880770f5540 139904200589311 [ 606.064041][ T8075] ? walk_page_test+0x78/0x180 [ 606.064084][ T8075] walk_page_range+0x2b1/0x4a0 [ 606.076412][ T8166] 0000000000000000 0 [ 606.079218][ T8075] ? __walk_page_range+0x780/0x780 [ 606.083528][ T8166] 000000000000000d [ 606.088720][ T8075] mlock_fixup+0x650/0x810 [ 606.088766][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 606.093938][ T8166] 139904166133760-139904174522367: [ 606.098076][ T8075] ? mlock_fixup+0x810/0x810 [ 606.098128][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 606.103830][ T8166] ffff88807e785b60 [ 606.108655][ T8075] do_mlock+0x25a/0x6d0 [ 606.108698][ T8075] ? folio_evictable+0x270/0x270 [ 606.113784][ T8166] 139904174522368-139904176619519: [ 606.118188][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 606.118225][ T8075] __x64_sys_mlock+0x59/0x80 [ 606.118258][ T8075] do_syscall_64+0x39/0xb0 [ 606.118293][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.118322][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 606.118344][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 606.118366][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 606.118392][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 606.118409][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 606.118425][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 606.118440][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.118455][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 606.118491][ T8075] [ 606.141008][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 606.146647][ T8166] ffff88807e785c40 [ 606.147890][ T8075] BUG at mt_find:6473 (1) [ 606.154520][ T8166] 139904176619520-139904178716671: [ 606.165371][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 606.177599][ T8166] ffff88807e785d20 [ 606.182576][ T8075] 0-18446744073709551615: [ 606.192701][ T8166] 139904178716672-139904180813823: [ 606.197565][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 606.204141][ T8166] ffff88807e785e00 [ 606.221634][ T8075] contents: [ 606.238993][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 606.239025][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 606.239048][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 606.239070][ T8166] 139904187252736-139904187981823: [ 606.257053][ T8075] 93708188282880 [ 606.282234][ T8166] ffff8880770f51c0 [ 606.287526][ T8075] 20480 [ 606.289699][ T8166] 139904187981824-139904188317695: [ 606.295264][ T8075] 18446603343213248512 [ 606.311165][ T8166] ffff8880770f52a0 [ 606.311996][ T8075] 0 [ 606.317706][ T8166] 139904188317696-139904188321791: [ 606.329885][ T8075] 0 [ 606.333601][ T8166] 0000000000000000 [ 606.344050][ T8075] 0 [ 606.350138][ T8166] 139904188321792-139904188686335: [ 606.353878][ T8075] 0 [ 606.359501][ T8166] ffff8880770f5380 [ 606.372097][ T8075] 0 [ 606.376931][ T8166] 139904188686336-139904188723199: [ 606.379606][ T8075] 0 [ 606.383164][ T8166] ffff8880770f5460 [ 606.393927][ T8075] 0 [ 606.406571][ T8166] 139904188723200-139904188743679: [ 606.414829][ T8075] | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 [ 606.421567][ T8166] 0000000000000000 [ 606.423192][ T8075] 0000000000000000 0 [ 606.430354][ T8166] 139904188743680-139904200589311: [ 606.436142][ T8075] 0000000000000000 0 [ 606.454083][ T8166] ffff8880770f5540 [ 606.456032][ T8075] 0000000000000000 0 [ 606.463621][ T8166] 139904200589312-18446744073709551615: [ 606.465444][ T8075] 0000000000000000 0 0000000000000000 0 [ 606.474590][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 606.488563][ T8075] 0000000000000000 0 0000000000000000 [ 606.497466][ T8166] contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 [ 606.501725][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 606.582847][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 606.584463][ T8075] 0-536866815: [ 606.596146][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 606.604984][ T8075] 0000000000000000 [ 606.610682][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 606.613575][ T8075] 536866816-536870911: [ 606.617844][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 606.624993][ T8075] ffff88802b7dbc40 [ 606.634597][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 606.634662][ T8166] 139904201334784-140730916691967: [ 606.640718][ T8075] 553631744-553635839: 0000000000000000 [ 606.640745][ T8075] 553635840-553631743: ffff88801cae0e00 [ 606.654727][ T8166] 0000000000000000 [ 606.658568][ T8075] 553631744-553644031: ffff88801cae0d20 [ 606.658593][ T8075] 553644032-553648127: ffff888020c88460 [ 606.658616][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 606.658641][ T8075] 553652224-116829323263: 0000000000000000 [ 606.658662][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 606.658683][ T8075] 116833517568-93825021800447: 0000000000000000 [ 606.665993][ T8166] 140730916691968-140730916827135: [ 606.668660][ T8075] 93825021800448-93825021939711: [ 606.674136][ T8166] ffff8880770f5620 [ 606.680063][ T8075] ffff88808b414000 [ 606.680075][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 606.680098][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 606.680121][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 [ 606.694184][ T8166] 140730916827136-140730917257215: [ 606.699729][ T8075] ffff888075edde00 140322692145151 [ 606.712941][ T8166] 0000000000000000 [ 606.715161][ T8075] ffff888075eddee0 140322692182015 [ 606.773924][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 606.773963][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 606.773986][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 606.774010][ T8166] Pass: 10381210 Run:10381322 [ 606.774023][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 606.774048][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 606.774061][ T8166] Call Trace: [ 606.774069][ T8166] [ 606.774078][ T8166] dump_stack_lvl+0xd1/0x138 [ 606.774117][ T8166] mt_find.cold+0x8b/0x90 [ 606.774151][ T8166] ? mas_find+0x1d0/0x1d0 [ 606.774194][ T8166] find_vma+0x10c/0x1b0 [ 606.774218][ T8166] ? can_vma_merge_before+0x390/0x390 [ 606.774248][ T8166] ? walk_page_test+0x78/0x180 [ 606.774281][ T8166] walk_page_range+0x2b1/0x4a0 [ 606.774316][ T8166] ? __walk_page_range+0x780/0x780 [ 606.774364][ T8166] mlock_fixup+0x650/0x810 [ 606.774411][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 606.774450][ T8166] ? mlock_fixup+0x810/0x810 [ 606.774498][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 606.774537][ T8166] do_mlock+0x25a/0x6d0 [ 606.774577][ T8166] ? folio_evictable+0x270/0x270 [ 606.774623][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 606.774657][ T8166] __x64_sys_mlock+0x59/0x80 [ 606.774693][ T8166] do_syscall_64+0x39/0xb0 [ 606.774728][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.774756][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 606.774776][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 606.774801][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 606.774827][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 606.774843][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 606.774859][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 606.774875][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.774890][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 606.774926][ T8166] [ 606.784846][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 606.789420][ T8075] 0000000000000000 140322692202495 [ 606.789495][ T8166] BUG at mt_find:6473 (1) [ 606.794688][ T8075] ffff888075edd000 140322704048127 [ 606.816065][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 606.816090][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: [ 606.822451][ T8075] 0000000000000000 0 [ 606.830741][ T8166] 93708216008704 [ 606.851059][ T8075] 000000000000000d [ 606.852335][ T8166] 20480 [ 606.856973][ T8075] 140322669592576-140322677981183: [ 606.862058][ T8166] 18446603342792269824 [ 606.865500][ T8075] ffff888075edd8c0 [ 606.874819][ T8166] 0 [ 606.875588][ T8075] 140322677981184-140322680078335: [ 606.880051][ T8166] 0 [ 606.885515][ T8075] ffff888075edd9a0 [ 606.885529][ T8075] 140322680078336-140322682175487: [ 606.899877][ T8166] 0 [ 606.906848][ T8075] ffff888075edd2a0 [ 606.912138][ T8166] 0 [ 606.915240][ T8075] 140322682175488-140322684272639: [ 606.924823][ T8166] 0 [ 606.926413][ T8075] ffff888075edd0e0 [ 606.929941][ T8166] 0 [ 606.961088][ T8075] 140322684272640-140322686369791: [ 606.977474][ T8166] 0 [ 607.020918][ T8075] ffff888075edd1c0 [ 607.025959][ T8166] | 02 02| [ 607.028556][ T8075] 140322686369792-140322690564095: [ 607.037608][ T8166] ffff88806630860c 139904166133759 [ 607.043428][ T8075] ffff888075edda80 [ 607.067449][ T8166] ffff88806630840c 139904200589311 [ 607.072518][ T8075] 140322690564096-140322690711551: [ 607.076612][ T8166] ffff8880267c3a0c 18446744073709551615 [ 607.086652][ T8075] ffff888075eddb60 [ 607.088113][ T8166] 0000000000000000 0 [ 607.091580][ T8075] 140322690711552-140322691440639: [ 607.094205][ T8166] 0000000000000000 0 [ 607.104463][ T8075] ffff888075eddc40 [ 607.106063][ T8166] 0000000000000000 0 0000000000000000 0 [ 607.112002][ T8075] 140322691440640-140322691776511: [ 607.114084][ T8166] 0000000000000000 0 [ 607.121190][ T8075] ffff888075eddd20 [ 607.123330][ T8166] 0000000000000000 0 [ 607.134945][ T8075] 140322691776512-140322691780607: [ 607.147783][ T8166] 0000000000000000 [ 607.166424][ T8075] 0000000000000000 [ 607.170254][ T8166] 0-139904166133759: [ 607.172738][ T8075] 140322691780608-140322692145151: [ 607.183422][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 607.186485][ T8075] ffff888075edde00 [ 607.191631][ T8166] contents: [ 607.196420][ T8075] 140322692145152-140322692182015: [ 607.201836][ T8166] 0000000000000000 536866815 [ 607.205705][ T8075] ffff888075eddee0 [ 607.221004][ T8166] ffff88807e785620 536870911 [ 607.222678][ T8075] 140322692182016-140322692202495: [ 607.232268][ T8166] ffff88807e785700 553631743 [ 607.236758][ T8075] 0000000000000000 [ 607.246076][ T8166] 0000000000000000 553635839 [ 607.248364][ T8075] 140322692202496-140322704048127: [ 607.253114][ T8166] ffff8880770f5c40 553631743 [ 607.264144][ T8075] ffff888075edd000 [ 607.267877][ T8166] ffff8880770f5b60 553644031 [ 607.270138][ T8075] 140322704048128-18446744073709551615: [ 607.291191][ T8166] ffff8880226cd1c0 553648127 [ 607.297122][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 607.313598][ T8166] ffff88807e7857e0 553652223 [ 607.318353][ T8075] contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 [ 607.328357][ T8166] 0000000000000000 116783185919 [ 607.330659][ T8075] ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 607.364037][ T8166] ffff88807e7858c0 116789477375 [ 607.382420][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 607.382449][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 607.382472][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 607.382494][ T8075] 140322704642048-140730494414847: [ 607.397100][ T8166] 0000000000000000 93825005486079 [ 607.402398][ T8075] 0000000000000000 [ 607.415842][ T8166] ffff88807e7859a0 93825005625343 [ 607.419863][ T8075] 140730494414848-140730494550015: [ 607.422760][ T8166] 0000000000000000 139904166129663 [ 607.428151][ T8075] ffff88807c795a80 [ 607.442669][ T8166] ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 607.442708][ T8166] 0-536866815: [ 607.451666][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 607.458041][ T8166] 0000000000000000 [ 607.464129][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 607.473423][ T8166] 536866816-536870911: [ 607.476781][ T8075] 140730496294912-140730496303103: [ 607.478262][ T8166] ffff88807e785620 [ 607.481282][ T8075] ffff88807c795c40 [ 607.492597][ T8166] 536870912-553631743: ffff88807e785700 [ 607.494507][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 607.504817][ T8166] 553631744-553635839: 0000000000000000 [ 607.509001][ T8075] Pass: 10381210 Run:10381323 [ 607.514059][ T8166] 553635840-553631743: [ 607.528664][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 607.531507][ T8166] ffff8880770f5c40 [ 607.533197][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 607.543058][ T8166] 553631744-553644031: [ 607.546681][ T8075] Call Trace: [ 607.546690][ T8075] [ 607.546701][ T8075] dump_stack_lvl+0xd1/0x138 [ 607.557986][ T8166] ffff8880770f5b60 [ 607.561224][ T8075] mt_find.cold+0x8b/0x90 [ 607.564489][ T8166] 553644032-553648127: [ 607.567410][ T8075] ? mas_find+0x1d0/0x1d0 [ 607.567454][ T8075] find_vma+0x10c/0x1b0 [ 607.572000][ T8166] ffff8880226cd1c0 [ 607.575697][ T8075] ? can_vma_merge_before+0x390/0x390 [ 607.575729][ T8075] ? walk_page_test+0x78/0x180 [ 607.580028][ T8166] 553648128-553652223: [ 607.584509][ T8075] walk_page_range+0x2b1/0x4a0 [ 607.616098][ T8075] ? __walk_page_range+0x780/0x780 [ 607.621230][ T8075] mlock_fixup+0x650/0x810 [ 607.625665][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 607.630877][ T8075] ? mlock_fixup+0x810/0x810 [ 607.635488][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 607.641390][ T8075] do_mlock+0x25a/0x6d0 [ 607.645572][ T8075] ? folio_evictable+0x270/0x270 [ 607.650526][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 607.656425][ T8075] __x64_sys_mlock+0x59/0x80 [ 607.661023][ T8075] do_syscall_64+0x39/0xb0 [ 607.665449][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 607.671349][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 607.675773][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 607.695468][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 607.703883][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 607.711856][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 607.719825][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 607.727796][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.735772][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 607.743755][ T8075] [ 607.755076][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 607.761943][ T8075] BUG at mt_find:6473 (1) [ 607.766824][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 607.771219][ T8166] ffff88807e7857e0 [ 607.775581][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 607.783392][ T8166] 553652224-116783185919: 0000000000000000 [ 607.822659][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 607.823676][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 607.829466][ T8166] 116789477376-93825005486079: 0000000000000000 [ 607.889103][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 607.891478][ T8075] 0-536866815: [ 607.896148][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 607.900340][ T8075] 0000000000000000 [ 607.907193][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 607.913833][ T8075] 536866816-536870911: [ 607.917823][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 607.918052][ T8166] 139904166133760-139904174522367: [ 607.924954][ T8075] ffff88802b7dbc40 [ 608.000029][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 608.003540][ T8166] ffff88807e785b60 [ 608.010206][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 608.010401][ T8075] 553631744-553635839: [ 608.017408][ T8166] 139904176619520-139904178716671: [ 608.020603][ T8075] 0000000000000000 [ 608.021906][ T8166] ffff88807e785d20 [ 608.031790][ T8075] 553635840-553631743: [ 608.035495][ T8166] 139904178716672-139904180813823: [ 608.038458][ T8075] ffff88801cae0e00 [ 608.039998][ T8166] ffff88807e785e00 [ 608.049901][ T8075] 553631744-553644031: ffff88801cae0d20 [ 608.053229][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 608.062386][ T8075] 553644032-553648127: [ 608.069143][ T8166] 139904182910976-139904187105279: [ 608.072323][ T8075] ffff888020c88460 [ 608.073656][ T8166] ffff8880770f5000 [ 608.091319][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 608.092111][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 608.106494][ T8075] 553652224-116829323263: 0000000000000000 [ 608.113796][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 608.118932][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 608.122295][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 608.127485][ T8075] 116833517568-93825021800447: [ 608.134223][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 608.139513][ T8075] 0000000000000000 [ 608.139525][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 608.139550][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 608.139571][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 608.139595][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 [ 608.154337][ T8166] 139904188321792-139904188686335: [ 608.157482][ T8075] ffff888075edd9a0 140322680078335 [ 608.164622][ T8166] ffff8880770f5380 [ 608.172792][ T8075] ffff888075edd2a0 140322682175487 [ 608.197444][ T8166] 139904188686336-139904188723199: [ 608.198362][ T8075] ffff888075edd0e0 140322684272639 [ 608.201810][ T8166] ffff8880770f5460 [ 608.207058][ T8075] ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 608.261332][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 608.269022][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 608.278130][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 608.282946][ T8075] 140322669592576-140322677981183: [ 608.330797][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 608.337256][ T8075] ffff888075edd8c0 [ 608.343574][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 608.352741][ T8075] 140322677981184-140322680078335: [ 608.354551][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 608.362300][ T8075] ffff888075edd9a0 [ 608.367470][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 608.379512][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 608.380590][ T8166] 140730916691968-140730916827135: [ 608.386611][ T8075] 140322682175488-140322684272639: [ 608.388968][ T8166] ffff8880770f5620 [ 608.392149][ T8075] ffff888075edd0e0 [ 608.403397][ T8166] 140730916827136-140730917257215: [ 608.405397][ T8075] 140322684272640-140322686369791: [ 608.407661][ T8166] 0000000000000000 [ 608.411009][ T8075] ffff888075edd1c0 [ 608.422756][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 608.424188][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 608.433699][ T8166] 140730917273600-140730917281791: [ 608.438139][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 608.438165][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 608.438188][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 608.438211][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 608.438234][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 608.438256][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 608.438278][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 608.438299][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 608.438322][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 [ 608.452388][ T8166] ffff8880770f57e0 [ 608.459240][ T8075] 0000000000000000 140730496278527 [ 608.473779][ T8166] 140730917281792-18446744073709551615: [ 608.481440][ T8075] ffff88807c795b60 140730496294911 [ 608.527892][ T8166] 0000000000000000 [ 608.527909][ T8166] Pass: 10382850 Run:10382964 [ 608.527924][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 608.527949][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 608.527963][ T8166] Call Trace: [ 608.527970][ T8166] [ 608.527980][ T8166] dump_stack_lvl+0xd1/0x138 [ 608.528017][ T8166] mt_find.cold+0x8b/0x90 [ 608.532981][ T8075] ffff88807c795c40 140730496303103 [ 608.536913][ T8166] ? mas_find+0x1d0/0x1d0 [ 608.536960][ T8166] find_vma+0x10c/0x1b0 [ 608.536985][ T8166] ? can_vma_merge_before+0x390/0x390 [ 608.543112][ T8075] 0000000000000000 18446744073709551615 [ 608.548116][ T8166] ? walk_page_test+0x78/0x180 [ 608.548153][ T8166] walk_page_range+0x2b1/0x4a0 [ 608.548186][ T8166] ? __walk_page_range+0x780/0x780 [ 608.552847][ T8075] 0000000000000000 0 [ 608.556577][ T8166] mlock_fixup+0x650/0x810 [ 608.556626][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 608.556665][ T8166] ? mlock_fixup+0x810/0x810 [ 608.575333][ T8075] 0000000000000000 0 [ 608.576684][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 608.581577][ T8075] 0000000000000000 0 [ 608.582863][ T8166] do_mlock+0x25a/0x6d0 [ 608.588371][ T8075] 0000000000000000 0 [ 608.591742][ T8166] ? folio_evictable+0x270/0x270 [ 608.597207][ T8075] 0000000000000000 0 [ 608.601233][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 608.606388][ T8075] 0000000000000000 0 [ 608.611489][ T8166] __x64_sys_mlock+0x59/0x80 [ 608.617358][ T8075] 0000000000000008 [ 608.621833][ T8166] do_syscall_64+0x39/0xb0 [ 608.627283][ T8075] 140322704048128-140322704506879: [ 608.632098][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 608.636972][ T8075] 0000000000000000 [ 608.640465][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 608.646024][ T8075] 140322704506880-140322704510975: [ 608.650214][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 608.654184][ T8075] ffff88807c795380 [ 608.660072][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 608.660102][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 608.660116][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 608.660129][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 608.660143][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.660156][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 608.660191][ T8166] [ 608.665511][ T8075] 140322704510976-140322704642047: [ 608.691023][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 608.694644][ T8075] ffff88807c7959a0 [ 608.697177][ T8166] BUG at mt_find:6473 (1) [ 608.708657][ T8075] 140322704642048-140730494414847: [ 608.710920][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 608.720425][ T8075] 0000000000000000 [ 608.720599][ T8166] 0-18446744073709551615: [ 608.730882][ T8075] 140730494414848-140730494550015: [ 608.732419][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 608.759399][ T8075] ffff88807c795a80 [ 608.764588][ T8166] contents: [ 608.774357][ T8075] 140730494550016-140730496278527: [ 608.782664][ T8166] 93708216008704 [ 608.820418][ T8075] 0000000000000000 [ 608.820437][ T8075] 140730496278528-140730496294911: [ 608.824981][ T8166] 20480 [ 608.828615][ T8075] ffff88807c795b60 [ 608.843633][ T8166] 18446603342792269824 [ 608.844329][ T8075] 140730496294912-140730496303103: [ 608.848439][ T8166] 0 [ 608.852561][ T8075] ffff88807c795c40 [ 608.864980][ T8166] 0 [ 608.865789][ T8075] 140730496303104-18446744073709551615: [ 608.869388][ T8166] 0 [ 608.872654][ T8075] 0000000000000000 [ 608.881166][ T8166] 0 [ 608.890208][ T8075] Pass: 10382850 Run:10382965 [ 608.894877][ T8166] 0 [ 608.902015][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 608.902076][ T8166] 0 [ 608.907600][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 608.907614][ T8075] Call Trace: [ 608.907621][ T8075] [ 608.907631][ T8075] dump_stack_lvl+0xd1/0x138 [ 608.911513][ T8166] 0 [ 608.913851][ T8075] mt_find.cold+0x8b/0x90 [ 608.916618][ T8166] | 02 02| [ 608.922325][ T8075] ? mas_find+0x1d0/0x1d0 [ 608.922370][ T8075] find_vma+0x10c/0x1b0 [ 608.925176][ T8166] ffff88806630860c 139904166133759 [ 608.928528][ T8075] ? can_vma_merge_before+0x390/0x390 [ 608.931009][ T8166] ffff88806630840c 139904200589311 [ 608.935667][ T8075] ? walk_page_test+0x78/0x180 [ 608.935702][ T8075] walk_page_range+0x2b1/0x4a0 [ 608.938758][ T8166] ffff8880267c3a0c 18446744073709551615 [ 608.947968][ T8075] ? __walk_page_range+0x780/0x780 [ 608.948018][ T8075] mlock_fixup+0x650/0x810 [ 608.950851][ T8166] 0000000000000000 0 [ 608.960532][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 608.960574][ T8075] ? mlock_fixup+0x810/0x810 [ 608.960621][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 608.960657][ T8075] do_mlock+0x25a/0x6d0 [ 608.960694][ T8075] ? folio_evictable+0x270/0x270 [ 608.960738][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 608.960771][ T8075] __x64_sys_mlock+0x59/0x80 [ 608.960804][ T8075] do_syscall_64+0x39/0xb0 [ 608.965204][ T8166] 0000000000000000 0 [ 608.967012][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 608.971580][ T8166] 0000000000000000 0 [ 608.974069][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 608.978762][ T8166] 0000000000000000 0 [ 608.981466][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 608.986106][ T8166] 0000000000000000 0 [ 608.990078][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 608.990105][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 608.990120][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 608.990134][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 608.990148][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.990162][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 608.990196][ T8075] [ 609.008742][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 609.024394][ T8166] 0000000000000000 0 [ 609.045297][ T8075] BUG at mt_find:6473 (1) [ 609.053402][ T8166] 0000000000000000 [ 609.074481][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 609.083583][ T8166] 0-139904166133759: [ 609.085721][ T8075] 0-18446744073709551615: [ 609.089829][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 609.095055][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 609.108258][ T8166] contents: [ 609.152204][ T8075] contents: [ 609.157640][ T8166] 0000000000000000 536866815 [ 609.163750][ T8075] 93708188282880 [ 609.179131][ T8166] ffff88807e785620 536870911 [ 609.180584][ T8075] 20480 [ 609.184411][ T8166] ffff88807e785700 553631743 [ 609.188822][ T8075] 18446603343213248512 [ 609.201215][ T8166] 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 609.201372][ T8166] 0-536866815: 0000000000000000 [ 609.201395][ T8166] 536866816-536870911: ffff88807e785620 [ 609.201416][ T8166] 536870912-553631743: ffff88807e785700 [ 609.201438][ T8166] 553631744-553635839: 0000000000000000 [ 609.201460][ T8166] 553635840-553631743: ffff8880770f5c40 [ 609.201480][ T8166] 553631744-553644031: ffff8880770f5b60 [ 609.201502][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 609.201523][ T8166] 553648128-553652223: ffff88807e7857e0 [ 609.201546][ T8166] 553652224-116783185919: 0000000000000000 [ 609.201567][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 609.201590][ T8166] 116789477376-93825005486079: 0000000000000000 [ 609.201611][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 609.201634][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 609.201656][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 609.201679][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 609.203243][ T8075] 0 [ 609.213937][ T8166] contents: [ 609.219345][ T8075] 0 [ 609.225870][ T8166] ffff88807e785b60 139904174522367 [ 609.228994][ T8075] 0 [ 609.232220][ T8166] ffff88807e785c40 139904176619519 [ 609.238114][ T8075] 0 [ 609.244938][ T8166] ffff88807e785d20 139904178716671 [ 609.252858][ T8075] 0 [ 609.263539][ T8166] ffff88807e785e00 139904180813823 [ 609.301960][ T8075] 0 [ 609.310638][ T8166] ffff88807e785ee0 139904182910975 [ 609.322661][ T8075] 0 [ 609.326637][ T8166] ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 [ 609.333872][ T8075] | 02 02| [ 609.339663][ T8166] ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 609.354347][ T8075] ffff88802228180c 140322669592575 [ 609.360162][ T8166] 139904166133760-139904174522367: [ 609.378084][ T8075] ffff88802228160c 140322704048127 [ 609.380319][ T8166] ffff88807e785b60 [ 609.394771][ T8075] ffff88807a4f6c0c 18446744073709551615 [ 609.405651][ T8166] 139904174522368-139904176619519: [ 609.411391][ T8075] 0000000000000000 0 [ 609.412259][ T8166] ffff88807e785c40 [ 609.414724][ T8075] 0000000000000000 0 [ 609.427976][ T8166] 139904176619520-139904178716671: [ 609.438294][ T8075] 0000000000000000 0 [ 609.455389][ T8166] ffff88807e785d20 [ 609.467382][ T8075] 0000000000000000 0 [ 609.484876][ T8166] 139904178716672-139904180813823: [ 609.489587][ T8075] 0000000000000000 0 [ 609.491403][ T8166] ffff88807e785e00 [ 609.496049][ T8075] 0000000000000000 0 [ 609.508062][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 609.508094][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 609.508116][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 609.508138][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 609.508159][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 609.511383][ T8166] 139904188317696-139904188321791: [ 609.512551][ T8075] 0000000000000000 [ 609.516442][ T8166] 0000000000000000 [ 609.524397][ T8075] 0-140322669592575: [ 609.528007][ T8166] 139904188321792-139904188686335: [ 609.533457][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 609.537407][ T8166] ffff8880770f5380 [ 609.550792][ T8075] contents: [ 609.554884][ T8166] 139904188686336-139904188723199: [ 609.561815][ T8075] 0000000000000000 536866815 [ 609.576105][ T8166] ffff8880770f5460 [ 609.583857][ T8075] ffff88802b7dbc40 536870911 [ 609.590725][ T8166] 139904188723200-139904188743679: [ 609.624856][ T8075] ffff88802b7dbd20 553631743 [ 609.625671][ T8166] 0000000000000000 [ 609.628730][ T8075] 0000000000000000 553635839 [ 609.634341][ T8166] 139904188743680-139904200589311: [ 609.646428][ T8075] ffff88801cae0e00 553631743 [ 609.649932][ T8166] ffff8880770f5540 [ 609.652949][ T8075] ffff88801cae0d20 553644031 [ 609.657682][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 609.668616][ T8075] ffff888020c88460 553648127 [ 609.671914][ T8166] contents: [ 609.676666][ T8075] ffff88802b7dbe00 553652223 [ 609.684995][ T8166] 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 609.685176][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 609.685199][ T8166] 139904201199616-139904201203711: [ 609.697608][ T8075] 0000000000000000 116829323263 [ 609.709701][ T8166] ffff8880770f59a0 [ 609.709720][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 609.709747][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 609.709769][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 609.709790][ T8166] 140730916827136-140730917257215: [ 609.778212][ T8075] ffff88802b7dbee0 116833517567 [ 609.780870][ T8166] 0000000000000000 [ 609.790626][ T8075] 0000000000000000 93825021800447 [ 609.792916][ T8166] 140730917257216-140730917273599: [ 609.799973][ T8075] ffff88808b414000 93825021939711 [ 609.803241][ T8166] ffff8880770f5700 [ 609.814486][ T8075] 0000000000000000 140322669588479 [ 609.818272][ T8166] 140730917273600-140730917281791: [ 609.824973][ T8075] ffff888075edd7e0 140322669592575 [ 609.826967][ T8166] ffff8880770f57e0 [ 609.831837][ T8075] 0000000000000000 0 [ 609.837698][ T8166] 140730917281792-18446744073709551615: [ 609.852942][ T8075] 000000000000000d [ 609.858671][ T8166] 0000000000000000 [ 609.859396][ T8075] 0-536866815: [ 609.862648][ T8166] Pass: 10383013 Run:10383129 [ 609.866638][ T8075] 0000000000000000 [ 609.875039][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 609.888592][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 609.898909][ T8166] Call Trace: [ 609.902185][ T8166] [ 609.905114][ T8166] dump_stack_lvl+0xd1/0x138 [ 609.909725][ T8166] mt_find.cold+0x8b/0x90 [ 609.914076][ T8166] ? mas_find+0x1d0/0x1d0 [ 609.918430][ T8166] find_vma+0x10c/0x1b0 [ 609.922589][ T8166] ? can_vma_merge_before+0x390/0x390 [ 609.927966][ T8166] ? walk_page_test+0x78/0x180 [ 609.932738][ T8166] walk_page_range+0x2b1/0x4a0 [ 609.937512][ T8166] ? __walk_page_range+0x780/0x780 [ 609.942640][ T8166] mlock_fixup+0x650/0x810 [ 609.947077][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 609.952285][ T8166] ? mlock_fixup+0x810/0x810 [ 609.956896][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 609.962798][ T8166] do_mlock+0x25a/0x6d0 [ 609.966966][ T8166] ? folio_evictable+0x270/0x270 [ 609.971919][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 609.977817][ T8166] __x64_sys_mlock+0x59/0x80 [ 609.982418][ T8166] do_syscall_64+0x39/0xb0 [ 609.986844][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 609.992738][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 609.997154][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 610.016853][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 610.025266][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 610.033233][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 610.041201][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 610.049168][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.057139][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 610.065209][ T8166] [ 610.077309][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 610.083257][ T8166] BUG at mt_find:6473 (1) [ 610.084000][ T8075] 536866816-536870911: [ 610.088008][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 610.088815][ T8075] ffff88802b7dbc40 [ 610.092515][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 610.108635][ T8075] 536870912-553631743: [ 610.142946][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 610.161349][ T8075] ffff88802b7dbd20 [ 610.203149][ T8075] 553631744-553635839: 0000000000000000 [ 610.207998][ T8166] 0-536866815: 0000000000000000 [ 610.209261][ T8075] 553635840-553631743: ffff88801cae0e00 [ 610.214490][ T8166] 536866816-536870911: ffff88807e785620 [ 610.228810][ T8166] 536870912-553631743: ffff88807e785700 [ 610.229090][ T8075] 553631744-553644031: [ 610.234715][ T8166] 553631744-553635839: 0000000000000000 [ 610.243578][ T8075] ffff88801cae0d20 [ 610.245715][ T8166] 553635840-553631743: ffff8880770f5c40 [ 610.253616][ T8075] 553644032-553648127: ffff888020c88460 [ 610.258512][ T8166] 553631744-553644031: ffff8880770f5b60 [ 610.261209][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 610.271486][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 610.273155][ T8075] 553652224-116829323263: 0000000000000000 [ 610.279134][ T8166] 553648128-553652223: [ 610.285320][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 610.285346][ T8075] 116833517568-93825021800447: 0000000000000000 [ 610.298024][ T8166] ffff88807e7857e0 [ 610.303012][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 610.314739][ T8166] 553652224-116783185919: 0000000000000000 [ 610.317425][ T8075] 93825021939712-140322669588479: [ 610.322654][ T8166] 116783185920-116789477375: [ 610.324127][ T8075] 0000000000000000 [ 610.333773][ T8166] ffff88807e7858c0 [ 610.339324][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 610.340814][ T8166] 116789477376-93825005486079: 0000000000000000 [ 610.347776][ T8075] 140322669592576-140322704048127: [ 610.354282][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 610.359814][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 610.374447][ T8166] 93825005625344-139904166129663: [ 610.421239][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 610.435490][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 610.435643][ T8166] 0000000000000000 [ 610.442681][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 610.453725][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 610.455000][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 610.461068][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 610.474637][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 610.475236][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 610.481992][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 610.546957][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 610.553937][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 610.553995][ T8166] 139904166133760-139904174522367: [ 610.561461][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 610.568068][ T8166] ffff88807e785b60 [ 610.574493][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 610.584846][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 610.585899][ T8075] 140322692145152-140322692182015: [ 610.592541][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 610.598381][ T8075] ffff888075eddee0 [ 610.609239][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 610.612710][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 610.616495][ T8075] 140322692202496-140322704048127: [ 610.623199][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 610.629926][ T8075] ffff888075edd000 [ 610.646333][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 610.649922][ T8075] 140322704048128-18446744073709551615: [ 610.653294][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 610.659465][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 610.713856][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 610.720432][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 610.725549][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 610.736941][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 610.738060][ T8075] 140322704510976-140322704642047: [ 610.743906][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 610.756670][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 610.763641][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 610.770767][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 610.771603][ T8075] ffff88807c7959a0 [ 610.779981][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 610.788642][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 610.798366][ T8075] 140322704642048-140730494414847: [ 610.839524][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 610.848276][ T8075] 0000000000000000 [ 610.852320][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 610.859361][ T8075] 140730494414848-140730494550015: [ 610.863319][ T8166] 139904201203712-139904201334783: [ 610.863336][ T8075] ffff88807c795a80 [ 610.869416][ T8166] ffff8880770f58c0 [ 610.878517][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 610.878547][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 610.878621][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 610.878667][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 610.882963][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 610.921236][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 610.926010][ T8075] Pass: 10383014 Run:10383131 [ 610.928516][ T8166] 140730916827136-140730917257215: [ 610.932851][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 610.932879][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 610.939372][ T8166] 0000000000000000 [ 610.948168][ T8075] Call Trace: [ 610.948178][ T8075] [ 610.948188][ T8075] dump_stack_lvl+0xd1/0x138 [ 610.958626][ T8166] 140730917257216-140730917273599: [ 610.961949][ T8075] mt_find.cold+0x8b/0x90 [ 610.965453][ T8166] ffff8880770f5700 [ 610.968132][ T8075] ? mas_find+0x1d0/0x1d0 [ 610.972692][ T8166] 140730917273600-140730917281791: [ 610.978232][ T8075] find_vma+0x10c/0x1b0 [ 610.978259][ T8075] ? can_vma_merge_before+0x390/0x390 [ 610.978287][ T8075] ? walk_page_test+0x78/0x180 [ 610.978326][ T8075] walk_page_range+0x2b1/0x4a0 [ 610.983436][ T8166] ffff8880770f57e0 [ 610.986350][ T8075] ? __walk_page_range+0x780/0x780 [ 610.986401][ T8075] mlock_fixup+0x650/0x810 [ 610.991056][ T8166] 140730917281792-18446744073709551615: [ 610.996222][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 611.000622][ T8166] 0000000000000000 [ 611.005730][ T8075] ? mlock_fixup+0x810/0x810 [ 611.005780][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 611.010852][ T8166] Pass: 10383014 Run:10383131 [ 611.015248][ T8075] do_mlock+0x25a/0x6d0 [ 611.015290][ T8075] ? folio_evictable+0x270/0x270 [ 611.069101][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 611.075017][ T8075] __x64_sys_mlock+0x59/0x80 [ 611.079634][ T8075] do_syscall_64+0x39/0xb0 [ 611.084062][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.089959][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 611.094375][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 611.113982][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 611.122397][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 611.130370][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 611.138342][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 611.146315][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.154289][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 611.162277][ T8075] [ 611.165295][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 611.175119][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 611.185171][ T8166] Call Trace: [ 611.188448][ T8166] [ 611.191376][ T8166] dump_stack_lvl+0xd1/0x138 [ 611.195983][ T8166] mt_find.cold+0x8b/0x90 [ 611.200324][ T8166] ? mas_find+0x1d0/0x1d0 [ 611.204672][ T8166] find_vma+0x10c/0x1b0 [ 611.208835][ T8166] ? can_vma_merge_before+0x390/0x390 [ 611.214208][ T8166] ? walk_page_test+0x78/0x180 [ 611.218979][ T8166] walk_page_range+0x2b1/0x4a0 [ 611.223839][ T8166] ? __walk_page_range+0x780/0x780 [ 611.228973][ T8166] mlock_fixup+0x650/0x810 [ 611.233408][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 611.238618][ T8166] ? mlock_fixup+0x810/0x810 [ 611.243226][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 611.249128][ T8166] do_mlock+0x25a/0x6d0 [ 611.253294][ T8166] ? folio_evictable+0x270/0x270 [ 611.258247][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 611.264154][ T8166] __x64_sys_mlock+0x59/0x80 [ 611.268754][ T8166] do_syscall_64+0x39/0xb0 [ 611.273177][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 611.279074][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 611.283489][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 611.303096][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 611.311597][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 611.319660][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 611.327629][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 611.335599][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.343578][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 611.351573][ T8166] [ 611.362111][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 611.370071][ T8075] BUG at mt_find:6473 (1) [ 611.374422][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 611.383013][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 611.383326][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 611.393447][ T8166] BUG at mt_find:6473 (1) [ 611.426437][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 611.435225][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 611.483560][ T8075] 0-536866815: 0000000000000000 [ 611.497212][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 611.498878][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 [ 611.503204][ T8075] 536870912-553631743: [ 611.503210][ T8166] 0 [ 611.503221][ T8075] ffff88802b7dbd20 [ 611.524863][ T8166] 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 [ 611.529042][ T8075] 553631744-553635839: [ 611.531197][ T8166] 0000000000000000 0 [ 611.542560][ T8075] 0000000000000000 [ 611.555944][ T8075] 553635840-553631743: ffff88801cae0e00 [ 611.556519][ T8166] 0000000000000000 0 [ 611.561859][ T8075] 553631744-553644031: ffff88801cae0d20 [ 611.571447][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 611.572092][ T8075] 553644032-553648127: ffff888020c88460 [ 611.584515][ T8166] 0-139904166133759: [ 611.591209][ T8075] 553648128-553652223: [ 611.594468][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 611.595692][ T8075] ffff88802b7dbe00 [ 611.607638][ T8166] contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 611.618325][ T8075] 553652224-116829323263: [ 611.655698][ T8166] 0-536866815: 0000000000000000 [ 611.661974][ T8075] 0000000000000000 [ 611.665733][ T8166] 536866816-536870911: ffff88807e785620 [ 611.665759][ T8166] 536870912-553631743: ffff88807e785700 [ 611.670162][ T8075] 116829323264-116833517567: [ 611.683024][ T8166] 553631744-553635839: 0000000000000000 [ 611.689517][ T8075] ffff88802b7dbee0 [ 611.693999][ T8166] 553635840-553631743: ffff8880770f5c40 [ 611.703664][ T8166] 553631744-553644031: ffff8880770f5b60 [ 611.705688][ T8075] 116833517568-93825021800447: 0000000000000000 [ 611.710826][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 611.722948][ T8166] 553648128-553652223: ffff88807e7857e0 [ 611.723940][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 611.729235][ T8166] 553652224-116783185919: 0000000000000000 [ 611.741954][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 611.743294][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 611.748778][ T8166] 116789477376-93825005486079: 0000000000000000 [ 611.757356][ T8075] 140322669588480-140322669592575: [ 611.763912][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 611.776789][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 611.778209][ T8075] ffff888075edd7e0 [ 611.783649][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 611.792995][ T8075] 140322669592576-140322704048127: [ 611.794633][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 611.802403][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 611.859283][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 611.871181][ T8075] contents: [ 611.874537][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 611.885417][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 611.890541][ T8075] ffff888075edd8c0 140322677981183 [ 611.892365][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 611.904737][ T8075] ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 [ 611.904895][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 611.940788][ T8075] ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 611.943307][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 611.969025][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 611.976772][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 611.976984][ T8075] 140322669592576-140322677981183: [ 611.983724][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 611.996868][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 611.997749][ T8075] ffff888075edd8c0 [ 612.003907][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 612.014985][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 612.020948][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 612.029147][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 612.030051][ T8075] 140322680078336-140322682175487: [ 612.036434][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 612.042597][ T8075] ffff888075edd2a0 [ 612.049288][ T8166] 139904200589312-18446744073709551615: [ 612.052682][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 612.058782][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 612.074437][ T8075] 140322684272640-140322686369791: [ 612.116405][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 612.124425][ T8075] ffff888075edd1c0 [ 612.129822][ T8166] 139904201199616-139904201203711: [ 612.132766][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 612.138655][ T8166] ffff8880770f59a0 [ 612.149236][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 612.156111][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 612.163862][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 612.170227][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 612.172020][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 612.180545][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 612.190393][ T8075] 140322691776512-140322691780607: [ 612.192134][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 612.197725][ T8075] 0000000000000000 [ 612.197737][ T8075] 140322691780608-140322692145151: [ 612.204867][ T8166] 140730917257216-140730917273599: [ 612.213892][ T8075] ffff888075edde00 [ 612.213920][ T8166] ffff8880770f5700 [ 612.219466][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 612.219492][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 612.219513][ T8075] 140322692202496-140322704048127: [ 612.224417][ T8166] 140730917273600-140730917281791: [ 612.236899][ T8075] ffff888075edd000 [ 612.242353][ T8166] ffff8880770f57e0 [ 612.253075][ T8075] 140322704048128-18446744073709551615: [ 612.255978][ T8166] 140730917281792-18446744073709551615: [ 612.259514][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 612.266509][ T8166] 0000000000000000 [ 612.273292][ T8075] contents: [ 612.284083][ T8166] Pass: 10383061 Run:10383180 [ 612.290240][ T8075] 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 612.292601][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 612.332355][ T8075] 140322704048128-140322704506879: [ 612.342051][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 612.342066][ T8166] Call Trace: [ 612.342074][ T8166] [ 612.342084][ T8166] dump_stack_lvl+0xd1/0x138 [ 612.347640][ T8075] 0000000000000000 [ 612.357655][ T8166] mt_find.cold+0x8b/0x90 [ 612.360938][ T8075] 140322704506880-140322704510975: [ 612.363856][ T8166] ? mas_find+0x1d0/0x1d0 [ 612.369674][ T8075] ffff88807c795380 [ 612.372133][ T8166] find_vma+0x10c/0x1b0 [ 612.386543][ T8075] 140322704510976-140322704642047: [ 612.389972][ T8166] ? can_vma_merge_before+0x390/0x390 [ 612.394106][ T8075] ffff88807c7959a0 [ 612.399820][ T8166] ? walk_page_test+0x78/0x180 [ 612.399853][ T8166] walk_page_range+0x2b1/0x4a0 [ 612.405226][ T8075] 140322704642048-140730494414847: [ 612.409003][ T8166] ? __walk_page_range+0x780/0x780 [ 612.413734][ T8075] 0000000000000000 [ 612.418497][ T8166] mlock_fixup+0x650/0x810 [ 612.424024][ T8075] 140730494414848-140730494550015: [ 612.429308][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 612.429354][ T8166] ? mlock_fixup+0x810/0x810 [ 612.429404][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 612.429442][ T8166] do_mlock+0x25a/0x6d0 [ 612.429481][ T8166] ? folio_evictable+0x270/0x270 [ 612.429527][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 612.429561][ T8166] __x64_sys_mlock+0x59/0x80 [ 612.429594][ T8166] do_syscall_64+0x39/0xb0 [ 612.429625][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.429653][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 612.429674][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 612.429696][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 612.429722][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 612.429738][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 612.429753][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 612.429768][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.429784][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 612.429820][ T8166] [ 612.438112][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 612.480847][ T8075] ffff88807c795a80 [ 612.488440][ T8166] BUG at mt_find:6473 (1) [ 612.496695][ T8075] 140730494550016-140730496278527: [ 612.522873][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 612.523663][ T8075] 0000000000000000 [ 612.531446][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 612.547252][ T8075] 140730496278528-140730496294911: [ 612.549577][ T8166] contents: [ 612.556980][ T8075] ffff88807c795b60 [ 612.565352][ T8166] 93708216008704 [ 612.578236][ T8075] 140730496294912-140730496303103: [ 612.593320][ T8166] 20480 [ 612.619514][ T8075] ffff88807c795c40 [ 612.622770][ T8166] 18446603342792269824 [ 612.626702][ T8075] 140730496303104-18446744073709551615: [ 612.631955][ T8166] 0 [ 612.635007][ T8075] 0000000000000000 [ 612.645098][ T8166] 0 [ 612.649063][ T8075] Pass: 10383061 Run:10383181 [ 612.651270][ T8166] 0 [ 612.655015][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 612.655042][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 612.655055][ T8075] Call Trace: [ 612.655063][ T8075] [ 612.655073][ T8075] dump_stack_lvl+0xd1/0x138 [ 612.655112][ T8075] mt_find.cold+0x8b/0x90 [ 612.655146][ T8075] ? mas_find+0x1d0/0x1d0 [ 612.655189][ T8075] find_vma+0x10c/0x1b0 [ 612.666214][ T8166] 0 [ 612.674606][ T8075] ? can_vma_merge_before+0x390/0x390 [ 612.674638][ T8075] ? walk_page_test+0x78/0x180 [ 612.674670][ T8075] walk_page_range+0x2b1/0x4a0 [ 612.674703][ T8075] ? __walk_page_range+0x780/0x780 [ 612.674751][ T8075] mlock_fixup+0x650/0x810 [ 612.674797][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 612.674834][ T8075] ? mlock_fixup+0x810/0x810 [ 612.674887][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 612.674926][ T8075] do_mlock+0x25a/0x6d0 [ 612.674966][ T8075] ? folio_evictable+0x270/0x270 [ 612.675013][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 612.675048][ T8075] __x64_sys_mlock+0x59/0x80 [ 612.675084][ T8075] do_syscall_64+0x39/0xb0 [ 612.675120][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 612.675147][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 612.675168][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 612.675191][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 612.675216][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 612.675234][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 612.675250][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 612.675266][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.675281][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 612.675313][ T8075] [ 612.694463][ T8166] 0 [ 612.698059][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 612.700889][ T8166] 0 [ 612.705524][ T8075] BUG at mt_find:6473 (1) [ 612.722555][ T8166] 0 [ 612.746737][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 612.746765][ T8075] 0-18446744073709551615: [ 612.760908][ T8166] | 02 02| [ 612.762133][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 612.770074][ T8166] ffff88806630860c 139904166133759 [ 612.772503][ T8075] contents: [ 612.786067][ T8166] ffff88806630840c 139904200589311 [ 612.788555][ T8075] 93708188282880 [ 612.816116][ T8166] ffff8880267c3a0c 18446744073709551615 [ 612.824122][ T8075] 20480 [ 612.832218][ T8166] 0000000000000000 0 [ 612.847505][ T8075] 18446603343213248512 [ 612.848136][ T8166] 0000000000000000 0 [ 612.875038][ T8075] 0 [ 612.878123][ T8166] 0000000000000000 0 [ 612.886218][ T8075] 0 [ 612.901674][ T8166] 0000000000000000 0 [ 612.906385][ T8075] 0 [ 612.910266][ T8166] 0000000000000000 0 [ 612.914917][ T8075] 0 [ 612.918731][ T8166] 0000000000000000 0 [ 612.931645][ T8075] 0 [ 612.935380][ T8166] 0000000000000000 [ 612.941432][ T8075] 0 [ 612.941632][ T8166] 0-139904166133759: [ 612.951021][ T8075] 0 [ 612.952335][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 612.954807][ T8075] | 02 02| [ 612.958842][ T8166] contents: [ 612.961199][ T8075] ffff88802228180c 140322669592575 [ 612.965411][ T8166] 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 [ 612.977229][ T8075] ffff88802228160c 140322704048127 [ 612.979282][ T8166] 0000000000000000 93825005486079 [ 612.980837][ T8075] ffff88807a4f6c0c 18446744073709551615 [ 612.995756][ T8166] ffff88807e7859a0 93825005625343 [ 613.007475][ T8075] 0000000000000000 0 [ 613.027720][ T8166] 0000000000000000 139904166129663 [ 613.032674][ T8075] 0000000000000000 0 [ 613.037829][ T8166] ffff88807e785a80 139904166133759 [ 613.052668][ T8075] 0000000000000000 0 [ 613.058128][ T8166] 0000000000000000 0 [ 613.061904][ T8075] 0000000000000000 0 [ 613.067385][ T8166] 000000000000000d [ 613.078646][ T8075] 0000000000000000 0 [ 613.079564][ T8166] 0-536866815: [ 613.082938][ T8075] 0000000000000000 0 [ 613.088145][ T8166] 0000000000000000 [ 613.098346][ T8075] 0000000000000000 [ 613.100783][ T8166] 536866816-536870911: [ 613.103959][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 613.114324][ T8166] ffff88807e785620 [ 613.158958][ T8075] 0-536866815: 0000000000000000 [ 613.158983][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 613.159005][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 613.159027][ T8075] 553631744-553635839: 0000000000000000 [ 613.159049][ T8075] 553635840-553631743: ffff88801cae0e00 [ 613.159070][ T8075] 553631744-553644031: ffff88801cae0d20 [ 613.159092][ T8075] 553644032-553648127: ffff888020c88460 [ 613.159114][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 613.159135][ T8075] 553652224-116829323263: 0000000000000000 [ 613.159158][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 613.159181][ T8075] 116833517568-93825021800447: 0000000000000000 [ 613.159203][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 613.159226][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 613.159248][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 613.159273][ T8075] 140322669592576-140322704048127: [ 613.174888][ T8166] 536870912-553631743: [ 613.187861][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 613.202302][ T8166] ffff88807e785700 [ 613.206244][ T8075] contents: [ 613.211484][ T8166] 553631744-553635839: [ 613.223825][ T8075] ffff888075edd8c0 140322677981183 [ 613.230669][ T8166] 0000000000000000 [ 613.236288][ T8075] ffff888075edd9a0 140322680078335 [ 613.250556][ T8166] 553635840-553631743: [ 613.255291][ T8075] ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 [ 613.261315][ T8166] ffff8880770f5c40 [ 613.267415][ T8075] 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 613.267495][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 613.267518][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 613.267542][ T8075] 140322680078336-140322682175487: [ 613.279499][ T8166] 553631744-553644031: [ 613.284720][ T8075] ffff888075edd2a0 [ 613.293319][ T8166] ffff8880770f5b60 [ 613.293334][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 613.293358][ T8166] 553648128-553652223: ffff88807e7857e0 [ 613.293378][ T8166] 553652224-116783185919: 0000000000000000 [ 613.293399][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 613.293421][ T8166] 116789477376-93825005486079: 0000000000000000 [ 613.293443][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 613.293465][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 613.293488][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 613.293511][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 613.293730][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 613.293753][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 613.293775][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 613.293804][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 613.293826][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 613.293848][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 613.293869][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 613.293892][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 613.293914][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 613.293938][ T8166] 139904188317696-139904188321791: [ 613.298685][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 613.298712][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 613.298736][ T8075] 140322686369792-140322690564095: [ 613.358883][ T8166] 0000000000000000 [ 613.370529][ T8075] ffff888075edda80 [ 613.380413][ T8166] 139904188321792-139904188686335: [ 613.382786][ T8075] 140322690564096-140322690711551: [ 613.389774][ T8166] ffff8880770f5380 [ 613.396026][ T8075] ffff888075eddb60 [ 613.411223][ T8166] 139904188686336-139904188723199: [ 613.416916][ T8075] 140322690711552-140322691440639: [ 613.424620][ T8166] ffff8880770f5460 [ 613.430898][ T8075] ffff888075eddc40 [ 613.486809][ T8166] 139904188723200-139904188743679: [ 613.504900][ T8075] 140322691440640-140322691776511: [ 613.508437][ T8166] 0000000000000000 [ 613.514364][ T8075] ffff888075eddd20 [ 613.521583][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 613.521659][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 613.545880][ T8075] 140322691776512-140322691780607: [ 613.550271][ T8166] 0000000000000000 0 [ 613.555806][ T8075] 0000000000000000 [ 613.564837][ T8166] 0000000000000000 0 [ 613.569445][ T8075] 140322691780608-140322692145151: [ 613.574670][ T8166] 0000000000000008 [ 613.578744][ T8075] ffff888075edde00 [ 613.589213][ T8166] 139904200589312-139904201199615: [ 613.593489][ T8075] 140322692145152-140322692182015: [ 613.616562][ T8166] 0000000000000000 [ 613.616582][ T8166] 139904201199616-139904201203711: [ 613.633382][ T8075] ffff888075eddee0 [ 613.646348][ T8166] ffff8880770f59a0 [ 613.646366][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 613.646390][ T8166] 139904201334784-140730916691967: [ 613.701563][ T8075] 140322692182016-140322692202495: [ 613.703647][ T8166] 0000000000000000 [ 613.711581][ T8075] 0000000000000000 [ 613.718683][ T8166] 140730916691968-140730916827135: [ 613.719364][ T8075] 140322692202496-140322704048127: [ 613.722863][ T8166] ffff8880770f5620 [ 613.734133][ T8075] ffff888075edd000 [ 613.737764][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 613.737791][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 613.737813][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 613.737836][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 613.737858][ T8166] Pass: 10383061 Run:10383182 [ 613.737873][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 613.748569][ T8075] 140322704048128-18446744073709551615: [ 613.750818][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 613.757993][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 613.763254][ T8166] Call Trace: [ 613.769019][ T8075] contents: [ 613.772489][ T8166] [ 613.776419][ T8075] 0000000000000000 140322704506879 [ 613.781708][ T8166] dump_stack_lvl+0xd1/0x138 [ 613.787543][ T8075] ffff88807c795380 140322704510975 [ 613.790933][ T8166] mt_find.cold+0x8b/0x90 [ 613.794627][ T8075] ffff88807c7959a0 140322704642047 [ 613.801536][ T8166] ? mas_find+0x1d0/0x1d0 [ 613.801580][ T8166] find_vma+0x10c/0x1b0 [ 613.801603][ T8166] ? can_vma_merge_before+0x390/0x390 [ 613.801633][ T8166] ? walk_page_test+0x78/0x180 [ 613.801668][ T8166] walk_page_range+0x2b1/0x4a0 [ 613.801702][ T8166] ? __walk_page_range+0x780/0x780 [ 613.801748][ T8166] mlock_fixup+0x650/0x810 [ 613.801791][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 613.801827][ T8166] ? mlock_fixup+0x810/0x810 [ 613.801872][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 613.801909][ T8166] do_mlock+0x25a/0x6d0 [ 613.801949][ T8166] ? folio_evictable+0x270/0x270 [ 613.801995][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 613.802029][ T8166] __x64_sys_mlock+0x59/0x80 [ 613.802064][ T8166] do_syscall_64+0x39/0xb0 [ 613.802098][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 613.802126][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 613.802149][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 613.802173][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 613.802198][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 613.802214][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 613.802229][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 613.802245][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.802260][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 613.802295][ T8166] [ 613.814468][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 613.825210][ T8075] 0000000000000000 140730494414847 [ 613.841949][ T8166] BUG at mt_find:6473 (1) [ 613.871972][ T8075] ffff88807c795a80 140730494550015 [ 613.873386][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 613.878702][ T8075] 0000000000000000 140730496278527 [ 613.885344][ T8166] 0-18446744073709551615: [ 613.888476][ T8075] ffff88807c795b60 140730496294911 [ 613.894947][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 613.897922][ T8075] ffff88807c795c40 140730496303103 [ 613.911194][ T8166] contents: [ 613.913106][ T8075] 0000000000000000 18446744073709551615 [ 613.920370][ T8166] 93708216008704 [ 613.921882][ T8075] 0000000000000000 0 [ 613.927056][ T8166] 20480 [ 613.938813][ T8075] 0000000000000000 0 [ 613.941228][ T8166] 18446603342792269824 [ 613.947291][ T8075] 0000000000000000 0 [ 613.959896][ T8166] 0 [ 613.963032][ T8075] 0000000000000000 0 [ 613.966988][ T8166] 0 [ 613.973495][ T8075] 0000000000000000 0 [ 613.977369][ T8166] 0 [ 614.005088][ T8075] 0000000000000000 0 [ 614.026349][ T8166] 0 [ 614.048807][ T8075] 0000000000000008 [ 614.054627][ T8166] 0 [ 614.057879][ T8075] 140322704048128-140322704506879: [ 614.072497][ T8166] 0 [ 614.073269][ T8075] 0000000000000000 [ 614.078482][ T8166] 0 [ 614.096354][ T8075] 140322704506880-140322704510975: [ 614.096730][ T8166] | 02 02| [ 614.101717][ T8075] ffff88807c795380 [ 614.110229][ T8166] ffff88806630860c 139904166133759 [ 614.126654][ T8075] 140322704510976-140322704642047: [ 614.128109][ T8166] ffff88806630840c 139904200589311 [ 614.131795][ T8075] ffff88807c7959a0 [ 614.134623][ T8166] ffff8880267c3a0c 18446744073709551615 [ 614.138996][ T8075] 140322704642048-140730494414847: [ 614.150470][ T8166] 0000000000000000 0 [ 614.153469][ T8075] 0000000000000000 [ 614.159519][ T8166] 0000000000000000 0 [ 614.159935][ T8075] 140730494414848-140730494550015: [ 614.162381][ T8166] 0000000000000000 0 [ 614.166524][ T8075] ffff88807c795a80 [ 614.176773][ T8166] 0000000000000000 0 [ 614.188450][ T8075] 140730494550016-140730496278527: [ 614.195313][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 [ 614.202451][ T8075] 0000000000000000 [ 614.207634][ T8166] 0-139904166133759: [ 614.219116][ T8075] 140730496278528-140730496294911: [ 614.225879][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 614.233374][ T8075] ffff88807c795b60 [ 614.234365][ T8166] contents: [ 614.239159][ T8075] 140730496294912-140730496303103: [ 614.249989][ T8166] 0000000000000000 536866815 [ 614.251903][ T8075] ffff88807c795c40 [ 614.255930][ T8166] ffff88807e785620 536870911 [ 614.261793][ T8075] 140730496303104-18446744073709551615: [ 614.263504][ T8166] ffff88807e785700 553631743 [ 614.274621][ T8075] 0000000000000000 [ 614.276376][ T8166] 0000000000000000 553635839 [ 614.282323][ T8075] Pass: 10383061 Run:10383183 [ 614.284246][ T8166] ffff8880770f5c40 553631743 [ 614.295425][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 614.298560][ T8166] ffff8880770f5b60 553644031 [ 614.301009][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 614.304280][ T8166] ffff8880226cd1c0 553648127 [ 614.309802][ T8075] Call Trace: [ 614.309810][ T8075] [ 614.309820][ T8075] dump_stack_lvl+0xd1/0x138 [ 614.309856][ T8075] mt_find.cold+0x8b/0x90 [ 614.309889][ T8075] ? mas_find+0x1d0/0x1d0 [ 614.309931][ T8075] find_vma+0x10c/0x1b0 [ 614.309955][ T8075] ? can_vma_merge_before+0x390/0x390 [ 614.315936][ T8166] ffff88807e7857e0 553652223 [ 614.318775][ T8075] ? walk_page_test+0x78/0x180 [ 614.323427][ T8166] 0000000000000000 116783185919 [ 614.329385][ T8075] walk_page_range+0x2b1/0x4a0 [ 614.329422][ T8075] ? __walk_page_range+0x780/0x780 [ 614.334066][ T8166] ffff88807e7858c0 116789477375 [ 614.337785][ T8075] mlock_fixup+0x650/0x810 [ 614.342445][ T8166] 0000000000000000 93825005486079 [ 614.347110][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 614.347152][ T8075] ? mlock_fixup+0x810/0x810 [ 614.351807][ T8166] ffff88807e7859a0 93825005625343 [ 614.361606][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 614.361647][ T8075] do_mlock+0x25a/0x6d0 [ 614.369317][ T8166] 0000000000000000 139904166129663 [ 614.376332][ T8075] ? folio_evictable+0x270/0x270 [ 614.376381][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 614.376413][ T8075] __x64_sys_mlock+0x59/0x80 [ 614.376448][ T8075] do_syscall_64+0x39/0xb0 [ 614.381669][ T8166] ffff88807e785a80 139904166133759 [ 614.384370][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 614.387610][ T8166] 0000000000000000 0 [ 614.391850][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 614.397063][ T8166] 000000000000000d [ 614.400915][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 614.406506][ T8166] 0-536866815: [ 614.410400][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 [ 614.415278][ T8166] 0000000000000000 [ 614.419823][ T8075] ORIG_RAX: 0000000000000095 [ 614.419835][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 614.419851][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 614.419865][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 614.419879][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.419893][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 614.419928][ T8075] [ 614.448674][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 614.451711][ T8166] 536866816-536870911: [ 614.455693][ T8075] BUG at mt_find:6473 (1) [ 614.463740][ T8166] ffff88807e785620 [ 614.465282][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 614.479542][ T8166] 536870912-553631743: [ 614.480892][ T8075] 0-18446744073709551615: [ 614.489317][ T8166] ffff88807e785700 [ 614.491713][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 614.500972][ T8166] 553631744-553635839: [ 614.506253][ T8075] contents: [ 614.516081][ T8166] 0000000000000000 [ 614.521501][ T8075] 93708188282880 [ 614.533155][ T8166] 553635840-553631743: [ 614.574490][ T8075] 20480 [ 614.587658][ T8166] ffff8880770f5c40 [ 614.589004][ T8075] 18446603343213248512 [ 614.600140][ T8166] 553631744-553644031: [ 614.604035][ T8075] 0 [ 614.610125][ T8166] ffff8880770f5b60 [ 614.612774][ T8075] 0 [ 614.623134][ T8166] 553644032-553648127: [ 614.631466][ T8075] 0 [ 614.635884][ T8166] ffff8880226cd1c0 [ 614.639486][ T8075] 0 [ 614.654843][ T8166] 553648128-553652223: [ 614.657820][ T8075] 0 [ 614.659769][ T8166] ffff88807e7857e0 [ 614.663038][ T8075] 0 0 [ 614.676709][ T8166] 553652224-116783185919: 0000000000000000 [ 614.676742][ T8166] 116783185920-116789477375: [ 614.688909][ T8075] | 02 02| [ 614.698245][ T8166] ffff88807e7858c0 [ 614.698262][ T8166] 116789477376-93825005486079: 0000000000000000 [ 614.698288][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 614.698310][ T8166] 93825005625344-139904166129663: [ 614.705933][ T8075] ffff88802228180c 140322669592575 [ 614.707975][ T8166] 0000000000000000 [ 614.711671][ T8075] ffff88802228160c 140322704048127 [ 614.714153][ T8166] 139904166129664-139904166133759: [ 614.728079][ T8075] ffff88807a4f6c0c 18446744073709551615 [ 614.729683][ T8166] ffff88807e785a80 [ 614.739604][ T8075] 0000000000000000 0 [ 614.739916][ T8166] 139904166133760-139904200589311: [ 614.742983][ T8075] 0000000000000000 0 [ 614.751038][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 614.753591][ T8075] 0000000000000000 0 [ 614.764446][ T8166] contents: [ 614.769476][ T8075] 0000000000000000 0 [ 614.771023][ T8166] ffff88807e785b60 139904174522367 [ 614.774703][ T8075] 0000000000000000 0 [ 614.784246][ T8166] ffff88807e785c40 139904176619519 [ 614.788185][ T8075] 0000000000000000 0 [ 614.791323][ T8166] ffff88807e785d20 139904178716671 [ 614.795786][ T8075] 0000000000000000 [ 614.804872][ T8166] ffff88807e785e00 139904180813823 [ 614.827946][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 614.842021][ T8166] ffff88807e785ee0 139904182910975 [ 614.842999][ T8075] 0-536866815: [ 614.846715][ T8166] ffff8880770f5000 139904187105279 [ 614.852142][ T8075] 0000000000000000 [ 614.856888][ T8166] ffff8880770f50e0 139904187252735 [ 614.868947][ T8075] 536866816-536870911: [ 614.917182][ T8166] ffff8880770f51c0 139904187981823 [ 614.933569][ T8075] ffff88802b7dbc40 [ 614.951004][ T8166] ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 614.954404][ T8075] 536870912-553631743: [ 614.975551][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 614.983839][ T8075] ffff88802b7dbd20 [ 614.987282][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 614.990981][ T8075] 553631744-553635839: [ 614.997918][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 614.997944][ T8166] 139904178716672-139904180813823: [ 615.004881][ T8075] 0000000000000000 [ 615.009621][ T8166] ffff88807e785e00 [ 615.022357][ T8075] 553635840-553631743: ffff88801cae0e00 [ 615.022390][ T8075] 553631744-553644031: [ 615.028498][ T8166] 139904180813824-139904182910975: [ 615.031398][ T8075] ffff88801cae0d20 [ 615.038614][ T8166] ffff88807e785ee0 [ 615.038629][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 615.038656][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 615.038677][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 615.038699][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 615.038720][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 615.038742][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 615.038764][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 615.038786][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 615.038806][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 615.038829][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 [ 615.054121][ T8075] 553644032-553648127: [ 615.060785][ T8166] 0000000000000000 140730916691967 [ 615.075151][ T8075] ffff888020c88460 [ 615.082337][ T8166] ffff8880770f5620 140730916827135 [ 615.095471][ T8075] 553648128-553652223: [ 615.111026][ T8166] 0000000000000000 140730917257215 [ 615.148093][ T8075] ffff88802b7dbe00 [ 615.150919][ T8166] ffff8880770f5700 140730917273599 [ 615.154846][ T8075] 553652224-116829323263: [ 615.159405][ T8166] ffff8880770f57e0 140730917281791 [ 615.162878][ T8075] 0000000000000000 [ 615.162891][ T8075] 116829323264-116833517567: [ 615.168710][ T8166] 0000000000000000 18446744073709551615 [ 615.180677][ T8075] ffff88802b7dbee0 [ 615.182622][ T8166] 0000000000000000 0 [ 615.191535][ T8075] 116833517568-93825021800447: [ 615.193645][ T8166] 0000000000000000 0 [ 615.199891][ T8075] 0000000000000000 [ 615.201048][ T8166] 0000000000000000 0 [ 615.205856][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 615.205883][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 615.205905][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 615.205928][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 [ 615.211490][ T8166] 0000000000000000 0 [ 615.213650][ T8075] ffff888075edd0e0 140322684272639 [ 615.218117][ T8166] 0000000000000000 0 [ 615.232137][ T8075] ffff888075edd1c0 140322686369791 [ 615.239795][ T8166] 0000000000000000 0 0000000000000008 [ 615.279329][ T8075] ffff888075edda80 140322690564095 [ 615.284288][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 615.289807][ T8075] ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 615.303091][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 615.333007][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 615.334384][ T8075] 140322669592576-140322677981183: [ 615.340764][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 615.353629][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 615.355760][ T8075] ffff888075edd8c0 [ 615.361189][ T8166] 140730916827136-140730917257215: [ 615.364291][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 615.370131][ T8166] 0000000000000000 [ 615.380916][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 615.384508][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 615.390524][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 615.401981][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 615.405223][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 615.417050][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 615.423470][ T8166] Pass: 10383163 Run:10383286 [ 615.424003][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 615.429095][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 615.436383][ T8075] 140322690564096-140322690711551: [ 615.445477][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 615.445491][ T8166] Call Trace: [ 615.445499][ T8166] [ 615.445509][ T8166] dump_stack_lvl+0xd1/0x138 [ 615.445548][ T8166] mt_find.cold+0x8b/0x90 [ 615.445582][ T8166] ? mas_find+0x1d0/0x1d0 [ 615.445622][ T8166] find_vma+0x10c/0x1b0 [ 615.445646][ T8166] ? can_vma_merge_before+0x390/0x390 [ 615.445674][ T8166] ? walk_page_test+0x78/0x180 [ 615.445708][ T8166] walk_page_range+0x2b1/0x4a0 [ 615.445742][ T8166] ? __walk_page_range+0x780/0x780 [ 615.445791][ T8166] mlock_fixup+0x650/0x810 [ 615.445838][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 615.445878][ T8166] ? mlock_fixup+0x810/0x810 [ 615.445926][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 615.445965][ T8166] do_mlock+0x25a/0x6d0 [ 615.446004][ T8166] ? folio_evictable+0x270/0x270 [ 615.446052][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 615.446086][ T8166] __x64_sys_mlock+0x59/0x80 [ 615.446121][ T8166] do_syscall_64+0x39/0xb0 [ 615.446156][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 615.446183][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 615.446204][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 615.446228][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 615.446254][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 615.446270][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 615.452209][ T8075] ffff888075eddb60 [ 615.461917][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 615.461935][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.461949][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 615.461982][ T8166] [ 615.465257][ T8075] 140322690711552-140322691440639: [ 615.480508][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 615.481481][ T8075] ffff888075eddc40 [ 615.486045][ T8166] BUG at mt_find:6473 (1) [ 615.494296][ T8075] 140322691440640-140322691776511: [ 615.498319][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 615.500577][ T8075] ffff888075eddd20 [ 615.506587][ T8166] 0-18446744073709551615: [ 615.517853][ T8075] 140322691776512-140322691780607: [ 615.520629][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 615.535935][ T8075] 0000000000000000 [ 615.550481][ T8166] contents: [ 615.561151][ T8075] 140322691780608-140322692145151: [ 615.562217][ T8166] 93708216008704 [ 615.581205][ T8075] ffff888075edde00 [ 615.581219][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 615.581245][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 615.597967][ T8166] 20480 [ 615.606770][ T8075] 140322692202496-140322704048127: [ 615.630833][ T8166] 18446603342792269824 [ 615.634464][ T8075] ffff888075edd000 [ 615.640093][ T8166] 0 [ 615.643041][ T8075] 140322704048128-18446744073709551615: [ 615.650446][ T8166] 0 [ 615.655588][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 615.665633][ T8166] 0 [ 615.687442][ T8075] contents: [ 615.695476][ T8166] 0 [ 615.698176][ T8075] 0000000000000000 140322704506879 [ 615.705222][ T8166] 0 [ 615.706876][ T8075] ffff88807c795380 140322704510975 [ 615.714364][ T8166] 0 [ 615.721040][ T8075] ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 615.721199][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 615.721223][ T8075] 140322704506880-140322704510975: [ 615.738733][ T8166] 0 [ 615.741258][ T8075] ffff88807c795380 [ 615.751668][ T8166] | 02 02| [ 615.764456][ T8075] 140322704510976-140322704642047: [ 615.772441][ T8166] ffff88806630860c 139904166133759 [ 615.774217][ T8075] ffff88807c7959a0 [ 615.775281][ T8166] ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 615.775381][ T8166] 0-139904166133759: [ 615.783064][ T8075] 140322704642048-140730494414847: [ 615.788393][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 615.825725][ T8075] 0000000000000000 [ 615.840250][ T8166] contents: [ 615.841071][ T8075] 140730494414848-140730494550015: [ 615.844521][ T8166] 0000000000000000 536866815 [ 615.862372][ T8075] ffff88807c795a80 [ 615.865519][ T8166] ffff88807e785620 536870911 [ 615.885320][ T8075] 140730494550016-140730496278527: [ 615.894683][ T8166] ffff88807e785700 553631743 [ 615.901007][ T8075] 0000000000000000 [ 615.904097][ T8166] 0000000000000000 553635839 [ 615.907647][ T8075] 140730496278528-140730496294911: [ 615.920586][ T8166] ffff8880770f5c40 553631743 [ 615.921798][ T8075] ffff88807c795b60 [ 615.930544][ T8166] ffff8880770f5b60 553644031 [ 615.932024][ T8075] 140730496294912-140730496303103: [ 615.939698][ T8166] ffff8880226cd1c0 553648127 [ 615.940455][ T8075] ffff88807c795c40 [ 615.949198][ T8166] ffff88807e7857e0 553652223 [ 615.950694][ T8075] 140730496303104-18446744073709551615: [ 615.956619][ T8166] 0000000000000000 116783185919 [ 615.960958][ T8075] 0000000000000000 [ 615.964412][ T8166] ffff88807e7858c0 116789477375 [ 615.970240][ T8075] Pass: 10383163 Run:10383287 [ 615.970257][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 615.984356][ T8166] 0000000000000000 93825005486079 [ 615.989248][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 615.989262][ T8075] Call Trace: [ 615.989269][ T8075] [ 615.989279][ T8075] dump_stack_lvl+0xd1/0x138 [ 615.989317][ T8075] mt_find.cold+0x8b/0x90 [ 615.994229][ T8166] ffff88807e7859a0 93825005625343 [ 615.997936][ T8075] ? mas_find+0x1d0/0x1d0 [ 615.997979][ T8075] find_vma+0x10c/0x1b0 [ 616.002871][ T8166] 0000000000000000 139904166129663 [ 616.007527][ T8075] ? can_vma_merge_before+0x390/0x390 [ 616.007559][ T8075] ? walk_page_test+0x78/0x180 [ 616.017347][ T8166] ffff88807e785a80 139904166133759 [ 616.022418][ T8075] walk_page_range+0x2b1/0x4a0 [ 616.043450][ T8166] 0000000000000000 0 [ 616.047552][ T8075] ? __walk_page_range+0x780/0x780 [ 616.052663][ T8166] 000000000000000d [ 616.056987][ T8075] mlock_fixup+0x650/0x810 [ 616.057033][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 616.057070][ T8075] ? mlock_fixup+0x810/0x810 [ 616.057119][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 616.057157][ T8075] do_mlock+0x25a/0x6d0 [ 616.057197][ T8075] ? folio_evictable+0x270/0x270 [ 616.057244][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 616.057278][ T8075] __x64_sys_mlock+0x59/0x80 [ 616.057313][ T8075] do_syscall_64+0x39/0xb0 [ 616.057347][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.057375][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 616.057396][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 616.057419][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 616.057444][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 616.057460][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 616.057477][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 616.057492][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.057507][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 616.057540][ T8075] [ 616.100471][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 616.102854][ T8166] 0-536866815: [ 616.110428][ T8075] BUG at mt_find:6473 (1) [ 616.110869][ T8166] 0000000000000000 [ 616.119466][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 616.121496][ T8166] 536866816-536870911: [ 616.125785][ T8075] 0-18446744073709551615: [ 616.134969][ T8166] ffff88807e785620 [ 616.136774][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 616.141129][ T8166] 536870912-553631743: [ 616.145563][ T8075] contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 [ 616.160331][ T8166] ffff88807e785700 [ 616.189326][ T8075] 0 [ 616.194506][ T8166] 553631744-553635839: [ 616.201930][ T8075] 0 [ 616.236837][ T8166] 0000000000000000 [ 616.239424][ T8075] | 02 02| [ 616.243617][ T8166] 553635840-553631743: [ 616.247362][ T8075] ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 616.247466][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 [ 616.260224][ T8166] ffff8880770f5c40 [ 616.262214][ T8075] ffff88801cae0d20 553644031 [ 616.270680][ T8166] 553631744-553644031: [ 616.278561][ T8075] ffff888020c88460 553648127 [ 616.281240][ T8166] ffff8880770f5b60 [ 616.288772][ T8075] ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 616.288881][ T8075] 0-536866815: 0000000000000000 [ 616.288902][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 616.300752][ T8166] 553644032-553648127: [ 616.303394][ T8075] 536870912-553631743: [ 616.306794][ T8166] ffff8880226cd1c0 [ 616.311494][ T8075] ffff88802b7dbd20 [ 616.313671][ T8166] 553648128-553652223: [ 616.360028][ T8075] 553631744-553635839: [ 616.376120][ T8166] ffff88807e7857e0 [ 616.415173][ T8075] 0000000000000000 [ 616.418913][ T8166] 553652224-116783185919: [ 616.422448][ T8075] 553635840-553631743: [ 616.427193][ T8166] 0000000000000000 [ 616.442609][ T8075] ffff88801cae0e00 [ 616.443952][ T8166] 116783185920-116789477375: [ 616.447385][ T8075] 553631744-553644031: [ 616.454411][ T8166] ffff88807e7858c0 [ 616.456029][ T8075] ffff88801cae0d20 [ 616.470045][ T8166] 116789477376-93825005486079: [ 616.473931][ T8075] 553644032-553648127: [ 616.480740][ T8166] 0000000000000000 [ 616.490275][ T8075] ffff888020c88460 [ 616.491822][ T8166] 93825005486080-93825005625343: [ 616.495629][ T8075] 553648128-553652223: [ 616.500555][ T8166] ffff88807e7859a0 [ 616.503020][ T8075] ffff88802b7dbe00 [ 616.514956][ T8166] 93825005625344-139904166129663: [ 616.517944][ T8075] 553652224-116829323263: [ 616.520413][ T8166] 0000000000000000 [ 616.525894][ T8075] 0000000000000000 [ 616.525906][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 616.525954][ T8075] 116833517568-93825021800447: 0000000000000000 [ 616.526003][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 616.526046][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 616.526086][ T8075] 140322669588480-140322669592575: [ 616.538538][ T8166] 139904166129664-139904166133759: [ 616.545214][ T8075] ffff888075edd7e0 [ 616.558383][ T8166] ffff88807e785a80 [ 616.558398][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 [ 616.574885][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 616.609939][ T8166] ffff88807e785c40 139904176619519 [ 616.658439][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 616.665023][ T8166] ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 616.681660][ T8075] 140322677981184-140322680078335: [ 616.717344][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 616.725551][ T8075] ffff888075edd9a0 [ 616.729971][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 616.740621][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 616.743951][ T8075] 140322680078336-140322682175487: [ 616.747608][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 616.747631][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 616.763046][ T8075] ffff888075edd2a0 [ 616.769101][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 616.769126][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 616.769149][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 616.769172][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 616.769194][ T8166] 139904188317696-139904188321791: [ 616.784242][ T8075] 140322682175488-140322684272639: [ 616.787682][ T8166] 0000000000000000 [ 616.787696][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 616.787720][ T8166] 139904188686336-139904188723199: [ 616.795145][ T8075] ffff888075edd0e0 [ 616.809141][ T8166] ffff8880770f5460 [ 616.813365][ T8075] 140322684272640-140322686369791: [ 616.821936][ T8166] 139904188723200-139904188743679: [ 616.823513][ T8075] ffff888075edd1c0 [ 616.838658][ T8166] 0000000000000000 [ 616.843478][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 616.862241][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 616.862462][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 616.869752][ T8075] 140322690711552-140322691440639: [ 616.878971][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 616.886207][ T8075] ffff888075eddc40 [ 616.934650][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 616.934677][ T8166] 139904201199616-139904201203711: [ 616.946432][ T8075] 140322691440640-140322691776511: [ 616.947897][ T8166] ffff8880770f59a0 [ 616.951984][ T8075] ffff888075eddd20 [ 616.958218][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 616.958250][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 616.958272][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 616.958293][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 616.958315][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 616.958338][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 616.958361][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 616.958382][ T8166] Pass: 10383164 Run:10383289 [ 616.982752][ T8075] 140322691776512-140322691780607: [ 616.995665][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 617.002988][ T8075] 0000000000000000 [ 617.008518][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 617.008533][ T8166] Call Trace: [ 617.008540][ T8166] [ 617.008550][ T8166] dump_stack_lvl+0xd1/0x138 [ 617.008587][ T8166] mt_find.cold+0x8b/0x90 [ 617.008618][ T8166] ? mas_find+0x1d0/0x1d0 [ 617.008660][ T8166] find_vma+0x10c/0x1b0 [ 617.008685][ T8166] ? can_vma_merge_before+0x390/0x390 [ 617.008714][ T8166] ? walk_page_test+0x78/0x180 [ 617.008748][ T8166] walk_page_range+0x2b1/0x4a0 [ 617.008781][ T8166] ? __walk_page_range+0x780/0x780 [ 617.017183][ T8075] 140322691780608-140322692145151: [ 617.020797][ T8166] mlock_fixup+0x650/0x810 [ 617.026579][ T8075] ffff888075edde00 [ 617.036092][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 617.036135][ T8166] ? mlock_fixup+0x810/0x810 [ 617.040197][ T8075] 140322692145152-140322692182015: [ 617.049900][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 617.049942][ T8166] do_mlock+0x25a/0x6d0 [ 617.053656][ T8075] ffff888075eddee0 [ 617.056134][ T8166] ? folio_evictable+0x270/0x270 [ 617.056184][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 617.061097][ T8075] 140322692182016-140322692202495: [ 617.065076][ T8166] __x64_sys_mlock+0x59/0x80 [ 617.065119][ T8166] do_syscall_64+0x39/0xb0 [ 617.065154][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.065180][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 617.070218][ T8075] 0000000000000000 [ 617.073636][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 617.080929][ T8075] 140322692202496-140322704048127: [ 617.083733][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 617.210881][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 617.218882][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 617.226868][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 617.235658][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.243626][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 617.251610][ T8166] [ 617.265714][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 617.271689][ T8166] BUG at mt_find:6473 (1) [ 617.277841][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 617.288145][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 617.325400][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 617.374469][ T8075] ffff888075edd000 [ 617.374492][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 [ 617.379973][ T8166] 0-536866815: [ 617.389704][ T8075] 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 617.424726][ T8166] 0000000000000000 [ 617.436874][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 617.436903][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 617.436926][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 617.436948][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 617.436970][ T8075] 140730494414848-140730494550015: [ 617.450522][ T8166] 536866816-536870911: [ 617.455467][ T8075] ffff88807c795a80 [ 617.455482][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 617.455507][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 617.455529][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 617.455552][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 617.455574][ T8075] Pass: 10383164 Run:10383290 [ 617.471064][ T8166] ffff88807e785620 [ 617.475333][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 617.529939][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 617.539999][ T8075] Call Trace: [ 617.543276][ T8075] [ 617.546209][ T8075] dump_stack_lvl+0xd1/0x138 [ 617.550812][ T8075] mt_find.cold+0x8b/0x90 [ 617.555152][ T8075] ? mas_find+0x1d0/0x1d0 [ 617.559588][ T8075] find_vma+0x10c/0x1b0 [ 617.563782][ T8075] ? can_vma_merge_before+0x390/0x390 [ 617.569188][ T8075] ? walk_page_test+0x78/0x180 [ 617.573994][ T8075] walk_page_range+0x2b1/0x4a0 [ 617.578891][ T8075] ? __walk_page_range+0x780/0x780 [ 617.584083][ T8075] mlock_fixup+0x650/0x810 [ 617.588550][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 617.593793][ T8075] ? mlock_fixup+0x810/0x810 [ 617.598497][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 617.604405][ T8075] do_mlock+0x25a/0x6d0 [ 617.608577][ T8075] ? folio_evictable+0x270/0x270 [ 617.613538][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 617.619442][ T8075] __x64_sys_mlock+0x59/0x80 [ 617.624046][ T8075] do_syscall_64+0x39/0xb0 [ 617.628475][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.634376][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 617.638798][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 617.658462][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 617.666879][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 617.674858][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 617.682870][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 617.690941][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.698915][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 617.706906][ T8075] [ 617.720582][ T8166] 536870912-553631743: ffff88807e785700 [ 617.725169][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 617.726875][ T8166] 553631744-553635839: [ 617.732426][ T8075] BUG at mt_find:6473 (1) [ 617.732444][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 617.737184][ T8166] 0000000000000000 [ 617.745012][ T8075] 0-18446744073709551615: [ 617.750109][ T8166] 553635840-553631743: [ 617.753628][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 617.758480][ T8166] ffff8880770f5c40 [ 617.758494][ T8166] 553631744-553644031: ffff8880770f5b60 [ 617.758517][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 617.758539][ T8166] 553648128-553652223: ffff88807e7857e0 [ 617.783361][ T8075] contents: [ 617.787189][ T8166] 553652224-116783185919: [ 617.796193][ T8075] 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 617.801739][ T8166] 0000000000000000 [ 617.837425][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 617.839595][ T8075] 0-140322669592575: [ 617.843881][ T8166] 116789477376-93825005486079: 0000000000000000 [ 617.851422][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 [ 617.855463][ T8166] 93825005486080-93825005625343: [ 617.859220][ T8075] ffff88802b7dbc40 536870911 [ 617.866648][ T8166] ffff88807e7859a0 [ 617.874895][ T8075] ffff88802b7dbd20 553631743 [ 617.877542][ T8166] 93825005625344-139904166129663: [ 617.880967][ T8075] 0000000000000000 553635839 [ 617.885920][ T8166] 0000000000000000 [ 617.899264][ T8075] ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 617.901257][ T8166] 139904166129664-139904166133759: [ 617.931591][ T8075] 0-536866815: 0000000000000000 [ 617.939415][ T8166] ffff88807e785a80 [ 617.945726][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 617.954663][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 617.961539][ T8075] 553631744-553635839: [ 617.961539][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 [ 617.966392][ T8075] 0000000000000000 [ 617.966393][ T8166] ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 [ 618.009528][ T8075] 553635840-553631743: [ 618.020921][ T8166] 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 618.020972][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 618.020997][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 618.021020][ T8166] 139904176619520-139904178716671: [ 618.034927][ T8075] ffff88801cae0e00 [ 618.058256][ T8166] ffff88807e785d20 [ 618.061508][ T8075] 553631744-553644031: [ 618.063764][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 618.073913][ T8075] ffff88801cae0d20 [ 618.077806][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 618.081794][ T8075] 553644032-553648127: [ 618.086431][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 618.086458][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 618.086481][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 618.086503][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 618.099677][ T8075] ffff888020c88460 [ 618.108953][ T8166] 139904188317696-139904188321791: [ 618.114304][ T8075] 553648128-553652223: [ 618.125760][ T8166] 0000000000000000 [ 618.129575][ T8075] ffff88802b7dbe00 [ 618.133991][ T8166] 139904188321792-139904188686335: [ 618.137748][ T8075] 553652224-116829323263: 0000000000000000 [ 618.148017][ T8166] ffff8880770f5380 [ 618.153741][ T8075] 116829323264-116833517567: [ 618.157771][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 618.170217][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 618.172235][ T8075] ffff88802b7dbee0 [ 618.177938][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 618.182096][ T8075] 116833517568-93825021800447: [ 618.188189][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 618.194560][ T8075] 0000000000000000 [ 618.247535][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 618.256552][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 618.258093][ T8075] 93825021800448-93825021939711: [ 618.263513][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 618.273392][ T8075] ffff88808b414000 [ 618.276601][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 618.284238][ T8075] 93825021939712-140322669588479: [ 618.287402][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 618.300414][ T8075] 0000000000000000 [ 618.304155][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 618.311276][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 618.311305][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 618.311328][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 618.311350][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 618.311374][ T8166] Pass: 10383198 Run:10383325 [ 618.311388][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 618.311414][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 618.311428][ T8166] Call Trace: [ 618.311436][ T8166] [ 618.311446][ T8166] dump_stack_lvl+0xd1/0x138 [ 618.311484][ T8166] mt_find.cold+0x8b/0x90 [ 618.311519][ T8166] ? mas_find+0x1d0/0x1d0 [ 618.311562][ T8166] find_vma+0x10c/0x1b0 [ 618.311588][ T8166] ? can_vma_merge_before+0x390/0x390 [ 618.311617][ T8166] ? walk_page_test+0x78/0x180 [ 618.311650][ T8166] walk_page_range+0x2b1/0x4a0 [ 618.311684][ T8166] ? __walk_page_range+0x780/0x780 [ 618.311734][ T8166] mlock_fixup+0x650/0x810 [ 618.311781][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 618.321382][ T8075] 140322669592576-140322704048127: [ 618.326517][ T8166] ? mlock_fixup+0x810/0x810 [ 618.326569][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 618.333628][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 618.340827][ T8166] do_mlock+0x25a/0x6d0 [ 618.345970][ T8075] contents: [ 618.355291][ T8166] ? folio_evictable+0x270/0x270 [ 618.355338][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 618.355372][ T8166] __x64_sys_mlock+0x59/0x80 [ 618.355407][ T8166] do_syscall_64+0x39/0xb0 [ 618.355442][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 618.355471][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 618.355492][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 618.355515][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 618.355541][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 618.355558][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 618.355574][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 618.355589][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.355604][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 618.355640][ T8166] [ 618.381003][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 618.385639][ T8075] ffff888075edd8c0 140322677981183 [ 618.391818][ T8166] BUG at mt_find:6473 (1) [ 618.395439][ T8075] ffff888075edd9a0 140322680078335 [ 618.407518][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 618.411189][ T8075] ffff888075edd2a0 140322682175487 [ 618.432315][ T8166] 0-18446744073709551615: [ 618.436558][ T8075] ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 [ 618.454827][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 618.457461][ T8075] 0000000000000000 140322692202495 [ 618.462604][ T8166] contents: 93708216008704 [ 618.467619][ T8075] ffff888075edd000 140322704048127 [ 618.478460][ T8166] 20480 [ 618.482513][ T8075] 0000000000000000 0 [ 618.510924][ T8166] 18446603342792269824 [ 618.516142][ T8075] 000000000000000d [ 618.530360][ T8166] 0 [ 618.539026][ T8075] 140322669592576-140322677981183: [ 618.552184][ T8166] 0 [ 618.553942][ T8075] ffff888075edd8c0 [ 618.556852][ T8166] 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 [ 618.568756][ T8075] 140322677981184-140322680078335: [ 618.580115][ T8166] ffff88806630840c 139904200589311 [ 618.603982][ T8075] ffff888075edd9a0 [ 618.626884][ T8166] ffff8880267c3a0c 18446744073709551615 [ 618.636389][ T8075] 140322680078336-140322682175487: [ 618.638710][ T8166] 0000000000000000 0 [ 618.642458][ T8075] ffff888075edd2a0 [ 618.648030][ T8166] 0000000000000000 0 [ 618.658076][ T8075] 140322682175488-140322684272639: [ 618.658965][ T8166] 0000000000000000 0 [ 618.662411][ T8075] ffff888075edd0e0 [ 618.665252][ T8166] 0000000000000000 0 [ 618.674824][ T8075] 140322684272640-140322686369791: [ 618.677037][ T8166] 0000000000000000 0 [ 618.683653][ T8075] ffff888075edd1c0 [ 618.689544][ T8166] 0000000000000000 0 [ 618.701254][ T8075] 140322686369792-140322690564095: [ 618.704236][ T8166] 0000000000000000 [ 618.721317][ T8075] ffff888075edda80 [ 618.723638][ T8166] 0-139904166133759: [ 618.732363][ T8075] 140322690564096-140322690711551: [ 618.736850][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 618.739497][ T8075] ffff888075eddb60 [ 618.752897][ T8166] contents: [ 618.754855][ T8075] 140322690711552-140322691440639: [ 618.757326][ T8166] 0000000000000000 536866815 [ 618.762583][ T8075] ffff888075eddc40 [ 618.766749][ T8166] ffff88807e785620 536870911 [ 618.777940][ T8075] 140322691440640-140322691776511: [ 618.779970][ T8166] ffff88807e785700 553631743 [ 618.795016][ T8075] ffff888075eddd20 [ 618.801324][ T8166] 0000000000000000 553635839 [ 618.815150][ T8075] 140322691776512-140322691780607: [ 618.821192][ T8166] ffff8880770f5c40 553631743 [ 618.833673][ T8075] 0000000000000000 [ 618.850245][ T8166] ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 618.856197][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 618.880983][ T8166] 0-536866815: 0000000000000000 [ 618.891922][ T8166] 536866816-536870911: ffff88807e785620 [ 618.898732][ T8166] 536870912-553631743: ffff88807e785700 [ 618.901384][ T8075] 140322692145152-140322692182015: [ 618.904653][ T8166] 553631744-553635839: 0000000000000000 [ 618.914675][ T8075] ffff888075eddee0 [ 618.916662][ T8166] 553635840-553631743: [ 618.919906][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 618.925805][ T8166] ffff8880770f5c40 [ 618.936047][ T8166] 553631744-553644031: ffff8880770f5b60 [ 618.940996][ T8075] 140322692202496-140322704048127: [ 618.941955][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 618.948998][ T8075] ffff888075edd000 [ 618.953810][ T8166] 553648128-553652223: [ 618.958643][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 618.964507][ T8166] ffff88807e7857e0 [ 619.018092][ T8166] 553652224-116783185919: 0000000000000000 [ 619.027531][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 619.028473][ T8075] 140322704048128-140322704506879: [ 619.034763][ T8166] 116789477376-93825005486079: 0000000000000000 [ 619.047332][ T8075] 0000000000000000 [ 619.052946][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 619.063228][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 619.064038][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 619.071621][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 619.084150][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 619.084724][ T8075] 140322704510976-140322704642047: [ 619.141507][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 619.154345][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 619.161716][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 619.163819][ T8075] ffff88807c7959a0 [ 619.169252][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 619.176869][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 619.181544][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 619.194044][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 619.194559][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 619.201957][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 619.215351][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 619.217801][ T8075] 140730494550016-140730496278527: [ 619.222305][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 619.233407][ T8075] 0000000000000000 [ 619.236855][ T8166] 139904188317696-139904188321791: [ 619.238609][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 619.244154][ T8166] 0000000000000000 [ 619.255482][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 619.259365][ T8075] 140730496294912-140730496303103: [ 619.262471][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 619.275109][ T8075] ffff88807c795c40 [ 619.278327][ T8166] 139904188723200-139904188743679: [ 619.278839][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 619.284380][ T8166] 0000000000000000 [ 619.297476][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 619.303400][ T8075] Pass: 10383198 Run:10383326 [ 619.304434][ T8166] 139904200589312-18446744073709551615: [ 619.309191][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 619.309589][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 619.315008][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 619.315023][ T8075] Call Trace: [ 619.315032][ T8075] [ 619.315041][ T8075] dump_stack_lvl+0xd1/0x138 [ 619.315079][ T8075] mt_find.cold+0x8b/0x90 [ 619.325476][ T8166] contents: [ 619.332405][ T8075] ? mas_find+0x1d0/0x1d0 [ 619.332447][ T8075] find_vma+0x10c/0x1b0 [ 619.332470][ T8075] ? can_vma_merge_before+0x390/0x390 [ 619.332498][ T8075] ? walk_page_test+0x78/0x180 [ 619.332531][ T8075] walk_page_range+0x2b1/0x4a0 [ 619.332565][ T8075] ? __walk_page_range+0x780/0x780 [ 619.332615][ T8075] mlock_fixup+0x650/0x810 [ 619.332661][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 619.332701][ T8075] ? mlock_fixup+0x810/0x810 [ 619.332749][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 619.332788][ T8075] do_mlock+0x25a/0x6d0 [ 619.332832][ T8075] ? folio_evictable+0x270/0x270 [ 619.332879][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 619.332914][ T8075] __x64_sys_mlock+0x59/0x80 [ 619.332950][ T8075] do_syscall_64+0x39/0xb0 [ 619.332984][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 619.333013][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 619.333035][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 619.333059][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 619.333083][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 619.333101][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 619.333115][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 619.333129][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.333143][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 619.333177][ T8075] [ 619.342991][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 619.345837][ T8166] 0000000000000000 139904201199615 [ 619.348762][ T8075] BUG at mt_find:6473 (1) [ 619.355121][ T8166] ffff8880770f59a0 139904201203711 [ 619.355919][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 619.360431][ T8166] ffff8880770f58c0 139904201334783 [ 619.363397][ T8075] 0-18446744073709551615: [ 619.375988][ T8166] 0000000000000000 140730916691967 [ 619.379620][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 619.382004][ T8166] ffff8880770f5620 140730916827135 [ 619.392452][ T8075] contents: [ 619.399729][ T8166] 0000000000000000 140730917257215 [ 619.402810][ T8075] 93708188282880 [ 619.408430][ T8166] ffff8880770f5700 140730917273599 [ 619.413380][ T8075] 20480 [ 619.417437][ T8166] ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 619.417535][ T8166] 139904200589312-139904201199615: [ 619.441151][ T8075] 18446603343213248512 [ 619.452628][ T8166] 0000000000000000 [ 619.469481][ T8075] 0 [ 619.492641][ T8166] 139904201199616-139904201203711: [ 619.496480][ T8075] 0 [ 619.509000][ T8166] ffff8880770f59a0 [ 619.509655][ T8075] 0 [ 619.522617][ T8166] 139904201203712-139904201334783: [ 619.526980][ T8075] 0 [ 619.534930][ T8166] ffff8880770f58c0 [ 619.536862][ T8075] 0 [ 619.544932][ T8166] 139904201334784-140730916691967: [ 619.550529][ T8075] 0 [ 619.573882][ T8166] 0000000000000000 [ 619.586475][ T8075] 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 [ 619.595562][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 619.595591][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 619.595615][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 619.595638][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 619.595660][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 619.595682][ T8166] Pass: 10383198 Run:10383327 [ 619.595696][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 619.602165][ T8075] 0000000000000000 0 [ 619.618298][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 619.618314][ T8166] Call Trace: [ 619.618322][ T8166] [ 619.618331][ T8166] dump_stack_lvl+0xd1/0x138 [ 619.618366][ T8166] mt_find.cold+0x8b/0x90 [ 619.618399][ T8166] ? mas_find+0x1d0/0x1d0 [ 619.618440][ T8166] find_vma+0x10c/0x1b0 [ 619.624866][ T8075] 0000000000000000 0 [ 619.628110][ T8166] ? can_vma_merge_before+0x390/0x390 [ 619.631817][ T8075] 0000000000000000 0 [ 619.634311][ T8166] ? walk_page_test+0x78/0x180 [ 619.640974][ T8075] 0000000000000000 0 [ 619.642412][ T8166] walk_page_range+0x2b1/0x4a0 [ 619.646362][ T8075] 0000000000000000 0 [ 619.648603][ T8166] ? __walk_page_range+0x780/0x780 [ 619.654150][ T8075] 0000000000000000 0 [ 619.656655][ T8166] mlock_fixup+0x650/0x810 [ 619.660844][ T8075] 0000000000000000 [ 619.662879][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 619.668857][ T8075] 0-140322669592575: [ 619.670893][ T8166] ? mlock_fixup+0x810/0x810 [ 619.674592][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 619.686903][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 619.686944][ T8166] do_mlock+0x25a/0x6d0 [ 619.694021][ T8075] contents: [ 619.700811][ T8166] ? folio_evictable+0x270/0x270 [ 619.708421][ T8075] 0000000000000000 536866815 [ 619.714774][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 619.722378][ T8075] ffff88802b7dbc40 536870911 [ 619.726813][ T8166] __x64_sys_mlock+0x59/0x80 [ 619.726859][ T8166] do_syscall_64+0x39/0xb0 [ 619.726894][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 619.726922][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 619.726942][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 619.726964][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 619.726989][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 619.727006][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 619.727021][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 619.727037][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.727051][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 619.727088][ T8166] [ 619.750443][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 619.758086][ T8075] ffff88802b7dbd20 553631743 [ 619.762563][ T8166] BUG at mt_find:6473 (1) [ 619.767415][ T8075] 0000000000000000 553635839 [ 619.778795][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 619.779915][ T8075] ffff88801cae0e00 553631743 [ 619.785078][ T8166] 0-18446744073709551615: [ 619.792357][ T8075] ffff88801cae0d20 553644031 [ 619.793754][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 619.802321][ T8075] ffff888020c88460 553648127 [ 619.803282][ T8166] contents: 93708216008704 [ 619.808292][ T8075] ffff88802b7dbe00 553652223 [ 619.813189][ T8166] 20480 [ 619.824721][ T8075] 0000000000000000 116829323263 [ 619.827728][ T8166] 18446603342792269824 [ 619.832574][ T8075] ffff88802b7dbee0 116833517567 [ 619.837786][ T8166] 0 [ 619.845107][ T8075] 0000000000000000 93825021800447 [ 619.868502][ T8166] 0 [ 619.890102][ T8075] ffff88808b414000 93825021939711 [ 619.893765][ T8166] 0 [ 619.904273][ T8075] 0000000000000000 140322669588479 [ 619.923383][ T8166] 0 [ 619.941065][ T8075] ffff888075edd7e0 140322669592575 [ 619.948951][ T8166] 0 [ 619.965905][ T8075] 0000000000000000 0 [ 619.973749][ T8166] 0 [ 619.994824][ T8075] 000000000000000d [ 619.995717][ T8166] 0 [ 620.003542][ T8075] 0-536866815: [ 620.008482][ T8166] | 02 02| [ 620.020131][ T8075] 0000000000000000 [ 620.034453][ T8166] ffff88806630860c 139904166133759 [ 620.039306][ T8075] 536866816-536870911: [ 620.051294][ T8166] ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 620.051398][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 620.051611][ T8166] 0-536866815: 0000000000000000 [ 620.051632][ T8166] 536866816-536870911: ffff88807e785620 [ 620.051655][ T8166] 536870912-553631743: ffff88807e785700 [ 620.051676][ T8166] 553631744-553635839: 0000000000000000 [ 620.051698][ T8166] 553635840-553631743: ffff8880770f5c40 [ 620.051720][ T8166] 553631744-553644031: ffff8880770f5b60 [ 620.051741][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 620.051763][ T8166] 553648128-553652223: [ 620.060504][ T8075] ffff88802b7dbc40 [ 620.064441][ T8166] ffff88807e7857e0 [ 620.067847][ T8075] 536870912-553631743: [ 620.075969][ T8166] 553652224-116783185919: [ 620.080178][ T8075] ffff88802b7dbd20 [ 620.082388][ T8166] 0000000000000000 [ 620.087930][ T8075] 553631744-553635839: [ 620.097325][ T8166] 116783185920-116789477375: [ 620.103062][ T8075] 0000000000000000 [ 620.103202][ T8166] ffff88807e7858c0 [ 620.107404][ T8075] 553635840-553631743: [ 620.114488][ T8166] 116789477376-93825005486079: [ 620.119404][ T8075] ffff88801cae0e00 [ 620.131294][ T8166] 0000000000000000 [ 620.192776][ T8075] 553631744-553644031: ffff88801cae0d20 [ 620.192810][ T8075] 553644032-553648127: ffff888020c88460 [ 620.192832][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 620.192854][ T8075] 553652224-116829323263: 0000000000000000 [ 620.192873][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 620.192895][ T8075] 116833517568-93825021800447: 0000000000000000 [ 620.192917][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 620.192939][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 620.192961][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 620.192984][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 620.193200][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 620.193222][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 620.193245][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 620.193268][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 620.193297][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 620.193319][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 620.193341][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 620.193364][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 620.193387][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 620.193409][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 620.193431][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 620.193455][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 620.193477][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 620.193499][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 620.193522][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 [ 620.209836][ T8166] 93825005486080-93825005625343: [ 620.223519][ T8075] 0000000000000000 0 [ 620.229125][ T8166] ffff88807e7859a0 [ 620.239613][ T8075] 0000000000000000 0 [ 620.239638][ T8166] 93825005625344-139904166129663: [ 620.243340][ T8075] 0000000000000000 0 [ 620.247555][ T8166] 0000000000000000 [ 620.256310][ T8075] 0000000000000000 0 [ 620.258467][ T8166] 139904166129664-139904166133759: [ 620.260333][ T8075] 0000000000000000 0 [ 620.264039][ T8166] ffff88807e785a80 [ 620.276135][ T8075] 0000000000000008 [ 620.277866][ T8166] 139904166133760-139904200589311: [ 620.281028][ T8075] 140322704048128-140322704506879: [ 620.293163][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 620.294630][ T8075] 0000000000000000 [ 620.298758][ T8166] contents: [ 620.304309][ T8075] 140322704506880-140322704510975: [ 620.319091][ T8166] ffff88807e785b60 139904174522367 [ 620.324580][ T8075] ffff88807c795380 [ 620.335717][ T8166] ffff88807e785c40 139904176619519 [ 620.349831][ T8075] 140322704510976-140322704642047: [ 620.411772][ T8166] ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 [ 620.429690][ T8075] ffff88807c7959a0 [ 620.444437][ T8166] 0000000000000000 139904188321791 [ 620.452820][ T8075] 140322704642048-140730494414847: [ 620.454378][ T8166] ffff8880770f5380 139904188686335 [ 620.461791][ T8075] 0000000000000000 [ 620.461804][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 620.461830][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 620.461853][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 620.461876][ T8075] 140730496294912-140730496303103: [ 620.490431][ T8166] ffff8880770f5460 139904188723199 [ 620.498867][ T8075] ffff88807c795c40 [ 620.511910][ T8166] 0000000000000000 139904188743679 [ 620.557464][ T8075] 140730496303104-18446744073709551615: [ 620.581441][ T8166] ffff8880770f5540 139904200589311 [ 620.599292][ T8075] 0000000000000000 [ 620.601996][ T8166] 0000000000000000 0 [ 620.604599][ T8075] Pass: 10383198 Run:10383328 [ 620.610254][ T8166] 000000000000000d [ 620.621033][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 620.623446][ T8166] 139904166133760-139904174522367: [ 620.626982][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 620.626997][ T8075] Call Trace: [ 620.627004][ T8075] [ 620.627014][ T8075] dump_stack_lvl+0xd1/0x138 [ 620.627051][ T8075] mt_find.cold+0x8b/0x90 [ 620.631111][ T8166] ffff88807e785b60 [ 620.635845][ T8075] ? mas_find+0x1d0/0x1d0 [ 620.635891][ T8075] find_vma+0x10c/0x1b0 [ 620.635915][ T8075] ? can_vma_merge_before+0x390/0x390 [ 620.641659][ T8166] 139904174522368-139904176619519: [ 620.644834][ T8075] ? walk_page_test+0x78/0x180 [ 620.644875][ T8075] walk_page_range+0x2b1/0x4a0 [ 620.644908][ T8075] ? __walk_page_range+0x780/0x780 [ 620.644957][ T8075] mlock_fixup+0x650/0x810 [ 620.650818][ T8166] ffff88807e785c40 [ 620.655709][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 620.655750][ T8075] ? mlock_fixup+0x810/0x810 [ 620.679354][ T8166] 139904176619520-139904178716671: [ 620.681844][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 620.688552][ T8166] ffff88807e785d20 [ 620.692589][ T8075] do_mlock+0x25a/0x6d0 [ 620.698096][ T8166] 139904178716672-139904180813823: [ 620.701480][ T8075] ? folio_evictable+0x270/0x270 [ 620.708678][ T8166] ffff88807e785e00 [ 620.715332][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 620.715370][ T8075] __x64_sys_mlock+0x59/0x80 [ 620.722767][ T8166] 139904180813824-139904182910975: [ 620.728138][ T8075] do_syscall_64+0x39/0xb0 [ 620.728175][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 620.733924][ T8166] ffff88807e785ee0 [ 620.737066][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 620.737090][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 620.737113][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 [ 620.742755][ T8166] 139904182910976-139904187105279: [ 620.748441][ T8075] ORIG_RAX: 0000000000000095 [ 620.748453][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 620.748470][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 620.748485][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 620.748499][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.748513][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 620.748548][ T8075] [ 620.754701][ T8166] ffff8880770f5000 [ 620.780616][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 620.794624][ T8166] 139904187105280-139904187252735: [ 620.801655][ T8075] BUG at mt_find:6473 (1) [ 620.805602][ T8166] ffff8880770f50e0 [ 620.815824][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 620.816715][ T8166] 139904187252736-139904187981823: [ 620.820629][ T8075] 0-18446744073709551615: [ 620.824769][ T8166] ffff8880770f51c0 [ 620.834859][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 620.835945][ T8166] 139904187981824-139904188317695: [ 620.840887][ T8075] contents: 93708188282880 [ 620.845975][ T8166] ffff8880770f52a0 [ 620.858227][ T8075] 20480 [ 620.859432][ T8166] 139904188317696-139904188321791: [ 620.864323][ T8075] 18446603343213248512 [ 620.870112][ T8166] 0000000000000000 [ 620.891702][ T8075] 0 [ 620.919870][ T8166] 139904188321792-139904188686335: [ 620.923414][ T8075] 0 [ 620.932559][ T8166] ffff8880770f5380 [ 620.944126][ T8075] 0 [ 620.961080][ T8166] 139904188686336-139904188723199: [ 620.982735][ T8075] 0 [ 620.990417][ T8166] ffff8880770f5460 [ 621.001529][ T8075] 0 [ 621.003230][ T8166] 139904188723200-139904188743679: [ 621.011077][ T8075] 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 [ 621.044907][ T8166] 0000000000000000 [ 621.045634][ T8075] 0000000000000000 0 [ 621.053934][ T8166] 139904188743680-139904200589311: [ 621.059502][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 621.069495][ T8166] ffff8880770f5540 [ 621.083261][ T8075] 0000000000000000 0 [ 621.088713][ T8166] 139904200589312-18446744073709551615: [ 621.090141][ T8075] 0000000000000000 [ 621.092956][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 621.105060][ T8075] 0-140322669592575: [ 621.106946][ T8166] contents: [ 621.110008][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 621.114459][ T8166] 0000000000000000 139904201199615 [ 621.127035][ T8075] contents: [ 621.129646][ T8166] ffff8880770f59a0 139904201203711 [ 621.131313][ T8075] 0000000000000000 536866815 [ 621.136421][ T8166] ffff8880770f58c0 139904201334783 [ 621.144304][ T8075] ffff88802b7dbc40 536870911 [ 621.156156][ T8166] 0000000000000000 140730916691967 [ 621.169095][ T8075] ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 [ 621.188709][ T8166] ffff8880770f5620 140730916827135 [ 621.200861][ T8075] ffff88802b7dbee0 116833517567 [ 621.204008][ T8166] 0000000000000000 140730917257215 [ 621.212644][ T8075] 0000000000000000 93825021800447 [ 621.213130][ T8166] ffff8880770f5700 140730917273599 [ 621.224625][ T8075] ffff88808b414000 93825021939711 [ 621.225851][ T8166] ffff8880770f57e0 140730917281791 [ 621.234308][ T8075] 0000000000000000 140322669588479 [ 621.239292][ T8166] 0000000000000000 18446744073709551615 [ 621.248463][ T8075] ffff888075edd7e0 140322669592575 [ 621.250358][ T8166] 0000000000000000 0 [ 621.254052][ T8075] 0000000000000000 0 [ 621.273944][ T8166] 0000000000000000 0 [ 621.287301][ T8075] 000000000000000d [ 621.290087][ T8166] 0000000000000000 0 [ 621.295585][ T8075] 0-536866815: [ 621.300367][ T8166] 0000000000000000 0 [ 621.306190][ T8075] 0000000000000000 [ 621.327451][ T8166] 0000000000000000 0 [ 621.338744][ T8075] 536866816-536870911: [ 621.339511][ T8166] 0000000000000000 0 [ 621.343018][ T8075] ffff88802b7dbc40 [ 621.350589][ T8166] 0000000000000008 [ 621.353161][ T8075] 536870912-553631743: [ 621.361141][ T8166] 139904200589312-139904201199615: [ 621.363014][ T8075] ffff88802b7dbd20 [ 621.371140][ T8166] 0000000000000000 [ 621.371553][ T8075] 553631744-553635839: [ 621.381189][ T8166] 139904201199616-139904201203711: [ 621.385047][ T8075] 0000000000000000 [ 621.393070][ T8166] ffff8880770f59a0 [ 621.393361][ T8075] 553635840-553631743: [ 621.397169][ T8166] 139904201203712-139904201334783: [ 621.406351][ T8075] ffff88801cae0e00 [ 621.407405][ T8166] ffff8880770f58c0 [ 621.414335][ T8075] 553631744-553644031: [ 621.414579][ T8166] 139904201334784-140730916691967: [ 621.419336][ T8075] ffff88801cae0d20 [ 621.424925][ T8166] 0000000000000000 [ 621.436204][ T8075] 553644032-553648127: [ 621.437594][ T8166] 140730916691968-140730916827135: [ 621.445196][ T8075] ffff888020c88460 [ 621.446084][ T8166] ffff8880770f5620 [ 621.472988][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 621.474865][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 621.480062][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 621.494888][ T8075] 553652224-116829323263: 0000000000000000 [ 621.495139][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 621.501452][ T8075] 116829323264-116833517567: [ 621.508443][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 621.515866][ T8075] ffff88802b7dbee0 [ 621.529412][ T8166] Pass: 10383225 Run:10383356 [ 621.534120][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 621.534311][ T8075] 116833517568-93825021800447: [ 621.543925][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 621.543939][ T8166] Call Trace: [ 621.543947][ T8166] [ 621.543957][ T8166] dump_stack_lvl+0xd1/0x138 [ 621.549405][ T8075] 0000000000000000 [ 621.559203][ T8166] mt_find.cold+0x8b/0x90 [ 621.559243][ T8166] ? mas_find+0x1d0/0x1d0 [ 621.562656][ T8075] 93825021800448-93825021939711: [ 621.565461][ T8166] find_vma+0x10c/0x1b0 [ 621.570142][ T8075] ffff88808b414000 [ 621.573766][ T8166] ? can_vma_merge_before+0x390/0x390 [ 621.601041][ T8166] ? walk_page_test+0x78/0x180 [ 621.605831][ T8166] walk_page_range+0x2b1/0x4a0 [ 621.610607][ T8166] ? __walk_page_range+0x780/0x780 [ 621.615743][ T8166] mlock_fixup+0x650/0x810 [ 621.620180][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 621.625394][ T8166] ? mlock_fixup+0x810/0x810 [ 621.630009][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 621.635915][ T8166] do_mlock+0x25a/0x6d0 [ 621.640088][ T8166] ? folio_evictable+0x270/0x270 [ 621.645047][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 621.650948][ T8166] __x64_sys_mlock+0x59/0x80 [ 621.655564][ T8166] do_syscall_64+0x39/0xb0 [ 621.659993][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 621.665892][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 621.670310][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 621.689926][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 621.698356][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 621.706332][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 621.714479][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 621.722450][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.730422][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 621.738411][ T8166] [ 621.744008][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 621.752315][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 621.759416][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 621.769251][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 621.815621][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 621.828770][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 621.831246][ T8166] BUG at mt_find:6473 (1) [ 621.836041][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 621.841509][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 621.849936][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 621.863318][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 621.865656][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 621.870356][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 621.880169][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 621.880193][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 621.880216][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 621.880240][ T8075] 140322691776512-140322691780607: [ 621.896190][ T8166] contents: [ 621.902669][ T8075] 0000000000000000 [ 621.914280][ T8166] 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 621.925112][ T8075] 140322691780608-140322692145151: [ 621.951598][ T8166] 0-139904166133759: [ 621.958803][ T8075] ffff888075edde00 [ 621.961933][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 621.962969][ T8075] 140322692145152-140322692182015: [ 621.966778][ T8166] contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 621.984629][ T8075] ffff888075eddee0 [ 622.024985][ T8166] 0-536866815: 0000000000000000 [ 622.033566][ T8166] 536866816-536870911: ffff88807e785620 [ 622.039914][ T8166] 536870912-553631743: ffff88807e785700 [ 622.044269][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 622.046092][ T8166] 553631744-553635839: [ 622.052966][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 622.057821][ T8166] 0000000000000000 [ 622.068457][ T8166] 553635840-553631743: ffff8880770f5c40 [ 622.071987][ T8075] 140322704048128-18446744073709551615: [ 622.074374][ T8166] 553631744-553644031: ffff8880770f5b60 [ 622.086200][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 622.088477][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 622.140045][ T8166] 553648128-553652223: ffff88807e7857e0 [ 622.146246][ T8166] 553652224-116783185919: 0000000000000000 [ 622.153485][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 622.153529][ T8075] 140322704048128-140322704506879: [ 622.160243][ T8166] 116789477376-93825005486079: [ 622.165460][ T8075] 0000000000000000 [ 622.166427][ T8166] 0000000000000000 [ 622.171009][ T8075] 140322704506880-140322704510975: [ 622.174714][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 622.186708][ T8075] ffff88807c795380 [ 622.191524][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 622.204278][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 622.205363][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 622.212213][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 622.225838][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 622.274090][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 622.288187][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 622.294221][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 622.295550][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 622.311529][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 622.311733][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 622.327211][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 622.327457][ T8075] 140730496278528-140730496294911: [ 622.334171][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 622.339920][ T8075] ffff88807c795b60 [ 622.350489][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 622.354582][ T8166] 139904187105280-139904187252735: [ 622.357537][ T8075] 140730496303104-18446744073709551615: [ 622.357761][ T8166] ffff8880770f50e0 [ 622.363081][ T8075] 0000000000000000 [ 622.376634][ T8075] Pass: 10383225 Run:10383357 [ 622.376975][ T8166] 139904187252736-139904187981823: [ 622.381312][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 622.393079][ T8166] ffff8880770f51c0 [ 622.396642][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 622.396656][ T8075] Call Trace: [ 622.396663][ T8075] [ 622.396672][ T8075] dump_stack_lvl+0xd1/0x138 [ 622.396709][ T8075] mt_find.cold+0x8b/0x90 [ 622.396743][ T8075] ? mas_find+0x1d0/0x1d0 [ 622.396790][ T8075] find_vma+0x10c/0x1b0 [ 622.410588][ T8166] 139904187981824-139904188317695: [ 622.410628][ T8075] ? can_vma_merge_before+0x390/0x390 [ 622.413907][ T8166] ffff8880770f52a0 [ 622.417121][ T8075] ? walk_page_test+0x78/0x180 [ 622.417156][ T8075] walk_page_range+0x2b1/0x4a0 [ 622.417188][ T8075] ? __walk_page_range+0x780/0x780 [ 622.417236][ T8075] mlock_fixup+0x650/0x810 [ 622.417282][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 622.417319][ T8075] ? mlock_fixup+0x810/0x810 [ 622.431545][ T8166] 139904188317696-139904188321791: [ 622.434706][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 622.442766][ T8166] 0000000000000000 [ 622.445686][ T8075] do_mlock+0x25a/0x6d0 [ 622.445728][ T8075] ? folio_evictable+0x270/0x270 [ 622.445775][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 622.445815][ T8075] __x64_sys_mlock+0x59/0x80 [ 622.457564][ T8166] 139904188321792-139904188686335: [ 622.459115][ T8075] do_syscall_64+0x39/0xb0 [ 622.464203][ T8166] ffff8880770f5380 [ 622.468599][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 622.468627][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 622.468647][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 622.468669][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 622.468693][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 622.468710][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 622.468726][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 622.468740][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.468755][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 622.468793][ T8075] [ 622.483868][ T8166] 139904188686336-139904188723199: [ 622.507098][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 622.511472][ T8166] ffff8880770f5460 [ 622.513868][ T8075] BUG at mt_find:6473 (1) [ 622.527590][ T8166] 139904188723200-139904188743679: [ 622.533391][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 622.544040][ T8166] 0000000000000000 [ 622.558040][ T8075] 0-18446744073709551615: [ 622.582263][ T8166] 139904188743680-139904200589311: [ 622.590425][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 622.643924][ T8166] ffff8880770f5540 [ 622.655760][ T8075] contents: [ 622.660563][ T8166] 139904200589312-18446744073709551615: [ 622.671725][ T8075] 93708188282880 [ 622.672540][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 622.678603][ T8075] 20480 [ 622.684200][ T8166] contents: [ 622.689852][ T8075] 18446603343213248512 [ 622.692485][ T8166] 0000000000000000 139904201199615 [ 622.696159][ T8075] 0 [ 622.704888][ T8166] ffff8880770f59a0 139904201203711 [ 622.705494][ T8075] 0 [ 622.707680][ T8166] ffff8880770f58c0 139904201334783 [ 622.715178][ T8075] 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 622.723405][ T8166] 0000000000000000 140730916691967 [ 622.746931][ T8075] 0-140322669592575: [ 622.753133][ T8166] ffff8880770f5620 140730916827135 [ 622.755057][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 622.757350][ T8166] 0000000000000000 140730917257215 [ 622.768905][ T8075] contents: [ 622.770692][ T8166] ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 622.783444][ T8075] 0000000000000000 536866815 [ 622.801655][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 622.815323][ T8075] ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 [ 622.815423][ T8166] 139904201199616-139904201203711: [ 622.815426][ T8075] ffff88802b7dbe00 553652223 [ 622.815441][ T8166] ffff8880770f59a0 [ 622.832474][ T8075] 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 622.848240][ T8166] 139904201203712-139904201334783: [ 622.871784][ T8075] 0-536866815: [ 622.878116][ T8166] ffff8880770f58c0 [ 622.878135][ T8166] 139904201334784-140730916691967: [ 622.879061][ T8075] 0000000000000000 [ 622.882135][ T8166] 0000000000000000 [ 622.886252][ T8075] 536866816-536870911: [ 622.894902][ T8166] 140730916691968-140730916827135: [ 622.895974][ T8075] ffff88802b7dbc40 [ 622.899434][ T8166] ffff8880770f5620 [ 622.903920][ T8075] 536870912-553631743: [ 622.909570][ T8166] 140730916827136-140730917257215: [ 622.922375][ T8075] ffff88802b7dbd20 [ 622.922392][ T8075] 553631744-553635839: 0000000000000000 [ 622.933386][ T8166] 0000000000000000 [ 622.941969][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 622.943840][ T8075] 553635840-553631743: [ 622.949018][ T8166] 140730917273600-140730917281791: [ 622.951382][ T8075] ffff88801cae0e00 [ 622.953521][ T8166] ffff8880770f57e0 [ 622.967328][ T8075] 553631744-553644031: ffff88801cae0d20 [ 622.968064][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 622.973339][ T8075] 553644032-553648127: [ 622.980989][ T8166] Pass: 10383225 Run:10383358 [ 622.990193][ T8075] ffff888020c88460 [ 622.994065][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 622.995534][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 623.000852][ T8075] 553652224-116829323263: [ 623.009838][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 623.009853][ T8166] Call Trace: [ 623.009860][ T8166] [ 623.009871][ T8166] dump_stack_lvl+0xd1/0x138 [ 623.014909][ T8075] 0000000000000000 [ 623.024678][ T8166] mt_find.cold+0x8b/0x90 [ 623.024715][ T8166] ? mas_find+0x1d0/0x1d0 [ 623.024755][ T8166] find_vma+0x10c/0x1b0 [ 623.024778][ T8166] ? can_vma_merge_before+0x390/0x390 [ 623.024808][ T8166] ? walk_page_test+0x78/0x180 [ 623.024842][ T8166] walk_page_range+0x2b1/0x4a0 [ 623.024878][ T8166] ? __walk_page_range+0x780/0x780 [ 623.024926][ T8166] mlock_fixup+0x650/0x810 [ 623.024973][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 623.025013][ T8166] ? mlock_fixup+0x810/0x810 [ 623.025063][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 623.025102][ T8166] do_mlock+0x25a/0x6d0 [ 623.025141][ T8166] ? folio_evictable+0x270/0x270 [ 623.025189][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 623.025223][ T8166] __x64_sys_mlock+0x59/0x80 [ 623.025259][ T8166] do_syscall_64+0x39/0xb0 [ 623.029200][ T8075] 116829323264-116833517567: [ 623.031655][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 623.036252][ T8075] ffff88802b7dbee0 [ 623.039925][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 623.044232][ T8075] 116833517568-93825021800447: [ 623.048630][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 623.048658][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 623.048682][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 623.048698][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 623.048713][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 623.048729][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.048744][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 623.048779][ T8166] [ 623.052320][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 623.064841][ T8075] 0000000000000000 [ 623.068117][ T8166] BUG at mt_find:6473 (1) [ 623.073166][ T8075] 93825021800448-93825021939711: [ 623.078167][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 623.092530][ T8075] ffff88808b414000 [ 623.093884][ T8166] 0-18446744073709551615: [ 623.108662][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 623.108697][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 623.108719][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 [ 623.128802][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 623.143808][ T8075] 0000000000000000 140322691780607 [ 623.171338][ T8166] contents: [ 623.171870][ T8075] ffff888075edde00 140322692145151 [ 623.180162][ T8166] 93708216008704 [ 623.195359][ T8075] ffff888075eddee0 140322692182015 [ 623.196210][ T8166] 20480 [ 623.203851][ T8075] 0000000000000000 140322692202495 [ 623.219650][ T8166] 18446603342792269824 [ 623.224585][ T8075] ffff888075edd000 140322704048127 [ 623.230396][ T8166] 0 [ 623.240188][ T8075] 0000000000000000 0 [ 623.243580][ T8166] 0 [ 623.247127][ T8075] 000000000000000d [ 623.247141][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 623.247168][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 623.247192][ T8075] 140322680078336-140322682175487: [ 623.254442][ T8166] 0 [ 623.258605][ T8075] ffff888075edd2a0 [ 623.319311][ T8166] 0 [ 623.320489][ T8075] 140322682175488-140322684272639: [ 623.341415][ T8166] 0 [ 623.347137][ T8075] ffff888075edd0e0 [ 623.347858][ T8166] 0 [ 623.355086][ T8075] 140322684272640-140322686369791: [ 623.355705][ T8166] 0 [ 623.359630][ T8075] ffff888075edd1c0 [ 623.361857][ T8166] | 02 02| [ 623.378878][ T8075] 140322686369792-140322690564095: [ 623.379559][ T8166] ffff88806630860c 139904166133759 [ 623.385460][ T8075] ffff888075edda80 [ 623.394822][ T8166] ffff88806630840c 139904200589311 [ 623.399603][ T8075] 140322690564096-140322690711551: [ 623.401797][ T8166] ffff8880267c3a0c 18446744073709551615 [ 623.405800][ T8075] ffff888075eddb60 [ 623.414738][ T8166] 0000000000000000 0 [ 623.416498][ T8075] 140322690711552-140322691440639: [ 623.419963][ T8166] 0000000000000000 0 [ 623.423058][ T8075] ffff888075eddc40 [ 623.437885][ T8166] 0000000000000000 0 [ 623.439412][ T8075] 140322691440640-140322691776511: [ 623.443624][ T8166] 0000000000000000 0 [ 623.451732][ T8075] ffff888075eddd20 [ 623.474727][ T8166] 0000000000000000 0 [ 623.477952][ T8075] 140322691776512-140322691780607: [ 623.480135][ T8166] 0000000000000000 0 [ 623.492416][ T8075] 0000000000000000 [ 623.493537][ T8166] 0000000000000000 [ 623.497862][ T8075] 140322691780608-140322692145151: [ 623.503072][ T8166] 0-139904166133759: [ 623.508220][ T8075] ffff888075edde00 [ 623.514895][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 623.515685][ T8075] 140322692145152-140322692182015: [ 623.522395][ T8166] contents: 0000000000000000 536866815 [ 623.526848][ T8075] ffff888075eddee0 [ 623.540637][ T8166] ffff88807e785620 536870911 [ 623.544636][ T8075] 140322692182016-140322692202495: [ 623.550043][ T8166] ffff88807e785700 553631743 [ 623.555177][ T8075] 0000000000000000 [ 623.558523][ T8166] 0000000000000000 553635839 [ 623.567226][ T8075] 140322692202496-140322704048127: [ 623.569781][ T8166] ffff8880770f5c40 553631743 [ 623.582649][ T8075] ffff888075edd000 [ 623.582666][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 623.594136][ T8166] ffff8880770f5b60 553644031 [ 623.643724][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 623.655910][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 623.661012][ T8166] ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 [ 623.662952][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 623.692877][ T8166] ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 623.693881][ T8075] 140322704642048-140730494414847: [ 623.701252][ T8166] 0-536866815: [ 623.708352][ T8075] 0000000000000000 [ 623.716240][ T8166] 0000000000000000 [ 623.716502][ T8075] 140730494414848-140730494550015: [ 623.719986][ T8166] 536866816-536870911: ffff88807e785620 [ 623.725818][ T8075] ffff88807c795a80 [ 623.735285][ T8166] 536870912-553631743: ffff88807e785700 [ 623.735315][ T8166] 553631744-553635839: 0000000000000000 [ 623.735336][ T8166] 553635840-553631743: ffff8880770f5c40 [ 623.735357][ T8166] 553631744-553644031: ffff8880770f5b60 [ 623.735379][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 623.735400][ T8166] 553648128-553652223: ffff88807e7857e0 [ 623.735422][ T8166] 553652224-116783185919: 0000000000000000 [ 623.735444][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 623.735466][ T8166] 116789477376-93825005486079: 0000000000000000 [ 623.735488][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 623.735511][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 623.735532][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 623.735555][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 623.735776][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 623.735799][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 623.735821][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 623.735843][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 623.735865][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 623.735887][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 623.735909][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 623.735932][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 623.735955][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 623.744518][ T8075] 140730494550016-140730496278527: [ 623.755945][ T8166] 139904188317696-139904188321791: [ 623.759828][ T8075] 0000000000000000 [ 623.765567][ T8166] 0000000000000000 [ 623.779175][ T8075] 140730496278528-140730496294911: [ 623.784017][ T8166] 139904188321792-139904188686335: [ 623.790913][ T8075] ffff88807c795b60 [ 623.803808][ T8166] ffff8880770f5380 [ 623.807968][ T8075] 140730496294912-140730496303103: [ 623.814500][ T8166] 139904188686336-139904188723199: [ 623.868398][ T8075] ffff88807c795c40 [ 623.889474][ T8166] ffff8880770f5460 [ 623.889491][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 623.911487][ T8075] 140730496303104-18446744073709551615: [ 623.931790][ T8166] 139904188743680-139904200589311: [ 623.935263][ T8075] 0000000000000000 [ 623.938114][ T8166] ffff8880770f5540 [ 623.953762][ T8075] Pass: 10383234 Run:10383368 [ 623.960871][ T8166] 139904200589312-18446744073709551615: [ 623.964354][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 623.967924][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 623.971592][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 623.977219][ T8166] contents: [ 623.982991][ T8075] Call Trace: [ 623.983001][ T8075] [ 623.986770][ T8166] 0000000000000000 139904201199615 [ 623.990393][ T8075] dump_stack_lvl+0xd1/0x138 [ 624.000100][ T8166] ffff8880770f59a0 139904201203711 [ 624.003358][ T8075] mt_find.cold+0x8b/0x90 [ 624.008973][ T8166] ffff8880770f58c0 139904201334783 [ 624.012857][ T8075] ? mas_find+0x1d0/0x1d0 [ 624.019435][ T8166] 0000000000000000 140730916691967 [ 624.021319][ T8075] find_vma+0x10c/0x1b0 [ 624.102307][ T8075] ? can_vma_merge_before+0x390/0x390 [ 624.107695][ T8075] ? walk_page_test+0x78/0x180 [ 624.112492][ T8075] walk_page_range+0x2b1/0x4a0 [ 624.117268][ T8075] ? __walk_page_range+0x780/0x780 [ 624.122402][ T8075] mlock_fixup+0x650/0x810 [ 624.126840][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 624.132085][ T8075] ? mlock_fixup+0x810/0x810 [ 624.136701][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 624.142611][ T8075] do_mlock+0x25a/0x6d0 [ 624.146875][ T8075] ? folio_evictable+0x270/0x270 [ 624.151834][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 624.157742][ T8075] __x64_sys_mlock+0x59/0x80 [ 624.162346][ T8075] do_syscall_64+0x39/0xb0 [ 624.166782][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.172697][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 624.177121][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 624.196732][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 624.205152][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 624.213142][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 624.221115][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 624.229085][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.237062][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 624.245053][ T8075] [ 624.257529][ T8166] ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 624.258693][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.295631][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.302905][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 624.309293][ T8075] BUG at mt_find:6473 (1) [ 624.313634][ T8166] 139904200589312-139904201199615: [ 624.313646][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 624.319339][ T8166] 0000000000000000 [ 624.319350][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 624.319374][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 624.319396][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 624.319418][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 624.319440][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 624.319461][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 624.319484][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 624.319507][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 624.319529][ T8166] Pass: 10383235 Run:10383370 [ 624.319542][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 624.319566][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 624.319580][ T8166] Call Trace: [ 624.319588][ T8166] [ 624.319597][ T8166] dump_stack_lvl+0xd1/0x138 [ 624.319634][ T8166] mt_find.cold+0x8b/0x90 [ 624.329650][ T8075] 0-18446744073709551615: [ 624.331819][ T8166] ? mas_find+0x1d0/0x1d0 [ 624.338987][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 624.345666][ T8166] find_vma+0x10c/0x1b0 [ 624.345694][ T8166] ? can_vma_merge_before+0x390/0x390 [ 624.353578][ T8075] contents: [ 624.359527][ T8166] ? walk_page_test+0x78/0x180 [ 624.359566][ T8166] walk_page_range+0x2b1/0x4a0 [ 624.366793][ T8075] 93708188282880 [ 624.373402][ T8166] ? __walk_page_range+0x780/0x780 [ 624.382868][ T8075] 20480 [ 624.387677][ T8166] mlock_fixup+0x650/0x810 [ 624.387727][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 624.392762][ T8075] 18446603343213248512 [ 624.402164][ T8166] ? mlock_fixup+0x810/0x810 [ 624.402215][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 624.412567][ T8075] 0 [ 624.415526][ T8166] do_mlock+0x25a/0x6d0 [ 624.415570][ T8166] ? folio_evictable+0x270/0x270 [ 624.418884][ T8075] 0 [ 624.423074][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 624.429783][ T8075] 0 [ 624.431788][ T8166] __x64_sys_mlock+0x59/0x80 [ 624.436367][ T8075] 0 [ 624.443628][ T8166] do_syscall_64+0x39/0xb0 [ 624.448107][ T8075] 0 [ 624.453138][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 624.453168][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 624.453188][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 624.453210][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 624.453234][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 624.453250][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 624.453266][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 624.453281][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.453297][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 624.453331][ T8166] [ 624.484379][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 624.490481][ T8075] 0 [ 624.492333][ T8166] BUG at mt_find:6473 (1) [ 624.496960][ T8075] 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 624.497090][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 624.512424][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 624.515473][ T8075] contents: [ 624.517970][ T8166] 0-18446744073709551615: [ 624.523861][ T8075] 0000000000000000 536866815 [ 624.533905][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 624.535601][ T8075] ffff88802b7dbc40 536870911 [ 624.539046][ T8166] contents: [ 624.541499][ T8075] ffff88802b7dbd20 553631743 [ 624.556814][ T8166] 93708216008704 [ 624.572723][ T8075] 0000000000000000 553635839 [ 624.597849][ T8166] 20480 18446603342792269824 [ 624.608694][ T8075] ffff88801cae0e00 553631743 [ 624.614895][ T8166] 0 [ 624.622822][ T8075] ffff88801cae0d20 553644031 [ 624.631582][ T8166] 0 [ 624.633664][ T8075] ffff888020c88460 553648127 [ 624.640006][ T8166] 0 [ 624.663025][ T8075] ffff88802b7dbe00 553652223 [ 624.682366][ T8166] 0 [ 624.684036][ T8075] 0000000000000000 116829323263 [ 624.689334][ T8166] 0 [ 624.693072][ T8075] ffff88802b7dbee0 116833517567 [ 624.730484][ T8166] 0 [ 624.733521][ T8075] 0000000000000000 93825021800447 [ 624.740416][ T8166] 0 [ 624.741024][ T8075] ffff88808b414000 93825021939711 [ 624.750835][ T8166] | 02 02| [ 624.752766][ T8075] 0000000000000000 140322669588479 [ 624.757303][ T8166] ffff88806630860c 139904166133759 [ 624.760868][ T8075] ffff888075edd7e0 140322669592575 [ 624.770271][ T8166] ffff88806630840c 139904200589311 [ 624.771557][ T8075] 0000000000000000 0 [ 624.778192][ T8166] ffff8880267c3a0c 18446744073709551615 [ 624.778800][ T8075] 000000000000000d [ 624.783719][ T8166] 0000000000000000 0 [ 624.787133][ T8075] 0-536866815: [ 624.794952][ T8166] 0000000000000000 0 [ 624.797762][ T8075] 0000000000000000 [ 624.809805][ T8166] 0000000000000000 0 [ 624.812219][ T8075] 536866816-536870911: [ 624.832852][ T8166] 0000000000000000 0 [ 624.833343][ T8075] ffff88802b7dbc40 [ 624.851837][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 [ 624.856327][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 624.864313][ T8166] 0-139904166133759: [ 624.868021][ T8075] 553631744-553635839: 0000000000000000 [ 624.874283][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 624.878470][ T8075] 553635840-553631743: [ 624.879306][ T8166] contents: [ 624.886319][ T8075] ffff88801cae0e00 [ 624.894884][ T8166] 0000000000000000 536866815 [ 624.896009][ T8075] 553631744-553644031: [ 624.899453][ T8166] ffff88807e785620 536870911 [ 624.904110][ T8075] ffff88801cae0d20 [ 624.908749][ T8166] ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 624.921367][ T8075] 553644032-553648127: [ 624.954974][ T8166] 0-536866815: 0000000000000000 [ 624.966991][ T8166] 536866816-536870911: ffff88807e785620 [ 624.968507][ T8075] ffff888020c88460 [ 624.973011][ T8166] 536870912-553631743: ffff88807e785700 [ 624.982832][ T8166] 553631744-553635839: 0000000000000000 [ 624.988826][ T8166] 553635840-553631743: ffff8880770f5c40 [ 624.990866][ T8075] 553648128-553652223: [ 624.994725][ T8166] 553631744-553644031: ffff8880770f5b60 [ 625.004680][ T8075] ffff88802b7dbe00 [ 625.005597][ T8166] 553644032-553648127: [ 625.010378][ T8075] 553652224-116829323263: 0000000000000000 [ 625.015164][ T8166] ffff8880226cd1c0 [ 625.024818][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 625.025230][ T8166] 553648128-553652223: [ 625.032824][ T8075] 116833517568-93825021800447: 0000000000000000 [ 625.037980][ T8166] ffff88807e7857e0 [ 625.048424][ T8166] 553652224-116783185919: 0000000000000000 [ 625.051449][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 625.054750][ T8166] 116783185920-116789477375: [ 625.061628][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 625.072481][ T8166] ffff88807e7858c0 [ 625.074846][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 625.074873][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 625.143547][ T8166] 116789477376-93825005486079: 0000000000000000 [ 625.143577][ T8166] 93825005486080-93825005625343: [ 625.150214][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 625.150241][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 625.163545][ T8166] ffff88807e7859a0 [ 625.176819][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 625.183725][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 625.184022][ T8075] 140322680078336-140322682175487: [ 625.190733][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 625.196841][ T8075] ffff888075edd2a0 [ 625.252234][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 625.252262][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 625.252284][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 625.252307][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 625.252329][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 625.252351][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 625.252373][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 625.252396][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 625.252419][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 625.252442][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 625.252466][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 625.252489][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 625.266960][ T8075] 140322682175488-140322684272639: [ 625.271394][ T8166] 139904188723200-139904188743679: [ 625.278792][ T8075] ffff888075edd0e0 [ 625.306689][ T8166] 0000000000000000 [ 625.313776][ T8075] 140322684272640-140322686369791: [ 625.331186][ T8166] 139904188743680-139904200589311: [ 625.334525][ T8075] ffff888075edd1c0 [ 625.349784][ T8166] ffff8880770f5540 [ 625.353330][ T8075] 140322686369792-140322690564095: [ 625.364984][ T8166] 139904200589312-18446744073709551615: [ 625.368870][ T8075] ffff888075edda80 [ 625.384863][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 625.385807][ T8075] 140322690564096-140322690711551: [ 625.391767][ T8166] contents: [ 625.394949][ T8075] ffff888075eddb60 [ 625.394990][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 625.395039][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 625.395062][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 625.395086][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 625.395107][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 625.410997][ T8166] 0000000000000000 139904201199615 [ 625.411970][ T8075] 140322692182016-140322692202495: [ 625.416606][ T8166] ffff8880770f59a0 139904201203711 [ 625.422354][ T8075] 0000000000000000 [ 625.438405][ T8166] ffff8880770f58c0 139904201334783 [ 625.443442][ T8075] 140322692202496-140322704048127: [ 625.469641][ T8166] 0000000000000000 140730916691967 [ 625.470795][ T8075] ffff888075edd000 [ 625.477001][ T8166] ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 625.493610][ T8075] 140322704048128-18446744073709551615: [ 625.522660][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 625.529421][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 625.535999][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 625.536026][ T8166] 139904201203712-139904201334783: [ 625.544891][ T8075] contents: [ 625.556722][ T8166] ffff8880770f58c0 [ 625.557049][ T8075] 0000000000000000 140322704506879 [ 625.560231][ T8166] 139904201334784-140730916691967: [ 625.563893][ T8075] ffff88807c795380 140322704510975 [ 625.574516][ T8166] 0000000000000000 [ 625.574692][ T8075] ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 625.621815][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 625.629777][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 625.630471][ T8166] 140730916827136-140730917257215: [ 625.636933][ T8075] 140322704506880-140322704510975: [ 625.641145][ T8166] 0000000000000000 [ 625.642481][ T8075] ffff88807c795380 [ 625.651333][ T8166] 140730917257216-140730917273599: [ 625.652365][ T8075] 140322704510976-140322704642047: [ 625.659909][ T8166] ffff8880770f5700 [ 625.661507][ T8075] ffff88807c7959a0 [ 625.669944][ T8166] 140730917273600-140730917281791: [ 625.670602][ T8075] 140322704642048-140730494414847: [ 625.674147][ T8166] ffff8880770f57e0 [ 625.680803][ T8075] 0000000000000000 [ 625.693987][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 625.695145][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 625.701306][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 625.714890][ T8166] Pass: 10383235 Run:10383371 [ 625.715679][ T8075] 140730496278528-140730496294911: [ 625.720030][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 625.720058][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 625.725889][ T8075] ffff88807c795b60 [ 625.735356][ T8166] Call Trace: [ 625.735366][ T8166] [ 625.735376][ T8166] dump_stack_lvl+0xd1/0x138 [ 625.746000][ T8075] 140730496294912-140730496303103: [ 625.749176][ T8166] mt_find.cold+0x8b/0x90 [ 625.752445][ T8075] ffff88807c795c40 [ 625.755374][ T8166] ? mas_find+0x1d0/0x1d0 [ 625.755417][ T8166] find_vma+0x10c/0x1b0 [ 625.755444][ T8166] ? can_vma_merge_before+0x390/0x390 [ 625.760789][ T8075] 140730496303104-18446744073709551615: [ 625.765541][ T8166] ? walk_page_test+0x78/0x180 [ 625.765577][ T8166] walk_page_range+0x2b1/0x4a0 [ 625.765609][ T8166] ? __walk_page_range+0x780/0x780 [ 625.765657][ T8166] mlock_fixup+0x650/0x810 [ 625.765705][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 625.765744][ T8166] ? mlock_fixup+0x810/0x810 [ 625.765789][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 625.765828][ T8166] do_mlock+0x25a/0x6d0 [ 625.765864][ T8166] ? folio_evictable+0x270/0x270 [ 625.773786][ T8075] 0000000000000000 [ 625.773917][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 625.778484][ T8075] Pass: 10383235 Run:10383371 [ 625.782365][ T8166] __x64_sys_mlock+0x59/0x80 [ 625.782403][ T8166] do_syscall_64+0x39/0xb0 [ 625.782435][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.782462][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 625.782484][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 625.782508][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 625.782533][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 625.782549][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 625.782564][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 625.782579][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.782593][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 625.782628][ T8166] [ 625.809154][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 625.809174][ T8166] BUG at mt_find:6473 (1) [ 625.809189][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 625.809208][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 625.815664][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 625.824249][ T8166] contents: [ 625.829280][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 625.829295][ T8075] Call Trace: [ 625.829303][ T8075] [ 625.829312][ T8075] dump_stack_lvl+0xd1/0x138 [ 625.829355][ T8075] mt_find.cold+0x8b/0x90 [ 625.829391][ T8075] ? mas_find+0x1d0/0x1d0 [ 625.841909][ T8166] 93708216008704 [ 625.842202][ T8075] find_vma+0x10c/0x1b0 [ 625.849194][ T8166] 20480 [ 625.852716][ T8075] ? can_vma_merge_before+0x390/0x390 [ 625.863750][ T8166] 18446603342792269824 [ 625.867575][ T8075] ? walk_page_test+0x78/0x180 [ 625.867612][ T8075] walk_page_range+0x2b1/0x4a0 [ 625.867646][ T8075] ? __walk_page_range+0x780/0x780 [ 625.867694][ T8075] mlock_fixup+0x650/0x810 [ 625.873139][ T8166] 0 [ 625.891670][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 625.891712][ T8075] ? mlock_fixup+0x810/0x810 [ 625.891763][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 625.891803][ T8075] do_mlock+0x25a/0x6d0 [ 625.891840][ T8075] ? folio_evictable+0x270/0x270 [ 625.891883][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 625.891915][ T8075] __x64_sys_mlock+0x59/0x80 [ 625.891951][ T8075] do_syscall_64+0x39/0xb0 [ 625.891985][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 625.892014][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 625.892036][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 625.892059][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 625.892084][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 625.892100][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 625.892116][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 625.892132][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.892147][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 625.892183][ T8075] [ 625.898309][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 625.922923][ T8166] 0 [ 625.926166][ T8075] BUG at mt_find:6473 (1) [ 625.935036][ T8166] 0 [ 625.942073][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 625.944738][ T8166] 0 [ 625.950897][ T8075] 0-18446744073709551615: [ 625.961480][ T8166] 0 [ 625.963620][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 625.973104][ T8166] 0 0 | 02 02| ffff88806630860c 139904166133759 [ 625.983560][ T8075] contents: [ 625.995544][ T8166] ffff88806630840c 139904200589311 [ 626.000519][ T8075] 93708188282880 [ 626.003531][ T8166] ffff8880267c3a0c 18446744073709551615 [ 626.008392][ T8075] 20480 [ 626.027199][ T8166] 0000000000000000 0 [ 626.033039][ T8075] 18446603343213248512 [ 626.044105][ T8166] 0000000000000000 0 [ 626.063808][ T8075] 0 [ 626.068301][ T8166] 0000000000000000 0 [ 626.074496][ T8075] 0 [ 626.087890][ T8166] 0000000000000000 0 [ 626.091828][ T8075] 0 [ 626.099596][ T8166] 0000000000000000 0 [ 626.110902][ T8075] 0 [ 626.138802][ T8166] 0000000000000000 0 [ 626.150454][ T8075] 0 [ 626.154293][ T8166] 0000000000000000 [ 626.169810][ T8075] 0 [ 626.170431][ T8166] 0-139904166133759: [ 626.187233][ T8075] 0 [ 626.199661][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 626.212020][ T8075] | 02 02| [ 626.213115][ T8166] contents: [ 626.217800][ T8075] ffff88802228180c 140322669592575 [ 626.227812][ T8166] 0000000000000000 536866815 [ 626.229508][ T8075] ffff88802228160c 140322704048127 [ 626.232683][ T8166] ffff88807e785620 536870911 [ 626.237906][ T8075] ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 626.250847][ T8166] ffff88807e785700 553631743 [ 626.254135][ T8075] 0000000000000000 0 [ 626.259205][ T8166] 0000000000000000 553635839 [ 626.264521][ T8075] 0000000000000000 0 [ 626.265165][ T8166] ffff8880770f5c40 553631743 [ 626.268796][ T8075] 0000000000000000 [ 626.271282][ T8166] ffff8880770f5b60 553644031 [ 626.283226][ T8075] 0-140322669592575: [ 626.284503][ T8166] ffff8880226cd1c0 553648127 [ 626.288324][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 626.291389][ T8166] ffff88807e7857e0 553652223 [ 626.303374][ T8075] contents: [ 626.305648][ T8166] 0000000000000000 116783185919 [ 626.312042][ T8075] 0000000000000000 536866815 [ 626.315931][ T8166] ffff88807e7858c0 116789477375 [ 626.318823][ T8075] ffff88802b7dbc40 536870911 [ 626.324020][ T8166] 0000000000000000 93825005486079 [ 626.340512][ T8075] ffff88802b7dbd20 553631743 [ 626.359801][ T8166] ffff88807e7859a0 93825005625343 [ 626.371340][ T8075] 0000000000000000 553635839 [ 626.372969][ T8166] 0000000000000000 139904166129663 [ 626.376743][ T8075] ffff88801cae0e00 553631743 [ 626.385033][ T8166] ffff88807e785a80 139904166133759 [ 626.385824][ T8075] ffff88801cae0d20 553644031 [ 626.390274][ T8166] 0000000000000000 0 [ 626.399325][ T8075] ffff888020c88460 553648127 [ 626.421266][ T8166] 000000000000000d [ 626.421861][ T8075] ffff88802b7dbe00 553652223 [ 626.426597][ T8166] 0-536866815: [ 626.435892][ T8075] 0000000000000000 116829323263 [ 626.436363][ T8166] 0000000000000000 [ 626.444635][ T8075] ffff88802b7dbee0 116833517567 [ 626.446341][ T8166] 536866816-536870911: ffff88807e785620 [ 626.446369][ T8166] 536870912-553631743: ffff88807e785700 [ 626.446392][ T8166] 553631744-553635839: 0000000000000000 [ 626.446412][ T8166] 553635840-553631743: ffff8880770f5c40 [ 626.446434][ T8166] 553631744-553644031: ffff8880770f5b60 [ 626.446456][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 626.446477][ T8166] 553648128-553652223: ffff88807e7857e0 [ 626.446500][ T8166] 553652224-116783185919: 0000000000000000 [ 626.446522][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 626.446545][ T8166] 116789477376-93825005486079: 0000000000000000 [ 626.446564][ T8166] 93825005486080-93825005625343: [ 626.458844][ T8075] 0000000000000000 93825021800447 [ 626.462791][ T8166] ffff88807e7859a0 [ 626.473077][ T8075] ffff88808b414000 93825021939711 [ 626.476796][ T8166] 93825005625344-139904166129663: [ 626.487614][ T8075] 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 626.487667][ T8075] 0-536866815: [ 626.495140][ T8166] 0000000000000000 [ 626.510498][ T8075] 0000000000000000 [ 626.514610][ T8166] 139904166129664-139904166133759: [ 626.520224][ T8075] 536866816-536870911: [ 626.531592][ T8166] ffff88807e785a80 [ 626.531964][ T8075] ffff88802b7dbc40 [ 626.540370][ T8166] 139904166133760-139904200589311: [ 626.543840][ T8075] 536870912-553631743: [ 626.558048][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 626.564431][ T8075] ffff88802b7dbd20 [ 626.568921][ T8166] contents: [ 626.584345][ T8075] 553631744-553635839: [ 626.590992][ T8166] ffff88807e785b60 139904174522367 [ 626.600836][ T8075] 0000000000000000 [ 626.604691][ T8166] ffff88807e785c40 139904176619519 [ 626.632276][ T8075] 553635840-553631743: [ 626.635390][ T8166] ffff88807e785d20 139904178716671 [ 626.640989][ T8075] ffff88801cae0e00 [ 626.647424][ T8166] ffff88807e785e00 139904180813823 [ 626.657362][ T8075] 553631744-553644031: [ 626.659007][ T8166] ffff88807e785ee0 139904182910975 [ 626.663938][ T8075] ffff88801cae0d20 [ 626.667996][ T8166] ffff8880770f5000 139904187105279 [ 626.680567][ T8075] 553644032-553648127: [ 626.683010][ T8166] ffff8880770f50e0 139904187252735 [ 626.693213][ T8075] ffff888020c88460 [ 626.697820][ T8166] ffff8880770f51c0 139904187981823 [ 626.704528][ T8075] 553648128-553652223: [ 626.707767][ T8166] ffff8880770f52a0 139904188317695 [ 626.712356][ T8075] ffff88802b7dbe00 [ 626.715548][ T8166] 0000000000000000 139904188321791 [ 626.724819][ T8075] 553652224-116829323263: [ 626.729640][ T8166] ffff8880770f5380 139904188686335 [ 626.733900][ T8075] 0000000000000000 [ 626.748195][ T8166] ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 [ 626.760516][ T8075] 116829323264-116833517567: [ 626.776479][ T8166] 000000000000000d [ 626.779797][ T8075] ffff88802b7dbee0 [ 626.781517][ T8166] 139904166133760-139904174522367: [ 626.789443][ T8075] 116833517568-93825021800447: [ 626.789860][ T8166] ffff88807e785b60 [ 626.800104][ T8075] 0000000000000000 [ 626.802937][ T8166] 139904174522368-139904176619519: [ 626.804520][ T8075] 93825021800448-93825021939711: [ 626.809032][ T8166] ffff88807e785c40 [ 626.809047][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 626.809073][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 626.809096][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 626.809119][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 626.809141][ T8166] 139904187105280-139904187252735: [ 626.825776][ T8075] ffff88808b414000 [ 626.830797][ T8166] ffff8880770f50e0 [ 626.844980][ T8075] 93825021939712-140322669588479: [ 626.851590][ T8166] 139904187252736-139904187981823: [ 626.864372][ T8075] 0000000000000000 [ 626.864542][ T8166] ffff8880770f51c0 [ 626.870801][ T8075] 140322669588480-140322669592575: [ 626.875663][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 626.875691][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 626.875713][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 626.875734][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 626.875760][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 626.875858][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 626.875881][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 626.931711][ T8075] ffff888075edd7e0 [ 626.931730][ T8075] 140322669592576-140322704048127: [ 626.948692][ T8166] contents: [ 626.953616][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 626.954087][ T8166] 0000000000000000 139904201199615 [ 626.957490][ T8075] contents: [ 626.965484][ T8166] ffff8880770f59a0 139904201203711 [ 626.970336][ T8075] ffff888075edd8c0 140322677981183 [ 626.973522][ T8166] ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 626.986813][ T8075] ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 627.027036][ T8166] 139904200589312-139904201199615: [ 627.067027][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 627.075927][ T8166] 0000000000000000 [ 627.082359][ T8075] 140322677981184-140322680078335: [ 627.083275][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 627.093370][ T8075] ffff888075edd9a0 [ 627.095946][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 627.095973][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 627.095996][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 627.096019][ T8166] 140730916827136-140730917257215: [ 627.103444][ T8075] 140322680078336-140322682175487: [ 627.106703][ T8166] 0000000000000000 [ 627.120422][ T8075] ffff888075edd2a0 [ 627.124860][ T8166] 140730917257216-140730917273599: [ 627.135180][ T8075] 140322682175488-140322684272639: [ 627.136424][ T8166] ffff8880770f5700 [ 627.140422][ T8075] ffff888075edd0e0 [ 627.153341][ T8166] 140730917273600-140730917281791: [ 627.155876][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 627.159888][ T8166] ffff8880770f57e0 [ 627.165175][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 627.165201][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 627.165224][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 627.165246][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 627.165269][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 627.165291][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 627.165314][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 627.176022][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 627.176049][ T8166] Pass: 10383235 Run:10383373 [ 627.176063][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 627.176088][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 627.176101][ T8166] Call Trace: [ 627.176109][ T8166] [ 627.176119][ T8166] dump_stack_lvl+0xd1/0x138 [ 627.176156][ T8166] mt_find.cold+0x8b/0x90 [ 627.176192][ T8166] ? mas_find+0x1d0/0x1d0 [ 627.187161][ T8075] 140322692182016-140322692202495: [ 627.190043][ T8166] find_vma+0x10c/0x1b0 [ 627.200832][ T8075] 0000000000000000 [ 627.203860][ T8166] ? can_vma_merge_before+0x390/0x390 [ 627.210799][ T8075] 140322692202496-140322704048127: [ 627.217690][ T8166] ? walk_page_test+0x78/0x180 [ 627.217726][ T8166] walk_page_range+0x2b1/0x4a0 [ 627.217757][ T8166] ? __walk_page_range+0x780/0x780 [ 627.217803][ T8166] mlock_fixup+0x650/0x810 [ 627.217848][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 627.217890][ T8166] ? mlock_fixup+0x810/0x810 [ 627.217939][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 627.217978][ T8166] do_mlock+0x25a/0x6d0 [ 627.218018][ T8166] ? folio_evictable+0x270/0x270 [ 627.218063][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 627.218100][ T8166] __x64_sys_mlock+0x59/0x80 [ 627.218136][ T8166] do_syscall_64+0x39/0xb0 [ 627.218170][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 627.218199][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 627.218220][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 627.218244][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 627.218272][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 627.218288][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 627.218302][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 627.218317][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.218331][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 627.218367][ T8166] [ 627.240121][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 627.248297][ T8075] ffff888075edd000 [ 627.258313][ T8166] BUG at mt_find:6473 (1) [ 627.268740][ T8075] 140322704048128-18446744073709551615: [ 627.269042][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 627.273090][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 627.277716][ T8166] 0-18446744073709551615: [ 627.290615][ T8075] contents: [ 627.291381][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 627.301934][ T8075] 0000000000000000 140322704506879 [ 627.302324][ T8166] contents: [ 627.311134][ T8075] ffff88807c795380 140322704510975 [ 627.311859][ T8166] 93708216008704 [ 627.321147][ T8075] ffff88807c7959a0 140322704642047 [ 627.322929][ T8166] 20480 [ 627.330805][ T8075] 0000000000000000 140730494414847 [ 627.332556][ T8166] 18446603342792269824 [ 627.337196][ T8075] ffff88807c795a80 140730494550015 [ 627.356849][ T8166] 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 627.357020][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 [ 627.369421][ T8075] 0000000000000000 140730496278527 [ 627.391485][ T8166] 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 627.391642][ T8166] 0-536866815: 0000000000000000 [ 627.391665][ T8166] 536866816-536870911: ffff88807e785620 [ 627.391686][ T8166] 536870912-553631743: [ 627.408344][ T8075] ffff88807c795b60 140730496294911 [ 627.424697][ T8166] ffff88807e785700 [ 627.424716][ T8166] 553631744-553635839: 0000000000000000 [ 627.424744][ T8166] 553635840-553631743: ffff8880770f5c40 [ 627.424766][ T8166] 553631744-553644031: [ 627.437215][ T8075] ffff88807c795c40 140730496303103 [ 627.461210][ T8166] ffff8880770f5b60 [ 627.464170][ T8075] 0000000000000000 18446744073709551615 [ 627.472951][ T8166] 553644032-553648127: [ 627.487690][ T8075] 0000000000000000 0 [ 627.488384][ T8166] ffff8880226cd1c0 [ 627.495719][ T8075] 0000000000000000 0 [ 627.505421][ T8166] 553648128-553652223: [ 627.510210][ T8075] 0000000000000000 0 [ 627.518985][ T8166] ffff88807e7857e0 [ 627.519001][ T8166] 553652224-116783185919: 0000000000000000 [ 627.519026][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 627.519049][ T8166] 116789477376-93825005486079: 0000000000000000 [ 627.519072][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 627.519152][ T8075] 0000000000000000 0 [ 627.521936][ T8166] 93825005625344-139904166129663: [ 627.528681][ T8075] 0000000000000000 0 [ 627.542193][ T8166] 0000000000000000 [ 627.564437][ T8075] 0000000000000000 0 [ 627.589195][ T8166] 139904166129664-139904166133759: [ 627.620048][ T8075] 0000000000000008 [ 627.633651][ T8166] ffff88807e785a80 [ 627.636809][ T8075] 140322704048128-140322704506879: [ 627.640795][ T8166] 139904166133760-139904200589311: [ 627.644512][ T8075] 0000000000000000 [ 627.656509][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 627.669069][ T8075] 140322704506880-140322704510975: [ 627.675699][ T8166] contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 [ 627.683359][ T8075] ffff88807c795380 [ 627.684435][ T8166] 0000000000000000 0 [ 627.688578][ T8075] 140322704510976-140322704642047: [ 627.695984][ T8166] 000000000000000d [ 627.697036][ T8075] ffff88807c7959a0 [ 627.700635][ T8166] 139904166133760-139904174522367: [ 627.704336][ T8075] 140322704642048-140730494414847: [ 627.717637][ T8166] ffff88807e785b60 [ 627.724180][ T8075] 0000000000000000 [ 627.740737][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 627.740771][ T8166] 139904176619520-139904178716671: [ 627.745167][ T8075] 140730494414848-140730494550015: [ 627.750774][ T8166] ffff88807e785d20 [ 627.752395][ T8075] ffff88807c795a80 [ 627.763335][ T8166] 139904178716672-139904180813823: [ 627.765870][ T8075] 140730494550016-140730496278527: [ 627.773137][ T8166] ffff88807e785e00 [ 627.776752][ T8075] 0000000000000000 [ 627.788020][ T8166] 139904180813824-139904182910975: [ 627.838286][ T8075] 140730496278528-140730496294911: [ 627.852472][ T8166] ffff88807e785ee0 [ 627.855859][ T8075] ffff88807c795b60 [ 627.860339][ T8166] 139904182910976-139904187105279: [ 627.877846][ T8075] 140730496294912-140730496303103: [ 627.878666][ T8166] ffff8880770f5000 [ 627.892550][ T8075] ffff88807c795c40 [ 627.896413][ T8166] 139904187105280-139904187252735: [ 627.901975][ T8075] 140730496303104-18446744073709551615: [ 627.903580][ T8166] ffff8880770f50e0 [ 627.917088][ T8075] 0000000000000000 [ 627.926435][ T8166] 139904187252736-139904187981823: [ 627.938167][ T8075] Pass: 10383235 Run:10383374 [ 627.942062][ T8166] ffff8880770f51c0 [ 627.953876][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 627.958038][ T8166] 139904187981824-139904188317695: [ 627.960335][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 627.966710][ T8166] ffff8880770f52a0 [ 627.971814][ T8075] Call Trace: [ 627.971824][ T8075] [ 627.975870][ T8166] 139904188317696-139904188321791: [ 627.979215][ T8075] dump_stack_lvl+0xd1/0x138 [ 627.984736][ T8166] 0000000000000000 [ 627.989393][ T8075] mt_find.cold+0x8b/0x90 [ 627.989433][ T8075] ? mas_find+0x1d0/0x1d0 [ 627.993759][ T8166] 139904188321792-139904188686335: [ 628.002934][ T8075] find_vma+0x10c/0x1b0 [ 628.002962][ T8075] ? can_vma_merge_before+0x390/0x390 [ 628.002989][ T8075] ? walk_page_test+0x78/0x180 [ 628.003022][ T8075] walk_page_range+0x2b1/0x4a0 [ 628.009058][ T8166] ffff8880770f5380 [ 628.018588][ T8075] ? __walk_page_range+0x780/0x780 [ 628.018640][ T8075] mlock_fixup+0x650/0x810 [ 628.022766][ T8166] 139904188686336-139904188723199: [ 628.025664][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 628.025708][ T8075] ? mlock_fixup+0x810/0x810 [ 628.025752][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 628.029115][ T8166] ffff8880770f5460 [ 628.034181][ T8075] do_mlock+0x25a/0x6d0 [ 628.039906][ T8166] 139904188723200-139904188743679: [ 628.042460][ T8075] ? folio_evictable+0x270/0x270 [ 628.047058][ T8166] 0000000000000000 [ 628.051079][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 628.056895][ T8166] 139904188743680-139904200589311: [ 628.060727][ T8075] __x64_sys_mlock+0x59/0x80 [ 628.067402][ T8166] ffff8880770f5540 [ 628.070814][ T8075] do_syscall_64+0x39/0xb0 [ 628.075939][ T8166] 139904200589312-18446744073709551615: [ 628.079255][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 628.084342][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 628.088733][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 628.088754][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 628.088777][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 628.088802][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 628.088817][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 628.095303][ T8166] contents: [ 628.099514][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 628.104092][ T8166] 0000000000000000 139904201199615 [ 628.109983][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.110006][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 628.110041][ T8075] [ 628.139006][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 628.139027][ T8075] BUG at mt_find:6473 (1) [ 628.139042][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 628.139064][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 [ 628.146630][ T8166] ffff8880770f59a0 139904201203711 [ 628.161340][ T8075] 0 [ 628.167337][ T8166] ffff8880770f58c0 139904201334783 [ 628.176012][ T8075] 0 [ 628.178417][ T8166] 0000000000000000 140730916691967 [ 628.181348][ T8075] 0 0 [ 628.201784][ T8166] ffff8880770f5620 140730916827135 [ 628.217444][ T8075] 0 [ 628.218330][ T8166] 0000000000000000 140730917257215 [ 628.235819][ T8075] 0 [ 628.239190][ T8166] ffff8880770f5700 140730917273599 [ 628.268343][ T8075] 0 [ 628.270927][ T8166] ffff8880770f57e0 140730917281791 [ 628.274192][ T8075] | 02 02| [ 628.282898][ T8166] 0000000000000000 18446744073709551615 [ 628.304920][ T8075] ffff88802228180c 140322669592575 [ 628.311949][ T8166] 0000000000000000 0 [ 628.312557][ T8075] ffff88802228160c 140322704048127 [ 628.318052][ T8166] 0000000000000000 0 [ 628.328173][ T8075] ffff88807a4f6c0c 18446744073709551615 [ 628.328892][ T8166] 0000000000000000 0 [ 628.333786][ T8075] 0000000000000000 0 [ 628.336580][ T8166] 0000000000000000 0 0000000000000000 0 [ 628.350501][ T8075] 0000000000000000 0 [ 628.353812][ T8166] 0000000000000000 0 [ 628.363838][ T8075] 0000000000000000 0 [ 628.364878][ T8166] 0000000000000008 [ 628.371668][ T8075] 0000000000000000 0 [ 628.373561][ T8166] 139904200589312-139904201199615: [ 628.377562][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 [ 628.377596][ T8075] 0-140322669592575: [ 628.383797][ T8166] 0000000000000000 [ 628.394721][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 628.397880][ T8166] 139904201199616-139904201203711: [ 628.400975][ T8075] contents: [ 628.405297][ T8166] ffff8880770f59a0 [ 628.416878][ T8075] 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 [ 628.424155][ T8166] 139904201203712-139904201334783: [ 628.445382][ T8075] ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 628.445448][ T8075] 0-536866815: 0000000000000000 [ 628.445470][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 628.445492][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 628.445513][ T8075] 553631744-553635839: 0000000000000000 [ 628.445534][ T8075] 553635840-553631743: ffff88801cae0e00 [ 628.445556][ T8075] 553631744-553644031: ffff88801cae0d20 [ 628.445577][ T8075] 553644032-553648127: ffff888020c88460 [ 628.445599][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 628.445620][ T8075] 553652224-116829323263: 0000000000000000 [ 628.445641][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 628.445664][ T8075] 116833517568-93825021800447: 0000000000000000 [ 628.445686][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 628.445708][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 628.445730][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 628.445752][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 [ 628.454059][ T8166] ffff8880770f58c0 [ 628.458493][ T8075] ffff888075edde00 140322692145151 [ 628.508840][ T8166] 139904201334784-140730916691967: [ 628.515094][ T8075] ffff888075eddee0 140322692182015 [ 628.520202][ T8166] 0000000000000000 [ 628.532571][ T8075] 0000000000000000 140322692202495 [ 628.538359][ T8166] 140730916691968-140730916827135: [ 628.542955][ T8075] ffff888075edd000 140322704048127 [ 628.561107][ T8166] ffff8880770f5620 [ 628.562423][ T8075] 0000000000000000 0 [ 628.581953][ T8166] 140730916827136-140730917257215: [ 628.589007][ T8075] 000000000000000d [ 628.653532][ T8166] 0000000000000000 [ 628.667948][ T8075] 140322669592576-140322677981183: [ 628.672463][ T8166] 140730917257216-140730917273599: [ 628.677689][ T8075] ffff888075edd8c0 [ 628.685019][ T8166] ffff8880770f5700 [ 628.685464][ T8075] 140322677981184-140322680078335: [ 628.690829][ T8166] 140730917273600-140730917281791: [ 628.694358][ T8075] ffff888075edd9a0 [ 628.705370][ T8166] ffff8880770f57e0 [ 628.709532][ T8075] 140322680078336-140322682175487: [ 628.713219][ T8166] 140730917281792-18446744073709551615: [ 628.716933][ T8075] ffff888075edd2a0 [ 628.716952][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 628.716979][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 628.717003][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 628.717026][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 628.717049][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 628.717071][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 628.717093][ T8075] 140322691776512-140322691780607: [ 628.729681][ T8166] 0000000000000000 [ 628.732570][ T8075] 0000000000000000 [ 628.742708][ T8166] Pass: 10383235 Run:10383375 [ 628.747851][ T8075] 140322691780608-140322692145151: [ 628.759162][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 628.771649][ T8075] ffff888075edde00 [ 628.773009][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 628.780102][ T8075] 140322692145152-140322692182015: [ 628.786829][ T8166] Call Trace: [ 628.786839][ T8166] [ 628.786849][ T8166] dump_stack_lvl+0xd1/0x138 [ 628.793964][ T8075] ffff888075eddee0 [ 628.799302][ T8166] mt_find.cold+0x8b/0x90 [ 628.799340][ T8166] ? mas_find+0x1d0/0x1d0 [ 628.803176][ T8075] 140322692182016-140322692202495: [ 628.806772][ T8166] find_vma+0x10c/0x1b0 [ 628.806801][ T8166] ? can_vma_merge_before+0x390/0x390 [ 628.806829][ T8166] ? walk_page_test+0x78/0x180 [ 628.806862][ T8166] walk_page_range+0x2b1/0x4a0 [ 628.806897][ T8166] ? __walk_page_range+0x780/0x780 [ 628.806947][ T8166] mlock_fixup+0x650/0x810 [ 628.806994][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 628.807035][ T8166] ? mlock_fixup+0x810/0x810 [ 628.807080][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 628.819836][ T8075] 0000000000000000 [ 628.827088][ T8166] do_mlock+0x25a/0x6d0 [ 628.830815][ T8075] 140322692202496-140322704048127: [ 628.840857][ T8166] ? folio_evictable+0x270/0x270 [ 628.846414][ T8075] ffff888075edd000 [ 628.849671][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 628.852575][ T8075] 140322704048128-18446744073709551615: [ 628.857150][ T8166] __x64_sys_mlock+0x59/0x80 [ 628.857186][ T8166] do_syscall_64+0x39/0xb0 [ 628.857217][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 628.857242][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 628.857263][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 628.857287][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 628.857312][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 628.857329][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 628.857343][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 628.857356][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.857369][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 628.857402][ T8166] [ 628.869088][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 628.884626][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 628.889455][ T8166] BUG at mt_find:6473 (1) [ 628.890935][ T8075] contents: [ 628.895893][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 628.900910][ T8075] 0000000000000000 140322704506879 [ 628.905394][ T8166] 0-18446744073709551615: [ 628.914923][ T8075] ffff88807c795380 140322704510975 [ 628.920815][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 628.924332][ T8075] ffff88807c7959a0 140322704642047 [ 628.928512][ T8166] contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 628.928769][ T8166] 0-139904166133759: [ 628.943620][ T8075] 0000000000000000 140730494414847 [ 628.949366][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 628.965630][ T8075] ffff88807c795a80 140730494550015 [ 628.987403][ T8166] contents: [ 628.995356][ T8075] 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 [ 629.028178][ T8166] 0000000000000000 536866815 [ 629.043473][ T8075] 0000000000000000 18446744073709551615 [ 629.044370][ T8166] ffff88807e785620 536870911 [ 629.050707][ T8075] 0000000000000000 0 [ 629.053421][ T8166] ffff88807e785700 553631743 [ 629.062305][ T8075] 0000000000000000 0 [ 629.074422][ T8166] 0000000000000000 553635839 [ 629.078152][ T8075] 0000000000000000 0 [ 629.083328][ T8166] ffff8880770f5c40 553631743 [ 629.095301][ T8075] 0000000000000000 0 [ 629.101725][ T8166] ffff8880770f5b60 553644031 [ 629.113500][ T8075] 0000000000000000 0 [ 629.138835][ T8166] ffff8880226cd1c0 553648127 [ 629.175145][ T8075] 0000000000000000 0 0000000000000008 [ 629.175176][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 629.175200][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 629.175223][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 629.175246][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 629.175273][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 629.175297][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 629.175319][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 629.175343][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 629.175367][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 629.175390][ T8075] Pass: 10383235 Run:10383376 [ 629.175404][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 629.189397][ T8166] ffff88807e7857e0 553652223 [ 629.190358][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 629.194319][ T8166] 0000000000000000 116783185919 [ 629.199669][ T8075] Call Trace: [ 629.199678][ T8075] [ 629.199689][ T8075] dump_stack_lvl+0xd1/0x138 [ 629.199724][ T8075] mt_find.cold+0x8b/0x90 [ 629.199756][ T8075] ? mas_find+0x1d0/0x1d0 [ 629.199796][ T8075] find_vma+0x10c/0x1b0 [ 629.199821][ T8075] ? can_vma_merge_before+0x390/0x390 [ 629.199850][ T8075] ? walk_page_test+0x78/0x180 [ 629.199884][ T8075] walk_page_range+0x2b1/0x4a0 [ 629.199919][ T8075] ? __walk_page_range+0x780/0x780 [ 629.199970][ T8075] mlock_fixup+0x650/0x810 [ 629.200018][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 629.212732][ T8166] ffff88807e7858c0 116789477375 [ 629.217294][ T8075] ? mlock_fixup+0x810/0x810 [ 629.217346][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 629.221326][ T8166] 0000000000000000 93825005486079 [ 629.225987][ T8075] do_mlock+0x25a/0x6d0 [ 629.226027][ T8075] ? folio_evictable+0x270/0x270 [ 629.226071][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 629.226106][ T8075] __x64_sys_mlock+0x59/0x80 [ 629.226143][ T8075] do_syscall_64+0x39/0xb0 [ 629.238820][ T8166] ffff88807e7859a0 93825005625343 [ 629.240926][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 629.251149][ T8166] 0000000000000000 139904166129663 [ 629.254757][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 629.270812][ T8166] ffff88807e785a80 139904166133759 [ 629.275619][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 629.275644][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 629.275668][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 629.275684][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 629.275698][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 629.275713][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.275726][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 629.275761][ T8075] [ 629.541364][ T8166] 0000000000000000 0 000000000000000d [ 629.546907][ T8166] 0-536866815: 0000000000000000 [ 629.552132][ T8166] 536866816-536870911: ffff88807e785620 [ 629.555678][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 629.558245][ T8166] 536870912-553631743: [ 629.563918][ T8075] BUG at mt_find:6473 (1) [ 629.563934][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 629.568481][ T8166] ffff88807e785700 [ 629.568493][ T8166] 553631744-553635839: 0000000000000000 [ 629.568516][ T8166] 553635840-553631743: ffff8880770f5c40 [ 629.568539][ T8166] 553631744-553644031: ffff8880770f5b60 [ 629.568560][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 629.568583][ T8166] 553648128-553652223: ffff88807e7857e0 [ 629.568605][ T8166] 553652224-116783185919: 0000000000000000 [ 629.568626][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 629.568649][ T8166] 116789477376-93825005486079: [ 629.628615][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 629.673935][ T8166] 0000000000000000 [ 629.677830][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 629.684633][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 629.691639][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 629.752332][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 629.763487][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 629.814895][ T8075] 0-536866815: 0000000000000000 [ 629.827042][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 629.830638][ T8166] 139904166133760-139904174522367: [ 629.832981][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 629.842261][ T8166] ffff88807e785b60 [ 629.853905][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 629.870500][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 629.875464][ T8075] 553631744-553635839: 0000000000000000 [ 629.884121][ T8075] 553635840-553631743: ffff88801cae0e00 [ 629.892545][ T8075] 553631744-553644031: ffff88801cae0d20 [ 629.893042][ T8166] 139904178716672-139904180813823: [ 629.898507][ T8075] 553644032-553648127: ffff888020c88460 [ 629.898530][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 629.898552][ T8075] 553652224-116829323263: 0000000000000000 [ 629.898574][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 629.912235][ T8166] ffff88807e785e00 [ 629.917534][ T8075] 116833517568-93825021800447: [ 629.923405][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 629.951124][ T8075] 0000000000000000 [ 629.954308][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 629.968948][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 629.973455][ T8166] 139904187105280-139904187252735: [ 629.978393][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 629.992166][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 629.994496][ T8166] ffff8880770f50e0 [ 630.003131][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 630.019261][ T8166] 139904187252736-139904187981823: [ 630.061476][ T8075] 140322669592576-140322677981183: [ 630.067342][ T8166] ffff8880770f51c0 [ 630.067748][ T8075] ffff888075edd8c0 [ 630.073494][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 630.086666][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 630.090006][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 630.102201][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 630.102329][ T8075] 140322680078336-140322682175487: [ 630.109467][ T8166] 139904188686336-139904188723199: [ 630.115244][ T8075] ffff888075edd2a0 [ 630.124517][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 630.124598][ T8166] ffff8880770f5460 [ 630.132260][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 630.142446][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 630.142998][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 630.149635][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 630.163402][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 630.164126][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 630.171643][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 630.184388][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 630.187234][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 630.193181][ T8075] 140322691780608-140322692145151: [ 630.244365][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 630.250966][ T8075] ffff888075edde00 [ 630.257047][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 630.263707][ T8075] 140322692145152-140322692182015: [ 630.267756][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 630.267783][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 630.267806][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 630.267829][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 630.267850][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 630.267872][ T8166] 140730917273600-140730917281791: [ 630.282686][ T8075] ffff888075eddee0 [ 630.289624][ T8166] ffff8880770f57e0 [ 630.302370][ T8075] 140322692182016-140322692202495: [ 630.310155][ T8166] 140730917281792-18446744073709551615: [ 630.314553][ T8075] 0000000000000000 [ 630.318299][ T8166] 0000000000000000 [ 630.324961][ T8075] 140322692202496-140322704048127: [ 630.328019][ T8166] Pass: 10383347 Run:10383489 [ 630.344859][ T8075] ffff888075edd000 [ 630.357708][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 630.362018][ T8075] 140322704048128-18446744073709551615: [ 630.367528][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 630.367543][ T8166] Call Trace: [ 630.367551][ T8166] [ 630.367559][ T8166] dump_stack_lvl+0xd1/0x138 [ 630.367596][ T8166] mt_find.cold+0x8b/0x90 [ 630.373388][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 630.383430][ T8166] ? mas_find+0x1d0/0x1d0 [ 630.383474][ T8166] find_vma+0x10c/0x1b0 [ 630.383498][ T8166] ? can_vma_merge_before+0x390/0x390 [ 630.383529][ T8166] ? walk_page_test+0x78/0x180 [ 630.383564][ T8166] walk_page_range+0x2b1/0x4a0 [ 630.383599][ T8166] ? __walk_page_range+0x780/0x780 [ 630.397243][ T8075] contents: [ 630.398719][ T8166] mlock_fixup+0x650/0x810 [ 630.411654][ T8075] 0000000000000000 140322704506879 [ 630.414683][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 630.422244][ T8075] ffff88807c795380 140322704510975 [ 630.424765][ T8166] ? mlock_fixup+0x810/0x810 [ 630.437109][ T8075] ffff88807c7959a0 140322704642047 [ 630.437878][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 630.442338][ T8075] 0000000000000000 140730494414847 [ 630.447439][ T8166] do_mlock+0x25a/0x6d0 [ 630.447483][ T8166] ? folio_evictable+0x270/0x270 [ 630.447532][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 630.447566][ T8166] __x64_sys_mlock+0x59/0x80 [ 630.462645][ T8075] ffff88807c795a80 140730494550015 [ 630.467781][ T8166] do_syscall_64+0x39/0xb0 [ 630.467820][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 630.467847][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 630.467868][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 630.467889][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 630.467913][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 630.482104][ T8075] 0000000000000000 140730496278527 [ 630.483118][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 630.488888][ T8075] ffff88807c795b60 140730496294911 [ 630.493908][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 630.493925][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.493938][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 630.493970][ T8166] [ 630.509110][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 630.509130][ T8166] BUG at mt_find:6473 (1) [ 630.524674][ T8075] ffff88807c795c40 140730496303103 [ 630.547074][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 630.548744][ T8075] 0000000000000000 18446744073709551615 [ 630.556166][ T8166] 0-18446744073709551615: [ 630.571319][ T8075] 0000000000000000 0 [ 630.576398][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 630.592135][ T8075] 0000000000000000 0 [ 630.592205][ T8166] contents: [ 630.601298][ T8075] 0000000000000000 0 [ 630.605194][ T8166] 93708216008704 [ 630.617877][ T8075] 0000000000000000 0 [ 630.654973][ T8166] 20480 [ 630.658457][ T8075] 0000000000000000 0 [ 630.661037][ T8166] 18446603342792269824 [ 630.664651][ T8075] 0000000000000000 0 [ 630.678552][ T8166] 0 [ 630.679783][ T8075] 0000000000000008 [ 630.683724][ T8166] 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 630.690985][ T8075] 140322704048128-140322704506879: [ 630.716366][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 630.731175][ T8075] 0000000000000000 [ 630.775648][ T8166] 0-536866815: 0000000000000000 [ 630.783220][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 630.785100][ T8166] 536866816-536870911: ffff88807e785620 [ 630.790239][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 630.804344][ T8166] 536870912-553631743: ffff88807e785700 [ 630.804995][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 630.810898][ T8075] 140730494414848-140730494550015: [ 630.818202][ T8166] 553631744-553635839: 0000000000000000 [ 630.824832][ T8075] ffff88807c795a80 [ 630.830081][ T8166] 553635840-553631743: [ 630.833438][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 630.838764][ T8166] ffff8880770f5c40 [ 630.849606][ T8166] 553631744-553644031: ffff8880770f5b60 [ 630.852866][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 630.855851][ T8166] 553644032-553648127: [ 630.862527][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 630.867430][ T8166] ffff8880226cd1c0 [ 630.880959][ T8166] 553648128-553652223: ffff88807e7857e0 [ 630.882138][ T8075] 140730496303104-18446744073709551615: [ 630.887788][ T8166] 553652224-116783185919: 0000000000000000 [ 630.893832][ T8075] 0000000000000000 [ 630.901082][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 630.912615][ T8166] 116789477376-93825005486079: 0000000000000000 [ 630.919331][ T8075] Pass: 10383347 Run:10383490 [ 630.919677][ T8166] 93825005486080-93825005625343: [ 630.924007][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 630.929636][ T8166] ffff88807e7859a0 [ 630.939329][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 630.939345][ T8075] Call Trace: [ 630.939353][ T8075] [ 630.939364][ T8075] dump_stack_lvl+0xd1/0x138 [ 630.943641][ T8166] 93825005625344-139904166129663: [ 630.953195][ T8075] mt_find.cold+0x8b/0x90 [ 630.953234][ T8075] ? mas_find+0x1d0/0x1d0 [ 630.956797][ T8166] 0000000000000000 [ 630.959431][ T8075] find_vma+0x10c/0x1b0 [ 630.963976][ T8166] 139904166129664-139904166133759: [ 630.969497][ T8075] ? can_vma_merge_before+0x390/0x390 [ 630.969528][ T8075] ? walk_page_test+0x78/0x180 [ 630.969559][ T8075] walk_page_range+0x2b1/0x4a0 [ 630.969593][ T8075] ? __walk_page_range+0x780/0x780 [ 630.969640][ T8075] mlock_fixup+0x650/0x810 [ 630.974843][ T8166] ffff88807e785a80 [ 630.978357][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 630.982044][ T8166] 139904166133760-139904200589311: [ 630.986179][ T8075] ? mlock_fixup+0x810/0x810 [ 630.986229][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 630.992383][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 630.997181][ T8075] do_mlock+0x25a/0x6d0 [ 630.997224][ T8075] ? folio_evictable+0x270/0x270 [ 631.002369][ T8166] contents: [ 631.006708][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 631.006745][ T8075] __x64_sys_mlock+0x59/0x80 [ 631.006782][ T8075] do_syscall_64+0x39/0xb0 [ 631.006815][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 631.006840][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 631.006863][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 631.006886][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 631.006912][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 631.006929][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 631.006945][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 631.006960][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.006976][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 631.007011][ T8075] [ 631.024519][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 631.058898][ T8166] ffff88807e785b60 139904174522367 [ 631.066646][ T8075] BUG at mt_find:6473 (1) [ 631.076487][ T8166] ffff88807e785c40 139904176619519 [ 631.077456][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 631.083465][ T8166] ffff88807e785d20 139904178716671 [ 631.087625][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 [ 631.117537][ T8166] ffff88807e785e00 139904180813823 [ 631.133049][ T8075] 0000000000000000 0 [ 631.133625][ T8166] ffff88807e785ee0 139904182910975 [ 631.141374][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 631.141442][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 [ 631.169564][ T8166] ffff8880770f5000 139904187105279 [ 631.171921][ T8075] ffff88802b7dbee0 116833517567 [ 631.181976][ T8166] ffff8880770f50e0 139904187252735 [ 631.190100][ T8075] 0000000000000000 93825021800447 [ 631.207240][ T8166] ffff8880770f51c0 139904187981823 [ 631.221777][ T8075] ffff88808b414000 93825021939711 [ 631.235612][ T8166] ffff8880770f52a0 139904188317695 [ 631.237183][ T8075] 0000000000000000 140322669588479 [ 631.255663][ T8166] 0000000000000000 139904188321791 [ 631.279912][ T8075] ffff888075edd7e0 140322669592575 [ 631.298364][ T8166] ffff8880770f5380 139904188686335 [ 631.309138][ T8075] 0000000000000000 0 [ 631.310723][ T8166] ffff8880770f5460 139904188723199 [ 631.316784][ T8075] 000000000000000d [ 631.323076][ T8166] 0000000000000000 139904188743679 [ 631.334878][ T8075] 0-536866815: [ 631.337714][ T8166] ffff8880770f5540 139904200589311 [ 631.341469][ T8075] 0000000000000000 [ 631.346692][ T8166] 0000000000000000 0 000000000000000d [ 631.346715][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 631.363320][ T8075] 536866816-536870911: [ 631.372887][ T8166] 139904174522368-139904176619519: [ 631.374569][ T8075] ffff88802b7dbc40 [ 631.381167][ T8166] ffff88807e785c40 [ 631.393275][ T8075] 536870912-553631743: [ 631.397425][ T8166] 139904176619520-139904178716671: [ 631.399041][ T8075] ffff88802b7dbd20 [ 631.403467][ T8166] ffff88807e785d20 [ 631.416484][ T8075] 553631744-553635839: 0000000000000000 [ 631.416514][ T8075] 553635840-553631743: ffff88801cae0e00 [ 631.416536][ T8075] 553631744-553644031: ffff88801cae0d20 [ 631.416555][ T8075] 553644032-553648127: ffff888020c88460 [ 631.416576][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 631.416597][ T8075] 553652224-116829323263: 0000000000000000 [ 631.416619][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 631.416641][ T8075] 116833517568-93825021800447: 0000000000000000 [ 631.416663][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 631.416684][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 631.416705][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 631.416727][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 631.416952][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 631.416975][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 631.416997][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 631.417020][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 631.417043][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 631.417065][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 631.417087][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 631.417110][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 631.417132][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 631.417155][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 631.417177][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 631.417200][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 631.417222][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 631.417242][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 631.417265][ T8075] 140322704048128-18446744073709551615: [ 631.426196][ T8166] 139904178716672-139904180813823: [ 631.443584][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 631.447916][ T8166] ffff88807e785e00 [ 631.453828][ T8075] contents: [ 631.460196][ T8166] 139904180813824-139904182910975: [ 631.475381][ T8075] 0000000000000000 140322704506879 [ 631.480385][ T8166] ffff88807e785ee0 [ 631.494662][ T8075] ffff88807c795380 140322704510975 [ 631.545912][ T8166] 139904182910976-139904187105279: [ 631.592297][ T8075] ffff88807c7959a0 140322704642047 [ 631.605974][ T8166] ffff8880770f5000 [ 631.607451][ T8075] 0000000000000000 140730494414847 [ 631.615002][ T8166] 139904187105280-139904187252735: [ 631.621406][ T8075] ffff88807c795a80 140730494550015 [ 631.636939][ T8166] ffff8880770f50e0 [ 631.641924][ T8075] 0000000000000000 140730496278527 [ 631.650108][ T8166] 139904187252736-139904187981823: [ 631.660801][ T8075] ffff88807c795b60 140730496294911 [ 631.664500][ T8166] ffff8880770f51c0 [ 631.669025][ T8075] ffff88807c795c40 140730496303103 [ 631.673384][ T8166] 139904187981824-139904188317695: [ 631.696053][ T8075] 0000000000000000 18446744073709551615 [ 631.707314][ T8166] ffff8880770f52a0 [ 631.707330][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 631.707357][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 631.707379][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 631.707401][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 631.707423][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 631.707446][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 631.725576][ T8075] 0000000000000000 0 [ 631.746226][ T8166] contents: [ 631.749094][ T8075] 0000000000000000 0 [ 631.753445][ T8166] 0000000000000000 139904201199615 [ 631.759247][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 631.759303][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 631.759329][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 631.759351][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 631.759374][ T8075] 140322704642048-140730494414847: [ 631.774004][ T8166] ffff8880770f59a0 139904201203711 [ 631.781445][ T8075] 0000000000000000 [ 631.784501][ T8166] ffff8880770f58c0 139904201334783 [ 631.791361][ T8075] 140730494414848-140730494550015: [ 631.805801][ T8166] 0000000000000000 140730916691967 [ 631.810610][ T8075] ffff88807c795a80 [ 631.813385][ T8166] ffff8880770f5620 140730916827135 [ 631.825696][ T8075] 140730494550016-140730496278527: [ 631.827322][ T8166] 0000000000000000 140730917257215 [ 631.842978][ T8075] 0000000000000000 [ 631.843472][ T8166] ffff8880770f5700 140730917273599 [ 631.850562][ T8075] 140730496278528-140730496294911: [ 631.868313][ T8166] ffff8880770f57e0 140730917281791 [ 631.879730][ T8075] ffff88807c795b60 [ 631.894063][ T8166] 0000000000000000 18446744073709551615 [ 631.903231][ T8075] 140730496294912-140730496303103: [ 631.910469][ T8166] 0000000000000000 0 [ 631.911733][ T8075] ffff88807c795c40 [ 631.922604][ T8166] 0000000000000000 0 [ 631.923659][ T8075] 140730496303104-18446744073709551615: [ 631.932243][ T8166] 0000000000000000 0 [ 631.932609][ T8075] 0000000000000000 [ 631.938397][ T8166] 0000000000000000 0 [ 631.945040][ T8075] Pass: 10383347 Run:10383491 [ 631.948067][ T8166] 0000000000000000 0 [ 631.951521][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 631.955517][ T8166] 0000000000000000 0 [ 631.961429][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 631.965405][ T8166] 0000000000000008 [ 631.969082][ T8075] Call Trace: [ 631.969092][ T8075] [ 631.973041][ T8166] 139904200589312-139904201199615: [ 631.977704][ T8075] dump_stack_lvl+0xd1/0x138 [ 631.981684][ T8166] 0000000000000000 [ 631.991471][ T8075] mt_find.cold+0x8b/0x90 [ 631.991513][ T8075] ? mas_find+0x1d0/0x1d0 [ 632.039139][ T8075] find_vma+0x10c/0x1b0 [ 632.043305][ T8075] ? can_vma_merge_before+0x390/0x390 [ 632.048683][ T8075] ? walk_page_test+0x78/0x180 [ 632.053540][ T8075] walk_page_range+0x2b1/0x4a0 [ 632.058313][ T8075] ? __walk_page_range+0x780/0x780 [ 632.063443][ T8075] mlock_fixup+0x650/0x810 [ 632.067877][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 632.073085][ T8075] ? mlock_fixup+0x810/0x810 [ 632.077692][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 632.083593][ T8075] do_mlock+0x25a/0x6d0 [ 632.087763][ T8075] ? folio_evictable+0x270/0x270 [ 632.092716][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 632.098614][ T8075] __x64_sys_mlock+0x59/0x80 [ 632.103213][ T8075] do_syscall_64+0x39/0xb0 [ 632.107638][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 632.113617][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 632.118029][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.137655][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 632.146076][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 632.154219][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 632.162187][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 632.170155][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.178121][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 632.186127][ T8075] [ 632.202684][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 632.206501][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 632.209755][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 632.223095][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 632.223276][ T8075] BUG at mt_find:6473 (1) [ 632.230405][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 632.242407][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 632.244023][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 632.249867][ T8166] 140730917257216-140730917273599: [ 632.257848][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 [ 632.263616][ T8166] ffff8880770f5700 [ 632.263629][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 632.298208][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 632.303003][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 632.322264][ T8166] Pass: 10383347 Run:10383492 [ 632.327227][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 632.337132][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 632.347187][ T8166] Call Trace: [ 632.350548][ T8166] [ 632.353475][ T8166] dump_stack_lvl+0xd1/0x138 [ 632.358077][ T8166] mt_find.cold+0x8b/0x90 [ 632.362411][ T8166] ? mas_find+0x1d0/0x1d0 [ 632.366761][ T8166] find_vma+0x10c/0x1b0 [ 632.370916][ T8166] ? can_vma_merge_before+0x390/0x390 [ 632.376302][ T8166] ? walk_page_test+0x78/0x180 [ 632.381071][ T8166] walk_page_range+0x2b1/0x4a0 [ 632.385846][ T8166] ? __walk_page_range+0x780/0x780 [ 632.390976][ T8166] mlock_fixup+0x650/0x810 [ 632.395407][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 632.400616][ T8166] ? mlock_fixup+0x810/0x810 [ 632.405223][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 632.411128][ T8166] do_mlock+0x25a/0x6d0 [ 632.415345][ T8166] ? folio_evictable+0x270/0x270 [ 632.420297][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 632.426195][ T8166] __x64_sys_mlock+0x59/0x80 [ 632.430791][ T8166] do_syscall_64+0x39/0xb0 [ 632.435300][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 632.441198][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 632.445613][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.465239][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 632.473670][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 632.481644][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 632.489612][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 632.497579][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.505547][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 632.513534][ T8166] [ 632.522730][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 632.536993][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 632.573000][ T8075] 0-536866815: 0000000000000000 [ 632.583573][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 632.587875][ T8166] BUG at mt_find:6473 (1) [ 632.589541][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 632.594191][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 632.599768][ T8075] 553631744-553635839: 0000000000000000 [ 632.599794][ T8075] 553635840-553631743: ffff88801cae0e00 [ 632.599816][ T8075] 553631744-553644031: ffff88801cae0d20 [ 632.599838][ T8075] 553644032-553648127: ffff888020c88460 [ 632.599860][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 632.599881][ T8075] 553652224-116829323263: 0000000000000000 [ 632.599901][ T8075] 116829323264-116833517567: [ 632.616365][ T8166] 0-18446744073709551615: [ 632.620120][ T8075] ffff88802b7dbee0 [ 632.636106][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 632.639674][ T8075] 116833517568-93825021800447: [ 632.654351][ T8166] contents: [ 632.658353][ T8075] 0000000000000000 [ 632.666218][ T8166] 93708216008704 [ 632.671001][ T8075] 93825021800448-93825021939711: [ 632.674266][ T8166] 20480 [ 632.678068][ T8075] ffff88808b414000 [ 632.678081][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 632.678103][ T8075] 140322669588480-140322669592575: [ 632.687778][ T8166] 18446603342792269824 [ 632.690072][ T8075] ffff888075edd7e0 [ 632.693857][ T8166] 0 0 [ 632.700842][ T8075] 140322669592576-140322704048127: [ 632.714531][ T8166] 0 [ 632.717426][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 632.725165][ T8166] 0 [ 632.725557][ T8075] contents: [ 632.732836][ T8166] 0 [ 632.735450][ T8075] ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 632.755022][ T8166] 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 632.792094][ T8075] 140322669592576-140322677981183: [ 632.812743][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 632.822892][ T8075] ffff888075edd8c0 [ 632.870602][ T8166] 0-536866815: 0000000000000000 [ 632.877626][ T8166] 536866816-536870911: ffff88807e785620 [ 632.881736][ T8075] 140322677981184-140322680078335: [ 632.883533][ T8166] 536870912-553631743: ffff88807e785700 [ 632.890452][ T8075] ffff888075edd9a0 [ 632.895246][ T8166] 553631744-553635839: 0000000000000000 [ 632.905067][ T8166] 553635840-553631743: ffff8880770f5c40 [ 632.907749][ T8075] 140322680078336-140322682175487: [ 632.910969][ T8166] 553631744-553644031: ffff8880770f5b60 [ 632.910994][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 632.911015][ T8166] 553648128-553652223: ffff88807e7857e0 [ 632.934736][ T8166] 553652224-116783185919: 0000000000000000 [ 632.941019][ T8075] ffff888075edd2a0 [ 632.941189][ T8166] 116783185920-116789477375: [ 632.944740][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 632.950597][ T8166] ffff88807e7858c0 [ 632.962434][ T8166] 116789477376-93825005486079: 0000000000000000 [ 632.967075][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 632.969342][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 632.980351][ T8075] 140322686369792-140322690564095: [ 632.982806][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 632.991647][ T8075] ffff888075edda80 [ 632.997875][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 633.003485][ T8075] 140322690564096-140322690711551: [ 633.006848][ T8166] 139904166133760-139904200589311: [ 633.009729][ T8075] ffff888075eddb60 [ 633.012391][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 633.023322][ T8075] 140322690711552-140322691440639: [ 633.075141][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 633.083981][ T8075] ffff888075eddc40 [ 633.088369][ T8166] 139904174522368-139904176619519: [ 633.091632][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 633.097448][ T8166] ffff88807e785c40 [ 633.110957][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 633.112129][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 633.119109][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 633.132375][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 633.133786][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 633.139786][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 633.153369][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 633.153928][ T8075] 140322692145152-140322692182015: [ 633.161391][ T8166] 139904187252736-139904187981823: [ 633.162549][ T8075] ffff888075eddee0 [ 633.167600][ T8166] ffff8880770f51c0 [ 633.176494][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 633.180489][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 633.192450][ T8075] 140322692202496-140322704048127: [ 633.194131][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 633.207187][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 633.214152][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 633.214857][ T8075] ffff888075edd000 [ 633.223908][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 633.231892][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 633.239234][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 633.299468][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 633.299792][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 633.347606][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000008 [ 633.355988][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 633.361184][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 633.373114][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 633.375587][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 633.380528][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 633.393588][ T8166] 139904201334784-140730916691967: [ 633.394090][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 633.400891][ T8166] 0000000000000000 [ 633.407090][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 633.418178][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 633.418417][ T8166] 140730916691968-140730916827135: [ 633.425402][ T8075] 140730496278528-140730496294911: [ 633.428467][ T8166] ffff8880770f5620 [ 633.430942][ T8075] ffff88807c795b60 [ 633.441138][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 633.444534][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 633.454387][ T8166] 140730917257216-140730917273599: [ 633.458242][ T8075] 140730496303104-18446744073709551615: [ 633.464038][ T8166] ffff8880770f5700 [ 633.464054][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 633.464081][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 633.464104][ T8166] Pass: 10383349 Run:10383495 [ 633.464117][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 633.464142][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 633.464157][ T8166] Call Trace: [ 633.464165][ T8166] [ 633.464174][ T8166] dump_stack_lvl+0xd1/0x138 [ 633.464212][ T8166] mt_find.cold+0x8b/0x90 [ 633.464246][ T8166] ? mas_find+0x1d0/0x1d0 [ 633.464288][ T8166] find_vma+0x10c/0x1b0 [ 633.464313][ T8166] ? can_vma_merge_before+0x390/0x390 [ 633.464343][ T8166] ? walk_page_test+0x78/0x180 [ 633.464377][ T8166] walk_page_range+0x2b1/0x4a0 [ 633.475104][ T8075] 0000000000000000 [ 633.481142][ T8166] ? __walk_page_range+0x780/0x780 [ 633.488815][ T8075] Pass: 10383349 Run:10383495 [ 633.493175][ T8166] mlock_fixup+0x650/0x810 [ 633.569338][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 633.574558][ T8166] ? mlock_fixup+0x810/0x810 [ 633.579168][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 633.585069][ T8166] do_mlock+0x25a/0x6d0 [ 633.589241][ T8166] ? folio_evictable+0x270/0x270 [ 633.594195][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 633.600099][ T8166] __x64_sys_mlock+0x59/0x80 [ 633.604697][ T8166] do_syscall_64+0x39/0xb0 [ 633.609136][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.615041][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 633.619475][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 633.639085][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 633.647498][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 633.655478][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 633.663444][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 633.671409][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.679407][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 633.687407][ T8166] [ 633.696760][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 633.702896][ T8166] BUG at mt_find:6473 (1) [ 633.708191][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 633.715649][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 633.716945][ T8166] 0-18446744073709551615: [ 633.726433][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 633.726449][ T8075] Call Trace: [ 633.726458][ T8075] [ 633.726467][ T8075] dump_stack_lvl+0xd1/0x138 [ 633.731434][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 633.741012][ T8075] mt_find.cold+0x8b/0x90 [ 633.741056][ T8075] ? mas_find+0x1d0/0x1d0 [ 633.741098][ T8075] find_vma+0x10c/0x1b0 [ 633.744979][ T8166] contents: [ 633.747283][ T8075] ? can_vma_merge_before+0x390/0x390 [ 633.751854][ T8166] 93708216008704 [ 633.759378][ T8075] ? walk_page_test+0x78/0x180 [ 633.759411][ T8075] walk_page_range+0x2b1/0x4a0 [ 633.759444][ T8075] ? __walk_page_range+0x780/0x780 [ 633.764432][ T8166] 20480 [ 633.768067][ T8075] mlock_fixup+0x650/0x810 [ 633.768115][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 633.768153][ T8075] ? mlock_fixup+0x810/0x810 [ 633.768199][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 633.768236][ T8075] do_mlock+0x25a/0x6d0 [ 633.768274][ T8075] ? folio_evictable+0x270/0x270 [ 633.768323][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 633.768357][ T8075] __x64_sys_mlock+0x59/0x80 [ 633.768392][ T8075] do_syscall_64+0x39/0xb0 [ 633.774056][ T8166] 18446603342792269824 [ 633.775810][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.775843][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 633.781576][ T8166] 0 [ 633.784813][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 633.784840][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 633.789942][ T8166] 0 [ 633.794326][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 633.799656][ T8166] 0 [ 633.802244][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 633.806870][ T8166] 0 [ 633.811812][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 633.922486][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.930456][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 633.938441][ T8075] [ 633.947149][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 633.953099][ T8075] BUG at mt_find:6473 (1) [ 633.958945][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 633.967397][ T8166] 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 633.967658][ T8075] 0-18446744073709551615: [ 633.993931][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 634.000591][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 634.047603][ T8166] 0-536866815: 0000000000000000 [ 634.047630][ T8166] 536866816-536870911: ffff88807e785620 [ 634.069267][ T8075] contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 634.074376][ T8166] 536870912-553631743: [ 634.099704][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 [ 634.106171][ T8166] ffff88807e785700 [ 634.112561][ T8075] ffff88802b7dbe00 553652223 [ 634.133218][ T8166] 553631744-553635839: 0000000000000000 [ 634.144501][ T8075] 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 [ 634.147723][ T8166] 553635840-553631743: [ 634.147772][ T8075] ffff88808b414000 93825021939711 [ 634.158251][ T8166] ffff8880770f5c40 [ 634.164907][ T8075] 0000000000000000 140322669588479 [ 634.168086][ T8166] 553631744-553644031: ffff8880770f5b60 [ 634.179851][ T8075] ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 634.192383][ T8166] 553644032-553648127: [ 634.196989][ T8075] 0-536866815: [ 634.198947][ T8166] ffff8880226cd1c0 [ 634.201488][ T8075] 0000000000000000 [ 634.210934][ T8166] 553648128-553652223: ffff88807e7857e0 [ 634.212951][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 634.221045][ T8166] 553652224-116783185919: 0000000000000000 [ 634.224757][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 634.242442][ T8075] 553631744-553635839: 0000000000000000 [ 634.242661][ T8166] 116783185920-116789477375: [ 634.248514][ T8075] 553635840-553631743: [ 634.251883][ T8166] ffff88807e7858c0 [ 634.253672][ T8075] ffff88801cae0e00 [ 634.262590][ T8166] 116789477376-93825005486079: [ 634.265774][ T8075] 553631744-553644031: [ 634.268950][ T8166] 0000000000000000 [ 634.270967][ T8075] ffff88801cae0d20 [ 634.280068][ T8166] 93825005486080-93825005625343: [ 634.284152][ T8075] 553644032-553648127: ffff888020c88460 [ 634.284182][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 634.304691][ T8075] 553652224-116829323263: 0000000000000000 [ 634.310966][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 634.321569][ T8075] 116833517568-93825021800447: 0000000000000000 [ 634.328405][ T8166] ffff88807e7859a0 [ 634.330073][ T8075] 93825021800448-93825021939711: [ 634.332124][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 634.340936][ T8075] ffff88808b414000 [ 634.344610][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 634.352665][ T8075] 93825021939712-140322669588479: [ 634.355419][ T8166] 139904166133760-139904200589311: [ 634.358494][ T8075] 0000000000000000 [ 634.360874][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 634.370782][ T8075] 140322669588480-140322669592575: [ 634.426581][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 634.439182][ T8075] ffff888075edd7e0 [ 634.439200][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 634.500658][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 634.507653][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 634.507687][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 634.507710][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 634.507732][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 634.507754][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 634.514682][ T8166] 139904176619520-139904178716671: [ 634.529886][ T8075] 140322686369792-140322690564095: [ 634.535654][ T8166] ffff88807e785d20 [ 634.535667][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 634.535691][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 634.535714][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 634.535736][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 634.535759][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 634.535782][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 634.535806][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 634.535829][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 634.535853][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 634.535875][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 634.535898][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 634.535922][ T8166] 139904200589312-18446744073709551615: [ 634.550616][ T8075] ffff888075edda80 [ 634.555236][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 634.563984][ T8075] 140322690564096-140322690711551: [ 634.564685][ T8166] contents: 0000000000000000 139904201199615 [ 634.575018][ T8075] ffff888075eddb60 [ 634.579516][ T8166] ffff8880770f59a0 139904201203711 [ 634.595050][ T8075] 140322690711552-140322691440639: [ 634.601420][ T8166] ffff8880770f58c0 139904201334783 [ 634.627726][ T8075] ffff888075eddc40 [ 634.628901][ T8166] 0000000000000000 140730916691967 [ 634.658604][ T8075] 140322691440640-140322691776511: [ 634.666498][ T8166] ffff8880770f5620 140730916827135 [ 634.674723][ T8075] ffff888075eddd20 [ 634.679462][ T8166] 0000000000000000 140730917257215 [ 634.685387][ T8075] 140322691776512-140322691780607: [ 634.688201][ T8166] ffff8880770f5700 140730917273599 [ 634.701810][ T8075] 0000000000000000 [ 634.705344][ T8166] ffff8880770f57e0 140730917281791 [ 634.713039][ T8075] 140322691780608-140322692145151: [ 634.713957][ T8166] 0000000000000000 18446744073709551615 [ 634.727095][ T8075] ffff888075edde00 [ 634.730049][ T8166] 0000000000000000 0 [ 634.734177][ T8075] 140322692145152-140322692182015: [ 634.739806][ T8166] 0000000000000000 0 [ 634.752805][ T8075] ffff888075eddee0 [ 634.753364][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 634.768787][ T8075] 140322692182016-140322692202495: [ 634.779680][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 634.786536][ T8075] 0000000000000000 [ 634.792430][ T8166] 139904201199616-139904201203711: [ 634.797097][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 634.807472][ T8166] ffff8880770f59a0 [ 634.809741][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 634.819312][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 634.870777][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 634.871145][ T8075] 140322704048128-140322704506879: [ 634.878178][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 634.886984][ T8075] 0000000000000000 [ 634.892657][ T8166] 140730916827136-140730917257215: [ 634.894377][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 634.907764][ T8166] 0000000000000000 [ 634.907780][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 634.919068][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 634.920216][ T8166] 140730917273600-140730917281791: [ 634.926265][ T8075] 140322704642048-140730494414847: [ 634.931555][ T8166] ffff8880770f57e0 [ 634.931808][ T8075] 0000000000000000 [ 634.939567][ T8166] 140730917281792-18446744073709551615: [ 634.941673][ T8075] 140730494414848-140730494550015: [ 634.950203][ T8166] 0000000000000000 [ 634.950993][ T8075] ffff88807c795a80 [ 634.964936][ T8166] Pass: 10383350 Run:10383498 [ 634.965165][ T8075] 140730494550016-140730496278527: [ 634.969618][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 634.975459][ T8075] 0000000000000000 [ 634.984929][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 634.984945][ T8166] Call Trace: [ 634.984952][ T8166] [ 634.984962][ T8166] dump_stack_lvl+0xd1/0x138 [ 634.985001][ T8166] mt_find.cold+0x8b/0x90 [ 634.989356][ T8075] 140730496278528-140730496294911: [ 634.998731][ T8166] ? mas_find+0x1d0/0x1d0 [ 634.998776][ T8166] find_vma+0x10c/0x1b0 [ 634.998800][ T8166] ? can_vma_merge_before+0x390/0x390 [ 634.998829][ T8166] ? walk_page_test+0x78/0x180 [ 634.998862][ T8166] walk_page_range+0x2b1/0x4a0 [ 634.998896][ T8166] ? __walk_page_range+0x780/0x780 [ 634.998942][ T8166] mlock_fixup+0x650/0x810 [ 634.998988][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 634.999029][ T8166] ? mlock_fixup+0x810/0x810 [ 634.999077][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 634.999116][ T8166] do_mlock+0x25a/0x6d0 [ 634.999157][ T8166] ? folio_evictable+0x270/0x270 [ 634.999204][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 634.999238][ T8166] __x64_sys_mlock+0x59/0x80 [ 634.999273][ T8166] do_syscall_64+0x39/0xb0 [ 634.999309][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 634.999336][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 634.999362][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 634.999387][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 634.999412][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 634.999429][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 634.999446][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 634.999461][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.999476][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 634.999511][ T8166] [ 635.011399][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 635.021429][ T8075] ffff88807c795b60 [ 635.034761][ T8166] BUG at mt_find:6473 (1) [ 635.052342][ T8075] 140730496294912-140730496303103: [ 635.063462][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 635.064138][ T8075] ffff88807c795c40 [ 635.069770][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: [ 635.077509][ T8075] 140730496303104-18446744073709551615: [ 635.078955][ T8166] 93708216008704 [ 635.085059][ T8075] 0000000000000000 [ 635.089380][ T8166] 20480 [ 635.103261][ T8075] Pass: 10383350 Run:10383499 [ 635.104697][ T8166] 18446603342792269824 [ 635.133419][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 635.142659][ T8166] 0 [ 635.148373][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 635.148387][ T8075] Call Trace: [ 635.148394][ T8075] [ 635.148404][ T8075] dump_stack_lvl+0xd1/0x138 [ 635.148441][ T8075] mt_find.cold+0x8b/0x90 [ 635.148474][ T8075] ? mas_find+0x1d0/0x1d0 [ 635.156478][ T8166] 0 [ 635.164390][ T8075] find_vma+0x10c/0x1b0 [ 635.172351][ T8166] 0 [ 635.175332][ T8075] ? can_vma_merge_before+0x390/0x390 [ 635.175363][ T8075] ? walk_page_test+0x78/0x180 [ 635.175396][ T8075] walk_page_range+0x2b1/0x4a0 [ 635.175430][ T8075] ? __walk_page_range+0x780/0x780 [ 635.175476][ T8075] mlock_fixup+0x650/0x810 [ 635.183390][ T8166] 0 [ 635.185073][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 635.185118][ T8075] ? mlock_fixup+0x810/0x810 [ 635.189786][ T8166] 0 [ 635.194959][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 635.195000][ T8075] do_mlock+0x25a/0x6d0 [ 635.204294][ T8166] 0 [ 635.207076][ T8075] ? folio_evictable+0x270/0x270 [ 635.207126][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 635.217987][ T8166] 0 [ 635.223632][ T8075] __x64_sys_mlock+0x59/0x80 [ 635.227634][ T8166] | 02 02| [ 635.230936][ T8075] do_syscall_64+0x39/0xb0 [ 635.233848][ T8166] ffff88806630860c 139904166133759 [ 635.238502][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 635.238532][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 635.243294][ T8166] ffff88806630840c 139904200589311 [ 635.252443][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 635.252469][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 635.255275][ T8166] ffff8880267c3a0c 18446744073709551615 [ 635.264999][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 635.265019][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 635.265035][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 635.268765][ T8166] 0000000000000000 0 [ 635.271212][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.278361][ T8166] 0000000000000000 0 [ 635.280091][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 635.284399][ T8166] 0000000000000000 0 [ 635.286898][ T8075] [ 635.309587][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 635.316252][ T8166] 0000000000000000 0 [ 635.326778][ T8075] BUG at mt_find:6473 (1) [ 635.333815][ T8166] 0000000000000000 0 [ 635.339713][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 635.351518][ T8166] 0000000000000000 0 [ 635.366631][ T8075] 0-18446744073709551615: [ 635.373141][ T8166] 0000000000000000 [ 635.379493][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 635.383538][ T8166] 0-139904166133759: [ 635.387591][ T8075] contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 635.387799][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 635.401398][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 635.414990][ T8075] contents: [ 635.427426][ T8166] contents: [ 635.445135][ T8075] 0000000000000000 536866815 [ 635.462909][ T8166] 0000000000000000 536866815 [ 635.463865][ T8075] ffff88802b7dbc40 536870911 [ 635.467507][ T8166] ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 [ 635.475538][ T8075] ffff88802b7dbd20 553631743 0000000000000000 553635839 [ 635.479681][ T8166] ffff8880770f5c40 553631743 [ 635.482697][ T8075] ffff88801cae0e00 553631743 [ 635.488688][ T8166] ffff8880770f5b60 553644031 [ 635.500035][ T8075] ffff88801cae0d20 553644031 [ 635.503131][ T8166] ffff8880226cd1c0 553648127 [ 635.513130][ T8075] ffff888020c88460 553648127 [ 635.515097][ T8166] ffff88807e7857e0 553652223 [ 635.527666][ T8075] ffff88802b7dbe00 553652223 [ 635.529542][ T8166] 0000000000000000 116783185919 [ 635.533241][ T8075] 0000000000000000 116829323263 [ 635.570258][ T8166] ffff88807e7858c0 116789477375 [ 635.572082][ T8075] ffff88802b7dbee0 116833517567 [ 635.586025][ T8166] 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 635.600215][ T8075] 0000000000000000 93825021800447 [ 635.614027][ T8166] 0-536866815: [ 635.622789][ T8075] ffff88808b414000 93825021939711 [ 635.631861][ T8166] 0000000000000000 [ 635.641302][ T8075] 0000000000000000 140322669588479 [ 635.648569][ T8166] 536866816-536870911: [ 635.649972][ T8075] ffff888075edd7e0 140322669592575 [ 635.654509][ T8166] ffff88807e785620 [ 635.663761][ T8075] 0000000000000000 0 [ 635.664582][ T8166] 536870912-553631743: [ 635.669515][ T8075] 000000000000000d [ 635.674449][ T8166] ffff88807e785700 [ 635.698636][ T8075] 0-536866815: [ 635.700733][ T8166] 553631744-553635839: [ 635.708541][ T8075] 0000000000000000 [ 635.709103][ T8166] 0000000000000000 [ 635.714243][ T8075] 536866816-536870911: [ 635.719528][ T8166] 553635840-553631743: [ 635.728461][ T8075] ffff88802b7dbc40 [ 635.740941][ T8166] ffff8880770f5c40 [ 635.766391][ T8075] 536870912-553631743: [ 635.772480][ T8166] 553631744-553644031: [ 635.773948][ T8075] ffff88802b7dbd20 [ 635.783526][ T8166] ffff8880770f5b60 [ 635.786628][ T8075] 553631744-553635839: [ 635.792441][ T8166] 553644032-553648127: [ 635.793975][ T8075] 0000000000000000 [ 635.804019][ T8166] ffff8880226cd1c0 [ 635.806904][ T8075] 553635840-553631743: [ 635.810586][ T8166] 553648128-553652223: [ 635.810666][ T8075] ffff88801cae0e00 [ 635.824075][ T8166] ffff88807e7857e0 [ 635.825344][ T8075] 553631744-553644031: [ 635.828015][ T8166] 553652224-116783185919: 0000000000000000 [ 635.832685][ T8075] ffff88801cae0d20 [ 635.843739][ T8075] 553644032-553648127: ffff888020c88460 [ 635.847724][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 635.849699][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 635.863876][ T8075] 553652224-116829323263: 0000000000000000 [ 635.864371][ T8166] 116789477376-93825005486079: 0000000000000000 [ 635.870512][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 635.883335][ T8075] 116833517568-93825021800447: 0000000000000000 [ 635.886585][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 635.890358][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 635.903576][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 635.904308][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 635.911584][ T8075] 140322669588480-140322669592575: [ 635.917482][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 635.929859][ T8075] ffff888075edd7e0 [ 635.931856][ T8166] 139904166133760-139904200589311: [ 635.944603][ T8075] 140322669592576-140322704048127: [ 635.944815][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 635.950111][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 635.972033][ T8166] contents: [ 635.973156][ T8075] contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 635.985933][ T8166] ffff88807e785b60 139904174522367 [ 636.032312][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 636.044929][ T8166] ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 [ 636.044997][ T8075] 140322677981184-140322680078335: [ 636.045002][ T8166] ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 [ 636.058827][ T8075] ffff888075edd9a0 [ 636.058840][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 636.058864][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 636.058887][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 636.058914][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 636.058934][ T8075] 140322690564096-140322690711551: [ 636.073910][ T8166] ffff8880770f51c0 139904187981823 [ 636.078073][ T8075] ffff888075eddb60 [ 636.090470][ T8166] ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 636.119605][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 636.152207][ T8166] 139904166133760-139904174522367: [ 636.152949][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 636.160432][ T8166] ffff88807e785b60 [ 636.166140][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 636.176345][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 636.176586][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 636.183400][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 636.198739][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 636.198856][ T8075] 140322692145152-140322692182015: [ 636.205749][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 636.205836][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 636.205877][ T8166] 139904187105280-139904187252735: [ 636.218246][ T8075] ffff888075eddee0 [ 636.218348][ T8166] ffff8880770f50e0 [ 636.234991][ T8075] 140322692182016-140322692202495: [ 636.235699][ T8166] 139904187252736-139904187981823: [ 636.239332][ T8075] 0000000000000000 [ 636.244921][ T8166] ffff8880770f51c0 [ 636.244934][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 636.244959][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 636.244982][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 636.245005][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 636.245028][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 636.245050][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 636.245073][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 [ 636.264412][ T8075] 140322692202496-140322704048127: [ 636.265097][ T8166] ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 636.265250][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 636.265272][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 636.265294][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 636.265317][ T8166] 139904201334784-140730916691967: [ 636.277894][ T8075] ffff888075edd000 [ 636.279193][ T8166] 0000000000000000 [ 636.294633][ T8075] 140322704048128-18446744073709551615: [ 636.301180][ T8166] 140730916691968-140730916827135: [ 636.325840][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 636.358638][ T8166] ffff8880770f5620 [ 636.400185][ T8075] contents: [ 636.412596][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 636.423361][ T8075] 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 636.427284][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 636.476155][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 636.478144][ T8075] 140322704048128-140322704506879: [ 636.483120][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 636.495550][ T8075] 0000000000000000 [ 636.496592][ T8166] Pass: 10383483 Run:10383633 [ 636.499780][ T8075] 140322704506880-140322704510975: [ 636.504435][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 636.513425][ T8075] ffff88807c795380 [ 636.519833][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 636.519847][ T8166] Call Trace: [ 636.519855][ T8166] [ 636.519865][ T8166] dump_stack_lvl+0xd1/0x138 [ 636.523572][ T8075] 140322704510976-140322704642047: [ 636.533609][ T8166] mt_find.cold+0x8b/0x90 [ 636.533645][ T8166] ? mas_find+0x1d0/0x1d0 [ 636.538161][ T8075] ffff88807c7959a0 [ 636.539836][ T8166] find_vma+0x10c/0x1b0 [ 636.544383][ T8075] 140322704642048-140730494414847: [ 636.549917][ T8166] ? can_vma_merge_before+0x390/0x390 [ 636.549949][ T8166] ? walk_page_test+0x78/0x180 [ 636.554248][ T8075] 0000000000000000 [ 636.558556][ T8166] walk_page_range+0x2b1/0x4a0 [ 636.558592][ T8166] ? __walk_page_range+0x780/0x780 [ 636.558642][ T8166] mlock_fixup+0x650/0x810 [ 636.558689][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 636.558731][ T8166] ? mlock_fixup+0x810/0x810 [ 636.558781][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 636.558820][ T8166] do_mlock+0x25a/0x6d0 [ 636.558860][ T8166] ? folio_evictable+0x270/0x270 [ 636.558908][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 636.558943][ T8166] __x64_sys_mlock+0x59/0x80 [ 636.558978][ T8166] do_syscall_64+0x39/0xb0 [ 636.559011][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.646059][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 636.650471][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 636.670111][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 636.678526][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 636.686512][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 636.694497][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 636.702474][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.710440][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 636.718422][ T8166] [ 636.725437][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 636.731389][ T8166] BUG at mt_find:6473 (1) [ 636.735997][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 636.738447][ T8075] 140730494414848-140730494550015: [ 636.745226][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 636.752389][ T8075] ffff88807c795a80 [ 636.787804][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 636.804227][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 636.851860][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 636.852558][ T8166] 0-536866815: 0000000000000000 [ 636.860852][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 636.871832][ T8166] 536866816-536870911: [ 636.872344][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 636.877995][ T8166] ffff88807e785620 [ 636.884437][ T8075] Pass: 10383483 Run:10383634 [ 636.893330][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 636.894897][ T8166] 536870912-553631743: [ 636.903140][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 636.903156][ T8075] Call Trace: [ 636.914919][ T8166] ffff88807e785700 [ 636.917668][ T8075] [ 636.920932][ T8166] 553631744-553635839: [ 636.924627][ T8075] dump_stack_lvl+0xd1/0x138 [ 636.934017][ T8166] 0000000000000000 [ 636.936682][ T8075] mt_find.cold+0x8b/0x90 [ 636.936724][ T8075] ? mas_find+0x1d0/0x1d0 [ 636.936767][ T8075] find_vma+0x10c/0x1b0 [ 636.941529][ T8166] 553635840-553631743: [ 636.944765][ T8075] ? can_vma_merge_before+0x390/0x390 [ 636.944799][ T8075] ? walk_page_test+0x78/0x180 [ 636.944834][ T8075] walk_page_range+0x2b1/0x4a0 [ 636.944870][ T8075] ? __walk_page_range+0x780/0x780 [ 636.944921][ T8075] mlock_fixup+0x650/0x810 [ 636.944964][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 636.945001][ T8075] ? mlock_fixup+0x810/0x810 [ 636.945049][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 636.945086][ T8075] do_mlock+0x25a/0x6d0 [ 636.945126][ T8075] ? folio_evictable+0x270/0x270 [ 636.945174][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 636.945206][ T8075] __x64_sys_mlock+0x59/0x80 [ 636.945242][ T8075] do_syscall_64+0x39/0xb0 [ 636.945277][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 636.945306][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 636.945326][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 636.945350][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 636.945374][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 636.945391][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 636.945407][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 636.945423][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.945438][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 636.945472][ T8075] [ 636.951448][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 636.974841][ T8166] ffff8880770f5c40 [ 636.978738][ T8075] BUG at mt_find:6473 (1) [ 636.983069][ T8166] 553631744-553644031: [ 636.988664][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 637.001441][ T8166] ffff8880770f5b60 [ 637.003571][ T8075] 0-18446744073709551615: [ 637.009186][ T8166] 553644032-553648127: [ 637.014121][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 637.024845][ T8166] ffff8880226cd1c0 [ 637.029308][ T8075] contents: [ 637.033355][ T8166] 553648128-553652223: [ 637.053893][ T8075] 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 637.054095][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 [ 637.072003][ T8166] ffff88807e7857e0 [ 637.082545][ T8075] ffff88802b7dbd20 553631743 [ 637.093387][ T8166] 553652224-116783185919: [ 637.106113][ T8075] 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 [ 637.132781][ T8166] 0000000000000000 [ 637.150468][ T8075] ffff88802b7dbe00 553652223 [ 637.156046][ T8166] 116783185920-116789477375: [ 637.162944][ T8075] 0000000000000000 116829323263 [ 637.165654][ T8166] ffff88807e7858c0 [ 637.196801][ T8075] ffff88802b7dbee0 116833517567 [ 637.218296][ T8166] 116789477376-93825005486079: [ 637.222566][ T8075] 0000000000000000 93825021800447 [ 637.241722][ T8166] 0000000000000000 [ 637.243140][ T8075] ffff88808b414000 93825021939711 [ 637.247789][ T8166] 93825005486080-93825005625343: [ 637.253875][ T8075] 0000000000000000 140322669588479 [ 637.266690][ T8166] ffff88807e7859a0 [ 637.281843][ T8075] ffff888075edd7e0 140322669592575 [ 637.289201][ T8166] 93825005625344-139904166129663: [ 637.292502][ T8075] 0000000000000000 0 [ 637.296173][ T8166] 0000000000000000 [ 637.296186][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 637.296212][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 [ 637.307084][ T8075] 000000000000000d [ 637.312093][ T8166] ffff88807e785c40 139904176619519 [ 637.314656][ T8075] 0-536866815: [ 637.321832][ T8166] ffff88807e785d20 139904178716671 [ 637.343409][ T8075] 0000000000000000 [ 637.346684][ T8166] ffff88807e785e00 139904180813823 [ 637.349080][ T8075] 536866816-536870911: [ 637.355454][ T8166] ffff88807e785ee0 139904182910975 [ 637.367575][ T8075] ffff88802b7dbc40 [ 637.368720][ T8166] ffff8880770f5000 139904187105279 [ 637.373478][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 637.384916][ T8166] ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 [ 637.389390][ T8075] 553631744-553635839: [ 637.389471][ T8166] ffff8880770f52a0 139904188317695 [ 637.397506][ T8075] 0000000000000000 [ 637.397518][ T8075] 553635840-553631743: ffff88801cae0e00 [ 637.397543][ T8075] 553631744-553644031: ffff88801cae0d20 [ 637.397565][ T8075] 553644032-553648127: ffff888020c88460 [ 637.397586][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 637.397609][ T8075] 553652224-116829323263: [ 637.410665][ T8166] 0000000000000000 139904188321791 [ 637.425850][ T8075] 0000000000000000 [ 637.448849][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 637.450413][ T8166] ffff8880770f5380 139904188686335 [ 637.456729][ T8075] 116833517568-93825021800447: 0000000000000000 [ 637.456755][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 637.456778][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 637.456801][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 637.456824][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: [ 637.473428][ T8166] ffff8880770f5460 139904188723199 [ 637.475555][ T8075] ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 [ 637.483660][ T8166] 0000000000000000 139904188743679 [ 637.489390][ T8075] ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 [ 637.508539][ T8166] ffff8880770f5540 139904200589311 [ 637.523880][ T8075] 0000000000000000 0 [ 637.566159][ T8166] 0000000000000000 0 000000000000000d [ 637.576506][ T8075] 000000000000000d [ 637.580250][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 637.587658][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 637.594623][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 637.594669][ T8075] 140322677981184-140322680078335: [ 637.601922][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 637.609510][ T8075] ffff888075edd9a0 [ 637.614702][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 637.620685][ T8075] 140322680078336-140322682175487: [ 637.625952][ T8166] 139904180813824-139904182910975: [ 637.631138][ T8075] ffff888075edd2a0 [ 637.631490][ T8166] ffff88807e785ee0 [ 637.639434][ T8075] 140322682175488-140322684272639: [ 637.641251][ T8166] 139904182910976-139904187105279: [ 637.644451][ T8075] ffff888075edd0e0 [ 637.650382][ T8166] ffff8880770f5000 [ 637.664214][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 637.665819][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 637.672684][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 637.684632][ T8075] 140322686369792-140322690564095: [ 637.687221][ T8166] 139904187981824-139904188317695: [ 637.687740][ T8075] ffff888075edda80 [ 637.692780][ T8166] ffff8880770f52a0 [ 637.706999][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 637.712305][ T8075] 140322690564096-140322690711551: [ 637.713952][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 637.727090][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 637.734072][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 637.734092][ T8075] ffff888075eddb60 [ 637.734106][ T8075] 140322690711552-140322691440639: [ 637.741430][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 637.752381][ T8075] ffff888075eddc40 [ 637.758160][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 637.772690][ T8075] 140322691440640-140322691776511: [ 637.815090][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 637.821095][ T8075] ffff888075eddd20 [ 637.828551][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 637.833591][ T8075] 140322691776512-140322691780607: [ 637.838686][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 637.838714][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 637.838736][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 637.838759][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 637.838781][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 637.838805][ T8166] 140730917273600-140730917281791: [ 637.863489][ T8075] 0000000000000000 [ 637.866885][ T8166] ffff8880770f57e0 [ 637.873181][ T8075] 140322691780608-140322692145151: [ 637.880358][ T8166] 140730917281792-18446744073709551615: [ 637.899329][ T8075] ffff888075edde00 [ 637.902633][ T8166] 0000000000000000 [ 637.905646][ T8075] 140322692145152-140322692182015: [ 637.909061][ T8166] Pass: 10383483 Run:10383635 [ 637.912758][ T8075] ffff888075eddee0 [ 637.925941][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 637.929796][ T8075] 140322692182016-140322692202495: [ 637.936719][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 637.936733][ T8166] Call Trace: [ 637.936744][ T8166] [ 637.936753][ T8166] dump_stack_lvl+0xd1/0x138 [ 637.936790][ T8166] mt_find.cold+0x8b/0x90 [ 637.942953][ T8075] 0000000000000000 [ 637.952349][ T8166] ? mas_find+0x1d0/0x1d0 [ 637.952394][ T8166] find_vma+0x10c/0x1b0 [ 637.956506][ T8075] 140322692202496-140322704048127: [ 637.958563][ T8166] ? can_vma_merge_before+0x390/0x390 [ 637.963140][ T8075] ffff888075edd000 [ 637.967449][ T8166] ? walk_page_test+0x78/0x180 [ 637.967484][ T8166] walk_page_range+0x2b1/0x4a0 [ 637.967517][ T8166] ? __walk_page_range+0x780/0x780 [ 637.967562][ T8166] mlock_fixup+0x650/0x810 [ 637.967608][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 637.967648][ T8166] ? mlock_fixup+0x810/0x810 [ 637.967698][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 637.967741][ T8166] do_mlock+0x25a/0x6d0 [ 637.967782][ T8166] ? folio_evictable+0x270/0x270 [ 637.967829][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 637.967862][ T8166] __x64_sys_mlock+0x59/0x80 [ 637.973381][ T8075] 140322704048128-18446744073709551615: [ 637.975880][ T8166] do_syscall_64+0x39/0xb0 [ 637.975918][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 637.975943][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 637.975964][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 637.975987][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 637.976012][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 637.976026][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 637.976040][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 637.976056][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.984167][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 637.985715][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 637.985758][ T8166] [ 637.992237][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 638.004458][ T8075] contents: [ 638.017146][ T8166] BUG at mt_find:6473 (1) [ 638.034099][ T8075] 0000000000000000 140322704506879 [ 638.043243][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 638.047393][ T8075] ffff88807c795380 140322704510975 [ 638.049400][ T8166] 0-18446744073709551615: [ 638.062656][ T8075] ffff88807c7959a0 140322704642047 [ 638.065851][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 638.072190][ T8075] 0000000000000000 140730494414847 [ 638.098536][ T8166] contents: [ 638.099654][ T8075] ffff88807c795a80 140730494550015 [ 638.107541][ T8166] 93708216008704 [ 638.123243][ T8075] 0000000000000000 140730496278527 [ 638.123439][ T8166] 20480 [ 638.131402][ T8075] ffff88807c795b60 140730496294911 [ 638.138951][ T8166] 18446603342792269824 [ 638.174848][ T8075] ffff88807c795c40 140730496303103 [ 638.180816][ T8166] 0 [ 638.194873][ T8075] 0000000000000000 18446744073709551615 [ 638.200020][ T8166] 0 [ 638.211980][ T8075] 0000000000000000 0 [ 638.213655][ T8166] 0 [ 638.217304][ T8075] 0000000000000000 0 [ 638.222484][ T8166] 0 [ 638.225444][ T8075] 0000000000000000 0 [ 638.238001][ T8166] 0 [ 638.239880][ T8075] 0000000000000000 0 [ 638.242215][ T8166] 0 [ 638.247883][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000008 [ 638.247919][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 638.247943][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 638.247966][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 638.258329][ T8166] 0 [ 638.261427][ T8075] 140322704642048-140730494414847: [ 638.263467][ T8166] | 02 02| [ 638.267468][ T8075] 0000000000000000 [ 638.267480][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 638.270704][ T8075] 140730494550016-140730496278527: [ 638.274282][ T8166] ffff88806630860c 139904166133759 [ 638.279803][ T8075] 0000000000000000 [ 638.305365][ T8166] ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 638.317334][ T8075] 140730496278528-140730496294911: [ 638.327292][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 [ 638.327327][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 638.338325][ T8075] ffff88807c795b60 [ 638.342180][ T8166] contents: [ 638.357327][ T8075] 140730496294912-140730496303103: [ 638.370283][ T8166] 0000000000000000 536866815 [ 638.380078][ T8075] ffff88807c795c40 [ 638.393038][ T8166] ffff88807e785620 536870911 [ 638.399766][ T8075] 140730496303104-18446744073709551615: [ 638.402528][ T8166] ffff88807e785700 553631743 [ 638.406177][ T8075] 0000000000000000 [ 638.420441][ T8166] 0000000000000000 553635839 [ 638.421266][ T8075] Pass: 10383483 Run:10383636 [ 638.421283][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 638.427279][ T8166] ffff8880770f5c40 553631743 [ 638.430591][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 638.430608][ T8075] Call Trace: [ 638.430615][ T8075] [ 638.430625][ T8075] dump_stack_lvl+0xd1/0x138 [ 638.466274][ T8075] mt_find.cold+0x8b/0x90 [ 638.470614][ T8075] ? mas_find+0x1d0/0x1d0 [ 638.474983][ T8075] find_vma+0x10c/0x1b0 [ 638.479186][ T8075] ? can_vma_merge_before+0x390/0x390 [ 638.484584][ T8075] ? walk_page_test+0x78/0x180 [ 638.489360][ T8075] walk_page_range+0x2b1/0x4a0 [ 638.494133][ T8075] ? __walk_page_range+0x780/0x780 [ 638.499262][ T8075] mlock_fixup+0x650/0x810 [ 638.503712][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 638.508922][ T8075] ? mlock_fixup+0x810/0x810 [ 638.513530][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 638.519433][ T8075] do_mlock+0x25a/0x6d0 [ 638.523601][ T8075] ? folio_evictable+0x270/0x270 [ 638.528556][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 638.534456][ T8075] __x64_sys_mlock+0x59/0x80 [ 638.539066][ T8075] do_syscall_64+0x39/0xb0 [ 638.543491][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 638.549390][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 638.553802][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 638.573409][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 638.581822][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 638.589790][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 638.597757][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 638.605723][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.613690][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 638.621674][ T8075] [ 638.632682][ T8166] ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 638.647115][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 638.662667][ T8166] 0-536866815: 0000000000000000 [ 638.673165][ T8166] 536866816-536870911: ffff88807e785620 [ 638.675398][ T8075] BUG at mt_find:6473 (1) [ 638.679494][ T8166] 536870912-553631743: [ 638.683375][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 638.683398][ T8075] 0-18446744073709551615: [ 638.688902][ T8166] ffff88807e785700 [ 638.705679][ T8166] 553631744-553635839: 0000000000000000 [ 638.706171][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 638.711582][ T8166] 553635840-553631743: ffff8880770f5c40 [ 638.724564][ T8075] contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 638.725456][ T8166] 553631744-553644031: ffff8880770f5b60 [ 638.763686][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 638.763968][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 638.770027][ T8166] 553648128-553652223: ffff88807e7857e0 [ 638.827672][ T8166] 553652224-116783185919: 0000000000000000 [ 638.829728][ T8075] 0-536866815: [ 638.833851][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 638.842154][ T8075] 0000000000000000 [ 638.844444][ T8166] 116789477376-93825005486079: 0000000000000000 [ 638.851407][ T8075] 536866816-536870911: [ 638.855244][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 638.859837][ T8075] ffff88802b7dbc40 [ 638.869338][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 638.878189][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 638.884840][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 638.885614][ T8166] 139904166133760-139904200589311: [ 638.892021][ T8075] 553631744-553635839: [ 638.893097][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 638.912340][ T8075] 0000000000000000 [ 638.954561][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 638.965650][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 638.967471][ T8075] 553635840-553631743: [ 638.972596][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 638.982889][ T8075] ffff88801cae0e00 [ 638.986350][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 638.993448][ T8075] 553631744-553644031: [ 638.996389][ T8166] 139904180813824-139904182910975: [ 639.000549][ T8075] ffff88801cae0d20 [ 639.000895][ T8166] ffff88807e785ee0 [ 639.014814][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 639.020472][ T8075] 553644032-553648127: ffff888020c88460 [ 639.021827][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 639.035628][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 639.041565][ T8075] 553652224-116829323263: 0000000000000000 [ 639.044322][ T8166] 139904187252736-139904187981823: [ 639.047813][ T8075] 116829323264-116833517567: [ 639.048075][ T8166] ffff8880770f51c0 [ 639.053353][ T8075] ffff88802b7dbee0 [ 639.058691][ T8166] 139904187981824-139904188317695: [ 639.062104][ T8075] 116833517568-93825021800447: 0000000000000000 [ 639.074156][ T8166] ffff8880770f52a0 [ 639.078223][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 639.082351][ T8166] 139904188317696-139904188321791: [ 639.088749][ T8075] 93825021939712-140322669588479: [ 639.088889][ T8166] 0000000000000000 [ 639.096497][ T8075] 0000000000000000 [ 639.108123][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 639.111828][ T8166] 139904188321792-139904188686335: [ 639.118734][ T8075] 140322669592576-140322704048127: [ 639.118944][ T8166] ffff8880770f5380 [ 639.124279][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 [ 639.134111][ T8166] 139904188686336-139904188723199: [ 639.134117][ T8075] 0000000000000000 140322692202495 ffff888075edd000 140322704048127 [ 639.182719][ T8166] ffff8880770f5460 [ 639.190298][ T8075] 0000000000000000 0 000000000000000d [ 639.194572][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 639.212342][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 639.218145][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 639.219380][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 639.230535][ T8075] 140322677981184-140322680078335: [ 639.276354][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 639.284827][ T8075] ffff888075edd9a0 [ 639.288912][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 639.301102][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 639.301185][ T8166] 139904201203712-139904201334783: [ 639.308392][ T8075] 140322682175488-140322684272639: [ 639.311555][ T8166] ffff8880770f58c0 [ 639.313939][ T8075] ffff888075edd0e0 [ 639.325017][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 639.328692][ T8075] 140322684272640-140322686369791: [ 639.334063][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 639.340734][ T8075] ffff888075edd1c0 [ 639.351071][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 639.355022][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 639.360460][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 639.372172][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 639.377355][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 639.379748][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 639.393248][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 639.393843][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 639.401671][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 639.414277][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 639.421468][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 639.422342][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 639.437468][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 639.437787][ T8166] Pass: 10383487 Run:10383641 [ 639.444603][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 639.455948][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 639.499835][ T8075] 140322704048128-140322704506879: [ 639.509217][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 639.509232][ T8166] Call Trace: [ 639.509240][ T8166] [ 639.509249][ T8166] dump_stack_lvl+0xd1/0x138 [ 639.509287][ T8166] mt_find.cold+0x8b/0x90 [ 639.509320][ T8166] ? mas_find+0x1d0/0x1d0 [ 639.509360][ T8166] find_vma+0x10c/0x1b0 [ 639.509384][ T8166] ? can_vma_merge_before+0x390/0x390 [ 639.509413][ T8166] ? walk_page_test+0x78/0x180 [ 639.509446][ T8166] walk_page_range+0x2b1/0x4a0 [ 639.509481][ T8166] ? __walk_page_range+0x780/0x780 [ 639.509530][ T8166] mlock_fixup+0x650/0x810 [ 639.509577][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 639.509617][ T8166] ? mlock_fixup+0x810/0x810 [ 639.509664][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 639.509702][ T8166] do_mlock+0x25a/0x6d0 [ 639.509747][ T8166] ? folio_evictable+0x270/0x270 [ 639.509793][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 639.509827][ T8166] __x64_sys_mlock+0x59/0x80 [ 639.509862][ T8166] do_syscall_64+0x39/0xb0 [ 639.509897][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.509925][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 639.509946][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 639.509968][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 639.509993][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 639.510010][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 639.518144][ T8075] 0000000000000000 [ 639.525598][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 639.525619][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.525633][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 639.525666][ T8166] [ 639.546547][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 639.551474][ T8075] 140322704506880-140322704510975: [ 639.563349][ T8166] BUG at mt_find:6473 (1) [ 639.565486][ T8075] ffff88807c795380 [ 639.574647][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 639.582569][ T8075] 140322704510976-140322704642047: [ 639.589357][ T8166] 0-18446744073709551615: [ 639.590192][ T8075] ffff88807c7959a0 [ 639.594028][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 639.599313][ T8075] 140322704642048-140730494414847: [ 639.613950][ T8166] contents: [ 639.615463][ T8075] 0000000000000000 [ 639.621598][ T8166] 93708216008704 [ 639.625590][ T8075] 140730494414848-140730494550015: [ 639.652604][ T8166] 20480 [ 639.653909][ T8075] ffff88807c795a80 [ 639.670932][ T8166] 18446603342792269824 [ 639.694413][ T8075] 140730494550016-140730496278527: [ 639.712375][ T8166] 0 [ 639.714488][ T8075] 0000000000000000 [ 639.720224][ T8166] 0 [ 639.720891][ T8075] 140730496278528-140730496294911: [ 639.729172][ T8166] 0 [ 639.742674][ T8075] ffff88807c795b60 [ 639.742915][ T8166] 0 [ 639.750678][ T8075] 140730496294912-140730496303103: [ 639.763782][ T8166] 0 [ 639.767132][ T8075] ffff88807c795c40 [ 639.772357][ T8166] 0 [ 639.783971][ T8075] 140730496303104-18446744073709551615: [ 639.790234][ T8166] 0 [ 639.792039][ T8075] 0000000000000000 [ 639.795346][ T8166] | 02 02| ffff88806630860c 139904166133759 [ 639.805415][ T8075] Pass: 10383487 Run:10383642 [ 639.807084][ T8166] ffff88806630840c 139904200589311 [ 639.809565][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 639.812683][ T8166] ffff8880267c3a0c 18446744073709551615 [ 639.817569][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 639.817584][ T8075] Call Trace: [ 639.817592][ T8075] [ 639.817601][ T8075] dump_stack_lvl+0xd1/0x138 [ 639.820093][ T8166] 0000000000000000 0 [ 639.823790][ T8075] mt_find.cold+0x8b/0x90 [ 639.826288][ T8166] 0000000000000000 0 [ 639.832221][ T8075] ? mas_find+0x1d0/0x1d0 [ 639.834694][ T8166] 0000000000000000 0 [ 639.838410][ T8075] find_vma+0x10c/0x1b0 [ 639.844366][ T8166] 0000000000000000 0 [ 639.849019][ T8075] ? can_vma_merge_before+0x390/0x390 [ 639.849051][ T8075] ? walk_page_test+0x78/0x180 [ 639.854211][ T8166] 0000000000000000 0 [ 639.863988][ T8075] walk_page_range+0x2b1/0x4a0 [ 639.864023][ T8075] ? __walk_page_range+0x780/0x780 [ 639.864071][ T8075] mlock_fixup+0x650/0x810 [ 639.864115][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 639.864153][ T8075] ? mlock_fixup+0x810/0x810 [ 639.864201][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 639.864246][ T8075] do_mlock+0x25a/0x6d0 [ 639.864286][ T8075] ? folio_evictable+0x270/0x270 [ 639.864333][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 639.869965][ T8166] 0000000000000000 0 [ 639.879984][ T8075] __x64_sys_mlock+0x59/0x80 [ 639.883260][ T8166] 0000000000000000 [ 639.886173][ T8075] do_syscall_64+0x39/0xb0 [ 639.890754][ T8166] 0-139904166133759: [ 639.894710][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 639.899039][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 639.902974][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 639.911423][ T8166] contents: [ 639.915386][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 639.915410][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 639.915433][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 639.915449][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 639.915462][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 639.915477][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.915491][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 639.915525][ T8075] [ 639.941356][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 639.946629][ T8166] 0000000000000000 536866815 [ 639.948726][ T8075] BUG at mt_find:6473 (1) [ 639.955044][ T8166] ffff88807e785620 536870911 [ 639.958344][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 639.971249][ T8166] ffff88807e785700 553631743 [ 639.973267][ T8075] 0-18446744073709551615: [ 639.983877][ T8166] 0000000000000000 553635839 [ 639.987801][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 [ 639.995084][ T8166] ffff8880770f5c40 553631743 [ 639.996083][ T8075] 0 [ 640.002081][ T8166] ffff8880770f5b60 553644031 [ 640.006461][ T8075] 0 [ 640.022916][ T8166] ffff8880226cd1c0 553648127 [ 640.044497][ T8075] 0 [ 640.075415][ T8166] ffff88807e7857e0 553652223 0000000000000000 116783185919 [ 640.085866][ T8075] | 02 02| [ 640.100254][ T8166] ffff88807e7858c0 116789477375 [ 640.100701][ T8075] ffff88802228180c 140322669592575 [ 640.112600][ T8166] 0000000000000000 93825005486079 [ 640.114275][ T8075] ffff88802228160c 140322704048127 [ 640.123811][ T8166] ffff88807e7859a0 93825005625343 [ 640.128587][ T8075] ffff88807a4f6c0c 18446744073709551615 [ 640.140717][ T8166] 0000000000000000 139904166129663 [ 640.151486][ T8075] 0000000000000000 0 [ 640.164656][ T8166] ffff88807e785a80 139904166133759 [ 640.170397][ T8075] 0000000000000000 0 [ 640.172097][ T8166] 0000000000000000 0 [ 640.179492][ T8075] 0000000000000000 0 [ 640.190245][ T8166] 000000000000000d [ 640.192992][ T8075] 0000000000000000 0 [ 640.212582][ T8166] 0-536866815: [ 640.214196][ T8075] 0000000000000000 0 [ 640.223655][ T8166] 0000000000000000 [ 640.223671][ T8166] 536866816-536870911: ffff88807e785620 [ 640.223697][ T8166] 536870912-553631743: ffff88807e785700 [ 640.223719][ T8166] 553631744-553635839: 0000000000000000 [ 640.223745][ T8166] 553635840-553631743: ffff8880770f5c40 [ 640.223768][ T8166] 553631744-553644031: ffff8880770f5b60 [ 640.223790][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 640.223811][ T8166] 553648128-553652223: ffff88807e7857e0 [ 640.223832][ T8166] 553652224-116783185919: 0000000000000000 [ 640.223853][ T8166] 116783185920-116789477375: [ 640.225078][ T8075] 0000000000000000 0 [ 640.234150][ T8166] ffff88807e7858c0 [ 640.237556][ T8075] 0000000000000000 [ 640.244868][ T8166] 116789477376-93825005486079: 0000000000000000 [ 640.244896][ T8166] 93825005486080-93825005625343: [ 640.249305][ T8075] 0-140322669592575: [ 640.263790][ T8166] ffff88807e7859a0 [ 640.267782][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 640.277858][ T8166] 93825005625344-139904166129663: [ 640.278688][ T8075] contents: [ 640.284254][ T8166] 0000000000000000 [ 640.290506][ T8075] 0000000000000000 536866815 [ 640.303697][ T8166] 139904166129664-139904166133759: [ 640.308487][ T8075] ffff88802b7dbc40 536870911 [ 640.313332][ T8166] ffff88807e785a80 [ 640.317773][ T8075] ffff88802b7dbd20 553631743 [ 640.333535][ T8166] 139904166133760-139904200589311: [ 640.338164][ T8075] 0000000000000000 553635839 [ 640.347587][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 640.353395][ T8075] ffff88801cae0e00 553631743 [ 640.372120][ T8166] contents: [ 640.379100][ T8075] ffff88801cae0d20 553644031 [ 640.382959][ T8166] ffff88807e785b60 139904174522367 [ 640.384598][ T8075] ffff888020c88460 553648127 [ 640.398073][ T8166] ffff88807e785c40 139904176619519 [ 640.400425][ T8075] ffff88802b7dbe00 553652223 [ 640.414596][ T8166] ffff88807e785d20 139904178716671 [ 640.415160][ T8075] 0000000000000000 116829323263 [ 640.419585][ T8166] ffff88807e785e00 139904180813823 [ 640.424759][ T8075] ffff88802b7dbee0 116833517567 [ 640.431347][ T8166] ffff88807e785ee0 139904182910975 [ 640.434667][ T8075] 0000000000000000 93825021800447 [ 640.439521][ T8166] ffff8880770f5000 139904187105279 [ 640.453362][ T8075] ffff88808b414000 93825021939711 [ 640.454930][ T8166] ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 [ 640.460251][ T8075] 0000000000000000 140322669588479 [ 640.465168][ T8166] 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 640.465257][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 640.465288][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 640.493407][ T8075] ffff888075edd7e0 140322669592575 [ 640.506744][ T8166] 139904176619520-139904178716671: [ 640.517658][ T8075] 0000000000000000 0 [ 640.524810][ T8166] ffff88807e785d20 [ 640.532242][ T8075] 000000000000000d [ 640.552981][ T8166] 139904178716672-139904180813823: [ 640.554000][ T8075] 0-536866815: 0000000000000000 [ 640.559772][ T8166] ffff88807e785e00 [ 640.565231][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 640.574808][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 640.576304][ T8075] 536870912-553631743: [ 640.582918][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 640.587690][ T8075] ffff88802b7dbd20 [ 640.599825][ T8075] 553631744-553635839: 0000000000000000 [ 640.601695][ T8166] 139904187105280-139904187252735: [ 640.605994][ T8075] 553635840-553631743: ffff88801cae0e00 [ 640.606020][ T8075] 553631744-553644031: ffff88801cae0d20 [ 640.606042][ T8075] 553644032-553648127: [ 640.616944][ T8166] ffff8880770f50e0 [ 640.617978][ T8075] ffff888020c88460 [ 640.623307][ T8166] 139904187252736-139904187981823: [ 640.628013][ T8075] 553648128-553652223: [ 640.640344][ T8166] ffff8880770f51c0 [ 640.642331][ T8075] ffff88802b7dbe00 [ 640.649762][ T8166] 139904187981824-139904188317695: [ 640.650402][ T8075] 553652224-116829323263: [ 640.654317][ T8166] ffff8880770f52a0 [ 640.659978][ T8075] 0000000000000000 [ 640.672617][ T8166] 139904188317696-139904188321791: [ 640.672625][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 640.681659][ T8166] 0000000000000000 [ 640.684830][ T8075] 116833517568-93825021800447: 0000000000000000 [ 640.692668][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 640.695480][ T8075] 93825021800448-93825021939711: [ 640.701912][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 640.708788][ T8075] ffff88808b414000 [ 640.727957][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 640.728013][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 640.743456][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 640.745119][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 640.750910][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 640.765363][ T8075] 140322669592576-140322704048127: [ 640.807950][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 640.816179][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 640.820701][ T8166] 139904201199616-139904201203711: [ 640.875231][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 640.883077][ T8166] ffff8880770f59a0 [ 640.887807][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 640.887835][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 640.887856][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 640.887878][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 640.887900][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 640.887923][ T8075] 140322690564096-140322690711551: [ 640.892606][ T8166] 139904201203712-139904201334783: [ 640.898579][ T8075] ffff888075eddb60 [ 640.898592][ T8075] 140322690711552-140322691440639: [ 640.913240][ T8166] ffff8880770f58c0 [ 640.919751][ T8075] ffff888075eddc40 [ 640.945169][ T8166] 139904201334784-140730916691967: [ 640.949827][ T8075] 140322691440640-140322691776511: [ 640.951422][ T8166] 0000000000000000 [ 640.955926][ T8075] ffff888075eddd20 [ 640.965099][ T8166] 140730916691968-140730916827135: [ 640.966508][ T8075] 140322691776512-140322691780607: [ 640.978585][ T8166] ffff8880770f5620 [ 640.979590][ T8075] 0000000000000000 [ 640.993213][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 640.993275][ T8166] 140730916827136-140730917257215: [ 641.000461][ T8075] 140322692145152-140322692182015: [ 641.002048][ T8166] 0000000000000000 [ 641.006363][ T8075] ffff888075eddee0 [ 641.014806][ T8166] 140730917257216-140730917273599: [ 641.015666][ T8075] 140322692182016-140322692202495: [ 641.019096][ T8166] ffff8880770f5700 [ 641.024633][ T8075] 0000000000000000 [ 641.036867][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 641.038153][ T8075] 140322692202496-140322704048127: [ 641.046662][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 641.055975][ T8075] ffff888075edd000 [ 641.059706][ T8166] Pass: 10383487 Run:10383643 [ 641.068099][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 641.071083][ T8075] 140322704048128-18446744073709551615: [ 641.077903][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 641.077918][ T8166] Call Trace: [ 641.077926][ T8166] [ 641.077936][ T8166] dump_stack_lvl+0xd1/0x138 [ 641.077974][ T8166] mt_find.cold+0x8b/0x90 [ 641.092182][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 641.093818][ T8166] ? mas_find+0x1d0/0x1d0 [ 641.097666][ T8075] contents: [ 641.100022][ T8166] find_vma+0x10c/0x1b0 [ 641.104572][ T8075] 0000000000000000 140322704506879 [ 641.108876][ T8166] ? can_vma_merge_before+0x390/0x390 [ 641.108907][ T8166] ? walk_page_test+0x78/0x180 [ 641.108939][ T8166] walk_page_range+0x2b1/0x4a0 [ 641.108976][ T8166] ? __walk_page_range+0x780/0x780 [ 641.109026][ T8166] mlock_fixup+0x650/0x810 [ 641.109073][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 641.131477][ T8075] ffff88807c795380 140322704510975 [ 641.134812][ T8166] ? mlock_fixup+0x810/0x810 [ 641.134862][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 641.134899][ T8166] do_mlock+0x25a/0x6d0 [ 641.134940][ T8166] ? folio_evictable+0x270/0x270 [ 641.134989][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 641.150084][ T8075] ffff88807c7959a0 140322704642047 [ 641.154956][ T8166] __x64_sys_mlock+0x59/0x80 [ 641.154997][ T8166] do_syscall_64+0x39/0xb0 [ 641.155031][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.155060][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 641.162155][ T8075] 0000000000000000 140730494414847 [ 641.164626][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 641.179120][ T8075] ffff88807c795a80 140730494550015 [ 641.180251][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 [ 641.184390][ T8075] 0000000000000000 140730496278527 [ 641.189303][ T8166] ORIG_RAX: 0000000000000095 [ 641.189313][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 641.189328][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 641.189342][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 641.189356][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.189370][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 641.189406][ T8166] [ 641.192599][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 641.216797][ T8075] ffff88807c795b60 140730496294911 [ 641.220261][ T8166] BUG at mt_find:6473 (1) [ 641.232107][ T8075] ffff88807c795c40 140730496303103 [ 641.253849][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 641.258049][ T8075] 0000000000000000 18446744073709551615 [ 641.262617][ T8166] 0-18446744073709551615: [ 641.266993][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 641.267067][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 641.267090][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 641.267113][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 641.267134][ T8075] 140322704642048-140730494414847: [ 641.283043][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 641.283444][ T8075] 0000000000000000 [ 641.303579][ T8166] contents: [ 641.308459][ T8075] 140730494414848-140730494550015: [ 641.320751][ T8166] 93708216008704 [ 641.321742][ T8075] ffff88807c795a80 [ 641.343136][ T8166] 20480 [ 641.345511][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 641.345540][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 641.345563][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 641.345585][ T8075] 140730496303104-18446744073709551615: [ 641.364613][ T8166] 18446603342792269824 0 [ 641.371568][ T8075] 0000000000000000 [ 641.371581][ T8075] Pass: 10383487 Run:10383644 [ 641.371593][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 641.371620][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 641.371635][ T8075] Call Trace: [ 641.371642][ T8075] [ 641.371652][ T8075] dump_stack_lvl+0xd1/0x138 [ 641.371690][ T8075] mt_find.cold+0x8b/0x90 [ 641.371724][ T8075] ? mas_find+0x1d0/0x1d0 [ 641.371770][ T8075] find_vma+0x10c/0x1b0 [ 641.371796][ T8075] ? can_vma_merge_before+0x390/0x390 [ 641.371826][ T8075] ? walk_page_test+0x78/0x180 [ 641.371860][ T8075] walk_page_range+0x2b1/0x4a0 [ 641.391097][ T8166] 0 [ 641.391235][ T8075] ? __walk_page_range+0x780/0x780 [ 641.399018][ T8166] 0 [ 641.402466][ T8075] mlock_fixup+0x650/0x810 [ 641.405963][ T8166] 0 [ 641.411594][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 641.415450][ T8166] 0 [ 641.418987][ T8075] ? mlock_fixup+0x810/0x810 [ 641.421809][ T8166] 0 0 [ 641.428734][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 641.428774][ T8075] do_mlock+0x25a/0x6d0 [ 641.428811][ T8075] ? folio_evictable+0x270/0x270 [ 641.428860][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 641.428895][ T8075] __x64_sys_mlock+0x59/0x80 [ 641.428928][ T8075] do_syscall_64+0x39/0xb0 [ 641.428961][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 641.428989][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 641.429010][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 641.429034][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 641.429059][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 641.429076][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 641.429091][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 641.429104][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.447450][ T8166] | 02 02| [ 641.448893][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 641.448930][ T8075] [ 641.452128][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 641.462740][ T8166] ffff88806630860c 139904166133759 [ 641.471956][ T8075] BUG at mt_find:6473 (1) [ 641.497616][ T8166] ffff88806630840c 139904200589311 [ 641.501865][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 641.513209][ T8166] ffff8880267c3a0c 18446744073709551615 [ 641.516184][ T8075] 0-18446744073709551615: [ 641.520731][ T8166] 0000000000000000 0 [ 641.523168][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 641.528297][ T8166] 0000000000000000 0 [ 641.531267][ T8075] contents: [ 641.545347][ T8166] 0000000000000000 0 [ 641.545719][ T8075] 93708188282880 [ 641.549978][ T8166] 0000000000000000 0 [ 641.553546][ T8075] 20480 [ 641.568286][ T8166] 0000000000000000 0 [ 641.570310][ T8075] 18446603343213248512 [ 641.574316][ T8166] 0000000000000000 0 [ 641.579214][ T8075] 0 [ 641.590957][ T8166] 0000000000000000 [ 641.594237][ T8075] 0 [ 641.628382][ T8166] 0-139904166133759: [ 641.630342][ T8075] 0 [ 641.653430][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 641.656471][ T8075] 0 [ 641.660108][ T8166] contents: [ 641.666099][ T8075] 0 [ 641.668813][ T8166] 0000000000000000 536866815 [ 641.674682][ T8075] 0 [ 641.687688][ T8166] ffff88807e785620 536870911 [ 641.691211][ T8075] 0 [ 641.705613][ T8166] ffff88807e785700 553631743 [ 641.708396][ T8075] | 02 02| [ 641.712035][ T8166] 0000000000000000 553635839 [ 641.719842][ T8075] ffff88802228180c 140322669592575 [ 641.731197][ T8166] ffff8880770f5c40 553631743 [ 641.734901][ T8075] ffff88802228160c 140322704048127 [ 641.741942][ T8166] ffff8880770f5b60 553644031 [ 641.745503][ T8075] ffff88807a4f6c0c 18446744073709551615 [ 641.749618][ T8166] ffff8880226cd1c0 553648127 [ 641.753659][ T8075] 0000000000000000 0 [ 641.771412][ T8166] ffff88807e7857e0 553652223 [ 641.793493][ T8075] 0000000000000000 0 [ 641.796098][ T8166] 0000000000000000 116783185919 [ 641.799742][ T8075] 0000000000000000 0 [ 641.800889][ T8166] ffff88807e7858c0 116789477375 [ 641.805807][ T8075] 0000000000000000 0 [ 641.817610][ T8166] 0000000000000000 93825005486079 [ 641.818952][ T8075] 0000000000000000 0 [ 641.823347][ T8166] ffff88807e7859a0 93825005625343 [ 641.828580][ T8075] 0000000000000000 0 0000000000000000 [ 641.828606][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 [ 641.841074][ T8166] 0000000000000000 139904166129663 [ 641.845611][ T8075] 0000000000000000 93825021800447 [ 641.853471][ T8166] ffff88807e785a80 139904166133759 [ 641.856616][ T8075] ffff88808b414000 93825021939711 [ 641.863629][ T8166] 0000000000000000 0 [ 641.875347][ T8075] 0000000000000000 140322669588479 [ 641.881942][ T8166] 000000000000000d [ 641.889823][ T8075] ffff888075edd7e0 140322669592575 [ 641.896313][ T8166] 0-536866815: [ 641.939598][ T8075] 0000000000000000 0 [ 641.954638][ T8166] 0000000000000000 [ 641.960090][ T8075] 000000000000000d [ 641.970180][ T8166] 536866816-536870911: [ 641.973825][ T8075] 0-536866815: [ 641.984553][ T8166] ffff88807e785620 [ 641.985491][ T8075] 0000000000000000 [ 641.990828][ T8166] 536870912-553631743: [ 641.993449][ T8075] 536866816-536870911: [ 641.997187][ T8166] ffff88807e785700 [ 641.997200][ T8166] 553631744-553635839: 0000000000000000 [ 641.997222][ T8166] 553635840-553631743: ffff8880770f5c40 [ 641.997243][ T8166] 553631744-553644031: ffff8880770f5b60 [ 642.002244][ T8075] ffff88802b7dbc40 [ 642.014816][ T8166] 553644032-553648127: [ 642.019961][ T8075] 536870912-553631743: [ 642.032593][ T8166] ffff8880226cd1c0 [ 642.036743][ T8075] ffff88802b7dbd20 [ 642.039713][ T8166] 553648128-553652223: [ 642.044194][ T8075] 553631744-553635839: [ 642.055355][ T8166] ffff88807e7857e0 [ 642.057141][ T8075] 0000000000000000 [ 642.060660][ T8166] 553652224-116783185919: [ 642.065517][ T8075] 553635840-553631743: ffff88801cae0e00 [ 642.081321][ T8075] 553631744-553644031: ffff88801cae0d20 [ 642.083917][ T8166] 0000000000000000 [ 642.087607][ T8075] 553644032-553648127: [ 642.091001][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 642.095803][ T8075] ffff888020c88460 [ 642.104808][ T8166] 116789477376-93825005486079: 0000000000000000 [ 642.106167][ T8075] 553648128-553652223: [ 642.112441][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 642.117242][ T8075] ffff88802b7dbe00 [ 642.127887][ T8075] 553652224-116829323263: 0000000000000000 [ 642.130829][ T8166] 93825005625344-139904166129663: [ 642.134062][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 642.143893][ T8166] 0000000000000000 [ 642.147625][ T8075] 116833517568-93825021800447: 0000000000000000 [ 642.153096][ T8166] 139904166129664-139904166133759: [ 642.157362][ T8075] 93825021800448-93825021939711: [ 642.161799][ T8166] ffff88807e785a80 [ 642.162909][ T8075] ffff88808b414000 [ 642.173087][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 642.177809][ T8075] 93825021939712-140322669588479: [ 642.235266][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 642.242808][ T8075] 0000000000000000 [ 642.247790][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 642.247816][ T8166] 139904176619520-139904178716671: [ 642.253693][ T8075] 140322669588480-140322669592575: [ 642.258573][ T8166] ffff88807e785d20 [ 642.258587][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 642.258612][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 642.258634][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 642.258656][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 642.258679][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 642.258701][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 642.258723][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 642.258745][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 642.258768][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 642.275785][ T8075] ffff888075edd7e0 [ 642.282509][ T8166] 139904188723200-139904188743679: [ 642.296146][ T8075] 140322669592576-140322704048127: [ 642.302262][ T8166] 0000000000000000 [ 642.309737][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 642.331548][ T8166] 139904188743680-139904200589311: [ 642.338033][ T8075] contents: [ 642.348395][ T8166] ffff8880770f5540 [ 642.360415][ T8075] ffff888075edd8c0 140322677981183 [ 642.372810][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 642.373031][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 642.373054][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 642.373077][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 642.373099][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 642.373122][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 642.373144][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 642.373165][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 642.373187][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 642.373210][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 642.373232][ T8166] Pass: 10383541 Run:10383699 [ 642.373245][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 642.373270][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 642.373284][ T8166] Call Trace: [ 642.373292][ T8166] [ 642.373301][ T8166] dump_stack_lvl+0xd1/0x138 [ 642.373339][ T8166] mt_find.cold+0x8b/0x90 [ 642.373375][ T8166] ? mas_find+0x1d0/0x1d0 [ 642.373417][ T8166] find_vma+0x10c/0x1b0 [ 642.373443][ T8166] ? can_vma_merge_before+0x390/0x390 [ 642.373473][ T8166] ? walk_page_test+0x78/0x180 [ 642.373507][ T8166] walk_page_range+0x2b1/0x4a0 [ 642.373542][ T8166] ? __walk_page_range+0x780/0x780 [ 642.373589][ T8166] mlock_fixup+0x650/0x810 [ 642.386859][ T8075] ffff888075edd9a0 140322680078335 [ 642.431930][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 642.431975][ T8166] ? mlock_fixup+0x810/0x810 [ 642.432022][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 642.432060][ T8166] do_mlock+0x25a/0x6d0 [ 642.432100][ T8166] ? folio_evictable+0x270/0x270 [ 642.432147][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 642.432177][ T8166] __x64_sys_mlock+0x59/0x80 [ 642.445374][ T8075] ffff888075edd2a0 140322682175487 [ 642.446005][ T8166] do_syscall_64+0x39/0xb0 [ 642.453062][ T8075] ffff888075edd0e0 140322684272639 [ 642.459824][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 642.459854][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 642.459874][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 642.459896][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 642.459921][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 642.459938][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 642.459954][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 642.459969][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.459984][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 642.460016][ T8166] [ 642.475448][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 642.484747][ T8075] ffff888075edd1c0 140322686369791 [ 642.496115][ T8166] BUG at mt_find:6473 (1) [ 642.508860][ T8075] ffff888075edda80 140322690564095 [ 642.525161][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 642.530737][ T8075] ffff888075eddb60 140322690711551 [ 642.531675][ T8166] 0-18446744073709551615: [ 642.536224][ T8075] ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 [ 642.544811][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 642.550420][ T8075] 0000000000000000 140322691780607 [ 642.561861][ T8166] contents: [ 642.565419][ T8075] ffff888075edde00 140322692145151 [ 642.569381][ T8166] 93708216008704 [ 642.574520][ T8075] ffff888075eddee0 140322692182015 [ 642.582771][ T8166] 20480 [ 642.594394][ T8075] 0000000000000000 140322692202495 [ 642.595216][ T8166] 18446603342792269824 [ 642.600441][ T8075] ffff888075edd000 140322704048127 [ 642.606091][ T8166] 0 0 [ 642.617285][ T8075] 0000000000000000 0 [ 642.620753][ T8166] 0 [ 642.636249][ T8075] 000000000000000d [ 642.636268][ T8075] 140322669592576-140322677981183: [ 642.642959][ T8166] 0 [ 642.663709][ T8075] ffff888075edd8c0 [ 642.665128][ T8166] 0 [ 642.672644][ T8075] 140322677981184-140322680078335: [ 642.690958][ T8166] 0 [ 642.697818][ T8075] ffff888075edd9a0 [ 642.709311][ T8166] 0 [ 642.721917][ T8075] 140322680078336-140322682175487: [ 642.724575][ T8166] | 02 02| [ 642.730902][ T8075] ffff888075edd2a0 [ 642.745761][ T8166] ffff88806630860c 139904166133759 [ 642.748058][ T8075] 140322682175488-140322684272639: [ 642.756195][ T8166] ffff88806630840c 139904200589311 [ 642.768735][ T8075] ffff888075edd0e0 [ 642.778492][ T8166] ffff8880267c3a0c 18446744073709551615 [ 642.793638][ T8075] 140322684272640-140322686369791: [ 642.799469][ T8166] 0000000000000000 0 [ 642.819785][ T8075] ffff888075edd1c0 [ 642.825728][ T8166] 0000000000000000 0 [ 642.826205][ T8075] 140322686369792-140322690564095: [ 642.835067][ T8166] 0000000000000000 0 [ 642.839096][ T8075] ffff888075edda80 [ 642.842463][ T8166] 0000000000000000 0 [ 642.843793][ T8075] 140322690564096-140322690711551: [ 642.850706][ T8166] 0000000000000000 0 [ 642.852121][ T8075] ffff888075eddb60 [ 642.855187][ T8166] 0000000000000000 0 [ 642.858868][ T8075] 140322690711552-140322691440639: [ 642.864005][ T8166] 0000000000000000 [ 642.869651][ T8075] ffff888075eddc40 [ 642.869665][ T8075] 140322691440640-140322691776511: [ 642.883821][ T8166] 0-139904166133759: [ 642.886449][ T8075] ffff888075eddd20 [ 642.889967][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 642.893728][ T8075] 140322691776512-140322691780607: [ 642.897470][ T8166] contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 [ 642.919331][ T8075] 0000000000000000 [ 642.941824][ T8166] ffff88807e7857e0 553652223 [ 642.949010][ T8075] 140322691780608-140322692145151: [ 642.949455][ T8166] 0000000000000000 116783185919 [ 642.955208][ T8075] ffff888075edde00 [ 642.964508][ T8166] ffff88807e7858c0 116789477375 [ 642.970621][ T8075] 140322692145152-140322692182015: [ 642.978218][ T8166] 0000000000000000 93825005486079 [ 642.996831][ T8075] ffff888075eddee0 [ 643.004949][ T8166] ffff88807e7859a0 93825005625343 [ 643.010518][ T8075] 140322692182016-140322692202495: [ 643.022710][ T8166] 0000000000000000 139904166129663 [ 643.024031][ T8075] 0000000000000000 [ 643.029866][ T8166] ffff88807e785a80 139904166133759 [ 643.034613][ T8075] 140322692202496-140322704048127: [ 643.039956][ T8166] 0000000000000000 0 [ 643.049431][ T8075] ffff888075edd000 [ 643.068244][ T8166] 000000000000000d [ 643.082713][ T8166] 0-536866815: 0000000000000000 [ 643.084870][ T8075] 140322704048128-18446744073709551615: [ 643.088912][ T8166] 536866816-536870911: [ 643.089668][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 643.096414][ T8166] ffff88807e785620 [ 643.104884][ T8075] contents: [ 643.107890][ T8166] 536870912-553631743: [ 643.111313][ T8075] 0000000000000000 140322704506879 [ 643.114575][ T8166] ffff88807e785700 [ 643.126586][ T8075] ffff88807c795380 140322704510975 [ 643.128795][ T8166] 553631744-553635839: [ 643.130107][ T8075] ffff88807c7959a0 140322704642047 [ 643.134079][ T8166] 0000000000000000 [ 643.144299][ T8075] 0000000000000000 140730494414847 [ 643.148136][ T8166] 553635840-553631743: [ 643.149911][ T8075] ffff88807c795a80 140730494550015 [ 643.153335][ T8166] ffff8880770f5c40 [ 643.163402][ T8075] 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 643.170323][ T8166] 553631744-553644031: ffff8880770f5b60 [ 643.203324][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 643.206912][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 643.209908][ T8166] 553648128-553652223: ffff88807e7857e0 [ 643.222421][ T8166] 553652224-116783185919: 0000000000000000 [ 643.222829][ T8075] 140322704506880-140322704510975: [ 643.229011][ T8166] 116783185920-116789477375: [ 643.229816][ T8075] ffff88807c795380 [ 643.234553][ T8166] ffff88807e7858c0 [ 643.247210][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 643.247680][ T8166] 116789477376-93825005486079: [ 643.254154][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 643.259618][ T8166] 0000000000000000 [ 643.270433][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 643.273978][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 643.280129][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 643.293598][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 643.295373][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 643.302597][ T8075] 140730496278528-140730496294911: [ 643.308013][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 643.369256][ T8075] ffff88807c795b60 [ 643.373000][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 643.380321][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 643.390347][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 643.399418][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 643.400344][ T8166] 139904176619520-139904178716671: [ 643.407698][ T8075] Pass: 10383541 Run:10383700 [ 643.412417][ T8166] ffff88807e785d20 [ 643.413251][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 643.420208][ T8166] 139904178716672-139904180813823: [ 643.421617][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 643.440087][ T8166] ffff88807e785e00 [ 643.446980][ T8075] Call Trace: [ 643.446989][ T8075] [ 643.446999][ T8075] dump_stack_lvl+0xd1/0x138 [ 643.447036][ T8075] mt_find.cold+0x8b/0x90 [ 643.447071][ T8075] ? mas_find+0x1d0/0x1d0 [ 643.447115][ T8075] find_vma+0x10c/0x1b0 [ 643.454247][ T8166] 139904180813824-139904182910975: [ 643.457022][ T8075] ? can_vma_merge_before+0x390/0x390 [ 643.457055][ T8075] ? walk_page_test+0x78/0x180 [ 643.457087][ T8075] walk_page_range+0x2b1/0x4a0 [ 643.457122][ T8075] ? __walk_page_range+0x780/0x780 [ 643.457170][ T8075] mlock_fixup+0x650/0x810 [ 643.464879][ T8166] ffff88807e785ee0 [ 643.466044][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 643.470363][ T8166] 139904182910976-139904187105279: [ 643.474519][ T8075] ? mlock_fixup+0x810/0x810 [ 643.486764][ T8166] ffff8880770f5000 [ 643.490155][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 643.501771][ T8166] 139904187105280-139904187252735: [ 643.504379][ T8075] do_mlock+0x25a/0x6d0 [ 643.542806][ T8075] ? folio_evictable+0x270/0x270 [ 643.547764][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 643.553661][ T8075] __x64_sys_mlock+0x59/0x80 [ 643.558262][ T8075] do_syscall_64+0x39/0xb0 [ 643.562696][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 643.568591][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 643.573009][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 643.592612][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 643.601028][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 643.609000][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 643.617145][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 643.625113][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.633077][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 643.641061][ T8075] [ 643.653116][ T8166] ffff8880770f50e0 [ 643.657169][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 643.663091][ T8075] BUG at mt_find:6473 (1) [ 643.667809][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 643.675012][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 643.676026][ T8166] 139904187981824-139904188317695: [ 643.683425][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 643.696791][ T8166] ffff8880770f52a0 [ 643.727918][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 643.739645][ T8166] 139904188317696-139904188321791: [ 643.784473][ T8075] 0-536866815: [ 643.791633][ T8166] 0000000000000000 [ 643.794198][ T8075] 0000000000000000 [ 643.803168][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 643.804924][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 643.811343][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 643.822022][ T8075] 553631744-553635839: 0000000000000000 [ 643.823506][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 643.828321][ T8075] 553635840-553631743: ffff88801cae0e00 [ 643.840916][ T8075] 553631744-553644031: ffff88801cae0d20 [ 643.847880][ T8075] 553644032-553648127: ffff888020c88460 [ 643.852488][ T8166] 139904188723200-139904188743679: [ 643.853788][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 643.865901][ T8075] 553652224-116829323263: 0000000000000000 [ 643.868798][ T8166] 0000000000000000 [ 643.872066][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 643.881362][ T8166] 139904188743680-139904200589311: [ 643.882534][ T8075] 116833517568-93825021800447: 0000000000000000 [ 643.890352][ T8166] ffff8880770f5540 [ 643.897425][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 643.905276][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 643.905967][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 643.964923][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 643.972009][ T8075] 140322669588480-140322669592575: [ 643.972142][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 643.984756][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 643.984974][ T8075] ffff888075edd7e0 [ 643.991754][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 644.002472][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 644.004268][ T8075] 140322669592576-140322704048127: [ 644.011157][ T8166] 140730916827136-140730917257215: [ 644.014037][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 644.024947][ T8166] 0000000000000000 [ 644.074482][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 644.085416][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 644.090569][ T8166] 140730917257216-140730917273599: [ 644.092368][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 644.104998][ T8166] ffff8880770f5700 [ 644.105014][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 644.105039][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 644.118495][ T8075] 140322682175488-140322684272639: [ 644.126674][ T8166] Pass: 10383541 Run:10383701 [ 644.133695][ T8075] ffff888075edd0e0 [ 644.137616][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 644.142994][ T8075] 140322684272640-140322686369791: [ 644.150499][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 644.150514][ T8166] Call Trace: [ 644.150521][ T8166] [ 644.150531][ T8166] dump_stack_lvl+0xd1/0x138 [ 644.156100][ T8075] ffff888075edd1c0 [ 644.166120][ T8166] mt_find.cold+0x8b/0x90 [ 644.169405][ T8075] 140322686369792-140322690564095: [ 644.172330][ T8166] ? mas_find+0x1d0/0x1d0 [ 644.177002][ T8075] ffff888075edda80 [ 644.180694][ T8166] find_vma+0x10c/0x1b0 [ 644.185003][ T8075] 140322690564096-140322690711551: [ 644.190516][ T8166] ? can_vma_merge_before+0x390/0x390 [ 644.203478][ T8075] ffff888075eddb60 [ 644.208313][ T8166] ? walk_page_test+0x78/0x180 [ 644.208351][ T8166] walk_page_range+0x2b1/0x4a0 [ 644.215002][ T8075] 140322690711552-140322691440639: [ 644.217408][ T8166] ? __walk_page_range+0x780/0x780 [ 644.222231][ T8075] ffff888075eddc40 [ 644.226990][ T8166] mlock_fixup+0x650/0x810 [ 644.232515][ T8075] 140322691440640-140322691776511: [ 644.237617][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 644.241324][ T8075] ffff888075eddd20 [ 644.245718][ T8166] ? mlock_fixup+0x810/0x810 [ 644.245767][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 644.245806][ T8166] do_mlock+0x25a/0x6d0 [ 644.245847][ T8166] ? folio_evictable+0x270/0x270 [ 644.245893][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 644.245928][ T8166] __x64_sys_mlock+0x59/0x80 [ 644.245962][ T8166] do_syscall_64+0x39/0xb0 [ 644.245995][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 644.246025][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 644.246047][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 644.246070][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 644.246095][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 644.246112][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 644.246128][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 644.246143][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.246159][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 644.246194][ T8166] [ 644.275820][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 644.283412][ T8075] 140322691776512-140322691780607: [ 644.288804][ T8166] BUG at mt_find:6473 (1) [ 644.294811][ T8075] 0000000000000000 [ 644.295714][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 644.301230][ T8075] 140322691780608-140322692145151: [ 644.307458][ T8166] 0-18446744073709551615: [ 644.335103][ T8075] ffff888075edde00 [ 644.344994][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 644.358292][ T8075] 140322692145152-140322692182015: [ 644.358872][ T8166] contents: [ 644.366736][ T8075] ffff888075eddee0 [ 644.404440][ T8166] 93708216008704 [ 644.408203][ T8075] 140322692182016-140322692202495: [ 644.414878][ T8166] 20480 [ 644.416827][ T8075] 0000000000000000 [ 644.420599][ T8166] 18446603342792269824 [ 644.428301][ T8075] 140322692202496-140322704048127: [ 644.442918][ T8166] 0 [ 644.444464][ T8075] ffff888075edd000 [ 644.450480][ T8166] 0 [ 644.452894][ T8075] 140322704048128-18446744073709551615: [ 644.464321][ T8166] 0 [ 644.466560][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 644.468894][ T8166] 0 [ 644.472587][ T8075] contents: 0000000000000000 140322704506879 [ 644.488808][ T8166] 0 [ 644.495599][ T8075] ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 11:34:09 executing program 5: syz_io_uring_setup(0x3bbe, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0) [ 644.547186][ T8166] 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 644.553756][ T8075] 140322704048128-140322704506879: 11:34:09 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:09 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 11:34:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 11:34:09 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 644.571627][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 644.585449][ T8075] 0000000000000000 [ 644.627493][ T8166] 0-536866815: 0000000000000000 11:34:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 644.708527][ T8166] 536866816-536870911: ffff88807e785620 [ 644.730782][ T8183] random: crng reseeded on system resumption [ 644.754693][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 644.796642][ T8166] 536870912-553631743: ffff88807e785700 [ 644.912171][ T27] audit: type=1800 audit(1673264049.740:53): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1162 res=0 errno=0 11:34:10 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 645.576267][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 645.584720][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 645.592237][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 645.599759][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 645.619960][ T8166] 553631744-553635839: 0000000000000000 11:34:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 645.631584][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 645.684875][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 645.691903][ T8075] 140730496303104-18446744073709551615: 0000000000000000 11:34:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 645.743740][ T8166] 553635840-553631743: ffff8880770f5c40 [ 645.762130][ T8075] Pass: 10393881 Run:10394042 [ 645.909015][ T27] audit: type=1800 audit(1673264050.680:54): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1172 res=0 errno=0 [ 645.915625][ T8166] 553631744-553644031: [ 645.929641][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.317322][ T8166] ffff8880770f5b60 [ 646.384421][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 646.490725][ T8166] 553648128-553652223: ffff88807e7857e0 11:34:11 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000003c0), &(0x7f0000000480)=0x98) [ 646.632003][ T8166] 553652224-116783185919: 0000000000000000 [ 646.660467][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 646.711963][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 646.721842][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 646.731935][ T8075] Call Trace: [ 646.735236][ T8075] [ 646.738203][ T8075] dump_stack_lvl+0xd1/0x138 [ 646.742839][ T8075] mt_find.cold+0x8b/0x90 [ 646.747217][ T8075] ? mas_find+0x1d0/0x1d0 [ 646.751601][ T8075] find_vma+0x10c/0x1b0 [ 646.755802][ T8075] ? can_vma_merge_before+0x390/0x390 [ 646.761217][ T8075] ? walk_page_test+0x78/0x180 [ 646.766030][ T8075] walk_page_range+0x2b1/0x4a0 [ 646.770835][ T8075] ? __walk_page_range+0x780/0x780 [ 646.776005][ T8075] mlock_fixup+0x650/0x810 [ 646.780483][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 646.785737][ T8075] ? mlock_fixup+0x810/0x810 [ 646.790387][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 646.796347][ T8075] do_mlock+0x25a/0x6d0 [ 646.800581][ T8075] ? folio_evictable+0x270/0x270 [ 646.805582][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 646.811520][ T8075] __x64_sys_mlock+0x59/0x80 [ 646.816325][ T8075] do_syscall_64+0x39/0xb0 [ 646.820774][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 646.826700][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 646.831145][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 646.850792][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 646.859250][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 646.867254][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 646.875261][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 646.883264][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.891273][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 646.899288][ T8075] [ 646.953516][ T27] audit: type=1800 audit(1673264051.760:55): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1164 res=0 errno=0 [ 647.325698][ T8166] 116789477376-93825005486079: 0000000000000000 [ 647.332430][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 647.339413][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 647.346544][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 647.352464][ T8075] BUG at mt_find:6473 (1) [ 647.375012][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 647.382066][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 647.437037][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.479727][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 647.534890][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 647.540581][ T8075] 0-18446744073709551615: [ 647.541894][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 647.541923][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 647.592062][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 647.614878][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 647.649845][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.668584][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 647.694833][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 647.700816][ T8166] 139904182910976-139904187105279: [ 647.743910][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.825089][ T8075] 0-536866815: 0000000000000000 [ 647.830478][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 647.872313][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 647.895961][ T8166] ffff8880770f5000 [ 647.897141][ T8075] 553631744-553635839: 0000000000000000 [ 647.918610][ T8075] 553635840-553631743: ffff88801cae0e00 [ 647.931910][ T8075] 553631744-553644031: ffff88801cae0d20 [ 647.938162][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 647.950237][ T8075] 553644032-553648127: ffff888020c88460 [ 647.959998][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 647.964605][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 647.967488][ T8166] 139904187981824-139904188317695: [ 647.972924][ T8075] 553652224-116829323263: 0000000000000000 [ 647.978820][ T8166] ffff8880770f52a0 [ 647.988829][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 647.992541][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 647.996613][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 648.002393][ T8075] 116833517568-93825021800447: [ 648.012573][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 648.019400][ T8075] 0000000000000000 [ 648.025357][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 648.036425][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 648.036854][ T8166] 139904188743680-139904200589311: [ 648.043204][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 648.049073][ T8166] ffff8880770f5540 [ 648.059968][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 648.112129][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 648.120711][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 648.127728][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 [ 648.127946][ T8166] 139904201199616-139904201203711: [ 648.127953][ T8075] ffff888075eddee0 140322692182015 0000000000000000 140322692202495 [ 648.171377][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.172198][ T8166] ffff8880770f59a0 [ 648.189880][ T8075] ffff888075edd000 140322704048127 [ 648.192939][ T8166] 139904201203712-139904201334783: [ 648.200751][ T8075] 0000000000000000 0 [ 648.201964][ T8166] ffff8880770f58c0 [ 648.211912][ T8075] 000000000000000d [ 648.211927][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 648.212566][ T8166] 139904201334784-140730916691967: [ 648.220804][ T8075] 140322677981184-140322680078335: [ 648.227797][ T8166] 0000000000000000 [ 648.241567][ T8075] ffff888075edd9a0 [ 648.241583][ T8075] 140322680078336-140322682175487: [ 648.245705][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 648.251914][ T8075] ffff888075edd2a0 [ 648.258602][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 648.265294][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 648.269317][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 648.282995][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 648.283546][ T8075] 140322684272640-140322686369791: [ 648.290330][ T8166] 140730917281792-18446744073709551615: [ 648.290755][ T8075] ffff888075edd1c0 [ 648.296279][ T8166] 0000000000000000 [ 648.306422][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 648.311980][ T8166] Pass: 10407759 Run:10407921 [ 648.321665][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 648.328115][ T8075] 140322690564096-140322690711551: [ 648.331480][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 648.331496][ T8166] Call Trace: [ 648.331504][ T8166] [ 648.337063][ T8075] ffff888075eddb60 [ 648.347055][ T8166] dump_stack_lvl+0xd1/0x138 [ 648.347095][ T8166] mt_find.cold+0x8b/0x90 [ 648.350365][ T8075] 140322690711552-140322691440639: [ 648.353285][ T8166] ? mas_find+0x1d0/0x1d0 [ 648.357003][ T8075] ffff888075eddc40 [ 648.361570][ T8166] find_vma+0x10c/0x1b0 [ 648.384071][ T8166] ? can_vma_merge_before+0x390/0x390 [ 648.389454][ T8166] ? walk_page_test+0x78/0x180 [ 648.394237][ T8166] walk_page_range+0x2b1/0x4a0 [ 648.399012][ T8166] ? __walk_page_range+0x780/0x780 [ 648.404155][ T8166] mlock_fixup+0x650/0x810 [ 648.408592][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 648.414222][ T8166] ? mlock_fixup+0x810/0x810 [ 648.418837][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 648.424741][ T8166] do_mlock+0x25a/0x6d0 [ 648.428919][ T8166] ? folio_evictable+0x270/0x270 [ 648.433875][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 648.439781][ T8166] __x64_sys_mlock+0x59/0x80 [ 648.444380][ T8166] do_syscall_64+0x39/0xb0 [ 648.448805][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 648.454705][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 648.459121][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 648.478750][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 648.487187][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 648.495162][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 648.503148][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 648.511118][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.519085][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 648.527078][ T8166] [ 648.535071][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 648.543117][ T8166] BUG at mt_find:6473 (1) [ 648.547845][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 648.556707][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 648.593575][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.600159][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 648.607404][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 648.656305][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.666569][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 648.667681][ T8166] 0-536866815: 0000000000000000 [ 648.673639][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 648.685637][ T8166] 536866816-536870911: ffff88807e785620 [ 648.685945][ T8075] 140322692145152-140322692182015: [ 648.691773][ T8166] 536870912-553631743: ffff88807e785700 [ 648.697371][ T8075] ffff888075eddee0 [ 648.697385][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 648.697409][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 648.697433][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 [ 648.711543][ T8166] 553631744-553635839: [ 648.714045][ T8075] 0000000000000000 140730494414847 [ 648.726165][ T8166] 0000000000000000 [ 648.751591][ T8075] ffff88807c795a80 140730494550015 [ 648.752836][ T8166] 553635840-553631743: [ 648.756367][ T8075] 0000000000000000 140730496278527 [ 648.762959][ T8166] ffff8880770f5c40 [ 648.766159][ T8075] ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 648.778388][ T8166] 553631744-553644031: [ 648.799937][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 648.799964][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 648.799988][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 648.800011][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 648.800033][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 648.800056][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 648.800079][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 648.800102][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 648.800124][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 648.800147][ T8075] Pass: 10407759 Run:10407922 [ 648.815979][ T8166] ffff8880770f5b60 [ 648.818584][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 648.833483][ T8166] 553644032-553648127: [ 648.839304][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 648.839320][ T8075] Call Trace: [ 648.839328][ T8075] [ 648.839337][ T8075] dump_stack_lvl+0xd1/0x138 [ 648.846901][ T8166] ffff8880226cd1c0 [ 648.853272][ T8075] mt_find.cold+0x8b/0x90 [ 648.860432][ T8166] 553648128-553652223: [ 648.867532][ T8075] ? mas_find+0x1d0/0x1d0 [ 648.867579][ T8075] find_vma+0x10c/0x1b0 [ 648.872598][ T8166] ffff88807e7857e0 [ 648.875938][ T8075] ? can_vma_merge_before+0x390/0x390 [ 648.875970][ T8075] ? walk_page_test+0x78/0x180 [ 648.876001][ T8075] walk_page_range+0x2b1/0x4a0 [ 648.876035][ T8075] ? __walk_page_range+0x780/0x780 [ 648.876085][ T8075] mlock_fixup+0x650/0x810 [ 648.876131][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 648.876169][ T8075] ? mlock_fixup+0x810/0x810 [ 648.876218][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 648.876257][ T8075] do_mlock+0x25a/0x6d0 [ 648.876296][ T8075] ? folio_evictable+0x270/0x270 [ 648.876344][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 648.876377][ T8075] __x64_sys_mlock+0x59/0x80 [ 648.900952][ T8166] 553652224-116783185919: [ 648.903999][ T8075] do_syscall_64+0x39/0xb0 [ 648.907222][ T8166] 0000000000000000 [ 648.911486][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 648.911516][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 648.915529][ T8166] 116783185920-116789477375: [ 648.919524][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 648.924002][ T8166] ffff88807e7858c0 [ 648.928306][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 648.928333][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 648.928350][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 648.928365][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 648.928379][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.928393][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 648.928427][ T8075] [ 648.946122][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 648.951108][ T8166] 116789477376-93825005486079: [ 648.952148][ T8075] BUG at mt_find:6473 (1) [ 648.965009][ T8166] 0000000000000000 [ 649.004826][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 649.016892][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 649.016924][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 649.016948][ T8166] 139904166129664-139904166133759: [ 649.045287][ T8075] 0-18446744073709551615: [ 649.074031][ T8166] ffff88807e785a80 [ 649.159331][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 649.174925][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 649.214312][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.233245][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 649.240393][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 649.247519][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 649.254500][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 649.261588][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 649.268638][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 649.275824][ T8075] contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 649.305384][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.311892][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 649.319200][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 649.329225][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 649.333658][ T4392] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 649.343674][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 649.351331][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 649.354926][ T8166] 139904188321792-139904188686335: [ 649.400274][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.411739][ T8075] 0-536866815: 0000000000000000 [ 649.414954][ T4392] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 649.423493][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 649.431962][ T8166] ffff8880770f5380 [ 649.435825][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 649.446515][ T8075] 553631744-553635839: 0000000000000000 [ 649.448517][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 649.453202][ T8075] 553635840-553631743: ffff88801cae0e00 [ 649.465674][ T4392] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 649.472753][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 649.472879][ T8075] 553631744-553644031: ffff88801cae0d20 [ 649.482444][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 649.486090][ T8075] 553644032-553648127: ffff888020c88460 [ 649.492799][ T8166] 139904200589312-18446744073709551615: [ 649.498707][ T4392] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 649.498886][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 649.513082][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 649.518119][ T4392] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 649.524377][ T8075] 553652224-116829323263: [ 649.526039][ T8166] contents: [ 649.534346][ T8075] 0000000000000000 [ 649.539735][ T8166] 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 [ 649.550744][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 649.574902][ T8166] 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 649.610909][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 649.618208][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 649.625702][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 649.628795][ T8075] 116833517568-93825021800447: 0000000000000000 [ 649.632698][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 649.649141][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 649.656219][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 649.663202][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 649.667214][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 649.670233][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 649.684878][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 649.692294][ T8166] Pass: 10409277 Run:10409441 [ 649.697096][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 649.706940][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 649.710697][ T8075] 93825021939712-140322669588479: [ 649.717001][ T8166] Call Trace: [ 649.717011][ T8166] [ 649.717019][ T8166] dump_stack_lvl+0xd1/0x138 [ 649.717056][ T8166] mt_find.cold+0x8b/0x90 [ 649.723397][ T8075] 0000000000000000 [ 649.725816][ T8166] ? mas_find+0x1d0/0x1d0 [ 649.725862][ T8166] find_vma+0x10c/0x1b0 [ 649.729176][ T8075] 140322669588480-140322669592575: [ 649.733356][ T8166] ? can_vma_merge_before+0x390/0x390 [ 649.737910][ T8075] ffff888075edd7e0 [ 649.741366][ T8166] ? walk_page_test+0x78/0x180 [ 649.747180][ T8075] 140322669592576-140322704048127: [ 649.749812][ T8166] walk_page_range+0x2b1/0x4a0 [ 649.763714][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 649.764404][ T8166] ? __walk_page_range+0x780/0x780 [ 649.769422][ T8075] contents: [ 649.774507][ T8166] mlock_fixup+0x650/0x810 [ 649.779501][ T8075] ffff888075edd8c0 140322677981183 [ 649.786772][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 649.792137][ T8075] ffff888075edd9a0 140322680078335 [ 649.795162][ T8166] ? mlock_fixup+0x810/0x810 [ 649.795214][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 649.799962][ T8075] ffff888075edd2a0 140322682175487 [ 649.804783][ T8166] do_mlock+0x25a/0x6d0 [ 649.804830][ T8166] ? folio_evictable+0x270/0x270 [ 649.804874][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 649.804909][ T8166] __x64_sys_mlock+0x59/0x80 [ 649.804947][ T8166] do_syscall_64+0x39/0xb0 [ 649.804979][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 649.805006][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 649.805026][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 649.805047][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 649.805072][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 649.805089][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 649.805104][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 649.805120][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.805135][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 649.805170][ T8166] [ 649.832585][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 649.847172][ T8075] ffff888075edd0e0 140322684272639 [ 649.850345][ T8166] BUG at mt_find:6473 (1) [ 649.872503][ T8075] ffff888075edd1c0 140322686369791 [ 649.895908][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 649.957194][ T8075] ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 649.978551][ T8166] 0-18446744073709551615: [ 650.002707][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.023301][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 650.030714][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 650.034899][ T8075] 140322677981184-140322680078335: [ 650.065540][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.079506][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 650.079733][ T8166] 0-536866815: 0000000000000000 [ 650.079755][ T8166] 536866816-536870911: ffff88807e785620 [ 650.079778][ T8166] 536870912-553631743: ffff88807e785700 [ 650.079799][ T8166] 553631744-553635839: 0000000000000000 [ 650.079820][ T8166] 553635840-553631743: ffff8880770f5c40 [ 650.079842][ T8166] 553631744-553644031: ffff8880770f5b60 [ 650.079863][ T8166] 553644032-553648127: [ 650.128670][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.131354][ T8075] ffff888075edd9a0 [ 650.154516][ T8166] ffff8880226cd1c0 [ 650.159182][ T8075] 140322680078336-140322682175487: [ 650.165730][ T8166] 553648128-553652223: [ 650.172199][ T8213] chnl_net:caif_netlink_parms(): no params data found [ 650.174502][ T8166] ffff88807e7857e0 [ 650.184890][ T8075] ffff888075edd2a0 [ 650.197205][ T8166] 553652224-116783185919: [ 650.214371][ T8075] 140322682175488-140322684272639: [ 650.216704][ T8166] 0000000000000000 [ 650.222965][ T8075] ffff888075edd0e0 [ 650.225239][ T8166] 116783185920-116789477375: [ 650.231836][ T8075] 140322684272640-140322686369791: [ 650.232621][ T8166] ffff88807e7858c0 [ 650.259509][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.261416][ T8075] ffff888075edd1c0 [ 650.266740][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.267700][ T8213] device bridge_slave_0 entered promiscuous mode [ 650.284136][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 650.291237][ T8166] 116789477376-93825005486079: 0000000000000000 [ 650.297968][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 650.299967][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.307441][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 650.313022][ T8166] 93825005486080-93825005625343: [ 650.319129][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 650.319155][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 650.319177][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 650.319200][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 650.319222][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 650.319244][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 650.319265][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 [ 650.338677][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.339652][ T8213] device bridge_slave_1 entered promiscuous mode [ 650.345732][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 650.345799][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 650.345823][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 650.345845][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 650.345867][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 650.345888][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 650.345911][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 650.345932][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 650.345955][ T8075] 140730496294912-140730496303103: [ 650.354187][ T8166] ffff88807e7859a0 [ 650.361486][ T8075] ffff88807c795c40 [ 650.392171][ T8166] 93825005625344-139904166129663: [ 650.408313][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.408605][ T8075] 140730496303104-18446744073709551615: [ 650.448355][ T8166] 0000000000000000 [ 650.457754][ T8075] 0000000000000000 [ 650.489596][ T8166] 139904166129664-139904166133759: [ 650.490147][ T8075] Pass: 10419921 Run:10420086 [ 650.494050][ T8166] ffff88807e785a80 [ 650.497646][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 650.507773][ T8213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.508796][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 650.515945][ T8166] 139904166133760-139904200589311: [ 650.518822][ T8075] Call Trace: [ 650.518833][ T8075] [ 650.522531][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 650.528053][ T8075] dump_stack_lvl+0xd1/0x138 [ 650.528088][ T8075] mt_find.cold+0x8b/0x90 [ 650.528120][ T8075] ? mas_find+0x1d0/0x1d0 [ 650.528162][ T8075] find_vma+0x10c/0x1b0 [ 650.542756][ T8213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.546305][ T8075] ? can_vma_merge_before+0x390/0x390 [ 650.546339][ T8075] ? walk_page_test+0x78/0x180 [ 650.546370][ T8075] walk_page_range+0x2b1/0x4a0 [ 650.546404][ T8075] ? __walk_page_range+0x780/0x780 [ 650.546449][ T8075] mlock_fixup+0x650/0x810 [ 650.635647][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 650.640866][ T8075] ? mlock_fixup+0x810/0x810 [ 650.645474][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 650.651377][ T8075] do_mlock+0x25a/0x6d0 [ 650.655544][ T8075] ? folio_evictable+0x270/0x270 [ 650.660500][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 650.666412][ T8075] __x64_sys_mlock+0x59/0x80 [ 650.671018][ T8075] do_syscall_64+0x39/0xb0 [ 650.675442][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 650.681338][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 650.685767][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 650.705464][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 650.713878][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 650.721848][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 650.729819][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 650.737790][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.745756][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 650.753740][ T8075] [ 650.756795][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.782501][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 650.786467][ T8166] contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 [ 650.794349][ T8213] team0: Port device team_slave_0 added [ 650.797954][ T8075] BUG at mt_find:6473 (1) [ 650.834439][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 650.843230][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 650.848470][ T8166] 0000000000000000 139904188321791 [ 650.880127][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.883220][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 650.899894][ T8213] team0: Port device team_slave_1 added [ 650.941398][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.947392][ T8075] 0-536866815: 0000000000000000 [ 650.958961][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 650.965382][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 650.971317][ T8075] 553631744-553635839: 0000000000000000 [ 650.974811][ T8166] ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 650.979231][ T8075] 553635840-553631743: ffff88801cae0e00 [ 650.998073][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 651.003239][ T8075] 553631744-553644031: [ 651.013100][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 651.022012][ T8075] ffff88801cae0d20 [ 651.031399][ T8075] 553644032-553648127: [ 651.031399][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 651.045289][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.052036][ T8075] ffff888020c88460 [ 651.052318][ T8166] 139904178716672-139904180813823: [ 651.056388][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.056528][ T8075] 553648128-553652223: [ 651.061976][ T8213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.089616][ T8166] ffff88807e785e00 [ 651.103472][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.103490][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.103515][ T8213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.125002][ T8075] ffff88802b7dbe00 [ 651.141823][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 651.162557][ T8075] 553652224-116829323263: 0000000000000000 [ 651.162946][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 651.176769][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 651.176805][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 651.176828][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 651.176851][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 651.176874][ T8166] 139904188321792-139904188686335: [ 651.195802][ T8075] 116829323264-116833517567: [ 651.199693][ T8166] ffff8880770f5380 [ 651.206479][ T8075] ffff88802b7dbee0 [ 651.215226][ T8166] 139904188686336-139904188723199: [ 651.218307][ T8213] device hsr_slave_0 entered promiscuous mode [ 651.219299][ T8166] ffff8880770f5460 [ 651.223440][ T8075] 116833517568-93825021800447: [ 651.236700][ T8166] 139904188723200-139904188743679: [ 651.238898][ T8213] device hsr_slave_1 entered promiscuous mode [ 651.244474][ T8166] 0000000000000000 [ 651.259142][ T8075] 0000000000000000 [ 651.261266][ T8166] 139904188743680-139904200589311: [ 651.263803][ T8213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.263828][ T8213] Cannot create hsr debugfs directory [ 651.269393][ T8166] ffff8880770f5540 [ 651.269406][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 651.292638][ T8075] 93825021800448-93825021939711: [ 651.338479][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.338715][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 651.338743][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 651.338767][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 651.338795][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 651.353643][ T8075] ffff88808b414000 [ 651.366106][ T8166] 140730916691968-140730916827135: [ 651.392788][ T8075] 93825021939712-140322669588479: [ 651.396228][ T8166] ffff8880770f5620 [ 651.398911][ T8075] 0000000000000000 [ 651.405421][ T8166] 140730916827136-140730917257215: [ 651.408165][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 651.424486][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 651.432733][ T8166] 0000000000000000 [ 651.479895][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.483980][ T8075] 140322669592576-140322677981183: [ 651.496836][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 651.503364][ T8075] ffff888075edd8c0 [ 651.513514][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 651.521268][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 651.528543][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 651.528830][ T8166] Pass: 10419921 Run:10420087 [ 651.540354][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 651.547983][ T8075] 140322680078336-140322682175487: [ 651.550246][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 651.550262][ T8166] Call Trace: [ 651.550270][ T8166] [ 651.556243][ T8075] ffff888075edd2a0 [ 651.565830][ T8166] dump_stack_lvl+0xd1/0x138 [ 651.565870][ T8166] mt_find.cold+0x8b/0x90 [ 651.569522][ T8075] 140322682175488-140322684272639: [ 651.572079][ T8166] ? mas_find+0x1d0/0x1d0 [ 651.576019][ T8075] ffff888075edd0e0 [ 651.580358][ T8166] find_vma+0x10c/0x1b0 [ 651.584671][ T8075] 140322684272640-140322686369791: [ 651.590197][ T8166] ? can_vma_merge_before+0x390/0x390 [ 651.590228][ T8166] ? walk_page_test+0x78/0x180 [ 651.590261][ T8166] walk_page_range+0x2b1/0x4a0 [ 651.590294][ T8166] ? __walk_page_range+0x780/0x780 [ 651.590346][ T8166] mlock_fixup+0x650/0x810 [ 651.590392][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 651.590433][ T8166] ? mlock_fixup+0x810/0x810 [ 651.590479][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 651.590518][ T8166] do_mlock+0x25a/0x6d0 [ 651.590555][ T8166] ? folio_evictable+0x270/0x270 [ 651.590598][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 651.590631][ T8166] __x64_sys_mlock+0x59/0x80 [ 651.590666][ T8166] do_syscall_64+0x39/0xb0 [ 651.590706][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 651.590735][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 651.590755][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 651.590778][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 651.590803][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 651.590820][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 651.590836][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 651.590850][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.590866][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 651.590901][ T8166] [ 651.591913][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 651.614895][ T48] Bluetooth: hci7: command 0x0409 tx timeout [ 651.620487][ T8166] BUG at mt_find:6473 (1) [ 651.654903][ T8075] ffff888075edd1c0 [ 651.658925][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 651.690616][ T8075] 140322686369792-140322690564095: [ 651.724200][ T8166] 0-18446744073709551615: [ 651.729715][ T8075] ffff888075edda80 [ 651.747488][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 651.784824][ T8075] 140322690564096-140322690711551: [ 651.808959][ T8213] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.809139][ T8166] contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 651.864796][ T8075] ffff888075eddb60 [ 651.883528][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 651.894806][ T8075] 140322690711552-140322691440639: [ 651.947865][ T8166] 0-536866815: 0000000000000000 [ 651.967202][ T8166] 536866816-536870911: ffff88807e785620 [ 651.973162][ T8166] 536870912-553631743: ffff88807e785700 [ 651.990750][ T8166] 553631744-553635839: 0000000000000000 [ 651.995473][ T8213] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.003051][ T8166] 553635840-553631743: ffff8880770f5c40 [ 652.034935][ T8166] 553631744-553644031: ffff8880770f5b60 [ 652.040881][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 652.056904][ T8166] 553648128-553652223: ffff88807e7857e0 [ 652.062842][ T8166] 553652224-116783185919: 0000000000000000 [ 652.064824][ T8075] ffff888075eddc40 [ 652.072740][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 652.096019][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 652.118390][ T8166] 116789477376-93825005486079: 0000000000000000 [ 652.131413][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 652.139133][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 652.141853][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 652.161466][ T8213] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.164509][ T8166] 139904166129664-139904166133759: [ 652.184877][ T8075] 140322691780608-140322692145151: [ 652.184912][ T8166] ffff88807e785a80 [ 652.190541][ T8075] ffff888075edde00 [ 652.220211][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 652.234799][ T8075] 140322692145152-140322692182015: [ 652.285578][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 652.311245][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 652.336104][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 652.343156][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 652.360610][ T8213] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.360960][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 652.392131][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 652.395067][ T8075] ffff888075eddee0 [ 652.402826][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 652.409585][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 652.436510][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 652.443667][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 652.461310][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 652.471006][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 652.475496][ T8166] 139904188317696-139904188321791: [ 652.534100][ T8075] 140322704048128-140322704506879: [ 652.536001][ T8166] 0000000000000000 [ 652.541793][ T8075] 0000000000000000 [ 652.553862][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 652.568528][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 652.575897][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 652.582882][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 652.589095][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 652.590533][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 652.609455][ T8166] 139904188686336-139904188723199: [ 652.612822][ T8075] 140730496278528-140730496294911: [ 652.619237][ T8166] ffff8880770f5460 [ 652.627445][ T8075] ffff88807c795b60 [ 652.631639][ T8213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 652.634438][ T8075] 140730496294912-140730496303103: [ 652.641419][ T8166] 139904188723200-139904188743679: [ 652.647703][ T8075] ffff88807c795c40 [ 652.648012][ T8213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 652.653260][ T8075] 140730496303104-18446744073709551615: [ 652.657309][ T8166] 0000000000000000 [ 652.672613][ T8075] 0000000000000000 [ 652.675905][ T8213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 652.684568][ T8075] Pass: 10419922 Run:10420089 [ 652.687291][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 652.696353][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 652.696383][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 652.696397][ T8075] Call Trace: [ 652.696404][ T8075] [ 652.696413][ T8075] dump_stack_lvl+0xd1/0x138 [ 652.696451][ T8075] mt_find.cold+0x8b/0x90 [ 652.696482][ T8075] ? mas_find+0x1d0/0x1d0 [ 652.696524][ T8075] find_vma+0x10c/0x1b0 [ 652.696548][ T8075] ? can_vma_merge_before+0x390/0x390 [ 652.696578][ T8075] ? walk_page_test+0x78/0x180 [ 652.708608][ T8213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 652.716399][ T8075] walk_page_range+0x2b1/0x4a0 [ 652.716439][ T8075] ? __walk_page_range+0x780/0x780 [ 652.716486][ T8075] mlock_fixup+0x650/0x810 [ 652.716530][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 652.716570][ T8075] ? mlock_fixup+0x810/0x810 [ 652.716618][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 652.716658][ T8075] do_mlock+0x25a/0x6d0 [ 652.716697][ T8075] ? folio_evictable+0x270/0x270 [ 652.716743][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 652.716779][ T8075] __x64_sys_mlock+0x59/0x80 [ 652.716815][ T8075] do_syscall_64+0x39/0xb0 [ 652.716850][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 652.716877][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 652.716898][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 652.716921][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 652.716946][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 652.716963][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 652.716979][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 652.716993][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.717006][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 652.717041][ T8075] [ 652.730587][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 652.733417][ T8166] 139904200589312-18446744073709551615: [ 652.737289][ T8075] BUG at mt_find:6473 (1) [ 652.753026][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 652.768711][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 652.811284][ T8166] contents: [ 652.859894][ T8213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.863106][ T8075] 0-18446744073709551615: [ 652.889137][ T8166] 0000000000000000 139904201199615 [ 652.895508][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 652.914118][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.926464][ T8075] contents: [ 652.951230][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.973557][ T8166] ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 652.978371][ T8075] 93708188282880 [ 653.014008][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 653.022608][ T8213] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.026707][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 653.034965][ T8075] 20480 18446603343213248512 [ 653.041570][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 653.046953][ T8075] 0 [ 653.053346][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 653.063126][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 653.066860][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 653.070317][ T8075] 0 [ 653.078254][ T8166] 140730916827136-140730917257215: [ 653.079806][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 653.080762][ T8166] 0000000000000000 [ 653.098698][ T8075] 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 653.105445][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.124604][ T8166] 140730917257216-140730917273599: [ 653.130341][ T5187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.143672][ T8166] ffff8880770f5700 [ 653.153412][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 653.163171][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 653.211214][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 653.213090][ T8166] 140730917273600-140730917281791: [ 653.221625][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 653.227422][ T8166] ffff8880770f57e0 [ 653.227438][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 653.227464][ T8166] Pass: 10419922 Run:10420090 [ 653.227478][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 653.227502][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 653.227517][ T8166] Call Trace: [ 653.227524][ T8166] [ 653.227534][ T8166] dump_stack_lvl+0xd1/0x138 [ 653.227571][ T8166] mt_find.cold+0x8b/0x90 [ 653.227606][ T8166] ? mas_find+0x1d0/0x1d0 [ 653.227648][ T8166] find_vma+0x10c/0x1b0 [ 653.227673][ T8166] ? can_vma_merge_before+0x390/0x390 [ 653.227704][ T8166] ? walk_page_test+0x78/0x180 [ 653.227737][ T8166] walk_page_range+0x2b1/0x4a0 [ 653.227773][ T8166] ? __walk_page_range+0x780/0x780 [ 653.227828][ T8166] mlock_fixup+0x650/0x810 [ 653.227875][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 653.227916][ T8166] ? mlock_fixup+0x810/0x810 [ 653.237516][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.239614][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 653.247046][ T5187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.251608][ T8166] do_mlock+0x25a/0x6d0 [ 653.261961][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 653.271423][ T8166] ? folio_evictable+0x270/0x270 [ 653.271475][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 653.271509][ T8166] __x64_sys_mlock+0x59/0x80 [ 653.271545][ T8166] do_syscall_64+0x39/0xb0 [ 653.277919][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 653.282333][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 653.287704][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 653.290948][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 653.314608][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 653.315853][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 653.315879][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 653.315904][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 653.315920][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 653.315934][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 653.315949][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.315964][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 653.315999][ T8166] [ 653.328432][ T8075] 0-536866815: [ 653.333337][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.350652][ T8075] 0000000000000000 [ 653.350670][ T8075] 536866816-536870911: [ 653.356330][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 653.378643][ T8075] ffff88802b7dbc40 [ 653.378662][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 653.383372][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 653.391534][ T8075] 553631744-553635839: [ 653.406909][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 653.409415][ T8075] 0000000000000000 [ 653.423205][ T8166] BUG at mt_find:6473 (1) [ 653.440468][ T8075] 553635840-553631743: [ 653.455689][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 653.463505][ T8075] ffff88801cae0e00 [ 653.503813][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 653.506985][ T8075] 553631744-553644031: [ 653.528212][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 653.530757][ T8213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 653.543112][ T8166] 0-18446744073709551615: [ 653.556610][ T8075] ffff88801cae0d20 [ 653.574535][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 653.611194][ T8075] 553644032-553648127: ffff888020c88460 [ 653.627697][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 653.633640][ T8075] 553652224-116829323263: 0000000000000000 [ 653.640530][ T8166] contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 653.642083][ T8075] 116829323264-116833517567: [ 653.673930][ T8166] 0-139904166133759: [ 653.679180][ T4392] Bluetooth: hci7: command 0x041b tx timeout [ 653.680308][ T8075] ffff88802b7dbee0 [ 653.683526][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 653.743318][ T8166] 0-536866815: 0000000000000000 [ 653.748704][ T8166] 536866816-536870911: ffff88807e785620 [ 653.748832][ T8075] 116833517568-93825021800447: [ 653.754604][ T8166] 536870912-553631743: ffff88807e785700 [ 653.766077][ T8166] 553631744-553635839: 0000000000000000 [ 653.772007][ T8166] 553635840-553631743: ffff8880770f5c40 [ 653.780579][ T8166] 553631744-553644031: ffff8880770f5b60 [ 653.786748][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 653.792678][ T8166] 553648128-553652223: ffff88807e7857e0 [ 653.798852][ T8075] 0000000000000000 [ 653.802595][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 653.810306][ T8166] 553652224-116783185919: 0000000000000000 [ 653.815626][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 653.823646][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 653.824822][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 653.848967][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 653.863504][ T8166] 116789477376-93825005486079: 0000000000000000 [ 653.914244][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 653.924500][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 653.943414][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 653.954963][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 653.960834][ T8075] 140322680078336-140322682175487: [ 653.961868][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 653.970167][ T8075] ffff888075edd2a0 [ 653.979742][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 653.988582][ T8075] 140322682175488-140322684272639: [ 654.046331][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.048559][ T8166] 139904166133760-139904174522367: [ 654.052082][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.065211][ T8166] ffff88807e785b60 [ 654.078022][ T8213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.088744][ T8075] ffff888075edd0e0 [ 654.092516][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 654.094882][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 654.106867][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 654.113843][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 654.121315][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 654.128393][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 654.133645][ T8075] 140322686369792-140322690564095: [ 654.135604][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 654.145040][ T8075] ffff888075edda80 [ 654.151272][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 654.160545][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 654.168002][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 654.172138][ T8075] 140322690564096-140322690711551: [ 654.175012][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 654.175037][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 654.175059][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 654.175082][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 654.175104][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 [ 654.196347][ T8075] ffff888075eddb60 [ 654.202225][ T8166] contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 654.236138][ T8075] 140322690711552-140322691440639: [ 654.292957][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 654.316029][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 654.323881][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 654.334389][ T8075] ffff888075eddc40 [ 654.339092][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 654.346328][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 654.365622][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 654.372645][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 654.391223][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 654.413906][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 654.422698][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 654.440644][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 654.451957][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 654.462914][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 654.469665][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 654.472274][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 654.478380][ T8166] 140730917281792-18446744073709551615: [ 654.486343][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 654.499406][ T8166] 0000000000000000 [ 654.503182][ T8166] Pass: 10526352 Run:10526521 [ 654.512142][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 654.521995][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 654.532050][ T8166] Call Trace: [ 654.535327][ T8166] [ 654.538257][ T8166] dump_stack_lvl+0xd1/0x138 [ 654.542866][ T8166] mt_find.cold+0x8b/0x90 [ 654.547204][ T8166] ? mas_find+0x1d0/0x1d0 [ 654.551549][ T8166] find_vma+0x10c/0x1b0 [ 654.555708][ T8166] ? can_vma_merge_before+0x390/0x390 [ 654.561084][ T8166] ? walk_page_test+0x78/0x180 [ 654.565861][ T8166] walk_page_range+0x2b1/0x4a0 [ 654.570635][ T8166] ? __walk_page_range+0x780/0x780 [ 654.575767][ T8166] mlock_fixup+0x650/0x810 [ 654.580201][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 654.585414][ T8166] ? mlock_fixup+0x810/0x810 [ 654.591152][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 654.597054][ T8166] do_mlock+0x25a/0x6d0 [ 654.601223][ T8166] ? folio_evictable+0x270/0x270 [ 654.606268][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 654.612168][ T8166] __x64_sys_mlock+0x59/0x80 [ 654.616767][ T8166] do_syscall_64+0x39/0xb0 [ 654.621190][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 654.627084][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 654.631501][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 654.651108][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 654.659521][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 654.667493][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 654.675465][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 654.683444][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.691412][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 654.699395][ T8166] [ 654.707366][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 654.746774][ T8213] device veth0_vlan entered promiscuous mode [ 654.762704][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 654.770736][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 654.776697][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 654.778987][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 654.788552][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 654.799603][ T8166] BUG at mt_find:6473 (1) [ 654.799755][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.803942][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 654.817125][ T8213] device veth1_vlan entered promiscuous mode [ 654.830281][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 654.837409][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 654.845111][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 654.852088][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 654.854118][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 654.859254][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 654.867306][ T8075] 140730496294912-140730496303103: [ 654.876646][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 654.880255][ T8166] contents: [ 654.883554][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 654.896219][ T8075] ffff88807c795c40 [ 654.902674][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 654.914222][ T8166] 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 654.923178][ T8213] device veth0_macvtap entered promiscuous mode [ 654.954734][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 654.963738][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 654.968181][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 654.975906][ T8213] device veth1_macvtap entered promiscuous mode [ 654.989373][ T8075] Pass: 10526352 Run:10526522 [ 654.989629][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 654.994073][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 655.002844][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 655.013284][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 655.013301][ T8075] Call Trace: [ 655.013308][ T8075] [ 655.013318][ T8075] dump_stack_lvl+0xd1/0x138 [ 655.013353][ T8075] mt_find.cold+0x8b/0x90 [ 655.013386][ T8075] ? mas_find+0x1d0/0x1d0 [ 655.013426][ T8075] find_vma+0x10c/0x1b0 [ 655.029842][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.030816][ T8075] ? can_vma_merge_before+0x390/0x390 [ 655.034089][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.037021][ T8075] ? walk_page_test+0x78/0x180 [ 655.037054][ T8075] walk_page_range+0x2b1/0x4a0 [ 655.037086][ T8075] ? __walk_page_range+0x780/0x780 [ 655.037135][ T8075] mlock_fixup+0x650/0x810 [ 655.043978][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.046046][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 655.046092][ T8075] ? mlock_fixup+0x810/0x810 [ 655.046146][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 655.051127][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.054608][ T8075] do_mlock+0x25a/0x6d0 [ 655.066468][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.070353][ T8075] ? folio_evictable+0x270/0x270 [ 655.070404][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 655.070438][ T8075] __x64_sys_mlock+0x59/0x80 [ 655.070474][ T8075] do_syscall_64+0x39/0xb0 [ 655.070510][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 655.070538][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 655.070560][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 655.070585][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 655.070611][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 655.070628][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 655.070643][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 655.070659][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.070674][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 655.070709][ T8075] [ 655.097059][ T8166] 0-139904166133759: [ 655.102718][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.118467][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 655.121487][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.134807][ T8166] contents: [ 655.137246][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.140792][ T8166] 0000000000000000 536866815 [ 655.151875][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.164961][ T8166] ffff88807e785620 536870911 [ 655.167406][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.173294][ T8166] ffff88807e785700 553631743 [ 655.179642][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.184803][ T8166] 0000000000000000 553635839 [ 655.204969][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.219340][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 655.219360][ T8075] BUG at mt_find:6473 (1) [ 655.238370][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.260929][ T8166] ffff8880770f5c40 553631743 [ 655.271986][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.284997][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 655.295035][ T8213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.310129][ T8166] ffff8880770f5b60 553644031 [ 655.329661][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.342355][ T8075] 0-18446744073709551615: [ 655.352239][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.367768][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 655.413833][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.418982][ T8166] ffff8880226cd1c0 553648127 [ 655.440152][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.443862][ T8166] ffff88807e7857e0 553652223 [ 655.460016][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.464555][ T8166] 0000000000000000 116783185919 [ 655.469551][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.476971][ T8075] contents: [ 655.492234][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.497413][ T8166] ffff88807e7858c0 116789477375 [ 655.522458][ T8075] 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 655.556813][ T8166] 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 655.565072][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.576174][ T8166] 0-536866815: 0000000000000000 [ 655.589824][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 655.593671][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.658119][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.659743][ T8166] 536866816-536870911: [ 655.668076][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.668096][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.668122][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.677651][ T8166] ffff88807e785620 [ 655.684745][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.706712][ T8166] 536870912-553631743: [ 655.709040][ T8213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.718012][ T8166] ffff88807e785700 [ 655.731864][ T8075] 0-536866815: 0000000000000000 [ 655.734247][ T8166] 553631744-553635839: 0000000000000000 [ 655.739122][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 655.744663][ T8166] 553635840-553631743: ffff8880770f5c40 [ 655.760226][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.765018][ T4392] Bluetooth: hci7: command 0x040f tx timeout [ 655.768414][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 655.777761][ T8166] 553631744-553644031: ffff8880770f5b60 [ 655.787242][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 655.791906][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 655.793159][ T8166] 553648128-553652223: ffff88807e7857e0 [ 655.810958][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.810993][ T8166] 553652224-116783185919: [ 655.819413][ T8075] 536870912-553631743: [ 655.822504][ T8166] 0000000000000000 [ 655.824180][ T8075] ffff88802b7dbd20 [ 655.837056][ T8213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.839794][ T8075] 553631744-553635839: [ 655.846535][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 655.858097][ T8075] 0000000000000000 [ 655.858184][ T8166] 116789477376-93825005486079: [ 655.861823][ T8075] 553635840-553631743: ffff88801cae0e00 [ 655.867536][ T8166] 0000000000000000 [ 655.877190][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 655.883985][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 655.892235][ T8213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.892283][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 655.904872][ T8075] 553631744-553644031: ffff88801cae0d20 [ 655.908691][ T8166] 139904166133760-139904200589311: [ 655.914203][ T8075] 553644032-553648127: ffff888020c88460 [ 655.922476][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 655.926382][ T8213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.986730][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 655.988411][ T8075] 553648128-553652223: [ 655.994667][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 655.994703][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 655.994728][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 655.994752][ T8166] 139904180813824-139904182910975: [ 656.020856][ T8213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.029184][ T8166] ffff88807e785ee0 [ 656.035256][ T8075] ffff88802b7dbe00 [ 656.035271][ T8075] 553652224-116829323263: 0000000000000000 [ 656.035296][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 656.035319][ T8075] 116833517568-93825021800447: 0000000000000000 [ 656.035341][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 656.035364][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 656.035386][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 656.035409][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 [ 656.047980][ T8166] 139904182910976-139904187105279: [ 656.056355][ T8075] ffff888075edd9a0 140322680078335 [ 656.071360][ T8166] ffff8880770f5000 [ 656.086749][ T8075] ffff888075edd2a0 140322682175487 [ 656.111100][ T8166] 139904187105280-139904187252735: [ 656.118253][ T8075] ffff888075edd0e0 140322684272639 [ 656.128728][ T8166] ffff8880770f50e0 [ 656.138301][ T8075] ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 656.179743][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 656.195648][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 656.202667][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 656.204106][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 656.227257][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 656.242121][ T5163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.245515][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 656.253511][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 656.264313][ T5163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.272030][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 656.273365][ T5274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.279981][ T8166] 139904188723200-139904188743679: [ 656.291983][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 656.295257][ T8075] 140322682175488-140322684272639: [ 656.300429][ T5274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.320714][ T8166] 0000000000000000 [ 656.320882][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 656.330991][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 656.336864][ T8075] ffff888075edd0e0 [ 656.343674][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 656.346447][ T8075] 140322684272640-140322686369791: [ 656.407464][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 656.413638][ T8075] ffff888075edd1c0 [ 656.428466][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 656.444335][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 656.451121][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 656.455109][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 656.465737][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 656.471997][ T8166] 139904201203712-139904201334783: 11:34:21 executing program 5: syz_io_uring_setup(0x23a5, &(0x7f0000000040), &(0x7f0000fe0000/0x3000)=nil, &(0x7f0000fe0000/0x4000)=nil, &(0x7f0000000180), 0x0) 11:34:21 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 11:34:21 executing program 1: writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:21 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 11:34:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:21 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 656.472690][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 656.489571][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 656.497309][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 656.502722][ T8166] ffff8880770f58c0 [ 656.511068][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 656.537557][ T27] audit: type=1800 audit(1673264061.370:56): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1164 res=0 errno=0 11:34:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x0) [ 656.584161][ T8075] 140322692202496-140322704048127: ffff888075edd000 11:34:21 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x11, 0xb, &(0x7f0000000080)={@loopback=0xffff0000, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) [ 656.669834][ T8247] random: crng reseeded on system resumption [ 656.746614][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 11:34:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 656.836420][ T27] audit: type=1800 audit(1673264061.670:57): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1170 res=0 errno=0 [ 656.858606][ T8166] 139904201334784-140730916691967: 0000000000000000 11:34:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x20, r1, 0x924533d87931047d, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) [ 657.039727][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 657.069761][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 657.078850][ T8075] 140322704506880-140322704510975: ffff88807c795380 11:34:21 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 657.086730][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 657.088908][ T8166] 140730916827136-140730917257215: [ 657.099292][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 657.112724][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 657.122633][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 657.130441][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 657.140097][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 657.162728][ T8166] 0000000000000000 [ 657.173682][ T27] audit: type=1800 audit(1673264062.000:58): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1170 res=0 errno=0 [ 657.199332][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 657.212065][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 657.280410][ T8075] Pass: 10540063 Run:10540234 [ 657.295415][ T8166] 140730917273600-140730917281791: [ 657.298973][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 657.314382][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 657.324442][ T8075] Call Trace: [ 657.327720][ T8075] [ 657.330648][ T8075] dump_stack_lvl+0xd1/0x138 [ 657.335975][ T8075] mt_find.cold+0x8b/0x90 [ 657.340324][ T8075] ? mas_find+0x1d0/0x1d0 [ 657.344663][ T8075] find_vma+0x10c/0x1b0 [ 657.348821][ T8075] ? can_vma_merge_before+0x390/0x390 [ 657.354205][ T8075] ? walk_page_test+0x78/0x180 [ 657.358978][ T8075] walk_page_range+0x2b1/0x4a0 [ 657.363751][ T8075] ? __walk_page_range+0x780/0x780 [ 657.368882][ T8075] mlock_fixup+0x650/0x810 [ 657.373317][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 657.378526][ T8075] ? mlock_fixup+0x810/0x810 [ 657.383134][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 657.389037][ T8075] do_mlock+0x25a/0x6d0 [ 657.393210][ T8075] ? folio_evictable+0x270/0x270 [ 657.398166][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 657.404069][ T8075] __x64_sys_mlock+0x59/0x80 [ 657.408756][ T8075] do_syscall_64+0x39/0xb0 [ 657.413183][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.419079][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 657.423516][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 657.443155][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 657.451577][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 657.459634][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 657.467607][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 657.476791][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.484759][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 657.492750][ T8075] [ 657.499921][ T8166] ffff8880770f57e0 [ 657.503794][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 657.511583][ T8166] Pass: 10540184 Run:10540355 [ 657.516589][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 657.526434][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 657.536525][ T8166] Call Trace: [ 657.539837][ T8166] [ 657.542798][ T8166] dump_stack_lvl+0xd1/0x138 [ 657.547438][ T8166] mt_find.cold+0x8b/0x90 [ 657.551800][ T8166] ? mas_find+0x1d0/0x1d0 [ 657.556137][ T8166] find_vma+0x10c/0x1b0 [ 657.560297][ T8166] ? can_vma_merge_before+0x390/0x390 [ 657.565664][ T8166] ? walk_page_test+0x78/0x180 [ 657.565709][ T8166] walk_page_range+0x2b1/0x4a0 [ 657.565743][ T8166] ? __walk_page_range+0x780/0x780 [ 657.565791][ T8166] mlock_fixup+0x650/0x810 [ 657.585018][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 657.590290][ T8166] ? mlock_fixup+0x810/0x810 [ 657.594964][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 657.600902][ T8166] do_mlock+0x25a/0x6d0 [ 657.605074][ T8166] ? folio_evictable+0x270/0x270 [ 657.610013][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 657.615909][ T8166] __x64_sys_mlock+0x59/0x80 [ 657.620493][ T8166] do_syscall_64+0x39/0xb0 [ 657.624914][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 657.630814][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 657.635238][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 657.654857][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 657.663261][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 657.671220][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 657.679181][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 657.687142][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.695126][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 657.703135][ T8166] 11:34:22 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x400080, 0x0) 11:34:22 executing program 2: request_key(&(0x7f0000000640)='id_legacy\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)=')(\x00', 0x0) 11:34:22 executing program 1: writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:22 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 11:34:22 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 657.724618][ T8166] index not increased! 20ffc000 <= 20ffc000 11:34:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xd22, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40284504, &(0x7f0000000200)=""/72) [ 657.778576][ T8166] BUG at mt_find:6473 (1) [ 657.825912][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 657.838627][ T4392] Bluetooth: hci7: command 0x0419 tx timeout 11:34:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 657.877848][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 11:34:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xd8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5cc, 0x11d, 0x0, 0x1, [{0x5c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{}, {}, {}, {}, {}, {0x3, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x1, 0x0, 0x3f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {0x6}, {0x0, 0x8}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x7}, {0x1}, {}, {0x0, 0x3}, {0x4}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x0, 0xfffd]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3a0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0xd, 0x2, [{}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x44]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x9, 0x2, [{}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x650, 0x11d, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x41, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x19, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xfc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}]}]}, {0x240, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x180, 0x11d, 0x0, 0x1, [{0x4}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0xec4}}, 0x0) 11:34:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 657.930790][ T8284] random: crng reseeded on system resumption [ 658.007550][ T27] audit: type=1800 audit(1673264062.840:59): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1168 res=0 errno=0 11:34:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8914, &(0x7f0000000000)={'wg1\x00'}) [ 658.348456][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 658.650379][ T8166] 0-536866815: 0000000000000000 [ 658.665450][ T8166] 536866816-536870911: ffff88807e785620 [ 658.675262][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 658.681290][ T8075] BUG at mt_find:6473 (1) [ 658.686480][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 658.695818][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 658.733111][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 658.792073][ T8166] 536870912-553631743: ffff88807e785700 11:34:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) 11:34:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8914, &(0x7f0000000000)={'wg1\x00'}) 11:34:23 executing program 1: writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:23 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) [ 658.820082][ T8075] 0-536866815: 0000000000000000 [ 658.835177][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 658.845206][ T8166] 553631744-553635839: 0000000000000000 [ 658.898158][ T8166] 553635840-553631743: ffff8880770f5c40 [ 658.933911][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 658.961489][ T8075] 553631744-553635839: 0000000000000000 [ 658.985950][ T8075] 553635840-553631743: ffff88801cae0e00 [ 658.995994][ T8302] random: crng reseeded on system resumption [ 659.069117][ T8075] 553631744-553644031: [ 659.069711][ T8166] 553631744-553644031: [ 659.096037][ T8075] ffff88801cae0d20 [ 659.153623][ T8166] ffff8880770f5b60 [ 659.176372][ T8075] 553644032-553648127: ffff888020c88460 [ 659.208831][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 659.259320][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 659.300854][ T8166] 553648128-553652223: ffff88807e7857e0 [ 659.364715][ T8075] 553652224-116829323263: 0000000000000000 [ 659.402298][ T8166] 553652224-116783185919: 0000000000000000 [ 659.430880][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 659.462493][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 659.495593][ T8075] 116833517568-93825021800447: 0000000000000000 [ 659.530560][ T8166] 116789477376-93825005486079: 0000000000000000 [ 659.562980][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 659.600127][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 659.634571][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 659.669376][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 659.711624][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 659.734730][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 659.741841][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 659.809084][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 659.886939][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 659.893971][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 659.901849][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 659.909867][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 659.918867][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 659.936306][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 659.943385][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 659.964916][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 659.973489][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 11:34:24 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:24 executing program 2: prctl$PR_SVE_GET_VL(0x53564d41, 0x0) 11:34:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) 11:34:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:24 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:24 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) [ 660.016170][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 660.023978][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 660.036428][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 660.043436][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 660.051785][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 11:34:24 executing program 2: r0 = socket(0x1, 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000340), 0x8) 11:34:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 660.090829][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 660.105746][ T8166] 139904188686336-139904188723199: ffff8880770f5460 11:34:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 11:34:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 660.146735][ T8322] random: crng reseeded on system resumption [ 660.166932][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 660.175442][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 660.197154][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 660.265261][ T8075] 140322686369792-140322690564095: ffff888075edda80 11:34:25 executing program 2: setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000040)=0x0) setresuid(0xffffffffffffffff, r0, 0x0) socket$inet6(0xa, 0x3, 0x0) [ 660.293807][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 660.359850][ T27] audit: type=1800 audit(1673264065.190:60): pid=8332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 660.391255][ T8075] 140322690564096-140322690711551: ffff888075eddb60 11:34:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) [ 660.466594][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 660.474068][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 660.493462][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 660.504479][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 660.524749][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 660.606702][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 660.613888][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 660.621520][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 660.644924][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 660.652112][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 660.660072][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 660.667516][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 660.674672][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 660.683650][ T8166] Pass: 10570538 Run:10570711 [ 660.689395][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 660.699240][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 660.709296][ T8166] Call Trace: [ 660.712566][ T8166] [ 660.715491][ T8166] dump_stack_lvl+0xd1/0x138 [ 660.720094][ T8166] mt_find.cold+0x8b/0x90 [ 660.724601][ T8166] ? mas_find+0x1d0/0x1d0 [ 660.728963][ T8166] find_vma+0x10c/0x1b0 [ 660.733126][ T8166] ? can_vma_merge_before+0x390/0x390 [ 660.738516][ T8166] ? walk_page_test+0x78/0x180 [ 660.743292][ T8166] walk_page_range+0x2b1/0x4a0 [ 660.748086][ T8166] ? __walk_page_range+0x780/0x780 [ 660.753241][ T8166] mlock_fixup+0x650/0x810 [ 660.757693][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 660.762911][ T8166] ? mlock_fixup+0x810/0x810 [ 660.767520][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 660.773428][ T8166] do_mlock+0x25a/0x6d0 [ 660.777594][ T8166] ? folio_evictable+0x270/0x270 [ 660.782557][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 660.788460][ T8166] __x64_sys_mlock+0x59/0x80 [ 660.793061][ T8166] do_syscall_64+0x39/0xb0 [ 660.797489][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 660.803388][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 660.807804][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 660.828196][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 660.836611][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 660.845273][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 660.853590][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 660.861558][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.869524][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 660.877508][ T8166] [ 660.921051][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 660.964641][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 661.006844][ T8166] BUG at mt_find:6473 (1) [ 661.054102][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 661.101728][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 661.126271][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 661.134200][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 661.174868][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 661.217553][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 661.261065][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 661.273046][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 661.295530][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 661.302538][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 661.322126][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 661.334162][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 661.339350][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 661.351430][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 661.404628][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 661.429930][ T8075] Pass: 10590403 Run:10590577 [ 661.434731][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 661.444734][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 661.454808][ T8075] Call Trace: [ 661.458099][ T8075] [ 661.461048][ T8075] dump_stack_lvl+0xd1/0x138 [ 661.465671][ T8075] mt_find.cold+0x8b/0x90 [ 661.470040][ T8075] ? mas_find+0x1d0/0x1d0 [ 661.474407][ T8075] find_vma+0x10c/0x1b0 [ 661.478586][ T8075] ? can_vma_merge_before+0x390/0x390 [ 661.483984][ T8075] ? walk_page_test+0x78/0x180 [ 661.488781][ T8075] walk_page_range+0x2b1/0x4a0 [ 661.493577][ T8075] ? __walk_page_range+0x780/0x780 [ 661.498734][ T8075] mlock_fixup+0x650/0x810 [ 661.503195][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 661.504854][ T8166] 0-536866815: 0000000000000000 [ 661.508410][ T8075] ? mlock_fixup+0x810/0x810 [ 661.513613][ T8166] 536866816-536870911: [ 661.518195][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 661.518233][ T8075] do_mlock+0x25a/0x6d0 [ 661.518270][ T8075] ? folio_evictable+0x270/0x270 [ 661.518315][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 661.518346][ T8075] __x64_sys_mlock+0x59/0x80 [ 661.548277][ T8075] do_syscall_64+0x39/0xb0 [ 661.552728][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 661.558641][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 661.563077][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 661.566016][ T8166] ffff88807e785620 [ 661.582686][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 661.582713][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 661.582729][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 661.582742][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 661.582757][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.624842][ T8166] 536870912-553631743: [ 661.626695][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 661.626731][ T8075] [ 661.631191][ T8166] ffff88807e785700 [ 661.650052][ T8166] 553631744-553635839: 0000000000000000 [ 661.656477][ T8166] 553635840-553631743: ffff8880770f5c40 [ 661.662500][ T8166] 553631744-553644031: ffff8880770f5b60 [ 661.668801][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 661.674734][ T8166] 553648128-553652223: ffff88807e7857e0 [ 661.682438][ T8166] 553652224-116783185919: 0000000000000000 [ 661.688947][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 661.695682][ T8166] 116789477376-93825005486079: 0000000000000000 [ 661.702302][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 661.709448][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 661.716565][ T8166] 139904166129664-139904166133759: ffff88807e785a80 11:34:26 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) 11:34:26 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 11:34:26 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:26 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) writev(r1, 0x0, 0x0) [ 661.723531][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d 11:34:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x0, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:26 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x408c1, 0xa8) 11:34:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x0, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 661.872674][ T8353] random: crng reseeded on system resumption 11:34:26 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x418c1, 0xa8) 11:34:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x0, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 661.935902][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 661.942344][ T8075] BUG at mt_find:6473 (1) [ 662.011972][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 662.025612][ T27] audit: type=1800 audit(1673264066.860:61): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1167 res=0 errno=0 [ 662.055230][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 662.062442][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 662.069955][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 662.083406][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 662.121321][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 11:34:27 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x418c1, 0xa8) [ 662.155401][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 662.193962][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 662.335171][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 662.343601][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 662.351162][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 662.361010][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 662.370450][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 662.378394][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 662.425111][ T8075] 0-536866815: 0000000000000000 [ 662.430471][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 662.436887][ T8166] 139904188686336-139904188723199: [ 662.436970][ T8075] 536870912-553631743: [ 662.443754][ T8166] ffff8880770f5460 [ 662.488213][ T8075] ffff88802b7dbd20 [ 662.513493][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 662.584951][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 662.592421][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 662.660925][ T8075] 553631744-553635839: 0000000000000000 [ 662.687190][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 662.751096][ T8075] 553635840-553631743: ffff88801cae0e00 [ 662.768454][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 662.785215][ T8075] 553631744-553644031: ffff88801cae0d20 [ 662.805097][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 662.807381][ T8075] 553644032-553648127: [ 662.812093][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 662.812120][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 662.831341][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 662.837554][ T8075] ffff888020c88460 [ 662.838471][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 662.849094][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 662.858810][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 662.859272][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 662.872305][ T8166] Pass: 10601727 Run:10601902 [ 662.878786][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 662.888627][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 662.898687][ T8166] Call Trace: [ 662.901962][ T8166] [ 662.904897][ T8166] dump_stack_lvl+0xd1/0x138 [ 662.909501][ T8166] mt_find.cold+0x8b/0x90 [ 662.913837][ T8166] ? mas_find+0x1d0/0x1d0 [ 662.918182][ T8166] find_vma+0x10c/0x1b0 [ 662.922345][ T8166] ? can_vma_merge_before+0x390/0x390 [ 662.927722][ T8166] ? walk_page_test+0x78/0x180 [ 662.932504][ T8166] walk_page_range+0x2b1/0x4a0 [ 662.937279][ T8166] ? __walk_page_range+0x780/0x780 [ 662.942409][ T8166] mlock_fixup+0x650/0x810 [ 662.946843][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 662.952050][ T8166] ? mlock_fixup+0x810/0x810 [ 662.956667][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 662.962572][ T8166] do_mlock+0x25a/0x6d0 [ 662.966740][ T8166] ? folio_evictable+0x270/0x270 [ 662.971694][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 662.978375][ T8166] __x64_sys_mlock+0x59/0x80 [ 662.982976][ T8166] do_syscall_64+0x39/0xb0 [ 662.987405][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 662.994168][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 662.998584][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 663.018194][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 663.026611][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 663.034582][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 663.042549][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 663.050517][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.058484][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 663.066467][ T8166] [ 663.086652][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 663.092709][ T8166] BUG at mt_find:6473 (1) [ 663.097548][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 663.106349][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 663.145290][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 663.197932][ T8166] 0-536866815: 0000000000000000 [ 663.203272][ T8166] 536866816-536870911: ffff88807e785620 [ 663.209733][ T8166] 536870912-553631743: ffff88807e785700 [ 663.216217][ T8075] 553652224-116829323263: 0000000000000000 [ 663.222485][ T8166] 553631744-553635839: 0000000000000000 [ 663.228883][ T8166] 553635840-553631743: ffff8880770f5c40 [ 663.235161][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 663.241862][ T8166] 553631744-553644031: ffff8880770f5b60 [ 663.248214][ T8075] 116833517568-93825021800447: 0000000000000000 [ 663.255114][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 663.267059][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 663.273955][ T8166] 553648128-553652223: ffff88807e7857e0 [ 663.280440][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 663.287701][ T8166] 553652224-116783185919: 0000000000000000 [ 663.293962][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 663.301372][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 663.309585][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 663.367652][ T8166] 116789477376-93825005486079: 0000000000000000 [ 663.374375][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 663.382416][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 663.389638][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 663.396961][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 663.454229][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 663.461649][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 663.471111][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 663.478482][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 663.485960][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 663.493031][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 663.500467][ T8075] 140322686369792-140322690564095: ffff888075edda80 11:34:28 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:28 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x418c1, 0xa8) 11:34:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:28 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 11:34:28 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:28 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x840, 0x0) [ 663.507797][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 663.515787][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 663.522921][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 663.530358][ T8166] 139904178716672-139904180813823: [ 663.530377][ T8075] 140322690711552-140322691440639: [ 663.530383][ T8166] ffff88807e785e00 [ 663.530396][ T8166] 139904180813824-139904182910975: [ 663.544667][ T8075] ffff888075eddc40 11:34:28 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x418c1, 0xa8) 11:34:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 663.648174][ T8385] random: crng reseeded on system resumption [ 663.679465][ T8166] ffff88807e785ee0 [ 663.748913][ T27] audit: type=1800 audit(1673264068.570:62): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1190 res=0 errno=0 [ 663.821687][ T8075] 140322691440640-140322691776511: ffff888075eddd20 11:34:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 664.482250][ T8166] 139904182910976-139904187105279: ffff8880770f5000 11:34:29 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:29 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x840, 0x0) [ 664.527201][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 664.534487][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 664.541569][ T8075] 140322692145152-140322692182015: ffff888075eddee0 11:34:29 executing program 2: setresuid(0xee01, 0xee01, 0xee00) 11:34:29 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 664.586392][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 664.604189][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 11:34:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtclass={0x2c, 0x28, 0x1, 0x0, 0x0, {}, [@tclass_kind_options=@c_tbf={0x8}]}, 0x2c}}, 0x0) 11:34:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:29 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 664.627764][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 664.637473][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 664.720452][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 664.787496][ T27] audit: type=1800 audit(1673264069.620:63): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1163 res=0 errno=0 [ 665.039357][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 11:34:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) 11:34:30 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 665.537789][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 665.544980][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 665.551964][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 665.559014][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 665.566093][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 665.573084][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 665.626784][ T8415] random: crng reseeded on system resumption 11:34:30 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xe1f216d965e092b1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4145cdb316c61a15) accept(0xffffffffffffffff, 0x0, &(0x7f0000000680)) [ 665.661550][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 665.707921][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 665.867750][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 665.877999][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 665.936401][ T8075] 140322704048128-140322704506879: [ 665.936436][ T27] audit: type=1800 audit(1673264070.770:64): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 665.988066][ T8166] 140730916691968-140730916827135: [ 665.989367][ T8075] 0000000000000000 [ 666.113424][ T8166] ffff8880770f5620 11:34:30 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 666.398296][ T8166] 140730916827136-140730917257215: 0000000000000000 11:34:31 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x1, 0x0, 0x5}, 0x20) [ 666.530988][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 666.541119][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 666.548203][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 666.563955][ T8166] 140730917281792-18446744073709551615: 0000000000000000 11:34:31 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x840, 0x0) 11:34:31 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 666.620492][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 666.645612][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 666.652733][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 666.660086][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 666.667638][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 666.675117][ T8166] Pass: 10625246 Run:10625422 [ 666.679971][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 666.689816][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 666.699906][ T8166] Call Trace: [ 666.703201][ T8166] [ 666.706153][ T8166] dump_stack_lvl+0xd1/0x138 [ 666.710797][ T8166] mt_find.cold+0x8b/0x90 [ 666.715174][ T8166] ? mas_find+0x1d0/0x1d0 [ 666.719655][ T8166] find_vma+0x10c/0x1b0 [ 666.723856][ T8166] ? can_vma_merge_before+0x390/0x390 [ 666.729278][ T8166] ? walk_page_test+0x78/0x180 [ 666.734094][ T8166] walk_page_range+0x2b1/0x4a0 [ 666.738911][ T8166] ? __walk_page_range+0x780/0x780 [ 666.744087][ T8166] mlock_fixup+0x650/0x810 [ 666.748566][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 666.753800][ T8166] ? mlock_fixup+0x810/0x810 [ 666.758418][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 666.764325][ T8166] do_mlock+0x25a/0x6d0 [ 666.768493][ T8166] ? folio_evictable+0x270/0x270 [ 666.773448][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 666.779349][ T8166] __x64_sys_mlock+0x59/0x80 [ 666.783948][ T8166] do_syscall_64+0x39/0xb0 [ 666.788377][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 666.794281][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 666.798697][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:34:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') read$sequencer(r0, &(0x7f00000020c0)=""/31, 0x1f) [ 666.818309][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 666.826738][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 666.834710][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 666.842683][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 666.850653][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.858628][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 666.866615][ T8166] 11:34:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 666.896073][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 666.935290][ T8166] BUG at mt_find:6473 (1) [ 666.940175][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 666.972695][ T8441] random: crng reseeded on system resumption [ 666.981158][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 667.225077][ T27] audit: type=1800 audit(1673264072.050:65): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1185 res=0 errno=0 [ 667.305081][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 667.710723][ T8166] 0-536866815: 0000000000000000 11:34:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') read$sequencer(r0, &(0x7f00000020c0)=""/31, 0x1f) 11:34:32 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 667.769297][ T8166] 536866816-536870911: ffff88807e785620 11:34:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') read$sequencer(r0, &(0x7f00000020c0)=""/31, 0x1f) 11:34:32 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:32 executing program 2: epoll_create(0x400) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3b}, 0x0, 0x0, 0x0, 0x0) [ 667.875928][ T8166] 536870912-553631743: ffff88807e785700 [ 667.883931][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 667.917173][ T8166] 553631744-553635839: 0000000000000000 11:34:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@gettaction={0x30, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0xe}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x30}}, 0x0) 11:34:32 executing program 2: epoll_create(0x400) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3b}, 0x0, 0x0, 0x0, 0x0) [ 667.961348][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 667.969034][ T27] audit: type=1800 audit(1673264072.790:66): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 668.038871][ T8166] 553635840-553631743: ffff8880770f5c40 [ 668.045858][ T8075] Pass: 10636566 Run:10636743 [ 668.051238][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 668.061083][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 668.071316][ T8075] Call Trace: [ 668.074590][ T8075] [ 668.077694][ T8075] dump_stack_lvl+0xd1/0x138 [ 668.082298][ T8075] mt_find.cold+0x8b/0x90 [ 668.086644][ T8075] ? mas_find+0x1d0/0x1d0 [ 668.090988][ T8075] find_vma+0x10c/0x1b0 [ 668.095146][ T8075] ? can_vma_merge_before+0x390/0x390 [ 668.100523][ T8075] ? walk_page_test+0x78/0x180 [ 668.105301][ T8075] walk_page_range+0x2b1/0x4a0 [ 668.110073][ T8075] ? __walk_page_range+0x780/0x780 [ 668.115214][ T8075] mlock_fixup+0x650/0x810 [ 668.119655][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 668.125129][ T8075] ? mlock_fixup+0x810/0x810 [ 668.129744][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 668.135655][ T8075] do_mlock+0x25a/0x6d0 [ 668.139830][ T8075] ? folio_evictable+0x270/0x270 [ 668.144794][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 668.150694][ T8075] __x64_sys_mlock+0x59/0x80 [ 668.155292][ T8075] do_syscall_64+0x39/0xb0 [ 668.159724][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 668.165619][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 668.170037][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 668.189668][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 668.198872][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 668.206843][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 668.214818][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 668.222809][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.230777][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 668.238765][ T8075] [ 668.247894][ T8464] random: crng reseeded on system resumption 11:34:33 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x840, 0x0) [ 668.307535][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 668.312639][ T8166] 553631744-553644031: [ 668.337575][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 668.363258][ T8166] ffff8880770f5b60 11:34:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) [ 668.389732][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 668.549340][ T8075] BUG at mt_find:6473 (1) [ 668.565273][ T8166] 553648128-553652223: ffff88807e7857e0 [ 668.571338][ T8166] 553652224-116783185919: 0000000000000000 [ 668.577708][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 668.584219][ T8166] 116789477376-93825005486079: 0000000000000000 [ 668.592979][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 11:34:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x28, {}, 'veth1_to_team\x00'}) 11:34:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000001c0)=""/246, 0x26, 0xf6, 0x1}, 0x20) [ 668.603344][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 668.629812][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 668.666667][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 11:34:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925d26924", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 668.852946][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d 11:34:33 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 668.913536][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 668.947317][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 668.959123][ T8075] 0-536866815: [ 669.112021][ T8483] random: crng reseeded on system resumption [ 669.157336][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 669.177672][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 669.190988][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 669.264311][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 669.291122][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 669.311261][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 669.332324][ T8075] 0000000000000000 [ 669.345007][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 669.368316][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 669.381550][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 669.412073][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 669.435349][ T8075] 553631744-553635839: 0000000000000000 [ 669.464986][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 669.497405][ T8075] 553635840-553631743: ffff88801cae0e00 [ 669.532287][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 669.561947][ T8075] 553631744-553644031: ffff88801cae0d20 [ 669.582783][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 669.619830][ T8075] 553644032-553648127: ffff888020c88460 [ 669.653170][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 669.686495][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 669.714350][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 669.745488][ T8075] 553652224-116829323263: 0000000000000000 [ 669.779546][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 669.825499][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 669.859588][ T8075] 116833517568-93825021800447: 0000000000000000 [ 669.889031][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 669.894889][ T8075] 93825021800448-93825021939711: [ 669.984285][ T8075] ffff88808b414000 [ 669.988141][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 670.000544][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 670.007879][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 670.015154][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d 11:34:34 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0) 11:34:34 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@random="b5ed472f3dd3", @link_local, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, {[@ssrr={0x89, 0x3}, @noop, @noop, @cipso={0x86, 0xa, 0x0, [{0x0, 0x4, "c3c4"}]}, @lsrr={0x83, 0xf, 0x0, [@empty, @rand_addr, @multicast2]}]}}}}}}, 0x0) 11:34:34 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x12c) 11:34:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 11:34:34 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 670.087645][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 670.102833][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 670.114666][ T8166] 139904201334784-140730916691967: 0000000000000000 11:34:35 executing program 4: mknod$loop(&(0x7f0000002180)='./file0\x00', 0x6000, 0x0) 11:34:35 executing program 2: creat(&(0x7f0000002980)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x200000, 0x84) [ 670.144959][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 670.151991][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 670.171881][ T8166] 140730917257216-140730917273599: ffff8880770f5700 11:34:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) [ 670.208072][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 11:34:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 11:34:35 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x24240, 0x0) [ 670.294456][ T8166] 140730917281792-18446744073709551615: 0000000000000000 11:34:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 670.338219][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 670.414714][ T8509] random: crng reseeded on system resumption [ 670.426447][ T8166] Pass: 10650531 Run:10650709 [ 670.444951][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 670.451979][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 670.500325][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 670.510218][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 670.520291][ T8166] Call Trace: [ 670.523564][ T8166] [ 670.526498][ T8166] dump_stack_lvl+0xd1/0x138 [ 670.531122][ T8166] mt_find.cold+0x8b/0x90 [ 670.535492][ T8166] ? mas_find+0x1d0/0x1d0 [ 670.539850][ T8166] find_vma+0x10c/0x1b0 [ 670.544002][ T8166] ? can_vma_merge_before+0x390/0x390 [ 670.549371][ T8166] ? walk_page_test+0x78/0x180 [ 670.554143][ T8166] walk_page_range+0x2b1/0x4a0 [ 670.558901][ T8166] ? __walk_page_range+0x780/0x780 [ 670.564043][ T8166] mlock_fixup+0x650/0x810 [ 670.568604][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 670.573843][ T8166] ? mlock_fixup+0x810/0x810 [ 670.578489][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 670.584430][ T8166] do_mlock+0x25a/0x6d0 [ 670.588634][ T8166] ? folio_evictable+0x270/0x270 [ 670.593584][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 670.599476][ T8166] __x64_sys_mlock+0x59/0x80 [ 670.604092][ T8166] do_syscall_64+0x39/0xb0 [ 670.608527][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 670.614517][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 670.618921][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 670.638536][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 670.646968][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 670.654978][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 670.662987][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 670.670987][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.678964][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 670.687030][ T8166] [ 670.704336][ T27] audit: type=1800 audit(1673264075.530:67): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1172 res=0 errno=0 [ 670.864973][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 670.872766][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 670.881456][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 670.888718][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 670.895901][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 670.903029][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 670.911483][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 670.918820][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 670.926141][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 670.933228][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 670.942321][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 670.949995][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 670.988344][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 671.031816][ T8166] BUG at mt_find:6473 (1) [ 671.038050][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 671.049165][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 671.060183][ T27] audit: type=1800 audit(1673264075.890:68): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=".pending_reads" dev="sda1" ino=1167 res=0 errno=0 [ 671.093056][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 671.121611][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 671.164142][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 671.189183][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 671.196759][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 671.203824][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 671.211422][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 671.218796][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 671.226704][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 671.279216][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 671.295088][ T8075] Pass: 10653665 Run:10653844 [ 671.301938][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 671.311950][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 671.322026][ T8075] Call Trace: [ 671.325318][ T8075] [ 671.328264][ T8075] dump_stack_lvl+0xd1/0x138 [ 671.332887][ T8075] mt_find.cold+0x8b/0x90 [ 671.337248][ T8075] ? mas_find+0x1d0/0x1d0 [ 671.341617][ T8075] find_vma+0x10c/0x1b0 [ 671.345444][ T8166] 0-536866815: [ 671.345783][ T8075] ? can_vma_merge_before+0x390/0x390 [ 671.345798][ T8166] 0000000000000000 [ 671.345818][ T8075] ? walk_page_test+0x78/0x180 [ 671.349611][ T8166] 536866816-536870911: [ 671.354966][ T8075] walk_page_range+0x2b1/0x4a0 [ 671.355000][ T8075] ? __walk_page_range+0x780/0x780 [ 671.355046][ T8075] mlock_fixup+0x650/0x810 [ 671.355091][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 671.355127][ T8075] ? mlock_fixup+0x810/0x810 [ 671.355171][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 671.355206][ T8075] do_mlock+0x25a/0x6d0 [ 671.355241][ T8075] ? folio_evictable+0x270/0x270 [ 671.355287][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 671.355321][ T8075] __x64_sys_mlock+0x59/0x80 [ 671.355355][ T8075] do_syscall_64+0x39/0xb0 [ 671.355390][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 671.355418][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 671.355438][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 671.355461][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 671.355487][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 671.355504][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 671.355519][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 671.355534][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.355549][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 671.355586][ T8075] [ 671.368791][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 671.425463][ T8166] ffff88807e785620 [ 671.519686][ T8166] 536870912-553631743: ffff88807e785700 [ 671.526559][ T8075] BUG at mt_find:6473 (1) [ 671.530915][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 671.540255][ T8166] 553631744-553635839: 0000000000000000 [ 671.547265][ T8166] 553635840-553631743: ffff8880770f5c40 [ 671.553196][ T8166] 553631744-553644031: ffff8880770f5b60 [ 671.562087][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 671.599228][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 671.605234][ T8166] 553648128-553652223: ffff88807e7857e0 [ 671.611155][ T8166] 553652224-116783185919: 0000000000000000 [ 671.617420][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 671.623883][ T8166] 116789477376-93825005486079: 0000000000000000 [ 671.631887][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 671.683749][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 671.704011][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 671.721807][ T8166] 139904166129664-139904166133759: ffff88807e785a80 11:34:36 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:36 executing program 2: creat(&(0x7f0000002980)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x800c0, 0x0) 11:34:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:36 executing program 4: lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x7) 11:34:36 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:36 executing program 5: creat(&(0x7f0000005ac0)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x40, &(0x7f0000005bc0)) [ 671.731430][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d 11:34:36 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x90084, 0x0) 11:34:36 executing program 2: r0 = creat(&(0x7f00000006c0)='./file1\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) [ 671.754146][ T8075] 0-536866815: [ 671.826274][ T8166] 139904166133760-139904174522367: [ 671.846361][ T8524] random: crng reseeded on system resumption 11:34:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 671.879380][ T8166] ffff88807e785b60 [ 671.902638][ T8075] 0000000000000000 11:34:36 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/46) [ 671.928037][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 672.000983][ T27] audit: type=1800 audit(1673264076.820:69): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1184 res=0 errno=0 [ 672.275078][ T8075] 536866816-536870911: ffff88802b7dbc40 11:34:37 executing program 4: creat(&(0x7f0000005ac0)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000005b80)='./file0\x00', 0x0, 0x4, &(0x7f0000005bc0)) [ 672.362301][ T8075] 536870912-553631743: ffff88802b7dbd20 11:34:37 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x100) 11:34:37 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 672.770531][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 672.807334][ T8075] 553631744-553635839: 0000000000000000 11:34:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:37 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000140)=@framed={{}, [@generic={0x47}, @generic={0x20}, @jmp]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x88, &(0x7f0000000200)=""/136, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 672.842934][ T8075] 553635840-553631743: ffff88801cae0e00 [ 672.993232][ T27] audit: type=1800 audit(1673264077.770:70): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1181 res=0 errno=0 [ 673.021753][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 673.482737][ T8075] 553631744-553644031: ffff88801cae0d20 11:34:38 executing program 4: creat(&(0x7f0000005ac0)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000005b80)='./file0\x00', 0x0, 0x4, &(0x7f0000005bc0)) 11:34:38 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:38 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 673.712141][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 673.750660][ T8075] 553644032-553648127: ffff888020c88460 11:34:38 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x88, &(0x7f0000000200)=""/136, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x10, 0x0, &(0x7f0000000040)) [ 673.757139][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 673.763093][ T8075] 553652224-116829323263: 0000000000000000 [ 673.783838][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 673.791781][ T8166] 139904182910976-139904187105279: ffff8880770f5000 11:34:38 executing program 5: rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)) 11:34:38 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x58}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x88, &(0x7f0000000200)=""/136, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 673.853197][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 673.853482][ T8562] random: crng reseeded on system resumption [ 673.870791][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 673.895678][ T8075] 116833517568-93825021800447: 0000000000000000 [ 673.933066][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 673.984992][ T27] audit: type=1800 audit(1673264078.810:71): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1167 res=0 errno=0 11:34:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:39 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:39 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xc}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x88, &(0x7f0000000200)=""/136, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 674.804330][ T8166] 139904188317696-139904188321791: 0000000000000000 11:34:39 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xc}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x88, &(0x7f0000000200)=""/136, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 674.869166][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 674.890968][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 674.924805][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 11:34:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x1600bd74, 0x0, &(0x7f0000000100)) [ 674.950894][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 675.061100][ T27] audit: type=1800 audit(1673264079.890:72): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1184 res=0 errno=0 11:34:39 executing program 4: bpf$MAP_CREATE(0x12, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 11:34:40 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 675.363890][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 675.395339][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 675.403424][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 11:34:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x13, 0x0, &(0x7f0000000100)) [ 675.421332][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 675.429204][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 675.438776][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 675.450190][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 675.459655][ T8075] 140322690711552-140322691440639: ffff888075eddc40 11:34:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x7d, &(0x7f00000000c0), 0x8) 11:34:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 675.488088][ T8590] random: crng reseeded on system resumption [ 675.493811][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 675.519287][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 675.541439][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 675.559899][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 675.581368][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 675.604603][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 675.614014][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 675.621470][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 675.639315][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 675.656383][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 675.772895][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 675.779426][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 675.790236][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 675.831959][ T8075] 140322704506880-140322704510975: ffff88807c795380 11:34:40 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003480)={&(0x7f0000002400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80880, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000680)) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x201) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000880)=@raw=[@map_idx, @ldst={0x0, 0x2, 0x6, 0x0, 0x9, 0xfffffffffffffff4, 0xffffffffffffffff}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x8, 0x10, 0x0, 0x0, 0x290dd}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x2, &(0x7f0000000e00)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}], &(0x7f0000000e40)='syzkaller\x00', 0x5, 0xfb, &(0x7f0000000e80)=""/251, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:34:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000000100)) 11:34:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x5, 0x0, 0x0) 11:34:40 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:40 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 675.868378][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 675.876299][ T8075] 140322704642048-140730494414847: 0000000000000000 11:34:40 executing program 4: bpf$MAP_DELETE_BATCH(0x4, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 11:34:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb, 0x1}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x34, 0x5}]}}, &(0x7f0000000600)=""/209, 0x3e, 0xd1, 0x1}, 0x20) [ 675.928172][ T8604] random: crng reseeded on system resumption [ 675.934715][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 675.942906][ T8166] 139904200589312-139904201199615: 0000000000000000 11:34:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x1}]}}, &(0x7f0000000280)=""/171, 0x26, 0xab, 0x1}, 0x20) 11:34:40 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:40 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/user\x00') [ 676.030997][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 11:34:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'vlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x18) [ 676.091170][ T27] audit: type=1800 audit(1673264080.920:73): pid=8617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1171 res=0 errno=0 [ 676.118756][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 676.209409][ T8620] random: crng reseeded on system resumption [ 676.227056][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 11:34:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:41 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0xfffffffffffffffe, 0x0) 11:34:41 executing program 2: bpf$MAP_CREATE(0x4, &(0x7f0000001a40), 0x48) [ 676.256919][ T8075] 140730496278528-140730496294911: ffff88807c795b60 11:34:41 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) unlink(&(0x7f0000000300)='./file0\x00') [ 676.300826][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 676.356357][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 676.363980][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 676.372337][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 676.386743][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 676.396022][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 676.403177][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 676.412264][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 676.445524][ T8075] Pass: 10696486 Run:10696666 [ 676.455327][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 676.465199][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 676.475288][ T8075] Call Trace: [ 676.478589][ T8075] [ 676.481539][ T8075] dump_stack_lvl+0xd1/0x138 [ 676.486178][ T8075] mt_find.cold+0x8b/0x90 [ 676.490555][ T8075] ? mas_find+0x1d0/0x1d0 [ 676.494952][ T8075] find_vma+0x10c/0x1b0 [ 676.499155][ T8075] ? can_vma_merge_before+0x390/0x390 [ 676.504572][ T8075] ? walk_page_test+0x78/0x180 [ 676.509382][ T8075] walk_page_range+0x2b1/0x4a0 [ 676.514197][ T8075] ? __walk_page_range+0x780/0x780 [ 676.519379][ T8075] mlock_fixup+0x650/0x810 [ 676.523857][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 676.525158][ T8166] Pass: 10698151 Run:10698331 [ 676.529081][ T8075] ? mlock_fixup+0x810/0x810 [ 676.538374][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 676.544319][ T8075] do_mlock+0x25a/0x6d0 [ 676.548532][ T8075] ? folio_evictable+0x270/0x270 [ 676.553527][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 676.559463][ T8075] __x64_sys_mlock+0x59/0x80 [ 676.564099][ T8075] do_syscall_64+0x39/0xb0 [ 676.568574][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 676.574506][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 676.578948][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 676.598595][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 676.607048][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 676.615054][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 676.623060][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 676.631069][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.639081][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 676.647120][ T8075] [ 676.669797][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 676.679684][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 676.689782][ T8166] Call Trace: [ 676.693083][ T8166] [ 676.696031][ T8166] dump_stack_lvl+0xd1/0x138 [ 676.700674][ T8166] mt_find.cold+0x8b/0x90 [ 676.705054][ T8166] ? mas_find+0x1d0/0x1d0 [ 676.709427][ T8166] find_vma+0x10c/0x1b0 [ 676.713597][ T8166] ? can_vma_merge_before+0x390/0x390 [ 676.719001][ T8166] ? walk_page_test+0x78/0x180 [ 676.723811][ T8166] walk_page_range+0x2b1/0x4a0 [ 676.728622][ T8166] ? __walk_page_range+0x780/0x780 [ 676.733797][ T8166] mlock_fixup+0x650/0x810 [ 676.738262][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 676.743510][ T8166] ? mlock_fixup+0x810/0x810 [ 676.748153][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 676.754071][ T8166] do_mlock+0x25a/0x6d0 [ 676.758264][ T8166] ? folio_evictable+0x270/0x270 [ 676.763248][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 676.769175][ T8166] __x64_sys_mlock+0x59/0x80 [ 676.773798][ T8166] do_syscall_64+0x39/0xb0 [ 676.778254][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 676.784177][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 676.788612][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 676.808249][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 676.816690][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 676.824939][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 676.832924][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 676.840910][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.848895][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 676.856908][ T8166] [ 676.888849][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 676.902679][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 676.907905][ T8075] BUG at mt_find:6473 (1) [ 676.912078][ T8166] BUG at mt_find:6473 (1) [ 676.912992][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 676.923313][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 676.944798][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 [ 676.944917][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 676.994796][ T8075] 0 [ 677.014431][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 677.066735][ T8075] 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 677.092355][ T8166] 0-536866815: 0000000000000000 [ 677.102205][ T8166] 536866816-536870911: ffff88807e785620 [ 677.112163][ T8166] 536870912-553631743: ffff88807e785700 [ 677.127662][ T8166] 553631744-553635839: 0000000000000000 [ 677.133783][ T8166] 553635840-553631743: ffff8880770f5c40 [ 677.140113][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 677.191144][ T8166] 553631744-553644031: ffff8880770f5b60 [ 677.207118][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 677.218656][ T8166] 553648128-553652223: ffff88807e7857e0 [ 677.231283][ T8166] 553652224-116783185919: 0000000000000000 [ 677.246954][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 677.260116][ T8166] 116789477376-93825005486079: 0000000000000000 [ 677.271951][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 677.284867][ T8075] 0-536866815: 0000000000000000 [ 677.286010][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 677.305022][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 677.310728][ T8166] 139904166129664-139904166133759: [ 677.310937][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 677.320014][ T8166] ffff88807e785a80 [ 677.332835][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 677.344793][ T8075] 553631744-553635839: [ 677.400045][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 677.423080][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 677.437103][ T8166] 139904176619520-139904178716671: ffff88807e785d20 11:34:42 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:42 executing program 2: bpf$OBJ_GET_PROG(0x1e, &(0x7f0000000000)={&(0x7f0000000040)='./file0\x00'}, 0x42) 11:34:42 executing program 4: bpf$OBJ_GET_PROG(0x1d, &(0x7f0000000000)={&(0x7f0000000040)='./file0\x00'}, 0x42) 11:34:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xe, 0x0, 0x0, 0x10000}, 0x48) 11:34:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:42 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:42 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000080)=@raw=[@call, @jmp, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 677.454595][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 677.464248][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 677.475614][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 677.482747][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 677.489611][ T8075] 0000000000000000 11:34:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003900)) [ 677.534993][ T8075] 553635840-553631743: ffff88801cae0e00 [ 677.543794][ T8639] random: crng reseeded on system resumption [ 677.557890][ T8075] 553631744-553644031: ffff88801cae0d20 [ 677.587684][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 677.611896][ T8075] 553644032-553648127: ffff888020c88460 [ 677.628063][ T8075] 553648128-553652223: ffff88802b7dbe00 11:34:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0xfffffffd}, 0x48) [ 677.649394][ T8075] 553652224-116829323263: 0000000000000000 [ 677.651451][ T8166] 139904187981824-139904188317695: [ 677.661898][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 677.694891][ T8075] 116833517568-93825021800447: 0000000000000000 [ 677.714377][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 677.723201][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 677.743622][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 677.896494][ T27] audit: type=1800 audit(1673264082.660:74): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1169 res=0 errno=0 11:34:42 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) unlink(&(0x7f0000000200)='./file0\x00') 11:34:42 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x26}, 0x10) [ 678.010633][ T8166] ffff8880770f52a0 11:34:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:42 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:42 executing program 4: bpf$OBJ_GET_PROG(0x10, &(0x7f0000000000)={&(0x7f0000000040)='./file0\x00'}, 0x42) 11:34:42 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f00000000c0), &(0x7f0000000100)=0x18) [ 678.050484][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 678.058239][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 678.060255][ T8075] 140322669592576-140322704048127: [ 678.065447][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 678.097409][ T8075] node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 678.099467][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 678.191048][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 678.198722][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 678.201357][ T8166] 139904188743680-139904200589311: [ 678.206043][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 678.230413][ T8166] ffff8880770f5540 [ 678.258096][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 11:34:43 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 11:34:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x200) [ 678.280907][ T8659] random: crng reseeded on system resumption 11:34:43 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) [ 678.386463][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 11:34:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 678.451313][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 678.515642][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 678.557842][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 678.581590][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 11:34:43 executing program 5: r0 = socket(0x1c, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) listen(r0, 0x0) [ 678.609923][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 678.636132][ T27] audit: type=1800 audit(1673264083.470:75): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1182 res=0 errno=0 11:34:43 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xc, &(0x7f0000001200)={0x63}, 0xb) recvmsg(r1, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=""/240, 0xf0}, 0x0) 11:34:43 executing program 4: unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) [ 678.675002][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 678.720574][ T8075] 140322690711552-140322691440639: ffff888075eddc40 11:34:43 executing program 4: unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) [ 678.784718][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 678.834654][ T8166] 139904201334784-140730916691967: 0000000000000000 11:34:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 678.946986][ T8166] 140730916691968-140730916827135: ffff8880770f5620 11:34:43 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:43 executing program 4: unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 11:34:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040)={0x8000, 0x0, 0x1}, 0x8) 11:34:43 executing program 4: unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) [ 679.042142][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 679.104533][ T8166] 140730916827136-140730917257215: [ 679.105371][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 679.136111][ T8166] 0000000000000000 11:34:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x110}, 0x98) [ 679.162363][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 679.183840][ T8699] random: crng reseeded on system resumption [ 679.305597][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 679.320221][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 679.418188][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 679.454870][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 679.461890][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 679.483216][ T8166] Pass: 10767908 Run:10768090 [ 679.484822][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 679.491654][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 679.547801][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 679.557876][ T8166] Call Trace: [ 679.561167][ T8166] [ 679.564113][ T8166] dump_stack_lvl+0xd1/0x138 [ 679.568736][ T8166] mt_find.cold+0x8b/0x90 [ 679.573100][ T8166] ? mas_find+0x1d0/0x1d0 [ 679.577467][ T8166] find_vma+0x10c/0x1b0 [ 679.581643][ T8166] ? can_vma_merge_before+0x390/0x390 [ 679.586260][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 679.587032][ T8166] ? walk_page_test+0x78/0x180 [ 679.593970][ T8075] 140322704506880-140322704510975: [ 679.598713][ T8166] walk_page_range+0x2b1/0x4a0 [ 679.598747][ T8166] ? __walk_page_range+0x780/0x780 [ 679.614203][ T8166] mlock_fixup+0x650/0x810 [ 679.618673][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 679.623906][ T8166] ? mlock_fixup+0x810/0x810 [ 679.628542][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 679.634471][ T8166] do_mlock+0x25a/0x6d0 [ 679.634940][ T8075] ffff88807c795380 [ 679.638651][ T8166] ? folio_evictable+0x270/0x270 [ 679.642351][ T8075] 140322704510976-140322704642047: [ 679.647281][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 679.647317][ T8166] __x64_sys_mlock+0x59/0x80 [ 679.647351][ T8166] do_syscall_64+0x39/0xb0 [ 679.647383][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 679.647409][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 679.647430][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 679.647454][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 679.647481][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 679.647498][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 679.647513][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 679.647528][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.647542][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 679.647576][ T8166] [ 679.690912][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 679.741271][ T8075] ffff88807c7959a0 [ 679.773273][ T8166] BUG at mt_find:6473 (1) [ 679.778960][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 679.787815][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 679.826283][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 679.876427][ T8166] 0-536866815: 0000000000000000 [ 679.881717][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 679.888841][ T8166] 536866816-536870911: ffff88807e785620 [ 679.894812][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 679.901797][ T8075] 140730494550016-140730496278527: 0000000000000000 [ 679.908912][ T8166] 536870912-553631743: ffff88807e785700 [ 679.915174][ T8166] 553631744-553635839: 0000000000000000 [ 679.921262][ T8166] 553635840-553631743: ffff8880770f5c40 [ 679.927294][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 679.934266][ T8075] 140730496294912-140730496303103: ffff88807c795c40 [ 679.942819][ T8166] 553631744-553644031: ffff8880770f5b60 [ 679.948927][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 679.959426][ T8166] 553648128-553652223: ffff88807e7857e0 [ 679.965542][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 679.973018][ T8166] 553652224-116783185919: 0000000000000000 [ 679.979328][ T8075] Pass: 10768890 Run:10769073 [ 679.984090][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 679.990702][ T8075] CPU: 1 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 680.000530][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 680.010608][ T8075] Call Trace: [ 680.013900][ T8075] [ 680.016854][ T8075] dump_stack_lvl+0xd1/0x138 [ 680.021482][ T8075] mt_find.cold+0x8b/0x90 [ 680.025851][ T8075] ? mas_find+0x1d0/0x1d0 [ 680.030223][ T8075] find_vma+0x10c/0x1b0 [ 680.034405][ T8075] ? can_vma_merge_before+0x390/0x390 [ 680.039803][ T8075] ? walk_page_test+0x78/0x180 [ 680.044600][ T8075] walk_page_range+0x2b1/0x4a0 [ 680.049393][ T8075] ? __walk_page_range+0x780/0x780 [ 680.054551][ T8075] mlock_fixup+0x650/0x810 [ 680.059018][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 680.064255][ T8075] ? mlock_fixup+0x810/0x810 [ 680.068890][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 680.074815][ T8075] do_mlock+0x25a/0x6d0 [ 680.079009][ T8075] ? folio_evictable+0x270/0x270 [ 680.083995][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 680.089922][ T8075] __x64_sys_mlock+0x59/0x80 [ 680.094543][ T8075] do_syscall_64+0x39/0xb0 [ 680.098991][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 680.104910][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 680.109344][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 680.128974][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 680.137409][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 680.145399][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 680.153386][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 680.161386][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.169375][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 680.177391][ T8075] [ 680.201235][ T8166] 116789477376-93825005486079: 0000000000000000 [ 680.208100][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 680.215047][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 680.220375][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 680.221989][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 680.235952][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 680.254932][ T8075] BUG at mt_find:6473 (1) 11:34:45 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002000)={&(0x7f0000000a00)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001f40)=[@init={0x14, 0x84, 0x1, {0x1ff}}], 0x14}, 0x0) 11:34:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0xc) 11:34:45 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 11:34:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:45 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 680.307658][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 680.311116][ T8166] 139904166133760-139904174522367: ffff88807e785b60 11:34:45 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='R', 0x1, 0x0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) shutdown(r0, 0x1) [ 680.348104][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 11:34:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000000), 0x8) [ 680.363266][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 680.442964][ T8717] random: crng reseeded on system resumption 11:34:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="e498c815c831d3e32a7f605e4f1f6bbf1b3a24b1fadbecb39bcbae809e9f397a225543c8db15ebb03d893814d0dc2bf85f70318ca8e58f1ff717d64306896741c7e84e8088b7a31eadb691264fd6071cad2b20f8c8bc3a2078f24a4cc1ac8dd1bdab9c481111f3d1ee4a6c6ae209c74e5376a2e5d36fafc70608f13a229cae96c72fca2e9e7a97a9ca12a58477aaa64e3aad38d480a8096715", 0x99}], 0xc, &(0x7f0000000300)=[{0xc, 0x1}], 0xc}, 0x0) [ 680.555351][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d 11:34:45 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 680.621460][ T27] audit: type=1800 audit(1673264085.450:76): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1163 res=0 errno=0 11:34:45 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f00000003c0), &(0x7f0000001440)=0x8) 11:34:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5938d8925", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 680.813330][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 680.839224][ T8075] 0-536866815: 0000000000000000 [ 680.855386][ T8731] random: crng reseeded on system resumption [ 680.897966][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 680.945774][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 680.962364][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 681.040659][ T8075] 553631744-553635839: 0000000000000000 [ 681.083771][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 681.130293][ T8075] 553635840-553631743: [ 681.130443][ T8166] 139904182910976-139904187105279: [ 681.143353][ T8075] ffff88801cae0e00 [ 681.174890][ T8166] ffff8880770f5000 [ 681.189544][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 681.190710][ T8075] 553631744-553644031: ffff88801cae0d20 [ 681.203988][ T8075] 553644032-553648127: ffff888020c88460 [ 681.224310][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 681.229541][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 681.230718][ T8075] 553652224-116829323263: 0000000000000000 [ 681.243528][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 681.260545][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 681.260960][ T8075] 116833517568-93825021800447: 0000000000000000 [ 681.274464][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 681.286242][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 681.310176][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 681.314467][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 681.324349][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 681.335498][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 681.342866][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 681.357852][ T8166] 139904188723200-139904188743679: [ 681.416315][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 681.436067][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 681.453886][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 681.463747][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 681.478205][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 681.494830][ T8166] 0000000000000000 [ 681.495443][ T8075] 140322686369792-140322690564095: [ 681.498592][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 681.498620][ T8166] 139904200589312-18446744073709551615: [ 681.504271][ T8075] ffff888075edda80 [ 681.533103][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 681.543306][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 681.550467][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 681.557082][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 681.633836][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 681.643960][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 681.659236][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 681.672277][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 681.687172][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 681.695035][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 681.702034][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 11:34:46 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:46 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x5, &(0x7f0000002040), &(0x7f0000000040)=0x4) 11:34:46 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x8) 11:34:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b593", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 681.704587][ T8075] 140322704048128-18446744073709551615: node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 contents: 0000000000000000 140322704506879 ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 681.740817][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 11:34:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000140), 0xc) [ 681.784180][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 681.812050][ T8746] random: crng reseeded on system resumption [ 681.824227][ T8166] 140730916691968-140730916827135: ffff8880770f5620 11:34:46 executing program 2: symlink(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000800)='./file0\x00') 11:34:46 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000040)) [ 681.902204][ T8166] 140730916827136-140730917257215: 0000000000000000 11:34:46 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 681.977952][ T27] audit: type=1800 audit(1673264086.810:77): pid=8753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1166 res=0 errno=0 11:34:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:46 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)='Q', 0x1, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) [ 682.034550][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 682.066451][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 682.149506][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 682.163240][ T8765] random: crng reseeded on system resumption [ 682.222497][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 682.334098][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 682.367075][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 682.382444][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 682.400098][ T8166] Pass: 10856446 Run:10856630 [ 682.412407][ T8075] 140730494414848-140730494550015: ffff88807c795a80 [ 682.442417][ T8166] CPU: 1 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 682.452298][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 682.461239][ T8075] 140730494550016-140730496278527: [ 682.462359][ T8166] Call Trace: [ 682.462371][ T8166] [ 682.462381][ T8166] dump_stack_lvl+0xd1/0x138 [ 682.478772][ T8166] mt_find.cold+0x8b/0x90 [ 682.483155][ T8166] ? mas_find+0x1d0/0x1d0 [ 682.487549][ T8166] find_vma+0x10c/0x1b0 [ 682.491749][ T8166] ? can_vma_merge_before+0x390/0x390 [ 682.497128][ T8075] 0000000000000000 [ 682.497146][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 682.500859][ T8166] ? walk_page_test+0x78/0x180 [ 682.508784][ T8075] 140730496294912-140730496303103: [ 682.512545][ T8166] walk_page_range+0x2b1/0x4a0 [ 682.512583][ T8166] ? __walk_page_range+0x780/0x780 [ 682.512635][ T8166] mlock_fixup+0x650/0x810 [ 682.512682][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 682.512722][ T8166] ? mlock_fixup+0x810/0x810 [ 682.512771][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 682.512809][ T8166] do_mlock+0x25a/0x6d0 [ 682.512850][ T8166] ? folio_evictable+0x270/0x270 [ 682.512898][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 682.512933][ T8166] __x64_sys_mlock+0x59/0x80 [ 682.512969][ T8166] do_syscall_64+0x39/0xb0 [ 682.513003][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 682.513031][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 682.513052][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 682.513075][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 682.513100][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 682.513116][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 682.513131][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 682.513147][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.513162][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 682.513197][ T8166] [ 682.659735][ T8075] ffff88807c795c40 [ 682.663505][ T8075] 140730496303104-18446744073709551615: 0000000000000000 [ 682.671040][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 682.677505][ T8166] BUG at mt_find:6473 (1) [ 682.681855][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 682.692252][ T8075] Pass: 10856871 Run:10857056 [ 682.697159][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 682.706990][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 682.717068][ T8075] Call Trace: [ 682.720364][ T8075] [ 682.723313][ T8075] dump_stack_lvl+0xd1/0x138 [ 682.727936][ T8075] mt_find.cold+0x8b/0x90 [ 682.732297][ T8075] ? mas_find+0x1d0/0x1d0 [ 682.736668][ T8075] find_vma+0x10c/0x1b0 [ 682.740853][ T8075] ? can_vma_merge_before+0x390/0x390 [ 682.746249][ T8075] ? walk_page_test+0x78/0x180 [ 682.751146][ T8075] walk_page_range+0x2b1/0x4a0 [ 682.755945][ T8075] ? __walk_page_range+0x780/0x780 [ 682.761091][ T8075] mlock_fixup+0x650/0x810 [ 682.765533][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 682.770741][ T8075] ? mlock_fixup+0x810/0x810 [ 682.775348][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 682.781248][ T8075] do_mlock+0x25a/0x6d0 [ 682.785414][ T8075] ? folio_evictable+0x270/0x270 [ 682.790375][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 682.796275][ T8075] __x64_sys_mlock+0x59/0x80 [ 682.800873][ T8075] do_syscall_64+0x39/0xb0 [ 682.805297][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 682.811194][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 682.815606][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 682.835222][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 682.843636][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 682.851603][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 682.859593][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 682.867580][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.875550][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 682.883531][ T8075] [ 682.912800][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 682.931619][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 682.979665][ T8075] BUG at mt_find:6473 (1) [ 682.984222][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 683.004622][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 683.056311][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 683.095258][ T8075] 0-140322669592575: [ 683.116698][ T8166] 0-536866815: 0000000000000000 [ 683.128862][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 683.139720][ T8166] 536866816-536870911: ffff88807e785620 [ 683.182092][ T8166] 536870912-553631743: ffff88807e785700 [ 683.197068][ T8166] 553631744-553635839: 0000000000000000 [ 683.217825][ T8166] 553635840-553631743: ffff8880770f5c40 [ 683.240490][ T8166] 553631744-553644031: ffff8880770f5b60 [ 683.251206][ T8166] 553644032-553648127: ffff8880226cd1c0 [ 683.262647][ T8166] 553648128-553652223: ffff88807e7857e0 [ 683.274065][ T8166] 553652224-116783185919: 0000000000000000 [ 683.274839][ T8075] 0-536866815: 0000000000000000 [ 683.285051][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 683.292151][ T8166] 116789477376-93825005486079: 0000000000000000 [ 683.306014][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 683.314818][ T8075] 536866816-536870911: ffff88802b7dbc40 [ 683.320767][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 683.327999][ T8166] 93825005625344-139904166129663: 0000000000000000 [ 683.348497][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 683.355005][ T8075] 553631744-553635839: 0000000000000000 [ 683.361922][ T8075] 553635840-553631743: ffff88801cae0e00 11:34:48 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 11:34:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 11:34:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000002680)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[{0xc, 0x84, 0x8}], 0xc}, 0x0) 11:34:48 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) 11:34:48 executing program 2: getgroups(0x3, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) setgroups(0x1, &(0x7f0000000140)=[r0]) setresgid(r0, 0x0, 0x0) [ 683.371693][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 683.380624][ T8075] 553631744-553644031: ffff88801cae0d20 11:34:48 executing program 4: syz_emit_ethernet(0xc6, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c2000000aaaaaaaaaa0086dd60060a0000902900fec80000000000000000000000000001ff020000000000000000000000000001"], 0x0) [ 683.492825][ T8075] 553644032-553648127: ffff888020c88460 [ 683.496843][ T8779] random: crng reseeded on system resumption [ 683.516516][ T28] INFO: task syz-executor.5:8074 blocked for more than 143 seconds. [ 683.525113][ T28] Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 683.563065][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 683.567166][ T8075] 553648128-553652223: [ 683.579686][ T8779] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 683.592451][ T8779] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 683.595503][ T28] task:syz-executor.5 state:D [ 684.011328][ T8075] ffff88802b7dbe00 [ 684.021555][ T27] audit: type=1800 audit(1673264088.490:78): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1188 res=0 errno=0 11:34:48 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0xb) 11:34:48 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x401, &(0x7f0000000000)=0xde0e, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x10, 0x2}, 0x10) [ 684.224946][ T28] stack:28256 pid:8074 ppid:5128 flags:0x00000004 [ 684.314004][ T28] Call Trace: 11:34:49 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 684.437858][ T28] [ 684.452857][ T8779] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 684.460778][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 684.483746][ T28] __schedule+0x25d0/0x5a70 [ 684.498709][ T28] ? lock_chain_count+0x20/0x20 11:34:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 684.519207][ T28] ? __lock_acquire+0x166e/0x5660 [ 684.538765][ T28] ? io_schedule_timeout+0x150/0x150 [ 684.548604][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 684.555066][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 [ 684.565008][ T28] schedule+0xde/0x1b0 11:34:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) [ 684.575092][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 684.576483][ T8779] PM: hibernation: Basic memory bitmaps created [ 684.614221][ T28] ? down_write+0x220/0x220 [ 684.640967][ T28] ? lock_release+0x810/0x810 11:34:49 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) [ 684.668141][ T8779] PM: hibernation: Basic memory bitmaps freed [ 684.684993][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 684.692080][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 684.699586][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 684.708243][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 11:34:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) [ 684.713951][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 684.725584][ T8075] 553652224-116829323263: 0000000000000000 [ 684.739286][ T28] ? lock_acquire+0x32/0xc0 [ 684.746436][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 684.753786][ T8075] 116833517568-93825021800447: 0000000000000000 11:34:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 684.777076][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 684.782451][ T28] down_read+0xe6/0x450 [ 684.797868][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 684.822852][ T28] do_user_addr_fault+0xa51/0x1210 [ 684.828863][ T8807] random: crng reseeded on system resumption [ 684.840222][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 684.862672][ T8807] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] 11:34:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 11:34:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r2 = dup(r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000200)=0x8) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x0, 0x0, 0x0, r3}}], 0x1c}, 0x0) [ 684.865368][ T8075] 93825021800448-93825021939711: [ 684.873743][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 684.885186][ T8807] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 684.893648][ T8807] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 684.911240][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 684.918619][ T28] exc_page_fault+0x98/0x170 [ 684.927306][ T28] asm_exc_page_fault+0x26/0x30 [ 684.938513][ T28] RIP: 0033:0x7f9f6c2276c6 [ 684.953175][ T8075] ffff88808b414000 [ 684.963125][ T28] RSP: 002b:00007ffe5f22e728 EFLAGS: 00010287 11:34:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) [ 684.983786][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 684.986191][ T8166] 139904187105280-139904187252735: [ 684.991998][ T28] RAX: 0000001b33922000 RBX: 00007f9f6c3ac018 RCX: 0000001b33920000 [ 685.018401][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 685.027315][ T28] RDX: 0000001b33922004 RSI: 0000001b33921824 RDI: 0000000054ac3b9b [ 685.036402][ T8166] ffff8880770f50e0 [ 685.054699][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 685.062700][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 685.079598][ T28] RBP: 0000000054ac3b9b R08: 0000001b33d20000 R09: 0000000054ac3b9f 11:34:50 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x20, &(0x7f00000002c0), 0x4) 11:34:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 685.144989][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 685.226627][ T8807] PM: hibernation: Basic memory bitmaps created [ 685.234320][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 685.246878][ T8806] PM: hibernation: Basic memory bitmaps freed [ 685.298889][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 685.314463][ T28] R10: 00007ffe5f3d6090 R11: 0000000000018df6 R12: 00007f9f6c3a0000 [ 685.322955][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 685.337555][ T28] R13: 0000000000000001 R14: 00000000000031c0 R15: ffffffff8166ab1f [ 685.346844][ T28] ? _prb_read_valid+0x46f/0x710 [ 685.352009][ T28] [ 685.366030][ T28] [ 685.366030][ T28] Showing all threads with locks held in the system: [ 685.382609][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 685.401295][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 685.424872][ T28] task:rcu_tasks_kthre state:I stack:29056 pid:12 ppid:2 flags:0x00004000 [ 685.438014][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.444378][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.472419][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 685.485292][ T28] Call Trace: [ 685.492637][ T28] [ 685.500159][ T28] __schedule+0x25d0/0x5a70 [ 685.506892][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 [ 685.507045][ T8075] 140322677981184-140322680078335: ffff888075edd9a0 [ 685.571783][ T28] ? lock_chain_count+0x20/0x20 [ 685.611113][ T27] audit: type=1800 audit(1673264090.430:79): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1162 res=0 errno=0 [ 685.700214][ T28] ? find_held_lock+0x2d/0x110 [ 685.743585][ T28] ? io_schedule_timeout+0x150/0x150 [ 685.882504][ T28] ? mark_held_locks+0x9f/0xe0 [ 686.009786][ T28] schedule+0xde/0x1b0 [ 686.073059][ T28] rcu_tasks_one_gp+0x484/0xcd0 [ 686.152752][ T28] rcu_tasks_kthread+0x77/0xa0 [ 686.235060][ T28] ? synchronize_rcu_tasks_trace+0x70/0x70 [ 686.266493][ T28] kthread+0x2e8/0x3a0 [ 686.304889][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 686.314205][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 686.326839][ T28] ret_from_fork+0x1f/0x30 [ 686.332490][ T8166] ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 11:34:51 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, &(0x7f0000000580)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000300)={0x0, 'ip_vti0\x00', {0x4}, 0x7ff}) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000400)=""/228) write$UHID_INPUT(r0, 0x0, 0x0) 11:34:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x1206, &(0x7f00000005c0)={0x0, 0x2000}, &(0x7f0000000000)=0x10) 11:34:51 executing program 4: setresuid(0xee01, 0x0, 0x0) r0 = getuid() setresuid(0x0, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x2, 0x5, 0x0) bind(r1, &(0x7f0000000000)=@un=@abs, 0x10) 11:34:51 executing program 1: open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$dlm_plock(0xffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) openat$snapshot(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0) 11:34:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 11:34:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b5", &(0x7f0000000000)="7af035417690b9f3d1d28fbda9ac34289bf3a5f5d91dabb3fd7e33cd5a182523fb5e715397971b", 0x3, r1}, 0x38) [ 686.358533][ T28] [ 686.364066][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 686.386251][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 11:34:51 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) recvmsg(r1, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x2) 11:34:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000340), 0x4) [ 686.404376][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 686.405217][ T28] 1 lock held by rcu_tasks_kthre/12: [ 686.420394][ T28] #0: ffffffff8c7929f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 [ 686.429376][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 686.445025][ T8847] random: crng reseeded on system resumption [ 686.511421][ T8166] 139904201199616-139904201203711: ffff8880770f59a0 [ 686.511523][ T8847] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 686.530776][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 686.537924][ T28] task:rcu_tasks_trace state:I stack:29224 pid:13 ppid:2 flags:0x00004000 11:34:51 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) bind$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) 11:34:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xc, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="a5f9dc95d598de49fc9d18f265db89ae07ebd076a0d7b593", 0x0, 0x3, r1}, 0x38) [ 686.567268][ T28] Call Trace: [ 686.573094][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 686.596772][ T28] [ 686.613457][ T28] __schedule+0x25d0/0x5a70 [ 686.615370][ T8075] 140322690564096-140322690711551: [ 686.620465][ T8847] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 686.630374][ T8075] ffff888075eddb60 [ 686.642838][ T28] ? lock_chain_count+0x20/0x20 [ 686.649943][ T28] ? find_held_lock+0x2d/0x110 [ 686.655511][ T8847] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] 11:34:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0xb20d111f3548d210, 0x2}, 0x10) [ 686.670670][ T28] ? io_schedule_timeout+0x150/0x150 [ 686.701033][ T28] ? mark_held_locks+0x9f/0xe0 [ 686.708316][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 686.712467][ T28] schedule+0xde/0x1b0 [ 686.725832][ T28] rcu_tasks_one_gp+0x484/0xcd0 [ 686.735160][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 686.746752][ T28] rcu_tasks_kthread+0x77/0xa0 11:34:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) [ 686.767159][ T28] ? synchronize_rcu_tasks_trace+0x70/0x70 [ 686.798031][ T28] kthread+0x2e8/0x3a0 [ 686.803763][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 686.806375][ T8847] PM: hibernation: Basic memory bitmaps created [ 686.824611][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 686.838635][ T28] ret_from_fork+0x1f/0x30 [ 686.845031][ T8166] 140730916827136-140730917257215: 0000000000000000 [ 686.855049][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 686.862056][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 686.871054][ T28] [ 686.874116][ T28] 1 lock held by rcu_tasks_trace/13: [ 686.880784][ T28] #0: ffffffff8c7926f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 [ 686.881139][ T8166] 140730917257216-140730917273599: [ 686.895714][ T28] task:kworker/u4:4 state:D stack:23472 pid:63 ppid:2 flags:0x00004000 [ 686.919607][ T28] Workqueue: events_unbound bpf_map_free_deferred [ 686.926596][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 686.933853][ T8166] ffff8880770f5700 [ 686.934486][ T28] Call Trace: [ 686.938437][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 686.942067][ T28] [ 686.952814][ T28] __schedule+0x25d0/0x5a70 [ 686.956039][ T8166] 140730917281792-18446744073709551615: [ 686.959915][ T28] ? prepare_to_wait_event+0xd0/0x6a0 [ 686.960623][ T8166] 0000000000000000 [ 686.968493][ T8075] 140322692182016-140322692202495: [ 686.975411][ T28] ? io_schedule_timeout+0x150/0x150 [ 686.980409][ T8166] Pass: 10965539 Run:10965725 [ 686.981019][ T28] ? mark_held_locks+0x9f/0xe0 [ 686.988595][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 686.994028][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 686.995693][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 686.995711][ T8166] Call Trace: [ 686.995719][ T8166] [ 686.995728][ T8166] dump_stack_lvl+0xd1/0x138 [ 686.995763][ T8166] mt_find.cold+0x8b/0x90 [ 686.995796][ T8166] ? mas_find+0x1d0/0x1d0 [ 687.009590][ T8075] 0000000000000000 [ 687.011470][ T8166] find_vma+0x10c/0x1b0 [ 687.022738][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 687.024794][ T8166] ? can_vma_merge_before+0x390/0x390 [ 687.024829][ T8166] ? walk_page_test+0x78/0x180 [ 687.024862][ T8166] walk_page_range+0x2b1/0x4a0 [ 687.028167][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 687.032349][ T8166] ? __walk_page_range+0x780/0x780 [ 687.037024][ T28] schedule+0xde/0x1b0 [ 687.041085][ T8166] mlock_fixup+0x650/0x810 [ 687.046480][ T28] synchronize_rcu_expedited+0x706/0x770 [ 687.048936][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 687.054156][ T8075] 140322692202496-140322704048127: [ 687.059476][ T8166] ? mlock_fixup+0x810/0x810 [ 687.059525][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 687.064888][ T28] ? wait_rcu_exp_gp+0x40/0x40 [ 687.069023][ T8166] do_mlock+0x25a/0x6d0 [ 687.075107][ T28] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 687.079897][ T8166] ? folio_evictable+0x270/0x270 [ 687.084252][ T8075] ffff888075edd000 [ 687.088627][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 687.088664][ T8166] __x64_sys_mlock+0x59/0x80 [ 687.095054][ T28] ? finish_task_switch.isra.0+0x2b5/0xc80 [ 687.099712][ T8166] do_syscall_64+0x39/0xb0 [ 687.105553][ T8075] 140322704048128-18446744073709551615: [ 687.109840][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 687.109872][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 687.116078][ T28] ? mark_lock.part.0+0xee/0x1910 [ 687.120472][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 687.120496][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 687.120521][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 687.120537][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 687.120551][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 687.120566][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.120580][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 687.120615][ T8166] [ 687.214380][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 687.224302][ T8840] PM: hibernation: Basic memory bitmaps freed [ 687.244232][ T8075] contents: [ 687.253471][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 687.270741][ T8075] 0000000000000000 140322704506879 [ 687.277760][ T8166] BUG at mt_find:6473 (1) [ 687.284945][ T8075] ffff88807c795380 140322704510975 ffff88807c7959a0 140322704642047 0000000000000000 140730494414847 ffff88807c795a80 140730494550015 0000000000000000 140730496278527 ffff88807c795b60 140730496294911 ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 687.287679][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 687.327175][ T28] ? __schedule+0x25d8/0x5a70 [ 687.335242][ T8075] 140322704048128-140322704506879: [ 687.340525][ T28] ? lock_chain_count+0x20/0x20 [ 687.350371][ T8075] 0000000000000000 [ 687.351775][ T28] synchronize_rcu+0x302/0x3b0 [ 687.360535][ T28] ? synchronize_rcu_expedited+0x770/0x770 [ 687.365438][ T8075] 140322704506880-140322704510975: [ 687.366749][ T28] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 687.369902][ T8075] ffff88807c795380 [ 687.372308][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 687.372341][ T28] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 687.383945][ T8075] 140322704510976-140322704642047: [ 687.387249][ T8166] 0-18446744073709551615: [ 687.398584][ T28] lockdep_unregister_key+0x282/0x460 [ 687.408642][ T8075] ffff88807c7959a0 [ 687.408908][ T28] ? lockdep_register_key+0x410/0x410 [ 687.418154][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 0 0 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 687.420495][ T8075] 140322704642048-140730494414847: [ 687.454358][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 687.466905][ T8075] 0000000000000000 [ 687.467521][ T28] ? free_percpu+0x7bb/0x1120 [ 687.470716][ T8075] 140730494414848-140730494550015: [ 687.475677][ T28] htab_map_free+0x448/0x8f0 [ 687.481966][ T8075] ffff88807c795a80 [ 687.486316][ T28] bpf_map_free_deferred+0x1c0/0x430 [ 687.491985][ T8075] 140730494550016-140730496278527: [ 687.495202][ T28] process_one_work+0x9bf/0x1750 [ 687.501737][ T8075] 0000000000000000 [ 687.506304][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 687.511927][ T8075] 140730496278528-140730496294911: [ 687.515242][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 687.515277][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 687.515303][ T28] ? lock_acquire+0x32/0xc0 [ 687.537912][ T8075] ffff88807c795b60 [ 687.545238][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 687.549418][ T8075] 140730496294912-140730496303103: [ 687.598471][ T28] ? worker_thread+0x16d/0x1090 [ 687.609554][ T28] worker_thread+0x669/0x1090 [ 687.614291][ T28] ? process_one_work+0x1750/0x1750 [ 687.619937][ T28] kthread+0x2e8/0x3a0 [ 687.622139][ T8075] ffff88807c795c40 [ 687.624014][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 687.624049][ T28] ret_from_fork+0x1f/0x30 [ 687.630113][ T8075] 140730496303104-18446744073709551615: [ 687.634691][ T28] [ 687.648284][ T28] 2 locks held by kworker/u4:4/63: [ 687.652484][ T8075] 0000000000000000 [ 687.653395][ T28] #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 [ 687.660554][ T8075] Pass: 10965592 Run:10965779 [ 687.668839][ T28] #1: ffffc90001587da8 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 [ 687.683313][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 687.685086][ T8166] 0-536866815: [ 687.694266][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 687.694284][ T8075] Call Trace: [ 687.694295][ T8075] [ 687.698676][ T28] task:getty state:S [ 687.708126][ T8075] dump_stack_lvl+0xd1/0x138 [ 687.708168][ T8075] mt_find.cold+0x8b/0x90 [ 687.711840][ T28] stack:23336 pid:4748 ppid:1 flags:0x00000000 [ 687.714375][ T8075] ? mas_find+0x1d0/0x1d0 [ 687.719431][ T28] Call Trace: [ 687.723698][ T8075] find_vma+0x10c/0x1b0 [ 687.729515][ T8166] 0000000000000000 [ 687.734738][ T8075] ? can_vma_merge_before+0x390/0x390 [ 687.734772][ T8075] ? walk_page_test+0x78/0x180 [ 687.734805][ T8075] walk_page_range+0x2b1/0x4a0 [ 687.734839][ T8075] ? __walk_page_range+0x780/0x780 [ 687.734884][ T8075] mlock_fixup+0x650/0x810 [ 687.734930][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 687.734969][ T8075] ? mlock_fixup+0x810/0x810 [ 687.735017][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 687.735056][ T8075] do_mlock+0x25a/0x6d0 [ 687.735095][ T8075] ? folio_evictable+0x270/0x270 [ 687.735143][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 687.735177][ T8075] __x64_sys_mlock+0x59/0x80 [ 687.735213][ T8075] do_syscall_64+0x39/0xb0 [ 687.735248][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 687.735276][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 687.735298][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 687.735319][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 687.735345][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 687.735362][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 687.735378][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 687.735393][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.735408][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 687.735443][ T8075] [ 687.749465][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 687.755117][ T28] [ 687.756922][ T8075] BUG at mt_find:6473 (1) [ 687.766798][ T28] __schedule+0x25d0/0x5a70 [ 687.780093][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 687.795893][ T28] ? __flush_work+0x8b8/0xb60 [ 687.795930][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 687.795955][ T28] ? trace_lock_acquire+0x1f1/0x290 [ 687.795985][ T28] ? io_schedule_timeout+0x150/0x150 [ 687.796029][ T28] schedule+0xde/0x1b0 [ 687.796052][ T28] schedule_timeout+0x1e1/0x2a0 [ 687.796079][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 687.809796][ T8075] 0-18446744073709551615: [ 687.819534][ T28] ? __up_read+0x192/0x720 [ 687.822070][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 [ 687.826761][ T28] ? down_read+0x19c/0x450 [ 687.860265][ T8075] contents: [ 687.864989][ T8166] 536866816-536870911: [ 687.871858][ T8075] 93708188282880 [ 687.888796][ T28] ? up_write+0x520/0x520 [ 687.895850][ T8075] 20480 18446603343213248512 0 0 0 0 0 0 0 [ 687.906904][ T8166] ffff88807e785620 [ 687.907982][ T8075] | 02 02| [ 687.912238][ T8166] 536870912-553631743: ffff88807e785700 [ 687.912265][ T8166] 553631744-553635839: [ 687.923348][ T8075] ffff88802228180c 140322669592575 [ 687.925828][ T28] wait_woken+0x197/0x200 [ 687.930115][ T8075] ffff88802228160c 140322704048127 [ 687.936542][ T28] n_tty_read+0x1055/0x13e0 [ 687.947781][ T8075] ffff88807a4f6c0c 18446744073709551615 [ 687.962132][ T28] ? n_tty_receive_buf_closing+0x5b0/0x5b0 [ 687.989857][ T8075] 0000000000000000 0 [ 687.992771][ T8166] 0000000000000000 [ 687.994608][ T8075] 0000000000000000 0 [ 687.999163][ T28] ? __init_waitqueue_head+0x150/0x150 [ 687.999219][ T28] tty_read+0x30e/0x5a0 [ 688.010997][ T8075] 0000000000000000 0 [ 688.012745][ T8166] 553635840-553631743: [ 688.018421][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 688.024791][ T28] ? do_SAK+0x70/0x70 [ 688.028348][ T8075] 0000000000000000 [ 688.032449][ T28] ? fsnotify_perm.part.0+0x221/0x610 [ 688.037725][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 688.053730][ T8166] ffff8880770f5c40 [ 688.054816][ T8075] contents: [ 688.059015][ T28] ? apparmor_file_permission+0x272/0x4e0 [ 688.065792][ T8075] 0000000000000000 536866815 [ 688.066693][ T8166] 553631744-553644031: [ 688.079385][ T8075] ffff88802b7dbc40 536870911 [ 688.080229][ T28] ? security_file_permission+0xaf/0xd0 [ 688.084527][ T8075] ffff88802b7dbd20 553631743 [ 688.095333][ T28] vfs_read+0x681/0x930 [ 688.098392][ T8075] 0000000000000000 553635839 [ 688.106991][ T28] ? kernel_read+0x1c0/0x1c0 [ 688.118915][ T8075] ffff88801cae0e00 553631743 [ 688.120510][ T8166] ffff8880770f5b60 [ 688.152715][ T8075] ffff88801cae0d20 553644031 [ 688.153988][ T28] ? __fget_light+0x20a/0x270 [ 688.168500][ T8075] ffff888020c88460 553648127 [ 688.172547][ T28] ksys_read+0x12b/0x250 [ 688.179855][ T8075] ffff88802b7dbe00 553652223 [ 688.180352][ T28] ? vfs_write+0xe10/0xe10 [ 688.189189][ T8075] 0000000000000000 116829323263 [ 688.189685][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 688.193659][ T8075] ffff88802b7dbee0 116833517567 [ 688.198522][ T28] do_syscall_64+0x39/0xb0 [ 688.213704][ T8075] 0000000000000000 93825021800447 [ 688.218962][ T8166] 553644032-553648127: [ 688.224383][ T8075] ffff88808b414000 93825021939711 [ 688.229748][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 688.244908][ T8075] 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 688.245329][ T8166] ffff8880226cd1c0 [ 688.261085][ T28] RIP: 0033:0x7fb37bfcb8fe [ 688.265845][ T28] RSP: 002b:00007fff670a7a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 688.274295][ T28] RAX: ffffffffffffffda RBX: 0000561072a97910 RCX: 00007fb37bfcb8fe [ 688.280592][ T8075] 0-536866815: 0000000000000000 [ 688.282696][ T8166] 553648128-553652223: [ 688.287630][ T28] RDX: 0000000000000001 RSI: 00007fff670a7a90 RDI: 0000000000000000 [ 688.291047][ T8075] 536866816-536870911: [ 688.292825][ T28] RBP: 0000561072a97970 R08: 0000000000000007 R09: 0000561072a98cd0 [ 688.292844][ T28] R10: 0000000000000063 R11: 0000000000000246 R12: 0000561072a979ac [ 688.309975][ T8075] ffff88802b7dbc40 [ 688.314105][ T8166] ffff88807e7857e0 [ 688.330323][ T28] R13: 00007fff670a7a90 R14: 0000000000000000 R15: 0000561072a979ac [ 688.339200][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 688.340266][ T28] [ 688.349400][ T8166] 553652224-116783185919: 0000000000000000 [ 688.354851][ T8075] 553631744-553635839: [ 688.355900][ T28] 2 locks held by getty/4748: [ 688.357854][ T8075] 0000000000000000 [ 688.360408][ T28] #0: ffff888027a19098 (&tty->ldisc_sem){++++}-{0:0} [ 688.369336][ T8166] 116783185920-116789477375: [ 688.371065][ T8075] 553635840-553631743: [ 688.376405][ T28] , at: tty_ldisc_ref_wait+0x26/0x80 [ 688.391677][ T28] #1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 688.402173][ T8166] ffff88807e7858c0 [ 688.404933][ T8075] ffff88801cae0e00 [ 688.406265][ T28] task:syz-executor.0 state:D stack:24232 pid:5129 ppid:5112 flags:0x00000000 [ 688.409691][ T8075] 553631744-553644031: [ 688.419143][ T8166] 116789477376-93825005486079: 0000000000000000 [ 688.430196][ T8075] ffff88801cae0d20 [ 688.430784][ T28] Call Trace: [ 688.434249][ T8075] 553644032-553648127: [ 688.437483][ T28] [ 688.440653][ T8075] ffff888020c88460 [ 688.442057][ T8166] 93825005486080-93825005625343: [ 688.452152][ T28] __schedule+0x25d0/0x5a70 [ 688.459235][ T8075] 553648128-553652223: ffff88802b7dbe00 [ 688.463433][ T8166] ffff88807e7859a0 [ 688.472282][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 688.472842][ T8075] 553652224-116829323263: [ 688.478711][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 688.482975][ T8075] 0000000000000000 [ 688.483493][ T28] ? is_bpf_text_address+0x9d/0x1b0 [ 688.494079][ T8075] 116829323264-116833517567: [ 688.498982][ T8166] 93825005625344-139904166129663: [ 688.503102][ T8075] ffff88802b7dbee0 [ 688.504096][ T8166] 0000000000000000 [ 688.517989][ T28] ? io_schedule_timeout+0x150/0x150 [ 688.523306][ T28] ? __mutex_lock+0xa43/0x1360 [ 688.524924][ T8075] 116833517568-93825021800447: [ 688.528437][ T28] schedule+0xde/0x1b0 [ 688.529507][ T8075] 0000000000000000 [ 688.533646][ T28] schedule_preempt_disabled+0x13/0x20 [ 688.533675][ T28] __mutex_lock+0xa48/0x1360 [ 688.544290][ T8075] 93825021800448-93825021939711: [ 688.547459][ T8166] 139904166129664-139904166133759: [ 688.559781][ T28] ? synchronize_rcu_expedited+0x400/0x770 [ 688.565026][ T8075] ffff88808b414000 [ 688.565793][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 688.580726][ T8166] ffff88807e785a80 [ 688.582246][ T8075] 93825021939712-140322669588479: [ 688.584446][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e [ 688.590418][ T28] ? synchronize_rcu_expedited+0x3cd/0x770 [ 688.593431][ T8075] 0000000000000000 [ 688.601417][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 688.615739][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 688.616049][ T8166] contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 [ 688.622778][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e [ 688.640615][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 688.640721][ T28] ? lock_acquire+0x32/0xc0 [ 688.640744][ T28] ? synchronize_rcu_expedited+0x398/0x770 [ 688.640785][ T28] synchronize_rcu_expedited+0x400/0x770 [ 688.640818][ T28] ? wait_rcu_exp_gp+0x40/0x40 [ 688.640848][ T28] ? mark_held_locks+0x9f/0xe0 [ 688.640885][ T28] ? find_held_lock+0x2d/0x110 [ 688.694916][ T28] ? namespace_unlock+0x14f/0x410 [ 688.700178][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 688.705544][ T28] ? shrink_dentry_list+0x1a/0x4f0 [ 688.711537][ T28] ? up_write+0x1b0/0x520 [ 688.715874][ T8166] ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 [ 688.716341][ T28] namespace_unlock+0x1af/0x410 [ 688.717234][ T8075] contents: [ 688.744100][ T8166] 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 [ 688.747690][ T28] ? kern_unmount+0xe0/0xe0 [ 688.758434][ T8166] 000000000000000d [ 688.764955][ T8075] ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 688.766260][ T8166] 139904166133760-139904174522367: [ 688.813122][ T28] ? __x64_sys_umount+0x15d/0x190 [ 688.823826][ T28] ? lock_acquire+0x32/0xc0 [ 688.828467][ T28] path_umount+0x67b/0x10b0 [ 688.829681][ T8166] ffff88807e785b60 [ 688.832988][ T28] ? kmem_cache_free+0xec/0x4e0 [ 688.833022][ T28] ? may_mount+0xa0/0xa0 [ 688.845982][ T28] ? putname+0x102/0x140 [ 688.847800][ T8166] 139904174522368-139904176619519: [ 688.850247][ T28] __x64_sys_umount+0x15d/0x190 [ 688.850283][ T28] ? path_umount+0x10b0/0x10b0 [ 688.863441][ T8166] ffff88807e785c40 [ 688.870267][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 688.870770][ T8075] 140322669592576-140322677981183: [ 688.877481][ T8166] 139904178716672-139904180813823: [ 688.882812][ T8075] ffff888075edd8c0 [ 688.883087][ T8166] ffff88807e785e00 [ 688.892329][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 688.896329][ T8166] 139904180813824-139904182910975: [ 688.901957][ T28] do_syscall_64+0x39/0xb0 [ 688.901997][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 688.907944][ T8166] ffff88807e785ee0 [ 688.914809][ T8075] 140322677981184-140322680078335: [ 688.920046][ T8166] 139904182910976-139904187105279: [ 688.921745][ T8075] ffff888075edd9a0 [ 688.921760][ T8075] 140322680078336-140322682175487: ffff888075edd2a0 [ 688.928929][ T8166] ffff8880770f5000 [ 688.942886][ T28] RIP: 0033:0x7f462c48d537 [ 688.944223][ T8166] 139904187105280-139904187252735: [ 688.947745][ T28] RSP: 002b:00007fff072ca148 EFLAGS: 00000246 [ 688.957985][ T8166] ffff8880770f50e0 [ 688.966939][ T28] ORIG_RAX: 00000000000000a6 [ 688.971319][ T8166] 139904187252736-139904187981823: [ 688.973265][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f462c48d537 [ 688.973288][ T28] RDX: 00007fff072ca21b RSI: 000000000000000a RDI: 00007fff072ca210 [ 688.979270][ T8166] ffff8880770f51c0 [ 688.993443][ T28] RBP: 00007fff072ca210 R08: 00000000ffffffff R09: 00007fff072c9fe0 [ 688.997605][ T8075] 140322682175488-140322684272639: [ 688.999706][ T28] R10: 00005555563aa8b3 R11: 0000000000000246 R12: 00007f462c4e6b24 [ 689.008016][ T8166] 139904187981824-139904188317695: [ 689.014802][ T28] R13: 00007fff072cb2d0 R14: 00005555563aa810 R15: 00007fff072cb310 [ 689.021705][ T8075] ffff888075edd0e0 [ 689.037192][ T28] [ 689.043308][ T8166] ffff8880770f52a0 [ 689.043824][ T28] 1 lock held by syz-executor.0/5129: [ 689.054538][ T28] #0: ffffffff8c79e6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x400/0x770 [ 689.055000][ T8075] 140322684272640-140322686369791: [ 689.066706][ T28] task:kworker/u4:3 state:D stack:26080 pid:5163 ppid:2 flags:0x00004000 [ 689.076894][ T8166] 139904188317696-139904188321791: [ 689.081674][ T28] Workqueue: events_unbound bpf_map_free_deferred [ 689.081955][ T8166] 0000000000000000 [ 689.087250][ T28] [ 689.087259][ T28] Call Trace: [ 689.087267][ T28] [ 689.087282][ T28] __schedule+0x25d0/0x5a70 [ 689.087321][ T28] ? prepare_to_wait_event+0xd0/0x6a0 [ 689.087352][ T28] ? io_schedule_timeout+0x150/0x150 [ 689.087374][ T28] ? mark_held_locks+0x9f/0xe0 [ 689.087402][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 689.103300][ T8166] 139904188321792-139904188686335: [ 689.106252][ T8075] ffff888075edd1c0 [ 689.106267][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 689.111198][ T8166] ffff8880770f5380 [ 689.116202][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 689.126730][ T8166] 139904188686336-139904188723199: [ 689.132188][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 689.149025][ T8166] ffff8880770f5460 [ 689.152352][ T8075] 140322690564096-140322690711551: [ 689.164638][ T8166] 139904188723200-139904188743679: [ 689.171088][ T28] schedule+0xde/0x1b0 [ 689.189448][ T8075] ffff888075eddb60 [ 689.193282][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 689.194332][ T8166] 0000000000000000 [ 689.200761][ T8075] 140322691440640-140322691776511: ffff888075eddd20 [ 689.208237][ T28] synchronize_rcu_expedited+0x5e2/0x770 [ 689.211384][ T8075] 140322691776512-140322691780607: 0000000000000000 [ 689.223793][ T8075] 140322691780608-140322692145151: ffff888075edde00 [ 689.224788][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 689.231200][ T8075] 140322692145152-140322692182015: ffff888075eddee0 [ 689.237919][ T28] ? wait_rcu_exp_gp+0x40/0x40 [ 689.245074][ T8075] 140322692182016-140322692202495: 0000000000000000 [ 689.257716][ T28] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 689.259352][ T8166] 139904200589312-18446744073709551615: [ 689.263556][ T28] ? finish_task_switch.isra.0+0x2b5/0xc80 [ 689.271054][ T8075] 140322692202496-140322704048127: ffff888075edd000 [ 689.282770][ T8166] node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 689.289749][ T28] ? mark_lock.part.0+0xee/0x1910 [ 689.334163][ T28] ? rcu_exp_wait_wake+0x11c0/0x11c0 [ 689.339828][ T28] synchronize_rcu+0x302/0x3b0 [ 689.344631][ T28] ? synchronize_rcu_expedited+0x770/0x770 [ 689.348715][ T8075] 140322704048128-18446744073709551615: [ 689.350512][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 689.350987][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 689.356354][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 689.356385][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 689.356431][ T28] lockdep_unregister_key+0x282/0x460 [ 689.356457][ T28] ? lockdep_register_key+0x410/0x410 [ 689.356478][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 689.356509][ T28] ? free_percpu+0x7bb/0x1120 [ 689.356543][ T28] htab_map_free+0x448/0x8f0 [ 689.356596][ T28] bpf_map_free_deferred+0x1c0/0x430 [ 689.356626][ T28] process_one_work+0x9bf/0x1750 [ 689.356665][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 689.373750][ T8075] contents: [ 689.377629][ T8166] 139904200589312-139904201199615: [ 689.387106][ T8075] 0000000000000000 140322704506879 [ 689.390206][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 689.398870][ T8075] ffff88807c795380 140322704510975 [ 689.399638][ T8166] 0000000000000000 [ 689.409005][ T8075] ffff88807c7959a0 140322704642047 [ 689.414078][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 689.419550][ T8075] 0000000000000000 140730494414847 [ 689.432995][ T28] ? lock_acquire+0x32/0xc0 [ 689.433824][ T8075] ffff88807c795a80 140730494550015 [ 689.438847][ T28] ? worker_thread+0x16d/0x1090 [ 689.438888][ T28] worker_thread+0x669/0x1090 [ 689.438932][ T28] ? process_one_work+0x1750/0x1750 [ 689.439064][ T28] kthread+0x2e8/0x3a0 [ 689.439129][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 689.459117][ T8075] 0000000000000000 140730496278527 [ 689.464373][ T8166] 139904201199616-139904201203711: [ 689.493208][ T8075] ffff88807c795b60 140730496294911 [ 689.495953][ T28] ret_from_fork+0x1f/0x30 [ 689.499349][ T8075] ffff88807c795c40 140730496303103 [ 689.504578][ T28] [ 689.504592][ T28] 3 locks held by kworker/u4:3/5163: [ 689.519271][ T8075] 0000000000000000 18446744073709551615 [ 689.522013][ T28] #0: [ 689.525651][ T8075] 0000000000000000 0 [ 689.534774][ T28] ffff888012479138 [ 689.539242][ T8166] ffff8880770f59a0 [ 689.544420][ T28] ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 [ 689.547628][ T8075] 0000000000000000 0 [ 689.559816][ T28] #1: [ 689.568071][ T8166] 139904201203712-139904201334783: [ 689.572139][ T28] ffffc9000458fda8 [ 689.575033][ T8166] ffff8880770f58c0 [ 689.589144][ T28] ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 [ 689.589208][ T28] #2: ffffffff8c79e6b8 ( [ 689.601283][ T8075] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 689.611473][ T28] rcu_state.exp_mutex [ 689.616273][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 689.616304][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 689.616328][ T8166] 140730916827136-140730917257215: [ 689.626279][ T28] ){+.+.}-{3:3} [ 689.627372][ T8075] 140322704048128-140322704506879: [ 689.634156][ T28] , at: synchronize_rcu_expedited+0x658/0x770 [ 689.639800][ T8166] 0000000000000000 [ 689.639813][ T8166] 140730917257216-140730917273599: ffff8880770f5700 [ 689.639837][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 689.639860][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 689.639883][ T8166] Pass: 10965592 Run:10965780 [ 689.639898][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 689.639924][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 689.639939][ T8166] Call Trace: [ 689.639947][ T8166] [ 689.639957][ T8166] dump_stack_lvl+0xd1/0x138 [ 689.639993][ T8166] mt_find.cold+0x8b/0x90 [ 689.654648][ T28] task:kworker/1:7 state:D [ 689.655028][ T8166] ? mas_find+0x1d0/0x1d0 [ 689.655081][ T8166] find_vma+0x10c/0x1b0 [ 689.658927][ T28] stack:23296 pid:5187 ppid:2 flags:0x00004000 [ 689.665690][ T8166] ? can_vma_merge_before+0x390/0x390 [ 689.665723][ T8166] ? walk_page_test+0x78/0x180 [ 689.673194][ T28] Workqueue: rcu_gp wait_rcu_exp_gp [ 689.679993][ T8166] walk_page_range+0x2b1/0x4a0 [ 689.680040][ T8166] ? __walk_page_range+0x780/0x780 [ 689.680085][ T8166] mlock_fixup+0x650/0x810 [ 689.680129][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 689.680165][ T8166] ? mlock_fixup+0x810/0x810 [ 689.680211][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 689.680251][ T8166] do_mlock+0x25a/0x6d0 [ 689.680291][ T8166] ? folio_evictable+0x270/0x270 [ 689.680338][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 689.680371][ T8166] __x64_sys_mlock+0x59/0x80 [ 689.680406][ T8166] do_syscall_64+0x39/0xb0 [ 689.680441][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 689.680470][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 689.680493][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 689.680515][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 689.680542][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 689.680559][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 689.680580][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 689.680596][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.680610][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 689.680646][ T8166] [ 689.682668][ T8075] 0000000000000000 [ 689.687846][ T28] [ 689.695478][ T8075] 140322704506880-140322704510975: [ 689.715210][ T28] Call Trace: [ 689.718821][ T8075] ffff88807c795380 [ 689.720721][ T28] [ 689.720740][ T28] __schedule+0x25d0/0x5a70 [ 689.730080][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 689.743054][ T28] ? find_held_lock+0x2d/0x110 [ 689.765984][ T8075] 140322704510976-140322704642047: [ 689.777084][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 689.793656][ T8075] ffff88807c7959a0 [ 689.798395][ T28] ? io_schedule_timeout+0x150/0x150 [ 689.803459][ T8075] 140322704642048-140730494414847: [ 689.807870][ T28] ? mark_held_locks+0x9f/0xe0 [ 689.821022][ T8166] BUG at mt_find:6473 (1) [ 689.822974][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 689.854019][ T8075] 0000000000000000 [ 689.859854][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 689.892275][ T8075] 140730494414848-140730494550015: [ 689.896063][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 689.909162][ T8075] ffff88807c795a80 [ 689.911614][ T8166] 0-18446744073709551615: [ 689.920116][ T8075] 140730494550016-140730496278527: [ 689.922590][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 689.933890][ T8075] 0000000000000000 [ 689.941273][ T8166] node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 [ 689.947085][ T8075] 140730496278528-140730496294911: [ 689.948040][ T28] schedule+0xde/0x1b0 [ 689.952633][ T8075] ffff88807c795b60 [ 689.958504][ T8166] contents: [ 689.971591][ T8075] 140730496294912-140730496303103: [ 689.972509][ T28] schedule_timeout+0x14e/0x2a0 [ 689.977183][ T8075] ffff88807c795c40 [ 689.981406][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 690.012903][ T8166] 93708216008704 [ 690.017777][ T28] ? __next_timer_interrupt+0x2a0/0x2a0 [ 690.018933][ T8075] 140730496303104-18446744073709551615: [ 690.034201][ T28] ? __ipv6_ifa_notify.cold+0x43/0x48 [ 690.037621][ T8166] 20480 [ 690.040363][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 690.043339][ T8166] 18446603342792269824 [ 690.049133][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 690.053764][ T8075] 0000000000000000 [ 690.064925][ T28] rcu_exp_wait_wake+0x28f/0x11c0 [ 690.068647][ T8166] 0 [ 690.072037][ T28] ? rcu_exp_handler+0x390/0x390 [ 690.078137][ T8166] 0 [ 690.094708][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 690.099513][ T8075] Pass: 10965604 Run:10965793 [ 690.102756][ T28] ? rcu_gp_kthread+0x360/0x360 [ 690.106067][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 690.146531][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 690.156589][ T8075] Call Trace: [ 690.159864][ T8075] [ 690.162793][ T8075] dump_stack_lvl+0xd1/0x138 [ 690.167396][ T8075] mt_find.cold+0x8b/0x90 [ 690.171738][ T8075] ? mas_find+0x1d0/0x1d0 [ 690.176083][ T8075] find_vma+0x10c/0x1b0 [ 690.180239][ T8075] ? can_vma_merge_before+0x390/0x390 [ 690.185614][ T8075] ? walk_page_test+0x78/0x180 [ 690.190383][ T8075] walk_page_range+0x2b1/0x4a0 [ 690.195161][ T8075] ? __walk_page_range+0x780/0x780 [ 690.200304][ T8075] mlock_fixup+0x650/0x810 [ 690.204735][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 690.209967][ T8075] ? mlock_fixup+0x810/0x810 [ 690.214580][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 690.220488][ T8075] do_mlock+0x25a/0x6d0 [ 690.224658][ T8075] ? folio_evictable+0x270/0x270 [ 690.229621][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 690.235523][ T8075] __x64_sys_mlock+0x59/0x80 [ 690.240124][ T8075] do_syscall_64+0x39/0xb0 [ 690.244546][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 690.250444][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 690.254861][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 690.274466][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 690.282881][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 690.290853][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 690.298824][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 690.306799][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.314779][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 690.322761][ T8075] [ 690.333722][ T28] ? sync_rcu_exp_select_cpus+0x3de/0xab0 [ 690.336127][ T8166] 0 0 0 0 0 | 02 02| ffff88806630860c 139904166133759 ffff88806630840c 139904200589311 ffff8880267c3a0c 18446744073709551615 [ 690.340269][ T28] process_one_work+0x9bf/0x1750 [ 690.358619][ T8166] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 690.358884][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 690.369783][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 690.380875][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 690.386132][ T28] ? lock_acquire+0x32/0xc0 [ 690.386358][ T8166] 0000000000000000 0 [ 690.390638][ T28] ? worker_thread+0x16d/0x1090 [ 690.394617][ T8166] 0000000000000000 [ 690.401076][ T28] worker_thread+0x669/0x1090 [ 690.409154][ T28] ? __kthread_parkme+0x163/0x220 [ 690.414210][ T28] ? process_one_work+0x1750/0x1750 [ 690.414832][ T8166] 0-139904166133759: node ffff888066308600 depth 1 type 1 parent ffff888066308206 contents: 0000000000000000 536866815 ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 690.419792][ T28] kthread+0x2e8/0x3a0 [ 690.476097][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 690.481790][ T28] ret_from_fork+0x1f/0x30 [ 690.482774][ T8166] 0-536866815: [ 690.486595][ T28] [ 690.489626][ T8166] 0000000000000000 [ 690.490394][ T28] 2 locks held by kworker/1:7/5187: [ 690.493405][ T8166] 536866816-536870911: [ 690.497581][ T28] #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 [ 690.510337][ T8166] ffff88807e785620 [ 690.519209][ T28] #1: ffffc900046f7da8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 [ 690.534271][ T8166] 536870912-553631743: ffff88807e785700 [ 690.534499][ T28] task:syz-executor.5 state:D stack:28256 pid:8074 ppid:5128 flags:0x00000004 [ 690.549277][ T8166] 553631744-553635839: 0000000000000000 [ 690.549796][ T28] Call Trace: [ 690.564944][ T8166] 553635840-553631743: ffff8880770f5c40 [ 690.570905][ T8166] 553631744-553644031: ffff8880770f5b60 [ 690.574831][ T28] [ 690.580596][ T28] __schedule+0x25d0/0x5a70 [ 690.585464][ T28] ? lock_chain_count+0x20/0x20 [ 690.586828][ T8166] 553644032-553648127: [ 690.590323][ T28] ? __lock_acquire+0x166e/0x5660 [ 690.590363][ T28] ? io_schedule_timeout+0x150/0x150 [ 690.603819][ T8166] ffff8880226cd1c0 [ 690.614836][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 690.620762][ T8075] BUG at mt_find:6473 (1) [ 690.621864][ T8166] 553648128-553652223: ffff88807e7857e0 [ 690.632442][ T8166] 553652224-116783185919: 0000000000000000 [ 690.634824][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 690.654841][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 [ 690.655063][ T8166] 116783185920-116789477375: ffff88807e7858c0 [ 690.660605][ T28] schedule+0xde/0x1b0 [ 690.677138][ T8166] 116789477376-93825005486079: 0000000000000000 [ 690.684461][ T8166] 93825005486080-93825005625343: ffff88807e7859a0 [ 690.684816][ T8075] 0-18446744073709551615: node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 690.699490][ T8166] 93825005625344-139904166129663: [ 690.739908][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 690.751143][ T8166] 0000000000000000 [ 690.764864][ T28] ? down_write+0x220/0x220 [ 690.769425][ T28] ? lock_release+0x810/0x810 [ 690.774119][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 690.779638][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 690.794786][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 690.800377][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 690.835139][ T28] ? lock_acquire+0x32/0xc0 [ 690.839720][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 690.844848][ T8075] 0-140322669592575: node ffff888022281800 depth 1 type 1 parent ffff888022281406 [ 690.845394][ T8166] 139904166133760-139904200589311: [ 690.853096][ T28] down_read+0xe6/0x450 [ 690.864445][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 690.870453][ T8075] contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 0000000000000000 553635839 ffff88801cae0e00 553631743 ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 690.878924][ T28] do_user_addr_fault+0xa51/0x1210 [ 690.934245][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 690.943637][ T28] exc_page_fault+0x98/0x170 [ 690.954797][ T8166] node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 [ 690.954876][ T28] asm_exc_page_fault+0x26/0x30 [ 690.990927][ T28] RIP: 0033:0x7f9f6c2276c6 [ 690.994815][ T8166] ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 690.999076][ T28] RSP: 002b:00007ffe5f22e728 EFLAGS: 00010287 [ 691.052307][ T28] RAX: 0000001b33922000 RBX: 00007f9f6c3ac018 RCX: 0000001b33920000 [ 691.063471][ T28] RDX: 0000001b33922004 RSI: 0000001b33921824 RDI: 0000000054ac3b9b [ 691.074816][ T8075] 0-536866815: 0000000000000000 [ 691.078725][ T28] RBP: 0000000054ac3b9b R08: 0000001b33d20000 R09: 0000000054ac3b9f [ 691.080042][ T8075] 536866816-536870911: [ 691.093502][ T28] R10: 00007ffe5f3d6090 R11: 0000000000018df6 R12: 00007f9f6c3a0000 [ 691.094820][ T8075] ffff88802b7dbc40 [ 691.102670][ T28] R13: 0000000000000001 R14: 00000000000031c0 R15: ffffffff8166ab1f [ 691.124839][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 691.131035][ T28] ? _prb_read_valid+0x46f/0x710 [ 691.131813][ T8166] 139904174522368-139904176619519: [ 691.137110][ T28] [ 691.144822][ T8075] 536870912-553631743: ffff88802b7dbd20 [ 691.151592][ T8075] 553631744-553635839: 0000000000000000 [ 691.155790][ T28] 1 lock held by syz-executor.5/8074: [ 691.162991][ T28] #0: ffff8880286c8198 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1210 [ 691.173090][ T8166] ffff88807e785c40 [ 691.173105][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 691.173131][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 691.173153][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 691.173175][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 691.190912][ T28] task:syz-executor.5 state:R running task stack:26944 pid:8075 ppid:5128 flags:0x00004006 [ 691.224840][ T8075] 553635840-553631743: ffff88801cae0e00 [ 691.237151][ T28] Call Trace: [ 691.241103][ T28] [ 691.244062][ T28] __schedule+0x25d0/0x5a70 [ 691.248757][ T8075] 553631744-553644031: ffff88801cae0d20 [ 691.248788][ T8075] 553644032-553648127: ffff888020c88460 [ 691.248812][ T8075] 553648128-553652223: [ 691.260878][ T28] ? __up_console_sem+0xa4/0xc0 [ 691.272497][ T28] ? io_schedule_timeout+0x150/0x150 [ 691.274799][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 691.277882][ T28] ? __up_console_sem+0xae/0xc0 [ 691.278161][ T8075] ffff88802b7dbe00 [ 691.293095][ T28] ? console_flush_all+0x547/0x6e0 [ 691.298840][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 691.304247][ T28] preempt_schedule_common+0x45/0xc0 [ 691.309558][ T8166] 139904187252736-139904187981823: ffff8880770f51c0 [ 691.324856][ T8075] 553652224-116829323263: 0000000000000000 [ 691.331068][ T8075] 116829323264-116833517567: ffff88802b7dbee0 [ 691.334845][ T28] ? lock_acquire+0x32/0xc0 [ 691.342012][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 691.349528][ T8166] 139904187981824-139904188317695: ffff8880770f52a0 [ 691.349561][ T8166] 139904188317696-139904188321791: 0000000000000000 [ 691.365405][ T28] ? vprintk_emit+0x1e9/0x600 [ 691.370120][ T28] ? vprintk_emit+0x1ee/0x600 [ 691.375247][ T8166] 139904188321792-139904188686335: ffff8880770f5380 [ 691.382219][ T8166] 139904188686336-139904188723199: ffff8880770f5460 [ 691.383498][ T28] ? vprintk+0x84/0xa0 [ 691.393304][ T28] ? _printk+0xbe/0xf1 [ 691.397618][ T8075] 116833517568-93825021800447: 0000000000000000 [ 691.404238][ T8075] 93825021800448-93825021939711: ffff88808b414000 [ 691.404806][ T28] ? record_print_text.cold+0x16/0x16 [ 691.428734][ T28] ? record_print_text.cold+0x16/0x16 [ 691.434188][ T28] ? mt_dump_entry+0xb3/0xf4 [ 691.434857][ T8166] 139904188723200-139904188743679: 0000000000000000 [ 691.454822][ T8075] 93825021939712-140322669588479: 0000000000000000 [ 691.461732][ T8075] 140322669588480-140322669592575: ffff888075edd7e0 [ 691.468690][ T28] ? mt_dump_node+0x3ec/0x927 [ 691.468742][ T28] ? mt_dump_node+0x851/0x927 [ 691.468784][ T28] ? mt_dump.cold+0xf2/0x115 [ 691.484851][ T8166] 139904188743680-139904200589311: ffff8880770f5540 [ 691.491844][ T8166] 139904200589312-18446744073709551615: node ffff8880267c3a00 depth 1 type 1 parent ffff888066308216 contents: 0000000000000000 139904201199615 ffff8880770f59a0 139904201203711 ffff8880770f58c0 139904201334783 0000000000000000 140730916691967 ffff8880770f5620 140730916827135 0000000000000000 140730917257215 ffff8880770f5700 140730917273599 ffff8880770f57e0 140730917281791 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 691.492722][ T28] ? mt_find.cold+0x48/0x90 [ 691.568731][ T8075] 140322669592576-140322704048127: node ffff888022281600 depth 1 type 1 parent ffff88802228140e contents: ffff888075edd8c0 140322677981183 ffff888075edd9a0 140322680078335 ffff888075edd2a0 140322682175487 ffff888075edd0e0 140322684272639 ffff888075edd1c0 140322686369791 ffff888075edda80 140322690564095 ffff888075eddb60 140322690711551 ffff888075eddc40 140322691440639 ffff888075eddd20 140322691776511 0000000000000000 140322691780607 ffff888075edde00 140322692145151 ffff888075eddee0 140322692182015 0000000000000000 140322692202495 ffff888075edd000 140322704048127 0000000000000000 0 000000000000000d [ 691.569927][ T28] ? mas_find+0x1d0/0x1d0 [ 691.625896][ T8166] 139904200589312-139904201199615: 0000000000000000 [ 691.635657][ T8075] 140322669592576-140322677981183: ffff888075edd8c0 [ 691.639365][ T28] ? find_vma+0x10c/0x1b0 [ 691.642627][ T8075] 140322677981184-140322680078335: [ 691.648662][ T8166] 139904201199616-139904201203711: [ 691.651530][ T28] ? can_vma_merge_before+0x390/0x390 [ 691.654218][ T8166] ffff8880770f59a0 [ 691.665388][ T28] ? walk_page_test+0x78/0x180 [ 691.665432][ T28] ? walk_page_range+0x2b1/0x4a0 [ 691.671824][ T8075] ffff888075edd9a0 [ 691.673914][ T28] ? __walk_page_range+0x780/0x780 [ 691.679201][ T8075] 140322680078336-140322682175487: [ 691.688214][ T8166] 139904201203712-139904201334783: ffff8880770f58c0 [ 691.693834][ T28] ? mlock_fixup+0x650/0x810 [ 691.701098][ T8075] ffff888075edd2a0 [ 691.709395][ T8075] 140322682175488-140322684272639: ffff888075edd0e0 [ 691.711672][ T28] ? apply_vma_lock_flags+0x23d/0x350 [ 691.716670][ T8166] 139904201334784-140730916691967: 0000000000000000 [ 691.724788][ T28] ? mlock_fixup+0x810/0x810 [ 691.730067][ T8075] 140322684272640-140322686369791: ffff888075edd1c0 [ 691.741362][ T8075] 140322686369792-140322690564095: ffff888075edda80 [ 691.741522][ T28] ? __ia32_sys_get_robust_list+0x400/0x400 [ 691.748644][ T8166] 140730916691968-140730916827135: ffff8880770f5620 [ 691.754789][ T28] ? do_mlock+0x25a/0x6d0 [ 691.762919][ T8075] 140322690564096-140322690711551: ffff888075eddb60 [ 691.772802][ T8075] 140322690711552-140322691440639: ffff888075eddc40 [ 691.775476][ T28] ? folio_evictable+0x270/0x270 [ 691.781412][ T8166] 140730916827136-140730917257215: [ 691.784685][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 691.784700][ T8166] 0000000000000000 [ 691.784725][ T28] ? __x64_sys_mlock+0x59/0x80 [ 691.791416][ T8166] 140730917257216-140730917273599: [ 691.796278][ T28] ? do_syscall_64+0x39/0xb0 [ 691.815018][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 691.821139][ T28] [ 691.823387][ T8075] 140322691440640-140322691776511: [ 691.824196][ T28] 3 locks held by syz-executor.5/8075: [ 691.824217][ T28] task:syz-executor.5 state:D [ 691.831116][ T8166] ffff8880770f5700 [ 691.840840][ T8075] ffff888075eddd20 [ 691.844867][ T8166] 140730917273600-140730917281791: ffff8880770f57e0 [ 691.844901][ T8166] 140730917281792-18446744073709551615: 0000000000000000 [ 691.844925][ T8166] Pass: 10966349 Run:10966539 [ 691.844938][ T8166] CPU: 0 PID: 8166 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 691.854935][ T28] stack:28112 pid:8165 ppid:8146 flags:0x00000004 [ 691.855573][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 691.862924][ T28] Call Trace: [ 691.862935][ T28] [ 691.867579][ T8166] Call Trace: [ 691.867588][ T8166] [ 691.867598][ T8166] dump_stack_lvl+0xd1/0x138 [ 691.867634][ T8166] mt_find.cold+0x8b/0x90 [ 691.877573][ T8075] 140322691776512-140322691780607: [ 691.884155][ T8166] ? mas_find+0x1d0/0x1d0 [ 691.894227][ T28] __schedule+0x25d0/0x5a70 [ 691.897471][ T8166] find_vma+0x10c/0x1b0 [ 691.897498][ T8166] ? can_vma_merge_before+0x390/0x390 [ 691.897528][ T8166] ? walk_page_test+0x78/0x180 [ 691.897562][ T8166] walk_page_range+0x2b1/0x4a0 [ 691.897597][ T8166] ? __walk_page_range+0x780/0x780 [ 691.897645][ T8166] mlock_fixup+0x650/0x810 [ 691.897688][ T8166] apply_vma_lock_flags+0x23d/0x350 [ 691.914793][ T28] ? lock_chain_count+0x20/0x20 [ 691.915715][ T8166] ? mlock_fixup+0x810/0x810 [ 691.921278][ T28] ? io_schedule_timeout+0x150/0x150 [ 691.926714][ T8166] ? __ia32_sys_get_robust_list+0x400/0x400 [ 691.926753][ T8166] do_mlock+0x25a/0x6d0 [ 691.931871][ T8075] 0000000000000000 [ 691.935360][ T8166] ? folio_evictable+0x270/0x270 [ 691.935409][ T8166] ? syscall_enter_from_user_mode+0x26/0xb0 [ 691.935440][ T8166] __x64_sys_mlock+0x59/0x80 [ 691.935473][ T8166] do_syscall_64+0x39/0xb0 [ 691.935508][ T8166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 691.935537][ T8166] RIP: 0033:0x7f3dfb68c0c9 [ 691.935564][ T8166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 691.935588][ T8166] RSP: 002b:00007f3dfc391168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 691.935613][ T8166] RAX: ffffffffffffffda RBX: 00007f3dfb7abf80 RCX: 00007f3dfb68c0c9 [ 691.935629][ T8166] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 691.935645][ T8166] RBP: 00007f3dfb6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 691.935660][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.935676][ T8166] R13: 00007ffe784e611f R14: 00007f3dfc391300 R15: 0000000000022000 [ 691.935711][ T8166] [ 691.946537][ T8166] index not increased! 20ffc000 <= 20ffc000 [ 691.964841][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 [ 691.966226][ T8075] 140322691780608-140322692145151: [ 691.970879][ T28] schedule+0xde/0x1b0 [ 691.975540][ T8166] BUG at mt_find:6473 (1) [ 691.989824][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 691.990986][ T8075] ffff888075edde00 [ 691.994664][ T28] ? down_write+0x220/0x220 [ 691.999663][ T8166] maple_tree(ffff88801ffd8900) flags 309, height 2 root ffff88806630821e [ 691.999686][ T8166] 0-18446744073709551615: node ffff888066308200 depth 0 type 3 parent ffff88801ffd8901 contents: 93708216008704 20480 18446603342792269824 [ 692.012318][ T28] ? lock_release+0x810/0x810 [ 692.014692][ T8166] 0 [ 692.025286][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 692.048083][ T8075] 140322692145152-140322692182015: [ 692.070214][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 692.086094][ T8075] ffff888075eddee0 [ 692.097169][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 692.097206][ T28] ? lock_acquire+0x32/0xc0 [ 692.097228][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 692.097265][ T28] down_read+0xe6/0x450 [ 692.097292][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 692.097332][ T28] do_user_addr_fault+0xa51/0x1210 [ 692.112974][ T8166] 0 [ 692.119976][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 692.123475][ T8166] 0 [ 692.129339][ T28] exc_page_fault+0x98/0x170 [ 692.142999][ T8075] 140322692182016-140322692202495: [ 692.148920][ T28] asm_exc_page_fault+0x26/0x30 [ 692.176076][ T8166] 0 [ 692.178888][ T28] RIP: 0033:0x7f3dfb6276c6 [ 692.184317][ T8166] 0 [ 692.188065][ T28] RSP: 002b:00007ffe784e60e8 EFLAGS: 00010287 [ 692.188088][ T28] RAX: 0000001b30d23000 RBX: 00007f3dfb7ac018 RCX: 0000001b30d20000 [ 692.201121][ T8075] 0000000000000000 [ 692.203361][ T28] RDX: 0000001b30d23004 RSI: 0000001b30d228fc RDI: 00000000a60e1c08 [ 692.207782][ T8166] 0 [ 692.214783][ T28] RBP: 00000000a60e1c08 R08: 0000001b31320000 R09: 00000000a60e1c0c [ 692.218739][ T8075] 140322692202496-140322704048127: [ 692.220885][ T28] R10: 00007ffe78550090 R11: 000000000001b5c8 R12: 00007f3dfb7a0000 [ 692.233763][ T8075] ffff888075edd000 [ 692.249577][ T28] R13: 0000000000000001 R14: 0000000000002677 R15: ffffffff81667907 [ 692.267767][ T8166] 0 [ 692.271628][ T28] ? vprintk_emit+0x517/0x600 [ 692.284206][ T8166] | 02 02| [ 692.294392][ T28] [ 692.300200][ T8075] 140322704048128-18446744073709551615: [ 692.303608][ T28] 1 lock held by syz-executor.5/8165: [ 692.307577][ T8075] node ffff88807a4f6c00 depth 1 type 1 parent ffff888022281416 [ 692.323938][ T28] #0: [ 692.325996][ T8166] ffff88806630860c 139904166133759 [ 692.328753][ T28] ffff88801ffd8a98 [ 692.334534][ T8166] ffff88806630840c 139904200589311 [ 692.350233][ T28] ( [ 692.352545][ T8075] contents: [ 692.362240][ T28] &mm->mmap_lock [ 692.371225][ T8166] ffff8880267c3a0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 692.385500][ T28] ){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1210 [ 692.397333][ T8075] 0000000000000000 140322704506879 [ 692.402897][ T28] task:syz-executor.5 state:R running task stack:26944 pid:8166 ppid:8146 flags:0x00004006 [ 692.408400][ T8075] ffff88807c795380 140322704510975 [ 692.419572][ T8166] 0-139904166133759: [ 692.425060][ T8075] ffff88807c7959a0 140322704642047 [ 692.428417][ T28] Call Trace: [ 692.429213][ T8075] 0000000000000000 140730494414847 [ 692.434399][ T28] [ 692.438273][ T8166] node ffff888066308600 depth 1 type 1 parent ffff888066308206 [ 692.444862][ T28] ? devkmsg_read+0x730/0x730 [ 692.448713][ T8166] contents: [ 692.458378][ T8075] ffff88807c795a80 140730494550015 [ 692.461196][ T28] ? __schedule+0x25d0/0x5a70 [ 692.461664][ T8075] 0000000000000000 140730496278527 [ 692.472091][ T8166] 0000000000000000 536866815 [ 692.472899][ T28] ? console_flush_all+0x547/0x6e0 [ 692.478265][ T8075] ffff88807c795b60 140730496294911 [ 692.484968][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 692.501657][ T8166] ffff88807e785620 536870911 ffff88807e785700 553631743 0000000000000000 553635839 ffff8880770f5c40 553631743 ffff8880770f5b60 553644031 ffff8880226cd1c0 553648127 ffff88807e7857e0 553652223 0000000000000000 116783185919 ffff88807e7858c0 116789477375 0000000000000000 93825005486079 ffff88807e7859a0 93825005625343 0000000000000000 139904166129663 ffff88807e785a80 139904166133759 0000000000000000 0 000000000000000d [ 692.512587][ T28] ? console_flush_all+0x6e0/0x6e0 [ 692.540711][ T8075] ffff88807c795c40 140730496303103 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 692.554820][ T28] ? preempt_schedule_common+0x45/0xc0 [ 692.567923][ T8075] 140322704048128-140322704506879: 0000000000000000 [ 692.571691][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 692.578189][ T8166] 0-536866815: 0000000000000000 [ 692.588978][ T8075] 140322704506880-140322704510975: ffff88807c795380 [ 692.591628][ T28] ? vprintk_emit+0x1e9/0x600 [ 692.596250][ T8075] 140322704510976-140322704642047: ffff88807c7959a0 [ 692.606240][ T28] ? vprintk_emit+0x1ee/0x600 [ 692.610359][ T8166] 536866816-536870911: [ 692.612357][ T28] ? vprintk+0x84/0xa0 [ 692.617798][ T8166] ffff88807e785620 [ 692.624932][ T28] ? vprintk+0x84/0xa0 [ 692.624966][ T28] ? _printk+0xbe/0xf1 [ 692.633236][ T28] ? record_print_text.cold+0x16/0x16 [ 692.635195][ T8075] 140322704642048-140730494414847: 0000000000000000 [ 692.638907][ T28] ? record_print_text.cold+0x16/0x16 [ 692.652332][ T28] ? mt_dump_entry+0xb3/0xf4 [ 692.657115][ T28] ? mt_dump_node+0x3ec/0x927 [ 692.660651][ T8166] 536870912-553631743: ffff88807e785700 [ 692.661814][ T28] ? mt_dump_node+0x851/0x927 [ 692.672404][ T8166] 553631744-553635839: 0000000000000000 [ 692.672448][ T28] ? mt_dump.cold+0xf2/0x115 [ 692.683050][ T28] ? mt_find.cold+0x48/0x90 [ 692.683095][ T8075] 140730494414848-140730494550015: [ 692.687915][ T28] ? mas_find+0x1d0/0x1d0 [ 692.692045][ T8075] ffff88807c795a80 [ 692.693502][ T28] ? find_vma+0x10c/0x1b0 [ 692.702207][ T8166] 553635840-553631743: [ 692.707263][ T28] ? can_vma_merge_before+0x390/0x390 [ 692.710568][ T8166] ffff8880770f5c40 [ 692.711786][ T28] ? walk_page_test+0x78/0x180 [ 692.727705][ T28] ? walk_page_range+0x2b1/0x4a0 [ 692.729350][ T8075] 140730494550016-140730496278527: [ 692.732675][ T28] ? __walk_page_range+0x780/0x780 [ 692.732688][ T8075] 0000000000000000 [ 692.732723][ T28] ? mlock_fixup+0x650/0x810 [ 692.753844][ T28] ? apply_vma_lock_flags+0x23d/0x350 [ 692.757915][ T8166] 553631744-553644031: ffff8880770f5b60 [ 692.759592][ T28] ? mlock_fixup+0x810/0x810 [ 692.769995][ T28] ? __ia32_sys_get_robust_list+0x400/0x400 [ 692.776177][ T28] ? do_mlock+0x25a/0x6d0 [ 692.779186][ T8075] 140730496278528-140730496294911: ffff88807c795b60 [ 692.780528][ T28] ? folio_evictable+0x270/0x270 [ 692.792917][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 692.793000][ T8166] 553644032-553648127: [ 692.799109][ T28] ? __x64_sys_mlock+0x59/0x80 [ 692.803221][ T8075] 140730496294912-140730496303103: [ 692.803629][ T28] ? do_syscall_64+0x39/0xb0 [ 692.813996][ T8166] ffff8880226cd1c0 [ 692.819770][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 692.826586][ T8075] ffff88807c795c40 [ 692.828704][ T28] [ 692.832100][ T8075] 140730496303104-18446744073709551615: [ 692.835314][ T28] 1 lock held by syz-executor.5/8166: [ 692.835335][ T28] task:syz-executor.1 state:D [ 692.847692][ T8166] 553648128-553652223: [ 692.850334][ T8075] 0000000000000000 [ 692.852455][ T8166] ffff88807e7857e0 [ 692.860822][ T8075] Pass: 10966350 Run:10966541 [ 692.862191][ T28] stack:29536 pid:8842 ppid:5120 flags:0x00000004 [ 692.872632][ T8075] CPU: 0 PID: 8075 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 692.876736][ T8166] 553652224-116783185919: [ 692.886373][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 692.886388][ T8075] Call Trace: [ 692.886395][ T8075] [ 692.886405][ T8075] dump_stack_lvl+0xd1/0x138 [ 692.891174][ T28] Call Trace: [ 692.901200][ T8075] mt_find.cold+0x8b/0x90 [ 692.904486][ T28] [ 692.907401][ T8075] ? mas_find+0x1d0/0x1d0 [ 692.907445][ T8075] find_vma+0x10c/0x1b0 [ 692.911995][ T28] __schedule+0x25d0/0x5a70 [ 692.915250][ T8075] ? can_vma_merge_before+0x390/0x390 [ 692.915282][ T8075] ? walk_page_test+0x78/0x180 [ 692.919586][ T8166] 0000000000000000 [ 692.922499][ T8075] walk_page_range+0x2b1/0x4a0 [ 692.934801][ T28] ? io_schedule_timeout+0x150/0x150 [ 692.935430][ T8075] ? __walk_page_range+0x780/0x780 [ 692.940775][ T28] ? mark_held_locks+0x9f/0xe0 [ 692.945536][ T8075] mlock_fixup+0x650/0x810 [ 692.949446][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 692.953989][ T8075] apply_vma_lock_flags+0x23d/0x350 [ 692.960030][ T8166] 116783185920-116789477375: [ 692.964328][ T8075] ? mlock_fixup+0x810/0x810 [ 692.969101][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 692.973468][ T8075] ? __ia32_sys_get_robust_list+0x400/0x400 [ 692.980328][ T8166] ffff88807e7858c0 [ 692.984419][ T8075] do_mlock+0x25a/0x6d0 [ 692.989459][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 692.993988][ T8075] ? folio_evictable+0x270/0x270 [ 692.999183][ T28] schedule+0xde/0x1b0 [ 693.005036][ T8075] ? syscall_enter_from_user_mode+0x26/0xb0 [ 693.008753][ T8166] 116789477376-93825005486079: [ 693.012880][ T8075] __x64_sys_mlock+0x59/0x80 [ 693.018687][ T28] synchronize_rcu_expedited+0x706/0x770 [ 693.023569][ T8075] do_syscall_64+0x39/0xb0 [ 693.030640][ T28] ? wait_rcu_exp_gp+0x40/0x40 [ 693.033482][ T8075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 693.038702][ T8166] 0000000000000000 [ 693.043237][ T8075] RIP: 0033:0x7f9f6c28c0c9 [ 693.048900][ T28] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 693.053256][ T8075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 693.058043][ T28] ? find_held_lock+0x2d/0x110 [ 693.063870][ T8075] RSP: 002b:00007f9f6cf6c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 693.063898][ T8075] RAX: ffffffffffffffda RBX: 00007f9f6c3abf80 RCX: 00007f9f6c28c0c9 [ 693.063913][ T8075] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 693.063928][ T8075] RBP: 00007f9f6c2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 693.063942][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.063957][ T8075] R13: 00007ffe5f22e75f R14: 00007f9f6cf6c300 R15: 0000000000022000 [ 693.063992][ T8075] [ 693.068750][ T8075] index not increased! 20ffc000 <= 20ffc000 [ 693.112457][ T28] ? static_key_enable_cpuslocked+0x10c/0x270 [ 693.123425][ T8166] 93825005486080-93825005625343: [ 693.144814][ T28] synchronize_rcu+0x302/0x3b0 [ 693.152821][ T8075] BUG at mt_find:6473 (1) [ 693.165938][ T28] ? synchronize_rcu_expedited+0x770/0x770 [ 693.168789][ T8075] maple_tree(ffff8880286c8000) flags 309, height 2 root ffff88802228141e [ 693.174017][ T28] ? find_held_lock+0x2d/0x110 [ 693.180699][ T8075] 0-18446744073709551615: [ 693.191246][ T28] ? sched_core_get+0x86/0xa0 [ 693.197279][ T8166] ffff88807e7859a0 [ 693.208743][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 693.211238][ T8166] 93825005625344-139904166129663: [ 693.214646][ T28] sched_core_get+0x8b/0xa0 [ 693.219744][ T8075] node ffff888022281400 depth 0 type 3 parent ffff8880286c8001 contents: 93708188282880 20480 18446603343213248512 0 0 0 0 0 0 0 | 02 02| ffff88802228180c 140322669592575 ffff88802228160c 140322704048127 ffff88807a4f6c0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 693.231171][ T28] sched_core_share_pid+0x3f5/0x9d0 [ 693.266899][ T8166] 0000000000000000 [ 693.275340][ T8166] 139904166129664-139904166133759: ffff88807e785a80 [ 693.282348][ T8166] 139904166133760-139904200589311: node ffff888066308400 depth 1 type 1 parent ffff88806630820e contents: ffff88807e785b60 139904174522367 ffff88807e785c40 139904176619519 ffff88807e785d20 139904178716671 ffff88807e785e00 139904180813823 ffff88807e785ee0 139904182910975 ffff8880770f5000 139904187105279 ffff8880770f50e0 139904187252735 ffff8880770f51c0 139904187981823 ffff8880770f52a0 139904188317695 0000000000000000 139904188321791 ffff8880770f5380 139904188686335 ffff8880770f5460 139904188723199 0000000000000000 139904188743679 ffff8880770f5540 139904200589311 0000000000000000 0 000000000000000d [ 693.294787][ T28] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 693.342574][ T8075] 0-140322669592575: [ 693.343274][ T28] ? sched_core_free+0x80/0x80 [ 693.347514][ T8075] node ffff888022281800 depth 1 type 1 parent ffff888022281406 contents: 0000000000000000 536866815 ffff88802b7dbc40 536870911 ffff88802b7dbd20 553631743 [ 693.354867][ T28] ? bpf_lsm_task_prctl+0x9/0x10 [ 693.377273][ T28] ? security_task_prctl+0xbf/0xf0 [ 693.381294][ T8075] 0000000000000000 553635839 [ 693.382414][ T28] __do_sys_prctl+0xacf/0x14c0 [ 693.382444][ T28] ? __ia32_sys_umask+0xb0/0xb0 [ 693.389329][ T8075] ffff88801cae0e00 553631743 [ 693.392471][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 693.408119][ T28] do_syscall_64+0x39/0xb0 [ 693.412578][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 693.414867][ T8075] ffff88801cae0d20 553644031 ffff888020c88460 553648127 ffff88802b7dbe00 553652223 0000000000000000 116829323263 ffff88802b7dbee0 116833517567 0000000000000000 93825021800447 ffff88808b414000 93825021939711 0000000000000000 140322669588479 ffff888075edd7e0 140322669592575 0000000000000000 0 000000000000000d [ 693.418872][ T28] RIP: 0033:0x7f46ef28c0c9 [ 693.453391][ T28] RSP: 002b:00007f46eff48168 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 693.461931][ T8166] 139904166133760-139904174522367: ffff88807e785b60 [ 693.461966][ T8166] 139904174522368-139904176619519: ffff88807e785c40 [ 693.461990][ T8166] 139904176619520-139904178716671: ffff88807e785d20 [ 693.462012][ T8166] 139904178716672-139904180813823: ffff88807e785e00 [ 693.462033][ T8166] 139904180813824-139904182910975: ffff88807e785ee0 [ 693.462054][ T8166] 139904182910976-139904187105279: ffff8880770f5000 [ 693.462078][ T8166] 139904187105280-139904187252735: ffff8880770f50e0 [ 693.471438][ T8075] 0-536866815: [ 693.487071][ T8166] 139904187252736-139904187981823: