Warning: Permanently added '10.128.1.2' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 68.610644][ T4998] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4998 'syz-executor336' [ 68.624045][ T5004] Zero length message leads to an empty skb [ 68.638950][ T4999] loop5: detected capacity change from 0 to 128 [ 68.638964][ T5001] loop0: detected capacity change from 0 to 128 [ 68.650832][ T4998] loop4: detected capacity change from 0 to 128 executing program [ 68.660145][ T5000] loop1: detected capacity change from 0 to 128 [ 68.663362][ T5010] loop3: detected capacity change from 0 to 128 [ 68.678100][ T5015] loop2: detected capacity change from 0 to 128 executing program executing program executing program executing program executing program [ 68.731012][ T5025] loop0: detected capacity change from 0 to 128 [ 68.740025][ T5023] loop5: detected capacity change from 0 to 128 [ 68.766644][ T5026] loop4: detected capacity change from 0 to 128 [ 68.773630][ T5035] loop1: detected capacity change from 0 to 128 executing program [ 68.782254][ T5037] loop3: detected capacity change from 0 to 128 [ 68.793437][ T5041] loop2: detected capacity change from 0 to 128 executing program executing program executing program executing program executing program [ 68.830434][ T5045] loop5: detected capacity change from 0 to 128 [ 68.855241][ T5050] loop0: detected capacity change from 0 to 128 [ 68.864654][ T5054] loop1: detected capacity change from 0 to 128 executing program [ 68.883110][ T5058] loop4: detected capacity change from 0 to 128 [ 68.885573][ T5059] loop2: detected capacity change from 0 to 128 [ 68.889844][ T5060] loop3: detected capacity change from 0 to 128 executing program executing program executing program executing program executing program executing program [ 68.926183][ T5069] loop5: detected capacity change from 0 to 128 [ 68.986223][ T5077] loop2: detected capacity change from 0 to 128 [ 68.995246][ T5080] loop4: detected capacity change from 0 to 128 [ 69.001053][ T5079] loop3: detected capacity change from 0 to 128 [ 69.012157][ T5085] loop0: detected capacity change from 0 to 128 [ 69.012991][ T5086] loop1: detected capacity change from 0 to 128 executing program executing program [ 69.031272][ T5091] loop5: detected capacity change from 0 to 128 executing program executing program executing program executing program [ 69.088598][ T5100] loop2: detected capacity change from 0 to 128 [ 69.099871][ T5097] loop4: detected capacity change from 0 to 128 [ 69.115589][ T5108] loop1: detected capacity change from 0 to 128 [ 69.131860][ T5110] loop0: detected capacity change from 0 to 128 executing program [ 69.136076][ T5113] loop3: detected capacity change from 0 to 128 [ 69.142736][ T5115] loop5: detected capacity change from 0 to 128 executing program executing program executing program executing program executing program [ 69.229125][ T5121] loop4: detected capacity change from 0 to 128 [ 69.243031][ T5128] loop3: detected capacity change from 0 to 128 [ 69.257781][ T5131] loop0: detected capacity change from 0 to 128 [ 69.258807][ T5135] loop5: detected capacity change from 0 to 128 [ 69.271829][ T5133] loop2: detected capacity change from 0 to 128 executing program executing program [ 69.290169][ T5137] loop1: detected capacity change from 0 to 128 executing program executing program executing program executing program [ 69.344652][ T5145] loop5: detected capacity change from 0 to 128 [ 69.371865][ T5150] loop3: detected capacity change from 0 to 128 [ 69.375633][ T5157] loop1: detected capacity change from 0 to 128 [ 69.386774][ T5155] loop0: detected capacity change from 0 to 128 executing program [ 69.387350][ T5158] loop4: detected capacity change from 0 to 128 [ 69.393599][ T5156] loop2: detected capacity change from 0 to 128 executing program executing program executing program [ 69.441120][ T5169] loop5: detected capacity change from 0 to 128 executing program executing program executing program executing program [ 69.481390][ T5176] loop4: detected capacity change from 0 to 128 [ 69.483407][ T5174] loop1: detected capacity change from 0 to 128 [ 69.511646][ T5182] loop3: detected capacity change from 0 to 128 [ 69.519117][ T5183] loop0: detected capacity change from 0 to 128 executing program executing program [ 69.546348][ T5189] loop2: detected capacity change from 0 to 128 [ 69.561894][ T5192] loop5: detected capacity change from 0 to 128 [ 69.578549][ T5198] loop4: detected capacity change from 0 to 128 executing program executing program executing program executing program [ 69.598047][ T5200] loop1: detected capacity change from 0 to 128 [ 69.606270][ T5207] loop3: detected capacity change from 0 to 128 [ 69.617965][ T5210] loop0: detected capacity change from 0 to 128 [ 69.632376][ T5212] loop2: detected capacity change from 0 to 128 executing program executing program executing program executing program [ 69.670079][ T5218] loop4: detected capacity change from 0 to 128 [ 69.699745][ T5220] loop5: detected capacity change from 0 to 128 [ 69.700669][ T5225] loop3: detected capacity change from 0 to 128 [ 69.725862][ T5231] loop0: detected capacity change from 0 to 128 [ 69.735994][ T5230] BUG at mas_validate_gaps:7001 (1) [ 69.736715][ T5232] loop2: detected capacity change from 0 to 128 [ 69.741336][ T5230] maple_tree(ffff888015f94c40) flags 30B, height 2 root ffff888022fb4e1e [ 69.741363][ T5230] 0-ffffffffffffffff: node ffff888022fb4e00 depth 0 type 3 parent ffff888015f94c41 contents: 93824448974848 18446603337200619520 0 0 0 0 0 0 0 0 | 01 01| ffff888028841c0c 140227894280191 ffff888022fb500c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 69.844540][ T5230] 0-7f8959d37fff: node ffff888028841c00 depth 1 type 1 parent ffff888022fb4e06 contents: 0000000000000000 1FFFEFFF ffff88807d3b9600 1FFFFFFF ffff88807d3b9700 20FFFFFF ffff88807d3b9800 21000FFF 0000000000000000 555555F3DFFF ffff88807d3b9900 555555F5FFFF 0000000000000000 7F8951925FFF ffff88801fc72900 7F8951926FFF ffff88801fc72700 7F8959D36FFF ffff88801fc72600 7F8959D37FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000009 [ 69.893326][ T5230] 0-1fffefff: 0000000000000000 [ 69.899235][ T5230] 1ffff000-1fffffff: ffff88807d3b9600 [ 69.905754][ T5230] 20000000-20ffffff: ffff88807d3b9700 [ 69.911966][ T5230] 21000000-21000fff: ffff88807d3b9800 [ 69.918556][ T5230] 21001000-555555f3dfff: 0000000000000000 [ 69.925378][ T5230] 555555f3e000-555555f5ffff: ffff88807d3b9900 [ 69.932717][ T5230] 555555f60000-7f8951925fff: 0000000000000000 [ 69.939970][ T5230] 7f8951926000-7f8951926fff: ffff88801fc72900 [ 69.947190][ T5230] 7f8951927000-7f8959d36fff: ffff88801fc72700 [ 69.954307][ T5230] 7f8959d37000-7f8959d37fff: ffff88801fc72600 [ 69.961167][ T5230] 7f8959d38000-ffffffffffffffff: node ffff888022fb5000 depth 1 type 1 parent ffff888022fb4e0e contents: ffff88801fc72100 7F8959D57FFF ffff88801fc72500 7F8959D58FFF ffff888028133e00 7F8959D78FFF ffff88807d3b9a00 7F8959D81FFF ffff88807d3b9b00 7F8959E1CFFF ffff88807d3b9c00 7F8959E49FFF ffff88807d3b9d00 7F8959E4DFFF ffff88807d3b9e00 7F8959E50FFF ffff88807d3b9f00 7F8959E56FFF 0000000000000000 7FFFC583AFFF ffff888076c4e000 7FFFC585BFFF 0000000000000000 7FFFC59ECFFF ffff888076c4e100 7FFFC59F0FFF ffff888076c4e200 7FFFC59F2FFF 0000000000000000 FFFFFFFFFFFFFFFF 000000000000000e [ 70.014608][ T5230] 7f8959d38000-7f8959d57fff: ffff88801fc72100 [ 70.021541][ T5230] 7f8959d58000-7f8959d58fff: ffff88801fc72500 [ 70.028799][ T5230] 7f8959d59000-7f8959d78fff: ffff888028133e00 [ 70.036366][ T5230] 7f8959d79000-7f8959d81fff: ffff88807d3b9a00 [ 70.043718][ T5230] 7f8959d82000-7f8959e1cfff: ffff88807d3b9b00 [ 70.050917][ T5230] 7f8959e1d000-7f8959e49fff: ffff88807d3b9c00 [ 70.058835][ T5230] 7f8959e4a000-7f8959e4dfff: ffff88807d3b9d00 [ 70.066320][ T5230] 7f8959e4e000-7f8959e50fff: ffff88807d3b9e00 [ 70.073181][ T5230] 7f8959e51000-7f8959e56fff: ffff88807d3b9f00 [ 70.080394][ T5230] 7f8959e57000-7fffc583afff: 0000000000000000 [ 70.087523][ T5230] 7fffc583b000-7fffc585bfff: ffff888076c4e000 [ 70.094656][ T5230] 7fffc585c000-7fffc59ecfff: 0000000000000000 [ 70.101497][ T5230] 7fffc59ed000-7fffc59f0fff: ffff888076c4e100 [ 70.109015][ T5230] 7fffc59f1000-7fffc59f2fff: ffff888076c4e200 [ 70.116137][ T5230] 7fffc59f3000-ffffffffffffffff: 0000000000000000 [ 70.123298][ T5230] Pass: 6000657 Run:6000658 [ 70.128538][ T5230] CPU: 1 PID: 5230 Comm: syz-executor336 Not tainted 6.4.0-syzkaller-10173-ga901a3568fd2 #0 [ 70.138655][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 70.148759][ T5230] Call Trace: [ 70.152075][ T5230] [ 70.155056][ T5230] dump_stack_lvl+0x1e7/0x2d0 [ 70.159786][ T5230] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.165299][ T5230] ? panic+0x770/0x770 [ 70.169437][ T5230] mt_validate+0x47c5/0x5ca0 [ 70.174097][ T5230] ? mt_dump_node+0x1920/0x1920 [ 70.178998][ T5230] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 70.184945][ T5230] ? lockdep_hardirqs_on+0x98/0x140 [ 70.190199][ T5230] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 70.196160][ T5230] ? wake_up_q+0xa3/0xe0 [ 70.200457][ T5230] validate_mm+0xe7/0x500 [ 70.204849][ T5230] ? vma_complete+0xb40/0xb40 [ 70.209583][ T5230] ? __up_read+0x2bd/0x690 [ 70.214062][ T5230] do_vmi_align_munmap+0x13b1/0x15c0 [ 70.219426][ T5230] ? do_vmi_munmap+0x2d0/0x2d0 [ 70.224296][ T5230] ? mas_find+0x573/0x5c0 [ 70.228694][ T5230] do_vmi_munmap+0x24d/0x2d0 [ 70.233358][ T5230] __vm_munmap+0x230/0x450 [ 70.237846][ T5230] ? vm_munmap+0x20/0x20 [ 70.242150][ T5230] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 70.248198][ T5230] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.254237][ T5230] ? lockdep_hardirqs_on+0x98/0x140 [ 70.259494][ T5230] __x64_sys_munmap+0x69/0x80 [ 70.264244][ T5230] do_syscall_64+0x41/0xc0 [ 70.268722][ T5230] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.274678][ T5230] RIP: 0033:0x7f8959dcc097 [ 70.279148][ T5230] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.298801][ T5230] RSP: 002b:00007f8959d78168 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 70.307444][ T5230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8959dcc097 [ 70.315459][ T5230] RDX: 0000000000010000 RSI: 0000000000010000 RDI: 00007f8951937000 [ 70.323481][ T5230] RBP: 00007f8951937000 R08: 0000000000000000 R09: 000000000000028b [ 70.331682][ T5230] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f8959d786b8 [ 70.339704][ T5230] R13: 00007f8959d78180 R14: 00007f8959d781c0 R15: 0030656c69662f2e [ 70.347742][ T5230] [ 70.365973][ T5230] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 70.377744][ T5230] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 70.386189][ T5230] CPU: 1 PID: 5230 Comm: syz-executor336 Not tainted 6.4.0-syzkaller-10173-ga901a3568fd2 #0 [ 70.396288][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 70.406374][ T5230] RIP: 0010:mt_validate+0x4117/0x5ca0 [ 70.411795][ T5230] Code: 5f 11 db f6 4d 8d a7 a0 00 00 00 31 db 44 89 f0 48 89 44 24 38 48 8d 1c c3 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 fb c0 33 f7 48 8b 1b 48 89 df 4c 8b [ 70.431440][ T5230] RSP: 0018:ffffc900043cf7a0 EFLAGS: 00010246 [ 70.437546][ T5230] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 70.445573][ T5230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 70.453580][ T5230] RBP: ffffc900043cf990 R08: ffffffff8ab0e019 R09: 1ffffffff1d2f9d5 [ 70.461603][ T5230] R10: dffffc0000000000 R11: fffffbfff1d2f9d6 R12: ffff888027ddf6a0 [ 70.469623][ T5230] R13: ffff888027ddf600 R14: 0000000000000000 R15: ffff888027ddf600 [ 70.477640][ T5230] FS: 00007f8959d78700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 70.486597][ T5230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.493190][ T5230] CR2: 00007f0aae94e095 CR3: 0000000076c47000 CR4: 00000000003506e0 [ 70.501171][ T5230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.509160][ T5230] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.517137][ T5230] Call Trace: [ 70.520420][ T5230] [ 70.523354][ T5230] ? __die_body+0x5e/0xa0 [ 70.527699][ T5230] ? die_addr+0x99/0xc0 [ 70.531866][ T5230] ? exc_general_protection+0x3c2/0x5b0 [ 70.537435][ T5230] ? asm_exc_general_protection+0x26/0x30 [ 70.543162][ T5230] ? mt_validate+0x4079/0x5ca0 [ 70.547939][ T5230] ? mt_validate+0x4117/0x5ca0 [ 70.552721][ T5230] ? mt_dump_node+0x1920/0x1920 [ 70.557579][ T5230] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 70.563487][ T5230] ? lockdep_hardirqs_on+0x98/0x140 [ 70.568730][ T5230] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 70.574672][ T5230] ? wake_up_q+0xa3/0xe0 [ 70.578957][ T5230] validate_mm+0xe7/0x500 [ 70.583318][ T5230] ? vma_complete+0xb40/0xb40 [ 70.588013][ T5230] ? __up_read+0x2bd/0x690 [ 70.592443][ T5230] do_vmi_align_munmap+0x13b1/0x15c0 [ 70.597752][ T5230] ? do_vmi_munmap+0x2d0/0x2d0 [ 70.602542][ T5230] ? mas_find+0x573/0x5c0 [ 70.606884][ T5230] do_vmi_munmap+0x24d/0x2d0 [ 70.611490][ T5230] __vm_munmap+0x230/0x450 [ 70.615924][ T5230] ? vm_munmap+0x20/0x20 [ 70.620181][ T5230] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 70.626179][ T5230] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.632171][ T5230] ? lockdep_hardirqs_on+0x98/0x140 [ 70.637382][ T5230] __x64_sys_munmap+0x69/0x80 [ 70.642077][ T5230] do_syscall_64+0x41/0xc0 [ 70.646503][ T5230] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.652414][ T5230] RIP: 0033:0x7f8959dcc097 [ 70.656832][ T5230] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.676458][ T5230] RSP: 002b:00007f8959d78168 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 70.684886][ T5230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8959dcc097 [ 70.692865][ T5230] RDX: 0000000000010000 RSI: 0000000000010000 RDI: 00007f8951937000 [ 70.700866][ T5230] RBP: 00007f8951937000 R08: 0000000000000000 R09: 000000000000028b [ 70.708857][ T5230] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f8959d786b8 [ 70.716839][ T5230] R13: 00007f8959d78180 R14: 00007f8959d781c0 R15: 0030656c69662f2e [ 70.724828][ T5230] [ 70.727851][ T5230] Modules linked in: [ 70.731961][ T5230] ---[ end trace 0000000000000000 ]--- [ 70.737602][ T5230] RIP: 0010:mt_validate+0x4117/0x5ca0 [ 70.743386][ T5230] Code: 5f 11 db f6 4d 8d a7 a0 00 00 00 31 db 44 89 f0 48 89 44 24 38 48 8d 1c c3 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 fb c0 33 f7 48 8b 1b 48 89 df 4c 8b [ 70.763227][ T5230] RSP: 0018:ffffc900043cf7a0 EFLAGS: 00010246 [ 70.769595][ T5230] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 70.777743][ T5230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 70.785794][ T5230] RBP: ffffc900043cf990 R08: ffffffff8ab0e019 R09: 1ffffffff1d2f9d5 [ 70.793832][ T5230] R10: dffffc0000000000 R11: fffffbfff1d2f9d6 R12: ffff888027ddf6a0 [ 70.801843][ T5230] R13: ffff888027ddf600 R14: 0000000000000000 R15: ffff888027ddf600 [ 70.809861][ T5230] FS: 00007f8959d78700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 70.818845][ T5230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.826008][ T5230] CR2: 00007f0aae94e095 CR3: 0000000076c47000 CR4: 00000000003506f0 [ 70.834073][ T5230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.842153][ T5230] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.850314][ T5230] Kernel panic - not syncing: Fatal exception [ 70.856727][ T5230] Kernel Offset: disabled [ 70.861055][ T5230] Rebooting in 86400 seconds..