last executing test programs: 1.258346829s ago: executing program 2 (id=146): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice', 0x800, 0x0) 1.208986677s ago: executing program 2 (id=150): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu', 0x800, 0x0) 1.208520601s ago: executing program 2 (id=152): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/i915', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/i915', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/i915', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/i915', 0x800, 0x0) 1.208264325s ago: executing program 2 (id=153): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current', 0x2, 0x0) 1.208114521s ago: executing program 2 (id=154): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ptrace', 0x2, 0x0) 1.207991379s ago: executing program 2 (id=155): pause() 616.6893ms ago: executing program 1 (id=225): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun', 0x800, 0x0) 616.589455ms ago: executing program 0 (id=226): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create', 0x2, 0x0) 616.522521ms ago: executing program 1 (id=227): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 616.449758ms ago: executing program 0 (id=228): socket$nl_netfilter(0x10, 0x3, 0xc) 552.001222ms ago: executing program 1 (id=229): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 551.825961ms ago: executing program 0 (id=230): get_mempolicy(&(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x0) 551.711427ms ago: executing program 1 (id=231): uname(&(0x7f0000000000)) 551.526679ms ago: executing program 0 (id=232): socket$nl_sock_diag(0x10, 0x3, 0x4) 551.443716ms ago: executing program 1 (id=233): socket$inet_udplite(0x2, 0x2, 0x88) 551.245057ms ago: executing program 0 (id=234): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nmem0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nmem0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nmem0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nmem0', 0x800, 0x0) 11.35775ms ago: executing program 0 (id=235): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=236): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:55784' (ED25519) to the list of known hosts. syzkaller login: [ 56.323107][ T5794] cgroup: Unknown subsys name 'net' [ 56.485376][ T5794] cgroup: Unknown subsys name 'cpuset' [ 56.490914][ T5794] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.000343][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.120690][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.230831][ T6066] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.235304][ T6066] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.241740][ T6066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.252731][ T6066] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.256538][ T6066] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.583932][ T6064] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.956191][ T6079] ------------[ cut here ]------------ [ 64.958479][ T6079] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 64.972582][ T6079] WARNING: mm/vmalloc.c:3938 at vmalloc_fix_flags+0x9c/0xe0, CPU#1: syz-executor/6079 [ 64.976292][ T6079] Modules linked in: [ 64.978123][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 64.982025][ T6079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 64.985453][ T6079] RIP: 0010:vmalloc_fix_flags+0x9c/0xe0 [ 64.987794][ T6079] Code: 81 e6 1f 52 ee ff 89 74 24 30 81 e3 e0 ad 11 00 89 5c 24 20 90 48 c7 c7 40 c3 76 8b 4c 89 fa 89 d9 4d 89 f0 e8 a5 a1 6c ff 90 <0f> 0b 90 90 8b 44 24 20 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 [ 64.995211][ T6079] RSP: 0018:ffffc90005557b00 EFLAGS: 00010246 [ 64.997692][ T6079] RAX: a6bff5ae8e950700 RBX: 0000000000000dc0 RCX: ffff888173b29d40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.000956][ T6079] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 65.004521][ T6079] RBP: ffffc90005557b98 R08: 0000000000000003 R09: 0000000000000004 [ 65.007901][ T6079] R10: dffffc0000000000 R11: fffffbfff1bba6ec R12: 1ffff92000aaaf60 [ 65.010935][ T6079] R13: dffffc0000000000 R14: ffffc90005557b20 R15: ffffc90005557b30 [ 65.014297][ T6079] FS: 000055557c070500(0000) GS:ffff8882a9ec0000(0000) knlGS:0000000000000000 [ 65.017898][ T6079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.020587][ T6079] CR2: 00007f86f6df0000 CR3: 0000000113d64000 CR4: 00000000000006f0 [ 65.024078][ T6079] Call Trace: [ 65.025501][ T6079] [ 65.026749][ T6079] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 65.029009][ T6079] __vmalloc_noprof+0xf2/0x120 [ 65.030973][ T6079] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 65.033453][ T6079] bpf_prog_alloc+0x3c/0x1a0 [ 65.035385][ T6079] bpf_prog_create_from_user+0xa7/0x440 [ 65.037709][ T6079] ? __pfx_seccomp_check_filter+0x10/0x10 [ 65.040064][ T6079] do_seccomp+0x7b1/0xd90 [ 65.042012][ T6079] ? __pfx_do_seccomp+0x10/0x10 [ 65.044019][ T6079] ? lockdep_hardirqs_on+0x9c/0x150 [ 65.046180][ T6079] ? static_key_count+0x41/0x70 [ 65.048145][ T6079] ? security_task_prctl+0x163/0x190 [ 65.050361][ T6079] __se_sys_prctl+0xc3c/0x1830 [ 65.052271][ T6079] ? __pfx___se_sys_prctl+0x10/0x10 [ 65.054368][ T6079] ? do_syscall_64+0xbe/0xfa0 [ 65.056102][ T6079] ? __x64_sys_prctl+0x20/0xc0 [ 65.057811][ T6079] do_syscall_64+0xfa/0xfa0 [ 65.059484][ T6079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.061528][ T6079] ? exc_page_fault+0xab/0x100 [ 65.063317][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.065448][ T6079] RIP: 0033:0x7fcbe2f90b0d [ 65.067071][ T6079] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 18 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 65.073271][ T6079] RSP: 002b:00007ffed4000b80 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 65.075869][ T6079] RAX: ffffffffffffffda RBX: 00007fcbe302cf80 RCX: 00007fcbe2f90b0d [ 65.078317][ T6079] RDX: 00007ffed4000be0 RSI: 0000000000000002 RDI: 0000000000000016 [ 65.080814][ T6079] RBP: 00007ffed4000bf0 R08: 0000000000000006 R09: 0000000000000071 [ 65.083505][ T6079] R10: 0000000000000071 R11: 0000000000000246 R12: 000000000000006d [ 65.086105][ T6079] R13: 00007ffed4001018 R14: 00007ffed4001298 R15: 0000000000000000 [ 65.088564][ T6079] [ 65.089543][ T6079] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.091886][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 65.094790][ T6079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 65.097901][ T6079] Call Trace: [ 65.098963][ T6079] [ 65.099894][ T6079] dump_stack_lvl+0x99/0x250 [ 65.101352][ T6079] ? __asan_memcpy+0x40/0x70 [ 65.102835][ T6079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.104462][ T6079] ? __pfx__printk+0x10/0x10 [ 65.105919][ T6079] vpanic+0x237/0x6d0 [ 65.107163][ T6079] ? __pfx_vpanic+0x10/0x10 [ 65.108593][ T6079] ? is_bpf_text_address+0x292/0x2b0 [ 65.110410][ T6079] ? is_bpf_text_address+0x26/0x2b0 [ 65.112119][ T6079] panic+0xb9/0xc0 [ 65.113311][ T6079] ? __pfx_panic+0x10/0x10 [ 65.114721][ T6079] __warn+0x318/0x4d0 [ 65.116102][ T6079] ? vmalloc_fix_flags+0x9c/0xe0 [ 65.117683][ T6079] ? vmalloc_fix_flags+0x9c/0xe0 [ 65.119262][ T6079] report_bug+0x2be/0x4f0 [ 65.120605][ T6079] ? vmalloc_fix_flags+0x9c/0xe0 [ 65.122178][ T6079] ? vmalloc_fix_flags+0x9c/0xe0 [ 65.123718][ T6079] ? vmalloc_fix_flags+0x9e/0xe0 [ 65.125272][ T6079] handle_bug+0x84/0x160 [ 65.126627][ T6079] exc_invalid_op+0x1a/0x50 [ 65.128053][ T6079] asm_exc_invalid_op+0x1a/0x20 [ 65.129582][ T6079] RIP: 0010:vmalloc_fix_flags+0x9c/0xe0 [ 65.131318][ T6079] Code: 81 e6 1f 52 ee ff 89 74 24 30 81 e3 e0 ad 11 00 89 5c 24 20 90 48 c7 c7 40 c3 76 8b 4c 89 fa 89 d9 4d 89 f0 e8 a5 a1 6c ff 90 <0f> 0b 90 90 8b 44 24 20 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 [ 65.137226][ T6079] RSP: 0018:ffffc90005557b00 EFLAGS: 00010246 [ 65.139114][ T6079] RAX: a6bff5ae8e950700 RBX: 0000000000000dc0 RCX: ffff888173b29d40 [ 65.141544][ T6079] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 65.143920][ T6079] RBP: ffffc90005557b98 R08: 0000000000000003 R09: 0000000000000004 [ 65.146383][ T6079] R10: dffffc0000000000 R11: fffffbfff1bba6ec R12: 1ffff92000aaaf60 [ 65.148832][ T6079] R13: dffffc0000000000 R14: ffffc90005557b20 R15: ffffc90005557b30 [ 65.151285][ T6079] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 65.153017][ T6079] __vmalloc_noprof+0xf2/0x120 [ 65.154527][ T6079] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 65.156208][ T6079] bpf_prog_alloc+0x3c/0x1a0 [ 65.157672][ T6079] bpf_prog_create_from_user+0xa7/0x440 [ 65.159406][ T6079] ? __pfx_seccomp_check_filter+0x10/0x10 [ 65.161170][ T6079] do_seccomp+0x7b1/0xd90 [ 65.162574][ T6079] ? __pfx_do_seccomp+0x10/0x10 [ 65.164092][ T6079] ? lockdep_hardirqs_on+0x9c/0x150 [ 65.165716][ T6079] ? static_key_count+0x41/0x70 [ 65.167262][ T6079] ? security_task_prctl+0x163/0x190 [ 65.168913][ T6079] __se_sys_prctl+0xc3c/0x1830 [ 65.170400][ T6079] ? __pfx___se_sys_prctl+0x10/0x10 [ 65.172053][ T6079] ? do_syscall_64+0xbe/0xfa0 [ 65.173552][ T6079] ? __x64_sys_prctl+0x20/0xc0 [ 65.175047][ T6079] do_syscall_64+0xfa/0xfa0 [ 65.176477][ T6079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.178478][ T6079] ? exc_page_fault+0xab/0x100 [ 65.180036][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.181936][ T6079] RIP: 0033:0x7fcbe2f90b0d [ 65.183335][ T6079] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 18 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 65.189261][ T6079] RSP: 002b:00007ffed4000b80 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 65.191923][ T6079] RAX: ffffffffffffffda RBX: 00007fcbe302cf80 RCX: 00007fcbe2f90b0d [ 65.194737][ T6079] RDX: 00007ffed4000be0 RSI: 0000000000000002 RDI: 0000000000000016 [ 65.197573][ T6079] RBP: 00007ffed4000bf0 R08: 0000000000000006 R09: 0000000000000071 [ 65.200376][ T6079] R10: 0000000000000071 R11: 0000000000000246 R12: 000000000000006d [ 65.203218][ T6079] R13: 00007ffed4001018 R14: 00007ffed4001298 R15: 0000000000000000 [ 65.206057][ T6079] [ 65.207884][ T6079] Kernel Offset: disabled [ 65.209348][ T6079] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:43:34 Registers: info registers vcpu 0 CPU#0 RAX=525fb83a1179e300 RBX=ffffffff81972ec7 RCX=525fb83a1179e300 RDX=0000000000000001 RSI=ffffffff8d78c38b RDI=ffffffff8bbf6160 RBP=ffffffff8dc07ea8 RSP=ffffffff8dc07d80 R8 =ffff88812103319b R9 =1ffff11024206633 R10=dffffc0000000000 R11=ffffed1024206634 R12=ffffffff8f7def70 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1b92a60 RIP=ffffffff8b5a5d43 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88818e8c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa9d25aa3d0 CR3=000000016bf9c000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=ffffffffffffffff ffff000000ffff00 XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900055572b0 R8 =ffff888169fe8237 R9 =1ffff1102d3fd046 R10=dffffc0000000000 R11=ffffffff851ba830 R12=dffffc0000000000 R13=ffffffff9985495d R14=ffffffff99b682e0 R15=0000000000000000 RIP=ffffffff851ba8ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557c070500 ffffffff 00c00000 GS =0000 ffff8882a9ec0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f86f6df0000 CR3=0000000113d64000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=0000000000000000 0000000000000000 XMM03=0000ff0000000000 0000000000000000 XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000