last executing test programs: 1.766538397s ago: executing program 0 (id=525): clone3(&(0x7f0000000000), 0x0) exit(0x0) 1.766381496s ago: executing program 0 (id=526): getdents(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.766293777s ago: executing program 0 (id=527): creat(&(0x7f0000000000), 0x0) 1.766215869s ago: executing program 0 (id=528): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access', 0x2, 0x0) 1.766104215s ago: executing program 0 (id=529): signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 1.766044317s ago: executing program 0 (id=530): msgrcv(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) 344.26692ms ago: executing program 2 (id=594): lchown(&(0x7f0000000000), 0x0, 0x0) 343.918048ms ago: executing program 2 (id=595): flistxattr(0xffffffffffffffff, &(0x7f0000000000), 0x0) 343.773144ms ago: executing program 2 (id=596): sched_setattr(0x0, &(0x7f0000000000), 0x0) 343.612418ms ago: executing program 2 (id=597): chmod(&(0x7f0000000000), 0x0) 235.785866ms ago: executing program 1 (id=603): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/socket/zygote', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/socket/zygote', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/socket/zygote', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/socket/zygote', 0x800, 0x0) 235.62777ms ago: executing program 1 (id=604): mq_notify(0xffffffffffffffff, &(0x7f0000000000)) 235.440978ms ago: executing program 1 (id=605): wait4(0x0, 0x0, 0x0, 0x0) 235.32165ms ago: executing program 1 (id=606): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice', 0x800, 0x0) 161.943429ms ago: executing program 1 (id=607): setresuid(0x0, 0x0, 0x0) 161.71421ms ago: executing program 1 (id=608): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun', 0x800, 0x0) 138.943217ms ago: executing program 2 (id=598): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=610): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:51614' (ED25519) to the list of known hosts. syzkaller login: [ 48.045750][ T5733] cgroup: Unknown subsys name 'net' [ 48.153367][ T5733] cgroup: Unknown subsys name 'cpuset' [ 48.157210][ T5733] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.397797][ T5733] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.695039][ T5951] mmap: syz.1.143 (5951) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.702017][ T5954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.558801][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.287160][ T6424] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.506542][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 58.599316][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.602251][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.604457][ T6437] bridge_slave_0: entered allmulticast mode [ 58.607230][ T6437] bridge_slave_0: entered promiscuous mode [ 58.619194][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.622109][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.624876][ T6437] bridge_slave_1: entered allmulticast mode [ 58.627823][ T6437] bridge_slave_1: entered promiscuous mode [ 58.656169][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.666142][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.687741][ T6448] ------------[ cut here ]------------ [ 58.690042][ T6448] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 58.695605][ T6448] WARNING: CPU: 1 PID: 6448 at mm/vmalloc.c:3938 vmalloc_fix_flags+0x9c/0xe0 [ 58.699152][ T6448] Modules linked in: [ 58.701391][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 58.705484][ T6448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 58.708995][ T6448] RIP: 0010:vmalloc_fix_flags+0x9c/0xe0 [ 58.710988][ T6448] Code: 81 e6 1f 52 ee ff 89 74 24 30 81 e3 e0 ad 11 00 89 5c 24 20 90 48 c7 c7 c0 b9 76 8b 4c 89 fa 89 d9 4d 89 f0 e8 65 2b 6e ff 90 <0f> 0b 90 90 8b 44 24 20 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 [ 58.716949][ T6448] RSP: 0018:ffffc9000700fb00 EFLAGS: 00010246 [ 58.719012][ T6448] RAX: 7a4c30e2b6d6e800 RBX: 0000000000000dc0 RCX: ffff88816a1c0000 [ 58.721690][ T6448] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 58.724642][ T6448] RBP: ffffc9000700fb98 R08: ffffc9000700f827 R09: 1ffff92000e01f04 [ 58.727131][ T6448] R10: dffffc0000000000 R11: fffff52000e01f05 R12: 1ffff92000e01f60 [ 58.729656][ T6448] R13: dffffc0000000000 R14: ffffc9000700fb20 R15: ffffc9000700fb30 [ 58.732174][ T6448] FS: 0000555565789500(0000) GS:ffff8882a9f36000(0000) knlGS:0000000000000000 [ 58.734907][ T6448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.736938][ T6448] CR2: 00007fddd9e5c470 CR3: 000000010d04e000 CR4: 00000000000006f0 [ 58.739658][ T6448] Call Trace: [ 58.740828][ T6448] [ 58.741792][ T6448] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 58.743510][ T6448] __vmalloc_noprof+0xf2/0x120 [ 58.745043][ T6448] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 58.746793][ T6448] bpf_prog_alloc+0x3c/0x1a0 [ 58.748319][ T6448] bpf_prog_create_from_user+0xa7/0x440 [ 58.750032][ T6448] ? __pfx_seccomp_check_filter+0x10/0x10 [ 58.751877][ T6448] do_seccomp+0x7b1/0xd90 [ 58.753243][ T6448] ? __pfx_do_seccomp+0x10/0x10 [ 58.754746][ T6448] ? lockdep_hardirqs_on+0x9c/0x150 [ 58.756367][ T6448] ? static_key_count+0x41/0x70 [ 58.757932][ T6448] ? security_task_prctl+0x163/0x190 [ 58.759976][ T6448] __se_sys_prctl+0xc3c/0x1830 [ 58.761683][ T6448] ? __pfx___se_sys_prctl+0x10/0x10 [ 58.763339][ T6448] ? do_syscall_64+0xbe/0xfa0 [ 58.764850][ T6448] ? __x64_sys_prctl+0x20/0xc0 [ 58.766359][ T6448] do_syscall_64+0xfa/0xfa0 [ 58.767756][ T6448] ? lockdep_hardirqs_on+0x9c/0x150 [ 58.769390][ T6448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.771323][ T6448] ? exc_page_fault+0xab/0x100 [ 58.772828][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.774655][ T6448] RIP: 0033:0x7fddd9f90b0d [ 58.776034][ T6448] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 18 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 58.782056][ T6448] RSP: 002b:00007ffe71382440 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 58.785939][ T6448] RAX: ffffffffffffffda RBX: 00007fddda02cf80 RCX: 00007fddd9f90b0d [ 58.788411][ T6448] RDX: 00007ffe713824a0 RSI: 0000000000000002 RDI: 0000000000000016 [ 58.790964][ T6448] RBP: 00007ffe713824b0 R08: 0000000000000006 R09: 0000000000000071 [ 58.793416][ T6448] R10: 0000000000000071 R11: 0000000000000246 R12: 000000000000006d [ 58.796480][ T6448] R13: 00007ffe713828d8 R14: 00007ffe71382b58 R15: 0000000000000000 [ 58.799641][ T6448] [ 58.800997][ T6448] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.803870][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 58.807591][ T6448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 58.811592][ T6448] Call Trace: [ 58.812940][ T6448] [ 58.814092][ T6448] dump_stack_lvl+0x99/0x250 [ 58.815520][ T6448] ? __asan_memcpy+0x40/0x70 [ 58.816962][ T6448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.818749][ T6448] ? __pfx__printk+0x10/0x10 [ 58.820297][ T6448] vpanic+0x237/0x6d0 [ 58.821560][ T6448] ? __pfx_vpanic+0x10/0x10 [ 58.822975][ T6448] panic+0xb9/0xc0 [ 58.824177][ T6448] ? __pfx_panic+0x10/0x10 [ 58.825574][ T6448] __warn+0x31b/0x4b0 [ 58.826813][ T6448] ? vmalloc_fix_flags+0x9c/0xe0 [ 58.828400][ T6448] ? vmalloc_fix_flags+0x9c/0xe0 [ 58.829926][ T6448] report_bug+0x2be/0x4f0 [ 58.831312][ T6448] ? vmalloc_fix_flags+0x9c/0xe0 [ 58.832836][ T6448] ? vmalloc_fix_flags+0x9c/0xe0 [ 58.834356][ T6448] ? vmalloc_fix_flags+0x9e/0xe0 [ 58.835876][ T6448] handle_bug+0x84/0x160 [ 58.837231][ T6448] exc_invalid_op+0x1a/0x50 [ 58.838639][ T6448] asm_exc_invalid_op+0x1a/0x20 [ 58.840144][ T6448] RIP: 0010:vmalloc_fix_flags+0x9c/0xe0 [ 58.841849][ T6448] Code: 81 e6 1f 52 ee ff 89 74 24 30 81 e3 e0 ad 11 00 89 5c 24 20 90 48 c7 c7 c0 b9 76 8b 4c 89 fa 89 d9 4d 89 f0 e8 65 2b 6e ff 90 <0f> 0b 90 90 8b 44 24 20 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 [ 58.847698][ T6448] RSP: 0018:ffffc9000700fb00 EFLAGS: 00010246 [ 58.849623][ T6448] RAX: 7a4c30e2b6d6e800 RBX: 0000000000000dc0 RCX: ffff88816a1c0000 [ 58.852168][ T6448] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 58.854871][ T6448] RBP: ffffc9000700fb98 R08: ffffc9000700f827 R09: 1ffff92000e01f04 [ 58.857943][ T6448] R10: dffffc0000000000 R11: fffff52000e01f05 R12: 1ffff92000e01f60 [ 58.860691][ T6448] R13: dffffc0000000000 R14: ffffc9000700fb20 R15: ffffc9000700fb30 [ 58.863128][ T6448] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 58.864953][ T6448] __vmalloc_noprof+0xf2/0x120 [ 58.866510][ T6448] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 58.868559][ T6448] bpf_prog_alloc+0x3c/0x1a0 [ 58.870020][ T6448] bpf_prog_create_from_user+0xa7/0x440 [ 58.871790][ T6448] ? __pfx_seccomp_check_filter+0x10/0x10 [ 58.873564][ T6448] do_seccomp+0x7b1/0xd90 [ 58.874942][ T6448] ? __pfx_do_seccomp+0x10/0x10 [ 58.876445][ T6448] ? lockdep_hardirqs_on+0x9c/0x150 [ 58.878046][ T6448] ? static_key_count+0x41/0x70 [ 58.879632][ T6448] ? security_task_prctl+0x163/0x190 [ 58.881342][ T6448] __se_sys_prctl+0xc3c/0x1830 [ 58.883194][ T6448] ? __pfx___se_sys_prctl+0x10/0x10 [ 58.885202][ T6448] ? do_syscall_64+0xbe/0xfa0 [ 58.887000][ T6448] ? __x64_sys_prctl+0x20/0xc0 [ 58.888864][ T6448] do_syscall_64+0xfa/0xfa0 [ 58.890636][ T6448] ? lockdep_hardirqs_on+0x9c/0x150 [ 58.892639][ T6448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.894960][ T6448] ? exc_page_fault+0xab/0x100 [ 58.896807][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.899088][ T6448] RIP: 0033:0x7fddd9f90b0d [ 58.900808][ T6448] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 18 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 58.907910][ T6448] RSP: 002b:00007ffe71382440 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 58.911094][ T6448] RAX: ffffffffffffffda RBX: 00007fddda02cf80 RCX: 00007fddd9f90b0d [ 58.914178][ T6448] RDX: 00007ffe713824a0 RSI: 0000000000000002 RDI: 0000000000000016 [ 58.917206][ T6448] RBP: 00007ffe713824b0 R08: 0000000000000006 R09: 0000000000000071 [ 58.919932][ T6448] R10: 0000000000000071 R11: 0000000000000246 R12: 000000000000006d [ 58.922931][ T6448] R13: 00007ffe713828d8 R14: 00007ffe71382b58 R15: 0000000000000000 [ 58.925955][ T6448] [ 58.927792][ T6448] Kernel Offset: disabled [ 58.929410][ T6448] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:37:32 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff8b3fb7f0 RBX=0000000000000002 RCX=ffff8881b9988000 RDX=0000000000000000 RSI=000000000000000d RDI=0000000000000002 RBP=0000000000000001 RSP=ffffc90003ca7758 R8 =ffff8881b9988000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff88816c4c8c00 R14=000000000000000d R15=0000000000000002 RIP=ffffffff81c01908 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88818eb36000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f07c0317d60 CR3=000000000dd38000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00007f07bf7b76c3 00007f07bf7b76c3 XMM01=2525252525252525 2525252525252525 XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000 XMM04=0000000000000000 0000000000ff0000 XMM05=000055558c6b9d5a 000055558c6b9d10 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000003880 XMM08=6265642f6c656e72 656b2f7300000006 XMM09=6220622030383864 3064393966666666 XMM10=685f656e6f626b63 61625f7664617461 XMM11=6b5f7373616c635f 6b636f6c5f687361 XMM12=5f626b7320622030 3464653064393966 XMM13=2e74696e695f6461 65685f6575657571 XMM14=3939666666666666 66660a79656b5f5f XMM15=6963685f69636e20 6220303664653064 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000700f2b0 R8 =ffff888169e18237 R9 =1ffff1102d3c3046 R10=dffffc0000000000 R11=ffffffff8515c270 R12=dffffc0000000000 R13=ffffffff997de90e R14=ffffffff99af1f20 R15=0000000000000000 RIP=ffffffff8515c2ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555565789500 ffffffff 00c00000 GS =0000 ffff8882a9f36000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fddd9e5c470 CR3=000000010d04e000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000000 0000000000006461 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=ffffffffffffffff ffffffffffff0000 XMM09=0000000000000021 0000000000007374 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000