last executing test programs: 665.787426ms ago: executing program 2 (id=177): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/target_ids', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/target_ids', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/target_ids', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/target_ids', 0x800, 0x0) 606.333047ms ago: executing program 0 (id=179): mq_unlink(&(0x7f0000000000)) 605.940767ms ago: executing program 1 (id=180): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log', 0x0, 0x0) 605.66286ms ago: executing program 2 (id=181): fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)) 605.37334ms ago: executing program 0 (id=182): pselect6(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) 605.313596ms ago: executing program 1 (id=183): semop(0x0, &(0x7f0000000000), 0x0) 593.094804ms ago: executing program 1 (id=184): munmap(0x0, 0x0) 592.885672ms ago: executing program 2 (id=185): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 592.791397ms ago: executing program 0 (id=186): statx(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)) 536.579229ms ago: executing program 2 (id=187): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user', 0x2, 0x0) 536.416525ms ago: executing program 1 (id=188): socket$can_bcm(0x1d, 0x2, 0x2) 536.311447ms ago: executing program 0 (id=189): io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) 536.213501ms ago: executing program 0 (id=190): syz_init_net_socket$x25(0x9, 0x5, 0x0) 536.132751ms ago: executing program 1 (id=191): chroot(&(0x7f0000000000)) 535.976295ms ago: executing program 2 (id=192): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create', 0x2, 0x0) 118.552607ms ago: executing program 1 (id=194): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 102.729063ms ago: executing program 2 (id=195): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=193): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:65164' (ED25519) to the list of known hosts. syzkaller login: [ 58.222181][ T5799] cgroup: Unknown subsys name 'net' [ 58.352325][ T5799] cgroup: Unknown subsys name 'cpuset' [ 58.358193][ T5799] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.313018][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.320347][ T5951] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.209919][ T6019] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.632989][ T6030] ------------[ cut here ]------------ [ 67.634697][ T6030] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 67.654310][ T6030] WARNING: CPU: 1 PID: 6030 at mm/vmalloc.c:3938 vmalloc_fix_flags+0x9c/0xe0 [ 67.656972][ T6030] Modules linked in: [ 67.658929][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 67.663349][ T6030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 67.666809][ T6030] RIP: 0010:vmalloc_fix_flags+0x9c/0xe0 [ 67.668552][ T6030] Code: 81 e6 1f 52 ee ff 89 74 24 30 81 e3 e0 ad 11 00 89 5c 24 20 90 48 c7 c7 c0 b9 76 8b 4c 89 fa 89 d9 4d 89 f0 e8 35 2b 6e ff 90 <0f> 0b 90 90 8b 44 24 20 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 [ 67.674707][ T6030] RSP: 0018:ffffc9000410fb00 EFLAGS: 00010246 [ 67.676998][ T6030] RAX: d1ff9ff165489d00 RBX: 0000000000000dc0 RCX: ffff888176319d00 [ 67.679686][ T6030] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 67.682461][ T6030] RBP: ffffc9000410fb98 R08: 0000000000000003 R09: 0000000000000004 [ 67.685347][ T6030] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: 1ffff92000821f60 [ 67.688368][ T6030] R13: dffffc0000000000 R14: ffffc9000410fb20 R15: ffffc9000410fb30 [ 67.691205][ T6030] FS: 00005555625f2500(0000) GS:ffff8882a9f36000(0000) knlGS:0000000000000000 [ 67.694324][ T6030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.696456][ T6030] CR2: 00007f49adc5c470 CR3: 0000000115d48000 CR4: 00000000000006f0 [ 67.699483][ T6030] Call Trace: [ 67.700562][ T6030] [ 67.701546][ T6030] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 67.703159][ T6030] __vmalloc_noprof+0xf2/0x120 [ 67.704593][ T6030] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 67.706180][ T6030] bpf_prog_alloc+0x3c/0x1a0 [ 67.707722][ T6030] bpf_prog_create_from_user+0xa7/0x440 [ 67.709631][ T6030] ? __pfx_seccomp_check_filter+0x10/0x10 [ 67.711455][ T6030] do_seccomp+0x7b1/0xd90 [ 67.712890][ T6030] ? __pfx_do_seccomp+0x10/0x10 [ 67.714563][ T6030] ? lockdep_hardirqs_on+0x9c/0x150 [ 67.716096][ T6030] ? static_key_count+0x41/0x70 [ 67.717844][ T6030] ? security_task_prctl+0x163/0x190 [ 67.719498][ T6030] __se_sys_prctl+0xc3c/0x1830 [ 67.721022][ T6030] ? __pfx___se_sys_prctl+0x10/0x10 [ 67.722733][ T6030] ? do_syscall_64+0xbe/0xfa0 [ 67.724111][ T6030] ? __x64_sys_prctl+0x20/0xc0 [ 67.725529][ T6030] do_syscall_64+0xfa/0xfa0 [ 67.726911][ T6030] ? lockdep_hardirqs_on+0x9c/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 67.728605][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.730872][ T6030] ? exc_page_fault+0xab/0x100 [ 67.732439][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.734390][ T6030] RIP: 0033:0x7f2180390b0d [ 67.735869][ T6030] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 18 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 67.742752][ T6030] RSP: 002b:00007ffc336f7f90 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 67.745324][ T6030] RAX: ffffffffffffffda RBX: 00007f218042cf80 RCX: 00007f2180390b0d [ 67.747843][ T6030] RDX: 00007ffc336f7ff0 RSI: 0000000000000002 RDI: 0000000000000016 [ 67.750176][ T6030] RBP: 00007ffc336f8000 R08: 0000000000000006 R09: 0000000000000071 [ 67.752527][ T6030] R10: 0000000000000071 R11: 0000000000000246 R12: 000000000000006d [ 67.755173][ T6030] R13: 00007ffc336f8428 R14: 00007ffc336f86a8 R15: 0000000000000000 [ 67.757664][ T6030] [ 67.758641][ T6030] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.760770][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 67.763706][ T6030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 67.767712][ T6030] Call Trace: [ 67.768830][ T6030] [ 67.769737][ T6030] dump_stack_lvl+0x99/0x250 [ 67.771230][ T6030] ? __asan_memcpy+0x40/0x70 [ 67.772940][ T6030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.774904][ T6030] ? __pfx__printk+0x10/0x10 [ 67.776679][ T6030] vpanic+0x237/0x6d0 [ 67.778196][ T6030] ? __pfx_vpanic+0x10/0x10 [ 67.779940][ T6030] panic+0xb9/0xc0 [ 67.781385][ T6030] ? __pfx_panic+0x10/0x10 [ 67.783064][ T6030] __warn+0x31b/0x4b0 [ 67.784599][ T6030] ? vmalloc_fix_flags+0x9c/0xe0 [ 67.786478][ T6030] ? vmalloc_fix_flags+0x9c/0xe0 [ 67.788354][ T6030] report_bug+0x2be/0x4f0 [ 67.789980][ T6030] ? vmalloc_fix_flags+0x9c/0xe0 [ 67.791846][ T6030] ? vmalloc_fix_flags+0x9c/0xe0 [ 67.793715][ T6030] ? vmalloc_fix_flags+0x9e/0xe0 [ 67.795566][ T6030] handle_bug+0x84/0x160 [ 67.797091][ T6030] exc_invalid_op+0x1a/0x50 [ 67.798667][ T6030] asm_exc_invalid_op+0x1a/0x20 [ 67.800221][ T6030] RIP: 0010:vmalloc_fix_flags+0x9c/0xe0 [ 67.802060][ T6030] Code: 81 e6 1f 52 ee ff 89 74 24 30 81 e3 e0 ad 11 00 89 5c 24 20 90 48 c7 c7 c0 b9 76 8b 4c 89 fa 89 d9 4d 89 f0 e8 35 2b 6e ff 90 <0f> 0b 90 90 8b 44 24 20 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 [ 67.808181][ T6030] RSP: 0018:ffffc9000410fb00 EFLAGS: 00010246 [ 67.810274][ T6030] RAX: d1ff9ff165489d00 RBX: 0000000000000dc0 RCX: ffff888176319d00 [ 67.812725][ T6030] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 67.815053][ T6030] RBP: ffffc9000410fb98 R08: 0000000000000003 R09: 0000000000000004 [ 67.817459][ T6030] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: 1ffff92000821f60 [ 67.820304][ T6030] R13: dffffc0000000000 R14: ffffc9000410fb20 R15: ffffc9000410fb30 [ 67.822893][ T6030] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 67.824600][ T6030] __vmalloc_noprof+0xf2/0x120 [ 67.826029][ T6030] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 67.827637][ T6030] bpf_prog_alloc+0x3c/0x1a0 [ 67.828984][ T6030] bpf_prog_create_from_user+0xa7/0x440 [ 67.830652][ T6030] ? __pfx_seccomp_check_filter+0x10/0x10 [ 67.832394][ T6030] do_seccomp+0x7b1/0xd90 [ 67.833867][ T6030] ? __pfx_do_seccomp+0x10/0x10 [ 67.835310][ T6030] ? lockdep_hardirqs_on+0x9c/0x150 [ 67.836839][ T6030] ? static_key_count+0x41/0x70 [ 67.838303][ T6030] ? security_task_prctl+0x163/0x190 [ 67.839857][ T6030] __se_sys_prctl+0xc3c/0x1830 [ 67.841269][ T6030] ? __pfx___se_sys_prctl+0x10/0x10 [ 67.842824][ T6030] ? do_syscall_64+0xbe/0xfa0 [ 67.844470][ T6030] ? __x64_sys_prctl+0x20/0xc0 [ 67.845888][ T6030] do_syscall_64+0xfa/0xfa0 [ 67.847223][ T6030] ? lockdep_hardirqs_on+0x9c/0x150 [ 67.849184][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.851499][ T6030] ? exc_page_fault+0xab/0x100 [ 67.853161][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.855373][ T6030] RIP: 0033:0x7f2180390b0d [ 67.856958][ T6030] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 18 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 67.863292][ T6030] RSP: 002b:00007ffc336f7f90 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 67.866086][ T6030] RAX: ffffffffffffffda RBX: 00007f218042cf80 RCX: 00007f2180390b0d [ 67.869343][ T6030] RDX: 00007ffc336f7ff0 RSI: 0000000000000002 RDI: 0000000000000016 [ 67.872093][ T6030] RBP: 00007ffc336f8000 R08: 0000000000000006 R09: 0000000000000071 [ 67.874990][ T6030] R10: 0000000000000071 R11: 0000000000000246 R12: 000000000000006d [ 67.877464][ T6030] R13: 00007ffc336f8428 R14: 00007ffc336f86a8 R15: 0000000000000000 [ 67.880159][ T6030] [ 67.881887][ T6030] Kernel Offset: disabled [ 67.883272][ T6030] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:19:42 Registers: info registers vcpu 0 CPU#0 RAX=1ffff920008cfeca RBX=ffffc9000467f650 RCX=0a5e8bb0113b6400 RDX=dffffc0000000000 RSI=ffffffff81aa43d2 RDI=ffffc9000467f608 RBP=dffffc0000000000 RSP=ffffc9000467f538 R8 =ffffc9000467f6d0 R9 =0000000000000009 R10=ffffc9000467f658 R11=ffffffff81ac4170 R12=ffff888111bf1d00 R13=1ffff920008cfeec R14=ffffc9000467f608 R15=ffffc9000467f608 RIP=ffffffff81739bcd RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555e6b2500 ffffffff 00c00000 GS =0000 ffff88818eb36000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007facb3e1ffc8 CR3=0000000113a14000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000061 0000000000005f66 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=6174735f64616f6c 66666f5f74665f66 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000410f2b0 R8 =ffff88816a7f8237 R9 =1ffff1102d4ff046 R10=dffffc0000000000 R11=ffffffff8515c2b0 R12=dffffc0000000000 R13=ffffffff997de947 R14=ffffffff99af1f20 R15=0000000000000000 RIP=ffffffff8515c32c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555625f2500 ffffffff 00c00000 GS =0000 ffff8882a9f36000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f49adc5c470 CR3=0000000115d48000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=ffff000000000000 ffff000000000000 XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000