last executing test programs: 3.49218964s ago: executing program 1 (id=172): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 3.431082088s ago: executing program 1 (id=174): msgget(0xffffffffffffffff, 0x0) 3.402674218s ago: executing program 1 (id=178): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nmem0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nmem0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nmem0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nmem0', 0x800, 0x0) 3.335477329s ago: executing program 1 (id=180): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max', 0x2, 0x0) 3.334965958s ago: executing program 1 (id=182): rt_sigreturn() 1.811106046s ago: executing program 2 (id=280): syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$rtc(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$rtc(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$rtc(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$rtc(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$rtc(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$rtc(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$rtc(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$rtc(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$rtc(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$rtc(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$rtc(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$rtc(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$rtc(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$rtc(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$rtc(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$rtc(&(0x7f0000000500), 0x4, 0x800) 1.791881813s ago: executing program 2 (id=283): socket$tipc(0x1e, 0x2, 0x0) 1.771685664s ago: executing program 2 (id=286): symlinkat(&(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000)) 1.714909493s ago: executing program 2 (id=288): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice', 0x800, 0x0) 1.714090381s ago: executing program 0 (id=291): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci', 0x800, 0x0) 1.69176935s ago: executing program 0 (id=293): pivot_root(&(0x7f0000000000), &(0x7f0000000000)) 1.643286535s ago: executing program 0 (id=295): syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.633260063s ago: executing program 2 (id=297): fsopen(&(0x7f0000000000), 0x0) 1.630295029s ago: executing program 0 (id=298): socket$inet(0x2, 0x1, 0x0) 1.559519667s ago: executing program 3 (id=299): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control', 0x800, 0x0) 1.559091139s ago: executing program 0 (id=300): getrusage(0x0, &(0x7f0000000000)) 1.558833982s ago: executing program 3 (id=301): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sev', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sev', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sev', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sev', 0x800, 0x0) 1.558701245s ago: executing program 0 (id=302): userfaultfd(0x0) 1.558300884s ago: executing program 3 (id=303): syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$vcsa(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$vcsa(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$vcsa(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$vcsa(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$vcsa(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$vcsa(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$vcsa(&(0x7f0000000500), 0x4, 0x800) 1.496297132s ago: executing program 3 (id=305): sched_getattr(0x0, &(0x7f0000000000), 0x0, 0x0) 1.429784215s ago: executing program 3 (id=307): fchownat(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 391.566059ms ago: executing program 2 (id=306): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 294.018216ms ago: executing program 3 (id=308): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=309): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 68.236674][ T5815] cgroup: Unknown subsys name 'net' [ 68.372217][ T5815] cgroup: Unknown subsys name 'cpuset' [ 68.380996][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.791812][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.484147][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.490608][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 86.843563][ T935] cfg80211: failed to load regulatory.db [ 87.886591][ T6107] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.238405][ T6161] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.863483][ T6157] chnl_net:caif_netlink_parms(): no params data found [ 90.065206][ T6175] ------------[ cut here ]------------ [ 90.071296][ T6175] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 90.097907][ T6175] WARNING: mm/vmalloc.c:3938 at vmalloc_fix_flags+0x9c/0xe0, CPU#1: syz-executor/6175 [ 90.107668][ T6175] Modules linked in: [ 90.111715][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 90.121286][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.131659][ T6175] RIP: 0010:vmalloc_fix_flags+0x9c/0xe0 [ 90.137234][ T6175] Code: 81 e6 1f 52 ee ff 89 74 24 30 81 e3 e0 ad 11 00 89 5c 24 20 90 48 c7 c7 e0 db 96 8b 4c 89 fa 89 d9 4d 89 f0 e8 75 8d 6c ff 90 <0f> 0b 90 90 8b 44 24 20 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 [ 90.157419][ T6175] RSP: 0018:ffffc90005107b00 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.163869][ T6175] RAX: 9deb18dd39b86e00 RBX: 0000000000000dc0 RCX: ffff888079fadb80 [ 90.172603][ T6175] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 90.181177][ T6175] RBP: ffffc90005107b98 R08: 0000000000000003 R09: 0000000000000004 [ 90.190798][ T6175] R10: dffffc0000000000 R11: fffffbfff1c3a708 R12: 1ffff92000a20f60 [ 90.198803][ T6175] R13: dffffc0000000000 R14: ffffc90005107b20 R15: ffffc90005107b30 [ 90.206921][ T6175] FS: 000055557fbce500(0000) GS:ffff888125b74000(0000) knlGS:0000000000000000 [ 90.216024][ T6175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.222827][ T6175] CR2: 00007f171365c470 CR3: 0000000076216000 CR4: 00000000003526f0 [ 90.230952][ T6175] Call Trace: [ 90.234257][ T6175] [ 90.237205][ T6175] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 90.242785][ T6175] __vmalloc_noprof+0xf2/0x120 [ 90.247554][ T6175] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 90.252980][ T6175] bpf_prog_alloc+0x3c/0x1a0 [ 90.257595][ T6175] bpf_prog_create_from_user+0xa7/0x440 [ 90.263327][ T6175] ? __pfx_seccomp_check_filter+0x10/0x10 [ 90.269098][ T6175] do_seccomp+0x7b1/0xd90 [ 90.273515][ T6175] ? __pfx_do_seccomp+0x10/0x10 [ 90.278345][ T6175] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.283698][ T6175] ? static_key_count+0x41/0x70 [ 90.288591][ T6175] ? security_task_prctl+0x163/0x190 [ 90.294043][ T6175] __se_sys_prctl+0xc3c/0x1830 [ 90.299004][ T6175] ? __pfx___se_sys_prctl+0x10/0x10 [ 90.304220][ T6175] ? do_syscall_64+0xbe/0xfa0 [ 90.308956][ T6175] ? __x64_sys_prctl+0x20/0xc0 [ 90.313760][ T6175] do_syscall_64+0xfa/0xfa0 [ 90.318252][ T6175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.324364][ T6175] ? clear_bhb_loop+0x60/0xb0 [ 90.329166][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.335045][ T6175] RIP: 0033:0x7f1713790b0d [ 90.339520][ T6175] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 18 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 90.359391][ T6175] RSP: 002b:00007fffcecd72f0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 90.367902][ T6175] RAX: ffffffffffffffda RBX: 00007f171382cf80 RCX: 00007f1713790b0d [ 90.376576][ T6175] RDX: 00007fffcecd7350 RSI: 0000000000000002 RDI: 0000000000000016 [ 90.384771][ T6175] RBP: 00007fffcecd7360 R08: 0000000000000006 R09: 0000000000000071 [ 90.392869][ T6175] R10: 0000000000000071 R11: 0000000000000246 R12: 000000000000006d [ 90.400920][ T6175] R13: 00007fffcecd7788 R14: 00007fffcecd7a08 R15: 0000000000000000 [ 90.409051][ T6175] [ 90.412072][ T6175] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.419422][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 90.428870][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.438967][ T6175] Call Trace: [ 90.442238][ T6175] [ 90.445154][ T6175] dump_stack_lvl+0x99/0x250 [ 90.449734][ T6175] ? __asan_memcpy+0x40/0x70 [ 90.454305][ T6175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.459485][ T6175] ? __pfx__printk+0x10/0x10 [ 90.464065][ T6175] vpanic+0x237/0x6d0 [ 90.468028][ T6175] ? __pfx_vpanic+0x10/0x10 [ 90.472600][ T6175] ? is_bpf_text_address+0x292/0x2b0 [ 90.477969][ T6175] ? is_bpf_text_address+0x26/0x2b0 [ 90.483156][ T6175] panic+0xb9/0xc0 [ 90.486863][ T6175] ? __pfx_panic+0x10/0x10 [ 90.491320][ T6175] __warn+0x318/0x4d0 [ 90.495289][ T6175] ? vmalloc_fix_flags+0x9c/0xe0 [ 90.500212][ T6175] ? vmalloc_fix_flags+0x9c/0xe0 [ 90.505135][ T6175] report_bug+0x2be/0x4f0 [ 90.509541][ T6175] ? vmalloc_fix_flags+0x9c/0xe0 [ 90.514462][ T6175] ? vmalloc_fix_flags+0x9c/0xe0 [ 90.519386][ T6175] ? vmalloc_fix_flags+0x9e/0xe0 [ 90.524318][ T6175] handle_bug+0x84/0x160 [ 90.528550][ T6175] exc_invalid_op+0x1a/0x50 [ 90.533041][ T6175] asm_exc_invalid_op+0x1a/0x20 [ 90.537892][ T6175] RIP: 0010:vmalloc_fix_flags+0x9c/0xe0 [ 90.543453][ T6175] Code: 81 e6 1f 52 ee ff 89 74 24 30 81 e3 e0 ad 11 00 89 5c 24 20 90 48 c7 c7 e0 db 96 8b 4c 89 fa 89 d9 4d 89 f0 e8 75 8d 6c ff 90 <0f> 0b 90 90 8b 44 24 20 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 [ 90.563051][ T6175] RSP: 0018:ffffc90005107b00 EFLAGS: 00010246 [ 90.569201][ T6175] RAX: 9deb18dd39b86e00 RBX: 0000000000000dc0 RCX: ffff888079fadb80 [ 90.577248][ T6175] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 90.585293][ T6175] RBP: ffffc90005107b98 R08: 0000000000000003 R09: 0000000000000004 [ 90.593250][ T6175] R10: dffffc0000000000 R11: fffffbfff1c3a708 R12: 1ffff92000a20f60 [ 90.601209][ T6175] R13: dffffc0000000000 R14: ffffc90005107b20 R15: ffffc90005107b30 [ 90.609190][ T6175] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 90.614657][ T6175] __vmalloc_noprof+0xf2/0x120 [ 90.619417][ T6175] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 90.624791][ T6175] bpf_prog_alloc+0x3c/0x1a0 [ 90.629376][ T6175] bpf_prog_create_from_user+0xa7/0x440 [ 90.634918][ T6175] ? __pfx_seccomp_check_filter+0x10/0x10 [ 90.640655][ T6175] do_seccomp+0x7b1/0xd90 [ 90.645008][ T6175] ? __pfx_do_seccomp+0x10/0x10 [ 90.649858][ T6175] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.655069][ T6175] ? static_key_count+0x41/0x70 [ 90.659920][ T6175] ? security_task_prctl+0x163/0x190 [ 90.665209][ T6175] __se_sys_prctl+0xc3c/0x1830 [ 90.669975][ T6175] ? __pfx___se_sys_prctl+0x10/0x10 [ 90.675328][ T6175] ? do_syscall_64+0xbe/0xfa0 [ 90.680001][ T6175] ? __x64_sys_prctl+0x20/0xc0 [ 90.684758][ T6175] do_syscall_64+0xfa/0xfa0 [ 90.689253][ T6175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.695403][ T6175] ? clear_bhb_loop+0x60/0xb0 [ 90.700071][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.705964][ T6175] RIP: 0033:0x7f1713790b0d [ 90.710368][ T6175] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 18 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 90.729964][ T6175] RSP: 002b:00007fffcecd72f0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 90.738690][ T6175] RAX: ffffffffffffffda RBX: 00007f171382cf80 RCX: 00007f1713790b0d [ 90.746686][ T6175] RDX: 00007fffcecd7350 RSI: 0000000000000002 RDI: 0000000000000016 [ 90.754690][ T6175] RBP: 00007fffcecd7360 R08: 0000000000000006 R09: 0000000000000071 [ 90.762822][ T6175] R10: 0000000000000071 R11: 0000000000000246 R12: 000000000000006d [ 90.770785][ T6175] R13: 00007fffcecd7788 R14: 00007fffcecd7a08 R15: 0000000000000000 [ 90.778764][ T6175] [ 90.782071][ T6175] Kernel Offset: disabled [ 90.786386][ T6175] Rebooting in 86400 seconds..