[ 54.264875] audit: type=1400 audit(1763398934.249:6): avc: denied { checkpoint_restore } for pid=222 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 54.531632] ------------[ cut here ]------------ [ 54.532127] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 54.533224] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/235 [ 54.534031] Modules linked in: [ 54.534372] CPU: 1 UID: 104 PID: 235 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 54.535464] Tainted: [W]=WARN [ 54.535801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 54.536580] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 54.537083] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 54.538824] RSP: 0018:ffff88801abe7bc0 EFLAGS: 00010286 [ 54.539327] RAX: 0000000000000000 RBX: ffffed100357cf78 RCX: ffffffff813a4050 [ 54.540049] RDX: ffff888015633780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 54.540758] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100357cf2f [ 54.541430] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000400dc0 [ 54.542155] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801abe7df8 [ 54.542868] FS: 00007f93a4754900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 54.543654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.544212] CR2: 00007f93a4c46580 CR3: 000000000b88c000 CR4: 0000000000350ef0 [ 54.544922] Call Trace: [ 54.545176] [ 54.545395] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 54.545898] ? __create_object+0x59/0x80 [ 54.546288] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 54.546739] __vmalloc_noprof+0x59/0x60 [ 54.547066] bpf_prog_alloc_no_stats+0x55/0x470 [ 54.547444] ? __pfx_seccomp_check_filter+0x10/0x10 [ 54.547874] bpf_prog_alloc+0x39/0x200 [ 54.548190] ? __pfx_seccomp_check_filter+0x10/0x10 [ 54.548611] bpf_prog_create_from_user+0xb2/0x2f0 [ 54.549004] do_seccomp+0x349/0x25e0 [ 54.549312] ? __pfx_css_rstat_updated+0x10/0x10 [ 54.549726] ? __pfx_do_seccomp+0x10/0x10 [ 54.550068] ? find_held_lock+0x2b/0x80 [ 54.550413] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.550861] ? static_key_count+0x60/0x80 [ 54.551212] prctl_set_seccomp+0x4e/0x70 [ 54.551544] __do_sys_prctl+0xe6c/0x1d70 [ 54.551905] ? __pfx___do_sys_prctl+0x10/0x10 [ 54.552277] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 54.552720] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 54.553145] ? irqentry_exit+0xf3/0x650 [ 54.553473] do_syscall_64+0xbf/0x430 [ 54.553815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.554250] RIP: 0033:0x7f93a4c465cd [ 54.554550] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 54.556026] RSP: 002b:00007ffc23f59f70 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 54.556656] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93a4c465cd [ 54.557226] RDX: 000055d1a3232e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 54.557819] RBP: 00007ffc23f59fd0 R08: 0000000000000000 R09: 00007ffc23f59670 [ 54.558394] R10: 0000000000000000 R11: 0000000000000246 R12: 000055d1b8339ad0 [ 54.558989] R13: 00007ffc23f5a400 R14: 000055d1b833abc0 R15: 000055d1b834b780 [ 54.559564] [ 54.559792] irq event stamp: 1665 [ 54.560076] hardirqs last enabled at (1673): [] __up_console_sem+0x78/0x80 [ 54.560779] hardirqs last disabled at (1682): [] __up_console_sem+0x5d/0x80 [ 54.561451] softirqs last enabled at (1204): [] handle_softirqs+0x50c/0x770 [ 54.562170] softirqs last disabled at (1195): [] __irq_exit_rcu+0xc4/0x100 [ 54.562872] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 58.063648] ------------[ cut here ]------------ [ 58.064531] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 58.066533] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/244 [ 58.068000] Modules linked in: [ 58.068627] CPU: 1 UID: 104 PID: 244 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 58.070618] Tainted: [W]=WARN [ 58.071185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 58.072646] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 58.073522] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 58.076739] RSP: 0018:ffff888016b07bc0 EFLAGS: 00010286 [ 58.077707] RAX: 0000000000000000 RBX: ffffed1002d60f78 RCX: ffffffff813a4050 [ 58.079017] RDX: ffff888015581bc0 RSI: ffffffff813a405e RDI: 0000000000000001 [ 58.080299] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002d60f2f [ 58.081557] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 58.082869] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016b07df8 [ 58.084151] FS: 00007f7eaa010900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 58.085614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.086664] CR2: 00007fffbf8bbef7 CR3: 000000000dd30000 CR4: 0000000000350ef0 [ 58.087943] Call Trace: [ 58.088402] [ 58.088849] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 58.089731] ? __create_object+0x59/0x80 [ 58.090485] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 58.091436] __vmalloc_noprof+0x59/0x60 [ 58.092188] bpf_prog_alloc_no_stats+0x55/0x470 [ 58.093055] ? __pfx_seccomp_check_filter+0x10/0x10 [ 58.094003] bpf_prog_alloc+0x39/0x200 [ 58.094746] ? __pfx_seccomp_check_filter+0x10/0x10 [ 58.095677] bpf_prog_create_from_user+0xb2/0x2f0 [ 58.096532] do_seccomp+0x349/0x25e0 [ 58.097252] ? find_held_lock+0x2b/0x80 [ 58.098001] ? do_prlimit+0x310/0x610 [ 58.098755] ? __pfx_do_seccomp+0x10/0x10 [ 58.099496] ? do_raw_spin_unlock+0x53/0x220 [ 58.100311] ? _raw_spin_unlock+0x1e/0x40 [ 58.101090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.102047] ? static_key_count+0x60/0x80 [ 58.102867] prctl_set_seccomp+0x4e/0x70 [ 58.103634] __do_sys_prctl+0xe6c/0x1d70 [ 58.104377] ? __pfx___do_sys_prctl+0x10/0x10 [ 58.105230] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 58.106205] ? irqentry_exit+0xf3/0x650 [ 58.106975] do_syscall_64+0xbf/0x430 [ 58.107700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.108644] RIP: 0033:0x7f7eaa5025cd [ 58.109312] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 58.112448] RSP: 002b:00007fffbf8bad90 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 58.113794] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7eaa5025cd [ 58.115063] RDX: 00005606844a0e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 58.116337] RBP: 00007fffbf8badf0 R08: 0000000000000000 R09: 00007fffbf8ba490 [ 58.117609] R10: 0000000000000000 R11: 0000000000000246 R12: 00005606b7b2bad0 [ 58.118886] R13: 00007fffbf8bb220 R14: 00005606b7b2cbc0 R15: 00005606b7b3d780 [ 58.120178] [ 58.120636] irq event stamp: 1715 [ 58.121239] hardirqs last enabled at (1723): [] __up_console_sem+0x78/0x80 [ 58.122763] hardirqs last disabled at (1732): [] __up_console_sem+0x5d/0x80 [ 58.124268] softirqs last enabled at (1444): [] handle_softirqs+0x50c/0x770 [ 58.125816] softirqs last disabled at (1751): [] __irq_exit_rcu+0xc4/0x100 [ 58.127332] ---[ end trace 0000000000000000 ]--- [ 58.978787] ------------[ cut here ]------------ [ 58.979740] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 58.981809] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/252 [ 58.983362] Modules linked in: [ 58.984028] CPU: 0 UID: 104 PID: 252 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 58.986014] Tainted: [W]=WARN [ 58.986634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 58.988120] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 58.989051] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 58.992308] RSP: 0018:ffff888019f97bc0 EFLAGS: 00010286 [ 58.993304] RAX: 0000000000000000 RBX: ffffed10033f2f78 RCX: ffffffff813a4050 [ 58.994632] RDX: ffff88800f33d340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 58.995927] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10033f2f2f [ 58.997216] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 58.998512] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888019f97df8 [ 58.999822] FS: 00007fa8258bc900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 59.001259] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.002341] CR2: 00007fff20fddef7 CR3: 000000000dde8000 CR4: 0000000000350ef0 [ 59.003644] Call Trace: [ 59.004110] [ 59.004513] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 59.005622] ? __create_object+0x59/0x80 [ 59.006559] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 59.007825] __vmalloc_noprof+0x59/0x60 [ 59.008579] bpf_prog_alloc_no_stats+0x55/0x470 [ 59.009465] ? __pfx_seccomp_check_filter+0x10/0x10 [ 59.010403] bpf_prog_alloc+0x39/0x200 [ 59.011155] ? __pfx_seccomp_check_filter+0x10/0x10 [ 59.012090] bpf_prog_create_from_user+0xb2/0x2f0 [ 59.013002] do_seccomp+0x349/0x25e0 [ 59.013722] ? find_held_lock+0x2b/0x80 [ 59.014454] ? do_prlimit+0x310/0x610 [ 59.015191] ? __pfx_do_seccomp+0x10/0x10 [ 59.015961] ? do_raw_spin_unlock+0x53/0x220 [ 59.016794] ? _raw_spin_unlock+0x1e/0x40 [ 59.017528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.018512] ? static_key_count+0x60/0x80 [ 59.019336] prctl_set_seccomp+0x4e/0x70 [ 59.020104] __do_sys_prctl+0xe6c/0x1d70 [ 59.020893] ? __pfx___do_sys_prctl+0x10/0x10 [ 59.021748] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 59.022734] ? irqentry_exit+0xf3/0x650 [ 59.023464] do_syscall_64+0xbf/0x430 [ 59.024205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.025172] RIP: 0033:0x7fa825dae5cd [ 59.025883] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 59.029110] RSP: 002b:00007fff20fdca00 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 59.030503] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa825dae5cd [ 59.031784] RDX: 0000561c8ecf6e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 59.033071] RBP: 00007fff20fdca60 R08: 0000000000000000 R09: 00007fff20fdc100 [ 59.034388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000561cc0913b10 [ 59.035659] R13: 00007fff20fdce90 R14: 0000561cc09142b0 R15: 0000561cc09286f0 [ 59.036949] [ 59.037381] irq event stamp: 1773 [ 59.038036] hardirqs last enabled at (1783): [] __up_console_sem+0x78/0x80 [ 59.039561] hardirqs last disabled at (1792): [] __up_console_sem+0x5d/0x80 [ 59.041100] softirqs last enabled at (1742): [] handle_softirqs+0x50c/0x770 [ 59.042638] softirqs last disabled at (1737): [] __irq_exit_rcu+0xc4/0x100 [ 59.044137] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:57438' (ECDSA) to the list of known hosts. 2025/11/17 17:02:19 fuzzer started 2025/11/17 17:02:19 dialing manager at localhost:37895 2025/11/17 17:02:19 checking machine... 2025/11/17 17:02:19 checking revisions... [ 59.959800] kmemleak: Automatic memory scanning thread ended 2025/11/17 17:02:19 testing simple program... [ 60.047745] cgroup: Unknown subsys name 'net' [ 60.114418] cgroup: Unknown subsys name 'cpuset' [ 60.132161] cgroup: Unknown subsys name 'rlimit' executing program executing program VM DIAGNOSIS: 17:02:18 Registers: info registers vcpu 0 RAX=000055f002958bc4 RBX=00007f9072b05710 RCX=0000000000000000 RDX=0000000000000000 RSI=000000000000006b RDI=000055f002958bc0 RBP=000055f01e4baaf4 RSP=00007fff519ffb58 R8 =000055f01e4b9130 R9 =00007f90730b7be0 R10=0000000000000008 R11=0000000000000000 R12=000055f01e4baaf3 R13=000055f01e4b97a9 R14=000055f01e4b9130 R15=000055f002958ba0 RIP=00007f9073058674 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9072b05900 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f01e4ba358 CR3=000000000dc8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=6b6b6b6b6b6b6b6b6b6b6b6b6b6b6b6b XMM01=0000000000000000000000ff00000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=ffffffffffffffffffffffffffffffff XMM06=00000000000000000000000000000000 XMM07=336e74394a7144537356634241616550 XMM08=767574737271706f6e6d6c6b6a696867 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000d RBX=ffff888016448000 RCX=0000000000000000 RDX=000000000000000d RSI=0000000000000000 RDI=ffffffff85f109b8 RBP=ffff888016448a58 RSP=ffff88801abe79c0 R8 =0000000000080000 R9 =000000000000000d R10=0000000000000001 R11=0000000000000000 R12=ffff888016448a58 R13=0000000000000002 R14=0000000000000001 R15=0000000000040000 RIP=ffffffff81527128 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7eaa010900 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffbf8b4000 CR3=000000001ef4c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=635f6e6f69737365733a4d41503d706f XMM01=6f6c5f6d61702c78756e696c65735f6d XMM02=61702c74696d7265705f6d61702c7469 XMM03=655f6d61702c7374696d696c5f6d6170 XMM04=3d6c616e696d72657420322e322e302e XMM05=3d656d616e74736f682022646873732f XMM06=746f6f72223d746363612078756e696c XMM07=6e655f6d61702c7374696d696c5f6d61 XMM08=652075253d64692073253d706f000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000