syzkaller login: [ 46.646546] ------------[ cut here ]------------ [ 46.647464] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 46.649532] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/233 [ 46.651017] Modules linked in: [ 46.651652] CPU: 1 UID: 104 PID: 233 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 46.653646] Tainted: [W]=WARN [ 46.654199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 46.655927] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 46.657310] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 46.660537] RSP: 0018:ffff88801756fbc0 EFLAGS: 00010286 [ 46.661527] RAX: 0000000000000000 RBX: ffffed1002eadf78 RCX: ffffffff813a4050 [ 46.662821] RDX: ffff88801a8f1bc0 RSI: ffffffff813a405e RDI: 0000000000000001 [ 46.664109] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002eadf2f [ 46.665393] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 46.666659] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801756fdf8 [ 46.667949] FS: 00007f0055c40900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 46.669386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.670438] CR2: 00007ffcc8567ef7 CR3: 0000000009be9000 CR4: 0000000000350ef0 [ 46.671728] Call Trace: [ 46.672206] [ 46.672673] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 46.673571] ? __create_object+0x59/0x80 [ 46.674318] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 46.675286] __vmalloc_noprof+0x59/0x60 [ 46.676061] bpf_prog_alloc_no_stats+0x55/0x470 [ 46.676939] ? __pfx_seccomp_check_filter+0x10/0x10 [ 46.677867] bpf_prog_alloc+0x39/0x200 [ 46.678618] ? __pfx_seccomp_check_filter+0x10/0x10 [ 46.679547] bpf_prog_create_from_user+0xb2/0x2f0 [ 46.680453] do_seccomp+0x349/0x25e0 [ 46.681125] ? find_held_lock+0x2b/0x80 [ 46.681877] ? do_prlimit+0x310/0x610 [ 46.682616] ? __pfx_do_seccomp+0x10/0x10 [ 46.683392] ? do_raw_spin_unlock+0x53/0x220 [ 46.684184] ? _raw_spin_unlock+0x1e/0x40 [ 46.684983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 46.685952] ? static_key_count+0x60/0x80 [ 46.686757] prctl_set_seccomp+0x4e/0x70 [ 46.687552] __do_sys_prctl+0xe6c/0x1d70 [ 46.688392] ? __pfx___do_sys_prctl+0x10/0x10 [ 46.689228] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 46.690208] ? irqentry_exit+0xf3/0x650 [ 46.690965] do_syscall_64+0xbf/0x430 [ 46.691707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.692682] RIP: 0033:0x7f00561325cd [ 46.693406] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 46.696613] RSP: 002b:00007ffcc8565ae0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 46.697991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f00561325cd [ 46.699291] RDX: 00005605310f1e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 46.700649] RBP: 00007ffcc8565b40 R08: 0000000000000000 R09: 00007ffcc85651e0 [ 46.701939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000560549c6ebf0 [ 46.703236] R13: 00007ffcc8565f70 R14: 0000560549c78380 R15: 0000560549c83460 [ 46.704572] [ 46.705000] irq event stamp: 1885 [ 46.705646] hardirqs last enabled at (1895): [] __up_console_sem+0x78/0x80 [ 46.707192] hardirqs last disabled at (1904): [] __up_console_sem+0x5d/0x80 [ 46.708741] softirqs last enabled at (1874): [] handle_softirqs+0x50c/0x770 [ 46.710339] softirqs last disabled at (1869): [] __irq_exit_rcu+0xc4/0x100 [ 46.711896] ---[ end trace 0000000000000000 ]--- [ 50.189037] ------------[ cut here ]------------ [ 50.189957] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 50.192021] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/241 [ 50.193472] Modules linked in: [ 50.194063] CPU: 0 UID: 104 PID: 241 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 50.196052] Tainted: [W]=WARN [ 50.196643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 50.198117] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 50.199043] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 50.202220] RSP: 0018:ffff888016f2fbc0 EFLAGS: 00010286 [ 50.203184] RAX: 0000000000000000 RBX: ffffed1002de5f78 RCX: ffffffff813a4050 [ 50.204477] RDX: ffff888016a63780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 50.205768] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002de5f2f [ 50.207067] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 50.208423] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016f2fdf8 [ 50.209735] FS: 00007f157e47e900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 50.211191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.212269] CR2: 00007fff50e25ef7 CR3: 000000001fdf1000 CR4: 0000000000350ef0 [ 50.213568] Call Trace: [ 50.214035] [ 50.214500] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 50.215406] ? __create_object+0x59/0x80 [ 50.216178] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 50.217158] __vmalloc_noprof+0x59/0x60 [ 50.217911] bpf_prog_alloc_no_stats+0x55/0x470 [ 50.218788] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.219729] bpf_prog_alloc+0x39/0x200 [ 50.220488] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.221440] bpf_prog_create_from_user+0xb2/0x2f0 [ 50.222304] do_seccomp+0x349/0x25e0 [ 50.223037] ? find_held_lock+0x2b/0x80 [ 50.223816] ? do_prlimit+0x310/0x610 [ 50.224608] ? __pfx_do_seccomp+0x10/0x10 [ 50.225420] ? do_raw_spin_unlock+0x53/0x220 [ 50.226207] ? _raw_spin_unlock+0x1e/0x40 [ 50.227002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.227996] ? static_key_count+0x60/0x80 [ 50.228801] prctl_set_seccomp+0x4e/0x70 [ 50.229586] __do_sys_prctl+0xe6c/0x1d70 [ 50.230364] ? __pfx___do_sys_prctl+0x10/0x10 [ 50.231183] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 50.232166] ? irqentry_exit+0xf3/0x650 [ 50.232925] do_syscall_64+0xbf/0x430 [ 50.233660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.234620] RIP: 0033:0x7f157e9705cd [ 50.235287] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 50.238525] RSP: 002b:00007fff50e23dc0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.239919] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f157e9705cd [ 50.241208] RDX: 00005570b0272e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 50.242505] RBP: 00007fff50e23e20 R08: 0000000000000000 R09: 00007fff50e234c0 [ 50.243801] R10: 0000000000000000 R11: 0000000000000246 R12: 00005570b5a8bad0 [ 50.245096] R13: 00007fff50e24250 R14: 00005570b5a8cbc0 R15: 00005570b5a9d780 [ 50.246395] [ 50.246856] irq event stamp: 1705 [ 50.247531] hardirqs last enabled at (1715): [] __up_console_sem+0x78/0x80 [ 50.249085] hardirqs last disabled at (1724): [] __up_console_sem+0x5d/0x80 [ 50.250602] softirqs last enabled at (1644): [] handle_softirqs+0x50c/0x770 [ 50.252163] softirqs last disabled at (1639): [] __irq_exit_rcu+0xc4/0x100 [ 50.253681] ---[ end trace 0000000000000000 ]--- [ 51.080576] ------------[ cut here ]------------ [ 51.081470] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 51.083543] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/248 [ 51.084969] Modules linked in: [ 51.085841] CPU: 1 UID: 104 PID: 248 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 51.087881] Tainted: [W]=WARN [ 51.088470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 51.089923] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 51.090818] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 51.093937] RSP: 0018:ffff888017d3fbc0 EFLAGS: 00010286 [ 51.094888] RAX: 0000000000000000 RBX: ffffed1002fa7f78 RCX: ffffffff813a4050 [ 51.096161] RDX: ffff888016785340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 51.097433] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002fa7f2f [ 51.098700] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 51.099971] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888017d3fdf8 [ 51.101236] FS: 00007f8592c7f900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 51.102646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.103700] CR2: 00007ffea2a07ef7 CR3: 000000000d7d9000 CR4: 0000000000350ef0 [ 51.104983] Call Trace: [ 51.105475] [ 51.105881] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 51.106775] ? __create_object+0x59/0x80 [ 51.107550] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 51.108517] __vmalloc_noprof+0x59/0x60 [ 51.109227] bpf_prog_alloc_no_stats+0x55/0x470 [ 51.110097] ? __pfx_seccomp_check_filter+0x10/0x10 [ 51.111019] bpf_prog_alloc+0x39/0x200 [ 51.111744] ? __pfx_seccomp_check_filter+0x10/0x10 [ 51.112693] bpf_prog_create_from_user+0xb2/0x2f0 [ 51.113581] do_seccomp+0x349/0x25e0 [ 51.114260] ? find_held_lock+0x2b/0x80 [ 51.115014] ? do_prlimit+0x310/0x610 [ 51.115749] ? __pfx_do_seccomp+0x10/0x10 [ 51.116543] ? do_raw_spin_unlock+0x53/0x220 [ 51.117365] ? _raw_spin_unlock+0x1e/0x40 [ 51.118096] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.119049] ? static_key_count+0x60/0x80 [ 51.119846] prctl_set_seccomp+0x4e/0x70 [ 51.120641] __do_sys_prctl+0xe6c/0x1d70 [ 51.121422] ? __pfx___do_sys_prctl+0x10/0x10 [ 51.122231] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 51.123215] ? irqentry_exit+0xf3/0x650 [ 51.123979] do_syscall_64+0xbf/0x430 [ 51.124724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.125678] RIP: 0033:0x7f85931715cd [ 51.126389] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 51.129566] RSP: 002b:00007ffea2a06190 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 51.130902] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f85931715cd [ 51.132193] RDX: 000055c2d8713e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 51.133486] RBP: 00007ffea2a061f0 R08: 0000000000000000 R09: 00007ffea2a05890 [ 51.134757] R10: 0000000000000000 R11: 0000000000000246 R12: 000055c2e9105ad0 [ 51.136026] R13: 00007ffea2a06620 R14: 000055c2e9106bc0 R15: 000055c2e9117780 [ 51.137294] [ 51.137757] irq event stamp: 1781 [ 51.138414] hardirqs last enabled at (1797): [] __up_console_sem+0x78/0x80 [ 51.139954] hardirqs last disabled at (1806): [] __up_console_sem+0x5d/0x80 [ 51.141464] softirqs last enabled at (1794): [] handle_softirqs+0x50c/0x770 [ 51.142998] softirqs last disabled at (1789): [] __irq_exit_rcu+0xc4/0x100 [ 51.144503] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:11549' (ECDSA) to the list of known hosts. 2025/11/17 21:00:42 fuzzer started 2025/11/17 21:00:42 dialing manager at localhost:37895 2025/11/17 21:00:42 checking machine... 2025/11/17 21:00:42 checking revisions... [ 52.066862] kmemleak: Automatic memory scanning thread ended 2025/11/17 21:00:42 testing simple program... [ 52.157712] cgroup: Unknown subsys name 'net' [ 52.229008] cgroup: Unknown subsys name 'cpuset' [ 52.242847] cgroup: Unknown subsys name 'rlimit' executing program executing program VM DIAGNOSIS: 21:00:41 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888009611bc0 RCX=1ffffffff0cca012 RDX=0000000000000000 RSI=ffff88806ce38440 RDI=ffff888009611fbc RBP=ffff888009462280 RSP=ffff888009627b30 R8 =0000000000000005 R9 =ffff88806ce38440 R10=0000000000000003 R11=0000000000000001 R12=ffffea0000647d80 R13=ffff88800e67b280 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff815bd59a RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f157ea33650 CR3=000000000d5c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=915401cca360a8bf9f413e2265eddce9 XMM02=ec2efd57dc4c00df0000000000305878 XMM03=67f34d8dc6e2841c0000000000305948 XMM04=e8c5eb487aa2098400000000000ae988 XMM05=d96330e2d2db863200000000003216d8 XMM06=474038aa6c007e1f0000000000321560 XMM07=e042d86d42eb936e0000000000311808 XMM08=67f34d8dc6e2841c0000000000305948 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000002e0bf RBX=0000000000000001 RCX=ffffffff84c72d57 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d2c90 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e639a R10=ffff88806cf31cd3 R11=0000000000000001 R12=ffffffff8664f650 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c7174e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc7e196658 CR3=000000000d657000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2031343a30303a313220373120766f4e XMM01=73732878696e755f6d6170203a5d3034 XMM02=65736f6c63206e6f6973736573203a29 XMM03=755f6d6170203a5d3034325b64687373 XMM04=69662068637573206f4e203a656c6163 XMM05=3a656c696620766e65206e65706f206f XMM06=65733a6468737328766e655f6d617020 XMM07=6b7a79732031343a30303a3132203731 XMM08=30343d7974696c696261706163202279 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000