Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 38.933888] ------------[ cut here ]------------ [ 38.934761] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 38.936855] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/233 [ 38.938360] Modules linked in: [ 38.939002] CPU: 1 UID: 104 PID: 233 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 38.940967] Tainted: [W]=WARN [ 38.941511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 38.942980] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 38.943889] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 38.947009] RSP: 0018:ffff8880146b7bc0 EFLAGS: 00010286 [ 38.947974] RAX: 0000000000000000 RBX: ffffed10028d6f78 RCX: ffffffff813a4050 [ 38.949242] RDX: ffff888014778000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 38.950538] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10028d6f2f [ 38.951802] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 38.953089] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff8880146b7df8 [ 38.954376] FS: 00007fa230e32900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 38.955801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.956880] CR2: 00007fa231324580 CR3: 000000000cfdc000 CR4: 0000000000350ef0 [ 38.958169] Call Trace: [ 38.958634] [ 38.959077] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 38.959966] ? __create_object+0x59/0x80 [ 38.960689] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 38.961652] __vmalloc_noprof+0x59/0x60 [ 38.962410] bpf_prog_alloc_no_stats+0x55/0x470 [ 38.963261] ? __pfx_seccomp_check_filter+0x10/0x10 [ 38.964181] bpf_prog_alloc+0x39/0x200 [ 38.964927] ? __pfx_seccomp_check_filter+0x10/0x10 [ 38.965801] bpf_prog_create_from_user+0xb2/0x2f0 [ 38.966714] do_seccomp+0x349/0x25e0 [ 38.967417] ? __pfx_css_rstat_updated+0x10/0x10 [ 38.968309] ? __pfx_do_seccomp+0x10/0x10 [ 38.969092] ? find_held_lock+0x2b/0x80 [ 38.969803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 38.970779] ? static_key_count+0x60/0x80 [ 38.971571] prctl_set_seccomp+0x4e/0x70 [ 38.972346] __do_sys_prctl+0xe6c/0x1d70 [ 38.973117] ? __pfx___do_sys_prctl+0x10/0x10 [ 38.973968] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 38.974952] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 38.975929] ? irqentry_exit+0xf3/0x650 [ 38.976644] do_syscall_64+0xbf/0x430 [ 38.977379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.978324] RIP: 0033:0x7fa2313245cd [ 38.979010] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 38.982166] RSP: 002b:00007ffcdf5837d0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 38.983523] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2313245cd [ 38.984791] RDX: 00005584496cee00 RSI: 0000000000000002 RDI: 0000000000000016 [ 38.986084] RBP: 00007ffcdf583830 R08: 0000000000000000 R09: 00007ffcdf582ed0 [ 38.987388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000558452f2e240 [ 38.988669] R13: 00007ffcdf583c60 R14: 0000558452f37380 R15: 0000558452f42540 [ 38.989943] [ 38.990375] irq event stamp: 1733 [ 38.991010] hardirqs last enabled at (1743): [] __up_console_sem+0x78/0x80 [ 38.992519] hardirqs last disabled at (1752): [] __up_console_sem+0x5d/0x80 [ 38.994018] softirqs last enabled at (1692): [] handle_softirqs+0x50c/0x770 [ 38.995562] softirqs last disabled at (1687): [] __irq_exit_rcu+0xc4/0x100 [ 38.997073] ---[ end trace 0000000000000000 ]--- [ 41.657567] ------------[ cut here ]------------ [ 41.658485] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 41.660504] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/243 [ 41.661945] Modules linked in: [ 41.662554] CPU: 0 UID: 104 PID: 243 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 41.664519] Tainted: [W]=WARN [ 41.665106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 41.666582] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 41.667498] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 41.670636] RSP: 0018:ffff8880180cfbc0 EFLAGS: 00010286 [ 41.671603] RAX: 0000000000000000 RBX: ffffed1003019f78 RCX: ffffffff813a4050 [ 41.672884] RDX: ffff88800e215340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 41.674188] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1003019f2f [ 41.675468] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 41.676756] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff8880180cfdf8 [ 41.678041] FS: 00007f4c9a94d900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 41.679474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.680522] CR2: 00007fff2a6b0ef7 CR3: 000000001f894000 CR4: 0000000000350ef0 [ 41.681788] Call Trace: [ 41.682311] [ 41.682718] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 41.683613] ? __create_object+0x59/0x80 [ 41.684388] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 41.685348] __vmalloc_noprof+0x59/0x60 [ 41.686097] bpf_prog_alloc_no_stats+0x55/0x470 [ 41.686980] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.687891] bpf_prog_alloc+0x39/0x200 [ 41.688588] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.689507] bpf_prog_create_from_user+0xb2/0x2f0 [ 41.690397] do_seccomp+0x349/0x25e0 [ 41.691097] ? find_held_lock+0x2b/0x80 [ 41.691794] ? do_prlimit+0x310/0x610 [ 41.692556] ? __pfx_do_seccomp+0x10/0x10 [ 41.693329] ? do_raw_spin_unlock+0x53/0x220 [ 41.694174] ? _raw_spin_unlock+0x1e/0x40 [ 41.694945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.695909] ? static_key_count+0x60/0x80 [ 41.696651] prctl_set_seccomp+0x4e/0x70 [ 41.697412] __do_sys_prctl+0xe6c/0x1d70 [ 41.698179] ? __pfx___do_sys_prctl+0x10/0x10 [ 41.699026] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 41.699980] ? irqentry_exit+0xf3/0x650 [ 41.700697] do_syscall_64+0xbf/0x430 [ 41.701426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.702378] RIP: 0033:0x7f4c9ae3f5cd [ 41.703076] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 41.706227] RSP: 002b:00007fff2a6ae670 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 41.707595] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c9ae3f5cd [ 41.708880] RDX: 000055e07eacee00 RSI: 0000000000000002 RDI: 0000000000000016 [ 41.710196] RBP: 00007fff2a6ae6d0 R08: 0000000000000000 R09: 00007fff2a6add70 [ 41.711499] R10: 0000000000000000 R11: 0000000000000246 R12: 000055e0b6720ad0 [ 41.712787] R13: 00007fff2a6aeb00 R14: 000055e0b6721bc0 R15: 000055e0b6732780 [ 41.714134] [ 41.714554] irq event stamp: 1745 [ 41.715215] hardirqs last enabled at (1755): [] __up_console_sem+0x78/0x80 [ 41.716737] hardirqs last disabled at (1764): [] __up_console_sem+0x5d/0x80 [ 41.718269] softirqs last enabled at (1712): [] handle_softirqs+0x50c/0x770 [ 41.719609] softirqs last disabled at (1707): [] __irq_exit_rcu+0xc4/0x100 [ 41.720554] ---[ end trace 0000000000000000 ]--- [ 42.425533] ------------[ cut here ]------------ [ 42.426565] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 42.428805] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/250 [ 42.430432] Modules linked in: [ 42.431144] CPU: 1 UID: 104 PID: 250 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 42.433635] Tainted: [W]=WARN [ 42.434391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 42.436063] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 42.437093] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 42.440729] RSP: 0018:ffff88800e767bc0 EFLAGS: 00010286 [ 42.441837] RAX: 0000000000000000 RBX: ffffed1001cecf78 RCX: ffffffff813a4050 [ 42.443299] RDX: ffff888015bc0000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 42.444757] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1001cecf2f [ 42.446221] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 42.447659] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88800e767df8 [ 42.449115] FS: 00007fdc4a1ab900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 42.450753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.451943] CR2: 00007fff5c06cef7 CR3: 000000000d639000 CR4: 0000000000350ef0 [ 42.453392] Call Trace: [ 42.453968] [ 42.454444] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 42.455452] ? __create_object+0x59/0x80 [ 42.456329] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 42.457417] __vmalloc_noprof+0x59/0x60 [ 42.458279] bpf_prog_alloc_no_stats+0x55/0x470 [ 42.459259] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.460300] bpf_prog_alloc+0x39/0x200 [ 42.461116] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.462163] bpf_prog_create_from_user+0xb2/0x2f0 [ 42.463168] do_seccomp+0x349/0x25e0 [ 42.463962] ? find_held_lock+0x2b/0x80 [ 42.464756] ? do_prlimit+0x310/0x610 [ 42.465574] ? __pfx_do_seccomp+0x10/0x10 [ 42.466457] ? do_raw_spin_unlock+0x53/0x220 [ 42.467382] ? _raw_spin_unlock+0x1e/0x40 [ 42.468249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.469323] ? static_key_count+0x60/0x80 [ 42.470226] prctl_set_seccomp+0x4e/0x70 [ 42.471093] __do_sys_prctl+0xe6c/0x1d70 [ 42.471960] ? __pfx___do_sys_prctl+0x10/0x10 [ 42.472911] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 42.473993] ? irqentry_exit+0xf3/0x650 [ 42.474803] do_syscall_64+0xbf/0x430 [ 42.475622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.476663] RIP: 0033:0x7fdc4a69d5cd [ 42.477430] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 42.480931] RSP: 002b:00007fff5c06be40 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 42.482434] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc4a69d5cd [ 42.483843] RDX: 0000558058ce9e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 42.485252] RBP: 00007fff5c06bea0 R08: 0000000000000000 R09: 00007fff5c06b540 [ 42.486662] R10: 0000000000000000 R11: 0000000000000246 R12: 00005580910182b0 [ 42.487848] R13: 00007fff5c06c2d0 R14: 000055809101ad20 R15: 000055809102c8d0 [ 42.489036] [ 42.489423] irq event stamp: 1851 [ 42.490014] hardirqs last enabled at (1861): [] __up_console_sem+0x78/0x80 [ 42.491422] hardirqs last disabled at (1870): [] __up_console_sem+0x5d/0x80 [ 42.492836] softirqs last enabled at (1726): [] handle_softirqs+0x50c/0x770 [ 42.494285] softirqs last disabled at (1721): [] __irq_exit_rcu+0xc4/0x100 [ 42.495678] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:29419' (ECDSA) to the list of known hosts. 2025/11/17 22:07:19 fuzzer started 2025/11/17 22:07:19 dialing manager at localhost:37895 2025/11/17 22:07:19 checking machine... 2025/11/17 22:07:19 checking revisions... [ 43.444558] kmemleak: Automatic memory scanning thread ended 2025/11/17 22:07:20 testing simple program... [ 43.534170] cgroup: Unknown subsys name 'net' [ 43.595749] cgroup: Unknown subsys name 'cpuset' [ 43.617569] cgroup: Unknown subsys name 'rlimit' executing program executing program VM DIAGNOSIS: 22:07:19 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888009611bc0 RCX=0000000000000001 RDX=0000000000000009 RSI=ffff888009611bc0 RDI=ffff88806ce37340 RBP=ffff88806ce37340 RSP=ffff88806ce08e20 R8 =0000000000000001 R9 =ffffed100d9c11c9 R10=0000000000000000 R11=0000000000000001 R12=0000000000000009 R13=ffffffff85a7f1c8 R14=ffffffff85a7f1c8 R15=ffff888009611c28 RIP=ffffffff814ae794 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4c9a94d900 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e0b6736b88 CR3=0000000019e80000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=652022746f6f72223d74636361207469 XMM02=3d6c616e696d72657420322e322e302e XMM03=3d656d616e74736f682022646873732f XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=652075253d64692073253d706f000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00007f670e306000 RBX=00005588b3ba5820 RCX=0000000000000000 RDX=0000000002836d31 RSI=00007fff4494c038 RDI=00007f670d05f9f8 RBP=00007fff4494c670 RSP=00007fff4494c108 R8 =000000000000c588 R9 =0000000000207988 R10=0000000000000002 R11=00007f670d05fa38 R12=00007fff4494d020 R13=00007f670d05f9f8 R14=4d0f99f3a86a7c8e R15=00000000003219f8 RIP=00007f670e4c46f3 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f670d948900 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd1f8ffa88 CR3=000000000d0b9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000002ef3902fccd54c36d8a3f3 XMM01=766a2ce8fe34a8be0e4dd296f9f51802 XMM02=0000000000303630eff9b2d0a8fce9cb XMM03=00000000003037002c67c8bc2e329bc3 XMM04=9e83adb7793a503000000000000ae988 XMM05=14648eaa1277bab10000000000320540 XMM06=e08aaa44d5e8449b0000000000319b18 XMM07=e042d86d42eb936e0000000000310cb0 XMM08=a5aa00ece5e1a5b80000000000303700 XMM09=00000000000000000000000000000000 XMM10=20200000000020202020202020200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000