syzkaller login: [ 54.040129] ------------[ cut here ]------------ [ 54.041123] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 54.043365] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/245 [ 54.044933] Modules linked in: [ 54.045865] CPU: 1 UID: 104 PID: 245 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 54.048119] Tainted: [W]=WARN [ 54.048761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 54.050335] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 54.051324] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 54.054762] RSP: 0018:ffff888019f57bc0 EFLAGS: 00010286 [ 54.055836] RAX: 0000000000000000 RBX: ffffed10033eaf78 RCX: ffffffff813a4050 [ 54.057235] RDX: ffff88800f0db780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 54.058647] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10033eaf2f [ 54.060030] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 54.061405] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888019f57df8 [ 54.062784] FS: 00007f96006c4900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 54.064342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.065473] CR2: 00007f9600bb6580 CR3: 000000000c9ab000 CR4: 0000000000350ef0 [ 54.066864] Call Trace: [ 54.067425] [ 54.067869] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 54.068844] ? __create_object+0x59/0x80 [ 54.069692] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 54.070748] __vmalloc_noprof+0x59/0x60 [ 54.071578] bpf_prog_alloc_no_stats+0x55/0x470 [ 54.072543] ? __pfx_seccomp_check_filter+0x10/0x10 [ 54.073575] bpf_prog_alloc+0x39/0x200 [ 54.074381] ? __pfx_seccomp_check_filter+0x10/0x10 [ 54.075417] bpf_prog_create_from_user+0xb2/0x2f0 [ 54.076399] do_seccomp+0x349/0x25e0 [ 54.077134] ? __pfx_css_rstat_updated+0x10/0x10 [ 54.078108] ? __pfx_do_seccomp+0x10/0x10 [ 54.078955] ? find_held_lock+0x2b/0x80 [ 54.079788] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.080835] ? static_key_count+0x60/0x80 [ 54.081708] prctl_set_seccomp+0x4e/0x70 [ 54.082545] __do_sys_prctl+0xe6c/0x1d70 [ 54.083410] ? __pfx___do_sys_prctl+0x10/0x10 [ 54.084339] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 54.085393] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 54.086444] ? irqentry_exit+0xf3/0x650 [ 54.087239] do_syscall_64+0xbf/0x430 [ 54.088044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.089074] RIP: 0033:0x7f9600bb65cd [ 54.089835] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 54.093289] RSP: 002b:00007ffd5f7f13a0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 54.094764] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9600bb65cd [ 54.096149] RDX: 0000559d4e74fe00 RSI: 0000000000000002 RDI: 0000000000000016 [ 54.097519] RBP: 00007ffd5f7f1400 R08: 0000000000000000 R09: 00007ffd5f7f0aa0 [ 54.098891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000559d805db2b0 [ 54.100294] R13: 00007ffd5f7f1830 R14: 0000559d805ddd20 R15: 0000559d805ef8d0 [ 54.101708] [ 54.102170] irq event stamp: 1809 [ 54.102863] hardirqs last enabled at (1819): [] __up_console_sem+0x78/0x80 [ 54.104518] hardirqs last disabled at (1828): [] __up_console_sem+0x5d/0x80 [ 54.106145] softirqs last enabled at (1330): [] handle_softirqs+0x50c/0x770 [ 54.107742] softirqs last disabled at (1305): [] __irq_exit_rcu+0xc4/0x100 [ 54.109037] ---[ end trace 0000000000000000 ]--- [ 56.947883] ------------[ cut here ]------------ [ 56.948801] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 56.950793] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/254 [ 56.952365] Modules linked in: [ 56.952935] CPU: 0 UID: 104 PID: 254 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 56.954906] Tainted: [W]=WARN [ 56.955509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 56.956962] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 56.957871] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 56.960996] RSP: 0018:ffff888016dffbc0 EFLAGS: 00010286 [ 56.961964] RAX: 0000000000000000 RBX: ffffed1002dbff78 RCX: ffffffff813a4050 [ 56.963273] RDX: ffff8880177b8000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 56.964527] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002dbff2f [ 56.965787] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 56.967051] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016dffdf8 [ 56.968326] FS: 00007f5c36473900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 56.969737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.970798] CR2: 00007f5c36965580 CR3: 000000000e236000 CR4: 0000000000350ef0 [ 56.972094] Call Trace: [ 56.972608] [ 56.973020] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 56.973921] ? __create_object+0x59/0x80 [ 56.974689] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 56.975672] __vmalloc_noprof+0x59/0x60 [ 56.976422] bpf_prog_alloc_no_stats+0x55/0x470 [ 56.977242] ? __pfx_seccomp_check_filter+0x10/0x10 [ 56.978174] bpf_prog_alloc+0x39/0x200 [ 56.978910] ? __pfx_seccomp_check_filter+0x10/0x10 [ 56.979851] bpf_prog_create_from_user+0xb2/0x2f0 [ 56.980754] do_seccomp+0x349/0x25e0 [ 56.981468] ? __pfx_css_rstat_updated+0x10/0x10 [ 56.982363] ? __pfx_do_seccomp+0x10/0x10 [ 56.983108] ? find_held_lock+0x2b/0x80 [ 56.983868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.984838] ? static_key_count+0x60/0x80 [ 56.985641] prctl_set_seccomp+0x4e/0x70 [ 56.986415] __do_sys_prctl+0xe6c/0x1d70 [ 56.987160] ? __pfx___do_sys_prctl+0x10/0x10 [ 56.988006] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 56.988970] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 56.989920] ? irqentry_exit+0xf3/0x650 [ 56.990687] do_syscall_64+0xbf/0x430 [ 56.991422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.992372] RIP: 0033:0x7f5c369655cd [ 56.993019] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 56.996138] RSP: 002b:00007ffec645c400 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 56.997499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c369655cd [ 56.998770] RDX: 000055f3fd0cee00 RSI: 0000000000000002 RDI: 0000000000000016 [ 57.000043] RBP: 00007ffec645c460 R08: 0000000000000000 R09: 00007ffec645bb00 [ 57.001301] R10: 0000000000000000 R11: 0000000000000246 R12: 000055f410055b10 [ 57.002580] R13: 00007ffec645c890 R14: 000055f4100562b0 R15: 000055f41006a6f0 [ 57.003878] [ 57.004336] irq event stamp: 3815 [ 57.004932] hardirqs last enabled at (3823): [] __up_console_sem+0x78/0x80 [ 57.006453] hardirqs last disabled at (3832): [] __up_console_sem+0x5d/0x80 [ 57.007967] softirqs last enabled at (3792): [] handle_softirqs+0x50c/0x770 [ 57.009494] softirqs last disabled at (3787): [] __irq_exit_rcu+0xc4/0x100 [ 57.010985] ---[ end trace 0000000000000000 ]--- [ 57.735169] ------------[ cut here ]------------ [ 57.736110] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 57.738133] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/261 [ 57.739582] Modules linked in: [ 57.740162] CPU: 0 UID: 104 PID: 261 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 57.742131] Tainted: [W]=WARN [ 57.742713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 57.744173] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 57.745063] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 57.748187] RSP: 0018:ffff888016df7bc0 EFLAGS: 00010286 [ 57.749142] RAX: 0000000000000000 RBX: ffffed1002dbef78 RCX: ffffffff813a4050 [ 57.750410] RDX: ffff888016003780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 57.751686] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002dbef2f [ 57.752962] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 57.754219] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016df7df8 [ 57.755507] FS: 00007f58865d9900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 57.756929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.757973] CR2: 00007ffffbd2eef8 CR3: 000000000e44b000 CR4: 0000000000350ef0 [ 57.759287] Call Trace: [ 57.759748] [ 57.760151] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 57.761031] ? __create_object+0x59/0x80 [ 57.761802] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 57.762763] __vmalloc_noprof+0x59/0x60 [ 57.763528] bpf_prog_alloc_no_stats+0x55/0x470 [ 57.764391] ? __pfx_seccomp_check_filter+0x10/0x10 [ 57.765307] bpf_prog_alloc+0x39/0x200 [ 57.765983] ? __pfx_seccomp_check_filter+0x10/0x10 [ 57.766888] bpf_prog_create_from_user+0xb2/0x2f0 [ 57.767812] do_seccomp+0x349/0x25e0 [ 57.768526] ? find_held_lock+0x2b/0x80 [ 57.769231] ? do_prlimit+0x310/0x610 [ 57.769973] ? __pfx_do_seccomp+0x10/0x10 [ 57.770756] ? do_raw_spin_unlock+0x53/0x220 [ 57.771598] ? _raw_spin_unlock+0x1e/0x40 [ 57.772398] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.773355] ? static_key_count+0x60/0x80 [ 57.774102] prctl_set_seccomp+0x4e/0x70 [ 57.774873] __do_sys_prctl+0xe6c/0x1d70 [ 57.775663] ? __pfx___do_sys_prctl+0x10/0x10 [ 57.776499] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 57.777452] ? irqentry_exit+0xf3/0x650 [ 57.778164] do_syscall_64+0xbf/0x430 [ 57.778896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.779837] RIP: 0033:0x7f5886acb5cd [ 57.780535] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 57.783663] RSP: 002b:00007ffffbd2d200 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 57.785002] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5886acb5cd [ 57.786275] RDX: 000055ac7de57e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 57.787558] RBP: 00007ffffbd2d260 R08: 0000000000000000 R09: 00007ffffbd2c900 [ 57.788824] R10: 0000000000000000 R11: 0000000000000246 R12: 000055ac9e96bad0 [ 57.790072] R13: 00007ffffbd2d690 R14: 000055ac9e96cbc0 R15: 000055ac9e97d780 [ 57.791364] [ 57.791789] irq event stamp: 1767 [ 57.792421] hardirqs last enabled at (1777): [] __up_console_sem+0x78/0x80 [ 57.793945] hardirqs last disabled at (1786): [] __up_console_sem+0x5d/0x80 [ 57.795480] softirqs last enabled at (1660): [] handle_softirqs+0x50c/0x770 [ 57.797026] softirqs last disabled at (1655): [] __irq_exit_rcu+0xc4/0x100 [ 57.798531] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:59053' (ECDSA) to the list of known hosts. 2025/11/18 02:23:39 fuzzer started 2025/11/18 02:23:39 dialing manager at localhost:37895 2025/11/18 02:23:39 checking machine... 2025/11/18 02:23:39 checking revisions... [ 58.746468] kmemleak: Automatic memory scanning thread ended 2025/11/18 02:23:39 testing simple program... [ 58.837587] cgroup: Unknown subsys name 'net' [ 58.889328] cgroup: Unknown subsys name 'cpuset' [ 58.902577] cgroup: Unknown subsys name 'rlimit' executing program executing program VM DIAGNOSIS: 02:23:38 Registers: info registers vcpu 0 RAX=ffffffff8161932e RBX=0000000000000001 RCX=ffffffff869f1f76 RDX=dffffc0000000000 RSI=ffff888018a07458 RDI=1ffff11003140e82 RBP=ffff888018a07410 RSP=ffff888018a072f8 R8 =ffffffff869f1f7a R9 =ffff888018a073f8 R10=000000000003c9ed R11=000000000000453f R12=ffff888018a07418 R13=ffff888018a07400 R14=ffff888018a07460 R15=ffff888018a073b8 RIP=ffffffff8135efc8 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5c36473900 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c36a2a618 CR3=000000000e228000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6e69676f6c5f6d61702c78756e696c65 XMM02=755f6d61702c74696d7265705f6d6170 XMM03=2c766e655f6d61702c7374696d696c5f XMM04=6d61702c766e655f6d61702c7374696d XMM05=78696e755f6d61702c74696d7265705f XMM06=6469756e69676f6c5f6d61702c78756e XMM07=672065736f6c635f6e6f69737365733a XMM08=61662029286e65706f5f746964756100 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888009643780 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85e1ffe0 RBP=ffffffff85e1ffe0 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003c9ed R11=000000000000453f R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff81526ee8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f41008efe0 CR3=000000000ea9a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=bbb01f03060d37a8c04ba7c35633ce2f XMM02=0000000000303740ec2efd57dc4c00df XMM03=000000000030ece8e80b77bf23c21cd0 XMM04=51d5a489733d825b00000000000ae988 XMM05=c92df57a98d30b66000000000031fc78 XMM06=039d52ccd5d264cc000000000031f618 XMM07=e042d86d42eb936e000000000030efc0 XMM08=e80b77bf23c21cd000000000003037a0 XMM09=00000000000000000000000000000000 XMM10=20200000000020202020202020200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000