syzkaller login: [ 38.915161] ------------[ cut here ]------------ [ 38.916190] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 38.918405] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/233 [ 38.921211] Modules linked in: [ 38.921951] CPU: 0 UID: 104 PID: 233 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 38.924061] Tainted: [W]=WARN [ 38.924664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 38.926269] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 38.927252] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 38.930630] RSP: 0018:ffff88800e01fbc0 EFLAGS: 00010286 [ 38.931693] RAX: 0000000000000000 RBX: ffffed1001c03f78 RCX: ffffffff813a4050 [ 38.933120] RDX: ffff888016648000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 38.934538] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1001c03f2f [ 38.935933] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000400dc0 [ 38.937344] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88800e01fdf8 [ 38.938758] FS: 00007ffaf347c900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 38.940341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.941484] CR2: 00007ffaf39e24a6 CR3: 000000000cb33000 CR4: 0000000000350ef0 [ 38.942863] Call Trace: [ 38.943416] [ 38.943855] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 38.944840] ? __create_object+0x59/0x80 [ 38.945711] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 38.946799] __vmalloc_noprof+0x59/0x60 [ 38.947650] bpf_prog_alloc_no_stats+0x55/0x470 [ 38.948601] ? __pfx_seccomp_check_filter+0x10/0x10 [ 38.949670] bpf_prog_alloc+0x39/0x200 [ 38.950477] ? __pfx_seccomp_check_filter+0x10/0x10 [ 38.951504] bpf_prog_create_from_user+0xb2/0x2f0 [ 38.952484] do_seccomp+0x349/0x25e0 [ 38.953273] ? find_held_lock+0x2b/0x80 [ 38.954111] ? do_prlimit+0x310/0x610 [ 38.954895] ? __pfx_do_seccomp+0x10/0x10 [ 38.955787] ? do_raw_spin_unlock+0x53/0x220 [ 38.956689] ? _raw_spin_unlock+0x1e/0x40 [ 38.957569] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 38.958623] ? static_key_count+0x60/0x80 [ 38.959501] prctl_set_seccomp+0x4e/0x70 [ 38.960381] __do_sys_prctl+0xe6c/0x1d70 [ 38.961236] ? __pfx___do_sys_prctl+0x10/0x10 [ 38.962212] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 38.963273] ? irqentry_exit+0xf3/0x650 [ 38.964117] do_syscall_64+0xbf/0x430 [ 38.964865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.965997] RIP: 0033:0x7ffaf396e5cd [ 38.966710] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 38.970142] RSP: 002b:00007ffcc4730170 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 38.971641] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffaf396e5cd [ 38.973021] RDX: 000055d64435fe00 RSI: 0000000000000002 RDI: 0000000000000016 [ 38.974422] RBP: 00007ffcc47301d0 R08: 0000000000000000 R09: 00007ffcc472f870 [ 38.975831] R10: 0000000000000000 R11: 0000000000000246 R12: 000055d649a6ead0 [ 38.977223] R13: 00007ffcc4730600 R14: 000055d649a6fbc0 R15: 000055d649a80780 [ 38.978664] [ 38.979168] irq event stamp: 2023 [ 38.979833] hardirqs last enabled at (2031): [] __up_console_sem+0x78/0x80 [ 38.981496] hardirqs last disabled at (2040): [] __up_console_sem+0x5d/0x80 [ 38.982912] softirqs last enabled at (1944): [] handle_softirqs+0x50c/0x770 [ 38.984285] softirqs last disabled at (1939): [] __irq_exit_rcu+0xc4/0x100 [ 38.985651] ---[ end trace 0000000000000000 ]--- [ 41.876233] ------------[ cut here ]------------ [ 41.877241] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 41.879452] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/242 [ 41.881092] Modules linked in: [ 41.881750] CPU: 0 UID: 104 PID: 242 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 41.883930] Tainted: [W]=WARN [ 41.884530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 41.886160] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 41.887160] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 41.890597] RSP: 0018:ffff8880189dfbc0 EFLAGS: 00010286 [ 41.891673] RAX: 0000000000000000 RBX: ffffed100313bf78 RCX: ffffffff813a4050 [ 41.893064] RDX: ffff88801a730000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 41.894461] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100313bf2f [ 41.895860] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 41.897274] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff8880189dfdf8 [ 41.898689] FS: 00007f27e6a4c900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 41.900234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.901404] CR2: 00007ffc6981eef8 CR3: 000000001edcf000 CR4: 0000000000350ef0 [ 41.902830] Call Trace: [ 41.903385] [ 41.903835] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 41.904796] ? __create_object+0x59/0x80 [ 41.905689] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 41.906758] __vmalloc_noprof+0x59/0x60 [ 41.907595] bpf_prog_alloc_no_stats+0x55/0x470 [ 41.908563] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.909597] bpf_prog_alloc+0x39/0x200 [ 41.910403] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.911437] bpf_prog_create_from_user+0xb2/0x2f0 [ 41.912431] do_seccomp+0x349/0x25e0 [ 41.913208] ? find_held_lock+0x2b/0x80 [ 41.914047] ? do_prlimit+0x310/0x610 [ 41.914805] ? __pfx_do_seccomp+0x10/0x10 [ 41.915674] ? do_raw_spin_unlock+0x53/0x220 [ 41.916561] ? _raw_spin_unlock+0x1e/0x40 [ 41.917428] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.918521] ? static_key_count+0x60/0x80 [ 41.919403] prctl_set_seccomp+0x4e/0x70 [ 41.920258] __do_sys_prctl+0xe6c/0x1d70 [ 41.921104] ? __pfx___do_sys_prctl+0x10/0x10 [ 41.922080] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 41.923132] ? irqentry_exit+0xf3/0x650 [ 41.923973] do_syscall_64+0xbf/0x430 [ 41.924726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.925789] RIP: 0033:0x7f27e6f3e5cd [ 41.926549] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 41.930003] RSP: 002b:00007ffc6981d000 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 41.931503] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f27e6f3e5cd [ 41.932923] RDX: 0000563ded728e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 41.934342] RBP: 00007ffc6981d060 R08: 0000000000000000 R09: 00007ffc6981c700 [ 41.935747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000563e26284240 [ 41.937154] R13: 00007ffc6981d490 R14: 0000563e2628d380 R15: 0000563e26298540 [ 41.938526] [ 41.938810] irq event stamp: 1735 [ 41.939254] hardirqs last enabled at (1745): [] __up_console_sem+0x78/0x80 [ 41.940289] hardirqs last disabled at (1754): [] __up_console_sem+0x5d/0x80 [ 41.941308] softirqs last enabled at (1578): [] handle_softirqs+0x50c/0x770 [ 41.942363] softirqs last disabled at (1573): [] __irq_exit_rcu+0xc4/0x100 [ 41.943126] ---[ end trace 0000000000000000 ]--- [ 42.694344] ------------[ cut here ]------------ [ 42.695372] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 42.697567] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/249 [ 42.699156] Modules linked in: [ 42.699802] CPU: 0 UID: 104 PID: 249 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 42.701976] Tainted: [W]=WARN [ 42.702574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 42.704194] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 42.705211] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 42.708663] RSP: 0018:ffff88800ef77bc0 EFLAGS: 00010286 [ 42.709767] RAX: 0000000000000000 RBX: ffffed1001deef78 RCX: ffffffff813a4050 [ 42.711179] RDX: ffff888016660000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 42.712592] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1001deef2f [ 42.714012] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000400dc0 [ 42.715413] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88800ef77df8 [ 42.716809] FS: 00007fd243f6d900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 42.718389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.719549] CR2: 00007fd2444d34a6 CR3: 000000000cbcb000 CR4: 0000000000350ef0 [ 42.720948] Call Trace: [ 42.721467] [ 42.721972] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 42.722973] ? __create_object+0x59/0x80 [ 42.723774] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 42.724856] __vmalloc_noprof+0x59/0x60 [ 42.725685] bpf_prog_alloc_no_stats+0x55/0x470 [ 42.726642] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.727667] bpf_prog_alloc+0x39/0x200 [ 42.728479] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.729514] bpf_prog_create_from_user+0xb2/0x2f0 [ 42.730502] do_seccomp+0x349/0x25e0 [ 42.731297] ? find_held_lock+0x2b/0x80 [ 42.732133] ? do_prlimit+0x310/0x610 [ 42.732884] ? __pfx_do_seccomp+0x10/0x10 [ 42.733766] ? do_raw_spin_unlock+0x53/0x220 [ 42.734690] ? _raw_spin_unlock+0x1e/0x40 [ 42.735553] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.736605] ? static_key_count+0x60/0x80 [ 42.737503] prctl_set_seccomp+0x4e/0x70 [ 42.738352] __do_sys_prctl+0xe6c/0x1d70 [ 42.739213] ? __pfx___do_sys_prctl+0x10/0x10 [ 42.740168] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 42.741222] ? irqentry_exit+0xf3/0x650 [ 42.742099] do_syscall_64+0xbf/0x430 [ 42.742858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.743954] RIP: 0033:0x7fd24445f5cd [ 42.744667] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 42.748107] RSP: 002b:00007ffed91cf0f0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 42.749625] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd24445f5cd [ 42.751021] RDX: 00005598145efe00 RSI: 0000000000000002 RDI: 0000000000000016 [ 42.752441] RBP: 00007ffed91cf150 R08: 0000000000000000 R09: 00007ffed91ce7f0 [ 42.753880] R10: 0000000000000000 R11: 0000000000000246 R12: 000055983b028b10 [ 42.755330] R13: 00007ffed91cf580 R14: 000055983b0292b0 R15: 000055983b03d6f0 [ 42.756772] [ 42.757291] irq event stamp: 1749 [ 42.758013] hardirqs last enabled at (1759): [] __up_console_sem+0x78/0x80 [ 42.759076] hardirqs last disabled at (1768): [] __up_console_sem+0x5d/0x80 [ 42.760142] softirqs last enabled at (1684): [] handle_softirqs+0x50c/0x770 [ 42.761219] softirqs last disabled at (1679): [] __irq_exit_rcu+0xc4/0x100 [ 42.762290] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:48109' (ECDSA) to the list of known hosts. 2025/11/18 07:31:14 fuzzer started 2025/11/18 07:31:14 dialing manager at localhost:37895 2025/11/18 07:31:14 checking machine... 2025/11/18 07:31:14 checking revisions... [ 43.633847] kmemleak: Automatic memory scanning thread ended 2025/11/18 07:31:14 testing simple program... [ 43.719197] cgroup: Unknown subsys name 'net' [ 43.777267] cgroup: Unknown subsys name 'cpuset' [ 43.797334] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program VM DIAGNOSIS: 07:31:13 Registers: info registers vcpu 0 RAX=ffff888013bfd780 RBX=0000000000000000 RCX=ffffffff8152d723 RDX=ffff888013bfd5c8 RSI=0000000000000000 RDI=ffff888013bfda70 RBP=ffff888013bfda70 RSP=ffff88806ce08dc8 R8 =0000000000000001 R9 =ffffed100d9c11aa R10=0000000000000003 R11=0000000000000001 R12=ffff88800dac7bf8 R13=0000000000000246 R14=ffff888013bfda70 R15=ffff888009462280 RIP=ffffffff81b61984 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f27e6a4c900 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f27e6a0c008 CR3=000000001ee7a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=652022746f6f72223d74636361207469 XMM02=3d6c616e696d72657420322e322e302e XMM03=3d656d616e74736f682022646873732f XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=652075253d64692073253d706f000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=f1a5ad4347fca4f5 RBX=00005581e95a9930 RCX=0000000000000025 RDX=01e7198da1d3a08b RSI=b77f3472e682cd4b RDI=00007ffe77d6f250 RBP=00007ffe77d6fba0 RSP=00007ffe77d6f2b0 R8 =6e9d9e438164848f R9 =00005581e95a0980 R10=78af323a5e08ad5d R11=0000000000013c50 R12=00007ffe77d6f3c0 R13=0000000000000007 R14=0000000000000056 R15=00005581e95a09a0 RIP=00005581dcc67c29 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f93af7de900 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f93aeef4000 CR3=000000000b824000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffff0000000000000000000000 XMM02=72207265737520726f66206465736f6c XMM03=00746f6f72207265737520726f662064 XMM04=64febcd3bbceeace00000000000ae988 XMM05=40cbfc7b95a7689e00000000003202c0 XMM06=adea1cbf20545745000000000031f060 XMM07=fb795ef6d6577056000000000030e6d0 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20200020200020202020202020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000