syzkaller login: [ 39.046669] ------------[ cut here ]------------ [ 39.047580] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 39.049576] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/234 [ 39.051083] Modules linked in: [ 39.051723] CPU: 1 UID: 104 PID: 234 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 39.053759] Tainted: [W]=WARN [ 39.054320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 39.055799] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 39.056719] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 39.059978] RSP: 0018:ffff888019cf7bc0 EFLAGS: 00010286 [ 39.060942] RAX: 0000000000000000 RBX: ffffed100339ef78 RCX: ffffffff813a4050 [ 39.062231] RDX: ffff8880165cb780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 39.063511] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100339ef2f [ 39.064772] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000400dc0 [ 39.066051] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888019cf7df8 [ 39.067330] FS: 00007fe684af2900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 39.068748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.069811] CR2: 00007fe684fe4580 CR3: 000000000e8a2000 CR4: 0000000000350ef0 [ 39.071076] Call Trace: [ 39.071533] [ 39.071969] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 39.072868] ? __create_object+0x59/0x80 [ 39.073599] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 39.074559] __vmalloc_noprof+0x59/0x60 [ 39.075288] bpf_prog_alloc_no_stats+0x55/0x470 [ 39.076142] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.077065] bpf_prog_alloc+0x39/0x200 [ 39.077800] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.078716] bpf_prog_create_from_user+0xb2/0x2f0 [ 39.079567] do_seccomp+0x349/0x25e0 [ 39.080267] ? __pfx_css_rstat_updated+0x10/0x10 [ 39.081172] ? __pfx_do_seccomp+0x10/0x10 [ 39.081963] ? find_held_lock+0x2b/0x80 [ 39.082716] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 39.083622] ? static_key_count+0x60/0x80 [ 39.084420] prctl_set_seccomp+0x4e/0x70 [ 39.085195] __do_sys_prctl+0xe6c/0x1d70 [ 39.086088] ? __pfx___do_sys_prctl+0x10/0x10 [ 39.086940] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 39.087899] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 39.088851] ? irqentry_exit+0xf3/0x650 [ 39.089568] do_syscall_64+0xbf/0x430 [ 39.090309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.091233] RIP: 0033:0x7fe684fe45cd [ 39.091930] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 39.095067] RSP: 002b:00007fff1c07de60 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 39.096409] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe684fe45cd [ 39.097683] RDX: 000056197eb0fe00 RSI: 0000000000000002 RDI: 0000000000000016 [ 39.098980] RBP: 00007fff1c07dec0 R08: 0000000000000000 R09: 00007fff1c07d560 [ 39.100266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000561981257ad0 [ 39.101524] R13: 00007fff1c07e2f0 R14: 0000561981258bc0 R15: 0000561981269780 [ 39.102817] [ 39.103238] irq event stamp: 1715 [ 39.103870] hardirqs last enabled at (1725): [] __up_console_sem+0x78/0x80 [ 39.105380] hardirqs last disabled at (1734): [] __up_console_sem+0x5d/0x80 [ 39.106889] softirqs last enabled at (1684): [] handle_softirqs+0x50c/0x770 [ 39.108412] softirqs last disabled at (1679): [] __irq_exit_rcu+0xc4/0x100 [ 39.109909] ---[ end trace 0000000000000000 ]--- [ 41.819692] ------------[ cut here ]------------ [ 41.820224] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 41.821448] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/243 [ 41.822331] Modules linked in: [ 41.822725] CPU: 1 UID: 104 PID: 243 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 41.823929] Tainted: [W]=WARN [ 41.824266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 41.825262] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 41.825980] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 41.827898] RSP: 0018:ffff888015697bc0 EFLAGS: 00010286 [ 41.828471] RAX: 0000000000000000 RBX: ffffed1002ad2f78 RCX: ffffffff813a4050 [ 41.829241] RDX: ffff888015688000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 41.830241] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002ad2f2f [ 41.831081] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 41.831846] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888015697df8 [ 41.832585] FS: 00007f5308754900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 41.833443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.834084] CR2: 00007f5308c46580 CR3: 000000000d1cb000 CR4: 0000000000350ef0 [ 41.834856] Call Trace: [ 41.835139] [ 41.835387] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 41.835926] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 41.836474] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 41.837040] __vmalloc_noprof+0x59/0x60 [ 41.837467] bpf_prog_alloc_no_stats+0x55/0x470 [ 41.838000] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.838541] bpf_prog_alloc+0x39/0x200 [ 41.838982] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.839519] bpf_prog_create_from_user+0xb2/0x2f0 [ 41.840058] do_seccomp+0x349/0x25e0 [ 41.840472] ? __pfx_css_rstat_updated+0x10/0x10 [ 41.841024] ? __pfx_do_seccomp+0x10/0x10 [ 41.841478] ? find_held_lock+0x2b/0x80 [ 41.841940] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.842493] ? static_key_count+0x60/0x80 [ 41.842972] prctl_set_seccomp+0x4e/0x70 [ 41.843417] __do_sys_prctl+0xe6c/0x1d70 [ 41.843889] ? __pfx___do_sys_prctl+0x10/0x10 [ 41.844385] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 41.844973] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 41.845524] ? irqentry_exit+0xf3/0x650 [ 41.845998] do_syscall_64+0xbf/0x430 [ 41.846422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.847008] RIP: 0033:0x7f5308c465cd [ 41.847414] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 41.849338] RSP: 002b:00007ffddd0e8020 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 41.850180] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5308c465cd [ 41.850950] RDX: 00005625b0970e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 41.851726] RBP: 00007ffddd0e8080 R08: 0000000000000000 R09: 00007ffddd0e7720 [ 41.852483] R10: 0000000000000000 R11: 0000000000000246 R12: 00005625b6214ad0 [ 41.853259] R13: 00007ffddd0e84b0 R14: 00005625b6215bc0 R15: 00005625b6226780 [ 41.854055] [ 41.854313] irq event stamp: 1709 [ 41.854708] hardirqs last enabled at (1719): [] __up_console_sem+0x78/0x80 [ 41.855601] hardirqs last disabled at (1726): [] __up_console_sem+0x5d/0x80 [ 41.856520] softirqs last enabled at (1634): [] handle_softirqs+0x50c/0x770 [ 41.857450] softirqs last disabled at (1627): [] __irq_exit_rcu+0xc4/0x100 [ 41.858384] ---[ end trace 0000000000000000 ]--- [ 42.426937] ------------[ cut here ]------------ [ 42.427509] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 42.428794] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/250 [ 42.429766] Modules linked in: [ 42.430161] CPU: 1 UID: 104 PID: 250 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 42.431482] Tainted: [W]=WARN [ 42.431871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 42.432829] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 42.433393] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 42.435453] RSP: 0018:ffff888016e27bc0 EFLAGS: 00010286 [ 42.436084] RAX: 0000000000000000 RBX: ffffed1002dc4f78 RCX: ffffffff813a4050 [ 42.437085] RDX: ffff8880165c8000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 42.437980] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002dc4f2f [ 42.438808] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 42.439616] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016e27df8 [ 42.440467] FS: 00007f415c222900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 42.441577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.442278] CR2: 00007f415c714580 CR3: 000000001745b000 CR4: 0000000000350ef0 [ 42.443101] Call Trace: [ 42.443400] [ 42.443693] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 42.444251] ? __create_object+0x59/0x80 [ 42.444750] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 42.445349] __vmalloc_noprof+0x59/0x60 [ 42.445850] bpf_prog_alloc_no_stats+0x55/0x470 [ 42.446391] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.446994] bpf_prog_alloc+0x39/0x200 [ 42.447445] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.448034] bpf_prog_create_from_user+0xb2/0x2f0 [ 42.448592] do_seccomp+0x349/0x25e0 [ 42.449054] ? __pfx_css_rstat_updated+0x10/0x10 [ 42.449607] ? __pfx_do_seccomp+0x10/0x10 [ 42.450127] ? find_held_lock+0x2b/0x80 [ 42.450595] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.451215] ? static_key_count+0x60/0x80 [ 42.451748] prctl_set_seccomp+0x4e/0x70 [ 42.452213] __do_sys_prctl+0xe6c/0x1d70 [ 42.452732] ? __pfx___do_sys_prctl+0x10/0x10 [ 42.453340] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 42.454046] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 42.454639] ? irqentry_exit+0xf3/0x650 [ 42.455130] do_syscall_64+0xbf/0x430 [ 42.455586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.456191] RIP: 0033:0x7f415c7145cd [ 42.456619] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 42.458679] RSP: 002b:00007fff2adfc0b0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 42.459543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f415c7145cd [ 42.460475] RDX: 000055aa9b31fe00 RSI: 0000000000000002 RDI: 0000000000000016 [ 42.461315] RBP: 00007fff2adfc110 R08: 0000000000000000 R09: 00007fff2adfb7b0 [ 42.462160] R10: 0000000000000000 R11: 0000000000000246 R12: 000055aabebf2ad0 [ 42.462992] R13: 00007fff2adfc540 R14: 000055aabebf3bc0 R15: 000055aabec04780 [ 42.463837] [ 42.464111] irq event stamp: 1773 [ 42.464498] hardirqs last enabled at (1781): [] __up_console_sem+0x78/0x80 [ 42.465477] hardirqs last disabled at (1790): [] __up_console_sem+0x5d/0x80 [ 42.466471] softirqs last enabled at (1472): [] handle_softirqs+0x50c/0x770 [ 42.467651] softirqs last disabled at (1457): [] __irq_exit_rcu+0xc4/0x100 [ 42.468638] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:30991' (ECDSA) to the list of known hosts. 2025/11/18 16:00:52 fuzzer started 2025/11/18 16:00:53 dialing manager at localhost:34383 2025/11/18 16:00:53 checking machine... 2025/11/18 16:00:53 checking revisions... [ 43.254497] kmemleak: Automatic memory scanning thread ended 2025/11/18 16:00:53 testing simple program... [ 43.317411] cgroup: Unknown subsys name 'net' [ 43.345580] cgroup: Unknown subsys name 'cpuset' [ 43.352623] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program VM DIAGNOSIS: 16:00:52 Registers: info registers vcpu 0 RAX=000000000004ea25 RBX=0000000000000000 RCX=ffffffff84c72d57 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d2c90 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c639a R10=ffff88806ce31cd3 R11=0000000000000001 R12=ffffffff8664f850 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c7174e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce46c83020 CR3=000000000d2f1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=d9a5e54920e9ebb02b4313f25096071c XMM02=00000000003049e8eff9b2d0a8fce9cb XMM03=0000000000304ab82c67c8bc2e329bc3 XMM04=b0196e6e21c4b18800000000000ae988 XMM05=3282cff4bdb828120000000000321530 XMM06=817b8945e9d503730000000000320f28 XMM07=e042d86d42eb936e00000000003118e0 XMM08=4f4af0c2c0d44b3d0000000000304ab8 XMM09=00000000000000000000000000000000 XMM10=20200000000020202020202020200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff86aaa234 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff888017757440 RSP=ffff888017757378 R8 =ffffffff86aaa238 R9 =0000000000000000 R10=000000000003c9ed R11=0000000000023016 R12=ffff888017757448 R13=ffff888017757430 R14=ffff888017757b68 R15=ffff8880177573e8 RIP=ffffffff8135e97b RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5308754900 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5308714008 CR3=000000000e3aa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=652022746f6f72223d74636361207469 XMM02=3d6c616e696d72657420322e322e302e XMM03=3d656d616e74736f682022646873732f XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=652075253d64692073253d706f000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000