Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 39.223512] ------------[ cut here ]------------ [ 39.224444] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 39.226444] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/232 [ 39.227922] Modules linked in: [ 39.228512] CPU: 0 UID: 104 PID: 232 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 39.230465] Tainted: [W]=WARN [ 39.231053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 39.232543] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 39.233455] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 39.236625] RSP: 0018:ffff88800b0a7bc0 EFLAGS: 00010286 [ 39.237590] RAX: 0000000000000000 RBX: ffffed1001614f78 RCX: ffffffff813a4050 [ 39.238875] RDX: ffff88800faf5340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 39.240177] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1001614f2f [ 39.241453] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 39.242728] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88800b0a7df8 [ 39.244025] FS: 00007f62fe14f900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 39.245439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.246492] CR2: 00007ffde93f9ef8 CR3: 000000000c9e9000 CR4: 0000000000350ef0 [ 39.247790] Call Trace: [ 39.248255] [ 39.248668] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 39.249590] ? __create_object+0x59/0x80 [ 39.250370] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 39.251340] __vmalloc_noprof+0x59/0x60 [ 39.252103] bpf_prog_alloc_no_stats+0x55/0x470 [ 39.252967] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.253897] bpf_prog_alloc+0x39/0x200 [ 39.254589] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.255513] bpf_prog_create_from_user+0xb2/0x2f0 [ 39.256403] do_seccomp+0x349/0x25e0 [ 39.257124] ? find_held_lock+0x2b/0x80 [ 39.257880] ? do_prlimit+0x310/0x610 [ 39.258570] ? __pfx_do_seccomp+0x10/0x10 [ 39.259353] ? do_raw_spin_unlock+0x53/0x220 [ 39.260193] ? _raw_spin_unlock+0x1e/0x40 [ 39.260984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 39.261956] ? static_key_count+0x60/0x80 [ 39.262732] prctl_set_seccomp+0x4e/0x70 [ 39.263457] __do_sys_prctl+0xe6c/0x1d70 [ 39.264246] ? __pfx___do_sys_prctl+0x10/0x10 [ 39.265103] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 39.266073] ? irqentry_exit+0xf3/0x650 [ 39.266829] do_syscall_64+0xbf/0x430 [ 39.267524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.268490] RIP: 0033:0x7f62fe6415cd [ 39.269191] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 39.272362] RSP: 002b:00007ffde93f8040 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 39.273751] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f62fe6415cd [ 39.275040] RDX: 0000560c36e79e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 39.276331] RBP: 00007ffde93f80a0 R08: 0000000000000000 R09: 00007ffde93f7740 [ 39.277619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000560c610baad0 [ 39.278906] R13: 00007ffde93f84d0 R14: 0000560c610bbbc0 R15: 0000560c610cc780 [ 39.280222] [ 39.280649] irq event stamp: 1759 [ 39.281288] hardirqs last enabled at (1769): [] __up_console_sem+0x78/0x80 [ 39.282829] hardirqs last disabled at (1778): [] __up_console_sem+0x5d/0x80 [ 39.284373] softirqs last enabled at (1576): [] handle_softirqs+0x50c/0x770 [ 39.285910] softirqs last disabled at (1571): [] __irq_exit_rcu+0xc4/0x100 [ 39.287414] ---[ end trace 0000000000000000 ]--- [ 42.683402] ------------[ cut here ]------------ [ 42.684186] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 42.685852] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/242 [ 42.687069] Modules linked in: [ 42.687557] CPU: 1 UID: 104 PID: 242 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 42.689210] Tainted: [W]=WARN [ 42.689667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 42.690949] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 42.691669] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 42.694319] RSP: 0018:ffff888016e37bc0 EFLAGS: 00010286 [ 42.695124] RAX: 0000000000000000 RBX: ffffed1002dc6f78 RCX: ffffffff813a4050 [ 42.696191] RDX: ffff888017863780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 42.697249] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002dc6f2f [ 42.698304] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 42.699365] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016e37df8 [ 42.700443] FS: 00007f73aaaa7900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 42.701639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.702525] CR2: 00007fff5880eef8 CR3: 000000000cd50000 CR4: 0000000000350ef0 [ 42.703586] Call Trace: [ 42.704049] [ 42.704392] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 42.705138] ? __create_object+0x59/0x80 [ 42.705779] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 42.706541] __vmalloc_noprof+0x59/0x60 [ 42.707158] bpf_prog_alloc_no_stats+0x55/0x470 [ 42.707884] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.708617] bpf_prog_alloc+0x39/0x200 [ 42.709228] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.710001] bpf_prog_create_from_user+0xb2/0x2f0 [ 42.710741] do_seccomp+0x349/0x25e0 [ 42.711295] ? find_held_lock+0x2b/0x80 [ 42.711927] ? do_prlimit+0x310/0x610 [ 42.712506] ? __pfx_do_seccomp+0x10/0x10 [ 42.713147] ? do_raw_spin_unlock+0x53/0x220 [ 42.713828] ? _raw_spin_unlock+0x1e/0x40 [ 42.714437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.715232] ? static_key_count+0x60/0x80 [ 42.715901] prctl_set_seccomp+0x4e/0x70 [ 42.716501] __do_sys_prctl+0xe6c/0x1d70 [ 42.717153] ? __pfx___do_sys_prctl+0x10/0x10 [ 42.717886] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 42.718718] ? irqentry_exit+0xf3/0x650 [ 42.719342] do_syscall_64+0xbf/0x430 [ 42.719978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.720798] RIP: 0033:0x7f73aaf995cd [ 42.721366] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 42.724113] RSP: 002b:00007fff5880ceb0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 42.725285] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f73aaf995cd [ 42.726395] RDX: 0000561ea7020e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 42.727501] RBP: 00007fff5880cf10 R08: 0000000000000000 R09: 00007fff5880c5b0 [ 42.728621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000561ebe4e3ad0 [ 42.729730] R13: 00007fff5880d340 R14: 0000561ebe4e4bc0 R15: 0000561ebe4f5780 [ 42.730857] [ 42.731224] irq event stamp: 1777 [ 42.731790] hardirqs last enabled at (1787): [] __up_console_sem+0x78/0x80 [ 42.733098] hardirqs last disabled at (1796): [] __up_console_sem+0x5d/0x80 [ 42.734396] softirqs last enabled at (1756): [] handle_softirqs+0x50c/0x770 [ 42.735748] softirqs last disabled at (1751): [] __irq_exit_rcu+0xc4/0x100 [ 42.737049] ---[ end trace 0000000000000000 ]--- [ 43.513452] ------------[ cut here ]------------ [ 43.514528] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 43.516896] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/251 [ 43.518558] Modules linked in: [ 43.519288] CPU: 1 UID: 104 PID: 251 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 43.521855] Tainted: [W]=WARN [ 43.522484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 43.524222] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 43.525247] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 43.528855] RSP: 0018:ffff88801ac5fbc0 EFLAGS: 00010286 [ 43.529977] RAX: 0000000000000000 RBX: ffffed100358bf78 RCX: ffffffff813a4050 [ 43.531404] RDX: ffff888016b68000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 43.532875] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100358bf2f [ 43.534307] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 43.535783] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801ac5fdf8 [ 43.537212] FS: 00007fde05014900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 43.538814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.540033] CR2: 00007fde05506580 CR3: 000000001ea05000 CR4: 0000000000350ef0 [ 43.541471] Call Trace: [ 43.542040] [ 43.542499] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 43.543493] ? __create_object+0x59/0x80 [ 43.544419] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 43.545567] __vmalloc_noprof+0x59/0x60 [ 43.546427] bpf_prog_alloc_no_stats+0x55/0x470 [ 43.547399] ? __pfx_seccomp_check_filter+0x10/0x10 [ 43.548485] bpf_prog_alloc+0x39/0x200 [ 43.549290] ? __pfx_seccomp_check_filter+0x10/0x10 [ 43.550332] bpf_prog_create_from_user+0xb2/0x2f0 [ 43.551333] do_seccomp+0x349/0x25e0 [ 43.552126] ? __pfx_css_rstat_updated+0x10/0x10 [ 43.553118] ? __pfx_do_seccomp+0x10/0x10 [ 43.553994] ? find_held_lock+0x2b/0x80 [ 43.554822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 43.555896] ? static_key_count+0x60/0x80 [ 43.556785] prctl_set_seccomp+0x4e/0x70 [ 43.557588] __do_sys_prctl+0xe6c/0x1d70 [ 43.558456] ? __pfx___do_sys_prctl+0x10/0x10 [ 43.559399] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 43.560481] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 43.561572] ? irqentry_exit+0xf3/0x650 [ 43.562417] do_syscall_64+0xbf/0x430 [ 43.563230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.564299] RIP: 0033:0x7fde055065cd [ 43.565076] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 43.568575] RSP: 002b:00007fffbf4578e0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 43.570096] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fde055065cd [ 43.571509] RDX: 0000556b83623e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 43.572943] RBP: 00007fffbf457940 R08: 0000000000000000 R09: 00007fffbf456fe0 [ 43.574353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000556b8eb95b10 [ 43.575781] R13: 00007fffbf457d70 R14: 0000556b8eb962b0 R15: 0000556b8ebaa6f0 [ 43.577211] [ 43.577677] irq event stamp: 1783 [ 43.578364] hardirqs last enabled at (1793): [] __up_console_sem+0x78/0x80 [ 43.580044] hardirqs last disabled at (1802): [] __up_console_sem+0x5d/0x80 [ 43.581531] softirqs last enabled at (1722): [] handle_softirqs+0x50c/0x770 [ 43.582999] softirqs last disabled at (1717): [] __irq_exit_rcu+0xc4/0x100 [ 43.584439] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:39686' (ECDSA) to the list of known hosts. 2025/11/18 21:25:13 fuzzer started 2025/11/18 21:25:14 dialing manager at localhost:34383 2025/11/18 21:25:14 checking machine... 2025/11/18 21:25:14 checking revisions... [ 44.502563] kmemleak: Automatic memory scanning thread ended 2025/11/18 21:25:14 testing simple program... [ 44.589267] cgroup: Unknown subsys name 'net' [ 44.659491] cgroup: Unknown subsys name 'cpuset' [ 44.679881] cgroup: Unknown subsys name 'rlimit' executing program executing program VM DIAGNOSIS: 21:25:13 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff8880e538f000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8135e7a2 RDI=ffff88806ce31cd0 RBP=ffffffff85e1ffe0 RSP=ffff888009627778 R8 =0000000000000001 R9 =ffff888009627880 R10=000000000003c9ed R11=000000000000b615 R12=ffffffff8135e7a2 R13=ffff888009627888 R14=ffff888009627de8 R15=ffff888009627840 RIP=ffffffff815bd154 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff58805d7c CR3=000000000e4eb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2033313a35323a313220383120766f4e XMM01=73732878696e755f6d6170203a5d3134 XMM02=65736f6c63206e6f6973736573203a29 XMM03=755f6d6170203a5d3134325b64687373 XMM04=69662068637573206f4e203a656c6163 XMM05=3a656c696620766e65206e65706f206f XMM06=65733a6468737328766e655f6d617020 XMM07=6b7a79732032313a35323a3132203831 XMM08=30343d7974696c696261706163202279 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000ff02 RBX=ffff888017861bc0 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff888017862618 RDI=ffff888017862618 RBP=ffff888017862618 RSP=ffff8880163c73b8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888017862618 R13=ffffffffffffffff R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81527588 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f73aaaa7900 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff58807000 CR3=000000001e82f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=74696d7265705f6d61703d73726f746e XMM02=000000000000000000000000000000ff XMM03=5320444f4854454d5f54505952434e45 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=61662029286e65706f5f746964756100 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000