syzkaller login: [ 47.134221] ------------[ cut here ]------------ [ 47.135137] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 47.137209] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/232 [ 47.138675] Modules linked in: [ 47.139255] CPU: 1 UID: 104 PID: 232 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 47.141188] Tainted: [W]=WARN [ 47.142013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 47.143564] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 47.144446] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 47.147602] RSP: 0018:ffff888015e1fbc0 EFLAGS: 00010286 [ 47.148606] RAX: 0000000000000000 RBX: ffffed1002bc3f78 RCX: ffffffff813a4050 [ 47.149894] RDX: ffff888013ee5340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 47.151200] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002bc3f2f [ 47.152481] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 47.153789] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888015e1fdf8 [ 47.155096] FS: 00007f206f6d5900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 47.156545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.157617] CR2: 00007f206fbc7580 CR3: 000000000e2d0000 CR4: 0000000000350ef0 [ 47.158899] Call Trace: [ 47.159363] [ 47.159810] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 47.160702] ? __create_object+0x59/0x80 [ 47.161435] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 47.162447] __vmalloc_noprof+0x59/0x60 [ 47.163209] bpf_prog_alloc_no_stats+0x55/0x470 [ 47.164072] ? __pfx_seccomp_check_filter+0x10/0x10 [ 47.165004] bpf_prog_alloc+0x39/0x200 [ 47.165722] ? __pfx_seccomp_check_filter+0x10/0x10 [ 47.166668] bpf_prog_create_from_user+0xb2/0x2f0 [ 47.167582] do_seccomp+0x349/0x25e0 [ 47.168265] ? __pfx_css_rstat_updated+0x10/0x10 [ 47.169167] ? __pfx_do_seccomp+0x10/0x10 [ 47.169945] ? find_held_lock+0x2b/0x80 [ 47.170729] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 47.171705] ? static_key_count+0x60/0x80 [ 47.172461] prctl_set_seccomp+0x4e/0x70 [ 47.173235] __do_sys_prctl+0xe6c/0x1d70 [ 47.174026] ? __pfx___do_sys_prctl+0x10/0x10 [ 47.174907] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 47.175874] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 47.176858] ? irqentry_exit+0xf3/0x650 [ 47.177651] do_syscall_64+0xbf/0x430 [ 47.178381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.179341] RIP: 0033:0x7f206fbc75cd [ 47.180073] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 47.183210] RSP: 002b:00007fff68f26530 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 47.184575] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f206fbc75cd [ 47.185880] RDX: 000055ebda84be00 RSI: 0000000000000002 RDI: 0000000000000016 [ 47.187188] RBP: 00007fff68f26590 R08: 0000000000000000 R09: 00007fff68f25c30 [ 47.188448] R10: 0000000000000000 R11: 0000000000000246 R12: 000055ebdab41b10 [ 47.189738] R13: 00007fff68f269c0 R14: 000055ebdab422b0 R15: 000055ebdab566f0 [ 47.191064] [ 47.191482] irq event stamp: 1893 [ 47.192137] hardirqs last enabled at (1903): [] __up_console_sem+0x78/0x80 [ 47.193636] hardirqs last disabled at (1912): [] __up_console_sem+0x5d/0x80 [ 47.195176] softirqs last enabled at (1936): [] handle_softirqs+0x50c/0x770 [ 47.196688] softirqs last disabled at (1921): [] __irq_exit_rcu+0xc4/0x100 [ 47.198204] ---[ end trace 0000000000000000 ]--- [ 50.073284] ------------[ cut here ]------------ [ 50.074562] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 50.076709] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/241 [ 50.078270] Modules linked in: [ 50.078899] CPU: 0 UID: 104 PID: 241 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 50.080869] Tainted: [W]=WARN [ 50.081418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 50.082891] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 50.083792] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 50.086942] RSP: 0018:ffff88801ab57bc0 EFLAGS: 00010286 [ 50.087894] RAX: 0000000000000000 RBX: ffffed100356af78 RCX: ffffffff813a4050 [ 50.089136] RDX: ffff8880171f3780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 50.090406] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100356af2f [ 50.091658] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 50.092915] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801ab57df8 [ 50.094211] FS: 00007f31705fc900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 50.095653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.096709] CR2: 00007ffe6a7aaef7 CR3: 000000000ce90000 CR4: 0000000000350ef0 [ 50.097975] Call Trace: [ 50.098445] [ 50.098890] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 50.099789] ? __create_object+0x59/0x80 [ 50.100554] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 50.101466] __vmalloc_noprof+0x59/0x60 [ 50.102218] bpf_prog_alloc_no_stats+0x55/0x470 [ 50.103073] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.104002] bpf_prog_alloc+0x39/0x200 [ 50.104770] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.106226] bpf_prog_create_from_user+0xb2/0x2f0 [ 50.107356] do_seccomp+0x349/0x25e0 [ 50.108073] ? find_held_lock+0x2b/0x80 [ 50.108827] ? do_prlimit+0x310/0x610 [ 50.109581] ? __pfx_do_seccomp+0x10/0x10 [ 50.110328] ? do_raw_spin_unlock+0x53/0x220 [ 50.111371] ? _raw_spin_unlock+0x1e/0x40 [ 50.112271] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.113231] ? static_key_count+0x60/0x80 [ 50.114004] prctl_set_seccomp+0x4e/0x70 [ 50.114708] __do_sys_prctl+0xe6c/0x1d70 [ 50.115170] ? __pfx___do_sys_prctl+0x10/0x10 [ 50.115697] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 50.116271] ? irqentry_exit+0xf3/0x650 [ 50.116746] do_syscall_64+0xbf/0x430 [ 50.117178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.117763] RIP: 0033:0x7f3170aee5cd [ 50.118185] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 50.119725] RSP: 002b:00007ffe6a7a9bc0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.120318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3170aee5cd [ 50.120892] RDX: 000055ea6c96ee00 RSI: 0000000000000002 RDI: 0000000000000016 [ 50.121452] RBP: 00007ffe6a7a9c20 R08: 0000000000000000 R09: 00007ffe6a7a92c0 [ 50.122127] R10: 0000000000000000 R11: 0000000000000246 R12: 000055ea7d7f12b0 [ 50.122712] R13: 00007ffe6a7aa050 R14: 000055ea7d7f3d20 R15: 000055ea7d8058d0 [ 50.123276] [ 50.123466] irq event stamp: 1911 [ 50.123860] hardirqs last enabled at (1921): [] __up_console_sem+0x78/0x80 [ 50.124580] hardirqs last disabled at (1930): [] __up_console_sem+0x5d/0x80 [ 50.125241] softirqs last enabled at (1676): [] handle_softirqs+0x50c/0x770 [ 50.125930] softirqs last disabled at (1647): [] __irq_exit_rcu+0xc4/0x100 [ 50.126628] ---[ end trace 0000000000000000 ]--- [ 50.744896] ------------[ cut here ]------------ [ 50.745691] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 50.747363] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/248 [ 50.748565] Modules linked in: [ 50.749050] CPU: 1 UID: 104 PID: 248 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 50.750883] Tainted: [W]=WARN [ 50.751338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 50.752823] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 50.753575] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 50.756178] RSP: 0018:ffff888019cb7bc0 EFLAGS: 00010286 [ 50.756977] RAX: 0000000000000000 RBX: ffffed1003396f78 RCX: ffffffff813a4050 [ 50.758022] RDX: ffff88800f5f8000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 50.759079] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1003396f2f [ 50.760130] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 50.761173] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888019cb7df8 [ 50.762224] FS: 00007f839121d900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 50.763404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.764268] CR2: 00007ffeea260ef7 CR3: 000000001fd94000 CR4: 0000000000350ef0 [ 50.765313] Call Trace: [ 50.765727] [ 50.766063] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 50.766809] ? __create_object+0x59/0x80 [ 50.767415] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 50.768210] __vmalloc_noprof+0x59/0x60 [ 50.768837] bpf_prog_alloc_no_stats+0x55/0x470 [ 50.769565] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.770298] bpf_prog_alloc+0x39/0x200 [ 50.770912] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.771679] bpf_prog_create_from_user+0xb2/0x2f0 [ 50.772378] do_seccomp+0x349/0x25e0 [ 50.772972] ? find_held_lock+0x2b/0x80 [ 50.773597] ? do_prlimit+0x310/0x610 [ 50.774170] ? __pfx_do_seccomp+0x10/0x10 [ 50.774832] ? do_raw_spin_unlock+0x53/0x220 [ 50.775476] ? _raw_spin_unlock+0x1e/0x40 [ 50.776110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.776898] ? static_key_count+0x60/0x80 [ 50.777551] prctl_set_seccomp+0x4e/0x70 [ 50.778153] __do_sys_prctl+0xe6c/0x1d70 [ 50.778809] ? __pfx___do_sys_prctl+0x10/0x10 [ 50.779477] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 50.780276] ? irqentry_exit+0xf3/0x650 [ 50.780903] do_syscall_64+0xbf/0x430 [ 50.781472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.782269] RIP: 0033:0x7f839170f5cd [ 50.782849] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 50.785429] RSP: 002b:00007ffeea25f410 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.786553] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f839170f5cd [ 50.787598] RDX: 000055e3dd3a6e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 50.788649] RBP: 00007ffeea25f470 R08: 0000000000000000 R09: 00007ffeea25eb10 [ 50.789695] R10: 0000000000000000 R11: 0000000000000246 R12: 000055e3f5d852b0 [ 50.790745] R13: 00007ffeea25f8a0 R14: 000055e3f5d87d20 R15: 000055e3f5d998d0 [ 50.791812] [ 50.792158] irq event stamp: 1867 [ 50.792690] hardirqs last enabled at (1877): [] __up_console_sem+0x78/0x80 [ 50.793946] hardirqs last disabled at (1886): [] __up_console_sem+0x5d/0x80 [ 50.795210] softirqs last enabled at (1412): [] handle_softirqs+0x50c/0x770 [ 50.796483] softirqs last disabled at (1339): [] __irq_exit_rcu+0xc4/0x100 [ 50.797746] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:63563' (ECDSA) to the list of known hosts. 2025/11/17 12:47:02 fuzzer started 2025/11/17 12:47:02 dialing manager at localhost:37895 2025/11/17 12:47:02 checking machine... 2025/11/17 12:47:02 checking revisions... [ 51.544581] kmemleak: Automatic memory scanning thread ended 2025/11/17 12:47:02 testing simple program... [ 51.622848] cgroup: Unknown subsys name 'net' [ 51.686940] cgroup: Unknown subsys name 'cpuset' [ 51.702977] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program VM DIAGNOSIS: 12:47:01 Registers: info registers vcpu 0 RAX=ffffffff8135e4a9 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85e1ffe0 RBP=ffffffff85e1ffe0 RSP=ffff888009627758 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003c9ed R11=0000000000011d83 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888009627840 RIP=ffffffff81529235 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ea7d818818 CR3=0000000009e47000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2031303a37343a323120373120766f4e XMM01=73732878696e755f6d6170203a5d3034 XMM02=65736f6c63206e6f6973736573203a29 XMM03=755f6d6170203a5d3034325b64687373 XMM04=69662068637573206f4e203a656c6163 XMM05=3a656c696620766e65206e65706f206f XMM06=65733a6468737328766e655f6d617020 XMM07=6b7a79732031303a37343a3231203731 XMM08=30343d7974696c696261706163202279 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000004c RBX=000055ea7d7eeb20 RCX=0000000000000065 RDX=00007f3170b614c0 RSI=00007f31705d7b22 RDI=000055ea7d7eeb20 RBP=0000000000000012 RSP=00007ffe6a7a9528 R8 =000055ea7d81ad27 R9 =00007f3170baebe0 R10=0000000000000100 R11=0000000000000246 R12=000055ea7d80bf80 R13=00007ffe6a7a9538 R14=00007f31705d7b22 R15=00007f31705fc710 RIP=00007f3170b4daf6 RFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f31705fc900 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe6a7a3000 CR3=000000000c837000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff00000000000000000000000000 XMM01=000001000000ffff00ff000000000000 XMM02=2f00646f6874656d5f74707972636e65 XMM03=36090954554f454d49545f4e49474f4c XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=000000ffffffffffffffffffffffffff XMM08=00000020202020202020002020202020 XMM09=0000ffffffffffffffffffffffffffff XMM10=00002020202020200020202020202020 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000