[ 38.922671] ------------[ cut here ]------------ [ 38.923591] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 38.925680] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/233 [ 38.927167] Modules linked in: [ 38.927765] CPU: 1 UID: 104 PID: 233 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 38.929771] Tainted: [W]=WARN [ 38.930387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 38.931871] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 38.932802] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 38.936020] RSP: 0018:ffff88801776fbc0 EFLAGS: 00010286 [ 38.937026] RAX: 0000000000000000 RBX: ffffed1002eedf78 RCX: ffffffff813a4050 [ 38.938358] RDX: ffff8880177a5340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 38.939673] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002eedf2f [ 38.940979] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 38.942265] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801776fdf8 [ 38.943571] FS: 00007f74b884b900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 38.945059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.946126] CR2: 00007ffc51c87ef7 CR3: 000000000cf48000 CR4: 0000000000350ef0 [ 38.947439] Call Trace: [ 38.947908] [ 38.948379] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 38.949300] ? __create_object+0x59/0x80 [ 38.950085] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 38.951066] __vmalloc_noprof+0x59/0x60 [ 38.951794] bpf_prog_alloc_no_stats+0x55/0x470 [ 38.952696] ? __pfx_seccomp_check_filter+0x10/0x10 [ 38.953652] bpf_prog_alloc+0x39/0x200 [ 38.954391] ? __pfx_seccomp_check_filter+0x10/0x10 [ 38.955321] bpf_prog_create_from_user+0xb2/0x2f0 [ 38.956262] do_seccomp+0x349/0x25e0 [ 38.956997] ? find_held_lock+0x2b/0x80 [ 38.957730] ? do_prlimit+0x310/0x610 [ 38.958485] ? __pfx_do_seccomp+0x10/0x10 [ 38.959290] ? do_raw_spin_unlock+0x53/0x220 [ 38.960144] ? _raw_spin_unlock+0x1e/0x40 [ 38.960893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 38.961894] ? static_key_count+0x60/0x80 [ 38.962716] prctl_set_seccomp+0x4e/0x70 [ 38.963507] __do_sys_prctl+0xe6c/0x1d70 [ 38.964335] ? __pfx___do_sys_prctl+0x10/0x10 [ 38.965217] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 38.966204] ? irqentry_exit+0xf3/0x650 [ 38.966977] do_syscall_64+0xbf/0x430 [ 38.967693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.968682] RIP: 0033:0x7f74b8d3d5cd [ 38.969406] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 38.972920] RSP: 002b:00007ffc51c857e0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 38.973798] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f74b8d3d5cd [ 38.974624] RDX: 00005594359f3e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 38.975456] RBP: 00007ffc51c85840 R08: 0000000000000000 R09: 00007ffc51c84ee0 [ 38.976304] R10: 0000000000000000 R11: 0000000000000246 R12: 000055944dc0fad0 [ 38.976970] R13: 00007ffc51c85c70 R14: 000055944dc10bc0 R15: 000055944dc21780 [ 38.977549] [ 38.977741] irq event stamp: 1799 [ 38.978048] hardirqs last enabled at (1809): [] __up_console_sem+0x78/0x80 [ 38.978733] hardirqs last disabled at (1816): [] __up_console_sem+0x5d/0x80 [ 38.979440] softirqs last enabled at (1770): [] handle_softirqs+0x50c/0x770 [ 38.980174] softirqs last disabled at (1765): [] __irq_exit_rcu+0xc4/0x100 [ 38.980850] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 41.146363] ------------[ cut here ]------------ [ 41.146777] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 41.147716] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/241 [ 41.148407] Modules linked in: [ 41.148679] CPU: 0 UID: 104 PID: 241 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 41.149584] Tainted: [W]=WARN [ 41.149833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 41.150499] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 41.150891] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 41.152343] RSP: 0018:ffff88801469fbc0 EFLAGS: 00010286 [ 41.152768] RAX: 0000000000000000 RBX: ffffed10028d3f78 RCX: ffffffff813a4050 [ 41.153354] RDX: ffff88801728d340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 41.153914] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10028d3f2f [ 41.154490] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 41.155074] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801469fdf8 [ 41.155639] FS: 00007f0232b7e900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 41.156301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.156762] CR2: 00007fff1768cef7 CR3: 000000000d31d000 CR4: 0000000000350ef0 [ 41.157346] Call Trace: [ 41.157556] [ 41.157740] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 41.158147] ? __create_object+0x59/0x80 [ 41.158480] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 41.158902] __vmalloc_noprof+0x59/0x60 [ 41.159248] bpf_prog_alloc_no_stats+0x55/0x470 [ 41.159622] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.160060] bpf_prog_alloc+0x39/0x200 [ 41.160377] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.160774] bpf_prog_create_from_user+0xb2/0x2f0 [ 41.161180] do_seccomp+0x349/0x25e0 [ 41.161484] ? find_held_lock+0x2b/0x80 [ 41.161808] ? do_prlimit+0x310/0x610 [ 41.162141] ? __pfx_do_seccomp+0x10/0x10 [ 41.162477] ? do_raw_spin_unlock+0x53/0x220 [ 41.162831] ? _raw_spin_unlock+0x1e/0x40 [ 41.163184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.163598] ? static_key_count+0x60/0x80 [ 41.163961] prctl_set_seccomp+0x4e/0x70 [ 41.164298] __do_sys_prctl+0xe6c/0x1d70 [ 41.164635] ? __pfx___do_sys_prctl+0x10/0x10 [ 41.165025] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 41.165445] ? irqentry_exit+0xf3/0x650 [ 41.165770] do_syscall_64+0xbf/0x430 [ 41.166109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.166518] RIP: 0033:0x7f02330705cd [ 41.166877] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 41.168631] RSP: 002b:00007fff1768a4e0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 41.169395] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f02330705cd [ 41.170109] RDX: 000055a65b102e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 41.170789] RBP: 00007fff1768a540 R08: 0000000000000000 R09: 00007fff17689be0 [ 41.171490] R10: 0000000000000000 R11: 0000000000000246 R12: 000055a667568b10 [ 41.172214] R13: 00007fff1768a970 R14: 000055a6675692b0 R15: 000055a66757d6f0 [ 41.172921] [ 41.173160] irq event stamp: 1643 [ 41.173435] hardirqs last enabled at (1651): [] __up_console_sem+0x78/0x80 [ 41.174129] hardirqs last disabled at (1660): [] __up_console_sem+0x5d/0x80 [ 41.174795] softirqs last enabled at (1200): [] handle_softirqs+0x50c/0x770 [ 41.175497] softirqs last disabled at (1191): [] __irq_exit_rcu+0xc4/0x100 [ 41.176192] ---[ end trace 0000000000000000 ]--- [ 41.772541] ------------[ cut here ]------------ [ 41.773459] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 41.775502] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/248 [ 41.776970] Modules linked in: [ 41.777563] CPU: 1 UID: 104 PID: 248 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 41.779775] Tainted: [W]=WARN [ 41.780460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 41.781966] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 41.782846] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 41.786026] RSP: 0018:ffff88801753fbc0 EFLAGS: 00010286 [ 41.787001] RAX: 0000000000000000 RBX: ffffed1002ea7f78 RCX: ffffffff813a4050 [ 41.788298] RDX: ffff888018c11bc0 RSI: ffffffff813a405e RDI: 0000000000000001 [ 41.789567] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002ea7f2f [ 41.790858] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 41.792147] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801753fdf8 [ 41.793437] FS: 00007fc708b7a900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 41.794861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.795953] CR2: 00007ffde896def7 CR3: 0000000020718000 CR4: 0000000000350ef0 [ 41.797246] Call Trace: [ 41.797707] [ 41.798164] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 41.799062] ? __create_object+0x59/0x80 [ 41.799806] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 41.800780] __vmalloc_noprof+0x59/0x60 [ 41.801532] bpf_prog_alloc_no_stats+0x55/0x470 [ 41.802415] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.803351] bpf_prog_alloc+0x39/0x200 [ 41.804100] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.805038] bpf_prog_create_from_user+0xb2/0x2f0 [ 41.805899] do_seccomp+0x349/0x25e0 [ 41.806622] ? find_held_lock+0x2b/0x80 [ 41.807381] ? do_prlimit+0x310/0x610 [ 41.808132] ? __pfx_do_seccomp+0x10/0x10 [ 41.808877] ? do_raw_spin_unlock+0x53/0x220 [ 41.809706] ? _raw_spin_unlock+0x1e/0x40 [ 41.810487] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.811455] ? static_key_count+0x60/0x80 [ 41.812271] prctl_set_seccomp+0x4e/0x70 [ 41.813054] __do_sys_prctl+0xe6c/0x1d70 [ 41.813788] ? __pfx___do_sys_prctl+0x10/0x10 [ 41.814642] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 41.815619] ? irqentry_exit+0xf3/0x650 [ 41.816395] do_syscall_64+0xbf/0x430 [ 41.817134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.818083] RIP: 0033:0x7fc70906c5cd [ 41.818739] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 41.821901] RSP: 002b:00007ffde896bd30 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 41.823289] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc70906c5cd [ 41.824570] RDX: 0000558306f51e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 41.825693] RBP: 00007ffde896bd90 R08: 0000000000000000 R09: 00007ffde896b430 [ 41.826761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000558344591b10 [ 41.827829] R13: 00007ffde896c1c0 R14: 00005583445922b0 R15: 00005583445a66f0 [ 41.828916] [ 41.829293] irq event stamp: 3603 [ 41.829792] hardirqs last enabled at (3611): [] __up_console_sem+0x78/0x80 [ 41.831049] hardirqs last disabled at (3620): [] __up_console_sem+0x5d/0x80 [ 41.832319] softirqs last enabled at (3222): [] handle_softirqs+0x50c/0x770 [ 41.833594] softirqs last disabled at (3217): [] __irq_exit_rcu+0xc4/0x100 [ 41.834849] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:8756' (ECDSA) to the list of known hosts. 2025/11/17 17:03:13 fuzzer started 2025/11/17 17:03:13 dialing manager at localhost:37895 2025/11/17 17:03:13 checking machine... 2025/11/17 17:03:13 checking revisions... [ 42.633408] kmemleak: Automatic memory scanning thread ended 2025/11/17 17:03:13 testing simple program... [ 42.714500] cgroup: Unknown subsys name 'net' [ 42.778195] cgroup: Unknown subsys name 'cpuset' [ 42.791571] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program VM DIAGNOSIS: 17:03:13 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888017ae7d70 RCX=ffffffff83ee93de RDX=ffff888016288000 RSI=ffffffff83ee93ec RDI=0000000000000006 RBP=0000000000000014 RSP=ffff888017ae7c28 R8 =0000000000000001 R9 =ffffed10041949a2 R10=0000000000000014 R11=0000000000000001 R12=0000000000000000 R13=ffff88802064b780 R14=0000000000000014 R15=ffff888017ae7d80 RIP=ffffffff81751c78 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0232b7e900 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff17684000 CR3=0000000020c3e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=74696d7265705f6d61703d73726f746e XMM02=000000000000000000000000000000ff XMM03=5320444f4854454d5f54505952434e45 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=61662029286e65706f5f746964756100 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000022ead RBX=0000000000000001 RCX=ffffffff84c72d57 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d2c90 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e639a R10=ffff88806cf31cd3 R11=0000000000000001 R12=ffffffff8664f650 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c7174e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0233135618 CR3=000000000d31f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2032313a33303a373120373120766f4e XMM01=73732878696e755f6d6170203a5d3034 XMM02=65736f6c63206e6f6973736573203a29 XMM03=755f6d6170203a5d3034325b64687373 XMM04=69662068637573206f4e203a656c6163 XMM05=3a656c696620766e65206e65706f206f XMM06=65733a6468737328766e655f6d617020 XMM07=6b7a79732032313a33303a3731203731 XMM08=30343d7974696c696261706163202279 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000