[ 54.029404] ------------[ cut here ]------------ [ 54.030335] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 54.032328] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/235 [ 54.033758] Modules linked in: [ 54.034391] CPU: 1 UID: 104 PID: 235 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 54.036366] Tainted: [W]=WARN [ 54.036955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 54.038454] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 54.039371] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 54.042628] RSP: 0018:ffff888016087bc0 EFLAGS: 00010286 [ 54.043606] RAX: 0000000000000000 RBX: ffffed1002c10f78 RCX: ffffffff813a4050 [ 54.044881] RDX: ffff888016dcb780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 54.046162] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002c10f2f [ 54.047456] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 54.048744] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016087df8 [ 54.050029] FS: 00007fe0faa3a900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 54.051478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.052539] CR2: 00007ffea2beaef8 CR3: 000000000c8a0000 CR4: 0000000000350ef0 [ 54.053857] Call Trace: [ 54.054320] [ 54.054738] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 54.055628] ? __create_object+0x59/0x80 [ 54.056418] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 54.057391] __vmalloc_noprof+0x59/0x60 [ 54.058163] bpf_prog_alloc_no_stats+0x55/0x470 [ 54.059034] ? __pfx_seccomp_check_filter+0x10/0x10 [ 54.059965] bpf_prog_alloc+0x39/0x200 [ 54.060657] ? __pfx_seccomp_check_filter+0x10/0x10 [ 54.061597] bpf_prog_create_from_user+0xb2/0x2f0 [ 54.062502] do_seccomp+0x349/0x25e0 [ 54.063222] ? find_held_lock+0x2b/0x80 [ 54.063983] ? do_prlimit+0x310/0x610 [ 54.064687] ? __pfx_do_seccomp+0x10/0x10 [ 54.065487] ? do_raw_spin_unlock+0x53/0x220 [ 54.066326] ? _raw_spin_unlock+0x1e/0x40 [ 54.067124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.068088] ? static_key_count+0x60/0x80 [ 54.068901] prctl_set_seccomp+0x4e/0x70 [ 54.069653] __do_sys_prctl+0xe6c/0x1d70 [ 54.070441] ? __pfx___do_sys_prctl+0x10/0x10 [ 54.071305] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 54.072274] ? irqentry_exit+0xf3/0x650 [ 54.073045] do_syscall_64+0xbf/0x430 [ 54.073760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.074729] RIP: 0033:0x7fe0faf2c5cd [ 54.075929] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 54.079144] RSP: 002b:00007ffea2be9810 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 54.080510] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe0faf2c5cd [ 54.081800] RDX: 00005608e7045e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 54.082871] RBP: 00007ffea2be9870 R08: 0000000000000000 R09: 00007ffea2be8f10 [ 54.083935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000560905ab5ad0 [ 54.085008] R13: 00007ffea2be9ca0 R14: 0000560905ab6bc0 R15: 0000560905ac7780 [ 54.086108] [ 54.086465] irq event stamp: 1697 [ 54.086993] hardirqs last enabled at (1707): [] __up_console_sem+0x78/0x80 [ 54.088260] hardirqs last disabled at (1716): [] __up_console_sem+0x5d/0x80 [ 54.089530] softirqs last enabled at (1686): [] handle_softirqs+0x50c/0x770 [ 54.090809] softirqs last disabled at (1681): [] __irq_exit_rcu+0xc4/0x100 [ 54.092078] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 56.456719] ------------[ cut here ]------------ [ 56.457165] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 56.458143] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/243 [ 56.458815] Modules linked in: [ 56.459127] CPU: 0 UID: 104 PID: 243 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 56.460054] Tainted: [W]=WARN [ 56.460317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 56.461019] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 56.461442] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 56.462954] RSP: 0018:ffff888016a0fbc0 EFLAGS: 00010286 [ 56.463401] RAX: 0000000000000000 RBX: ffffed1002d41f78 RCX: ffffffff813a4050 [ 56.464012] RDX: ffff888016dcd340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 56.464600] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002d41f2f [ 56.465204] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 56.465785] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016a0fdf8 [ 56.466387] FS: 00007f65d2b0b900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 56.467055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.467535] CR2: 00007ffc79cdeef8 CR3: 000000000e508000 CR4: 0000000000350ef0 [ 56.468136] Call Trace: [ 56.468360] [ 56.468548] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 56.468968] ? __create_object+0x59/0x80 [ 56.469323] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 56.469755] __vmalloc_noprof+0x59/0x60 [ 56.470106] bpf_prog_alloc_no_stats+0x55/0x470 [ 56.470495] ? __pfx_seccomp_check_filter+0x10/0x10 [ 56.470928] bpf_prog_alloc+0x39/0x200 [ 56.471255] ? __pfx_seccomp_check_filter+0x10/0x10 [ 56.471665] bpf_prog_create_from_user+0xb2/0x2f0 [ 56.472085] do_seccomp+0x349/0x25e0 [ 56.472403] ? find_held_lock+0x2b/0x80 [ 56.472735] ? do_prlimit+0x310/0x610 [ 56.473084] ? __pfx_do_seccomp+0x10/0x10 [ 56.473441] ? do_raw_spin_unlock+0x53/0x220 [ 56.473807] ? _raw_spin_unlock+0x1e/0x40 [ 56.474175] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.474607] ? static_key_count+0x60/0x80 [ 56.474982] prctl_set_seccomp+0x4e/0x70 [ 56.475328] __do_sys_prctl+0xe6c/0x1d70 [ 56.475670] ? __pfx___do_sys_prctl+0x10/0x10 [ 56.476070] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 56.476511] ? irqentry_exit+0xf3/0x650 [ 56.476871] do_syscall_64+0xbf/0x430 [ 56.477195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.477625] RIP: 0033:0x7f65d2ffd5cd [ 56.477954] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 56.479427] RSP: 002b:00007ffc79cdce00 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 56.480063] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65d2ffd5cd [ 56.480642] RDX: 0000564c32122e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 56.481247] RBP: 00007ffc79cdce60 R08: 0000000000000000 R09: 00007ffc79cdc500 [ 56.481823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000564c660b2bf0 [ 56.482429] R13: 00007ffc79cdd290 R14: 0000564c660bc380 R15: 0000564c660c7460 [ 56.483037] [ 56.483237] irq event stamp: 1645 [ 56.483520] hardirqs last enabled at (1653): [] __up_console_sem+0x78/0x80 [ 56.484235] hardirqs last disabled at (1662): [] __up_console_sem+0x5d/0x80 [ 56.484953] softirqs last enabled at (1190): [] handle_softirqs+0x50c/0x770 [ 56.485660] softirqs last disabled at (1181): [] __irq_exit_rcu+0xc4/0x100 [ 56.486363] ---[ end trace 0000000000000000 ]--- [ 57.229447] ------------[ cut here ]------------ [ 57.229989] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 57.231133] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/251 [ 57.231943] Modules linked in: [ 57.232276] CPU: 0 UID: 104 PID: 251 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 57.233398] Tainted: [W]=WARN [ 57.233705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 57.234525] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 57.235036] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 57.236818] RSP: 0018:ffff88801751fbc0 EFLAGS: 00010286 [ 57.237373] RAX: 0000000000000000 RBX: ffffed1002ea3f78 RCX: ffffffff813a4050 [ 57.238094] RDX: ffff88801a540000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 57.238790] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002ea3f2f [ 57.239511] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 57.240223] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801751fdf8 [ 57.240934] FS: 00007f7de2daf900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 57.241730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.242317] CR2: 00007ffd5f128ef8 CR3: 000000001f415000 CR4: 0000000000350ef0 [ 57.243029] Call Trace: [ 57.243290] [ 57.243515] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 57.244010] ? __create_object+0x59/0x80 [ 57.244934] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 57.245464] __vmalloc_noprof+0x59/0x60 [ 57.245885] bpf_prog_alloc_no_stats+0x55/0x470 [ 57.246342] ? __pfx_seccomp_check_filter+0x10/0x10 [ 57.246830] bpf_prog_alloc+0x39/0x200 [ 57.247236] ? __pfx_seccomp_check_filter+0x10/0x10 [ 57.247726] bpf_prog_create_from_user+0xb2/0x2f0 [ 57.248237] do_seccomp+0x349/0x25e0 [ 57.248616] ? find_held_lock+0x2b/0x80 [ 57.249046] ? do_prlimit+0x310/0x610 [ 57.249448] ? __pfx_do_seccomp+0x10/0x10 [ 57.249884] ? do_raw_spin_unlock+0x53/0x220 [ 57.250328] ? _raw_spin_unlock+0x1e/0x40 [ 57.250741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.251278] ? static_key_count+0x60/0x80 [ 57.251699] prctl_set_seccomp+0x4e/0x70 [ 57.252135] __do_sys_prctl+0xe6c/0x1d70 [ 57.252545] ? __pfx___do_sys_prctl+0x10/0x10 [ 57.253031] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 57.253560] ? irqentry_exit+0xf3/0x650 [ 57.253989] do_syscall_64+0xbf/0x430 [ 57.254385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.254930] RIP: 0033:0x7f7de32a15cd [ 57.255300] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 57.257078] RSP: 002b:00007ffd5f126ff0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 57.257830] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7de32a15cd [ 57.258556] RDX: 000055fdf5c5de00 RSI: 0000000000000002 RDI: 0000000000000016 [ 57.259275] RBP: 00007ffd5f127050 R08: 0000000000000000 R09: 00007ffd5f1266f0 [ 57.259995] R10: 0000000000000000 R11: 0000000000000246 R12: 000055fdfdfc9ad0 [ 57.260693] R13: 00007ffd5f127480 R14: 000055fdfdfcabc0 R15: 000055fdfdfdb780 [ 57.261439] [ 57.261678] irq event stamp: 1939 [ 57.262053] hardirqs last enabled at (1949): [] __up_console_sem+0x78/0x80 [ 57.262918] hardirqs last disabled at (1958): [] __up_console_sem+0x5d/0x80 [ 57.263758] softirqs last enabled at (1866): [] handle_softirqs+0x50c/0x770 [ 57.264631] softirqs last disabled at (1861): [] __irq_exit_rcu+0xc4/0x100 [ 57.265485] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:9326' (ECDSA) to the list of known hosts. 2025/11/17 22:20:35 fuzzer started 2025/11/17 22:20:35 dialing manager at localhost:37895 2025/11/17 22:20:35 checking machine... 2025/11/17 22:20:35 checking revisions... [ 58.155670] kmemleak: Automatic memory scanning thread ended 2025/11/17 22:20:35 testing simple program... [ 58.264049] cgroup: Unknown subsys name 'net' [ 58.361803] cgroup: Unknown subsys name 'cpuset' [ 58.386595] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program VM DIAGNOSIS: 22:20:34 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=ffff888009611bc0 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff888009612640 RDI=00000000503ba00b RBP=ffff888009612618 RSP=ffff888009627698 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff888009612640 R13=b503ba001073dead R14=0000000000000000 R15=0000000000000001 RIP=ffffffff815274e6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f65d30c2618 CR3=000000001f584000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6e69676f6c5f6d61702c78756e696c65 XMM02=755f6d61702c74696d7265705f6d6170 XMM03=2c766e655f6d61702c7374696d696c5f XMM04=6d61702c766e655f6d61702c7374696d XMM05=78696e755f6d61702c74696d7265705f XMM06=6469756e69676f6c5f6d61702c78756e XMM07=672065736f6c635f6e6f69737365733a XMM08=61662029286e65706f5f746964756100 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000003 RBX=ffffffff8671a818 RCX=ffffffff81a5668d RDX=0000000000000000 RSI=ffffffff86aa7656 RDI=ffffffff8671a818 RBP=ffffffff8671a818 RSP=ffff888015e6f2c0 R8 =ffffffff86aa7656 R9 =0000000000000000 R10=000000000003c9ed R11=0000000000022919 R12=ffffffff8671a818 R13=ffffffff8671a818 R14=ffffffff8671a818 R15=dffffc0000000000 RIP=ffffffff8135dabc RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd746c9ff50 CR3=000000001f54c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2034333a30323a323220373120766f4e XMM01=73732878696e755f6d6170203a5d3234 XMM02=65736f6c63206e6f6973736573203a29 XMM03=755f6d6170203a5d3234325b64687373 XMM04=69662068637573206f4e203a656c6163 XMM05=3a656c696620766e65206e65706f206f XMM06=65733a6468737328766e655f6d617020 XMM07=6b7a79732034333a30323a3232203731 XMM08=30343d7974696c696261706163202279 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000