[ 39.052176] ------------[ cut here ]------------
[ 39.053091] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code!
[ 39.055389] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/233
[ 39.056888] Modules linked in:
[ 39.057474] CPU: 0 UID: 104 PID: 233 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary)
[ 39.059659] Tainted: [W]=WARN
[ 39.060754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 39.062225] RIP: 0010:vmalloc_fix_flags+0x91/0xd0
[ 39.063132] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00
[ 39.066263] RSP: 0018:ffff888016b77bc0 EFLAGS: 00010286
[ 39.067234] RAX: 0000000000000000 RBX: ffffed1002d6ef78 RCX: ffffffff813a4050
[ 39.068498] RDX: ffff88800a995340 RSI: ffffffff813a405e RDI: 0000000000000001
[ 39.069759] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002d6ef2f
[ 39.071016] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0
[ 39.072273] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016b77df8
[ 39.073556] FS: 00007fc489860900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000
[ 39.074975] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.076024] CR2: 00007ffd97396ef7 CR3: 000000000cf01000 CR4: 0000000000350ef0
[ 39.077299] Call Trace:
[ 39.077757]
[ 39.078203] ? __pfx_vmalloc_fix_flags+0x10/0x10
[ 39.079085] ? __create_object+0x59/0x80
[ 39.079813] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 39.080776] __vmalloc_noprof+0x59/0x60
[ 39.081521] bpf_prog_alloc_no_stats+0x55/0x470
[ 39.082384] ? __pfx_seccomp_check_filter+0x10/0x10
[ 39.083304] bpf_prog_alloc+0x39/0x200
[ 39.084032] ? __pfx_seccomp_check_filter+0x10/0x10
[ 39.084954] bpf_prog_create_from_user+0xb2/0x2f0
[ 39.085796] do_seccomp+0x349/0x25e0
[ 39.086505] ? find_held_lock+0x2b/0x80
[ 39.087249] ? do_prlimit+0x310/0x610
[ 39.087983] ? __pfx_do_seccomp+0x10/0x10
[ 39.088725] ? do_raw_spin_unlock+0x53/0x220
[ 39.089552] ? _raw_spin_unlock+0x1e/0x40
[ 39.090325] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 39.091274] ? static_key_count+0x60/0x80
[ 39.092070] prctl_set_seccomp+0x4e/0x70
[ 39.092803] __do_sys_prctl+0xe6c/0x1d70
[ 39.093583] ? __pfx___do_sys_prctl+0x10/0x10
[ 39.094431] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0
[ 39.095382] ? irqentry_exit+0xf3/0x650
[ 39.096140] do_syscall_64+0xbf/0x430
[ 39.096834] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 39.097768] RIP: 0033:0x7fc489d525cd
[ 39.098461] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00
[ 39.101575] RSP: 002b:00007ffd973954b0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 39.102907] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc489d525cd
[ 39.104166] RDX: 00005573a7e13e00 RSI: 0000000000000002 RDI: 0000000000000016
[ 39.105438] RBP: 00007ffd97395510 R08: 0000000000000000 R09: 00007ffd97394bb0
[ 39.106706] R10: 0000000000000000 R11: 0000000000000246 R12: 00005573c77bdad0
[ 39.107967] R13: 00007ffd97395940 R14: 00005573c77bebc0 R15: 00005573c77cf780
[ 39.109210]
[ 39.109555] irq event stamp: 1925
[ 39.110071] hardirqs last enabled at (1935): [] __up_console_sem+0x78/0x80
[ 39.111291] hardirqs last disabled at (1944): [] __up_console_sem+0x5d/0x80
[ 39.112523] softirqs last enabled at (1894): [] handle_softirqs+0x50c/0x770
[ 39.113752] softirqs last disabled at (1889): [] __irq_exit_rcu+0xc4/0x100
[ 39.114961] ---[ end trace 0000000000000000 ]---
Debian GNU/Linux 11 syzkaller ttyS0
syzkaller login: [ 42.225324] ------------[ cut here ]------------
[ 42.226281] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code!
[ 42.228373] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/242
[ 42.229829] Modules linked in:
[ 42.230443] CPU: 0 UID: 104 PID: 242 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary)
[ 42.232459] Tainted: [W]=WARN
[ 42.233069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 42.234528] RIP: 0010:vmalloc_fix_flags+0x91/0xd0
[ 42.235448] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00
[ 42.238581] RSP: 0018:ffff888016dcfbc0 EFLAGS: 00010286
[ 42.239550] RAX: 0000000000000000 RBX: ffffed1002db9f78 RCX: ffffffff813a4050
[ 42.240830] RDX: ffff888018829bc0 RSI: ffffffff813a405e RDI: 0000000000000001
[ 42.242125] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002db9f2f
[ 42.243396] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0
[ 42.244690] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016dcfdf8
[ 42.245952] FS: 00007f4593951900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000
[ 42.247390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.248444] CR2: 00007f4593e43580 CR3: 000000000bc66000 CR4: 0000000000350ef0
[ 42.249724] Call Trace:
[ 42.250230]
[ 42.250640] ? __pfx_vmalloc_fix_flags+0x10/0x10
[ 42.251539] ? __create_object+0x59/0x80
[ 42.252317] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 42.253302] __vmalloc_noprof+0x59/0x60
[ 42.254052] bpf_prog_alloc_no_stats+0x55/0x470
[ 42.254917] ? __pfx_seccomp_check_filter+0x10/0x10
[ 42.255786] bpf_prog_alloc+0x39/0x200
[ 42.256534] ? __pfx_seccomp_check_filter+0x10/0x10
[ 42.257492] bpf_prog_create_from_user+0xb2/0x2f0
[ 42.258412] do_seccomp+0x349/0x25e0
[ 42.259146] ? __pfx_css_rstat_updated+0x10/0x10
[ 42.260051] ? __pfx_do_seccomp+0x10/0x10
[ 42.260799] ? find_held_lock+0x2b/0x80
[ 42.261560] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 42.262543] ? static_key_count+0x60/0x80
[ 42.263330] prctl_set_seccomp+0x4e/0x70
[ 42.264112] __do_sys_prctl+0xe6c/0x1d70
[ 42.264917] ? __pfx___do_sys_prctl+0x10/0x10
[ 42.265734] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 42.266688] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0
[ 42.267642] ? irqentry_exit+0xf3/0x650
[ 42.268419] do_syscall_64+0xbf/0x430
[ 42.269162] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 42.270125] RIP: 0033:0x7f4593e435cd
[ 42.270771] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00
[ 42.273962] RSP: 002b:00007ffd282c4780 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 42.275322] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4593e435cd
[ 42.276631] RDX: 000055fe2c832e00 RSI: 0000000000000002 RDI: 0000000000000016
[ 42.277919] RBP: 00007ffd282c47e0 R08: 0000000000000000 R09: 00007ffd282c3e80
[ 42.279201] R10: 0000000000000000 R11: 0000000000000246 R12: 000055fe60193ad0
[ 42.280481] R13: 00007ffd282c4c10 R14: 000055fe60194bc0 R15: 000055fe601a5780
[ 42.281862]
[ 42.282303] irq event stamp: 1763
[ 42.282959] hardirqs last enabled at (1773): [] __up_console_sem+0x78/0x80
[ 42.284486] hardirqs last disabled at (1782): [] __up_console_sem+0x5d/0x80
[ 42.285649] softirqs last enabled at (1750): [] handle_softirqs+0x50c/0x770
[ 42.286633] softirqs last disabled at (1745): [] __irq_exit_rcu+0xc4/0x100
[ 42.287641] ---[ end trace 0000000000000000 ]---
[ 43.011420] ------------[ cut here ]------------
[ 43.012345] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code!
[ 43.014305] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/249
[ 43.015732] Modules linked in:
[ 43.016353] CPU: 0 UID: 104 PID: 249 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary)
[ 43.018273] Tainted: [W]=WARN
[ 43.018811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 43.020220] RIP: 0010:vmalloc_fix_flags+0x91/0xd0
[ 43.021279] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00
[ 43.024405] RSP: 0018:ffff888019d7fbc0 EFLAGS: 00010286
[ 43.025388] RAX: 0000000000000000 RBX: ffffed10033aff78 RCX: ffffffff813a4050
[ 43.026662] RDX: ffff8880163b1bc0 RSI: ffffffff813a405e RDI: 0000000000000001
[ 43.027914] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10033aff2f
[ 43.029173] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000400dc0
[ 43.030407] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888019d7fdf8
[ 43.031640] FS: 00007fad64fbd900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000
[ 43.033059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 43.034156] CR2: 00007fff55fe6ef7 CR3: 000000001f9bb000 CR4: 0000000000350ef0
[ 43.035432] Call Trace:
[ 43.035929]
[ 43.036330] ? __pfx_vmalloc_fix_flags+0x10/0x10
[ 43.037363] ? __create_object+0x59/0x80
[ 43.038255] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 43.039355] __vmalloc_noprof+0x59/0x60
[ 43.040217] bpf_prog_alloc_no_stats+0x55/0x470
[ 43.041235] ? __pfx_seccomp_check_filter+0x10/0x10
[ 43.042286] bpf_prog_alloc+0x39/0x200
[ 43.043126] ? __pfx_seccomp_check_filter+0x10/0x10
[ 43.044175] bpf_prog_create_from_user+0xb2/0x2f0
[ 43.045203] do_seccomp+0x349/0x25e0
[ 43.046019] ? find_held_lock+0x2b/0x80
[ 43.046821] ? do_prlimit+0x310/0x610
[ 43.047681] ? __pfx_do_seccomp+0x10/0x10
[ 43.048582] ? do_raw_spin_unlock+0x53/0x220
[ 43.049520] ? _raw_spin_unlock+0x1e/0x40
[ 43.050396] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 43.051492] ? static_key_count+0x60/0x80
[ 43.052392] prctl_set_seccomp+0x4e/0x70
[ 43.053275] __do_sys_prctl+0xe6c/0x1d70
[ 43.054166] ? __pfx___do_sys_prctl+0x10/0x10
[ 43.055132] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0
[ 43.056227] ? irqentry_exit+0xf3/0x650
[ 43.057106] do_syscall_64+0xbf/0x430
[ 43.057948] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 43.059019] RIP: 0033:0x7fad654af5cd
[ 43.059765] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00
[ 43.063338] RSP: 002b:00007fff55fe4360 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 43.064888] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad654af5cd
[ 43.066350] RDX: 00005623fdd75e00 RSI: 0000000000000002 RDI: 0000000000000016
[ 43.067813] RBP: 00007fff55fe43c0 R08: 0000000000000000 R09: 00007fff55fe3a60
[ 43.069317] R10: 0000000000000000 R11: 0000000000000246 R12: 000056242651dad0
[ 43.070767] R13: 00007fff55fe47f0 R14: 000056242651ebc0 R15: 000056242652f780
[ 43.072238]
[ 43.072734] irq event stamp: 1737
[ 43.073484] hardirqs last enabled at (1747): [] __up_console_sem+0x78/0x80
[ 43.075216] hardirqs last disabled at (1756): [] __up_console_sem+0x5d/0x80
[ 43.076941] softirqs last enabled at (1684): [] handle_softirqs+0x50c/0x770
[ 43.078524] softirqs last disabled at (1679): [] __irq_exit_rcu+0xc4/0x100
[ 43.079975] ---[ end trace 0000000000000000 ]---
Warning: Permanently added '[localhost]:42624' (ECDSA) to the list of known hosts.
2025/11/17 10:35:00 fuzzer started
2025/11/17 10:35:01 dialing manager at localhost:37895
2025/11/17 10:35:01 checking machine...
2025/11/17 10:35:01 checking revisions...
[ 44.016021] kmemleak: Automatic memory scanning thread ended
2025/11/17 10:35:01 testing simple program...
[ 44.114092] cgroup: Unknown subsys name 'net'
[ 44.183914] cgroup: Unknown subsys name 'cpuset'
[ 44.200507] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
VM DIAGNOSIS:
10:35:00 Registers:
info registers vcpu 0
RAX=788e450a809e9400 RBX=ffff888017350000 RCX=ffffffff87cecb40 RDX=0000000000000008
RSI=ffff888017350aa8 RDI=ffff888017350000 RBP=ffff888017350a58 RSP=ffff88806ce08848
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff888017350aa8 R13=0000000000000002 R14=0000000000000000 R15=0000000000000003
RIP=ffffffff8152655b RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f4593951900 00000000 00000000
GS =0000 ffff8880e538f000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f459391b008 CR3=000000001f8a3000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=652022746f6f72223d74636361207469
XMM02=3d6c616e696d72657420322e322e302e XMM03=3d656d616e74736f682022646873732f
XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000
XMM08=652075253d64692073253d706f000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000023e37 RBX=0000000000000001 RCX=ffffffff84c72d57 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814d2c90 RBP=dffffc0000000000 RSP=ffff8880096efe58
R8 =0000000000000001 R9 =ffffed100d9e639a R10=ffff88806cf31cd3 R11=0000000000000001
R12=ffffffff8664f650 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84c7174e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e548f000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe06fbc7028 CR3=000000000d738000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=632dec3f26c4bfb2ed4ba64a8f58827f
XMM02=0000000000302470ec2efd57dc4c00df XMM03=000000000030fac04c79dc3ab33dc496
XMM04=cb74f7f85ab64e6800000000000ae988 XMM05=d3fed9ed27f3e39200000000003212b8
XMM06=5b75c91c804453420000000000320358 XMM07=e042d86d42eb936e000000000030fd40
XMM08=4c79dc3ab33dc49600000000003024d0 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000