[ 39.453789] ------------[ cut here ]------------ [ 39.454865] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 39.457213] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/233 [ 39.458941] Modules linked in: [ 39.459692] CPU: 0 UID: 104 PID: 233 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 39.461998] Tainted: [W]=WARN [ 39.462697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 39.464411] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 39.465474] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 39.469148] RSP: 0018:ffff88801b93fbc0 EFLAGS: 00010286 [ 39.470280] RAX: 0000000000000000 RBX: ffffed1003727f78 RCX: ffffffff813a4050 [ 39.471765] RDX: ffff888017723780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 39.473257] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1003727f2f [ 39.474737] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 39.476240] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801b93fdf8 [ 39.477736] FS: 00007f902d641900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 39.479393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.480615] CR2: 00007f902db33580 CR3: 000000000d804000 CR4: 0000000000350ef0 [ 39.482087] Call Trace: [ 39.482659] [ 39.483132] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 39.484167] ? __create_object+0x59/0x80 [ 39.485080] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 39.486198] __vmalloc_noprof+0x59/0x60 [ 39.487076] bpf_prog_alloc_no_stats+0x55/0x470 [ 39.488088] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.489175] bpf_prog_alloc+0x39/0x200 [ 39.490029] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.491098] bpf_prog_create_from_user+0xb2/0x2f0 [ 39.492140] do_seccomp+0x349/0x25e0 [ 39.493000] ? __pfx_css_rstat_updated+0x10/0x10 [ 39.494041] ? __pfx_do_seccomp+0x10/0x10 [ 39.494949] ? find_held_lock+0x2b/0x80 [ 39.495827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 39.496937] ? static_key_count+0x60/0x80 [ 39.497864] prctl_set_seccomp+0x4e/0x70 [ 39.498765] __do_sys_prctl+0xe6c/0x1d70 [ 39.499677] ? __pfx___do_sys_prctl+0x10/0x10 [ 39.500675] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 39.501781] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 39.502896] ? irqentry_exit+0xf3/0x650 [ 39.503782] do_syscall_64+0xbf/0x430 [ 39.504650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.505758] RIP: 0033:0x7f902db335cd [ 39.506579] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 39.510217] RSP: 002b:00007fffba677100 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 39.511779] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f902db335cd [ 39.513276] RDX: 000055c1393d0e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 39.514733] RBP: 00007fffba677160 R08: 0000000000000000 R09: 00007fffba676800 [ 39.516181] R10: 0000000000000000 R11: 0000000000000246 R12: 000055c1787eaad0 [ 39.517604] R13: 00007fffba677590 R14: 000055c1787ebbc0 R15: 000055c1787fc780 [ 39.518869] [ 39.519283] irq event stamp: 1777 [ 39.519917] hardirqs last enabled at (1787): [] __up_console_sem+0x78/0x80 [ 39.521413] hardirqs last disabled at (1796): [] __up_console_sem+0x5d/0x80 [ 39.522914] softirqs last enabled at (1756): [] handle_softirqs+0x50c/0x770 [ 39.524416] softirqs last disabled at (1741): [] __irq_exit_rcu+0xc4/0x100 [ 39.525882] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 43.007781] ------------[ cut here ]------------ [ 43.008743] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 43.010807] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/241 [ 43.012267] Modules linked in: [ 43.012940] CPU: 1 UID: 104 PID: 241 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 43.015163] Tainted: [W]=WARN [ 43.015829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 43.017344] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 43.018251] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 43.021449] RSP: 0018:ffff888018877bc0 EFLAGS: 00010286 [ 43.022428] RAX: 0000000000000000 RBX: ffffed100310ef78 RCX: ffffffff813a4050 [ 43.023700] RDX: ffff888016f18000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 43.025025] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100310ef2f [ 43.026304] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 43.027587] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888018877df8 [ 43.028898] FS: 00007f4cb306a900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 43.030333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.031417] CR2: 00007ffff4259ef8 CR3: 000000000e2ac000 CR4: 0000000000350ef0 [ 43.032735] Call Trace: [ 43.033220] [ 43.033676] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 43.034576] ? __create_object+0x59/0x80 [ 43.035315] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 43.036312] __vmalloc_noprof+0x59/0x60 [ 43.037078] bpf_prog_alloc_no_stats+0x55/0x470 [ 43.037944] ? __pfx_seccomp_check_filter+0x10/0x10 [ 43.038893] bpf_prog_alloc+0x39/0x200 [ 43.039632] ? __pfx_seccomp_check_filter+0x10/0x10 [ 43.040601] bpf_prog_create_from_user+0xb2/0x2f0 [ 43.041525] do_seccomp+0x349/0x25e0 [ 43.042211] ? find_held_lock+0x2b/0x80 [ 43.042987] ? do_prlimit+0x310/0x610 [ 43.043740] ? __pfx_do_seccomp+0x10/0x10 [ 43.044568] ? do_raw_spin_unlock+0x53/0x220 [ 43.045359] ? _raw_spin_unlock+0x1e/0x40 [ 43.046148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 43.047117] ? static_key_count+0x60/0x80 [ 43.047928] prctl_set_seccomp+0x4e/0x70 [ 43.048747] __do_sys_prctl+0xe6c/0x1d70 [ 43.049546] ? __pfx___do_sys_prctl+0x10/0x10 [ 43.050361] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 43.051338] ? irqentry_exit+0xf3/0x650 [ 43.052116] do_syscall_64+0xbf/0x430 [ 43.052899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.053861] RIP: 0033:0x7f4cb355c5cd [ 43.054564] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 43.057758] RSP: 002b:00007ffff4257890 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 43.059128] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4cb355c5cd [ 43.060442] RDX: 000055fcdf490e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 43.061722] RBP: 00007ffff42578f0 R08: 0000000000000000 R09: 00007ffff4256f90 [ 43.063000] R10: 0000000000000000 R11: 0000000000000246 R12: 000055fd086eead0 [ 43.064318] R13: 00007ffff4257d20 R14: 000055fd086efbc0 R15: 000055fd08700780 [ 43.065659] [ 43.066076] irq event stamp: 1803 [ 43.066705] hardirqs last enabled at (1813): [] __up_console_sem+0x78/0x80 [ 43.068223] hardirqs last disabled at (1822): [] __up_console_sem+0x5d/0x80 [ 43.069773] softirqs last enabled at (1742): [] handle_softirqs+0x50c/0x770 [ 43.071319] softirqs last disabled at (1737): [] __irq_exit_rcu+0xc4/0x100 [ 43.072883] ---[ end trace 0000000000000000 ]--- [ 43.952845] ------------[ cut here ]------------ [ 43.953801] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 43.955886] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/250 [ 43.957400] Modules linked in: [ 43.958006] CPU: 1 UID: 104 PID: 250 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 43.961569] Tainted: [W]=WARN [ 43.962145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 43.963726] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 43.964696] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 43.967906] RSP: 0018:ffff888017217bc0 EFLAGS: 00010286 [ 43.968931] RAX: 0000000000000000 RBX: ffffed1002e42f78 RCX: ffffffff813a4050 [ 43.970230] RDX: ffff888019c01bc0 RSI: ffffffff813a405e RDI: 0000000000000001 [ 43.971514] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002e42f2f [ 43.972850] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 43.974136] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888017217df8 [ 43.975420] FS: 00007fed2c60c900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 43.976896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.977959] CR2: 00007ffe34dd6ef8 CR3: 000000000e320000 CR4: 0000000000350ef0 [ 43.979261] Call Trace: [ 43.979756] [ 43.980170] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 43.981115] ? __create_object+0x59/0x80 [ 43.981906] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 43.982862] __vmalloc_noprof+0x59/0x60 [ 43.983616] bpf_prog_alloc_no_stats+0x55/0x470 [ 43.984549] ? __pfx_seccomp_check_filter+0x10/0x10 [ 43.985485] bpf_prog_alloc+0x39/0x200 [ 43.986181] ? __pfx_seccomp_check_filter+0x10/0x10 [ 43.987112] bpf_prog_create_from_user+0xb2/0x2f0 [ 43.988024] do_seccomp+0x349/0x25e0 [ 43.988772] ? find_held_lock+0x2b/0x80 [ 43.989530] ? do_prlimit+0x310/0x610 [ 43.990218] ? __pfx_do_seccomp+0x10/0x10 [ 43.991014] ? do_raw_spin_unlock+0x53/0x220 [ 43.991838] ? _raw_spin_unlock+0x1e/0x40 [ 43.992663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 43.993638] ? static_key_count+0x60/0x80 [ 43.994444] prctl_set_seccomp+0x4e/0x70 [ 43.995167] __do_sys_prctl+0xe6c/0x1d70 [ 43.995954] ? __pfx___do_sys_prctl+0x10/0x10 [ 43.996890] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 43.998006] ? irqentry_exit+0xf3/0x650 [ 43.998893] do_syscall_64+0xbf/0x430 [ 43.999745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.000888] RIP: 0033:0x7fed2cafe5cd [ 44.001706] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 44.005399] RSP: 002b:00007ffe34dd5030 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 44.006971] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed2cafe5cd [ 44.008485] RDX: 000056233feace00 RSI: 0000000000000002 RDI: 0000000000000016 [ 44.009951] RBP: 00007ffe34dd5090 R08: 0000000000000000 R09: 00007ffe34dd4730 [ 44.011425] R10: 0000000000000000 R11: 0000000000000246 R12: 00005623795f4ad0 [ 44.012954] R13: 00007ffe34dd54c0 R14: 00005623795f5bc0 R15: 0000562379606780 [ 44.014432] [ 44.014912] irq event stamp: 2125 [ 44.015660] hardirqs last enabled at (2135): [] __up_console_sem+0x78/0x80 [ 44.017435] hardirqs last disabled at (2144): [] __up_console_sem+0x5d/0x80 [ 44.019170] softirqs last enabled at (1660): [] handle_softirqs+0x50c/0x770 [ 44.020928] softirqs last disabled at (1635): [] __irq_exit_rcu+0xc4/0x100 [ 44.022408] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:29787' (ECDSA) to the list of known hosts. 2025/11/18 07:21:31 fuzzer started 2025/11/18 07:21:31 dialing manager at localhost:37895 2025/11/18 07:21:31 checking machine... 2025/11/18 07:21:31 checking revisions... [ 44.966821] kmemleak: Automatic memory scanning thread ended 2025/11/18 07:21:31 testing simple program... [ 45.047462] cgroup: Unknown subsys name 'net' [ 45.123000] cgroup: Unknown subsys name 'cpuset' [ 45.139726] cgroup: Unknown subsys name 'rlimit' executing program executing program VM DIAGNOSIS: 07:21:30 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff86a49c36 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff888009627898 RSP=ffff8880096277d0 R8 =ffffffff86a49c3a R9 =0000000000000000 R10=000000000003c9ed R11=0000000000012f69 R12=ffff8880096278a0 R13=ffff888009627888 R14=ffff888009627881 R15=ffff888009627840 RIP=ffffffff8135e8b8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4cb36220b0 CR3=000000000db9e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6eb27ea9e88e168f1a4f55a19f0e0991 XMM02=2c67c8bc2e329bc30000000000304688 XMM03=fb795ef6d657705600000000003118d0 XMM04=dce7168ce7fac7e400000000000ae988 XMM05=b21deb5217efe8c400000000003215d0 XMM06=474038aa6c007e1f0000000000320fc8 XMM07=e042d86d42eb936e0000000000311ba8 XMM08=4de54f668373803e00000000003046e8 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8136bff6 RDX=ffff888015958000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff88801ba9ff58 RSP=ffff88801ba9fea0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000001 R12=0000000000000007 R13=00007ffff425075c R14=ffff88800d2e1dc0 R15=ffff888008c6d400 RIP=ffffffff81751606 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4cb306a900 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffff425075c CR3=0000000009c8b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=490be3ac2dd0a2f1e7b96910394b7566 XMM04=4e567f30b77212d3663d3b440f61336a XMM05=00000000000000000000000000000000 XMM06=490b7f302d7212d3663d3b100f4b3366 XMM07=672065736f6c635f6e6f69737365733a XMM08=652075253d64692073253d706f000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000