[ 39.078131] ------------[ cut here ]------------ [ 39.079111] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 39.081098] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/235 [ 39.082583] Modules linked in: [ 39.083204] CPU: 1 UID: 104 PID: 235 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 39.085165] Tainted: [W]=WARN [ 39.085771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 39.087241] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 39.088164] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 39.091345] RSP: 0018:ffff8880164f7bc0 EFLAGS: 00010286 [ 39.092326] RAX: 0000000000000000 RBX: ffffed1002c9ef78 RCX: ffffffff813a4050 [ 39.093613] RDX: ffff88800a703780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 39.094906] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002c9ef2f [ 39.096196] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 39.097489] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff8880164f7df8 [ 39.098776] FS: 00007f5f9a1f7900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 39.100198] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.101269] CR2: 00007f5f9a75d4a6 CR3: 000000000d6df000 CR4: 0000000000350ef0 [ 39.102545] Call Trace: [ 39.103004] [ 39.103416] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 39.104310] ? __create_object+0x59/0x80 [ 39.105109] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 39.106097] __vmalloc_noprof+0x59/0x60 [ 39.106870] bpf_prog_alloc_no_stats+0x55/0x470 [ 39.107742] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.108672] bpf_prog_alloc+0x39/0x200 [ 39.109370] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.110290] bpf_prog_create_from_user+0xb2/0x2f0 [ 39.111367] do_seccomp+0x349/0x25e0 [ 39.112305] ? find_held_lock+0x2b/0x80 [ 39.113291] ? do_prlimit+0x310/0x610 [ 39.114144] ? __pfx_do_seccomp+0x10/0x10 [ 39.115001] ? do_raw_spin_unlock+0x53/0x220 [ 39.115854] ? _raw_spin_unlock+0x1e/0x40 [ 39.116647] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 39.117645] ? static_key_count+0x60/0x80 [ 39.118483] prctl_set_seccomp+0x4e/0x70 [ 39.119302] __do_sys_prctl+0xe6c/0x1d70 [ 39.120099] ? __pfx___do_sys_prctl+0x10/0x10 [ 39.120953] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 39.121918] ? irqentry_exit+0xf3/0x650 [ 39.122700] do_syscall_64+0xbf/0x430 [ 39.123380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.124332] RIP: 0033:0x7f5f9a6e95cd [ 39.125038] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 39.128164] RSP: 002b:00007fff034d91d0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 39.129510] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f9a6e95cd [ 39.130815] RDX: 000056172990ce00 RSI: 0000000000000002 RDI: 0000000000000016 [ 39.132081] RBP: 00007fff034d9230 R08: 0000000000000000 R09: 00007fff034d88d0 [ 39.133347] R10: 0000000000000000 R11: 0000000000000246 R12: 000056175ed132b0 [ 39.134672] R13: 00007fff034d9660 R14: 000056175ed15d20 R15: 000056175ed278d0 [ 39.136019] [ 39.136437] irq event stamp: 2627 [ 39.137124] hardirqs last enabled at (2637): [] __up_console_sem+0x78/0x80 [ 39.138686] hardirqs last disabled at (2646): [] __up_console_sem+0x5d/0x80 [ 39.140271] softirqs last enabled at (2586): [] handle_softirqs+0x50c/0x770 [ 39.141872] softirqs last disabled at (2579): [] __irq_exit_rcu+0xc4/0x100 [ 39.143414] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 41.994663] ------------[ cut here ]------------ [ 41.995643] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 41.997684] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/244 [ 41.999178] Modules linked in: [ 41.999863] CPU: 0 UID: 104 PID: 244 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 42.001917] Tainted: [W]=WARN [ 42.002485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 42.004010] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 42.004931] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 42.008185] RSP: 0018:ffff888019497bc0 EFLAGS: 00010286 [ 42.009199] RAX: 0000000000000000 RBX: ffffed1003292f78 RCX: ffffffff813a4050 [ 42.010536] RDX: ffff888015c20000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 42.011859] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1003292f2f [ 42.013179] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 42.014485] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888019497df8 [ 42.015793] FS: 00007f3c5222a900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 42.017251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.018322] CR2: 00007ffd43b83ef7 CR3: 000000001f9df000 CR4: 0000000000350ef0 [ 42.019635] Call Trace: [ 42.020124] [ 42.020592] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 42.021472] ? __create_object+0x59/0x80 [ 42.022253] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 42.023252] __vmalloc_noprof+0x59/0x60 [ 42.024042] bpf_prog_alloc_no_stats+0x55/0x470 [ 42.024936] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.025898] bpf_prog_alloc+0x39/0x200 [ 42.026637] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.027593] bpf_prog_create_from_user+0xb2/0x2f0 [ 42.028472] do_seccomp+0x349/0x25e0 [ 42.029204] ? find_held_lock+0x2b/0x80 [ 42.029964] ? do_prlimit+0x310/0x610 [ 42.030732] ? __pfx_do_seccomp+0x10/0x10 [ 42.031498] ? do_raw_spin_unlock+0x53/0x220 [ 42.032363] ? _raw_spin_unlock+0x1e/0x40 [ 42.033158] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.034149] ? static_key_count+0x60/0x80 [ 42.034986] prctl_set_seccomp+0x4e/0x70 [ 42.035787] __do_sys_prctl+0xe6c/0x1d70 [ 42.036602] ? __pfx___do_sys_prctl+0x10/0x10 [ 42.037438] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 42.038420] ? irqentry_exit+0xf3/0x650 [ 42.039203] do_syscall_64+0xbf/0x430 [ 42.039962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.040935] RIP: 0033:0x7f3c5271c5cd [ 42.041667] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 42.044895] RSP: 002b:00007ffd43b82b10 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 42.046300] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c5271c5cd [ 42.047632] RDX: 00005597a500ce00 RSI: 0000000000000002 RDI: 0000000000000016 [ 42.048918] RBP: 00007ffd43b82b70 R08: 0000000000000000 R09: 00007ffd43b82210 [ 42.050230] R10: 0000000000000000 R11: 0000000000000246 R12: 00005597b3aedb10 [ 42.051573] R13: 00007ffd43b82fa0 R14: 00005597b3aee2b0 R15: 00005597b3b026f0 [ 42.052895] [ 42.053332] irq event stamp: 1705 [ 42.053982] hardirqs last enabled at (1715): [] __up_console_sem+0x78/0x80 [ 42.055544] hardirqs last disabled at (1724): [] __up_console_sem+0x5d/0x80 [ 42.057088] softirqs last enabled at (1684): [] handle_softirqs+0x50c/0x770 [ 42.058658] softirqs last disabled at (1679): [] __irq_exit_rcu+0xc4/0x100 [ 42.060217] ---[ end trace 0000000000000000 ]--- [ 42.778764] ------------[ cut here ]------------ [ 42.779719] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 42.781696] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/251 [ 42.783215] Modules linked in: [ 42.783865] CPU: 0 UID: 104 PID: 251 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 42.785881] Tainted: [W]=WARN [ 42.786455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 42.787955] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 42.788887] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 42.792117] RSP: 0018:ffff888017597bc0 EFLAGS: 00010286 [ 42.793116] RAX: 0000000000000000 RBX: ffffed1002eb2f78 RCX: ffffffff813a4050 [ 42.794437] RDX: ffff88800ced5340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 42.795746] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002eb2f2f [ 42.797043] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000400dc0 [ 42.798361] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888017597df8 [ 42.799682] FS: 00007f0999828900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 42.801154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.802251] CR2: 00007fff77d67ef7 CR3: 000000000b7a9000 CR4: 0000000000350ef0 [ 42.803572] Call Trace: [ 42.804053] [ 42.804464] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 42.805363] ? __create_object+0x59/0x80 [ 42.806165] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 42.807154] __vmalloc_noprof+0x59/0x60 [ 42.807941] bpf_prog_alloc_no_stats+0x55/0x470 [ 42.808832] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.809795] bpf_prog_alloc+0x39/0x200 [ 42.810505] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.811468] bpf_prog_create_from_user+0xb2/0x2f0 [ 42.812381] do_seccomp+0x349/0x25e0 [ 42.813109] ? find_held_lock+0x2b/0x80 [ 42.813880] ? do_prlimit+0x310/0x610 [ 42.814636] ? __pfx_do_seccomp+0x10/0x10 [ 42.815395] ? do_raw_spin_unlock+0x53/0x220 [ 42.816259] ? _raw_spin_unlock+0x1e/0x40 [ 42.817056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.818045] ? static_key_count+0x60/0x80 [ 42.818881] prctl_set_seccomp+0x4e/0x70 [ 42.819677] __do_sys_prctl+0xe6c/0x1d70 [ 42.820449] ? __pfx___do_sys_prctl+0x10/0x10 [ 42.821332] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 42.822322] ? irqentry_exit+0xf3/0x650 [ 42.823110] do_syscall_64+0xbf/0x430 [ 42.823879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.824861] RIP: 0033:0x7f0999d1a5cd [ 42.825590] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 42.828843] RSP: 002b:00007fff77d667d0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 42.830234] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0999d1a5cd [ 42.831559] RDX: 000055c450b0ce00 RSI: 0000000000000002 RDI: 0000000000000016 [ 42.832851] RBP: 00007fff77d66830 R08: 0000000000000000 R09: 00007fff77d65ed0 [ 42.834138] R10: 0000000000000000 R11: 0000000000000246 R12: 000055c47028abf0 [ 42.835440] R13: 00007fff77d66c60 R14: 000055c470294380 R15: 000055c47029f460 [ 42.836774] [ 42.837211] irq event stamp: 1721 [ 42.837863] hardirqs last enabled at (1731): [] __up_console_sem+0x78/0x80 [ 42.839392] hardirqs last disabled at (1740): [] __up_console_sem+0x5d/0x80 [ 42.840918] softirqs last enabled at (1690): [] handle_softirqs+0x50c/0x770 [ 42.842462] softirqs last disabled at (1685): [] __irq_exit_rcu+0xc4/0x100 [ 42.844004] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:14607' (ECDSA) to the list of known hosts. 2025/11/18 08:47:12 fuzzer started 2025/11/18 08:47:12 dialing manager at localhost:34383 2025/11/18 08:47:12 checking machine... 2025/11/18 08:47:12 checking revisions... [ 43.786361] kmemleak: Automatic memory scanning thread ended 2025/11/18 08:47:13 testing simple program... [ 43.870613] cgroup: Unknown subsys name 'net' [ 43.925480] cgroup: Unknown subsys name 'cpuset' [ 43.942580] cgroup: Unknown subsys name 'rlimit' executing program executing program VM DIAGNOSIS: 08:47:12 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888017ac8000 RCX=ffff8880164f793c RDX=0000000000000000 RSI=ffffffff81b2a224 RDI=ffff888017ac83fc RBP=ffff888017ac8000 RSP=ffff8880164f7960 R8 =ffffffff86a49dd0 R9 =ffff8880164f7a28 R10=000000000003c9ed R11=0000000000012f5f R12=0000000000000000 R13=ffff8880164f7a30 R14=ffff888017ac8000 R15=ffff8880164f79e8 RIP=ffffffff815bd7a7 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3c5222a900 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3c52209020 CR3=0000000017627000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=37343a383020383120766f4e3e36383c XMM01=7365733a646873732878696e755f6d61 XMM02=736f6c63206e6f6973736573203a296e XMM03=5f6d6170203a5d3334325b6468737320 XMM04=6456774875434142334f726f59427469 XMM05=485320415352203a3268737320363231 XMM06=206d6f726620746f6f7220726f662079 XMM07=00000000000000000000000000000000 XMM08=3a677562656420676f6c737973720000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000022e7d RBX=0000000000000001 RCX=ffffffff84c72d57 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d2c90 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e639a R10=ffff88806cf31cd3 R11=0000000000000001 R12=ffffffff8664f850 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c7174e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc607b151b8 CR3=000000000b8c3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2031313a37343a383020383120766f4e XMM01=73732878696e755f6d6170203a5d3334 XMM02=65736f6c63206e6f6973736573203a29 XMM03=755f6d6170203a5d3334325b64687373 XMM04=69662068637573206f4e203a656c6163 XMM05=3a656c696620766e65206e65706f206f XMM06=65733a6468737328766e655f6d617020 XMM07=6b7a79732031313a37343a3830203831 XMM08=30343d7974696c696261706163202279 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000