[ 38.953613] ------------[ cut here ]------------ [ 38.954557] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 38.956569] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/231 [ 38.958018] Modules linked in: [ 38.958629] CPU: 1 UID: 104 PID: 231 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 38.960838] Tainted: [W]=WARN [ 38.961535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 38.963035] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 38.963919] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 38.967127] RSP: 0018:ffff88800f21fbc0 EFLAGS: 00010286 [ 38.968124] RAX: 0000000000000000 RBX: ffffed1001e43f78 RCX: ffffffff813a4050 [ 38.969385] RDX: ffff88800d235340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 38.970692] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1001e43f2f [ 38.971994] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 38.973253] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88800f21fdf8 [ 38.974574] FS: 00007fe33ef27900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 38.976018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.977074] CR2: 00007ffc11224ef7 CR3: 000000000b49e000 CR4: 0000000000350ef0 [ 38.978375] Call Trace: [ 38.978843] [ 38.979298] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 38.980187] ? __create_object+0x59/0x80 [ 38.980920] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 38.981889] __vmalloc_noprof+0x59/0x60 [ 38.982658] bpf_prog_alloc_no_stats+0x55/0x470 [ 38.983548] ? __pfx_seccomp_check_filter+0x10/0x10 [ 38.984493] bpf_prog_alloc+0x39/0x200 [ 38.985235] ? __pfx_seccomp_check_filter+0x10/0x10 [ 38.986176] bpf_prog_create_from_user+0xb2/0x2f0 [ 38.987086] do_seccomp+0x349/0x25e0 [ 38.987756] ? find_held_lock+0x2b/0x80 [ 38.988514] ? do_prlimit+0x310/0x610 [ 38.989260] ? __pfx_do_seccomp+0x10/0x10 [ 38.990051] ? do_raw_spin_unlock+0x53/0x220 [ 38.990868] ? _raw_spin_unlock+0x1e/0x40 [ 38.991632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 38.992607] ? static_key_count+0x60/0x80 [ 38.993403] prctl_set_seccomp+0x4e/0x70 [ 38.994185] __do_sys_prctl+0xe6c/0x1d70 [ 38.994978] ? __pfx___do_sys_prctl+0x10/0x10 [ 38.995796] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 38.996755] ? irqentry_exit+0xf3/0x650 [ 38.997516] do_syscall_64+0xbf/0x430 [ 38.998259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.999238] RIP: 0033:0x7fe33f4195cd [ 38.999928] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 39.003118] RSP: 002b:00007ffc11223ae0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 39.004249] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe33f4195cd [ 39.005320] RDX: 000056428bb33e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 39.006406] RBP: 00007ffc11223b40 R08: 0000000000000000 R09: 00007ffc112231e0 [ 39.007462] R10: 0000000000000000 R11: 0000000000000246 R12: 00005642bb7a2ad0 [ 39.008526] R13: 00007ffc11223f70 R14: 00005642bb7a3bc0 R15: 00005642bb7b4780 [ 39.009594] [ 39.009983] irq event stamp: 1837 [ 39.010497] hardirqs last enabled at (1845): [] __up_console_sem+0x78/0x80 [ 39.011758] hardirqs last disabled at (1854): [] __up_console_sem+0x5d/0x80 [ 39.013049] softirqs last enabled at (1622): [] handle_softirqs+0x50c/0x770 [ 39.014324] softirqs last disabled at (1617): [] __irq_exit_rcu+0xc4/0x100 [ 39.015595] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 41.585548] ------------[ cut here ]------------ [ 41.586518] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 41.588549] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/239 [ 41.590013] Modules linked in: [ 41.590707] CPU: 0 UID: 104 PID: 239 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 41.592694] Tainted: [W]=WARN [ 41.593271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 41.594800] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 41.595719] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 41.598958] RSP: 0018:ffff88800e3a7bc0 EFLAGS: 00010286 [ 41.599890] RAX: 0000000000000000 RBX: ffffed1001c74f78 RCX: ffffffff813a4050 [ 41.601156] RDX: ffff88800f0fb780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 41.602485] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1001c74f2f [ 41.603780] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000400dc0 [ 41.605060] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88800e3a7df8 [ 41.606353] FS: 00007fdc1c15d900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 41.607833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.608918] CR2: 00007ffee93feef7 CR3: 000000001f453000 CR4: 0000000000350ef0 [ 41.610220] Call Trace: [ 41.610720] [ 41.611183] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 41.612063] ? __create_object+0x59/0x80 [ 41.612790] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 41.613763] __vmalloc_noprof+0x59/0x60 [ 41.614556] bpf_prog_alloc_no_stats+0x55/0x470 [ 41.615440] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.616372] bpf_prog_alloc+0x39/0x200 [ 41.617104] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.618027] bpf_prog_create_from_user+0xb2/0x2f0 [ 41.618904] do_seccomp+0x349/0x25e0 [ 41.619617] ? find_held_lock+0x2b/0x80 [ 41.620372] ? do_prlimit+0x310/0x610 [ 41.621114] ? __pfx_do_seccomp+0x10/0x10 [ 41.621853] ? do_raw_spin_unlock+0x53/0x220 [ 41.622710] ? _raw_spin_unlock+0x1e/0x40 [ 41.623486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.624456] ? static_key_count+0x60/0x80 [ 41.625252] prctl_set_seccomp+0x4e/0x70 [ 41.626009] __do_sys_prctl+0xe6c/0x1d70 [ 41.626774] ? __pfx___do_sys_prctl+0x10/0x10 [ 41.627630] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 41.628600] ? irqentry_exit+0xf3/0x650 [ 41.629356] do_syscall_64+0xbf/0x430 [ 41.630094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.631085] RIP: 0033:0x7fdc1c64f5cd [ 41.631744] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 41.634984] RSP: 002b:00007ffee93fd810 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 41.636347] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc1c64f5cd [ 41.637626] RDX: 000055a7ca785e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 41.638970] RBP: 00007ffee93fd870 R08: 0000000000000000 R09: 00007ffee93fcf10 [ 41.640262] R10: 0000000000000000 R11: 0000000000000246 R12: 000055a7e6b23ad0 [ 41.641536] R13: 00007ffee93fdca0 R14: 000055a7e6b24bc0 R15: 000055a7e6b35780 [ 41.642876] [ 41.643338] irq event stamp: 1673 [ 41.643990] hardirqs last enabled at (1683): [] __up_console_sem+0x78/0x80 [ 41.645524] hardirqs last disabled at (1692): [] __up_console_sem+0x5d/0x80 [ 41.647093] softirqs last enabled at (1640): [] handle_softirqs+0x50c/0x770 [ 41.648652] softirqs last disabled at (1635): [] __irq_exit_rcu+0xc4/0x100 [ 41.650171] ---[ end trace 0000000000000000 ]--- [ 42.384201] ------------[ cut here ]------------ [ 42.385221] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 42.387391] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/246 [ 42.388966] Modules linked in: [ 42.389617] CPU: 1 UID: 104 PID: 246 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 42.392063] Tainted: [W]=WARN [ 42.392665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 42.394321] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 42.395325] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 42.398774] RSP: 0018:ffff8880168c7bc0 EFLAGS: 00010286 [ 42.399826] RAX: 0000000000000000 RBX: ffffed1002d18f78 RCX: ffffffff813a4050 [ 42.401208] RDX: ffff888013cb5340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 42.402608] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002d18f2f [ 42.403991] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 42.405364] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff8880168c7df8 [ 42.406755] FS: 00007fd5357ad900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 42.408314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.409449] CR2: 00007fffe3f1fef7 CR3: 000000000cf2f000 CR4: 0000000000350ef0 [ 42.410828] Call Trace: [ 42.411368] [ 42.411811] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 42.412774] ? __create_object+0x59/0x80 [ 42.413609] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 42.414661] __vmalloc_noprof+0x59/0x60 [ 42.415478] bpf_prog_alloc_no_stats+0x55/0x470 [ 42.416411] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.417407] bpf_prog_alloc+0x39/0x200 [ 42.418199] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.419208] bpf_prog_create_from_user+0xb2/0x2f0 [ 42.420178] do_seccomp+0x349/0x25e0 [ 42.420902] ? find_held_lock+0x2b/0x80 [ 42.421715] ? do_prlimit+0x310/0x610 [ 42.422528] ? __pfx_do_seccomp+0x10/0x10 [ 42.423376] ? do_raw_spin_unlock+0x53/0x220 [ 42.424294] ? _raw_spin_unlock+0x1e/0x40 [ 42.425115] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.426140] ? static_key_count+0x60/0x80 [ 42.427000] prctl_set_seccomp+0x4e/0x70 [ 42.427771] __do_sys_prctl+0xe6c/0x1d70 [ 42.428594] ? __pfx___do_sys_prctl+0x10/0x10 [ 42.429498] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 42.430531] ? irqentry_exit+0xf3/0x650 [ 42.431344] do_syscall_64+0xbf/0x430 [ 42.432124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.433123] RIP: 0033:0x7fd535c9f5cd [ 42.433822] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 42.437299] RSP: 002b:00007fffe3f1dc10 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 42.438760] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd535c9f5cd [ 42.440002] RDX: 000055c304909e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 42.441157] RBP: 00007fffe3f1dc70 R08: 0000000000000000 R09: 00007fffe3f1d310 [ 42.442320] R10: 0000000000000000 R11: 0000000000000246 R12: 000055c333395240 [ 42.443528] R13: 00007fffe3f1e0a0 R14: 000055c33339e380 R15: 000055c3333a9540 [ 42.444723] [ 42.445148] irq event stamp: 1879 [ 42.445713] hardirqs last enabled at (1887): [] __up_console_sem+0x78/0x80 [ 42.447207] hardirqs last disabled at (1896): [] __up_console_sem+0x5d/0x80 [ 42.448721] softirqs last enabled at (1826): [] handle_softirqs+0x50c/0x770 [ 42.450437] softirqs last disabled at (1821): [] __irq_exit_rcu+0xc4/0x100 [ 42.451932] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:45149' (ECDSA) to the list of known hosts. 2025/11/18 16:55:41 fuzzer started 2025/11/18 16:55:41 dialing manager at localhost:34383 2025/11/18 16:55:41 checking machine... 2025/11/18 16:55:41 checking revisions... [ 43.424313] kmemleak: Automatic memory scanning thread ended 2025/11/18 16:55:41 testing simple program... [ 43.515466] cgroup: Unknown subsys name 'net' [ 43.564685] cgroup: Unknown subsys name 'cpuset' [ 43.585419] cgroup: Unknown subsys name 'rlimit' executing program executing program VM DIAGNOSIS: 16:55:40 Registers: info registers vcpu 0 RAX=ffffffff869da196 RBX=0000000000000001 RCX=ffffffff81204b69 RDX=0000000000000000 RSI=ffffffff869da142 RDI=ffffffff86691ac8 RBP=ffff888009627898 RSP=ffff8880096277b8 R8 =ffffffff869da142 R9 =0000000000000000 R10=000000000003c9ed R11=000000000000054b R12=ffff8880096278a0 R13=ffff888009627888 R14=000000000000000e R15=dffffc0000000000 RIP=ffffffff8135daed RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffc7a633f8 CR3=000000000d0b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=35353a363120383120766f4e3e38333c XMM01=656e6e6f637369642064657669656365 XMM02=63736964203a31313a36313336342074 XMM03=66207463656e6e6f6373696420646576 XMM04=6456774875434142334f726f59427469 XMM05=485320415352203a3268737320363133 XMM06=206d6f726620746f6f7220726f662079 XMM07=00000000000000000000000000000000 XMM08=3a677562656420676f6c737973720000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff81619130 RCX=ffff888013e57604 RDX=1ffff110027caee1 RSI=ffffffff83c6e2e1 RDI=ffff888013e57778 RBP=ffff888013e57748 RSP=ffff888013e576a8 R8 =0000000000000001 R9 =ffff888013e576f0 R10=000000000003c9ed R11=000000000009a7c3 R12=ffff888013e57778 R13=0000000000000000 R14=ffff88800f0f9bc0 R15=ffff8880096c7b40 RIP=ffffffff8161913e RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdc1c15d900 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffee93f7000 CR3=000000001f470000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2030343a35353a363120383120766f4e XMM01=73732878696e755f6d6170203a5d3833 XMM02=65736f6c63206e6f6973736573203a29 XMM03=755f6d6170203a5d3833325b64687373 XMM04=69662068637573206f4e203a656c6163 XMM05=3a656c696620766e65206e65706f206f XMM06=65733a6468737328766e655f6d617020 XMM07=6b7a79732039333a35353a3631203831 XMM08=30343d7974696c696261706163202279 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000