[ 46.001388] ------------[ cut here ]------------ [ 46.002303] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 46.004779] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/233 [ 46.006218] Modules linked in: [ 46.006804] CPU: 0 UID: 104 PID: 233 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 46.008826] Tainted: [W]=WARN [ 46.009735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 46.011212] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 46.012057] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 46.015164] RSP: 0018:ffff888016a2fbc0 EFLAGS: 00010286 [ 46.016109] RAX: 0000000000000000 RBX: ffffed1002d45f78 RCX: ffffffff813a4050 [ 46.017375] RDX: ffff88801b2b3780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 46.018613] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002d45f2f [ 46.019877] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 46.021158] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016a2fdf8 [ 46.022431] FS: 00007fd5e3c7f900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 46.023848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.024889] CR2: 00007ffdef02def7 CR3: 000000000c368000 CR4: 0000000000350ef0 [ 46.026139] Call Trace: [ 46.026642] [ 46.027045] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 46.027921] ? __create_object+0x59/0x80 [ 46.028721] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 46.029667] __vmalloc_noprof+0x59/0x60 [ 46.030415] bpf_prog_alloc_no_stats+0x55/0x470 [ 46.031268] ? __pfx_seccomp_check_filter+0x10/0x10 [ 46.032123] bpf_prog_alloc+0x39/0x200 [ 46.032864] ? __pfx_seccomp_check_filter+0x10/0x10 [ 46.033782] bpf_prog_create_from_user+0xb2/0x2f0 [ 46.034660] do_seccomp+0x349/0x25e0 [ 46.035370] ? find_held_lock+0x2b/0x80 [ 46.036069] ? do_prlimit+0x310/0x610 [ 46.036815] ? __pfx_do_seccomp+0x10/0x10 [ 46.037584] ? do_raw_spin_unlock+0x53/0x220 [ 46.038403] ? _raw_spin_unlock+0x1e/0x40 [ 46.039131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 46.040070] ? static_key_count+0x60/0x80 [ 46.040875] prctl_set_seccomp+0x4e/0x70 [ 46.041630] __do_sys_prctl+0xe6c/0x1d70 [ 46.042395] ? __pfx___do_sys_prctl+0x10/0x10 [ 46.043238] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 46.044131] ? irqentry_exit+0xf3/0x650 [ 46.044895] do_syscall_64+0xbf/0x430 [ 46.045636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.046558] RIP: 0033:0x7fd5e41715cd [ 46.047240] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 46.050313] RSP: 002b:00007ffdef02c150 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 46.051650] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5e41715cd [ 46.052903] RDX: 000055971857ee00 RSI: 0000000000000002 RDI: 0000000000000016 [ 46.054154] RBP: 00007ffdef02c1b0 R08: 0000000000000000 R09: 00007ffdef02b850 [ 46.055427] R10: 0000000000000000 R11: 0000000000000246 R12: 00005597430ec2b0 [ 46.056705] R13: 00007ffdef02c5e0 R14: 00005597430eed20 R15: 00005597431008d0 [ 46.057966] [ 46.058422] irq event stamp: 1845 [ 46.059021] hardirqs last enabled at (1853): [] __up_console_sem+0x78/0x80 [ 46.060534] hardirqs last disabled at (1862): [] __up_console_sem+0x5d/0x80 [ 46.062027] softirqs last enabled at (1734): [] handle_softirqs+0x50c/0x770 [ 46.063533] softirqs last disabled at (1729): [] __irq_exit_rcu+0xc4/0x100 [ 46.065027] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 49.521328] ------------[ cut here ]------------ [ 49.522274] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 49.524374] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/240 [ 49.525888] Modules linked in: [ 49.526525] CPU: 0 UID: 104 PID: 240 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 49.528538] Tainted: [W]=WARN [ 49.529097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 49.530550] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 49.531479] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 49.534625] RSP: 0018:ffff88801c647bc0 EFLAGS: 00010286 [ 49.535602] RAX: 0000000000000000 RBX: ffffed10038c8f78 RCX: ffffffff813a4050 [ 49.536902] RDX: ffff88801a60b780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 49.538169] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10038c8f2f [ 49.539465] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 49.540757] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801c647df8 [ 49.542039] FS: 00007effee7ab900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 49.543469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.544540] CR2: 00007ffc31ca3ef7 CR3: 000000000c3ed000 CR4: 0000000000350ef0 [ 49.545823] Call Trace: [ 49.546337] [ 49.546754] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 49.547645] ? __create_object+0x59/0x80 [ 49.548433] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 49.549428] __vmalloc_noprof+0x59/0x60 [ 49.550138] bpf_prog_alloc_no_stats+0x55/0x470 [ 49.551009] ? __pfx_seccomp_check_filter+0x10/0x10 [ 49.551942] bpf_prog_alloc+0x39/0x200 [ 49.552693] ? __pfx_seccomp_check_filter+0x10/0x10 [ 49.553629] bpf_prog_create_from_user+0xb2/0x2f0 [ 49.554525] do_seccomp+0x349/0x25e0 [ 49.555250] ? find_held_lock+0x2b/0x80 [ 49.555957] ? do_prlimit+0x310/0x610 [ 49.556697] ? __pfx_do_seccomp+0x10/0x10 [ 49.557507] ? do_raw_spin_unlock+0x53/0x220 [ 49.558360] ? _raw_spin_unlock+0x1e/0x40 [ 49.559098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.560048] ? static_key_count+0x60/0x80 [ 49.560863] prctl_set_seccomp+0x4e/0x70 [ 49.561650] __do_sys_prctl+0xe6c/0x1d70 [ 49.562437] ? __pfx___do_sys_prctl+0x10/0x10 [ 49.563297] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 49.564264] ? irqentry_exit+0xf3/0x650 [ 49.565029] do_syscall_64+0xbf/0x430 [ 49.565762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.566722] RIP: 0033:0x7effeec9d5cd [ 49.567420] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 49.570599] RSP: 002b:00007ffc31ca12d0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 49.571984] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007effeec9d5cd [ 49.573291] RDX: 00005644c14d1e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 49.574553] RBP: 00007ffc31ca1330 R08: 0000000000000000 R09: 00007ffc31ca09d0 [ 49.575837] R10: 0000000000000000 R11: 0000000000000246 R12: 00005644e149fad0 [ 49.577125] R13: 00007ffc31ca1760 R14: 00005644e14a0bc0 R15: 00005644e14b1780 [ 49.578224] [ 49.578578] irq event stamp: 1763 [ 49.579082] hardirqs last enabled at (1771): [] __up_console_sem+0x78/0x80 [ 49.580364] hardirqs last disabled at (1780): [] __up_console_sem+0x5d/0x80 [ 49.581650] softirqs last enabled at (1608): [] handle_softirqs+0x50c/0x770 [ 49.582951] softirqs last disabled at (1603): [] __irq_exit_rcu+0xc4/0x100 [ 49.584235] ---[ end trace 0000000000000000 ]--- [ 50.473670] ------------[ cut here ]------------ [ 50.474834] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 50.477463] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/247 [ 50.479766] Modules linked in: [ 50.480619] CPU: 0 UID: 104 PID: 247 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 50.483164] Tainted: [W]=WARN [ 50.483937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 50.485824] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 50.487019] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 50.491054] RSP: 0018:ffff88801c407bc0 EFLAGS: 00010286 [ 50.492313] RAX: 0000000000000000 RBX: ffffed1003880f78 RCX: ffffffff813a4050 [ 50.493973] RDX: ffff888016c43780 RSI: ffffffff813a405e RDI: 0000000000000001 [ 50.495626] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1003880f2f [ 50.497291] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 50.498945] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801c407df8 [ 50.500839] FS: 00007fc5e2f87900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 50.502935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.504512] CR2: 00007ffe95f51ef7 CR3: 0000000009c7d000 CR4: 0000000000350ef0 [ 50.506391] Call Trace: [ 50.507068] [ 50.507751] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 50.509091] ? __create_object+0x59/0x80 [ 50.510310] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 50.511741] __vmalloc_noprof+0x59/0x60 [ 50.512882] bpf_prog_alloc_no_stats+0x55/0x470 [ 50.513834] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.514849] bpf_prog_alloc+0x39/0x200 [ 50.515658] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.516666] bpf_prog_create_from_user+0xb2/0x2f0 [ 50.517631] do_seccomp+0x349/0x25e0 [ 50.518405] ? find_held_lock+0x2b/0x80 [ 50.519170] ? do_prlimit+0x310/0x610 [ 50.519986] ? __pfx_do_seccomp+0x10/0x10 [ 50.520854] ? do_raw_spin_unlock+0x53/0x220 [ 50.521759] ? _raw_spin_unlock+0x1e/0x40 [ 50.522614] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.523679] ? static_key_count+0x60/0x80 [ 50.524549] prctl_set_seccomp+0x4e/0x70 [ 50.525405] __do_sys_prctl+0xe6c/0x1d70 [ 50.526264] ? __pfx___do_sys_prctl+0x10/0x10 [ 50.527133] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 50.528235] ? irqentry_exit+0xf3/0x650 [ 50.529005] do_syscall_64+0xbf/0x430 [ 50.529807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.530697] RIP: 0033:0x7fc5e34795cd [ 50.531318] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 50.534104] RSP: 002b:00007ffe95f4fcc0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.535279] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc5e34795cd [ 50.536401] RDX: 0000562f340fae00 RSI: 0000000000000002 RDI: 0000000000000016 [ 50.537497] RBP: 00007ffe95f4fd20 R08: 0000000000000000 R09: 00007ffe95f4f3c0 [ 50.538613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000562f4a1aaad0 [ 50.539819] R13: 00007ffe95f50150 R14: 0000562f4a1abbc0 R15: 0000562f4a1bc780 [ 50.540961] [ 50.541438] irq event stamp: 1863 [ 50.542021] hardirqs last enabled at (1871): [] __up_console_sem+0x78/0x80 [ 50.543531] hardirqs last disabled at (1880): [] __up_console_sem+0x5d/0x80 [ 50.545031] softirqs last enabled at (1548): [] handle_softirqs+0x50c/0x770 [ 50.546561] softirqs last disabled at (1543): [] __irq_exit_rcu+0xc4/0x100 [ 50.548167] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:16985' (ECDSA) to the list of known hosts. 2025/11/18 19:49:08 fuzzer started 2025/11/18 19:49:08 dialing manager at localhost:34383 2025/11/18 19:49:08 checking machine... 2025/11/18 19:49:08 checking revisions... [ 51.406011] kmemleak: Automatic memory scanning thread ended 2025/11/18 19:49:09 testing simple program... [ 51.497234] cgroup: Unknown subsys name 'net' [ 51.557431] cgroup: Unknown subsys name 'cpuset' [ 51.575746] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program VM DIAGNOSIS: 19:49:08 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=0000000000000200 RCX=ffffffff87cecb40 RDX=0000000000000008 RSI=ffff888016f45de8 RDI=ffff888016f45340 RBP=ffff888016f45340 RSP=ffff88806ce08848 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=0000000000000009 R13=0000000000000002 R14=ffff888016f45de8 R15=0000000000000003 RIP=ffffffff81526594 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe661d0e900 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe661426000 CR3=000000000de88000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=cafdef953359aa821b4c4fa6db913308 XMM02=0000000000302ff0eff9b2d0a8fce9cb XMM03=00000000003030c02c67c8bc2e329bc3 XMM04=3417eba73d7f8bcd00000000000ae988 XMM05=9204130aabf776690000000000322160 XMM06=d74844bf967d85ba0000000000320be0 XMM07=fb795ef6d65770560000000000310b60 XMM08=2c67c8bc2e329bc30000000000303060 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000338845db RBX=000000008c11b544 RCX=ffff8880143338a0 RDX=0000000000000010 RSI=000000007e23ae85 RDI=0000000000000002 RBP=0000000000000000 RSP=ffff88801a64f908 R8 =00000000741b2334 R9 =ffff88806bcb5440 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff88801a64f970 R15=0000000000000010 RIP=ffffffff82642ba6 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007effee7ab900 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007effeed62618 CR3=00000000073ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=563412feff00545000000000000080fe XMM01=6e69676f6c5f6d61702c78756e696c65 XMM02=755f6d61702c74696d7265705f6d6170 XMM03=2c766e655f6d61702c7374696d696c5f XMM04=6d61702c766e655f6d61702c7374696d XMM05=78696e755f6d61702c74696d7265705f XMM06=6469756e69676f6c5f6d61702c78756e XMM07=672065736f6c635f6e6f69737365733a XMM08=61662029286e65706f5f746964756100 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000