[ 46.401779] ------------[ cut here ]------------ [ 46.402729] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 46.404737] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/243 [ 46.406177] Modules linked in: [ 46.406774] CPU: 1 UID: 104 PID: 243 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 46.408741] Tainted: [W]=WARN [ 46.409321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 46.410785] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 46.411698] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 46.414858] RSP: 0018:ffff888016027bc0 EFLAGS: 00010286 [ 46.415820] RAX: 0000000000000000 RBX: ffffed1002c04f78 RCX: ffffffff813a4050 [ 46.417089] RDX: ffff88800eac9bc0 RSI: ffffffff813a405e RDI: 0000000000000001 [ 46.418351] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002c04f2f [ 46.419620] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 46.420872] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016027df8 [ 46.422141] FS: 00007ff082ae5900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 46.423585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.424622] CR2: 00007ff082fd7580 CR3: 0000000014ef3000 CR4: 0000000000350ef0 [ 46.425873] Call Trace: [ 46.426365] [ 46.426771] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 46.427658] ? __create_object+0x59/0x80 [ 46.428427] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 46.429378] __vmalloc_noprof+0x59/0x60 [ 46.430117] bpf_prog_alloc_no_stats+0x55/0x470 [ 46.430985] ? __pfx_seccomp_check_filter+0x10/0x10 [ 46.431853] bpf_prog_alloc+0x39/0x200 [ 46.432591] ? __pfx_seccomp_check_filter+0x10/0x10 [ 46.433492] bpf_prog_create_from_user+0xb2/0x2f0 [ 46.434375] do_seccomp+0x349/0x25e0 [ 46.435097] ? __pfx_css_rstat_updated+0x10/0x10 [ 46.435986] ? __pfx_do_seccomp+0x10/0x10 [ 46.436733] ? find_held_lock+0x2b/0x80 [ 46.437502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 46.438496] ? static_key_count+0x60/0x80 [ 46.439315] prctl_set_seccomp+0x4e/0x70 [ 46.440101] __do_sys_prctl+0xe6c/0x1d70 [ 46.440837] ? __pfx___do_sys_prctl+0x10/0x10 [ 46.441680] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 46.442626] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 46.443594] ? irqentry_exit+0xf3/0x650 [ 46.444347] do_syscall_64+0xbf/0x430 [ 46.445083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.446021] RIP: 0033:0x7ff082fd75cd [ 46.446657] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 46.449767] RSP: 002b:00007ffe8eeb3f70 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 46.451122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff082fd75cd [ 46.452393] RDX: 0000557ac4bfde00 RSI: 0000000000000002 RDI: 0000000000000016 [ 46.453644] RBP: 00007ffe8eeb3fd0 R08: 0000000000000000 R09: 00007ffe8eeb3670 [ 46.454964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000557aeb46fb10 [ 46.456227] R13: 00007ffe8eeb4400 R14: 0000557aeb4702b0 R15: 0000557aeb4846f0 [ 46.457498] [ 46.457910] irq event stamp: 1699 [ 46.458544] hardirqs last enabled at (1709): [] __up_console_sem+0x78/0x80 [ 46.460060] hardirqs last disabled at (1724): [] __up_console_sem+0x5d/0x80 [ 46.461548] softirqs last enabled at (1722): [] handle_softirqs+0x50c/0x770 [ 46.463071] softirqs last disabled at (1717): [] __irq_exit_rcu+0xc4/0x100 [ 46.464563] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 49.407020] ------------[ cut here ]------------ [ 49.407901] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 49.409992] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/250 [ 49.411453] Modules linked in: [ 49.412092] CPU: 0 UID: 104 PID: 250 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 49.414088] Tainted: [W]=WARN [ 49.414651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 49.416148] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 49.417051] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 49.420246] RSP: 0018:ffff8880161f7bc0 EFLAGS: 00010286 [ 49.421233] RAX: 0000000000000000 RBX: ffffed1002c3ef78 RCX: ffffffff813a4050 [ 49.422521] RDX: ffff888016899bc0 RSI: ffffffff813a405e RDI: 0000000000000001 [ 49.423834] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002c3ef2f [ 49.425123] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 49.426420] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff8880161f7df8 [ 49.427723] FS: 00007fccafc19900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 49.429166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.430227] CR2: 00007ffe84079ef7 CR3: 000000000cf96000 CR4: 0000000000350ef0 [ 49.431540] Call Trace: [ 49.432030] [ 49.432434] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 49.433324] ? __create_object+0x59/0x80 [ 49.434109] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 49.435079] __vmalloc_noprof+0x59/0x60 [ 49.435784] bpf_prog_alloc_no_stats+0x55/0x470 [ 49.436675] ? __pfx_seccomp_check_filter+0x10/0x10 [ 49.437601] bpf_prog_alloc+0x39/0x200 [ 49.438336] ? __pfx_seccomp_check_filter+0x10/0x10 [ 49.439270] bpf_prog_create_from_user+0xb2/0x2f0 [ 49.440168] do_seccomp+0x349/0x25e0 [ 49.440835] ? find_held_lock+0x2b/0x80 [ 49.441587] ? do_prlimit+0x310/0x610 [ 49.442331] ? __pfx_do_seccomp+0x10/0x10 [ 49.443142] ? do_raw_spin_unlock+0x53/0x220 [ 49.443929] ? _raw_spin_unlock+0x1e/0x40 [ 49.444696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.445647] ? static_key_count+0x60/0x80 [ 49.446443] prctl_set_seccomp+0x4e/0x70 [ 49.447238] __do_sys_prctl+0xe6c/0x1d70 [ 49.448032] ? __pfx___do_sys_prctl+0x10/0x10 [ 49.448848] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 49.449832] ? irqentry_exit+0xf3/0x650 [ 49.450587] do_syscall_64+0xbf/0x430 [ 49.451335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.452292] RIP: 0033:0x7fccb010b5cd [ 49.453000] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 49.456176] RSP: 002b:00007ffe84077660 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 49.457567] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fccb010b5cd [ 49.458877] RDX: 0000561e2aac2e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 49.460163] RBP: 00007ffe840776c0 R08: 0000000000000000 R09: 00007ffe84076d60 [ 49.461459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000561e4d647ad0 [ 49.462743] R13: 00007ffe84077af0 R14: 0000561e4d648bc0 R15: 0000561e4d659780 [ 49.464060] [ 49.464484] irq event stamp: 1723 [ 49.465149] hardirqs last enabled at (1733): [] __up_console_sem+0x78/0x80 [ 49.466699] hardirqs last disabled at (1742): [] __up_console_sem+0x5d/0x80 [ 49.468224] softirqs last enabled at (1646): [] handle_softirqs+0x50c/0x770 [ 49.469783] softirqs last disabled at (1641): [] __irq_exit_rcu+0xc4/0x100 [ 49.471311] ---[ end trace 0000000000000000 ]--- [ 50.116523] ------------[ cut here ]------------ [ 50.117430] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 50.119460] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/257 [ 50.120888] Modules linked in: [ 50.121525] CPU: 1 UID: 104 PID: 257 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary) [ 50.123531] Tainted: [W]=WARN [ 50.124122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 50.125577] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 50.126476] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 50.129666] RSP: 0018:ffff8880178afbc0 EFLAGS: 00010286 [ 50.130664] RAX: 0000000000000000 RBX: ffffed1002f15f78 RCX: ffffffff813a4050 [ 50.131961] RDX: ffff888014f69bc0 RSI: ffffffff813a405e RDI: 0000000000000001 [ 50.133247] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002f15f2f [ 50.134528] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 50.135801] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff8880178afdf8 [ 50.137091] FS: 00007fc02d28d900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 50.138509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.139583] CR2: 00007ffdd9231ef7 CR3: 000000000df2e000 CR4: 0000000000350ef0 [ 50.140867] Call Trace: [ 50.141364] [ 50.141771] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 50.142650] ? __create_object+0x59/0x80 [ 50.143432] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 50.144396] __vmalloc_noprof+0x59/0x60 [ 50.145600] bpf_prog_alloc_no_stats+0x55/0x470 [ 50.146461] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.147398] bpf_prog_alloc+0x39/0x200 [ 50.148130] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.149054] bpf_prog_create_from_user+0xb2/0x2f0 [ 50.149914] do_seccomp+0x349/0x25e0 [ 50.150626] ? find_held_lock+0x2b/0x80 [ 50.151381] ? do_prlimit+0x310/0x610 [ 50.152120] ? __pfx_do_seccomp+0x10/0x10 [ 50.152842] ? do_raw_spin_unlock+0x53/0x220 [ 50.153658] ? _raw_spin_unlock+0x1e/0x40 [ 50.154443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.155401] ? static_key_count+0x60/0x80 [ 50.156191] prctl_set_seccomp+0x4e/0x70 [ 50.156916] __do_sys_prctl+0xe6c/0x1d70 [ 50.157698] ? __pfx___do_sys_prctl+0x10/0x10 [ 50.158539] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 50.159503] ? irqentry_exit+0xf3/0x650 [ 50.160252] do_syscall_64+0xbf/0x430 [ 50.160979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.161875] RIP: 0033:0x7fc02d77f5cd [ 50.162559] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 50.165700] RSP: 002b:00007ffdd922fa30 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.167058] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc02d77f5cd [ 50.168309] RDX: 00005649d9166e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 50.169566] RBP: 00007ffdd922fa90 R08: 0000000000000000 R09: 00007ffdd922f130 [ 50.170836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000564a02004b10 [ 50.172095] R13: 00007ffdd922fec0 R14: 0000564a020052b0 R15: 0000564a020196f0 [ 50.173370] [ 50.173792] irq event stamp: 1801 [ 50.174442] hardirqs last enabled at (1811): [] __up_console_sem+0x78/0x80 [ 50.175901] hardirqs last disabled at (1820): [] __up_console_sem+0x5d/0x80 [ 50.177166] softirqs last enabled at (1770): [] handle_softirqs+0x50c/0x770 [ 50.178433] softirqs last disabled at (1761): [] __irq_exit_rcu+0xc4/0x100 [ 50.179681] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:5589' (ECDSA) to the list of known hosts. 2025/11/19 00:16:50 fuzzer started 2025/11/19 00:16:50 dialing manager at localhost:34383 2025/11/19 00:16:50 checking machine... 2025/11/19 00:16:50 checking revisions... [ 51.053225] kmemleak: Automatic memory scanning thread ended 2025/11/19 00:16:50 testing simple program... [ 51.152502] cgroup: Unknown subsys name 'net' [ 51.228794] cgroup: Unknown subsys name 'cpuset' [ 51.242076] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program VM DIAGNOSIS: 00:16:49 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880e538f000 RCX=ffffffff8175a62f RDX=0000000000000000 RSI=ffffffff8175a735 RDI=ffff88806ce31cd0 RBP=0000000000000001 RSP=ffff88806ce089f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff86fd8478 R13=0000000000000000 R14=ffffffff85c2ca00 R15=ffff888008c4b780 RIP=ffffffff815bd130 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561e4d644218 CR3=0000000005c8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f42a033251000005602f744f790 XMM02=6f6974707972636e6561737268746977 XMM03=00000000000000000000000000777074 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=ffffffffffff00ffffff00ffffff00ff XMM08=00002000000000202020002020200000 XMM09=ffffffffffff00ffffff00ffffff00ff XMM10=00002000000000202020002020200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff11002dc0f59 RCX=ffffffff84c5b41d RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff85e1ffe0 RSP=ffff888016e07a80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff84c5b338 R13=0000000000000206 R14=ffff888016898000 R15=ffff8880096c7dc0 RIP=ffffffff81528f48 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fccafc19900 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fccb01d0618 CR3=000000000b780000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6e69676f6c5f6d61702c78756e696c65 XMM02=755f6d61702c74696d7265705f6d6170 XMM03=2c766e655f6d61702c7374696d696c5f XMM04=6d61702c766e655f6d61702c7374696d XMM05=78696e755f6d61702c74696d7265705f XMM06=6469756e69676f6c5f6d61702c78756e XMM07=672065736f6c635f6e6f69737365733a XMM08=61662029286e65706f5f746964756100 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000