[ 39.170473] ------------[ cut here ]------------ [ 39.171374] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 39.173428] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/232 [ 39.174856] Modules linked in: [ 39.175482] CPU: 1 UID: 104 PID: 232 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 39.177673] Tainted: [W]=WARN [ 39.178351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 39.179811] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 39.180707] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 39.183824] RSP: 0018:ffff8880175ffbc0 EFLAGS: 00010286 [ 39.184792] RAX: 0000000000000000 RBX: ffffed1002ebff78 RCX: ffffffff813a4050 [ 39.186058] RDX: ffff88800f625340 RSI: ffffffff813a405e RDI: 0000000000000001 [ 39.187321] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002ebff2f [ 39.188586] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 39.189844] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff8880175ffdf8 [ 39.191139] FS: 00007faf634ec900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 39.192536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.193571] CR2: 00007faf63a524a6 CR3: 000000001bab0000 CR4: 0000000000350ef0 [ 39.194847] Call Trace: [ 39.195341] [ 39.195742] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 39.196622] ? __create_object+0x59/0x80 [ 39.197393] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 39.198360] __vmalloc_noprof+0x59/0x60 [ 39.199064] bpf_prog_alloc_no_stats+0x55/0x470 [ 39.199922] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.200832] bpf_prog_alloc+0x39/0x200 [ 39.201554] ? __pfx_seccomp_check_filter+0x10/0x10 [ 39.202471] bpf_prog_create_from_user+0xb2/0x2f0 [ 39.203354] do_seccomp+0x349/0x25e0 [ 39.204015] ? find_held_lock+0x2b/0x80 [ 39.204768] ? do_prlimit+0x310/0x610 [ 39.205504] ? __pfx_do_seccomp+0x10/0x10 [ 39.206299] ? do_raw_spin_unlock+0x53/0x220 [ 39.207072] ? _raw_spin_unlock+0x1e/0x40 [ 39.207839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 39.208783] ? static_key_count+0x60/0x80 [ 39.209573] prctl_set_seccomp+0x4e/0x70 [ 39.210349] __do_sys_prctl+0xe6c/0x1d70 [ 39.211079] ? __pfx___do_sys_prctl+0x10/0x10 [ 39.211923] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 39.212878] ? irqentry_exit+0xf3/0x650 [ 39.213634] do_syscall_64+0xbf/0x430 [ 39.214371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.215305] RIP: 0033:0x7faf639de5cd [ 39.215946] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 39.219063] RSP: 002b:00007ffc8e20c110 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 39.220402] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faf639de5cd [ 39.221652] RDX: 0000558a215aee00 RSI: 0000000000000002 RDI: 0000000000000016 [ 39.222902] RBP: 00007ffc8e20c170 R08: 0000000000000000 R09: 00007ffc8e20b810 [ 39.223934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000558a2cdb72b0 [ 39.224953] R13: 00007ffc8e20c5a0 R14: 0000558a2cdb9d20 R15: 0000558a2cdcb8d0 [ 39.225995] [ 39.226382] irq event stamp: 1795 [ 39.226867] hardirqs last enabled at (1803): [] __up_console_sem+0x78/0x80 [ 39.228089] hardirqs last disabled at (1812): [] __up_console_sem+0x5d/0x80 [ 39.229346] softirqs last enabled at (1762): [] handle_softirqs+0x50c/0x770 [ 39.230593] softirqs last disabled at (1757): [] __irq_exit_rcu+0xc4/0x100 [ 39.231801] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 41.926554] ------------[ cut here ]------------ [ 41.927505] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 41.929560] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/240 [ 41.931045] Modules linked in: [ 41.931699] CPU: 0 UID: 104 PID: 240 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 41.933695] Tainted: [W]=WARN [ 41.934310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 41.935784] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 41.936700] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 41.939876] RSP: 0018:ffff88801956fbc0 EFLAGS: 00010286 [ 41.940860] RAX: 0000000000000000 RBX: ffffed10032adf78 RCX: ffffffff813a4050 [ 41.942147] RDX: ffff88801ae80000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 41.943445] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10032adf2f [ 41.944733] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 41.946028] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801956fdf8 [ 41.947320] FS: 00007f68f47a9900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 41.948748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.949803] CR2: 00007fff474acef8 CR3: 000000000cc36000 CR4: 0000000000350ef0 [ 41.951078] Call Trace: [ 41.951582] [ 41.951987] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 41.952872] ? __create_object+0x59/0x80 [ 41.953643] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 41.954611] __vmalloc_noprof+0x59/0x60 [ 41.955379] bpf_prog_alloc_no_stats+0x55/0x470 [ 41.956253] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.957185] bpf_prog_alloc+0x39/0x200 [ 41.957866] ? __pfx_seccomp_check_filter+0x10/0x10 [ 41.958804] bpf_prog_create_from_user+0xb2/0x2f0 [ 41.959697] do_seccomp+0x349/0x25e0 [ 41.960411] ? find_held_lock+0x2b/0x80 [ 41.961179] ? do_prlimit+0x310/0x610 [ 41.961892] ? __pfx_do_seccomp+0x10/0x10 [ 41.962686] ? do_raw_spin_unlock+0x53/0x220 [ 41.963520] ? _raw_spin_unlock+0x1e/0x40 [ 41.964293] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.965256] ? static_key_count+0x60/0x80 [ 41.966015] prctl_set_seccomp+0x4e/0x70 [ 41.966802] __do_sys_prctl+0xe6c/0x1d70 [ 41.967579] ? __pfx___do_sys_prctl+0x10/0x10 [ 41.968428] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 41.969407] ? irqentry_exit+0xf3/0x650 [ 41.970169] do_syscall_64+0xbf/0x430 [ 41.970891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.971838] RIP: 0033:0x7f68f4c9b5cd [ 41.972533] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 41.975707] RSP: 002b:00007fff474aa520 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 41.977077] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f68f4c9b5cd [ 41.978353] RDX: 0000556c81554e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 41.979619] RBP: 00007fff474aa580 R08: 0000000000000000 R09: 00007fff474a9c20 [ 41.980889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000556cae5c1ad0 [ 41.982165] R13: 00007fff474aa9b0 R14: 0000556cae5c2bc0 R15: 0000556cae5d3780 [ 41.983476] [ 41.983893] irq event stamp: 1753 [ 41.984547] hardirqs last enabled at (1763): [] __up_console_sem+0x78/0x80 [ 41.986071] hardirqs last disabled at (1772): [] __up_console_sem+0x5d/0x80 [ 41.987631] softirqs last enabled at (1732): [] handle_softirqs+0x50c/0x770 [ 41.989178] softirqs last disabled at (1727): [] __irq_exit_rcu+0xc4/0x100 [ 41.990696] ---[ end trace 0000000000000000 ]--- [ 42.875093] ------------[ cut here ]------------ [ 42.875871] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 42.877542] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/249 [ 42.878756] Modules linked in: [ 42.879275] CPU: 1 UID: 104 PID: 249 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 42.880934] Tainted: [W]=WARN [ 42.881411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 42.882621] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 42.883380] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 42.886010] RSP: 0018:ffff888013ea7bc0 EFLAGS: 00010286 [ 42.886817] RAX: 0000000000000000 RBX: ffffed10027d4f78 RCX: ffffffff813a4050 [ 42.887869] RDX: ffff888013ff8000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 42.888918] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10027d4f2f [ 42.889961] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 42.891018] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888013ea7df8 [ 42.892065] FS: 00007f2da1f38900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 42.893277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.894148] CR2: 00007ffd4ba6cef8 CR3: 0000000009b7c000 CR4: 0000000000350ef0 [ 42.895235] Call Trace: [ 42.895620] [ 42.895964] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 42.896715] ? __create_object+0x59/0x80 [ 42.897367] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 42.898179] __vmalloc_noprof+0x59/0x60 [ 42.898797] bpf_prog_alloc_no_stats+0x55/0x470 [ 42.899514] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.900284] bpf_prog_alloc+0x39/0x200 [ 42.900873] ? __pfx_seccomp_check_filter+0x10/0x10 [ 42.901648] bpf_prog_create_from_user+0xb2/0x2f0 [ 42.902430] do_seccomp+0x349/0x25e0 [ 42.903004] ? find_held_lock+0x2b/0x80 [ 42.903631] ? do_prlimit+0x310/0x610 [ 42.904245] ? __pfx_do_seccomp+0x10/0x10 [ 42.904863] ? do_raw_spin_unlock+0x53/0x220 [ 42.905543] ? _raw_spin_unlock+0x1e/0x40 [ 42.906198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 42.906976] ? static_key_count+0x60/0x80 [ 42.907652] prctl_set_seccomp+0x4e/0x70 [ 42.908301] __do_sys_prctl+0xe6c/0x1d70 [ 42.908919] ? __pfx___do_sys_prctl+0x10/0x10 [ 42.909646] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 42.910462] ? irqentry_exit+0xf3/0x650 [ 42.911305] do_syscall_64+0xbf/0x430 [ 42.911896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.912690] RIP: 0033:0x7f2da242a5cd [ 42.913293] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 42.915985] RSP: 002b:00007ffd4ba6b630 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 42.917135] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2da242a5cd [ 42.918194] RDX: 000055af3963ce00 RSI: 0000000000000002 RDI: 0000000000000016 [ 42.919370] RBP: 00007ffd4ba6b690 R08: 0000000000000000 R09: 00007ffd4ba6ad30 [ 42.920429] R10: 0000000000000000 R11: 0000000000000246 R12: 000055af68bacad0 [ 42.921487] R13: 00007ffd4ba6bac0 R14: 000055af68badbc0 R15: 000055af68bbe780 [ 42.922579] [ 42.922929] irq event stamp: 1755 [ 42.923465] hardirqs last enabled at (1765): [] __up_console_sem+0x78/0x80 [ 42.924740] hardirqs last disabled at (1774): [] __up_console_sem+0x5d/0x80 [ 42.926014] softirqs last enabled at (1676): [] handle_softirqs+0x50c/0x770 [ 42.927292] softirqs last disabled at (1663): [] __irq_exit_rcu+0xc4/0x100 [ 42.928539] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:34024' (ECDSA) to the list of known hosts. 2025/11/17 13:59:53 fuzzer started 2025/11/17 13:59:54 dialing manager at localhost:37895 2025/11/17 13:59:54 checking machine... 2025/11/17 13:59:54 checking revisions... [ 43.833775] kmemleak: Automatic memory scanning thread ended 2025/11/17 13:59:54 testing simple program... [ 43.900203] cgroup: Unknown subsys name 'net' [ 43.950364] cgroup: Unknown subsys name 'cpuset' [ 43.964885] cgroup: Unknown subsys name 'rlimit' executing program executing program VM DIAGNOSIS: 13:59:53 Registers: info registers vcpu 0 RAX=ffffffff87ce4a88 RBX=ffff8880163a1bc0 RCX=0000000000000002 RDX=ffffffff87d0d3c0 RSI=ffffffff87d0fb98 RDI=ffff8880163a26b8 RBP=ffff8880163a2690 RSP=ffff88801763ee58 R8 =0000000000000000 R9 =0000000000000030 R10=ffff8880163a2690 R11=0000000000000000 R12=ffff8880163a26b8 R13=0000000000000001 R14=ffffffff87ced0b8 R15=ffffffff88399a58 RIP=ffffffff815283e6 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f68f475d01c CR3=000000002003b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff00ffffffffffffffffffffff XMM01=707465675f6c697475646f6d6d61705f XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff86d75f81 RBX=0000000000000001 RCX=ffffffff86d75f7c RDX=0000000000000000 RSI=0000000000000000 RDI=1ffffffff0daebf0 RBP=ffff88801745f588 RSP=ffff88801745f4c0 R8 =ffffffff86d75f80 R9 =ffff88801745f570 R10=000000000003c9ed R11=000000000009a54a R12=ffff88801745f590 R13=ffff88801745f578 R14=ffff88801745fcb8 R15=ffff88801745f530 RIP=ffffffff8135f093 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa6f0066700 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc632c9f68 CR3=000000000df8f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656e6e6f637369642064657669656365 XMM02=63736964203a31313a34313533332074 XMM03=66207463656e6e6f6373696420646576 XMM04=6456774875434142334f726f59427469 XMM05=485320415352203a3268737320343135 XMM06=206d6f726620746f6f7220726f662079 XMM07=00000000000000000000000000000000 XMM08=3a677562656420676f6c737973720000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000