[ 45.746449] ------------[ cut here ]------------ [ 45.747012] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 45.748256] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/233 [ 45.749127] Modules linked in: [ 45.749548] CPU: 1 UID: 104 PID: 233 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 45.750722] Tainted: [W]=WARN [ 45.751061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 45.751945] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 45.752513] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 45.754406] RSP: 0018:ffff888019877bc0 EFLAGS: 00010286 [ 45.754999] RAX: 0000000000000000 RBX: ffffed100330ef78 RCX: ffffffff813a4050 [ 45.755807] RDX: ffff888016199bc0 RSI: ffffffff813a405e RDI: 0000000000000001 [ 45.756595] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed100330ef2f [ 45.757336] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 45.758099] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888019877df8 [ 45.758880] FS: 00007f169c2dc900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 45.759749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.760355] CR2: 00007ffc6ae41ef8 CR3: 000000000ddf4000 CR4: 0000000000350ef0 [ 45.761119] Call Trace: [ 45.761396] [ 45.761671] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 45.762190] ? __create_object+0x59/0x80 [ 45.762663] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 45.763222] __vmalloc_noprof+0x59/0x60 [ 45.763693] bpf_prog_alloc_no_stats+0x55/0x470 [ 45.764193] ? __pfx_seccomp_check_filter+0x10/0x10 [ 45.764755] bpf_prog_alloc+0x39/0x200 [ 45.765175] ? __pfx_seccomp_check_filter+0x10/0x10 [ 45.765737] bpf_prog_create_from_user+0xb2/0x2f0 [ 45.766255] do_seccomp+0x349/0x25e0 [ 45.766693] ? find_held_lock+0x2b/0x80 [ 45.767133] ? do_prlimit+0x310/0x610 [ 45.767595] ? __pfx_do_seccomp+0x10/0x10 [ 45.768043] ? do_raw_spin_unlock+0x53/0x220 [ 45.768547] ? _raw_spin_unlock+0x1e/0x40 [ 45.768997] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 45.769584] ? static_key_count+0x60/0x80 [ 45.770045] prctl_set_seccomp+0x4e/0x70 [ 45.770520] __do_sys_prctl+0xe6c/0x1d70 [ 45.770962] ? __pfx___do_sys_prctl+0x10/0x10 [ 45.771495] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 45.772055] ? irqentry_exit+0xf3/0x650 [ 45.772529] do_syscall_64+0xbf/0x430 [ 45.772950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.773526] RIP: 0033:0x7f169c7ce5cd [ 45.773922] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 45.775857] RSP: 002b:00007ffc6ae40710 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 45.776675] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f169c7ce5cd [ 45.777412] RDX: 000055669d7a7e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 45.778192] RBP: 00007ffc6ae40770 R08: 0000000000000000 R09: 00007ffc6ae3fe10 [ 45.778965] R10: 0000000000000000 R11: 0000000000000246 R12: 00005566c48672b0 [ 45.779743] R13: 00007ffc6ae40ba0 R14: 00005566c4869d20 R15: 00005566c487b8d0 [ 45.780541] [ 45.780799] irq event stamp: 1727 [ 45.781163] hardirqs last enabled at (1735): [] __up_console_sem+0x78/0x80 [ 45.782075] hardirqs last disabled at (1744): [] __up_console_sem+0x5d/0x80 [ 45.782987] softirqs last enabled at (1616): [] handle_softirqs+0x50c/0x770 [ 45.783931] softirqs last disabled at (1601): [] __irq_exit_rcu+0xc4/0x100 [ 45.784843] ---[ end trace 0000000000000000 ]--- Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 49.131800] ------------[ cut here ]------------ [ 49.132623] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 49.134365] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/240 [ 49.135686] Modules linked in: [ 49.136176] CPU: 0 UID: 104 PID: 240 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 49.137842] Tainted: [W]=WARN [ 49.138318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 49.139588] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 49.140323] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 49.142998] RSP: 0018:ffff8880160afbc0 EFLAGS: 00010286 [ 49.143850] RAX: 0000000000000000 RBX: ffffed1002c15f78 RCX: ffffffff813a4050 [ 49.144947] RDX: ffff888014520000 RSI: ffffffff813a405e RDI: 0000000000000001 [ 49.146027] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002c15f2f [ 49.147125] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 49.148220] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff8880160afdf8 [ 49.149330] FS: 00007fe31022c900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000 [ 49.150555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.151435] CR2: 00007ffded334ef8 CR3: 000000001f84a000 CR4: 0000000000350ef0 [ 49.152762] Call Trace: [ 49.153261] [ 49.153692] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 49.154626] ? __create_object+0x59/0x80 [ 49.155406] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 49.156411] __vmalloc_noprof+0x59/0x60 [ 49.157197] bpf_prog_alloc_no_stats+0x55/0x470 [ 49.157987] ? __pfx_seccomp_check_filter+0x10/0x10 [ 49.158799] bpf_prog_alloc+0x39/0x200 [ 49.159404] ? __pfx_seccomp_check_filter+0x10/0x10 [ 49.160169] bpf_prog_create_from_user+0xb2/0x2f0 [ 49.160936] do_seccomp+0x349/0x25e0 [ 49.161555] ? find_held_lock+0x2b/0x80 [ 49.162146] ? do_prlimit+0x310/0x610 [ 49.162778] ? __pfx_do_seccomp+0x10/0x10 [ 49.163426] ? do_raw_spin_unlock+0x53/0x220 [ 49.164127] ? _raw_spin_unlock+0x1e/0x40 [ 49.164779] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.165595] ? static_key_count+0x60/0x80 [ 49.166223] prctl_set_seccomp+0x4e/0x70 [ 49.166900] __do_sys_prctl+0xe6c/0x1d70 [ 49.167603] ? __pfx___do_sys_prctl+0x10/0x10 [ 49.168287] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 49.169099] ? irqentry_exit+0xf3/0x650 [ 49.169753] do_syscall_64+0xbf/0x430 [ 49.170345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.171133] RIP: 0033:0x7fe31071e5cd [ 49.171754] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 49.174441] RSP: 002b:00007ffded3335d0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 49.175659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe31071e5cd [ 49.176746] RDX: 0000562e26884e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 49.177833] RBP: 00007ffded333630 R08: 0000000000000000 R09: 00007ffded332cd0 [ 49.178946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000562e308bbad0 [ 49.180039] R13: 00007ffded333a60 R14: 0000562e308bcbc0 R15: 0000562e308cd780 [ 49.181139] [ 49.181551] irq event stamp: 1723 [ 49.182053] hardirqs last enabled at (1731): [] __up_console_sem+0x78/0x80 [ 49.183382] hardirqs last disabled at (1748): [] __up_console_sem+0x5d/0x80 [ 49.184682] softirqs last enabled at (1746): [] handle_softirqs+0x50c/0x770 [ 49.186006] softirqs last disabled at (1739): [] __irq_exit_rcu+0xc4/0x100 [ 49.187275] ---[ end trace 0000000000000000 ]--- [ 50.015774] ------------[ cut here ]------------ [ 50.016682] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code! [ 50.018675] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/247 [ 50.020119] Modules linked in: [ 50.020735] CPU: 1 UID: 104 PID: 247 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251117 #1 PREEMPT(voluntary) [ 50.022694] Tainted: [W]=WARN [ 50.023233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 50.024904] RIP: 0010:vmalloc_fix_flags+0x91/0xd0 [ 50.025860] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 00 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 a0 7c 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 [ 50.028988] RSP: 0018:ffff88801a9bfbc0 EFLAGS: 00010286 [ 50.029945] RAX: 0000000000000000 RBX: ffffed1003537f78 RCX: ffffffff813a4050 [ 50.031227] RDX: ffff8880178c1bc0 RSI: ffffffff813a405e RDI: 0000000000000001 [ 50.032507] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1003537f2f [ 50.033765] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0 [ 50.035027] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801a9bfdf8 [ 50.036306] FS: 00007fc8cffc9900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000 [ 50.037783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.038826] CR2: 00007ffc26ce5ef8 CR3: 000000000dbc9000 CR4: 0000000000350ef0 [ 50.040086] Call Trace: [ 50.040577] [ 50.040983] ? __pfx_vmalloc_fix_flags+0x10/0x10 [ 50.041854] ? __create_object+0x59/0x80 [ 50.042624] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 50.043583] __vmalloc_noprof+0x59/0x60 [ 50.044284] bpf_prog_alloc_no_stats+0x55/0x470 [ 50.045403] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.046340] bpf_prog_alloc+0x39/0x200 [ 50.047061] ? __pfx_seccomp_check_filter+0x10/0x10 [ 50.048002] bpf_prog_create_from_user+0xb2/0x2f0 [ 50.048908] do_seccomp+0x349/0x25e0 [ 50.049632] ? find_held_lock+0x2b/0x80 [ 50.050348] ? do_prlimit+0x310/0x610 [ 50.051092] ? __pfx_do_seccomp+0x10/0x10 [ 50.051887] ? do_raw_spin_unlock+0x53/0x220 [ 50.052720] ? _raw_spin_unlock+0x1e/0x40 [ 50.053501] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.054430] ? static_key_count+0x60/0x80 [ 50.055239] prctl_set_seccomp+0x4e/0x70 [ 50.056026] __do_sys_prctl+0xe6c/0x1d70 [ 50.056806] ? __pfx___do_sys_prctl+0x10/0x10 [ 50.057661] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 50.058654] ? irqentry_exit+0xf3/0x650 [ 50.059392] do_syscall_64+0xbf/0x430 [ 50.060134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.061087] RIP: 0033:0x7fc8d04bb5cd [ 50.061799] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 50.065004] RSP: 002b:00007ffc26ce4520 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.066372] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc8d04bb5cd [ 50.067675] RDX: 00005637ab829e00 RSI: 0000000000000002 RDI: 0000000000000016 [ 50.068953] RBP: 00007ffc26ce4580 R08: 0000000000000000 R09: 00007ffc26ce3c20 [ 50.070243] R10: 0000000000000000 R11: 0000000000000246 R12: 00005637b0691ad0 [ 50.071544] R13: 00007ffc26ce49b0 R14: 00005637b0692bc0 R15: 00005637b06a3780 [ 50.072849] [ 50.073274] irq event stamp: 1819 [ 50.073922] hardirqs last enabled at (1829): [] __up_console_sem+0x78/0x80 [ 50.075477] hardirqs last disabled at (1840): [] __up_console_sem+0x5d/0x80 [ 50.077004] softirqs last enabled at (1732): [] handle_softirqs+0x50c/0x770 [ 50.078550] softirqs last disabled at (1727): [] __irq_exit_rcu+0xc4/0x100 [ 50.080081] ---[ end trace 0000000000000000 ]--- Warning: Permanently added '[localhost]:18533' (ECDSA) to the list of known hosts. 2025/11/17 15:06:28 fuzzer started 2025/11/17 15:06:29 dialing manager at localhost:37895 2025/11/17 15:06:29 checking machine... 2025/11/17 15:06:29 checking revisions... [ 50.962836] kmemleak: Automatic memory scanning thread ended 2025/11/17 15:06:29 testing simple program... [ 51.031912] cgroup: Unknown subsys name 'net' [ 51.103521] cgroup: Unknown subsys name 'cpuset' [ 51.118916] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program VM DIAGNOSIS: 15:06:28 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=dbb4eea2afda9c26 RDX=0000000047c600cd RSI=00000000a7d4e276 RDI=00000000001044d2 RBP=ffffffff85e1ff20 RSP=ffff88801601f818 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff84c9a4c0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5bcdf60900 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe3107e1650 CR3=000000000d4e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=b81516bbb95e8d3b00000000000ae988 XMM05=82d34eb889d195e20000000000322218 XMM06=07c8bb74b6c04a440000000000320e28 XMM07=00000000000000000000000000000000 XMM08=415453454d49545f454d49544c414552 XMM09=00000000000000000000000000000000 XMM10=20200000000020202020202020200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000028d83 RBX=0000000000000001 RCX=ffffffff84c72d57 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d2c90 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e639a R10=ffff88806cf31cd3 R11=0000000000000001 R12=ffffffff8664f650 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c7174e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd79b77ef8 CR3=000000000e40b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2038323a36303a353120373120766f4e XMM01=73732878696e755f6d6170203a5d3933 XMM02=65736f6c63206e6f6973736573203a29 XMM03=755f6d6170203a5d3933325b64687373 XMM04=69662068637573206f4e203a656c6163 XMM05=3a656c696620766e65206e65706f206f XMM06=65733a6468737328766e655f6d617020 XMM07=6b7a79732037323a36303a3531203731 XMM08=30343d7974696c696261706163202279 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000