[ 45.767478] sshd (224) used greatest stack depth: 24536 bytes left
[ 45.840637] ------------[ cut here ]------------
[ 45.841629] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code!
[ 45.843826] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/232
[ 45.845637] Modules linked in:
[ 45.846281] CPU: 0 UID: 104 PID: 232 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary)
[ 45.848493] Tainted: [W]=WARN
[ 45.849092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 45.850665] RIP: 0010:vmalloc_fix_flags+0x91/0xd0
[ 45.851661] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00
[ 45.855025] RSP: 0018:ffff888016b47bc0 EFLAGS: 00010286
[ 45.856082] RAX: 0000000000000000 RBX: ffffed1002d68f78 RCX: ffffffff813a4050
[ 45.857474] RDX: ffff88800c943780 RSI: ffffffff813a405e RDI: 0000000000000001
[ 45.858853] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002d68f2f
[ 45.860247] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0
[ 45.861619] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888016b47df8
[ 45.863025] FS: 00007f5e6fca5900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000
[ 45.864618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 45.865757] CR2: 00007f5e70197580 CR3: 000000000be0c000 CR4: 0000000000350ef0
[ 45.867141] Call Trace:
[ 45.867723]
[ 45.868162] ? __pfx_vmalloc_fix_flags+0x10/0x10
[ 45.869135] ? __create_object+0x59/0x80
[ 45.869987] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 45.871035] __vmalloc_noprof+0x59/0x60
[ 45.871877] bpf_prog_alloc_no_stats+0x55/0x470
[ 45.872829] ? __pfx_seccomp_check_filter+0x10/0x10
[ 45.873846] bpf_prog_alloc+0x39/0x200
[ 45.874647] ? __pfx_seccomp_check_filter+0x10/0x10
[ 45.875676] bpf_prog_create_from_user+0xb2/0x2f0
[ 45.876656] do_seccomp+0x349/0x25e0
[ 45.877368] ? __pfx_css_rstat_updated+0x10/0x10
[ 45.878347] ? __pfx_do_seccomp+0x10/0x10
[ 45.879200] ? find_held_lock+0x2b/0x80
[ 45.880063] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 45.881110] ? static_key_count+0x60/0x80
[ 45.881982] prctl_set_seccomp+0x4e/0x70
[ 45.882816] __do_sys_prctl+0xe6c/0x1d70
[ 45.883697] ? __pfx___do_sys_prctl+0x10/0x10
[ 45.884633] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 45.885671] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0
[ 45.886727] ? irqentry_exit+0xf3/0x650
[ 45.887559] do_syscall_64+0xbf/0x430
[ 45.888335] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 45.889367] RIP: 0033:0x7f5e701975cd
[ 45.890101] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00
[ 45.893508] RSP: 002b:00007ffea6f1e150 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 45.894977] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5e701975cd
[ 45.896408] RDX: 0000564069560e00 RSI: 0000000000000002 RDI: 0000000000000016
[ 45.897314] RBP: 00007ffea6f1e1b0 R08: 0000000000000000 R09: 00007ffea6f1d850
[ 45.898168] R10: 0000000000000000 R11: 0000000000000246 R12: 00005640793dc2b0
[ 45.899026] R13: 00007ffea6f1e5e0 R14: 00005640793ded20 R15: 00005640793f08d0
[ 45.899905]
[ 45.900186] irq event stamp: 1783
[ 45.900625] hardirqs last enabled at (1793): [] __up_console_sem+0x78/0x80
[ 45.901356] hardirqs last disabled at (1800): [] __up_console_sem+0x5d/0x80
[ 45.902095] softirqs last enabled at (1412): [] handle_softirqs+0x50c/0x770
[ 45.902850] softirqs last disabled at (1407): [] __irq_exit_rcu+0xc4/0x100
[ 45.903587] ---[ end trace 0000000000000000 ]---
Debian GNU/Linux 11 syzkaller ttyS0
syzkaller login: [ 48.256132] ------------[ cut here ]------------
[ 48.256931] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code!
[ 48.258652] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#1: sshd/239
[ 48.259899] Modules linked in:
[ 48.260419] CPU: 1 UID: 104 PID: 239 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary)
[ 48.262075] Tainted: [W]=WARN
[ 48.262568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 48.263854] RIP: 0010:vmalloc_fix_flags+0x91/0xd0
[ 48.264627] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00
[ 48.267284] RSP: 0018:ffff888017bd7bc0 EFLAGS: 00010286
[ 48.268120] RAX: 0000000000000000 RBX: ffffed1002f7af78 RCX: ffffffff813a4050
[ 48.269172] RDX: ffff88801b381bc0 RSI: ffffffff813a405e RDI: 0000000000000001
[ 48.270235] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1002f7af2f
[ 48.271287] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0
[ 48.272369] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff888017bd7df8
[ 48.273442] FS: 00007f7f6eec7900(0000) GS:ffff8880e548f000(0000) knlGS:0000000000000000
[ 48.274618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.275481] CR2: 00007fff96964ef8 CR3: 000000000e151000 CR4: 0000000000350ef0
[ 48.276573] Call Trace:
[ 48.276956]
[ 48.277290] ? __pfx_vmalloc_fix_flags+0x10/0x10
[ 48.278033] ? __create_object+0x59/0x80
[ 48.278673] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 48.279466] __vmalloc_noprof+0x59/0x60
[ 48.280092] bpf_prog_alloc_no_stats+0x55/0x470
[ 48.280826] ? __pfx_seccomp_check_filter+0x10/0x10
[ 48.281589] bpf_prog_alloc+0x39/0x200
[ 48.282169] ? __pfx_seccomp_check_filter+0x10/0x10
[ 48.282932] bpf_prog_create_from_user+0xb2/0x2f0
[ 48.283689] do_seccomp+0x349/0x25e0
[ 48.284266] ? find_held_lock+0x2b/0x80
[ 48.284890] ? do_prlimit+0x310/0x610
[ 48.285501] ? __pfx_do_seccomp+0x10/0x10
[ 48.286110] ? do_raw_spin_unlock+0x53/0x220
[ 48.286793] ? _raw_spin_unlock+0x1e/0x40
[ 48.287435] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 48.288230] ? static_key_count+0x60/0x80
[ 48.288890] prctl_set_seccomp+0x4e/0x70
[ 48.289525] __do_sys_prctl+0xe6c/0x1d70
[ 48.290133] ? __pfx___do_sys_prctl+0x10/0x10
[ 48.290831] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0
[ 48.291628] ? irqentry_exit+0xf3/0x650
[ 48.292259] do_syscall_64+0xbf/0x430
[ 48.292864] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 48.293639] RIP: 0033:0x7f7f6f3b95cd
[ 48.294182] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00
[ 48.296813] RSP: 002b:00007fff96963d10 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 48.297932] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7f6f3b95cd
[ 48.298986] RDX: 000055f80ef6ce00 RSI: 0000000000000002 RDI: 0000000000000016
[ 48.300066] RBP: 00007fff96963d70 R08: 0000000000000000 R09: 00007fff96963410
[ 48.301124] R10: 0000000000000000 R11: 0000000000000246 R12: 000055f83318e2b0
[ 48.302184] R13: 00007fff969641a0 R14: 000055f833190d20 R15: 000055f8331a28d0
[ 48.303256]
[ 48.303639] irq event stamp: 1805
[ 48.304163] hardirqs last enabled at (1813): [] __up_console_sem+0x78/0x80
[ 48.305423] hardirqs last disabled at (1822): [] __up_console_sem+0x5d/0x80
[ 48.306668] softirqs last enabled at (1614): [] handle_softirqs+0x50c/0x770
[ 48.307966] softirqs last disabled at (1609): [] __irq_exit_rcu+0xc4/0x100
[ 48.309202] ---[ end trace 0000000000000000 ]---
[ 49.059080] ------------[ cut here ]------------
[ 49.060083] Unexpected gfp: 0x400000 (__GFP_ACCOUNT). Fixing up to gfp: 0xdc0 (GFP_KERNEL|__GFP_ZERO). Fix your code!
[ 49.062228] WARNING: mm/vmalloc.c:3937 at vmalloc_fix_flags+0x91/0xd0, CPU#0: sshd/246
[ 49.064072] Modules linked in:
[ 49.064887] CPU: 0 UID: 104 PID: 246 Comm: sshd Tainted: G W 6.18.0-rc6-next-20251118 #1 PREEMPT(voluntary)
[ 49.067059] Tainted: [W]=WARN
[ 49.067765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 49.069438] RIP: 0010:vmalloc_fix_flags+0x91/0xd0
[ 49.070472] Code: e0 ad 11 00 81 e6 1f 52 ee ff 89 4c 24 40 89 74 24 30 90 48 c7 c7 40 38 f1 84 4c 8d 44 24 40 48 8d 54 24 30 e8 30 7b 94 ff 90 <0f> 0b 90 90 8b 44 24 40 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00
[ 49.074031] RSP: 0018:ffff88801b4afbc0 EFLAGS: 00010286
[ 49.075143] RAX: 0000000000000000 RBX: ffffed1003695f78 RCX: ffffffff813a4050
[ 49.076606] RDX: ffff88800b2eb780 RSI: ffffffff813a405e RDI: 0000000000000001
[ 49.078051] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed1003695f2f
[ 49.079497] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400dc0
[ 49.080945] R13: 0000000000000000 R14: 0000000000400dc0 R15: ffff88801b4afdf8
[ 49.082407] FS: 00007f1b8a97e900(0000) GS:ffff8880e538f000(0000) knlGS:0000000000000000
[ 49.084034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.085215] CR2: 00007ffdd5666ef8 CR3: 000000001fe31000 CR4: 0000000000350ef0
[ 49.086626] Call Trace:
[ 49.087140]
[ 49.087647] ? __pfx_vmalloc_fix_flags+0x10/0x10
[ 49.088638] ? __create_object+0x59/0x80
[ 49.089502] ? trace_irq_enable.constprop.0+0xc2/0x100
[ 49.090543] __vmalloc_noprof+0x59/0x60
[ 49.091308] bpf_prog_alloc_no_stats+0x55/0x470
[ 49.092262] ? __pfx_seccomp_check_filter+0x10/0x10
[ 49.093259] bpf_prog_alloc+0x39/0x200
[ 49.094081] ? __pfx_seccomp_check_filter+0x10/0x10
[ 49.095085] bpf_prog_create_from_user+0xb2/0x2f0
[ 49.096089] do_seccomp+0x349/0x25e0
[ 49.096872] ? find_held_lock+0x2b/0x80
[ 49.097696] ? do_prlimit+0x310/0x610
[ 49.098478] ? __pfx_do_seccomp+0x10/0x10
[ 49.099257] ? do_raw_spin_unlock+0x53/0x220
[ 49.100175] ? _raw_spin_unlock+0x1e/0x40
[ 49.101020] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 49.102065] ? static_key_count+0x60/0x80
[ 49.102929] prctl_set_seccomp+0x4e/0x70
[ 49.103803] __do_sys_prctl+0xe6c/0x1d70
[ 49.104652] ? __pfx___do_sys_prctl+0x10/0x10
[ 49.105583] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0
[ 49.106624] ? irqentry_exit+0xf3/0x650
[ 49.107460] do_syscall_64+0xbf/0x430
[ 49.108224] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 49.109253] RIP: 0033:0x7f1b8ae705cd
[ 49.110027] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 08 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 9d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00
[ 49.113438] RSP: 002b:00007ffdd5664fe0 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 49.114902] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b8ae705cd
[ 49.116311] RDX: 000055cc8a9b6e00 RSI: 0000000000000002 RDI: 0000000000000016
[ 49.117680] RBP: 00007ffdd5665040 R08: 0000000000000000 R09: 00007ffdd56646e0
[ 49.119053] R10: 0000000000000000 R11: 0000000000000246 R12: 000055cc8bc3ebf0
[ 49.120498] R13: 00007ffdd5665470 R14: 000055cc8bc48380 R15: 000055cc8bc53460
[ 49.121887]
[ 49.122344] irq event stamp: 1793
[ 49.123052] hardirqs last enabled at (1803): [] __up_console_sem+0x78/0x80
[ 49.124698] hardirqs last disabled at (1812): [] __up_console_sem+0x5d/0x80
[ 49.126333] softirqs last enabled at (1638): [] handle_softirqs+0x50c/0x770
[ 49.128027] softirqs last disabled at (1633): [] __irq_exit_rcu+0xc4/0x100
[ 49.129474] ---[ end trace 0000000000000000 ]---
Warning: Permanently added '[localhost]:33801' (ECDSA) to the list of known hosts.
2025/11/19 02:49:09 fuzzer started
2025/11/19 02:49:09 dialing manager at localhost:34383
2025/11/19 02:49:09 checking machine...
2025/11/19 02:49:09 checking revisions...
[ 50.202471] kmemleak: Automatic memory scanning thread ended
2025/11/19 02:49:10 testing simple program...
[ 50.281066] cgroup: Unknown subsys name 'net'
[ 50.353549] cgroup: Unknown subsys name 'cpuset'
[ 50.368230] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
VM DIAGNOSIS:
02:49:08 Registers:
info registers vcpu 0
RAX=ffffffff81b2a2a4 RBX=ffffffff81619130 RCX=ffff88806ce089c4 RDX=1ffff1100d9c1159
RSI=ffffffff81b2a2a4 RDI=ffff88806ce08b38 RBP=ffff88806ce08b08 RSP=ffff88806ce08a68
R8 =ffffffff86ab8458 R9 =ffff88806ce08ab0 R10=000000000003c9ed R11=00000000000255cb
R12=ffff88806ce08b38 R13=0000000000000000 R14=ffff88801b380000 R15=ffff888009462280
RIP=ffffffff81619130 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7f6eec7900 00000000 00000000
GS =0000 ffff8880e538f000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7f6ee91008 CR3=000000000e4d5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=652022746f6f72223d74636361207469
XMM02=3d6c616e696d72657420322e322e302e XMM03=3d656d616e74736f682022646873732f
XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000
XMM08=652075253d64692073253d706f000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000001e6d7 RBX=0000000000000001 RCX=ffffffff84c72d57 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814d2c90 RBP=dffffc0000000000 RSP=ffff8880096efe58
R8 =0000000000000001 R9 =ffffed100d9e639a R10=ffff88806cf31cd3 R11=0000000000000001
R12=ffffffff8664f850 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84c7174e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e548f000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd05f7b3e8 CR3=00000000168c9000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=fc912affef455b9c73445e59782af913
XMM02=0000000000301b20ec2efd57dc4c00df XMM03=000000000030d8d889554eb5dd086d2d
XMM04=4af081f693b45c9c00000000000ae988 XMM05=0b39c798a71319b6000000000031dc28
XMM06=8fede82a5ad58cbe000000000031dab0 XMM07=e042d86d42eb936e000000000030dbb0
XMM08=89554eb5dd086d2d0000000000301b80 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000