Debian GNU/Linux 11 syzkaller ttyS0
Warning: Permanently added '[localhost]:53954' (ECDSA) to the list of known hosts.
2023/05/17 08:22:32 fuzzer started
2023/05/17 08:22:32 dialing manager at localhost:35573
2023/05/17 08:22:32 checking machine...
2023/05/17 08:22:32 checking revisions...
syzkaller login: [ 34.587915] kmemleak: Automatic memory scanning thread ended
2023/05/17 08:22:32 testing simple program...
[ 34.647053] cgroup: Unknown subsys name 'net'
[ 34.744494] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
[ 46.639180] audit: type=1400 audit(1684311764.906:6): avc: denied { execmem } for pid=257 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 47.728074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 47.729393] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 47.732194] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 47.735702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 47.737838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 47.739318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 48.068892] ------------[ cut here ]------------
[ 48.069352] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
[ 48.070464] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 48.071190] Modules linked in:
[ 48.071461] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 48.072432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 48.073721] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 48.074787] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 48.076565] RSP: 0018:ffff888016a67c00 EFLAGS: 00010282
[ 48.076994] RAX: 0000000000000000 RBX: ffff88800e4f9440 RCX: 0000000000000000
[ 48.077611] RDX: ffff8880192a9b40 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 48.078191] RBP: ffff88800e4f9454 R08: 0000000000000001 R09: 0000000000000000
[ 48.078791] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000
[ 48.079360] R13: ffffffff84e223a0 R14: ffff88800e4f9448 R15: ffffffff84d73340
[ 48.079960] FS: 0000555555592400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 48.080621] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.081093] CR2: 00007fee597756f4 CR3: 000000001fb68000 CR4: 0000000000350ee0
[ 48.081682] Call Trace:
[ 48.081909]
[ 48.082109] ? __pfx_ipv4_frags_init_net+0x10/0x10
[ 48.082512] ipv4_frags_init_net+0x269/0x440
[ 48.082912] ops_init+0xbb/0x6b0
[ 48.083219] setup_net+0x3d9/0x990
[ 48.083522] ? down_read_killable+0x1d7/0x4e0
[ 48.083980] ? __pfx_setup_net+0x10/0x10
[ 48.084312] ? copy_net_ns+0x17c/0x770
[ 48.084689] copy_net_ns+0x321/0x770
[ 48.085015] create_new_namespaces+0x3f6/0xb30
[ 48.085394] ? create_new_namespaces+0x2/0xb30
[ 48.085797] unshare_nsproxy_namespaces+0xc1/0x200
[ 48.086207] ksys_unshare+0x44d/0x8e0
[ 48.086560] ? __pfx_ksys_unshare+0x10/0x10
[ 48.086926] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 48.087417] __x64_sys_unshare+0x31/0x40
[ 48.087820] do_syscall_64+0x3f/0x90
[ 48.088143] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 48.088600] RIP: 0033:0x7fab7a82d0d7
[ 48.088916] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 48.090313] RSP: 002b:00007ffe26839928 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 48.090956] RAX: ffffffffffffffda RBX: 00007ffe26839f68 RCX: 00007fab7a82d0d7
[ 48.091562] RDX: 00007fab7a89741f RSI: 00007ffe268398c0 RDI: 0000000040000000
[ 48.092132] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffe268396d0
[ 48.092748] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fab7a93fbf0
[ 48.093316] R13: 00007ffe26839a00 R14: 0000000000000000 R15: 00000000000000f8
[ 48.093946]
[ 48.094165] irq event stamp: 8335
[ 48.094450] hardirqs last enabled at (8345): [] __up_console_sem+0x78/0x80
[ 48.095186] hardirqs last disabled at (8356): [] __up_console_sem+0x5d/0x80
[ 48.095904] softirqs last enabled at (7836): [] irq_exit_rcu+0x93/0xc0
[ 48.096611] softirqs last disabled at (7831): [] irq_exit_rcu+0x93/0xc0
[ 48.097270] ---[ end trace 0000000000000000 ]---
[ 48.104651] ------------[ cut here ]------------
[ 48.105061] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused
[ 48.106314] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 48.107042] Modules linked in:
[ 48.107323] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 48.108083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 48.108748] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 48.109195] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 48.110619] RSP: 0018:ffff888016a67c00 EFLAGS: 00010282
[ 48.111064] RAX: 0000000000000000 RBX: ffff88800e6f4c40 RCX: 0000000000000000
[ 48.111688] RDX: ffff8880192a9b40 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 48.112250] RBP: ffff88800e6f4c54 R08: 0000000000000001 R09: 0000000000000000
[ 48.112858] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 48.113430] R13: ffffffff84e223a0 R14: ffff88800e6f4c48 R15: ffffffff84da62e0
[ 48.114050] FS: 0000555555592400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 48.114714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.115193] CR2: 00007fee597756f4 CR3: 000000001fb68000 CR4: 0000000000350ee0
[ 48.115796] Call Trace:
[ 48.116022]
[ 48.116224] ? __pfx_ipv6_frags_init_net+0x10/0x10
[ 48.116648] ipv6_frags_init_net+0x206/0x3c0
[ 48.117020] ops_init+0xbb/0x6b0
[ 48.117328] setup_net+0x3d9/0x990
[ 48.117664] ? down_read_killable+0x1d7/0x4e0
[ 48.118053] ? __pfx_setup_net+0x10/0x10
[ 48.118390] ? copy_net_ns+0x17c/0x770
[ 48.118757] copy_net_ns+0x321/0x770
[ 48.119093] create_new_namespaces+0x3f6/0xb30
[ 48.119485] ? create_new_namespaces+0x2/0xb30
[ 48.119902] unshare_nsproxy_namespaces+0xc1/0x200
[ 48.120314] ksys_unshare+0x44d/0x8e0
[ 48.120671] ? __pfx_ksys_unshare+0x10/0x10
[ 48.121034] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 48.121505] __x64_sys_unshare+0x31/0x40
[ 48.121875] do_syscall_64+0x3f/0x90
[ 48.122193] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 48.122650] RIP: 0033:0x7fab7a82d0d7
[ 48.122963] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 48.124376] RSP: 002b:00007ffe26839928 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 48.125017] RAX: ffffffffffffffda RBX: 00007ffe26839f68 RCX: 00007fab7a82d0d7
[ 48.125647] RDX: 00007fab7a89741f RSI: 00007ffe268398c0 RDI: 0000000040000000
[ 48.126224] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffe268396d0
[ 48.126834] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fab7a93fbf0
[ 48.127432] R13: 00007ffe26839a00 R14: 0000000000000000 R15: 00000000000000f8
[ 48.128067]
[ 48.128268] irq event stamp: 11549
[ 48.128609] hardirqs last enabled at (11561): [] __up_console_sem+0x78/0x80
[ 48.129306] hardirqs last disabled at (11570): [] __up_console_sem+0x5d/0x80
[ 48.130066] softirqs last enabled at (11490): [] irq_exit_rcu+0x93/0xc0
[ 48.130731] softirqs last disabled at (11485): [] irq_exit_rcu+0x93/0xc0
[ 48.131426] ---[ end trace 0000000000000000 ]---
[ 48.132725] ------------[ cut here ]------------
[ 48.133125] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused
[ 48.134451] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 48.135188] Modules linked in:
[ 48.135465] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 48.136252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 48.136928] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 48.137353] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 48.138790] RSP: 0018:ffff888016a67bf0 EFLAGS: 00010286
[ 48.139224] RAX: 0000000000000000 RBX: ffff888013953840 RCX: 0000000000000000
[ 48.139893] RDX: ffff8880192a9b40 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 48.140526] RBP: ffff888013953854 R08: 0000000000000001 R09: 0000000000000000
[ 48.141185] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 48.141865] R13: ffffffff84e223a0 R14: ffff888013953848 R15: ffffffff84daf020
[ 48.142519] FS: 0000555555592400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 48.143285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.143851] CR2: 00007fee597756f4 CR3: 000000001fb68000 CR4: 0000000000350ee0
[ 48.144477] Call Trace:
[ 48.144763]
[ 48.144999] nf_ct_net_init+0x224/0x3d0
[ 48.145384] ? __pfx_nf_ct_net_init+0x10/0x10
[ 48.145844] ops_init+0xbb/0x6b0
[ 48.146189] setup_net+0x3d9/0x990
[ 48.146562] ? down_read_killable+0x1d7/0x4e0
[ 48.146993] ? __pfx_setup_net+0x10/0x10
[ 48.147390] ? copy_net_ns+0x17c/0x770
[ 48.147809] copy_net_ns+0x321/0x770
[ 48.148166] create_new_namespaces+0x3f6/0xb30
[ 48.148629] ? create_new_namespaces+0x2/0xb30
[ 48.149062] unshare_nsproxy_namespaces+0xc1/0x200
[ 48.149526] ksys_unshare+0x44d/0x8e0
[ 48.149930] ? __pfx_ksys_unshare+0x10/0x10
[ 48.150341] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 48.150906] __x64_sys_unshare+0x31/0x40
[ 48.151329] do_syscall_64+0x3f/0x90
[ 48.151717] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 48.152204] RIP: 0033:0x7fab7a82d0d7
[ 48.152626] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 48.154260] RSP: 002b:00007ffe26839928 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 48.154970] RAX: ffffffffffffffda RBX: 00007ffe26839f68 RCX: 00007fab7a82d0d7
[ 48.155642] RDX: 00007fab7a89741f RSI: 00007ffe268398c0 RDI: 0000000040000000
[ 48.156216] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffe268396d0
[ 48.156824] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fab7a93fbf0
[ 48.157382] R13: 00007ffe26839a00 R14: 0000000000000000 R15: 00000000000000f8
[ 48.158006]
[ 48.158214] irq event stamp: 12391
[ 48.158504] hardirqs last enabled at (12401): [] __up_console_sem+0x78/0x80
[ 48.159215] hardirqs last disabled at (12412): [] __up_console_sem+0x5d/0x80
[ 48.159926] softirqs last enabled at (12290): [] irq_exit_rcu+0x93/0xc0
[ 48.160622] softirqs last disabled at (12277): [] irq_exit_rcu+0x93/0xc0
[ 48.161285] ---[ end trace 0000000000000000 ]---
executing program
[ 49.753099] Bluetooth: hci0: command 0x0409 tx timeout
[ 51.801205] Bluetooth: hci0: command 0x041b tx timeout
executing program
[ 53.848623] Bluetooth: hci0: command 0x040f tx timeout
executing program
[ 55.896606] Bluetooth: hci0: command 0x0419 tx timeout
VM DIAGNOSIS:
08:22:46 Registers:
info registers vcpu 0
RAX=0000000080000000 RBX=0000000000000000 RCX=0000000080000000 RDX=ffff88801677b680
RSI=ffffffff8216e277 RDI=0000000000000006 RBP=ffffffff8791f348 RSP=ffff888016ddf630
R8 =0000000000000006 R9 =0000000000002340 R10=0000000000008000 R11=1ffffffff0e83cce
R12=0000000000002340 R13=0000000000008000 R14=dffffc0000000000 R15=0000000000000147
RIP=ffffffff814bf881 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f6e8d06a700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0c63fd3e20 CR3=000000000944a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=435020647261646e61745320554d4551
XMM04=636f72703d7373616c63742030733a74 XMM05=3a755f6d65747379733d747865746e6f
XMM06=5f6d65747379733a755f6d6574737973 XMM07=00000000000000000000000000000000
XMM08=2b6c74637379735f74656e5f72657473 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff888016a67578
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001
R12=0000000000000020 R13=ffffffff87f27bc0 R14=0000000000000010 R15=ffffffff82507670
RIP=ffffffff825076dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555555592400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fee597756f4 CR3=000000001fb68000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000