syzkaller login: [ 49.261602] sshd (217) used greatest stack depth: 24152 bytes left
Warning: Permanently added '[localhost]:12164' (ECDSA) to the list of known hosts.
2023/05/17 09:03:18 fuzzer started
2023/05/17 09:03:19 dialing manager at localhost:35573
2023/05/17 09:03:19 checking machine...
2023/05/17 09:03:19 checking revisions...
[ 50.874428] kmemleak: Automatic memory scanning thread ended
2023/05/17 09:03:19 testing simple program...
[ 50.929061] cgroup: Unknown subsys name 'net'
[ 51.003934] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
[ 63.300664] audit: type=1400 audit(1684314211.632:6): avc: denied { execmem } for pid=260 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 64.404406] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 64.406137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 64.406970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 64.409831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 64.411076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 64.412849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 64.716326] ------------[ cut here ]------------
[ 64.716803] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
[ 64.717953] WARNING: CPU: 1 PID: 261 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 64.718661] Modules linked in:
[ 64.718982] CPU: 1 PID: 261 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 64.720328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 64.723042] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 64.723520] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 64.725024] RSP: 0018:ffff88801f117c00 EFLAGS: 00010282
[ 64.725504] RAX: 0000000000000000 RBX: ffff888015ec0040 RCX: 0000000000000000
[ 64.726131] RDX: ffff888016830000 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 64.726742] RBP: ffff888015ec0054 R08: 0000000000000001 R09: 0000000000000000
[ 64.727341] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 64.727908] R13: ffffffff84e223a0 R14: ffff888015ec0048 R15: ffffffff84d73340
[ 64.728497] FS: 00005555563fa400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 64.729172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 64.729651] CR2: 00007f9a7c2a96f4 CR3: 0000000013010000 CR4: 0000000000350ee0
[ 64.730300] Call Trace:
[ 64.730529]
[ 64.730724] ? __pfx_ipv4_frags_init_net+0x10/0x10
[ 64.731172] ipv4_frags_init_net+0x269/0x440
[ 64.731574] ops_init+0xbb/0x6b0
[ 64.731892] setup_net+0x3d9/0x990
[ 64.732201] ? down_read_killable+0x1d7/0x4e0
[ 64.732595] ? __pfx_setup_net+0x10/0x10
[ 64.732932] ? copy_net_ns+0x17c/0x770
[ 64.733318] copy_net_ns+0x321/0x770
[ 64.733634] create_new_namespaces+0x3f6/0xb30
[ 64.734099] unshare_nsproxy_namespaces+0xc1/0x200
[ 64.734521] ksys_unshare+0x44d/0x8e0
[ 64.734831] ? __pfx_ksys_unshare+0x10/0x10
[ 64.735270] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 64.735751] __x64_sys_unshare+0x31/0x40
[ 64.736098] do_syscall_64+0x3f/0x90
[ 64.736428] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 64.736843] RIP: 0033:0x7f8acc87c0d7
[ 64.737135] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 64.738558] RSP: 002b:00007ffc63124348 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 64.739144] RAX: ffffffffffffffda RBX: 00007ffc63124988 RCX: 00007f8acc87c0d7
[ 64.739733] RDX: 00007f8acc8e641f RSI: 00007ffc631242e0 RDI: 0000000040000000
[ 64.740347] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc631240f0
[ 64.740932] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f8acc98ebf0
[ 64.741518] R13: 00007ffc63124420 R14: 0000000000000000 R15: 00000000000000f8
[ 64.742154]
[ 64.742367] irq event stamp: 8737
[ 64.742645] hardirqs last enabled at (8747): [] __up_console_sem+0x78/0x80
[ 64.743338] hardirqs last disabled at (8758): [] __up_console_sem+0x5d/0x80
[ 64.744013] softirqs last enabled at (8194): [] irq_exit_rcu+0x93/0xc0
[ 64.744705] softirqs last disabled at (8189): [] irq_exit_rcu+0x93/0xc0
[ 64.745472] ---[ end trace 0000000000000000 ]---
[ 64.749729] ------------[ cut here ]------------
[ 64.750275] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused
[ 64.751413] WARNING: CPU: 1 PID: 261 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 64.752156] Modules linked in:
[ 64.752453] CPU: 1 PID: 261 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 64.753263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 64.753900] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 64.754435] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 64.755852] RSP: 0018:ffff88801f117c00 EFLAGS: 00010282
[ 64.756312] RAX: 0000000000000000 RBX: ffff888009752240 RCX: 0000000000000000
[ 64.756879] RDX: ffff888016830000 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 64.757480] RBP: ffff888009752254 R08: 0000000000000001 R09: 0000000000000000
[ 64.758074] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 64.758673] R13: ffffffff84e223a0 R14: ffff888009752248 R15: ffffffff84da62e0
[ 64.759289] FS: 00005555563fa400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 64.759973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 64.760506] CR2: 00007f9a7c2a96f4 CR3: 0000000013010000 CR4: 0000000000350ee0
[ 64.761142] Call Trace:
[ 64.761390]
[ 64.761598] ? __pfx_ipv6_frags_init_net+0x10/0x10
[ 64.762087] ipv6_frags_init_net+0x206/0x3c0
[ 64.762498] ops_init+0xbb/0x6b0
[ 64.762832] setup_net+0x3d9/0x990
[ 64.763181] ? down_read_killable+0x1d7/0x4e0
[ 64.763607] ? __pfx_setup_net+0x10/0x10
[ 64.763981] ? copy_net_ns+0x17c/0x770
[ 64.764410] copy_net_ns+0x321/0x770
[ 64.764757] create_new_namespaces+0x3f6/0xb30
[ 64.765163] unshare_nsproxy_namespaces+0xc1/0x200
[ 64.765634] ksys_unshare+0x44d/0x8e0
[ 64.766044] ? __pfx_ksys_unshare+0x10/0x10
[ 64.766429] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 64.766939] __x64_sys_unshare+0x31/0x40
[ 64.767317] do_syscall_64+0x3f/0x90
[ 64.767652] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 64.768121] RIP: 0033:0x7f8acc87c0d7
[ 64.768464] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 64.770081] RSP: 002b:00007ffc63124348 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 64.770730] RAX: ffffffffffffffda RBX: 00007ffc63124988 RCX: 00007f8acc87c0d7
[ 64.771354] RDX: 00007f8acc8e641f RSI: 00007ffc631242e0 RDI: 0000000040000000
[ 64.771934] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc631240f0
[ 64.772563] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f8acc98ebf0
[ 64.773146] R13: 00007ffc63124420 R14: 0000000000000000 R15: 00000000000000f8
[ 64.773782]
[ 64.774056] irq event stamp: 10585
[ 64.774377] hardirqs last enabled at (10597): [] __up_console_sem+0x78/0x80
[ 64.775143] hardirqs last disabled at (10606): [] __up_console_sem+0x5d/0x80
[ 64.775881] softirqs last enabled at (10526): [] irq_exit_rcu+0x93/0xc0
[ 64.776646] softirqs last disabled at (10521): [] irq_exit_rcu+0x93/0xc0
[ 64.777390] ---[ end trace 0000000000000000 ]---
[ 64.778501] ------------[ cut here ]------------
[ 64.778917] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused
[ 64.780373] WARNING: CPU: 1 PID: 261 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 64.781119] Modules linked in:
[ 64.781445] CPU: 1 PID: 261 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 64.782312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 64.783018] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 64.783534] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 64.785056] RSP: 0018:ffff88801f117bf0 EFLAGS: 00010286
[ 64.785519] RAX: 0000000000000000 RBX: ffff88800ea37640 RCX: 0000000000000000
[ 64.786170] RDX: ffff888016830000 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 64.786816] RBP: ffff88800ea37654 R08: 0000000000000001 R09: 0000000000000000
[ 64.787448] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 64.788082] R13: ffffffff84e223a0 R14: ffff88800ea37648 R15: ffffffff84daf020
[ 64.788725] FS: 00005555563fa400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 64.789439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 64.789966] CR2: 00007f9a7c2a96f4 CR3: 0000000013010000 CR4: 0000000000350ee0
[ 64.790571] Call Trace:
[ 64.790789]
[ 64.791009] nf_ct_net_init+0x224/0x3d0
[ 64.791451] ? __pfx_nf_ct_net_init+0x10/0x10
[ 64.791861] ops_init+0xbb/0x6b0
[ 64.792234] setup_net+0x3d9/0x990
[ 64.792542] ? down_read_killable+0x1d7/0x4e0
[ 64.792936] ? __pfx_setup_net+0x10/0x10
[ 64.793358] ? copy_net_ns+0x17c/0x770
[ 64.793721] copy_net_ns+0x321/0x770
[ 64.794086] create_new_namespaces+0x3f6/0xb30
[ 64.794487] unshare_nsproxy_namespaces+0xc1/0x200
[ 64.794885] ksys_unshare+0x44d/0x8e0
[ 64.795275] ? __pfx_ksys_unshare+0x10/0x10
[ 64.795659] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 64.796169] __x64_sys_unshare+0x31/0x40
[ 64.796568] do_syscall_64+0x3f/0x90
[ 64.796914] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 64.797403] RIP: 0033:0x7f8acc87c0d7
[ 64.797722] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 64.799261] RSP: 002b:00007ffc63124348 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 64.799899] RAX: ffffffffffffffda RBX: 00007ffc63124988 RCX: 00007f8acc87c0d7
[ 64.800544] RDX: 00007f8acc8e641f RSI: 00007ffc631242e0 RDI: 0000000040000000
[ 64.801179] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc631240f0
[ 64.801818] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f8acc98ebf0
[ 64.802497] R13: 00007ffc63124420 R14: 0000000000000000 R15: 00000000000000f8
[ 64.803091]
[ 64.803335] irq event stamp: 11385
[ 64.803629] hardirqs last enabled at (11395): [] __up_console_sem+0x78/0x80
[ 64.804411] hardirqs last disabled at (11406): [] __up_console_sem+0x5d/0x80
[ 64.805254] softirqs last enabled at (10896): [] irq_exit_rcu+0x93/0xc0
[ 64.806000] softirqs last disabled at (10867): [] irq_exit_rcu+0x93/0xc0
[ 64.806699] ---[ end trace 0000000000000000 ]---
executing program
[ 66.491851] Bluetooth: hci0: command 0x0409 tx timeout
[ 68.539312] Bluetooth: hci0: command 0x041b tx timeout
executing program
[ 70.587308] Bluetooth: hci0: command 0x040f tx timeout
executing program
[ 72.635279] Bluetooth: hci0: command 0x0419 tx timeout
VM DIAGNOSIS:
09:03:25 Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff888015c97d90 RCX=0000000000000000 RDX=1ffff11002b92fbd
RSI=ffffffff8170ae05 RDI=0000000000000007 RBP=8000000018c3c025 RSP=ffff888015c97b80
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=ffff8880099aa3f0 R13=0000000000000000 R14=ffff888015c97df0 R15=ffff88800e204828
RIP=ffffffff814bf870 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5cde26a900 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5cdd67ee70 CR3=000000000e762000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=494e4f544f4e4f4d5f454352554f535f XMM01=49545f43494e4f544f4e4f4d5f454352
XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572
XMM04=51c3f4133296dfa4000000000013d300 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=31dc375c6ff17b8b00000000000ae988 XMM07=00000000000000000000000000000000
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00000000000000000020000000200000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff825075f0 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff88801f1175c0
R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001
R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0fe4fd1 R15=dffffc0000000000
RIP=ffffffff82507645 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555563fa400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9a7c2a96f4 CR3=0000000013010000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000