syzkaller login: [ 58.176838] sshd (226) used greatest stack depth: 24152 bytes left
Warning: Permanently added '[localhost]:20792' (ECDSA) to the list of known hosts.
2023/05/16 21:44:58 fuzzer started
2023/05/16 21:44:58 dialing manager at localhost:35573
2023/05/16 21:44:58 checking machine...
2023/05/16 21:44:58 checking revisions...
[ 59.291000] kmemleak: Automatic memory scanning thread ended
2023/05/16 21:44:58 testing simple program...
[ 59.360459] cgroup: Unknown subsys name 'net'
[ 59.441533] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
[ 71.755288] audit: type=1400 audit(1684273511.252:6): avc: denied { execmem } for pid=259 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 72.899539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 72.902239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 72.903717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 72.908913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 72.917951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 72.919402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 73.342901] ------------[ cut here ]------------
[ 73.343715] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
[ 73.345820] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 73.347536] Modules linked in:
[ 73.348327] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 73.353116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 73.354337] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 73.355155] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 73.357693] RSP: 0018:ffff88801e2dfc00 EFLAGS: 00010282
[ 73.358493] RAX: 0000000000000000 RBX: ffff88800e875c40 RCX: 0000000000000000
[ 73.359531] RDX: ffff88801e2d0000 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 73.360558] RBP: ffff88800e875c54 R08: 0000000000000001 R09: 0000000000000000
[ 73.361632] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000
[ 73.362655] R13: ffffffff84e223a0 R14: ffff88800e875c48 R15: ffffffff84d73340
[ 73.363701] FS: 000055555640a400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 73.364845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 73.365717] CR2: 00007f5216c9a6f4 CR3: 000000000ec72000 CR4: 0000000000350ef0
[ 73.366737] Call Trace:
[ 73.367181]
[ 73.367518] ? __pfx_ipv4_frags_init_net+0x10/0x10
[ 73.368254] ipv4_frags_init_net+0x269/0x440
[ 73.368911] ops_init+0xbb/0x6b0
[ 73.369451] setup_net+0x3d9/0x990
[ 73.369981] ? down_read_killable+0x1d7/0x4e0
[ 73.370670] ? __pfx_setup_net+0x10/0x10
[ 73.371274] ? copy_net_ns+0x17c/0x770
[ 73.371851] copy_net_ns+0x321/0x770
[ 73.372424] create_new_namespaces+0x3f6/0xb30
[ 73.373120] unshare_nsproxy_namespaces+0xc1/0x200
[ 73.373827] ksys_unshare+0x44d/0x8e0
[ 73.374434] ? __pfx_ksys_unshare+0x10/0x10
[ 73.375103] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 73.375911] __x64_sys_unshare+0x31/0x40
[ 73.376521] do_syscall_64+0x3f/0x90
[ 73.377088] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 73.377846] RIP: 0033:0x7f76b90b70d7
[ 73.378414] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 73.380928] RSP: 002b:00007ffc9cd0c9a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 73.382027] RAX: ffffffffffffffda RBX: 00007ffc9cd0cfe8 RCX: 00007f76b90b70d7
[ 73.383029] RDX: 00007f76b912141f RSI: 00007ffc9cd0c940 RDI: 0000000040000000
[ 73.384098] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc9cd0c750
[ 73.385123] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f76b91c9bf0
[ 73.386163] R13: 00007ffc9cd0ca80 R14: 0000000000000000 R15: 00000000000000f8
[ 73.387222]
[ 73.387563] irq event stamp: 7941
[ 73.388085] hardirqs last enabled at (7953): [] __up_console_sem+0x78/0x80
[ 73.389272] hardirqs last disabled at (7964): [] __up_console_sem+0x5d/0x80
[ 73.390473] softirqs last enabled at (7468): [] irq_exit_rcu+0x93/0xc0
[ 73.391677] softirqs last disabled at (7411): [] irq_exit_rcu+0x93/0xc0
[ 73.392840] ---[ end trace 0000000000000000 ]---
[ 73.399087] ------------[ cut here ]------------
[ 73.399755] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused
[ 73.401552] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 73.402759] Modules linked in:
[ 73.403270] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 73.404532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 73.405654] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 73.406388] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 73.408783] RSP: 0018:ffff88801e2dfc00 EFLAGS: 00010282
[ 73.409528] RAX: 0000000000000000 RBX: ffff888014513240 RCX: 0000000000000000
[ 73.410528] RDX: ffff88801e2d0000 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 73.411540] RBP: ffff888014513254 R08: 0000000000000001 R09: 0000000000000000
[ 73.412531] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 73.413523] R13: ffffffff84e223a0 R14: ffff888014513248 R15: ffffffff84da62e0
[ 73.414517] FS: 000055555640a400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 73.415644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 73.416438] CR2: 00007f5216c9a6f4 CR3: 000000000ec72000 CR4: 0000000000350ef0
[ 73.417420] Call Trace:
[ 73.417801]
[ 73.418157] ? __pfx_ipv6_frags_init_net+0x10/0x10
[ 73.418843] ipv6_frags_init_net+0x206/0x3c0
[ 73.419497] ops_init+0xbb/0x6b0
[ 73.419996] setup_net+0x3d9/0x990
[ 73.420525] ? down_read_killable+0x1d7/0x4e0
[ 73.421181] ? __pfx_setup_net+0x10/0x10
[ 73.421749] ? copy_net_ns+0x17c/0x770
[ 73.422337] copy_net_ns+0x321/0x770
[ 73.422868] create_new_namespaces+0x3f6/0xb30
[ 73.423545] unshare_nsproxy_namespaces+0xc1/0x200
[ 73.424257] ksys_unshare+0x44d/0x8e0
[ 73.424801] ? __pfx_ksys_unshare+0x10/0x10
[ 73.425427] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 73.426253] __x64_sys_unshare+0x31/0x40
[ 73.426829] do_syscall_64+0x3f/0x90
[ 73.427401] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 73.428143] RIP: 0033:0x7f76b90b70d7
[ 73.428653] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 73.430989] RSP: 002b:00007ffc9cd0c9a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 73.432055] RAX: ffffffffffffffda RBX: 00007ffc9cd0cfe8 RCX: 00007f76b90b70d7
[ 73.433244] RDX: 00007f76b912141f RSI: 00007ffc9cd0c940 RDI: 0000000040000000
[ 73.434508] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc9cd0c750
[ 73.435787] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f76b91c9bf0
[ 73.436834] R13: 00007ffc9cd0ca80 R14: 0000000000000000 R15: 00000000000000f8
[ 73.437856]
[ 73.438213] irq event stamp: 9977
[ 73.438704] hardirqs last enabled at (9987): [] __up_console_sem+0x78/0x80
[ 73.440267] hardirqs last disabled at (9998): [] __up_console_sem+0x5d/0x80
[ 73.441584] softirqs last enabled at (9494): [] irq_exit_rcu+0x93/0xc0
[ 73.442850] softirqs last disabled at (9485): [] irq_exit_rcu+0x93/0xc0
[ 73.444153] ---[ end trace 0000000000000000 ]---
[ 73.445953] ------------[ cut here ]------------
[ 73.446782] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused
[ 73.449257] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 73.450555] Modules linked in:
[ 73.451120] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 73.452345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 73.453357] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 73.454001] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 73.456207] RSP: 0018:ffff88801e2dfbf0 EFLAGS: 00010286
[ 73.456865] RAX: 0000000000000000 RBX: ffff888014512240 RCX: 0000000000000000
[ 73.457771] RDX: ffff88801e2d0000 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 73.458659] RBP: ffff888014512254 R08: 0000000000000001 R09: 0000000000000000
[ 73.459550] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 73.460446] R13: ffffffff84e223a0 R14: ffff888014512248 R15: ffffffff84daf020
[ 73.461348] FS: 000055555640a400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 73.462338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 73.463108] CR2: 00007f5216c9a6f4 CR3: 000000000ec72000 CR4: 0000000000350ef0
[ 73.463972] Call Trace:
[ 73.464339]
[ 73.464640] nf_ct_net_init+0x224/0x3d0
[ 73.465181] ? __pfx_nf_ct_net_init+0x10/0x10
[ 73.465753] ops_init+0xbb/0x6b0
[ 73.466227] setup_net+0x3d9/0x990
[ 73.466678] ? down_read_killable+0x1d7/0x4e0
[ 73.467288] ? __pfx_setup_net+0x10/0x10
[ 73.467797] ? copy_net_ns+0x17c/0x770
[ 73.468328] copy_net_ns+0x321/0x770
[ 73.468805] create_new_namespaces+0x3f6/0xb30
[ 73.469413] unshare_nsproxy_namespaces+0xc1/0x200
[ 73.470083] ksys_unshare+0x44d/0x8e0
[ 73.470590] ? __pfx_ksys_unshare+0x10/0x10
[ 73.471208] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 73.471950] __x64_sys_unshare+0x31/0x40
[ 73.472517] do_syscall_64+0x3f/0x90
[ 73.473022] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 73.473724] RIP: 0033:0x7f76b90b70d7
[ 73.474248] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 73.476571] RSP: 002b:00007ffc9cd0c9a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 73.477565] RAX: ffffffffffffffda RBX: 00007ffc9cd0cfe8 RCX: 00007f76b90b70d7
[ 73.478493] RDX: 00007f76b912141f RSI: 00007ffc9cd0c940 RDI: 0000000040000000
[ 73.479444] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc9cd0c750
[ 73.480370] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f76b91c9bf0
[ 73.481307] R13: 00007ffc9cd0ca80 R14: 0000000000000000 R15: 00000000000000f8
[ 73.482262]
[ 73.482582] irq event stamp: 10823
[ 73.483094] hardirqs last enabled at (10835): [] __up_console_sem+0x78/0x80
[ 73.484228] hardirqs last disabled at (10846): [] __up_console_sem+0x5d/0x80
[ 73.485354] softirqs last enabled at (10424): [] irq_exit_rcu+0x93/0xc0
[ 73.486448] softirqs last disabled at (10419): [] irq_exit_rcu+0x93/0xc0
[ 73.487547] ---[ end trace 0000000000000000 ]---
executing program
[ 74.987753] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.035139] Bluetooth: hci0: command 0x041b tx timeout
executing program
[ 79.083197] Bluetooth: hci0: command 0x040f tx timeout
executing program
[ 81.131354] Bluetooth: hci0: command 0x0419 tx timeout
executing program
VM DIAGNOSIS:
21:44:58 Registers:
info registers vcpu 0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff88801e2df5f0
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001
R12=0000000000000020 R13=ffffffff87f27bc0 R14=0000000000000010 R15=ffffffff82507670
RIP=ffffffff825076dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555640a400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5216c9a6f4 CR3=000000000ec72000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000002646d RBX=0000000000000001 RCX=ffffffff844c4a0e RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff81288625 RBP=dffffc0000000000 RSP=ffff888008dcfe68
R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001
R12=ffffffff85d34a10 R13=1ffff110011b9fd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff844c599f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd9e071a370 CR3=000000000e6a2000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=1a20262b7a8cd0a70845db48faa46b45
XMM02=6b1e99b806172e3b00000000000aea28 XMM03=ac8bc31478ec851100000000000aefa0
XMM04=f4173ba7ec20cee2000000000013c970 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=559baa34900d302a00000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00000000000000000020000020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000