syzkaller login: [ 146.760022] sshd (219) used greatest stack depth: 24152 bytes left
Warning: Permanently added '[localhost]:24700' (ECDSA) to the list of known hosts.
2023/05/17 02:13:41 fuzzer started
2023/05/17 02:13:41 dialing manager at localhost:35573
2023/05/17 02:13:41 checking machine...
2023/05/17 02:13:41 checking revisions...
[ 148.889606] kmemleak: Automatic memory scanning thread ended
2023/05/17 02:13:41 testing simple program...
[ 148.967635] cgroup: Unknown subsys name 'net'
[ 149.137696] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
[ 160.970327] audit: type=1400 audit(1684289633.898:6): avc: denied { execmem } for pid=259 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 162.108830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 162.110554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 162.112001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 162.114273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 162.115641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 162.116738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 162.438516] ------------[ cut here ]------------
[ 162.439219] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
[ 162.441238] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 162.442315] Modules linked in:
[ 162.442748] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1
[ 162.447303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 162.448657] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 162.449462] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 162.451680] RSP: 0018:ffff88801e967c00 EFLAGS: 00010282
[ 162.452389] RAX: 0000000000000000 RBX: ffff88800c5d7c40 RCX: 0000000000000000
[ 162.453278] RDX: ffff8880145e9b40 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 162.454179] RBP: ffff88800c5d7c54 R08: 0000000000000001 R09: 0000000000000000
[ 162.455072] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000
[ 162.455965] R13: ffffffff84e223a0 R14: ffff88800c5d7c48 R15: ffffffff84d73340
[ 162.456879] FS: 0000555556b39400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 162.457873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 162.458574] CR2: 00007f80d72b56f4 CR3: 000000001654a000 CR4: 0000000000350ef0
[ 162.459468] Call Trace:
[ 162.459823]
[ 162.460149] ? __pfx_ipv4_frags_init_net+0x10/0x10
[ 162.460791] ipv4_frags_init_net+0x269/0x440
[ 162.461345] ops_init+0xbb/0x6b0
[ 162.461819] setup_net+0x3d9/0x990
[ 162.462279] ? down_read_killable+0x1d7/0x4e0
[ 162.462874] ? __pfx_setup_net+0x10/0x10
[ 162.463378] ? copy_net_ns+0x17c/0x770
[ 162.463918] copy_net_ns+0x321/0x770
[ 162.464404] create_new_namespaces+0x3f6/0xb30
[ 162.465019] unshare_nsproxy_namespaces+0xc1/0x200
[ 162.465633] ksys_unshare+0x44d/0x8e0
[ 162.466158] ? __pfx_ksys_unshare+0x10/0x10
[ 162.466701] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 162.467439] __x64_sys_unshare+0x31/0x40
[ 162.468034] do_syscall_64+0x3f/0x90
[ 162.468511] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 162.469181] RIP: 0033:0x7f59f27e00d7
[ 162.469647] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 162.471801] RSP: 002b:00007ffe64efb898 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 162.472738] RAX: ffffffffffffffda RBX: 00007ffe64efbed8 RCX: 00007f59f27e00d7
[ 162.473598] RDX: 00007f59f284a41f RSI: 00007ffe64efb830 RDI: 0000000040000000
[ 162.474476] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffe64efb640
[ 162.475353] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f59f28f2bf0
[ 162.476243] R13: 00007ffe64efb970 R14: 0000000000000000 R15: 00000000000000f8
[ 162.477145]
[ 162.477445] irq event stamp: 8265
[ 162.477914] hardirqs last enabled at (8287): [] __up_console_sem+0x78/0x80
[ 162.478979] hardirqs last disabled at (8298): [] __up_console_sem+0x5d/0x80
[ 162.480065] softirqs last enabled at (8282): [] irq_exit_rcu+0x93/0xc0
[ 162.481090] softirqs last disabled at (8273): [] irq_exit_rcu+0x93/0xc0
[ 162.482122] ---[ end trace 0000000000000000 ]---
[ 162.488337] ------------[ cut here ]------------
[ 162.489013] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused
[ 162.490646] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 162.491732] Modules linked in:
[ 162.492147] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1
[ 162.493314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 162.494338] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 162.495010] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 162.497218] RSP: 0018:ffff88801e967c00 EFLAGS: 00010282
[ 162.497903] RAX: 0000000000000000 RBX: ffff88800de3c840 RCX: 0000000000000000
[ 162.498791] RDX: ffff8880145e9b40 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 162.499639] RBP: ffff88800de3c854 R08: 0000000000000001 R09: 0000000000000000
[ 162.500547] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 162.501429] R13: ffffffff84e223a0 R14: ffff88800de3c848 R15: ffffffff84da62e0
[ 162.502320] FS: 0000555556b39400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 162.503310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 162.504055] CR2: 00007f80d72b56f4 CR3: 000000001654a000 CR4: 0000000000350ef0
[ 162.504939] Call Trace:
[ 162.505266]
[ 162.505561] ? __pfx_ipv6_frags_init_net+0x10/0x10
[ 162.506210] ipv6_frags_init_net+0x206/0x3c0
[ 162.506800] ops_init+0xbb/0x6b0
[ 162.507243] setup_net+0x3d9/0x990
[ 162.507689] ? down_read_killable+0x1d7/0x4e0
[ 162.508310] ? __pfx_setup_net+0x10/0x10
[ 162.508851] ? copy_net_ns+0x17c/0x770
[ 162.509354] copy_net_ns+0x321/0x770
[ 162.509869] create_new_namespaces+0x3f6/0xb30
[ 162.510452] unshare_nsproxy_namespaces+0xc1/0x200
[ 162.511104] ksys_unshare+0x44d/0x8e0
[ 162.511592] ? __pfx_ksys_unshare+0x10/0x10
[ 162.512171] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 162.512906] __x64_sys_unshare+0x31/0x40
[ 162.513435] do_syscall_64+0x3f/0x90
[ 162.513941] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 162.514579] RIP: 0033:0x7f59f27e00d7
[ 162.515081] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 162.517269] RSP: 002b:00007ffe64efb898 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 162.518214] RAX: ffffffffffffffda RBX: 00007ffe64efbed8 RCX: 00007f59f27e00d7
[ 162.519099] RDX: 00007f59f284a41f RSI: 00007ffe64efb830 RDI: 0000000040000000
[ 162.519999] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffe64efb640
[ 162.520884] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f59f28f2bf0
[ 162.521764] R13: 00007ffe64efb970 R14: 0000000000000000 R15: 00000000000000f8
[ 162.522648]
[ 162.522978] irq event stamp: 10713
[ 162.523408] hardirqs last enabled at (10723): [] __up_console_sem+0x78/0x80
[ 162.524487] hardirqs last disabled at (10734): [] __up_console_sem+0x5d/0x80
[ 162.525544] softirqs last enabled at (10262): [] irq_exit_rcu+0x93/0xc0
[ 162.526587] softirqs last disabled at (10253): [] irq_exit_rcu+0x93/0xc0
[ 162.527614] ---[ end trace 0000000000000000 ]---
[ 162.528940] ------------[ cut here ]------------
[ 162.529518] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused
[ 162.531374] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 162.532459] Modules linked in:
[ 162.532895] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1
[ 162.534036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 162.535053] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 162.535739] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 162.537876] RSP: 0018:ffff88801e967bf0 EFLAGS: 00010286
[ 162.538522] RAX: 0000000000000000 RBX: ffff88800de3c240 RCX: 0000000000000000
[ 162.539398] RDX: ffff8880145e9b40 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 162.540300] RBP: ffff88800de3c254 R08: 0000000000000001 R09: 0000000000000000
[ 162.541182] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 162.542072] R13: ffffffff84e223a0 R14: ffff88800de3c248 R15: ffffffff84daf020
[ 162.542961] FS: 0000555556b39400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 162.543967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 162.544694] CR2: 00007f80d72b56f4 CR3: 000000001654a000 CR4: 0000000000350ef0
[ 162.545587] Call Trace:
[ 162.545957]
[ 162.546260] nf_ct_net_init+0x224/0x3d0
[ 162.546813] ? __pfx_nf_ct_net_init+0x10/0x10
[ 162.547391] ops_init+0xbb/0x6b0
[ 162.547888] setup_net+0x3d9/0x990
[ 162.548351] ? down_read_killable+0x1d7/0x4e0
[ 162.548962] ? __pfx_setup_net+0x10/0x10
[ 162.549480] ? copy_net_ns+0x17c/0x770
[ 162.550019] copy_net_ns+0x321/0x770
[ 162.550495] create_new_namespaces+0x3f6/0xb30
[ 162.551107] unshare_nsproxy_namespaces+0xc1/0x200
[ 162.551751] ksys_unshare+0x44d/0x8e0
[ 162.552251] ? __pfx_ksys_unshare+0x10/0x10
[ 162.552834] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 162.553540] __x64_sys_unshare+0x31/0x40
[ 162.554094] do_syscall_64+0x3f/0x90
[ 162.554573] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 162.555237] RIP: 0033:0x7f59f27e00d7
[ 162.555700] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 162.557890] RSP: 002b:00007ffe64efb898 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 162.558833] RAX: ffffffffffffffda RBX: 00007ffe64efbed8 RCX: 00007f59f27e00d7
[ 162.559683] RDX: 00007f59f284a41f RSI: 00007ffe64efb830 RDI: 0000000040000000
[ 162.560591] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffe64efb640
[ 162.561482] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f59f28f2bf0
[ 162.562365] R13: 00007ffe64efb970 R14: 0000000000000000 R15: 00000000000000f8
[ 162.563264]
[ 162.563564] irq event stamp: 11429
[ 162.564026] hardirqs last enabled at (11441): [] __up_console_sem+0x78/0x80
[ 162.565082] hardirqs last disabled at (11452): [] __up_console_sem+0x5d/0x80
[ 162.566138] softirqs last enabled at (11148): [] irq_exit_rcu+0x93/0xc0
[ 162.567164] softirqs last disabled at (11143): [] irq_exit_rcu+0x93/0xc0
[ 162.568220] ---[ end trace 0000000000000000 ]---
executing program
[ 164.190752] Bluetooth: hci0: command 0x0409 tx timeout
[ 166.237860] Bluetooth: hci0: command 0x041b tx timeout
executing program
[ 168.285777] Bluetooth: hci0: command 0x040f tx timeout
executing program
[ 170.334774] Bluetooth: hci0: command 0x0419 tx timeout
VM DIAGNOSIS:
02:12:03 Registers:
info registers vcpu 0
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff88801e9675f0
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000036 R11=0000000000000001
R12=0000000000000036 R13=ffffffff87f27bc0 R14=0000000000000010 R15=ffffffff82507670
RIP=ffffffff825076dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556b39400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f80d72b56f4 CR3=000000001654a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806cf09b38 RCX=0000000000000001 RDX=ffff88806cf09b50
RSI=ffff88806cf09b38 RDI=ffff88806cf09ab0 RBP=dffffc0000000000 RSP=ffff88806cf09a50
R8 =ffffffff8607eb3a R9 =ffffffff8607eb3e R10=0000000000038001 R11=ffff88806cf09ae0
R12=ffffed100d9e1356 R13=ffffed100d9e1355 R14=ffff88806cf09ae8 R15=ffff88806cf09aa0
RIP=ffffffff81133afe RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f42f4e7b1c0 CR3=0000000008ede000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff
XMM02=000000000000000000000000000000ff XMM03=6465746e69615420302e726f74756365
XMM04=636f72703d7373616c63742030733a74 XMM05=3a755f6d65747379733d747865746e6f
XMM06=5f6d65747379733a755f6d6574737973 XMM07=00000000000000000000000000000000
XMM08=3d64697520612f6e3d64697561207200 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000