syzkaller login: [ 98.073316] sshd (211) used greatest stack depth: 24152 bytes left
Warning: Permanently added '[localhost]:14094' (ECDSA) to the list of known hosts.
2023/05/17 18:15:06 fuzzer started
2023/05/17 18:15:06 dialing manager at localhost:44319
2023/05/17 18:15:06 checking machine...
2023/05/17 18:15:06 checking revisions...
[ 103.027237] kmemleak: Automatic memory scanning thread ended
2023/05/17 18:15:06 testing simple program...
[ 103.100121] cgroup: Unknown subsys name 'net'
[ 103.170638] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
[ 115.787126] audit: type=1400 audit(1684347319.660:6): avc: denied { execmem } for pid=258 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 116.923112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 116.924997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 116.928290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 116.932891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 116.935767] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 116.936955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.343516] ------------[ cut here ]------------
[ 117.344255] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
[ 117.346651] WARNING: CPU: 1 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 117.347966] Modules linked in:
[ 117.348491] CPU: 1 PID: 259 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230517 #1
[ 117.352157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 117.353182] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 117.353861] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 117.356063] RSP: 0018:ffff88801a2a7c00 EFLAGS: 00010282
[ 117.356756] RAX: 0000000000000000 RBX: ffff88800d442c40 RCX: 0000000000000000
[ 117.357658] RDX: ffff88800de20000 RSI: ffffffff81171ad2 RDI: 0000000000000001
[ 117.358565] RBP: ffff88800d442c54 R08: 0000000000000001 R09: 0000000000000000
[ 117.359449] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 117.360349] R13: ffffffff84e23fe0 R14: ffff88800d442c48 R15: ffffffff84d74dc0
[ 117.361202] FS: 0000555555c75400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 117.362192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 117.362930] CR2: 00007ff7e636d6f4 CR3: 000000000d774000 CR4: 0000000000350ee0
[ 117.363821] Call Trace:
[ 117.364144]
[ 117.364478] ? __pfx_ipv4_frags_init_net+0x10/0x10
[ 117.365088] ipv4_frags_init_net+0x269/0x440
[ 117.365695] ops_init+0xbb/0x6b0
[ 117.366140] setup_net+0x3d9/0x990
[ 117.366619] ? down_read_killable+0x1d7/0x4e0
[ 117.367200] ? __pfx_setup_net+0x10/0x10
[ 117.367771] ? copy_net_ns+0x17c/0x770
[ 117.368311] copy_net_ns+0x321/0x770
[ 117.368795] create_new_namespaces+0x3f6/0xb30
[ 117.369406] unshare_nsproxy_namespaces+0xc1/0x200
[ 117.370014] ksys_unshare+0x44d/0x8e0
[ 117.370529] ? __pfx_ksys_unshare+0x10/0x10
[ 117.371076] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 117.371828] __x64_sys_unshare+0x31/0x40
[ 117.372369] do_syscall_64+0x3f/0x90
[ 117.372846] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 117.373523] RIP: 0033:0x7fb1d2f710d7
[ 117.373988] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 117.376135] RSP: 002b:00007fff0eb58b78 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 117.377068] RAX: ffffffffffffffda RBX: 00007fff0eb591b8 RCX: 00007fb1d2f710d7
[ 117.377958] RDX: 00007fb1d2fdb41f RSI: 00007fff0eb58b10 RDI: 0000000040000000
[ 117.378841] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff0eb58920
[ 117.379743] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fb1d3083bf0
[ 117.380625] R13: 00007fff0eb58c50 R14: 0000000000000000 R15: 00000000000000f8
[ 117.381534]
[ 117.381832] irq event stamp: 8347
[ 117.382250] hardirqs last enabled at (8357): [] __up_console_sem+0x78/0x80
[ 117.383331] hardirqs last disabled at (8370): [] __up_console_sem+0x5d/0x80
[ 117.384391] softirqs last enabled at (8232): [] irq_exit_rcu+0x93/0xc0
[ 117.385409] softirqs last disabled at (8227): [] irq_exit_rcu+0x93/0xc0
[ 117.386422] ---[ end trace 0000000000000000 ]---
[ 117.391240] ------------[ cut here ]------------
[ 117.391854] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused
[ 117.393557] WARNING: CPU: 1 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 117.394601] Modules linked in:
[ 117.395003] CPU: 1 PID: 259 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230517 #1
[ 117.396163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 117.397178] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 117.397851] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 117.400041] RSP: 0018:ffff88801a2a7c00 EFLAGS: 00010282
[ 117.400719] RAX: 0000000000000000 RBX: ffff8880145dce40 RCX: 0000000000000000
[ 117.401595] RDX: ffff88800de20000 RSI: ffffffff81171ad2 RDI: 0000000000000001
[ 117.402481] RBP: ffff8880145dce54 R08: 0000000000000001 R09: 0000000000000000
[ 117.403359] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 117.404219] R13: ffffffff84e23fe0 R14: ffff8880145dce48 R15: ffffffff84da7d60
[ 117.405104] FS: 0000555555c75400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 117.406089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 117.406826] CR2: 00007ff7e636d6f4 CR3: 000000000d774000 CR4: 0000000000350ee0
[ 117.407723] Call Trace:
[ 117.408044]
[ 117.408366] ? __pfx_ipv6_frags_init_net+0x10/0x10
[ 117.408981] ipv6_frags_init_net+0x206/0x3c0
[ 117.409564] ops_init+0xbb/0x6b0
[ 117.410010] setup_net+0x3d9/0x990
[ 117.410490] ? down_read_killable+0x1d7/0x4e0
[ 117.411051] ? __pfx_setup_net+0x10/0x10
[ 117.411592] ? copy_net_ns+0x17c/0x770
[ 117.412096] copy_net_ns+0x321/0x770
[ 117.412601] create_new_namespaces+0x3f6/0xb30
[ 117.413182] unshare_nsproxy_namespaces+0xc1/0x200
[ 117.413819] ksys_unshare+0x44d/0x8e0
[ 117.414332] ? __pfx_ksys_unshare+0x10/0x10
[ 117.414871] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 117.415621] __x64_sys_unshare+0x31/0x40
[ 117.416135] do_syscall_64+0x3f/0x90
[ 117.416639] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 117.417322] RIP: 0033:0x7fb1d2f710d7
[ 117.417783] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 117.419992] RSP: 002b:00007fff0eb58b78 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 117.420960] RAX: ffffffffffffffda RBX: 00007fff0eb591b8 RCX: 00007fb1d2f710d7
[ 117.421870] RDX: 00007fb1d2fdb41f RSI: 00007fff0eb58b10 RDI: 0000000040000000
[ 117.422767] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff0eb58920
[ 117.423660] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fb1d3083bf0
[ 117.424550] R13: 00007fff0eb58c50 R14: 0000000000000000 R15: 00000000000000f8
[ 117.425478]
[ 117.425779] irq event stamp: 9985
[ 117.426200] hardirqs last enabled at (9995): [] __up_console_sem+0x78/0x80
[ 117.427248] hardirqs last disabled at (10006): [] __up_console_sem+0x5d/0x80
[ 117.428335] softirqs last enabled at (9166): [] irq_exit_rcu+0x93/0xc0
[ 117.429366] softirqs last disabled at (9151): [] irq_exit_rcu+0x93/0xc0
[ 117.430390] ---[ end trace 0000000000000000 ]---
[ 117.432837] ------------[ cut here ]------------
[ 117.433439] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused
[ 117.435314] WARNING: CPU: 1 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 117.436380] Modules linked in:
[ 117.436779] CPU: 1 PID: 259 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230517 #1
[ 117.437917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 117.438922] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 117.439612] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 117.441765] RSP: 0018:ffff88801a2a7bf0 EFLAGS: 00010286
[ 117.442472] RAX: 0000000000000000 RBX: ffff8880145dde40 RCX: 0000000000000000
[ 117.443352] RDX: ffff88800de20000 RSI: ffffffff81171ad2 RDI: 0000000000000001
[ 117.444206] RBP: ffff8880145dde54 R08: 0000000000000001 R09: 0000000000000000
[ 117.445088] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 117.445969] R13: ffffffff84e23fe0 R14: ffff8880145dde48 R15: ffffffff84db0aa0
[ 117.446849] FS: 0000555555c75400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 117.447858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 117.448598] CR2: 00007ff7e636d6f4 CR3: 000000000d774000 CR4: 0000000000350ee0
[ 117.449476] Call Trace:
[ 117.449811]
[ 117.450109] nf_ct_net_init+0x224/0x3d0
[ 117.450655] ? __pfx_nf_ct_net_init+0x10/0x10
[ 117.451223] ops_init+0xbb/0x6b0
[ 117.451707] setup_net+0x3d9/0x990
[ 117.452164] ? down_read_killable+0x1d7/0x4e0
[ 117.452761] ? __pfx_setup_net+0x10/0x10
[ 117.453297] ? copy_net_ns+0x17c/0x770
[ 117.453808] copy_net_ns+0x321/0x770
[ 117.454314] create_new_namespaces+0x3f6/0xb30
[ 117.454894] unshare_nsproxy_namespaces+0xc1/0x200
[ 117.455550] ksys_unshare+0x44d/0x8e0
[ 117.456041] ? __pfx_ksys_unshare+0x10/0x10
[ 117.456614] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 117.457347] __x64_sys_unshare+0x31/0x40
[ 117.457864] do_syscall_64+0x3f/0x90
[ 117.458368] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 117.459005] RIP: 0033:0x7fb1d2f710d7
[ 117.459504] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 117.461656] RSP: 002b:00007fff0eb58b78 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 117.462594] RAX: ffffffffffffffda RBX: 00007fff0eb591b8 RCX: 00007fb1d2f710d7
[ 117.463475] RDX: 00007fb1d2fdb41f RSI: 00007fff0eb58b10 RDI: 0000000040000000
[ 117.464390] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff0eb58920
[ 117.465243] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fb1d3083bf0
[ 117.466131] R13: 00007fff0eb58c50 R14: 0000000000000000 R15: 00000000000000f8
[ 117.467036]
[ 117.467366] irq event stamp: 11897
[ 117.467806] hardirqs last enabled at (11907): [] __up_console_sem+0x78/0x80
[ 117.468856] hardirqs last disabled at (11918): [] __up_console_sem+0x5d/0x80
[ 117.469928] softirqs last enabled at (11488): [] irq_exit_rcu+0x93/0xc0
[ 117.470980] softirqs last disabled at (11479): [] irq_exit_rcu+0x93/0xc0
[ 117.472027] ---[ end trace 0000000000000000 ]---
executing program
[ 119.011116] Bluetooth: hci0: command 0x0409 tx timeout
executing program
[ 121.058346] Bluetooth: hci0: command 0x041b tx timeout
[ 123.106343] Bluetooth: hci0: command 0x040f tx timeout
executing program
[ 125.154476] Bluetooth: hci0: command 0x0419 tx timeout
executing program
VM DIAGNOSIS:
18:14:14 Registers:
info registers vcpu 0
RAX=0000000000034f4b RBX=0000000000000000 RCX=ffffffff844d0a0e RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff81287415 RBP=dffffc0000000000 RSP=ffffffff85407e10
R8 =0000000000000001 R9 =ffffed100d9c69f8 R10=ffff88806ce34fc3 R11=0000000000000001
R12=ffffffff85d35a10 R13=1ffffffff0a80fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff844d199f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f19eae67e40 CR3=000000000e3f2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=914dc45f403eafa3ab455134f85baafc
XMM02=6b1e99b806172e3b00000000000aea28 XMM03=ac8bc31478ec851100000000000aefa0
XMM04=39ba9989d296d48100000000001411c0 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=e92065c6b3cac0ea00000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82507f85 RDI=ffffffff87f2dc00 RBP=ffffffff87f2dbc0 RSP=ffff88801a2a75f0
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001
R12=0000000000000020 R13=ffffffff87f2dbc0 R14=0000000000000010 R15=ffffffff82507f70
RIP=ffffffff82507fdd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555555c75400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff7e636d6f4 CR3=000000000d774000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000