Debian GNU/Linux 11 syzkaller ttyS0
Warning: Permanently added '[localhost]:13056' (ECDSA) to the list of known hosts.
2023/05/17 18:29:07 fuzzer started
2023/05/17 18:29:08 dialing manager at localhost:44319
2023/05/17 18:29:08 checking machine...
2023/05/17 18:29:08 checking revisions...
syzkaller login: [ 37.895541] kmemleak: Automatic memory scanning thread ended
2023/05/17 18:29:08 testing simple program...
[ 37.968805] cgroup: Unknown subsys name 'net'
[ 38.054189] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
[ 49.773444] audit: type=1400 audit(1684348160.295:6): avc: denied { execmem } for pid=259 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 50.886245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 50.887922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 50.889670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 50.893709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 50.896639] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 50.897848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 51.281688] ------------[ cut here ]------------
[ 51.282542] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
[ 51.284537] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 51.285652] Modules linked in:
[ 51.286059] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1
[ 51.290881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 51.292080] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 51.292891] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 51.295076] RSP: 0018:ffff88801efefc00 EFLAGS: 00010282
[ 51.295760] RAX: 0000000000000000 RBX: ffff8880166cbc40 RCX: 0000000000000000
[ 51.296659] RDX: ffff88801efe0000 RSI: ffffffff81171ad2 RDI: 0000000000000001
[ 51.297551] RBP: ffff8880166cbc54 R08: 0000000000000001 R09: 0000000000000000
[ 51.298454] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000
[ 51.299334] R13: ffffffff84e23fe0 R14: ffff8880166cbc48 R15: ffffffff84d74dc0
[ 51.300202] FS: 00005555557fa400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 51.301196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.301929] CR2: 00007fbf4b5cc6f4 CR3: 000000001e9ac000 CR4: 0000000000350ef0
[ 51.302881] Call Trace:
[ 51.303223]
[ 51.303562] ? __pfx_ipv4_frags_init_net+0x10/0x10
[ 51.304241] ipv4_frags_init_net+0x269/0x440
[ 51.304880] ops_init+0xbb/0x6b0
[ 51.305389] setup_net+0x3d9/0x990
[ 51.305865] ? down_read_killable+0x1d7/0x4e0
[ 51.306503] ? __pfx_setup_net+0x10/0x10
[ 51.307048] ? copy_net_ns+0x17c/0x770
[ 51.307614] copy_net_ns+0x321/0x770
[ 51.308128] create_new_namespaces+0x3f6/0xb30
[ 51.308779] unshare_nsproxy_namespaces+0xc1/0x200
[ 51.309466] ksys_unshare+0x44d/0x8e0
[ 51.309993] ? __pfx_ksys_unshare+0x10/0x10
[ 51.310607] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 51.311400] __x64_sys_unshare+0x31/0x40
[ 51.311972] do_syscall_64+0x3f/0x90
[ 51.312509] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 51.313195] RIP: 0033:0x7f9af176c0d7
[ 51.313714] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 51.316033] RSP: 002b:00007fffc615c3b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 51.317054] RAX: ffffffffffffffda RBX: 00007fffc615c9f8 RCX: 00007f9af176c0d7
[ 51.317988] RDX: 00007f9af17d641f RSI: 00007fffc615c350 RDI: 0000000040000000
[ 51.318935] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fffc615c160
[ 51.319861] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f9af187ebf0
[ 51.320775] R13: 00007fffc615c490 R14: 0000000000000000 R15: 00000000000000f8
[ 51.321694]
[ 51.322001] irq event stamp: 8227
[ 51.322465] hardirqs last enabled at (8239): [] __up_console_sem+0x78/0x80
[ 51.323535] hardirqs last disabled at (8250): [] __up_console_sem+0x5d/0x80
[ 51.324634] softirqs last enabled at (7954): [] irq_exit_rcu+0x93/0xc0
[ 51.325660] softirqs last disabled at (7945): [] irq_exit_rcu+0x93/0xc0
[ 51.326703] ---[ end trace 0000000000000000 ]---
[ 51.331673] ------------[ cut here ]------------
[ 51.332357] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused
[ 51.333988] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 51.335081] Modules linked in:
[ 51.335536] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1
[ 51.336700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 51.337729] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 51.338401] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 51.340605] RSP: 0018:ffff88801efefc00 EFLAGS: 00010282
[ 51.341259] RAX: 0000000000000000 RBX: ffff88801670e440 RCX: 0000000000000000
[ 51.342146] RDX: ffff88801efe0000 RSI: ffffffff81171ad2 RDI: 0000000000000001
[ 51.343045] RBP: ffff88801670e454 R08: 0000000000000001 R09: 0000000000000000
[ 51.343951] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 51.344846] R13: ffffffff84e23fe0 R14: ffff88801670e448 R15: ffffffff84da7d60
[ 51.345738] FS: 00005555557fa400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 51.346741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.347474] CR2: 00007fbf4b5cc6f4 CR3: 000000001e9ac000 CR4: 0000000000350ef0
[ 51.348386] Call Trace:
[ 51.348715]
[ 51.349017] ? __pfx_ipv6_frags_init_net+0x10/0x10
[ 51.349665] ipv6_frags_init_net+0x206/0x3c0
[ 51.350226] ops_init+0xbb/0x6b0
[ 51.350699] setup_net+0x3d9/0x990
[ 51.351164] ? down_read_killable+0x1d7/0x4e0
[ 51.351783] ? __pfx_setup_net+0x10/0x10
[ 51.352353] ? copy_net_ns+0x17c/0x770
[ 51.352862] copy_net_ns+0x321/0x770
[ 51.353387] create_new_namespaces+0x3f6/0xb30
[ 51.353976] unshare_nsproxy_namespaces+0xc1/0x200
[ 51.354630] ksys_unshare+0x44d/0x8e0
[ 51.355119] ? __pfx_ksys_unshare+0x10/0x10
[ 51.355689] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 51.356461] __x64_sys_unshare+0x31/0x40
[ 51.356985] do_syscall_64+0x3f/0x90
[ 51.357498] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 51.358146] RIP: 0033:0x7f9af176c0d7
[ 51.358646] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 51.360840] RSP: 002b:00007fffc615c3b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 51.361795] RAX: ffffffffffffffda RBX: 00007fffc615c9f8 RCX: 00007f9af176c0d7
[ 51.362695] RDX: 00007f9af17d641f RSI: 00007fffc615c350 RDI: 0000000040000000
[ 51.363586] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fffc615c160
[ 51.364505] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f9af187ebf0
[ 51.365412] R13: 00007fffc615c490 R14: 0000000000000000 R15: 00000000000000f8
[ 51.366334]
[ 51.366636] irq event stamp: 9793
[ 51.367057] hardirqs last enabled at (9803): [] __up_console_sem+0x78/0x80
[ 51.368119] hardirqs last disabled at (9814): [] __up_console_sem+0x5d/0x80
[ 51.369183] softirqs last enabled at (9318): [] irq_exit_rcu+0x93/0xc0
[ 51.370202] softirqs last disabled at (9313): [] irq_exit_rcu+0x93/0xc0
[ 51.371229] ---[ end trace 0000000000000000 ]---
[ 51.372598] ------------[ cut here ]------------
[ 51.373182] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused
[ 51.375050] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 51.376119] Modules linked in:
[ 51.376553] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1
[ 51.377700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 51.378718] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 51.379396] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 51.381567] RSP: 0018:ffff88801efefbf0 EFLAGS: 00010286
[ 51.382221] RAX: 0000000000000000 RBX: ffff888016561840 RCX: 0000000000000000
[ 51.383109] RDX: ffff88801efe0000 RSI: ffffffff81171ad2 RDI: 0000000000000001
[ 51.384021] RBP: ffff888016561854 R08: 0000000000000001 R09: 0000000000000000
[ 51.384910] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 51.385791] R13: ffffffff84e23fe0 R14: ffff888016561848 R15: ffffffff84db0aa0
[ 51.386700] FS: 00005555557fa400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 51.387687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.388444] CR2: 00007fbf4b5cc6f4 CR3: 000000001e9ac000 CR4: 0000000000350ef0
[ 51.389331] Call Trace:
[ 51.389657]
[ 51.389953] nf_ct_net_init+0x224/0x3d0
[ 51.390504] ? __pfx_nf_ct_net_init+0x10/0x10
[ 51.391075] ops_init+0xbb/0x6b0
[ 51.391549] setup_net+0x3d9/0x990
[ 51.392031] ? down_read_killable+0x1d7/0x4e0
[ 51.392628] ? __pfx_setup_net+0x10/0x10
[ 51.393139] ? copy_net_ns+0x17c/0x770
[ 51.393689] copy_net_ns+0x321/0x770
[ 51.394178] create_new_namespaces+0x3f6/0xb30
[ 51.394799] unshare_nsproxy_namespaces+0xc1/0x200
[ 51.395461] ksys_unshare+0x44d/0x8e0
[ 51.395970] ? __pfx_ksys_unshare+0x10/0x10
[ 51.396544] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 51.397313] __x64_sys_unshare+0x31/0x40
[ 51.397823] do_syscall_64+0x3f/0x90
[ 51.398344] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 51.399005] RIP: 0033:0x7f9af176c0d7
[ 51.399496] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 51.401709] RSP: 002b:00007fffc615c3b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 51.402682] RAX: ffffffffffffffda RBX: 00007fffc615c9f8 RCX: 00007f9af176c0d7
[ 51.403578] RDX: 00007f9af17d641f RSI: 00007fffc615c350 RDI: 0000000040000000
[ 51.404489] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fffc615c160
[ 51.405371] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f9af187ebf0
[ 51.406218] R13: 00007fffc615c490 R14: 0000000000000000 R15: 00000000000000f8
[ 51.407138]
[ 51.407471] irq event stamp: 10541
[ 51.407910] hardirqs last enabled at (10551): [] __up_console_sem+0x78/0x80
[ 51.408968] hardirqs last disabled at (10562): [] __up_console_sem+0x5d/0x80
[ 51.410055] softirqs last enabled at (10414): [] irq_exit_rcu+0x93/0xc0
[ 51.411111] softirqs last disabled at (10409): [] irq_exit_rcu+0x93/0xc0
[ 51.412181] ---[ end trace 0000000000000000 ]---
executing program
[ 52.968875] Bluetooth: hci0: command 0x0409 tx timeout
[ 55.017354] Bluetooth: hci0: command 0x041b tx timeout
executing program
[ 57.064376] Bluetooth: hci0: command 0x040f tx timeout
executing program
[ 59.112619] Bluetooth: hci0: command 0x0419 tx timeout
VM DIAGNOSIS:
18:29:20 Registers:
info registers vcpu 0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82507f85 RDI=ffffffff87f2dc00 RBP=ffffffff87f2dbc0 RSP=ffff88801efef5f0
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001
R12=0000000000000020 R13=ffffffff87f2dbc0 R14=0000000000000010 R15=ffffffff82507f70
RIP=ffffffff82507fdd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555557fa400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbf4b5cc6f4 CR3=000000001e9ac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000026a69 RBX=0000000000000001 RCX=ffffffff844d0a0e RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff81287415 RBP=dffffc0000000000 RSP=ffff888008dcfe70
R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001
R12=ffffffff85d35a10 R13=1ffff110011b9fd3 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff844d199f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f091b90f550 CR3=000000000e96e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=593798df275214ab28484d74d01e4783
XMM02=6b1e99b806172e3b00000000000aea28 XMM03=ac8bc31478ec851100000000000aefa0
XMM04=1957ca0e281bfa74000000000013c190 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=8f59e5e24c6a4d4e00000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00000000000000000020000020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000