Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 60.547405][ T3613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.555057][ T3613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.562232][ T3613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.569895][ T3613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.577355][ T3613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.584483][ T3613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.592285][ T3610] Bluetooth: hci0: HCI_REQ-0x0c1a [ 60.843989][ T3617] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 60.855757][ T3617] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 60.864158][ T3617] CPU: 1 PID: 3617 Comm: syz-executor722 Not tainted 6.0.0-rc6-next-20220921-syzkaller #0 [ 60.874042][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2022 [ 60.884117][ T3617] RIP: 0010:PageHeadHuge+0x1d/0x200 [ 60.889325][ T3617] Code: ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 41 54 55 48 89 fd 53 e8 54 c9 b9 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 a2 01 00 00 48 8b 5d 00 48 c7 c7 ff ff ff ff 48 [ 60.908934][ T3617] RSP: 0018:ffffc90003e7f5a0 EFLAGS: 00010246 [ 60.915004][ T3617] RAX: dffffc0000000000 RBX: ffffc90003e7f788 RCX: 0000000000000000 [ 60.922977][ T3617] RDX: 0000000000000000 RSI: ffffffff81c2cb2c RDI: 0000000000000000 [ 60.930952][ T3617] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 60.938923][ T3617] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90003e7f798 [ 60.946894][ T3617] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000003f4 [ 60.954865][ T3617] FS: 00007f5642262700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 60.963800][ T3617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.970388][ T3617] CR2: 00000000203f4ef0 CR3: 000000007adcc000 CR4: 00000000003506e0 [ 60.978363][ T3617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.986333][ T3617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.994331][ T3617] Call Trace: [ 60.997609][ T3617] [ 61.000570][ T3617] shmem_fault+0x27c/0x8a0 [ 61.004996][ T3617] ? shmem_get_folio_gfp+0x1a60/0x1a60 [ 61.010551][ T3617] ? finish_task_switch.isra.0+0x2b5/0xc80 [ 61.016362][ T3617] ? rcu_read_lock_sched_held+0xd/0x70 [ 61.021839][ T3617] ? lock_acquire+0x4fc/0x630 [ 61.026525][ T3617] ? rcu_read_lock_sched_held+0xd/0x70 [ 61.032005][ T3617] ? lock_release+0x5cb/0x810 [ 61.036688][ T3617] ? mt_find+0x362/0xee0 [ 61.040937][ T3617] ? lock_downgrade+0x6e0/0x6e0 [ 61.045799][ T3617] __do_fault+0x107/0x600 [ 61.050164][ T3617] __handle_mm_fault+0x2200/0x3a40 [ 61.055285][ T3617] ? lock_acquire+0x4fc/0x630 [ 61.059965][ T3617] ? vm_iomap_memory+0x180/0x180 [ 61.064914][ T3617] ? lock_release+0x810/0x810 [ 61.069603][ T3617] handle_mm_fault+0x1c8/0x780 [ 61.074398][ T3617] do_user_addr_fault+0x475/0x1210 [ 61.079527][ T3617] ? rcu_tasks_trace_postgp+0x190/0x1e0 [ 61.085096][ T3617] exc_page_fault+0x94/0x170 [ 61.089697][ T3617] asm_exc_page_fault+0x22/0x30 [ 61.094562][ T3617] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 61.100301][ T3617] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 61.119914][ T3617] RSP: 0018:ffffc90003e7fa00 EFLAGS: 00050293 [ 61.125986][ T3617] RAX: 0000000000000000 RBX: ffffc90003e7fdf4 RCX: 00000000203f4ef0 [ 61.133961][ T3617] RDX: ffff888020c51d40 RSI: ffffffff8726d52f RDI: 0000000000000005 [ 61.141949][ T3617] RBP: ffffc90003e7fdb0 R08: 0000000000000005 R09: 0000000000000000 [ 61.149921][ T3617] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000000 [ 61.157900][ T3617] R13: 0000000000000002 R14: 00000000203f4ef0 R15: 0000000000000000 [ 61.165880][ T3617] ? ____sys_recvmsg+0x3af/0x610 [ 61.170834][ T3617] ____sys_recvmsg+0x3ba/0x610 [ 61.175607][ T3617] ? kernel_recvmsg+0x160/0x160 [ 61.180463][ T3617] ? copy_msghdr_from_user+0xfc/0x150 [ 61.185845][ T3617] ? __copy_msghdr+0x4a0/0x4a0 [ 61.190619][ T3617] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 61.196269][ T3617] ___sys_recvmsg+0xf2/0x180 [ 61.200873][ T3617] ? copy_msghdr_from_user+0x150/0x150 [ 61.206344][ T3617] ? rcu_read_lock_sched_held+0xd/0x70 [ 61.211819][ T3617] ? lock_acquire+0x4fc/0x630 [ 61.216504][ T3617] ? rcu_read_lock_sched_held+0xd/0x70 [ 61.222006][ T3617] ? lock_release+0x5cb/0x810 [ 61.226686][ T3617] ? asm_sysvec_call_function_single+0x16/0x20 [ 61.232858][ T3617] ? __might_fault+0xd1/0x170 [ 61.237542][ T3617] ? lock_downgrade+0x6e0/0x6e0 [ 61.242403][ T3617] do_recvmmsg+0x25e/0x6e0 [ 61.246836][ T3617] ? ___sys_recvmsg+0x180/0x180 [ 61.251700][ T3617] ? rcu_read_lock_sched_held+0xd/0x70 [ 61.257174][ T3617] ? lock_acquire+0x4fc/0x630 [ 61.261861][ T3617] ? lock_downgrade+0x6e0/0x6e0 [ 61.266717][ T3617] __x64_sys_recvmmsg+0x20b/0x260 [ 61.271769][ T3617] ? __do_sys_socketcall+0x590/0x590 [ 61.277068][ T3617] ? syscall_enter_from_user_mode+0x22/0xb0 [ 61.283008][ T3617] ? trace_hardirqs_on+0x2d/0x160 [ 61.288039][ T3617] do_syscall_64+0x35/0xb0 [ 61.292483][ T3617] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.298397][ T3617] RIP: 0033:0x7f56422dabb9 [ 61.302816][ T3617] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 61.322433][ T3617] RSP: 002b:00007f5642262208 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 61.330938][ T3617] RAX: ffffffffffffffda RBX: 00007f564235c4b8 RCX: 00007f56422dabb9 [ 61.338914][ T3617] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 61.346893][ T3617] RBP: 00007f564235c4b0 R08: 0000000000000000 R09: 0000000000000000 [ 61.354866][ T3617] R10: 0000000000000002 R11: 0000000000000246 R12: 00007f564235c4bc [ 61.362836][ T3617] R13: 00007fffbde3618f R14: 00007f5642262300 R15: 0000000000022000 [ 61.370817][ T3617] [ 61.373833][ T3617] Modules linked in: [ 61.380920][ T3617] ---[ end trace 0000000000000000 ]--- [ 61.386501][ T3617] RIP: 0010:PageHeadHuge+0x1d/0x200 [ 61.391722][ T3617] Code: ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 41 54 55 48 89 fd 53 e8 54 c9 b9 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 a2 01 00 00 48 8b 5d 00 48 c7 c7 ff ff ff ff 48 [ 61.411611][ T3617] RSP: 0018:ffffc90003e7f5a0 EFLAGS: 00010246 [ 61.417885][ T3617] RAX: dffffc0000000000 RBX: ffffc90003e7f788 RCX: 0000000000000000 [ 61.426137][ T3617] RDX: 0000000000000000 RSI: ffffffff81c2cb2c RDI: 0000000000000000 [ 61.434109][ T3617] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 61.442208][ T3617] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc90003e7f798 [ 61.450363][ T3617] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000003f4 [ 61.458482][ T3617] FS: 00007f5642262700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 61.467520][ T3617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.474131][ T3617] CR2: 00007f56419ff718 CR3: 000000007adcc000 CR4: 00000000003506f0 [ 61.482130][ T3617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.490134][ T3617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.498173][ T3617] Kernel panic - not syncing: Fatal exception [ 61.504386][ T3617] Kernel Offset: disabled [ 61.508704][ T3617] Rebooting in 86400 seconds..