Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 30.642019] sshd (224) used greatest stack depth: 24032 bytes left Warning: Permanently added '[localhost]:39087' (ECDSA) to the list of known hosts. 2023/05/16 18:38:50 fuzzer started 2023/05/16 18:38:50 dialing manager at localhost:35573 2023/05/16 18:38:50 checking machine... 2023/05/16 18:38:50 checking revisions... [ 31.874695] kmemleak: Automatic memory scanning thread ended 2023/05/16 18:38:51 testing simple program... [ 31.948589] cgroup: Unknown subsys name 'net' [ 32.012250] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 44.597814] audit: type=1400 audit(1684262343.859:6): avc: denied { execmem } for pid=258 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 45.720718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.722932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.724692] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.727608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.728962] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.731088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.107200] ------------[ cut here ]------------ [ 46.107864] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 46.109642] WARNING: CPU: 0 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 46.110755] Modules linked in: [ 46.111187] CPU: 0 PID: 259 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 46.116983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 46.118283] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 46.118962] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 46.121389] RSP: 0018:ffff8880201f7c00 EFLAGS: 00010282 [ 46.122074] RAX: 0000000000000000 RBX: ffff8880165f6840 RCX: 0000000000000000 [ 46.123005] RDX: ffff88800f86b680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 46.123924] RBP: ffff8880165f6854 R08: 0000000000000001 R09: 0000000000000000 [ 46.124855] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 46.125822] R13: ffffffff84e223a0 R14: ffff8880165f6848 R15: ffffffff84d73340 [ 46.126757] FS: 0000555555934400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 46.127810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.128581] CR2: 00007f078b6f96f4 CR3: 000000000d658000 CR4: 0000000000350ef0 [ 46.129537] Call Trace: [ 46.129876] [ 46.130210] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 46.130847] ipv4_frags_init_net+0x269/0x440 [ 46.131445] ops_init+0xbb/0x6b0 [ 46.131903] setup_net+0x3d9/0x990 [ 46.132393] ? down_read_killable+0x1d7/0x4e0 [ 46.132981] ? __pfx_setup_net+0x10/0x10 [ 46.133570] ? copy_net_ns+0x17c/0x770 [ 46.134091] copy_net_ns+0x321/0x770 [ 46.134619] create_new_namespaces+0x3f6/0xb30 [ 46.135246] unshare_nsproxy_namespaces+0xc1/0x200 [ 46.135879] ksys_unshare+0x44d/0x8e0 [ 46.136419] ? __pfx_ksys_unshare+0x10/0x10 [ 46.136982] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 46.137800] __x64_sys_unshare+0x31/0x40 [ 46.138366] do_syscall_64+0x3f/0x90 [ 46.138862] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 46.139568] RIP: 0033:0x7fa2b5cf80d7 [ 46.140054] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 46.142366] RSP: 002b:00007ffec5abef68 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 46.143354] RAX: ffffffffffffffda RBX: 00007ffec5abf5a8 RCX: 00007fa2b5cf80d7 [ 46.144287] RDX: 00007fa2b5d6241f RSI: 00007ffec5abef00 RDI: 0000000040000000 [ 46.145214] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffec5abed10 [ 46.146196] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fa2b5e0abf0 [ 46.147091] R13: 00007ffec5abf040 R14: 0000000000000000 R15: 00000000000000f8 [ 46.148038] [ 46.148387] irq event stamp: 8097 [ 46.148833] hardirqs last enabled at (8107): [] __up_console_sem+0x78/0x80 [ 46.149970] hardirqs last disabled at (8118): [] __up_console_sem+0x5d/0x80 [ 46.151083] softirqs last enabled at (7670): [] irq_exit_rcu+0x93/0xc0 [ 46.152181] softirqs last disabled at (7615): [] irq_exit_rcu+0x93/0xc0 [ 46.153252] ---[ end trace 0000000000000000 ]--- [ 46.159230] ------------[ cut here ]------------ [ 46.159979] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 46.162236] WARNING: CPU: 0 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 46.163502] Modules linked in: [ 46.163984] CPU: 0 PID: 259 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 46.165373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 46.166578] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 46.167392] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 46.170011] RSP: 0018:ffff8880201f7c00 EFLAGS: 00010282 [ 46.170699] RAX: 0000000000000000 RBX: ffff88800ca9d640 RCX: 0000000000000000 [ 46.171584] RDX: ffff88800f86b680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 46.172463] RBP: ffff88800ca9d654 R08: 0000000000000001 R09: 0000000000000000 [ 46.173363] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 46.174244] R13: ffffffff84e223a0 R14: ffff88800ca9d648 R15: ffffffff84da62e0 [ 46.175103] FS: 0000555555934400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 46.176095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.176827] CR2: 00007f078b6f96f4 CR3: 000000000d658000 CR4: 0000000000350ef0 [ 46.177730] Call Trace: [ 46.178057] [ 46.178378] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 46.178999] ipv6_frags_init_net+0x206/0x3c0 [ 46.179584] ops_init+0xbb/0x6b0 [ 46.180028] setup_net+0x3d9/0x990 [ 46.180517] ? down_read_killable+0x1d7/0x4e0 [ 46.181089] ? __pfx_setup_net+0x10/0x10 [ 46.181656] ? copy_net_ns+0x17c/0x770 [ 46.182195] copy_net_ns+0x321/0x770 [ 46.182678] create_new_namespaces+0x3f6/0xb30 [ 46.183291] unshare_nsproxy_namespaces+0xc1/0x200 [ 46.183907] ksys_unshare+0x44d/0x8e0 [ 46.184427] ? __pfx_ksys_unshare+0x10/0x10 [ 46.184989] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 46.185770] __x64_sys_unshare+0x31/0x40 [ 46.186349] do_syscall_64+0x3f/0x90 [ 46.186861] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 46.187561] RIP: 0033:0x7fa2b5cf80d7 [ 46.188049] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 46.190362] RSP: 002b:00007ffec5abef68 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 46.191345] RAX: ffffffffffffffda RBX: 00007ffec5abf5a8 RCX: 00007fa2b5cf80d7 [ 46.192286] RDX: 00007fa2b5d6241f RSI: 00007ffec5abef00 RDI: 0000000040000000 [ 46.193208] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffec5abed10 [ 46.194143] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fa2b5e0abf0 [ 46.195039] R13: 00007ffec5abf040 R14: 0000000000000000 R15: 00000000000000f8 [ 46.195999] [ 46.196340] irq event stamp: 9871 [ 46.196781] hardirqs last enabled at (9881): [] __up_console_sem+0x78/0x80 [ 46.197904] hardirqs last disabled at (9892): [] __up_console_sem+0x5d/0x80 [ 46.199021] softirqs last enabled at (9372): [] irq_exit_rcu+0x93/0xc0 [ 46.200123] softirqs last disabled at (9367): [] irq_exit_rcu+0x93/0xc0 [ 46.201223] ---[ end trace 0000000000000000 ]--- [ 46.202594] ------------[ cut here ]------------ [ 46.203231] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 46.205211] WARNING: CPU: 0 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 46.206343] Modules linked in: [ 46.206766] CPU: 0 PID: 259 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 46.207985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 46.209058] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 46.209792] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 46.212060] RSP: 0018:ffff8880201f7bf0 EFLAGS: 00010286 [ 46.212765] RAX: 0000000000000000 RBX: ffff88800ca7fe40 RCX: 0000000000000000 [ 46.213696] RDX: ffff88800f86b680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 46.214614] RBP: ffff88800ca7fe54 R08: 0000000000000001 R09: 0000000000000000 [ 46.215543] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 46.216461] R13: ffffffff84e223a0 R14: ffff88800ca7fe48 R15: ffffffff84daf020 [ 46.217395] FS: 0000555555934400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 46.218430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.219183] CR2: 00007f078b6f96f4 CR3: 000000000d658000 CR4: 0000000000350ef0 [ 46.220079] Call Trace: [ 46.220456] [ 46.220763] nf_ct_net_init+0x224/0x3d0 [ 46.221356] ? __pfx_nf_ct_net_init+0x10/0x10 [ 46.221996] ops_init+0xbb/0x6b0 [ 46.222486] setup_net+0x3d9/0x990 [ 46.222957] ? down_read_killable+0x1d7/0x4e0 [ 46.223574] ? __pfx_setup_net+0x10/0x10 [ 46.224099] ? copy_net_ns+0x17c/0x770 [ 46.224656] copy_net_ns+0x321/0x770 [ 46.225186] create_new_namespaces+0x3f6/0xb30 [ 46.225807] unshare_nsproxy_namespaces+0xc1/0x200 [ 46.226477] ksys_unshare+0x44d/0x8e0 [ 46.226986] ? __pfx_ksys_unshare+0x10/0x10 [ 46.227579] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 46.228339] __x64_sys_unshare+0x31/0x40 [ 46.228879] do_syscall_64+0x3f/0x90 [ 46.229408] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 46.230069] RIP: 0033:0x7fa2b5cf80d7 [ 46.230576] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 46.232840] RSP: 002b:00007ffec5abef68 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 46.233847] RAX: ffffffffffffffda RBX: 00007ffec5abf5a8 RCX: 00007fa2b5cf80d7 [ 46.234767] RDX: 00007fa2b5d6241f RSI: 00007ffec5abef00 RDI: 0000000040000000 [ 46.235694] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffec5abed10 [ 46.236608] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fa2b5e0abf0 [ 46.237540] R13: 00007ffec5abf040 R14: 0000000000000000 R15: 00000000000000f8 [ 46.238483] [ 46.238792] irq event stamp: 10623 [ 46.239273] hardirqs last enabled at (10635): [] __up_console_sem+0x78/0x80 [ 46.240381] hardirqs last disabled at (10646): [] __up_console_sem+0x5d/0x80 [ 46.241500] softirqs last enabled at (10418): [] irq_exit_rcu+0x93/0xc0 [ 46.242536] softirqs last disabled at (10413): [] irq_exit_rcu+0x93/0xc0 [ 46.243571] ---[ end trace 0000000000000000 ]--- executing program [ 47.744863] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 49.792798] Bluetooth: hci0: command 0x041b tx timeout [ 51.840171] Bluetooth: hci0: command 0x040f tx timeout executing program [ 53.888228] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 18:39:02 Registers: info registers vcpu 0 RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff8880201f75f0 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006d R11=0000000000000001 R12=000000000000006d R13=ffffffff87f27bc0 R14=0000000000000010 R15=ffffffff82507670 RIP=ffffffff825076dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555934400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f078b6f96f4 CR3=000000000d658000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000027613 RBX=0000000000000001 RCX=ffffffff844c4a0e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81288625 RBP=dffffc0000000000 RSP=ffff888008dcfe68 R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001 R12=ffffffff85d34a10 R13=1ffff110011b9fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844c599f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3c6e04c4f0 CR3=0000000015be8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=667a4c62744a20aca645b6b6400e5b19 XMM02=6b1e99b806172e3b00000000000aea28 XMM03=ac8bc31478ec851100000000000aefa0 XMM04=095ce72c364446e8000000000013c3c8 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=e0d4af91517282ef00000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000