syzkaller login: [ 41.072662] sshd (209) used greatest stack depth: 24016 bytes left Warning: Permanently added '[localhost]:21128' (ECDSA) to the list of known hosts. 2023/05/18 00:15:36 fuzzer started 2023/05/18 00:15:36 dialing manager at localhost:44319 2023/05/18 00:15:36 checking machine... 2023/05/18 00:15:36 checking revisions... [ 46.501140] kmemleak: Automatic memory scanning thread ended 2023/05/18 00:15:36 testing simple program... [ 46.593782] cgroup: Unknown subsys name 'net' [ 46.703899] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 60.473548] audit: type=1400 audit(1684368950.860:6): avc: denied { execmem } for pid=257 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 executing program [ 61.564331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.566288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.568680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.571961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.573915] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.575453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.000181] ------------[ cut here ]------------ [ 62.000850] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 62.003014] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 62.004162] Modules linked in: [ 62.004597] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 62.006731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 62.009271] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 62.009941] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 62.012273] RSP: 0018:ffff88801ab1fc00 EFLAGS: 00010282 [ 62.012952] RAX: 0000000000000000 RBX: ffff88800cc0e840 RCX: 0000000000000000 [ 62.013878] RDX: ffff888019403680 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 62.014802] RBP: ffff88800cc0e854 R08: 0000000000000001 R09: 0000000000000000 [ 62.015733] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 62.016671] R13: ffffffff84e23fe0 R14: ffff88800cc0e848 R15: ffffffff84d74dc0 [ 62.017599] FS: 0000555556e45400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 62.018637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.019403] CR2: 00007ff5c107d6f4 CR3: 000000000db5e000 CR4: 0000000000350ee0 [ 62.020360] Call Trace: [ 62.020703] [ 62.021041] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 62.021681] ipv4_frags_init_net+0x269/0x440 [ 62.022295] ops_init+0xbb/0x6b0 [ 62.022762] setup_net+0x3d9/0x990 [ 62.023265] ? down_read_killable+0x1d7/0x4e0 [ 62.023872] ? __pfx_setup_net+0x10/0x10 [ 62.024430] ? copy_net_ns+0x17c/0x770 [ 62.024955] copy_net_ns+0x321/0x770 [ 62.025495] create_new_namespaces+0x3f6/0xb30 [ 62.026122] unshare_nsproxy_namespaces+0xc1/0x200 [ 62.026757] ksys_unshare+0x44d/0x8e0 [ 62.027290] ? __pfx_ksys_unshare+0x10/0x10 [ 62.027861] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 62.028617] __x64_sys_unshare+0x31/0x40 [ 62.029176] do_syscall_64+0x3f/0x90 [ 62.029669] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 62.030368] RIP: 0033:0x7f74c120d0d7 [ 62.030846] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 62.033084] RSP: 002b:00007ffddc3db598 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 62.034053] RAX: ffffffffffffffda RBX: 00007ffddc3dbbd8 RCX: 00007f74c120d0d7 [ 62.034936] RDX: 00007f74c127741f RSI: 00007ffddc3db530 RDI: 0000000040000000 [ 62.035850] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffddc3db340 [ 62.036755] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f74c131fbf0 [ 62.037661] R13: 00007ffddc3db670 R14: 0000000000000000 R15: 00000000000000f8 [ 62.038592] [ 62.038900] irq event stamp: 8547 [ 62.039370] hardirqs last enabled at (8559): [] __up_console_sem+0x78/0x80 [ 62.040469] hardirqs last disabled at (8570): [] __up_console_sem+0x5d/0x80 [ 62.041548] softirqs last enabled at (8118): [] irq_exit_rcu+0x93/0xc0 [ 62.042597] softirqs last disabled at (8103): [] irq_exit_rcu+0x93/0xc0 [ 62.043652] ---[ end trace 0000000000000000 ]--- [ 62.048883] ------------[ cut here ]------------ [ 62.049529] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 62.051258] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 62.052332] Modules linked in: [ 62.052747] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 62.053925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 62.054965] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 62.055663] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 62.057890] RSP: 0018:ffff88801ab1fc00 EFLAGS: 00010282 [ 62.058585] RAX: 0000000000000000 RBX: ffff88800d5b7e40 RCX: 0000000000000000 [ 62.059487] RDX: ffff888019403680 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 62.060405] RBP: ffff88800d5b7e54 R08: 0000000000000001 R09: 0000000000000000 [ 62.061286] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 62.062182] R13: ffffffff84e23fe0 R14: ffff88800d5b7e48 R15: ffffffff84da7d60 [ 62.063069] FS: 0000555556e45400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 62.064084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.064799] CR2: 00007ff5c107d6f4 CR3: 000000000db5e000 CR4: 0000000000350ee0 [ 62.065691] Call Trace: [ 62.066045] [ 62.066346] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 62.066967] ipv6_frags_init_net+0x206/0x3c0 [ 62.067561] ops_init+0xbb/0x6b0 [ 62.068047] setup_net+0x3d9/0x990 [ 62.068511] ? down_read_killable+0x1d7/0x4e0 [ 62.069110] ? __pfx_setup_net+0x10/0x10 [ 62.069622] ? copy_net_ns+0x17c/0x770 [ 62.070159] copy_net_ns+0x321/0x770 [ 62.070652] create_new_namespaces+0x3f6/0xb30 [ 62.071261] unshare_nsproxy_namespaces+0xc1/0x200 [ 62.071902] ksys_unshare+0x44d/0x8e0 [ 62.072426] ? __pfx_ksys_unshare+0x10/0x10 [ 62.072973] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 62.073717] __x64_sys_unshare+0x31/0x40 [ 62.074265] do_syscall_64+0x3f/0x90 [ 62.074805] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 62.075593] RIP: 0033:0x7f74c120d0d7 [ 62.076194] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 62.078758] RSP: 002b:00007ffddc3db598 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 62.079883] RAX: ffffffffffffffda RBX: 00007ffddc3dbbd8 RCX: 00007f74c120d0d7 [ 62.080918] RDX: 00007f74c127741f RSI: 00007ffddc3db530 RDI: 0000000040000000 [ 62.081951] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffddc3db340 [ 62.082976] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f74c131fbf0 [ 62.084048] R13: 00007ffddc3db670 R14: 0000000000000000 R15: 00000000000000f8 [ 62.085131] [ 62.085483] irq event stamp: 10383 [ 62.086027] hardirqs last enabled at (10395): [] __up_console_sem+0x78/0x80 [ 62.087281] hardirqs last disabled at (10406): [] __up_console_sem+0x5d/0x80 [ 62.088553] softirqs last enabled at (10042): [] irq_exit_rcu+0x93/0xc0 [ 62.089758] softirqs last disabled at (10033): [] irq_exit_rcu+0x93/0xc0 [ 62.090962] ---[ end trace 0000000000000000 ]--- [ 62.092593] ------------[ cut here ]------------ [ 62.093382] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 62.095563] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 62.096847] Modules linked in: [ 62.097352] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 62.098692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 62.099886] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 62.100678] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 62.103214] RSP: 0018:ffff88801ab1fbf0 EFLAGS: 00010286 [ 62.104024] RAX: 0000000000000000 RBX: ffff88800c63de40 RCX: 0000000000000000 [ 62.105060] RDX: ffff888019403680 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 62.106101] RBP: ffff88800c63de54 R08: 0000000000000001 R09: 0000000000000000 [ 62.107118] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 62.108164] R13: ffffffff84e23fe0 R14: ffff88800c63de48 R15: ffffffff84db0aa0 [ 62.109200] FS: 0000555556e45400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 62.110360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.111216] CR2: 00007ff5c107d6f4 CR3: 000000000db5e000 CR4: 0000000000350ee0 [ 62.112251] Call Trace: [ 62.112636] [ 62.113011] nf_ct_net_init+0x224/0x3d0 [ 62.113624] ? __pfx_nf_ct_net_init+0x10/0x10 [ 62.114331] ops_init+0xbb/0x6b0 [ 62.114857] setup_net+0x3d9/0x990 [ 62.115409] ? down_read_killable+0x1d7/0x4e0 [ 62.116117] ? __pfx_setup_net+0x10/0x10 [ 62.116702] ? copy_net_ns+0x17c/0x770 [ 62.117322] copy_net_ns+0x321/0x770 [ 62.117887] create_new_namespaces+0x3f6/0xb30 [ 62.118605] unshare_nsproxy_namespaces+0xc1/0x200 [ 62.119343] ksys_unshare+0x44d/0x8e0 [ 62.119918] ? __pfx_ksys_unshare+0x10/0x10 [ 62.120600] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 62.121439] __x64_sys_unshare+0x31/0x40 [ 62.122074] do_syscall_64+0x3f/0x90 [ 62.122626] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 62.123398] RIP: 0033:0x7f74c120d0d7 [ 62.123954] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 62.126438] RSP: 002b:00007ffddc3db598 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 62.127512] RAX: ffffffffffffffda RBX: 00007ffddc3dbbd8 RCX: 00007f74c120d0d7 [ 62.128522] RDX: 00007f74c127741f RSI: 00007ffddc3db530 RDI: 0000000040000000 [ 62.129532] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffddc3db340 [ 62.130535] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f74c131fbf0 [ 62.131532] R13: 00007ffddc3db670 R14: 0000000000000000 R15: 00000000000000f8 [ 62.132585] [ 62.132928] irq event stamp: 11165 [ 62.133454] hardirqs last enabled at (11177): [] __up_console_sem+0x78/0x80 [ 62.134662] hardirqs last disabled at (11188): [] __up_console_sem+0x5d/0x80 [ 62.135895] softirqs last enabled at (11002): [] irq_exit_rcu+0x93/0xc0 [ 62.137062] softirqs last disabled at (10997): [] irq_exit_rcu+0x93/0xc0 [ 62.138231] ---[ end trace 0000000000000000 ]--- [ 63.648608] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 65.696098] Bluetooth: hci0: command 0x041b tx timeout executing program [ 67.744079] Bluetooth: hci0: command 0x040f tx timeout [ 69.792110] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 00:15:50 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=1ffff11001fd0ea1 RCX=ffffffff812cc7ef RDX=fffffbfff0ef3948 RSI=0000000000000008 RDI=ffffffff8779ca38 RBP=ffff888016cc5c28 RSP=ffff88800fe874d0 R8 =0000000000000000 R9 =fffffbfff0ef3947 R10=ffffffff8779ca3f R11=0000000000000001 R12=0000000000000007 R13=ffff888016cc5c48 R14=00000000000003fa R15=0000000000000080 RIP=ffffffff812cc7f7 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f01671f2700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd029373de0 CR3=000000000cbf0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2032353a35313a30302038312079614d XMM01=5d3133373630302e32362020205b203a XMM02=435020647261646e61745320554d4551 XMM03=312e3120534f4942202c293639393120 XMM04=32312e3120534f4942202c2936393931 XMM05=20435020647261646e61745320554d45 XMM06=205d3133373630302e32362020205b20 XMM07=732032353a35313a3030203831207961 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=fffffbfff0ba6b42 RBX=1ffff1100d9e13a0 RCX=ffffffff812d74c3 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff85d35a10 RBP=fffffbfff0ba6b42 RSP=ffff88806cf09cd0 R8 =0000000000000000 R9 =fffffbfff0ba6b42 R10=ffffffff85d35a17 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff88806cf36360 R15=0000000000000000 RIP=ffffffff8180f41a RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556e45400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff5c107d6f4 CR3=000000000db5e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000