Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:63205' (ECDSA) to the list of known hosts. 2023/05/18 06:45:33 fuzzer started 2023/05/18 06:45:34 dialing manager at localhost:44319 2023/05/18 06:45:34 checking machine... 2023/05/18 06:45:34 checking revisions... syzkaller login: [ 62.449881] kmemleak: Automatic memory scanning thread ended 2023/05/18 06:45:34 testing simple program... [ 62.520469] cgroup: Unknown subsys name 'net' [ 62.572296] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 75.177323] audit: type=1400 audit(1684392347.138:6): avc: denied { execmem } for pid=257 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 76.329268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.330983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.335069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.339154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.340899] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.342164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.736647] ------------[ cut here ]------------ [ 76.737597] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 76.739923] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 76.741386] Modules linked in: [ 76.741966] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 76.746865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 76.748324] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 76.749335] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 76.752493] RSP: 0018:ffff88800fbb7c00 EFLAGS: 00010282 [ 76.753520] RAX: 0000000000000000 RBX: ffff888016657c40 RCX: 0000000000000000 [ 76.754848] RDX: ffff888017fd9b40 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 76.756157] RBP: ffff888016657c54 R08: 0000000000000001 R09: 0000000000000000 [ 76.757529] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 76.758841] R13: ffffffff84e23fe0 R14: ffff888016657c48 R15: ffffffff84d74dc0 [ 76.760160] FS: 0000555556bd9400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 76.761663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.762803] CR2: 0000556f968ab080 CR3: 0000000015970000 CR4: 0000000000350ee0 [ 76.764152] Call Trace: [ 76.764711] [ 76.765156] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 76.766125] ipv4_frags_init_net+0x269/0x440 [ 76.767005] ops_init+0xbb/0x6b0 [ 76.767706] setup_net+0x3d9/0x990 [ 76.768407] ? down_read_killable+0x1d7/0x4e0 [ 76.769303] ? __pfx_setup_net+0x10/0x10 [ 76.770063] ? copy_net_ns+0x17c/0x770 [ 76.770922] copy_net_ns+0x321/0x770 [ 76.771697] create_new_namespaces+0x3f6/0xb30 [ 76.772624] unshare_nsproxy_namespaces+0xc1/0x200 [ 76.773581] ksys_unshare+0x44d/0x8e0 [ 76.774347] ? __pfx_ksys_unshare+0x10/0x10 [ 76.775137] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 76.776263] __x64_sys_unshare+0x31/0x40 [ 76.777014] do_syscall_64+0x3f/0x90 [ 76.777779] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 76.778810] RIP: 0033:0x7fc4ef28d0d7 [ 76.779532] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 76.782785] RSP: 002b:00007fff0c16c248 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 76.783991] RAX: ffffffffffffffda RBX: 00007fff0c16c888 RCX: 00007fc4ef28d0d7 [ 76.785107] RDX: 00007fc4ef2f741f RSI: 00007fff0c16c1e0 RDI: 0000000040000000 [ 76.786231] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff0c16bff0 [ 76.787382] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fc4ef39fbf0 [ 76.788498] R13: 00007fff0c16c320 R14: 0000000000000000 R15: 00000000000000f8 [ 76.789654] [ 76.790031] irq event stamp: 8019 [ 76.790605] hardirqs last enabled at (8031): [] __up_console_sem+0x78/0x80 [ 76.791930] hardirqs last disabled at (8042): [] __up_console_sem+0x5d/0x80 [ 76.793258] softirqs last enabled at (8004): [] irq_exit_rcu+0x93/0xc0 [ 76.794550] softirqs last disabled at (7999): [] irq_exit_rcu+0x93/0xc0 [ 76.795852] ---[ end trace 0000000000000000 ]--- [ 76.801782] ------------[ cut here ]------------ [ 76.802469] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 76.804423] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 76.805605] Modules linked in: [ 76.806058] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 76.807356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 76.808448] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 76.809139] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 76.811496] RSP: 0018:ffff88800fbb7c00 EFLAGS: 00010282 [ 76.812231] RAX: 0000000000000000 RBX: ffff88800ed48040 RCX: 0000000000000000 [ 76.813151] RDX: ffff888017fd9b40 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 76.814103] RBP: ffff88800ed48054 R08: 0000000000000001 R09: 0000000000000000 [ 76.815087] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 76.816048] R13: ffffffff84e23fe0 R14: ffff88800ed48048 R15: ffffffff84da7d60 [ 76.817025] FS: 0000555556bd9400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 76.818120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.818964] CR2: 0000556f968ab080 CR3: 0000000015970000 CR4: 0000000000350ee0 [ 76.819931] Call Trace: [ 76.820321] [ 76.820638] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 76.821329] ipv6_frags_init_net+0x206/0x3c0 [ 76.821948] ops_init+0xbb/0x6b0 [ 76.822480] setup_net+0x3d9/0x990 [ 76.822987] ? down_read_killable+0x1d7/0x4e0 [ 76.823645] ? __pfx_setup_net+0x10/0x10 [ 76.824244] ? copy_net_ns+0x17c/0x770 [ 76.824806] copy_net_ns+0x321/0x770 [ 76.825364] create_new_namespaces+0x3f6/0xb30 [ 76.826013] unshare_nsproxy_namespaces+0xc1/0x200 [ 76.826741] ksys_unshare+0x44d/0x8e0 [ 76.827317] ? __pfx_ksys_unshare+0x10/0x10 [ 76.827924] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 76.828748] __x64_sys_unshare+0x31/0x40 [ 76.829341] do_syscall_64+0x3f/0x90 [ 76.829874] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 76.830634] RIP: 0033:0x7fc4ef28d0d7 [ 76.831146] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 76.833544] RSP: 002b:00007fff0c16c248 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 76.834591] RAX: ffffffffffffffda RBX: 00007fff0c16c888 RCX: 00007fc4ef28d0d7 [ 76.835568] RDX: 00007fc4ef2f741f RSI: 00007fff0c16c1e0 RDI: 0000000040000000 [ 76.836540] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff0c16bff0 [ 76.837526] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fc4ef39fbf0 [ 76.838519] R13: 00007fff0c16c320 R14: 0000000000000000 R15: 00000000000000f8 [ 76.839514] [ 76.839849] irq event stamp: 9689 [ 76.840356] hardirqs last enabled at (9701): [] __up_console_sem+0x78/0x80 [ 76.841525] hardirqs last disabled at (9712): [] __up_console_sem+0x5d/0x80 [ 76.842720] softirqs last enabled at (8642): [] netlink_insert+0x187/0x1820 [ 76.843927] softirqs last disabled at (8640): [] release_sock+0x1f/0x1b0 [ 76.845068] ---[ end trace 0000000000000000 ]--- [ 76.846648] ------------[ cut here ]------------ [ 76.847695] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 76.849902] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 76.851072] Modules linked in: [ 76.851552] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 76.852818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 76.853929] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 76.854679] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 76.857072] RSP: 0018:ffff88800fbb7bf0 EFLAGS: 00010286 [ 76.857831] RAX: 0000000000000000 RBX: ffff88800ed49640 RCX: 0000000000000000 [ 76.858847] RDX: ffff888017fd9b40 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 76.859833] RBP: ffff88800ed49654 R08: 0000000000000001 R09: 0000000000000000 [ 76.860812] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 76.861786] R13: ffffffff84e23fe0 R14: ffff88800ed49648 R15: ffffffff84db0aa0 [ 76.862775] FS: 0000555556bd9400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 76.863870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.864691] CR2: 0000556f968ab080 CR3: 0000000015970000 CR4: 0000000000350ee0 [ 76.865678] Call Trace: [ 76.866042] [ 76.866401] nf_ct_net_init+0x224/0x3d0 [ 76.867002] ? __pfx_nf_ct_net_init+0x10/0x10 [ 76.867666] ops_init+0xbb/0x6b0 [ 76.868163] setup_net+0x3d9/0x990 [ 76.868703] ? down_read_killable+0x1d7/0x4e0 [ 76.869350] ? __pfx_setup_net+0x10/0x10 [ 76.869914] ? copy_net_ns+0x17c/0x770 [ 76.870521] copy_net_ns+0x321/0x770 [ 76.871053] create_new_namespaces+0x3f6/0xb30 [ 76.871732] unshare_nsproxy_namespaces+0xc1/0x200 [ 76.872445] ksys_unshare+0x44d/0x8e0 [ 76.872987] ? __pfx_ksys_unshare+0x10/0x10 [ 76.873620] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 76.874456] __x64_sys_unshare+0x31/0x40 [ 76.875027] do_syscall_64+0x3f/0x90 [ 76.875582] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 76.876327] RIP: 0033:0x7fc4ef28d0d7 [ 76.876841] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 76.879257] RSP: 002b:00007fff0c16c248 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 76.880299] RAX: ffffffffffffffda RBX: 00007fff0c16c888 RCX: 00007fc4ef28d0d7 [ 76.881284] RDX: 00007fc4ef2f741f RSI: 00007fff0c16c1e0 RDI: 0000000040000000 [ 76.882270] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff0c16bff0 [ 76.883254] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fc4ef39fbf0 [ 76.884234] R13: 00007fff0c16c320 R14: 0000000000000000 R15: 00000000000000f8 [ 76.885237] [ 76.885575] irq event stamp: 10617 [ 76.886063] hardirqs last enabled at (10627): [] __up_console_sem+0x78/0x80 [ 76.887264] hardirqs last disabled at (10638): [] __up_console_sem+0x5d/0x80 [ 76.888450] softirqs last enabled at (10216): [] irq_exit_rcu+0x93/0xc0 [ 76.889603] softirqs last disabled at (10207): [] irq_exit_rcu+0x93/0xc0 [ 76.890770] ---[ end trace 0000000000000000 ]--- executing program [ 78.402886] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 80.450274] Bluetooth: hci0: command 0x041b tx timeout [ 82.498295] Bluetooth: hci0: command 0x040f tx timeout executing program [ 84.546252] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 06:45:22 Registers: info registers vcpu 0 RAX=0000000000021077 RBX=0000000000000000 RCX=ffffffff844d0a0e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81287415 RBP=dffffc0000000000 RSP=ffffffff85407e10 R8 =0000000000000001 R9 =ffffed100d9c69f8 R10=ffff88806ce34fc3 R11=0000000000000001 R12=ffffffff85d35a10 R13=1ffffffff0a80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844d199f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa6ea10fde0 CR3=000000000f00a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=f765dc501f72e8b96848aa12a847829c XMM02=6b1e99b806172e3b00000000000aea28 XMM03=ac8bc31478ec851100000000000aefa0 XMM04=e3c576f1b83ac5ca000000000013b688 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=c0b945fc5a343b3f00000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82507f85 RDI=ffffffff87f2dc00 RBP=ffffffff87f2dbc0 RSP=ffff88800fbb75f0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87f2dbc0 R14=0000000000000010 R15=ffffffff82507f70 RIP=ffffffff82507fdd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556bd9400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556f968ab080 CR3=0000000015970000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000