Warning: Permanently added '[localhost]:13720' (ECDSA) to the list of known hosts. 2023/05/16 21:44:59 fuzzer started 2023/05/16 21:44:59 dialing manager at localhost:35573 2023/05/16 21:44:59 checking machine... 2023/05/16 21:44:59 checking revisions... syzkaller login: [ 151.493725] kmemleak: Automatic memory scanning thread ended 2023/05/16 21:45:00 testing simple program... [ 151.572452] cgroup: Unknown subsys name 'net' [ 151.648593] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 163.573351] audit: type=1400 audit(1684273512.148:6): avc: denied { execmem } for pid=264 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 164.732159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.733750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.736481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.740451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.742874] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.744700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.141045] ------------[ cut here ]------------ [ 165.141811] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 165.143887] WARNING: CPU: 0 PID: 265 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 165.145192] Modules linked in: [ 165.145629] CPU: 0 PID: 265 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1 [ 165.150254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 165.151330] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 165.152022] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 165.154284] RSP: 0018:ffff88801a3f7c00 EFLAGS: 00010282 [ 165.154999] RAX: 0000000000000000 RBX: ffff88800c9edc40 RCX: 0000000000000000 [ 165.155856] RDX: ffff888019380000 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 165.156746] RBP: ffff88800c9edc54 R08: 0000000000000001 R09: 0000000000000000 [ 165.157640] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 165.158532] R13: ffffffff84e223a0 R14: ffff88800c9edc48 R15: ffffffff84d73340 [ 165.159442] FS: 0000555555914400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 165.160444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.161189] CR2: 00007f2a2b0dcf90 CR3: 000000001fe76000 CR4: 0000000000350ef0 [ 165.162097] Call Trace: [ 165.162422] [ 165.162723] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 165.163399] ipv4_frags_init_net+0x269/0x440 [ 165.164014] ops_init+0xbb/0x6b0 [ 165.164459] setup_net+0x3d9/0x990 [ 165.164946] ? down_read_killable+0x1d7/0x4e0 [ 165.165514] ? __pfx_setup_net+0x10/0x10 [ 165.166063] ? copy_net_ns+0x17c/0x770 [ 165.166574] copy_net_ns+0x321/0x770 [ 165.167101] create_new_namespaces+0x3f6/0xb30 [ 165.167693] unshare_nsproxy_namespaces+0xc1/0x200 [ 165.168353] ksys_unshare+0x44d/0x8e0 [ 165.168854] ? __pfx_ksys_unshare+0x10/0x10 [ 165.169437] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 165.170202] __x64_sys_unshare+0x31/0x40 [ 165.170729] do_syscall_64+0x3f/0x90 [ 165.171261] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 165.171902] RIP: 0033:0x7f05cd3760d7 [ 165.172401] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 165.174607] RSP: 002b:00007ffca35f0078 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 165.175563] RAX: ffffffffffffffda RBX: 00007ffca35f06b8 RCX: 00007f05cd3760d7 [ 165.176469] RDX: 00007f05cd3e041f RSI: 00007ffca35f0010 RDI: 0000000040000000 [ 165.177364] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffca35efe20 [ 165.178270] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f05cd488bf0 [ 165.179172] R13: 00007ffca35f0150 R14: 0000000000000000 R15: 00000000000000f8 [ 165.180103] [ 165.180408] irq event stamp: 8167 [ 165.180829] hardirqs last enabled at (8177): [] __up_console_sem+0x78/0x80 [ 165.181895] hardirqs last disabled at (8188): [] __up_console_sem+0x5d/0x80 [ 165.182991] softirqs last enabled at (7738): [] irq_exit_rcu+0x93/0xc0 [ 165.184036] softirqs last disabled at (7721): [] irq_exit_rcu+0x93/0xc0 [ 165.185076] ---[ end trace 0000000000000000 ]--- [ 165.194588] ------------[ cut here ]------------ [ 165.195497] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 165.197323] WARNING: CPU: 1 PID: 265 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 165.198400] Modules linked in: [ 165.198813] CPU: 1 PID: 265 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1 [ 165.200094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 165.201195] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 165.201832] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 165.204121] RSP: 0018:ffff88801a3f7c00 EFLAGS: 00010282 [ 165.204780] RAX: 0000000000000000 RBX: ffff88800dd79640 RCX: 0000000000000000 [ 165.205763] RDX: ffff888019380000 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 165.206735] RBP: ffff88800dd79654 R08: 0000000000000001 R09: 0000000000000000 [ 165.207716] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 165.208688] R13: ffffffff84e223a0 R14: ffff88800dd79648 R15: ffffffff84da62e0 [ 165.209659] FS: 0000555555914400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 165.210735] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.211601] CR2: 00007f2a2b141ee0 CR3: 000000001fe76000 CR4: 0000000000350ee0 [ 165.212588] Call Trace: [ 165.213045] [ 165.213355] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 165.214113] ipv6_frags_init_net+0x206/0x3c0 [ 165.214709] ops_init+0xbb/0x6b0 [ 165.215288] setup_net+0x3d9/0x990 [ 165.215765] ? down_read_killable+0x1d7/0x4e0 [ 165.216405] ? __pfx_setup_net+0x10/0x10 [ 165.216975] ? copy_net_ns+0x17c/0x770 [ 165.217505] copy_net_ns+0x321/0x770 [ 165.218073] create_new_namespaces+0x3f6/0xb30 [ 165.218682] unshare_nsproxy_namespaces+0xc1/0x200 [ 165.219392] ksys_unshare+0x44d/0x8e0 [ 165.219907] ? __pfx_ksys_unshare+0x10/0x10 [ 165.220524] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 165.221313] __x64_sys_unshare+0x31/0x40 [ 165.221856] do_syscall_64+0x3f/0x90 [ 165.222385] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 165.223100] RIP: 0033:0x7f05cd3760d7 [ 165.223579] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 165.225730] RSP: 002b:00007ffca35f0078 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 165.226690] RAX: ffffffffffffffda RBX: 00007ffca35f06b8 RCX: 00007f05cd3760d7 [ 165.227610] RDX: 00007f05cd3e041f RSI: 00007ffca35f0010 RDI: 0000000040000000 [ 165.228503] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffca35efe20 [ 165.229401] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f05cd488bf0 [ 165.230297] R13: 00007ffca35f0150 R14: 0000000000000000 R15: 00000000000000f8 [ 165.231237] [ 165.231542] irq event stamp: 11451 [ 165.232012] hardirqs last enabled at (11463): [] __up_console_sem+0x78/0x80 [ 165.233141] hardirqs last disabled at (11474): [] __up_console_sem+0x5d/0x80 [ 165.234224] softirqs last enabled at (11246): [] irq_exit_rcu+0x93/0xc0 [ 165.235291] softirqs last disabled at (11241): [] irq_exit_rcu+0x93/0xc0 [ 165.236369] ---[ end trace 0000000000000000 ]--- [ 165.237788] ------------[ cut here ]------------ [ 165.238422] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 165.240596] WARNING: CPU: 1 PID: 265 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 165.241663] Modules linked in: [ 165.242104] CPU: 1 PID: 265 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1 [ 165.243272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 165.244291] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 165.244973] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 165.247136] RSP: 0018:ffff88801a3f7bf0 EFLAGS: 00010286 [ 165.247801] RAX: 0000000000000000 RBX: ffff88800a0c6640 RCX: 0000000000000000 [ 165.248719] RDX: ffff888019380000 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 165.249634] RBP: ffff88800a0c6654 R08: 0000000000000001 R09: 0000000000000000 [ 165.250551] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 165.251476] R13: ffffffff84e223a0 R14: ffff88800a0c6648 R15: ffffffff84daf020 [ 165.252369] FS: 0000555555914400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 165.253405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.254163] CR2: 00007f2a2b141ee0 CR3: 000000001fe76000 CR4: 0000000000350ee0 [ 165.255076] Call Trace: [ 165.255407] [ 165.255710] nf_ct_net_init+0x224/0x3d0 [ 165.256258] ? __pfx_nf_ct_net_init+0x10/0x10 [ 165.256830] ops_init+0xbb/0x6b0 [ 165.257307] setup_net+0x3d9/0x990 [ 165.257766] ? down_read_killable+0x1d7/0x4e0 [ 165.258373] ? __pfx_setup_net+0x10/0x10 [ 165.258894] ? copy_net_ns+0x17c/0x770 [ 165.259453] copy_net_ns+0x321/0x770 [ 165.259975] create_new_namespaces+0x3f6/0xb30 [ 165.260565] unshare_nsproxy_namespaces+0xc1/0x200 [ 165.261219] ksys_unshare+0x44d/0x8e0 [ 165.261713] ? __pfx_ksys_unshare+0x10/0x10 [ 165.262301] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 165.263074] __x64_sys_unshare+0x31/0x40 [ 165.263593] do_syscall_64+0x3f/0x90 [ 165.264106] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 165.264749] RIP: 0033:0x7f05cd3760d7 [ 165.265265] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 165.267448] RSP: 002b:00007ffca35f0078 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 165.268407] RAX: ffffffffffffffda RBX: 00007ffca35f06b8 RCX: 00007f05cd3760d7 [ 165.269287] RDX: 00007f05cd3e041f RSI: 00007ffca35f0010 RDI: 0000000040000000 [ 165.270178] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffca35efe20 [ 165.271094] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f05cd488bf0 [ 165.271981] R13: 00007ffca35f0150 R14: 0000000000000000 R15: 00000000000000f8 [ 165.272856] [ 165.273190] irq event stamp: 12269 [ 165.273622] hardirqs last enabled at (12279): [] __up_console_sem+0x78/0x80 [ 165.274690] hardirqs last disabled at (12290): [] __up_console_sem+0x5d/0x80 [ 165.275769] softirqs last enabled at (11830): [] irq_exit_rcu+0x93/0xc0 [ 165.276812] softirqs last disabled at (11825): [] irq_exit_rcu+0x93/0xc0 [ 165.277861] ---[ end trace 0000000000000000 ]--- executing program [ 166.818600] Bluetooth: hci0: command 0x0409 tx timeout [ 168.866037] Bluetooth: hci0: command 0x041b tx timeout executing program [ 170.913997] Bluetooth: hci0: command 0x040f tx timeout executing program [ 172.961999] Bluetooth: hci0: command 0x0419 tx timeout VM DIAGNOSIS: 21:43:31 Registers: info registers vcpu 0 RAX=0000000000000057 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff88801a3f75f0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000057 R11=0000000000000001 R12=0000000000000057 R13=ffffffff87f27bc0 R14=0000000000000010 R15=ffffffff82507670 RIP=ffffffff825076dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555914400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2a2b0dcf90 CR3=000000001fe76000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000af79b RBX=0000000000000001 RCX=ffffffff844c4a0e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81288625 RBP=dffffc0000000000 RSP=ffff888008dcfe68 R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001 R12=ffffffff85d34a10 R13=1ffff110011b9fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844c599f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2a2b15b400 CR3=0000000015b4a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff XMM02=000000000000000000000000000000ff XMM03=6465746e69615420302e726f74756365 XMM04=636f72703d7373616c63742030733a74 XMM05=3a755f6d65747379733d747865746e6f XMM06=5f6d65747379733a755f6d6574737973 XMM07=00000000000000000000000000000000 XMM08=303178302f303178302b657261687300 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000