Warning: Permanently added '[localhost]:51692' (ECDSA) to the list of known hosts. 2023/05/17 00:32:43 fuzzer started 2023/05/17 00:32:43 dialing manager at localhost:35573 2023/05/17 00:32:43 checking machine... 2023/05/17 00:32:43 checking revisions... syzkaller login: [ 72.061350] kmemleak: Automatic memory scanning thread ended 2023/05/17 00:32:44 testing simple program... [ 72.158340] cgroup: Unknown subsys name 'net' [ 72.256833] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 85.542484] audit: type=1400 audit(1684283577.558:6): avc: denied { execmem } for pid=266 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 86.692799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.695423] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.696599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.700167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.701596] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.703842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 87.086702] ------------[ cut here ]------------ [ 87.087381] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 87.089396] WARNING: CPU: 1 PID: 267 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 87.090497] Modules linked in: [ 87.091025] CPU: 1 PID: 267 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1 [ 87.093176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 87.096033] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 87.097052] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 87.099190] RSP: 0018:ffff888019d47c00 EFLAGS: 00010282 [ 87.099823] RAX: 0000000000000000 RBX: ffff88800dc2d840 RCX: 0000000000000000 [ 87.100684] RDX: ffff888010240000 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 87.101564] RBP: ffff88800dc2d854 R08: 0000000000000001 R09: 0000000000000000 [ 87.102420] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 87.103282] R13: ffffffff84e223a0 R14: ffff88800dc2d848 R15: ffffffff84d73340 [ 87.104158] FS: 0000555556a30400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 87.105133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.105814] CR2: 00007fdd3f85f6f4 CR3: 0000000017c0c000 CR4: 0000000000350ee0 [ 87.106694] Call Trace: [ 87.107055] [ 87.107351] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 87.107988] ipv4_frags_init_net+0x269/0x440 [ 87.108546] ops_init+0xbb/0x6b0 [ 87.109016] setup_net+0x3d9/0x990 [ 87.109470] ? down_read_killable+0x1d7/0x4e0 [ 87.110064] ? __pfx_setup_net+0x10/0x10 [ 87.110574] ? copy_net_ns+0x17c/0x770 [ 87.111128] copy_net_ns+0x321/0x770 [ 87.111610] create_new_namespaces+0x3f6/0xb30 [ 87.112220] unshare_nsproxy_namespaces+0xc1/0x200 [ 87.112861] ksys_unshare+0x44d/0x8e0 [ 87.113395] ? __pfx_ksys_unshare+0x10/0x10 [ 87.113973] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 87.114687] __x64_sys_unshare+0x31/0x40 [ 87.115248] do_syscall_64+0x3f/0x90 [ 87.115732] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 87.116413] RIP: 0033:0x7f72256c20d7 [ 87.116916] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 87.119155] RSP: 002b:00007fffd7054e38 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 87.120107] RAX: ffffffffffffffda RBX: 00007fffd7055478 RCX: 00007f72256c20d7 [ 87.120984] RDX: 00007f722572c41f RSI: 00007fffd7054dd0 RDI: 0000000040000000 [ 87.121857] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fffd7054be0 [ 87.122765] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f72257d4bf0 [ 87.123680] R13: 00007fffd7054f10 R14: 0000000000000000 R15: 00000000000000f8 [ 87.124621] [ 87.124964] irq event stamp: 8609 [ 87.125396] hardirqs last enabled at (8619): [] __up_console_sem+0x78/0x80 [ 87.126480] hardirqs last disabled at (8630): [] __up_console_sem+0x5d/0x80 [ 87.127567] softirqs last enabled at (8156): [] irq_exit_rcu+0x93/0xc0 [ 87.128639] softirqs last disabled at (8125): [] irq_exit_rcu+0x93/0xc0 [ 87.129697] ---[ end trace 0000000000000000 ]--- [ 87.135308] ------------[ cut here ]------------ [ 87.135968] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 87.137724] WARNING: CPU: 0 PID: 267 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 87.138992] Modules linked in: [ 87.139419] CPU: 0 PID: 267 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1 [ 87.140707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 87.141937] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 87.142598] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 87.144979] RSP: 0018:ffff888019d47c00 EFLAGS: 00010282 [ 87.145620] RAX: 0000000000000000 RBX: ffff888013e2f040 RCX: 0000000000000000 [ 87.146641] RDX: ffff888010240000 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 87.147675] RBP: ffff888013e2f054 R08: 0000000000000001 R09: 0000000000000000 [ 87.148707] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 87.149741] R13: ffffffff84e223a0 R14: ffff888013e2f048 R15: ffffffff84da62e0 [ 87.150772] FS: 0000555556a30400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 87.151996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.152722] CR2: 00007f80d9b51000 CR3: 0000000017c0c000 CR4: 0000000000350ef0 [ 87.153761] Call Trace: [ 87.154281] [ 87.154589] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 87.155367] ipv6_frags_init_net+0x206/0x3c0 [ 87.156080] ops_init+0xbb/0x6b0 [ 87.156527] setup_net+0x3d9/0x990 [ 87.157128] ? down_read_killable+0x1d7/0x4e0 [ 87.157706] ? __pfx_setup_net+0x10/0x10 [ 87.158345] ? copy_net_ns+0x17c/0x770 [ 87.158866] copy_net_ns+0x321/0x770 [ 87.159514] create_new_namespaces+0x3f6/0xb30 [ 87.160300] unshare_nsproxy_namespaces+0xc1/0x200 [ 87.161041] ksys_unshare+0x44d/0x8e0 [ 87.161540] ? __pfx_ksys_unshare+0x10/0x10 [ 87.162255] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 87.163196] __x64_sys_unshare+0x31/0x40 [ 87.163731] do_syscall_64+0x3f/0x90 [ 87.164339] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 87.165131] RIP: 0033:0x7f72256c20d7 [ 87.165606] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 87.167965] RSP: 002b:00007fffd7054e38 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 87.169063] RAX: ffffffffffffffda RBX: 00007fffd7055478 RCX: 00007f72256c20d7 [ 87.170113] RDX: 00007f722572c41f RSI: 00007fffd7054dd0 RDI: 0000000040000000 [ 87.171201] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fffd7054be0 [ 87.172207] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f72257d4bf0 [ 87.173240] R13: 00007fffd7054f10 R14: 0000000000000000 R15: 00000000000000f8 [ 87.174356] [ 87.174660] irq event stamp: 12571 [ 87.175336] hardirqs last enabled at (12705): [] __up_console_sem+0x78/0x80 [ 87.176586] hardirqs last disabled at (12816): [] __up_console_sem+0x5d/0x80 [ 87.177804] softirqs last enabled at (12888): [] irq_exit_rcu+0x93/0xc0 [ 87.179056] softirqs last disabled at (12901): [] irq_exit_rcu+0x93/0xc0 [ 87.180260] ---[ end trace 0000000000000000 ]--- [ 87.182116] ------------[ cut here ]------------ [ 87.182719] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 87.185435] WARNING: CPU: 0 PID: 267 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 87.186611] Modules linked in: [ 87.187142] CPU: 0 PID: 267 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1 [ 87.188385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 87.189426] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 87.190111] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 87.192378] RSP: 0018:ffff888019d47bf0 EFLAGS: 00010286 [ 87.193075] RAX: 0000000000000000 RBX: ffff888013e2ec40 RCX: 0000000000000000 [ 87.193975] RDX: ffff888010240000 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 87.194835] RBP: ffff888013e2ec54 R08: 0000000000000001 R09: 0000000000000000 [ 87.195767] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 87.196674] R13: ffffffff84e223a0 R14: ffff888013e2ec48 R15: ffffffff84daf020 [ 87.197581] FS: 0000555556a30400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 87.198603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.199376] CR2: 00007f80d9b51000 CR3: 0000000017c0c000 CR4: 0000000000350ef0 [ 87.200295] Call Trace: [ 87.200633] [ 87.200964] nf_ct_net_init+0x224/0x3d0 [ 87.201491] ? __pfx_nf_ct_net_init+0x10/0x10 [ 87.202101] ops_init+0xbb/0x6b0 [ 87.202559] setup_net+0x3d9/0x990 [ 87.203068] ? down_read_killable+0x1d7/0x4e0 [ 87.203653] ? __pfx_setup_net+0x10/0x10 [ 87.204201] ? copy_net_ns+0x17c/0x770 [ 87.204716] copy_net_ns+0x321/0x770 [ 87.205232] create_new_namespaces+0x3f6/0xb30 [ 87.205837] unshare_nsproxy_namespaces+0xc1/0x200 [ 87.206496] ksys_unshare+0x44d/0x8e0 [ 87.207037] ? __pfx_ksys_unshare+0x10/0x10 [ 87.207595] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 87.208355] __x64_sys_unshare+0x31/0x40 [ 87.208915] do_syscall_64+0x3f/0x90 [ 87.209398] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 87.210094] RIP: 0033:0x7f72256c20d7 [ 87.210568] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 87.212799] RSP: 002b:00007fffd7054e38 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 87.213781] RAX: ffffffffffffffda RBX: 00007fffd7055478 RCX: 00007f72256c20d7 [ 87.214699] RDX: 00007f722572c41f RSI: 00007fffd7054dd0 RDI: 0000000040000000 [ 87.215609] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fffd7054be0 [ 87.216519] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f72257d4bf0 [ 87.217426] R13: 00007fffd7054f10 R14: 0000000000000000 R15: 00000000000000f8 [ 87.218362] [ 87.218669] irq event stamp: 14209 [ 87.219158] hardirqs last enabled at (14221): [] __up_console_sem+0x78/0x80 [ 87.220260] hardirqs last disabled at (14232): [] __up_console_sem+0x5d/0x80 [ 87.221347] softirqs last enabled at (13782): [] irq_exit_rcu+0x93/0xc0 [ 87.222417] softirqs last disabled at (13771): [] irq_exit_rcu+0x93/0xc0 [ 87.223497] ---[ end trace 0000000000000000 ]--- [ 88.719691] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 90.767541] Bluetooth: hci0: command 0x041b tx timeout [ 92.814962] Bluetooth: hci0: command 0x040f tx timeout executing program [ 94.863008] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 00:32:30 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000007 RCX=0000000000000000 RDX=1ffff11002db6095 RSI=ffffffff8113bbb1 RDI=ffff888016db04a8 RBP=ffff88800ec76570 RSP=ffff888016dbfe98 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000002 R13=ffff888016db0000 R14=ffff88800ec76570 R15=0000000000000001 RIP=ffffffff8113bbd6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f80da622900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f80d9ad85b0 CR3=0000000016410000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=5837fe9dc1c91f3200000000000ae618 XMM01=5e66d9d2f28de3b1934a9e27256700ab XMM02=6b1e99b806172e3b00000000000aea28 XMM03=ac8bc31478ec851100000000000aefa0 XMM04=d35f14e95510c1f600000000000cb578 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=2d0a15b688ddecc000000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff825075f0 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff888019d475e8 R8 =0000000000000001 R9 =ffffed10033a8eae R10=0000000000000003 R11=0000000000000001 R12=0000000000000039 R13=ffffffff87f27bc0 R14=ffffffff87f27c10 R15=ffffffff87f27e78 RIP=ffffffff82507645 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556a30400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdd3f85f6f4 CR3=0000000017c0c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000