Warning: Permanently added '[localhost]:26172' (ECDSA) to the list of known hosts. 2023/05/17 01:53:24 fuzzer started 2023/05/17 01:53:25 dialing manager at localhost:35573 2023/05/17 01:53:25 checking machine... 2023/05/17 01:53:25 checking revisions... syzkaller login: [ 88.210505] kmemleak: Automatic memory scanning thread ended 2023/05/17 01:53:25 testing simple program... [ 88.285332] cgroup: Unknown subsys name 'net' [ 88.372601] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 101.781012] audit: type=1400 audit(1684288419.043:6): avc: denied { execmem } for pid=266 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 102.924479] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.926850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.928474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.931207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.932659] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.933803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 103.313919] ------------[ cut here ]------------ [ 103.314670] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 103.316731] WARNING: CPU: 1 PID: 267 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 103.318169] Modules linked in: [ 103.318680] CPU: 1 PID: 267 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1 [ 103.321237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 103.324388] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 103.326053] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 103.328813] RSP: 0018:ffff88801eeefc00 EFLAGS: 00010282 [ 103.329626] RAX: 0000000000000000 RBX: ffff888014560840 RCX: 0000000000000000 [ 103.330666] RDX: ffff888018293680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 103.331713] RBP: ffff888014560854 R08: 0000000000000001 R09: 0000000000000000 [ 103.332758] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 103.333799] R13: ffffffff84e223a0 R14: ffff888014560848 R15: ffffffff84d73340 [ 103.334839] FS: 0000555556cd1400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 103.336030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.336903] CR2: 00007f6dc21156f4 CR3: 000000001452e000 CR4: 0000000000350ee0 [ 103.338195] Call Trace: [ 103.338579] [ 103.338970] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 103.339703] ipv4_frags_init_net+0x269/0x440 [ 103.340389] ops_init+0xbb/0x6b0 [ 103.340940] setup_net+0x3d9/0x990 [ 103.341468] ? down_read_killable+0x1d7/0x4e0 [ 103.342159] ? __pfx_setup_net+0x10/0x10 [ 103.342753] ? copy_net_ns+0x17c/0x770 [ 103.343390] copy_net_ns+0x321/0x770 [ 103.343983] create_new_namespaces+0x3f6/0xb30 [ 103.344665] unshare_nsproxy_namespaces+0xc1/0x200 [ 103.345414] ksys_unshare+0x44d/0x8e0 [ 103.346016] ? __pfx_ksys_unshare+0x10/0x10 [ 103.346655] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 103.347541] __x64_sys_unshare+0x31/0x40 [ 103.348178] do_syscall_64+0x3f/0x90 [ 103.348730] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 103.349511] RIP: 0033:0x7f56d870b0d7 [ 103.350089] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 103.352644] RSP: 002b:00007ffc869d1b58 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 103.353761] RAX: ffffffffffffffda RBX: 00007ffc869d2198 RCX: 00007f56d870b0d7 [ 103.354794] RDX: 00007f56d877541f RSI: 00007ffc869d1af0 RDI: 0000000040000000 [ 103.355857] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc869d1900 [ 103.356911] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f56d881dbf0 [ 103.357949] R13: 00007ffc869d1c30 R14: 0000000000000000 R15: 00000000000000f8 [ 103.359008] [ 103.359371] irq event stamp: 8491 [ 103.359907] hardirqs last enabled at (8503): [] __up_console_sem+0x78/0x80 [ 103.361145] hardirqs last disabled at (8514): [] __up_console_sem+0x5d/0x80 [ 103.362377] softirqs last enabled at (8192): [] irq_exit_rcu+0x93/0xc0 [ 103.363607] softirqs last disabled at (8181): [] irq_exit_rcu+0x93/0xc0 [ 103.364806] ---[ end trace 0000000000000000 ]--- [ 103.371249] ------------[ cut here ]------------ [ 103.371965] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 103.373898] WARNING: CPU: 1 PID: 267 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 103.374893] Modules linked in: [ 103.375284] CPU: 1 PID: 267 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1 [ 103.376475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 103.377513] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 103.378189] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 103.380389] RSP: 0018:ffff88801eeefc00 EFLAGS: 00010282 [ 103.381083] RAX: 0000000000000000 RBX: ffff888013a8a040 RCX: 0000000000000000 [ 103.381965] RDX: ffff888018293680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 103.382824] RBP: ffff888013a8a054 R08: 0000000000000001 R09: 0000000000000000 [ 103.383730] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 103.384618] R13: ffffffff84e223a0 R14: ffff888013a8a048 R15: ffffffff84da62e0 [ 103.385524] FS: 0000555556cd1400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 103.386514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.387272] CR2: 00007f6dc21156f4 CR3: 000000001452e000 CR4: 0000000000350ee0 [ 103.388177] Call Trace: [ 103.388504] [ 103.388807] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 103.389450] ipv6_frags_init_net+0x206/0x3c0 [ 103.390035] ops_init+0xbb/0x6b0 [ 103.390487] setup_net+0x3d9/0x990 [ 103.390986] ? down_read_killable+0x1d7/0x4e0 [ 103.391577] ? __pfx_setup_net+0x10/0x10 [ 103.392125] ? copy_net_ns+0x17c/0x770 [ 103.392634] copy_net_ns+0x321/0x770 [ 103.393154] create_new_namespaces+0x3f6/0xb30 [ 103.393748] unshare_nsproxy_namespaces+0xc1/0x200 [ 103.394402] ksys_unshare+0x44d/0x8e0 [ 103.394919] ? __pfx_ksys_unshare+0x10/0x10 [ 103.395482] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 103.396227] __x64_sys_unshare+0x31/0x40 [ 103.396755] do_syscall_64+0x3f/0x90 [ 103.397258] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 103.397947] RIP: 0033:0x7f56d870b0d7 [ 103.398421] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 103.400635] RSP: 002b:00007ffc869d1b58 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 103.401581] RAX: ffffffffffffffda RBX: 00007ffc869d2198 RCX: 00007f56d870b0d7 [ 103.402518] RDX: 00007f56d877541f RSI: 00007ffc869d1af0 RDI: 0000000040000000 [ 103.403427] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc869d1900 [ 103.404319] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f56d881dbf0 [ 103.405211] R13: 00007ffc869d1c30 R14: 0000000000000000 R15: 00000000000000f8 [ 103.406136] [ 103.406435] irq event stamp: 10345 [ 103.406897] hardirqs last enabled at (10357): [] __up_console_sem+0x78/0x80 [ 103.407984] hardirqs last disabled at (10368): [] __up_console_sem+0x5d/0x80 [ 103.409062] softirqs last enabled at (9266): [] netlink_insert+0x187/0x1820 [ 103.410156] softirqs last disabled at (9264): [] release_sock+0x1f/0x1b0 [ 103.411225] ---[ end trace 0000000000000000 ]--- [ 103.412564] ------------[ cut here ]------------ [ 103.413929] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 103.416009] WARNING: CPU: 1 PID: 267 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 103.417215] Modules linked in: [ 103.417632] CPU: 1 PID: 267 Comm: syz-executor.0 Tainted: G W L 6.4.0-rc2-next-20230516 #1 [ 103.418971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 103.420147] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 103.420801] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 103.423194] RSP: 0018:ffff88801eeefbf0 EFLAGS: 00010286 [ 103.423854] RAX: 0000000000000000 RBX: ffff888013a92240 RCX: 0000000000000000 [ 103.424837] RDX: ffff888018293680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 103.425842] RBP: ffff888013a92254 R08: 0000000000000001 R09: 0000000000000000 [ 103.426736] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 103.427658] R13: ffffffff84e223a0 R14: ffff888013a92248 R15: ffffffff84daf020 [ 103.428550] FS: 0000555556cd1400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 103.429563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.430310] CR2: 00007f6dc21156f4 CR3: 000000001452e000 CR4: 0000000000350ee0 [ 103.431221] Call Trace: [ 103.431552] [ 103.431856] nf_ct_net_init+0x224/0x3d0 [ 103.432404] ? __pfx_nf_ct_net_init+0x10/0x10 [ 103.433008] ops_init+0xbb/0x6b0 [ 103.433452] setup_net+0x3d9/0x990 [ 103.433940] ? down_read_killable+0x1d7/0x4e0 [ 103.434506] ? __pfx_setup_net+0x10/0x10 [ 103.435042] ? copy_net_ns+0x17c/0x770 [ 103.435571] copy_net_ns+0x321/0x770 [ 103.436085] create_new_namespaces+0x3f6/0xb30 [ 103.436680] unshare_nsproxy_namespaces+0xc1/0x200 [ 103.437337] ksys_unshare+0x44d/0x8e0 [ 103.437831] ? __pfx_ksys_unshare+0x10/0x10 [ 103.438425] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 103.439213] __x64_sys_unshare+0x31/0x40 [ 103.439759] do_syscall_64+0x3f/0x90 [ 103.440278] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 103.440948] RIP: 0033:0x7f56d870b0d7 [ 103.441420] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 103.443638] RSP: 002b:00007ffc869d1b58 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 103.444592] RAX: ffffffffffffffda RBX: 00007ffc869d2198 RCX: 00007f56d870b0d7 [ 103.445478] RDX: 00007f56d877541f RSI: 00007ffc869d1af0 RDI: 0000000040000000 [ 103.446367] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc869d1900 [ 103.447274] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f56d881dbf0 [ 103.448167] R13: 00007ffc869d1c30 R14: 0000000000000000 R15: 00000000000000f8 [ 103.449088] [ 103.449395] irq event stamp: 11811 [ 103.449834] hardirqs last enabled at (11821): [] __up_console_sem+0x78/0x80 [ 103.450939] hardirqs last disabled at (11834): [] __up_console_sem+0x5d/0x80 [ 103.452022] softirqs last enabled at (11472): [] irq_exit_rcu+0x93/0xc0 [ 103.453068] softirqs last disabled at (11467): [] irq_exit_rcu+0x93/0xc0 [ 103.454120] ---[ end trace 0000000000000000 ]--- [ 105.000529] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 107.047950] Bluetooth: hci0: command 0x041b tx timeout executing program [ 109.095938] Bluetooth: hci0: command 0x040f tx timeout [ 111.143925] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 01:52:57 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff856527a0 RCX=ffffffff814c74b1 RDX=1ffff11002b4db75 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff88800e1278f8 R8 =ffff888015a6dbd2 R9 =fffffbfff0ef2d38 R10=ffffffff877969c7 R11=0000000000000001 R12=00007f62bcd7ec64 R13=0000000000000000 R14=ffff888015a6d1c0 R15=0000000000000cc0 RIP=ffffffff814bf418 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f62bc4c5900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f62bb8cb290 CR3=000000000ef5a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=ee7b13304f1677a3000000000013faa0 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=b0bc129ed431632900000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff88801eeef5e0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87f27bc0 R14=0000000000000010 R15=ffffffff82507670 RIP=ffffffff825076dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556cd1400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6dc21156f4 CR3=000000001452e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000