Warning: Permanently added '[localhost]:31036' (ECDSA) to the list of known hosts. 2023/05/17 02:27:23 fuzzer started 2023/05/17 02:27:23 dialing manager at localhost:35573 2023/05/17 02:27:23 checking machine... 2023/05/17 02:27:23 checking revisions... syzkaller login: [ 45.134727] kmemleak: Automatic memory scanning thread ended 2023/05/17 02:27:23 testing simple program... [ 45.210923] cgroup: Unknown subsys name 'net' [ 45.291839] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 58.416168] audit: type=1400 audit(1684290457.241:6): avc: denied { execmem } for pid=260 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 59.553672] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.555512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.561631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.565407] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.567619] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.568937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.970589] ------------[ cut here ]------------ [ 59.971643] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 59.973847] WARNING: CPU: 0 PID: 261 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 59.975312] Modules linked in: executing program [ 59.975924] CPU: 0 PID: 261 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 59.979905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 59.982441] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 59.983301] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 59.986185] RSP: 0018:ffff88801ec57c00 EFLAGS: 00010282 [ 59.987146] RAX: 0000000000000000 RBX: ffff8880094d9440 RCX: 0000000000000000 [ 59.988355] RDX: ffff888019e53680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 59.989581] RBP: ffff8880094d9454 R08: 0000000000000001 R09: 0000000000000000 [ 59.990791] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 59.992040] R13: ffffffff84e223a0 R14: ffff8880094d9448 R15: ffffffff84d73340 [ 59.993271] FS: 000055555609d400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 59.994651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.995678] CR2: 00007f79d20a16f4 CR3: 0000000019f42000 CR4: 0000000000350ef0 [ 59.996893] Call Trace: [ 59.997335] [ 59.997810] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 59.998688] ipv4_frags_init_net+0x269/0x440 [ 59.999521] ops_init+0xbb/0x6b0 [ 60.000132] setup_net+0x3d9/0x990 [ 60.000805] ? down_read_killable+0x1d7/0x4e0 [ 60.001616] ? __pfx_setup_net+0x10/0x10 [ 60.002301] ? copy_net_ns+0x17c/0x770 [ 60.003078] copy_net_ns+0x321/0x770 [ 60.003791] create_new_namespaces+0x3f6/0xb30 [ 60.004632] unshare_nsproxy_namespaces+0xc1/0x200 [ 60.005527] ksys_unshare+0x44d/0x8e0 [ 60.006193] ? __pfx_ksys_unshare+0x10/0x10 [ 60.007098] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 60.008078] __x64_sys_unshare+0x31/0x40 [ 60.008790] do_syscall_64+0x3f/0x90 [ 60.009420] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 60.010230] RIP: 0033:0x7f0d96b610d7 [ 60.010909] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 60.013615] RSP: 002b:00007ffe02a9d2a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 60.014810] RAX: ffffffffffffffda RBX: 00007ffe02a9d8e8 RCX: 00007f0d96b610d7 [ 60.015935] RDX: 00007f0d96bcb41f RSI: 00007ffe02a9d240 RDI: 0000000040000000 [ 60.017033] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffe02a9d050 [ 60.018107] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f0d96c73bf0 [ 60.019267] R13: 00007ffe02a9d380 R14: 0000000000000000 R15: 00000000000000f8 [ 60.020265] [ 60.020627] irq event stamp: 8387 [ 60.021076] hardirqs last enabled at (8397): [] __up_console_sem+0x78/0x80 [ 60.022154] hardirqs last disabled at (8408): [] __up_console_sem+0x5d/0x80 [ 60.023266] softirqs last enabled at (8038): [] irq_exit_rcu+0x93/0xc0 [ 60.024319] softirqs last disabled at (8033): [] irq_exit_rcu+0x93/0xc0 [ 60.025347] ---[ end trace 0000000000000000 ]--- [ 60.030943] ------------[ cut here ]------------ [ 60.031602] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 60.033582] WARNING: CPU: 0 PID: 261 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 60.034666] Modules linked in: [ 60.035105] CPU: 0 PID: 261 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 60.036298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 60.037328] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 60.038021] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 60.040280] RSP: 0018:ffff88801ec57c00 EFLAGS: 00010282 [ 60.040985] RAX: 0000000000000000 RBX: ffff888010385440 RCX: 0000000000000000 [ 60.041913] RDX: ffff888019e53680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 60.042837] RBP: ffff888010385454 R08: 0000000000000001 R09: 0000000000000000 [ 60.043763] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 60.044674] R13: ffffffff84e223a0 R14: ffff888010385448 R15: ffffffff84da62e0 [ 60.045581] FS: 000055555609d400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 60.046580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.047317] CR2: 00007f79d20a16f4 CR3: 0000000019f42000 CR4: 0000000000350ef0 [ 60.048232] Call Trace: [ 60.048612] [ 60.048927] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 60.049608] ipv6_frags_init_net+0x206/0x3c0 [ 60.050178] ops_init+0xbb/0x6b0 [ 60.050678] setup_net+0x3d9/0x990 [ 60.051166] ? down_read_killable+0x1d7/0x4e0 [ 60.051792] ? __pfx_setup_net+0x10/0x10 [ 60.052311] ? copy_net_ns+0x17c/0x770 [ 60.052861] copy_net_ns+0x321/0x770 [ 60.053349] create_new_namespaces+0x3f6/0xb30 [ 60.053989] unshare_nsproxy_namespaces+0xc1/0x200 [ 60.054671] ksys_unshare+0x44d/0x8e0 [ 60.055194] ? __pfx_ksys_unshare+0x10/0x10 [ 60.055801] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 60.056572] __x64_sys_unshare+0x31/0x40 [ 60.057109] do_syscall_64+0x3f/0x90 [ 60.057658] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 60.058309] RIP: 0033:0x7f0d96b610d7 [ 60.058841] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 60.061075] RSP: 002b:00007ffe02a9d2a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 60.062072] RAX: ffffffffffffffda RBX: 00007ffe02a9d8e8 RCX: 00007f0d96b610d7 [ 60.063030] RDX: 00007f0d96bcb41f RSI: 00007ffe02a9d240 RDI: 0000000040000000 [ 60.063974] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffe02a9d050 [ 60.064895] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f0d96c73bf0 [ 60.065811] R13: 00007ffe02a9d380 R14: 0000000000000000 R15: 00000000000000f8 [ 60.066744] [ 60.067080] irq event stamp: 10113 [ 60.067572] hardirqs last enabled at (10125): [] __up_console_sem+0x78/0x80 [ 60.068666] hardirqs last disabled at (10136): [] __up_console_sem+0x5d/0x80 [ 60.069777] softirqs last enabled at (9986): [] irq_exit_rcu+0x93/0xc0 [ 60.070853] softirqs last disabled at (9981): [] irq_exit_rcu+0x93/0xc0 [ 60.071922] ---[ end trace 0000000000000000 ]--- [ 60.073304] ------------[ cut here ]------------ [ 60.073977] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 60.076133] WARNING: CPU: 0 PID: 261 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 60.077272] Modules linked in: [ 60.077751] CPU: 0 PID: 261 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 60.078993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 60.080075] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 60.080799] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 60.083108] RSP: 0018:ffff88801ec57bf0 EFLAGS: 00010286 [ 60.083842] RAX: 0000000000000000 RBX: ffff888010384e40 RCX: 0000000000000000 [ 60.084798] RDX: ffff888019e53680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 60.085757] RBP: ffff888010384e54 R08: 0000000000000001 R09: 0000000000000000 [ 60.086703] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 60.087674] R13: ffffffff84e223a0 R14: ffff888010384e48 R15: ffffffff84daf020 [ 60.088629] FS: 000055555609d400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 60.089694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.090492] CR2: 00007f79d20a16f4 CR3: 0000000019f42000 CR4: 0000000000350ef0 [ 60.091441] Call Trace: [ 60.091794] [ 60.092121] nf_ct_net_init+0x224/0x3d0 [ 60.092726] ? __pfx_nf_ct_net_init+0x10/0x10 [ 60.093335] ops_init+0xbb/0x6b0 [ 60.093841] setup_net+0x3d9/0x990 [ 60.094327] ? down_read_killable+0x1d7/0x4e0 [ 60.095000] ? __pfx_setup_net+0x10/0x10 [ 60.095585] ? copy_net_ns+0x17c/0x770 [ 60.096128] copy_net_ns+0x321/0x770 [ 60.096679] create_new_namespaces+0x3f6/0xb30 [ 60.097304] unshare_nsproxy_namespaces+0xc1/0x200 [ 60.098006] ksys_unshare+0x44d/0x8e0 [ 60.098574] ? __pfx_ksys_unshare+0x10/0x10 [ 60.099180] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 60.099982] __x64_sys_unshare+0x31/0x40 [ 60.100577] do_syscall_64+0x3f/0x90 [ 60.101084] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 60.101817] RIP: 0033:0x7f0d96b610d7 [ 60.102313] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 60.104659] RSP: 002b:00007ffe02a9d2a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 60.105682] RAX: ffffffffffffffda RBX: 00007ffe02a9d8e8 RCX: 00007f0d96b610d7 [ 60.106638] RDX: 00007f0d96bcb41f RSI: 00007ffe02a9d240 RDI: 0000000040000000 [ 60.107600] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffe02a9d050 [ 60.108551] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f0d96c73bf0 [ 60.109516] R13: 00007ffe02a9d380 R14: 0000000000000000 R15: 00000000000000f8 [ 60.110489] [ 60.110812] irq event stamp: 10867 [ 60.111308] hardirqs last enabled at (10877): [] __up_console_sem+0x78/0x80 [ 60.112450] hardirqs last disabled at (10888): [] __up_console_sem+0x5d/0x80 [ 60.113593] softirqs last enabled at (9986): [] irq_exit_rcu+0x93/0xc0 [ 60.114689] softirqs last disabled at (9981): [] irq_exit_rcu+0x93/0xc0 [ 60.115795] ---[ end trace 0000000000000000 ]--- [ 61.639176] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 63.686442] Bluetooth: hci0: command 0x041b tx timeout [ 65.734448] Bluetooth: hci0: command 0x040f tx timeout executing program [ 67.782485] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 02:27:37 Registers: info registers vcpu 0 RAX=000000000000009d RBX=0000000000000000 RCX=0000000000000100 RDX=ffffc90000660000 RSI=ffff88800c428e70 RDI=ffff88800c429040 RBP=ffff88800c429428 RSP=ffff88806ce09ca0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000004e20 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff82fee127 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555609d400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f79d20a16f4 CR3=0000000019f42000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000335d7 RBX=0000000000000001 RCX=ffffffff844c4a0e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81288625 RBP=dffffc0000000000 RSP=ffff888008dcfe68 R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001 R12=ffffffff85d34a10 R13=1ffff110011b9fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844c599f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f11d6673220 CR3=000000000ec7e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=8f28c95890eccd05486b909f0b16d7d8 XMM02=a3b88befdfe48002d6884e4edcef79ba XMM03=a3380af50348bfea52af4f02a87d7095 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=ff9d753ff7ff3ff7fe7f9ff3b7ff77d5 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000