Warning: Permanently added '[localhost]:31453' (ECDSA) to the list of known hosts. 2023/05/16 13:34:58 fuzzer started 2023/05/16 13:34:58 dialing manager at localhost:35573 2023/05/16 13:34:58 checking machine... 2023/05/16 13:34:58 checking revisions... syzkaller login: [ 52.803014] kmemleak: Automatic memory scanning thread ended 2023/05/16 13:34:58 testing simple program... [ 52.881267] cgroup: Unknown subsys name 'net' [ 52.980448] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 65.252211] audit: type=1400 audit(1684244111.005:6): avc: denied { execmem } for pid=260 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 66.360310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.361992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.364047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.366706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.368666] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.371525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.599599] ------------[ cut here ]------------ [ 66.600023] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 66.600956] WARNING: CPU: 1 PID: 261 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 66.601535] Modules linked in: [ 66.601758] CPU: 1 PID: 261 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 66.602385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 66.605068] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 66.606817] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 66.608008] RSP: 0018:ffff88801f497c00 EFLAGS: 00010282 [ 66.608360] RAX: 0000000000000000 RBX: ffff8880097ad840 RCX: 0000000000000000 [ 66.608844] RDX: ffff888016401b40 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 66.609357] RBP: ffff8880097ad854 R08: 0000000000000001 R09: 0000000000000000 [ 66.609852] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 66.610364] R13: ffffffff84e223a0 R14: ffff8880097ad848 R15: ffffffff84d73340 [ 66.610866] FS: 0000555556fac400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 66.611440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.611852] CR2: 00007f60eadbe6f4 CR3: 000000000c9f0000 CR4: 0000000000350ee0 [ 66.612367] Call Trace: [ 66.612554] [ 66.612727] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 66.613094] ipv4_frags_init_net+0x269/0x440 [ 66.613420] ops_init+0xbb/0x6b0 [ 66.613669] setup_net+0x3d9/0x990 [ 66.613942] ? down_read_killable+0x1d7/0x4e0 [ 66.614264] ? __pfx_setup_net+0x10/0x10 [ 66.614549] ? copy_net_ns+0x17c/0x770 [ 66.614833] copy_net_ns+0x321/0x770 [ 66.615127] create_new_namespaces+0x3f6/0xb30 [ 66.615468] unshare_nsproxy_namespaces+0xc1/0x200 [ 66.615811] ksys_unshare+0x44d/0x8e0 [ 66.616110] ? __pfx_ksys_unshare+0x10/0x10 [ 66.616428] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 66.616827] __x64_sys_unshare+0x31/0x40 [ 66.617135] do_syscall_64+0x3f/0x90 [ 66.617429] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 66.617794] RIP: 0033:0x7fc78b3d20d7 [ 66.618074] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.619291] RSP: 002b:00007ffc0175f1f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 66.619801] RAX: ffffffffffffffda RBX: 00007ffc0175f838 RCX: 00007fc78b3d20d7 [ 66.620306] RDX: 00007fc78b43c41f RSI: 00007ffc0175f190 RDI: 0000000040000000 [ 66.620788] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc0175efa0 [ 66.621284] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fc78b4e4bf0 [ 66.621772] R13: 00007ffc0175f2d0 R14: 0000000000000000 R15: 00000000000000f8 [ 66.622282] [ 66.622456] irq event stamp: 8937 [ 66.622697] hardirqs last enabled at (8947): [] __up_console_sem+0x78/0x80 [ 66.623297] hardirqs last disabled at (8958): [] __up_console_sem+0x5d/0x80 [ 66.623871] softirqs last enabled at (8442): [] irq_exit_rcu+0x93/0xc0 [ 66.624442] softirqs last disabled at (8417): [] irq_exit_rcu+0x93/0xc0 [ 66.625010] ---[ end trace 0000000000000000 ]--- [ 66.629266] ------------[ cut here ]------------ [ 66.629611] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 66.630526] WARNING: CPU: 1 PID: 261 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 66.631133] Modules linked in: [ 66.631371] CPU: 1 PID: 261 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 66.632035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 66.632592] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 66.632980] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 66.634231] RSP: 0018:ffff88801f497c00 EFLAGS: 00010282 [ 66.634606] RAX: 0000000000000000 RBX: ffff88800ed9fa40 RCX: 0000000000000000 [ 66.635126] RDX: ffff888016401b40 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 66.635630] RBP: ffff88800ed9fa54 R08: 0000000000000001 R09: 0000000000000000 [ 66.636139] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 66.636640] R13: ffffffff84e223a0 R14: ffff88800ed9fa48 R15: ffffffff84da62e0 [ 66.637159] FS: 0000555556fac400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 66.637720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.638147] CR2: 000055e5a03bbeb0 CR3: 000000000c9f0000 CR4: 0000000000350ee0 [ 66.638643] Call Trace: [ 66.638826] [ 66.639011] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 66.639361] ipv6_frags_init_net+0x206/0x3c0 [ 66.639678] ops_init+0xbb/0x6b0 [ 66.639948] setup_net+0x3d9/0x990 [ 66.640208] ? down_read_killable+0x1d7/0x4e0 [ 66.640519] ? __pfx_setup_net+0x10/0x10 [ 66.640810] ? copy_net_ns+0x17c/0x770 [ 66.641114] copy_net_ns+0x321/0x770 [ 66.641394] create_new_namespaces+0x3f6/0xb30 [ 66.641722] unshare_nsproxy_namespaces+0xc1/0x200 [ 66.642094] ksys_unshare+0x44d/0x8e0 [ 66.642370] ? __pfx_ksys_unshare+0x10/0x10 [ 66.642679] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 66.643101] __x64_sys_unshare+0x31/0x40 [ 66.643396] do_syscall_64+0x3f/0x90 [ 66.643668] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 66.644044] RIP: 0033:0x7fc78b3d20d7 [ 66.644307] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.645546] RSP: 002b:00007ffc0175f1f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 66.646103] RAX: ffffffffffffffda RBX: 00007ffc0175f838 RCX: 00007fc78b3d20d7 [ 66.646584] RDX: 00007fc78b43c41f RSI: 00007ffc0175f190 RDI: 0000000040000000 [ 66.647089] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc0175efa0 [ 66.647581] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fc78b4e4bf0 [ 66.648095] R13: 00007ffc0175f2d0 R14: 0000000000000000 R15: 00000000000000f8 [ 66.648599] [ 66.648770] irq event stamp: 10869 [ 66.649034] hardirqs last enabled at (10881): [] __up_console_sem+0x78/0x80 [ 66.649636] hardirqs last disabled at (10890): [] __up_console_sem+0x5d/0x80 [ 66.650244] softirqs last enabled at (10208): [] irq_exit_rcu+0x93/0xc0 [ 66.650821] softirqs last disabled at (10157): [] irq_exit_rcu+0x93/0xc0 [ 66.651420] ---[ end trace 0000000000000000 ]--- [ 66.652191] ------------[ cut here ]------------ [ 66.652524] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 66.653857] WARNING: CPU: 1 PID: 261 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 66.654450] Modules linked in: [ 66.654673] CPU: 1 PID: 261 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 66.655330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 66.655880] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 66.656268] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 66.657522] RSP: 0018:ffff88801f497bf0 EFLAGS: 00010286 [ 66.657884] RAX: 0000000000000000 RBX: ffff88800e45de40 RCX: 0000000000000000 [ 66.658394] RDX: ffff888016401b40 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 66.658880] RBP: ffff88800e45de54 R08: 0000000000000001 R09: 0000000000000000 [ 66.659412] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 66.659891] R13: ffffffff84e223a0 R14: ffff88800e45de48 R15: ffffffff84daf020 [ 66.660402] FS: 0000555556fac400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 66.660962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.661379] CR2: 000055e5a03bbeb0 CR3: 000000000c9f0000 CR4: 0000000000350ee0 [ 66.661854] Call Trace: [ 66.662054] [ 66.662227] nf_ct_net_init+0x224/0x3d0 [ 66.662521] ? __pfx_nf_ct_net_init+0x10/0x10 [ 66.662829] ops_init+0xbb/0x6b0 [ 66.663097] setup_net+0x3d9/0x990 [ 66.663349] ? down_read_killable+0x1d7/0x4e0 [ 66.663661] ? __pfx_setup_net+0x10/0x10 [ 66.663960] ? copy_net_ns+0x17c/0x770 [ 66.664247] copy_net_ns+0x321/0x770 [ 66.664521] create_new_namespaces+0x3f6/0xb30 [ 66.664844] unshare_nsproxy_namespaces+0xc1/0x200 [ 66.665215] ksys_unshare+0x44d/0x8e0 [ 66.665510] ? __pfx_ksys_unshare+0x10/0x10 [ 66.665824] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 66.666241] __x64_sys_unshare+0x31/0x40 [ 66.666537] do_syscall_64+0x3f/0x90 [ 66.666806] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 66.667184] RIP: 0033:0x7fc78b3d20d7 [ 66.667442] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.668674] RSP: 002b:00007ffc0175f1f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 66.669220] RAX: ffffffffffffffda RBX: 00007ffc0175f838 RCX: 00007fc78b3d20d7 [ 66.669722] RDX: 00007fc78b43c41f RSI: 00007ffc0175f190 RDI: 0000000040000000 [ 66.670224] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc0175efa0 [ 66.670715] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fc78b4e4bf0 [ 66.671224] R13: 00007ffc0175f2d0 R14: 0000000000000000 R15: 00000000000000f8 [ 66.671727] [ 66.671898] irq event stamp: 11845 [ 66.672169] hardirqs last enabled at (11857): [] __up_console_sem+0x78/0x80 [ 66.672769] hardirqs last disabled at (11866): [] __up_console_sem+0x5d/0x80 [ 66.673396] softirqs last enabled at (11490): [] irq_exit_rcu+0x93/0xc0 [ 66.673990] softirqs last disabled at (11483): [] irq_exit_rcu+0x93/0xc0 [ 66.674556] ---[ end trace 0000000000000000 ]--- executing program [ 68.443586] Bluetooth: hci0: command 0x0409 tx timeout [ 70.491179] Bluetooth: hci0: command 0x041b tx timeout executing program [ 72.539002] Bluetooth: hci0: command 0x040f tx timeout executing program [ 74.587009] Bluetooth: hci0: command 0x0419 tx timeout VM DIAGNOSIS: 13:35:03 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888019d6a530 RCX=ffff8880172e7918 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888019d6a552 RBP=1ffff11002e5cf1b RSP=ffff8880172e78c8 R8 =0000000000000001 R9 =ffff888019d6a528 R10=ffffffff85d34a17 R11=0000000000000001 R12=ffffffff8560b640 R13=ffffffff814c7585 R14=0000000000000001 R15=ffff888019d69b40 RIP=ffffffff812d8056 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa76b81a900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd7915b080 CR3=000000001f51c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000000000000000ff00 XMM02=ffffffffffffff000000000000ffff00 XMM03=616d2029003a6e616d003b3b385d1b00 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055f2a0525430000055f2a05222f0 XMM06=000055f2a0524350ffffffff00000002 XMM07=00000000000000000000000000000000 XMM08=45525f4b43000068746f6f7465756c62 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff88801f4975c0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff87f27bc0 R14=ffffffff87f27c10 R15=ffffffff87f27e78 RIP=ffffffff825076dd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556fac400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f60eadbe6f4 CR3=000000000c9f0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000