Warning: Permanently added '[localhost]:50729' (ECDSA) to the list of known hosts. 2023/05/17 17:15:09 fuzzer started 2023/05/17 17:15:10 dialing manager at localhost:44319 2023/05/17 17:15:10 checking machine... 2023/05/17 17:15:10 checking revisions... syzkaller login: [ 36.605082] kmemleak: Automatic memory scanning thread ended 2023/05/17 17:15:10 testing simple program... [ 36.657980] cgroup: Unknown subsys name 'net' [ 36.709251] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 50.274766] audit: type=1400 audit(1684343723.876:6): avc: denied { execmem } for pid=257 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 51.411537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.413757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.417007] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.420085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.421688] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.423050] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 51.839696] ------------[ cut here ]------------ [ 51.840573] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 51.842801] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 51.844278] Modules linked in: [ 51.844812] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 51.849802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 51.851155] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 51.851896] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 51.854185] RSP: 0018:ffff88801e0cfc00 EFLAGS: 00010282 [ 51.854875] RAX: 0000000000000000 RBX: ffff88800e71b040 RCX: 0000000000000000 [ 51.855774] RDX: ffff88800e7151c0 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 51.856673] RBP: ffff88800e71b054 R08: 0000000000000001 R09: 0000000000000000 [ 51.857567] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 51.858516] R13: ffffffff84e23fe0 R14: ffff88800e71b048 R15: ffffffff84d74dc0 [ 51.859473] FS: 00005555574ad400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 51.860484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.861220] CR2: 00007fb66f853a80 CR3: 0000000016bce000 CR4: 0000000000350ee0 [ 51.862168] Call Trace: [ 51.862496] [ 51.862797] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 51.863491] ipv4_frags_init_net+0x269/0x440 [ 51.864087] ops_init+0xbb/0x6b0 [ 51.864562] setup_net+0x3d9/0x990 [ 51.865054] ? down_read_killable+0x1d7/0x4e0 [ 51.865627] ? __pfx_setup_net+0x10/0x10 [ 51.866177] ? copy_net_ns+0x17c/0x770 [ 51.866693] copy_net_ns+0x321/0x770 [ 51.867215] create_new_namespaces+0x3f6/0xb30 [ 51.867803] unshare_nsproxy_namespaces+0xc1/0x200 [ 51.868462] ksys_unshare+0x44d/0x8e0 [ 51.868995] ? __pfx_ksys_unshare+0x10/0x10 [ 51.869537] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 51.870276] __x64_sys_unshare+0x31/0x40 [ 51.870794] do_syscall_64+0x3f/0x90 [ 51.871308] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 51.871994] RIP: 0033:0x7f7e19f370d7 [ 51.872483] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 51.874687] RSP: 002b:00007fff079c9c18 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 51.875694] RAX: ffffffffffffffda RBX: 00007fff079ca258 RCX: 00007f7e19f370d7 [ 51.876603] RDX: 00007f7e19fa141f RSI: 00007fff079c9bb0 RDI: 0000000040000000 [ 51.877490] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff079c99c0 [ 51.878379] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f7e1a049bf0 [ 51.879262] R13: 00007fff079c9cf0 R14: 0000000000000000 R15: 00000000000000f8 [ 51.880175] [ 51.880484] irq event stamp: 9227 [ 51.880936] hardirqs last enabled at (9239): [] __up_console_sem+0x78/0x80 [ 51.881993] hardirqs last disabled at (9250): [] __up_console_sem+0x5d/0x80 [ 51.883052] softirqs last enabled at (8790): [] irq_exit_rcu+0x93/0xc0 [ 51.884078] softirqs last disabled at (8773): [] irq_exit_rcu+0x93/0xc0 [ 51.885137] ---[ end trace 0000000000000000 ]--- [ 51.890589] ------------[ cut here ]------------ [ 51.891243] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 51.893049] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 51.894109] Modules linked in: [ 51.894513] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 51.895656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 51.896667] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 51.897339] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 51.899514] RSP: 0018:ffff88801e0cfc00 EFLAGS: 00010282 [ 51.900193] RAX: 0000000000000000 RBX: ffff88800d6ad240 RCX: 0000000000000000 [ 51.901084] RDX: ffff88800e7151c0 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 51.901976] RBP: ffff88800d6ad254 R08: 0000000000000001 R09: 0000000000000000 [ 51.902895] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 51.903806] R13: ffffffff84e23fe0 R14: ffff88800d6ad248 R15: ffffffff84da7d60 [ 51.904711] FS: 00005555574ad400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 51.905698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.906429] CR2: 00007fb66f853a80 CR3: 0000000016bce000 CR4: 0000000000350ee0 [ 51.907307] Call Trace: [ 51.907634] [ 51.907955] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 51.908573] ipv6_frags_init_net+0x206/0x3c0 [ 51.909161] ops_init+0xbb/0x6b0 [ 51.909605] setup_net+0x3d9/0x990 [ 51.910086] ? down_read_killable+0x1d7/0x4e0 [ 51.910659] ? __pfx_setup_net+0x10/0x10 [ 51.911237] ? copy_net_ns+0x17c/0x770 [ 51.911740] copy_net_ns+0x321/0x770 [ 51.912297] create_new_namespaces+0x3f6/0xb30 [ 51.912925] unshare_nsproxy_namespaces+0xc1/0x200 [ 51.913533] ksys_unshare+0x44d/0x8e0 [ 51.914048] ? __pfx_ksys_unshare+0x10/0x10 [ 51.914586] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 51.915322] __x64_sys_unshare+0x31/0x40 [ 51.915861] do_syscall_64+0x3f/0x90 [ 51.916344] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 51.917021] RIP: 0033:0x7f7e19f370d7 [ 51.917482] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 51.919724] RSP: 002b:00007fff079c9c18 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 51.920674] RAX: ffffffffffffffda RBX: 00007fff079ca258 RCX: 00007f7e19f370d7 [ 51.921549] RDX: 00007f7e19fa141f RSI: 00007fff079c9bb0 RDI: 0000000040000000 [ 51.922428] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff079c99c0 [ 51.923301] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f7e1a049bf0 [ 51.924172] R13: 00007fff079c9cf0 R14: 0000000000000000 R15: 00000000000000f8 [ 51.925089] [ 51.925383] irq event stamp: 11235 [ 51.925804] hardirqs last enabled at (11245): [] __up_console_sem+0x78/0x80 [ 51.926916] hardirqs last disabled at (11258): [] __up_console_sem+0x5d/0x80 [ 51.928013] softirqs last enabled at (10796): [] irq_exit_rcu+0x93/0xc0 [ 51.929042] softirqs last disabled at (10791): [] irq_exit_rcu+0x93/0xc0 [ 51.930064] ---[ end trace 0000000000000000 ]--- [ 51.931355] ------------[ cut here ]------------ [ 51.931951] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 51.933858] WARNING: CPU: 1 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 51.934884] Modules linked in: [ 51.935288] CPU: 1 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 51.936426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 51.937434] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 51.938107] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 51.940252] RSP: 0018:ffff88801e0cfbf0 EFLAGS: 00010286 [ 51.940943] RAX: 0000000000000000 RBX: ffff88800d6ac040 RCX: 0000000000000000 [ 51.941778] RDX: ffff88800e7151c0 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 51.942658] RBP: ffff88800d6ac054 R08: 0000000000000001 R09: 0000000000000000 [ 51.943573] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 51.944494] R13: ffffffff84e23fe0 R14: ffff88800d6ac048 R15: ffffffff84db0aa0 [ 51.945365] FS: 00005555574ad400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 51.946353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.947082] CR2: 00007fb66f853a80 CR3: 0000000016bce000 CR4: 0000000000350ee0 [ 51.947955] Call Trace: [ 51.948279] [ 51.948596] nf_ct_net_init+0x224/0x3d0 [ 51.949137] ? __pfx_nf_ct_net_init+0x10/0x10 [ 51.949703] ops_init+0xbb/0x6b0 [ 51.950171] setup_net+0x3d9/0x990 [ 51.950622] ? down_read_killable+0x1d7/0x4e0 [ 51.951211] ? __pfx_setup_net+0x10/0x10 [ 51.951710] ? copy_net_ns+0x17c/0x770 [ 51.952249] copy_net_ns+0x321/0x770 [ 51.952729] create_new_namespaces+0x3f6/0xb30 [ 51.953327] unshare_nsproxy_namespaces+0xc1/0x200 [ 51.953952] ksys_unshare+0x44d/0x8e0 [ 51.954433] ? __pfx_ksys_unshare+0x10/0x10 [ 51.954999] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 51.955693] __x64_sys_unshare+0x31/0x40 [ 51.956222] do_syscall_64+0x3f/0x90 [ 51.956714] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 51.957378] RIP: 0033:0x7f7e19f370d7 [ 51.957863] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 51.959996] RSP: 002b:00007fff079c9c18 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 51.960963] RAX: ffffffffffffffda RBX: 00007fff079ca258 RCX: 00007f7e19f370d7 [ 51.961805] RDX: 00007f7e19fa141f RSI: 00007fff079c9bb0 RDI: 0000000040000000 [ 51.962691] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff079c99c0 [ 51.963573] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f7e1a049bf0 [ 51.964455] R13: 00007fff079c9cf0 R14: 0000000000000000 R15: 00000000000000f8 [ 51.965356] [ 51.965647] irq event stamp: 11985 [ 51.966098] hardirqs last enabled at (11997): [] __up_console_sem+0x78/0x80 [ 51.967140] hardirqs last disabled at (12008): [] __up_console_sem+0x5d/0x80 [ 51.968194] softirqs last enabled at (11894): [] irq_exit_rcu+0x93/0xc0 [ 51.969240] softirqs last disabled at (11887): [] irq_exit_rcu+0x93/0xc0 [ 51.970265] ---[ end trace 0000000000000000 ]--- [ 53.497446] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 55.544894] Bluetooth: hci0: command 0x041b tx timeout executing program [ 57.593918] Bluetooth: hci0: command 0x040f tx timeout [ 59.640868] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 17:15:24 Registers: info registers vcpu 0 RAX=1ffffffff0bbed14 RBX=ffffffff85df68a4 RCX=ffffffff8180ca41 RDX=0000000000000000 RSI=ffffffff8612f562 RDI=ffffffff85df6890 RBP=ffffffff85df68a4 RSP=ffff88806ce099e8 R8 =ffffffff8612f562 R9 =ffffffff860cdea4 R10=0000000000038001 R11=0000000000020ead R12=ffffffff85df68a4 R13=ffffffff85df6890 R14=ffffffff85df68a0 R15=dffffc0000000000 RIP=ffffffff8112fc5f RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007efe86ed2700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb66f820de0 CR3=0000000006970000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2035323a35313a37312037312079614d XMM01=5d3231383434382e31352020205b203a XMM02=75636578652d7a7973203a6d6d6f4320 XMM03=20202020202020572020202020202020 XMM04=6e2d3263722d302e342e362020202020 XMM05=3a6465746e69615420302e726f747563 XMM06=32203a4449502031203a555043205d32 XMM07=6e72656b2072656c6c616b7a79732035 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82507f85 RDI=ffffffff87f2dc00 RBP=ffffffff87f2dbc0 RSP=ffff88801e0cf5f0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=ffffffff87f2dbc0 R14=0000000000000010 R15=ffffffff82507f70 RIP=ffffffff82507fdd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555574ad400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb66f853a80 CR3=0000000016bce000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000