Warning: Permanently added '[localhost]:57148' (ECDSA) to the list of known hosts. 2023/05/16 14:00:55 fuzzer started 2023/05/16 14:00:56 dialing manager at localhost:35573 2023/05/16 14:00:56 checking machine... 2023/05/16 14:00:56 checking revisions... syzkaller login: [ 44.483346] kmemleak: Automatic memory scanning thread ended 2023/05/16 14:00:56 testing simple program... [ 44.549152] cgroup: Unknown subsys name 'net' [ 44.632418] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 57.335589] audit: type=1400 audit(1684245669.025:6): avc: denied { execmem } for pid=259 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 58.473521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.475878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.477602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.480125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.481931] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.484296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.898863] ------------[ cut here ]------------ [ 58.899540] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 58.901208] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 58.902317] Modules linked in: [ 58.902732] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 58.907746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 58.908793] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 58.909470] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 58.911691] RSP: 0018:ffff888015ab7c00 EFLAGS: 00010282 [ 58.912383] RAX: 0000000000000000 RBX: ffff88800e5c5440 RCX: 0000000000000000 [ 58.913322] RDX: ffff88800f9fb680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 58.914232] RBP: ffff88800e5c5454 R08: 0000000000000001 R09: 0000000000000000 [ 58.915147] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 58.916062] R13: ffffffff84e223a0 R14: ffff88800e5c5448 R15: ffffffff84d73340 [ 58.916978] FS: 0000555556a14400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 58.918003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.918724] CR2: 00007f0150a276f4 CR3: 0000000018f6c000 CR4: 0000000000350ef0 [ 58.919631] Call Trace: [ 58.919988] [ 58.920291] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 58.920961] ipv4_frags_init_net+0x269/0x440 [ 58.921526] ops_init+0xbb/0x6b0 [ 58.922008] setup_net+0x3d9/0x990 [ 58.922469] ? down_read_killable+0x1d7/0x4e0 [ 58.923074] ? __pfx_setup_net+0x10/0x10 [ 58.923586] ? copy_net_ns+0x17c/0x770 [ 58.924125] copy_net_ns+0x321/0x770 [ 58.924614] create_new_namespaces+0x3f6/0xb30 [ 58.925249] unshare_nsproxy_namespaces+0xc1/0x200 [ 58.925897] ksys_unshare+0x44d/0x8e0 [ 58.926395] ? __pfx_ksys_unshare+0x10/0x10 [ 58.926983] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 58.927692] __x64_sys_unshare+0x31/0x40 [ 58.928250] do_syscall_64+0x3f/0x90 [ 58.928731] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 58.929428] RIP: 0033:0x7f4503ebc0d7 [ 58.929921] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 58.932179] RSP: 002b:00007ffc86418398 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 58.933155] RAX: ffffffffffffffda RBX: 00007ffc864189d8 RCX: 00007f4503ebc0d7 [ 58.934064] RDX: 00007f4503f2641f RSI: 00007ffc86418330 RDI: 0000000040000000 [ 58.934970] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc86418140 [ 58.935890] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f4503fcebf0 [ 58.936765] R13: 00007ffc86418470 R14: 0000000000000000 R15: 00000000000000f8 [ 58.937689] [ 58.938022] irq event stamp: 8669 [ 58.938452] hardirqs last enabled at (8679): [] __up_console_sem+0x78/0x80 [ 58.939527] hardirqs last disabled at (8690): [] __up_console_sem+0x5d/0x80 [ 58.940604] softirqs last enabled at (7904): [] irq_exit_rcu+0x93/0xc0 [ 58.941659] softirqs last disabled at (7899): [] irq_exit_rcu+0x93/0xc0 [ 58.942705] ---[ end trace 0000000000000000 ]--- [ 58.948660] ------------[ cut here ]------------ [ 58.949337] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 58.951023] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 58.952098] Modules linked in: [ 58.952515] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 58.953716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 58.954734] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 58.955416] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 58.957604] RSP: 0018:ffff888015ab7c00 EFLAGS: 00010282 [ 58.958294] RAX: 0000000000000000 RBX: ffff88800d6f5640 RCX: 0000000000000000 [ 58.959176] RDX: ffff88800f9fb680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 58.960086] RBP: ffff88800d6f5654 R08: 0000000000000001 R09: 0000000000000000 [ 58.960982] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 58.961880] R13: ffffffff84e223a0 R14: ffff88800d6f5648 R15: ffffffff84da62e0 [ 58.962730] FS: 0000555556a14400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 58.963733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.964469] CR2: 00007f0150a276f4 CR3: 0000000018f6c000 CR4: 0000000000350ef0 [ 58.965359] Call Trace: [ 58.965686] [ 58.966016] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 58.966629] ipv6_frags_init_net+0x206/0x3c0 [ 58.967212] ops_init+0xbb/0x6b0 [ 58.967655] setup_net+0x3d9/0x990 [ 58.968136] ? down_read_killable+0x1d7/0x4e0 [ 58.968702] ? __pfx_setup_net+0x10/0x10 [ 58.969253] ? copy_net_ns+0x17c/0x770 [ 58.969761] copy_net_ns+0x321/0x770 [ 58.970273] create_new_namespaces+0x3f6/0xb30 [ 58.970887] unshare_nsproxy_namespaces+0xc1/0x200 [ 58.971504] ksys_unshare+0x44d/0x8e0 [ 58.972029] ? __pfx_ksys_unshare+0x10/0x10 [ 58.972573] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 58.973323] __x64_sys_unshare+0x31/0x40 [ 58.973866] do_syscall_64+0x3f/0x90 [ 58.974343] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 58.975011] RIP: 0033:0x7f4503ebc0d7 [ 58.975471] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 58.977644] RSP: 002b:00007ffc86418398 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 58.978596] RAX: ffffffffffffffda RBX: 00007ffc864189d8 RCX: 00007f4503ebc0d7 [ 58.979475] RDX: 00007f4503f2641f RSI: 00007ffc86418330 RDI: 0000000040000000 [ 58.980364] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc86418140 [ 58.981272] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f4503fcebf0 [ 58.982155] R13: 00007ffc86418470 R14: 0000000000000000 R15: 00000000000000f8 [ 58.983066] [ 58.983367] irq event stamp: 10371 [ 58.983799] hardirqs last enabled at (10381): [] __up_console_sem+0x78/0x80 [ 58.984897] hardirqs last disabled at (10394): [] __up_console_sem+0x5d/0x80 [ 58.985976] softirqs last enabled at (9442): [] irq_exit_rcu+0x93/0xc0 [ 58.987055] softirqs last disabled at (9423): [] irq_exit_rcu+0x93/0xc0 [ 58.988131] ---[ end trace 0000000000000000 ]--- [ 58.989486] ------------[ cut here ]------------ [ 58.990100] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 58.992010] WARNING: CPU: 0 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 58.993062] Modules linked in: [ 58.993468] CPU: 0 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 58.994609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 58.995632] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 58.996302] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 58.998466] RSP: 0018:ffff888015ab7bf0 EFLAGS: 00010286 [ 58.999146] RAX: 0000000000000000 RBX: ffff88800d6f4c40 RCX: 0000000000000000 [ 59.000024] RDX: ffff88800f9fb680 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 59.000942] RBP: ffff88800d6f4c54 R08: 0000000000000001 R09: 0000000000000000 [ 59.001800] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 59.002915] R13: ffffffff84e223a0 R14: ffff88800d6f4c48 R15: ffffffff84daf020 [ 59.004014] FS: 0000555556a14400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 59.005235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.006128] CR2: 00007f0150a276f4 CR3: 0000000018f6c000 CR4: 0000000000350ef0 [ 59.007228] Call Trace: [ 59.007625] [ 59.008031] nf_ct_net_init+0x224/0x3d0 [ 59.008654] ? __pfx_nf_ct_net_init+0x10/0x10 [ 59.009402] ops_init+0xbb/0x6b0 [ 59.009982] setup_net+0x3d9/0x990 [ 59.010535] ? down_read_killable+0x1d7/0x4e0 [ 59.011259] ? __pfx_setup_net+0x10/0x10 [ 59.011910] ? copy_net_ns+0x17c/0x770 [ 59.012527] copy_net_ns+0x321/0x770 [ 59.013164] create_new_namespaces+0x3f6/0xb30 [ 59.013907] unshare_nsproxy_namespaces+0xc1/0x200 [ 59.014662] ksys_unshare+0x44d/0x8e0 [ 59.015295] ? __pfx_ksys_unshare+0x10/0x10 [ 59.015999] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 59.016918] __x64_sys_unshare+0x31/0x40 [ 59.017550] do_syscall_64+0x3f/0x90 [ 59.018172] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 59.018983] RIP: 0033:0x7f4503ebc0d7 [ 59.019550] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 59.022518] RSP: 002b:00007ffc86418398 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 59.023718] RAX: ffffffffffffffda RBX: 00007ffc864189d8 RCX: 00007f4503ebc0d7 [ 59.024826] RDX: 00007f4503f2641f RSI: 00007ffc86418330 RDI: 0000000040000000 [ 59.025921] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffc86418140 [ 59.027004] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f4503fcebf0 [ 59.028086] R13: 00007ffc86418470 R14: 0000000000000000 R15: 00000000000000f8 [ 59.029199] [ 59.029563] irq event stamp: 11155 [ 59.030125] hardirqs last enabled at (11167): [] __up_console_sem+0x78/0x80 [ 59.031427] hardirqs last disabled at (11178): [] __up_console_sem+0x5d/0x80 [ 59.032723] softirqs last enabled at (11078): [] irq_exit_rcu+0x93/0xc0 [ 59.034013] softirqs last disabled at (11065): [] irq_exit_rcu+0x93/0xc0 [ 59.035273] ---[ end trace 0000000000000000 ]--- executing program [ 60.556641] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 62.603987] Bluetooth: hci0: command 0x041b tx timeout [ 64.651933] Bluetooth: hci0: command 0x040f tx timeout executing program [ 66.699911] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 14:01:10 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff888015ab75f0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87f27bc0 R14=0000000000000010 R15=ffffffff82507670 RIP=ffffffff825076dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556a14400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0150a276f4 CR3=0000000018f6c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000035e6f RBX=0000000000000001 RCX=ffffffff844c4a0e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81288625 RBP=dffffc0000000000 RSP=ffff888008dcfe68 R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001 R12=ffffffff85d34a10 R13=1ffff110011b9fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844c599f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1b56a79370 CR3=0000000015ae2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2030313a31303a34312036312079614d XMM01=5d3233373230392e38352020205b203a XMM02=75636578652d7a7973203a6d6d6f4320 XMM03=20202020202020572020202020202020 XMM04=6e2d3263722d302e342e362020202020 XMM05=3a6465746e69615420302e726f747563 XMM06=32203a4449502030203a555043205d32 XMM07=6e72656b2072656c6c616b7a79732030 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000