Warning: Permanently added '[localhost]:49826' (ECDSA) to the list of known hosts.
2023/05/16 14:12:00 fuzzer started
2023/05/16 14:12:01 dialing manager at localhost:35573
2023/05/16 14:12:01 checking machine...
2023/05/16 14:12:01 checking revisions...
syzkaller login: [ 53.553614] kmemleak: Automatic memory scanning thread ended
2023/05/16 14:12:01 testing simple program...
[ 53.622853] cgroup: Unknown subsys name 'net'
[ 53.693472] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
[ 65.609674] audit: type=1400 audit(1684246333.394:6): avc: denied { execmem } for pid=258 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 66.710036] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 66.711926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 66.714657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 66.718185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 66.719581] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 66.722246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 67.115291] ------------[ cut here ]------------
[ 67.116525] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
[ 67.118455] WARNING: CPU: 0 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 67.119554] Modules linked in:
[ 67.120001] CPU: 0 PID: 259 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 67.124688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 67.125745] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 67.126458] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 67.128698] RSP: 0018:ffff888018217c00 EFLAGS: 00010282
[ 67.129401] RAX: 0000000000000000 RBX: ffff88800e600840 RCX: 0000000000000000
[ 67.130308] RDX: ffff888016c33680 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 67.131220] RBP: ffff88800e600854 R08: 0000000000000001 R09: 0000000000000000
[ 67.132164] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000
[ 67.133079] R13: ffffffff84e223a0 R14: ffff88800e600848 R15: ffffffff84d73340
[ 67.133993] FS: 000055555639b400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 67.135018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 67.135744] CR2: 00007f52999256f4 CR3: 000000000e5fe000 CR4: 0000000000350ef0
[ 67.136686] Call Trace:
[ 67.137051]
[ 67.137357] ? __pfx_ipv4_frags_init_net+0x10/0x10
[ 67.138005] ipv4_frags_init_net+0x269/0x440
[ 67.138575] ops_init+0xbb/0x6b0
[ 67.139058] setup_net+0x3d9/0x990
[ 67.139524] ? down_read_killable+0x1d7/0x4e0
[ 67.140141] ? __pfx_setup_net+0x10/0x10
[ 67.140660] ? copy_net_ns+0x17c/0x770
[ 67.141201] copy_net_ns+0x321/0x770
[ 67.141687] create_new_namespaces+0x3f6/0xb30
[ 67.142316] unshare_nsproxy_namespaces+0xc1/0x200
[ 67.142976] ksys_unshare+0x44d/0x8e0
[ 67.143483] ? __pfx_ksys_unshare+0x10/0x10
[ 67.144090] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 67.144818] __x64_sys_unshare+0x31/0x40
[ 67.145380] do_syscall_64+0x3f/0x90
[ 67.145863] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 67.146549] RIP: 0033:0x7f9ebd3df0d7
[ 67.147056] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 67.149281] RSP: 002b:00007ffecc6134d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 67.150261] RAX: ffffffffffffffda RBX: 00007ffecc613b18 RCX: 00007f9ebd3df0d7
[ 67.151167] RDX: 00007f9ebd44941f RSI: 00007ffecc613470 RDI: 0000000040000000
[ 67.152107] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffecc613280
[ 67.153014] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f9ebd4f1bf0
[ 67.153887] R13: 00007ffecc6135b0 R14: 0000000000000000 R15: 00000000000000f8
[ 67.154813]
[ 67.155147] irq event stamp: 8847
[ 67.155583] hardirqs last enabled at (8857): [] __up_console_sem+0x78/0x80
[ 67.156674] hardirqs last disabled at (8868): [] __up_console_sem+0x5d/0x80
[ 67.157752] softirqs last enabled at (8472): [] irq_exit_rcu+0x93/0xc0
[ 67.158813] softirqs last disabled at (8467): [] irq_exit_rcu+0x93/0xc0
[ 67.159866] ---[ end trace 0000000000000000 ]---
[ 67.165224] ------------[ cut here ]------------
[ 67.165824] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused
[ 67.167576] WARNING: CPU: 0 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 67.168691] Modules linked in:
[ 67.169140] CPU: 0 PID: 259 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 67.170322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 67.171363] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 67.172065] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 67.174297] RSP: 0018:ffff888018217c00 EFLAGS: 00010282
[ 67.174998] RAX: 0000000000000000 RBX: ffff888015d6b640 RCX: 0000000000000000
[ 67.175924] RDX: ffff888016c33680 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 67.176846] RBP: ffff888015d6b654 R08: 0000000000000001 R09: 0000000000000000
[ 67.177756] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 67.178673] R13: ffffffff84e223a0 R14: ffff888015d6b648 R15: ffffffff84da62e0
[ 67.179601] FS: 000055555639b400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 67.180645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 67.181405] CR2: 00007f52999256f4 CR3: 000000000e5fe000 CR4: 0000000000350ef0
[ 67.182318] Call Trace:
[ 67.182651]
[ 67.182980] ? __pfx_ipv6_frags_init_net+0x10/0x10
[ 67.183656] ipv6_frags_init_net+0x206/0x3c0
[ 67.184314] ops_init+0xbb/0x6b0
[ 67.184796] setup_net+0x3d9/0x990
[ 67.185308] ? down_read_killable+0x1d7/0x4e0
[ 67.185918] ? __pfx_setup_net+0x10/0x10
[ 67.186505] ? copy_net_ns+0x17c/0x770
[ 67.187074] copy_net_ns+0x321/0x770
[ 67.187598] create_new_namespaces+0x3f6/0xb30
[ 67.188270] unshare_nsproxy_namespaces+0xc1/0x200
[ 67.188974] ksys_unshare+0x44d/0x8e0
[ 67.189504] ? __pfx_ksys_unshare+0x10/0x10
[ 67.190120] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 67.190902] __x64_sys_unshare+0x31/0x40
[ 67.191488] do_syscall_64+0x3f/0x90
[ 67.192053] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 67.192755] RIP: 0033:0x7f9ebd3df0d7
[ 67.193297] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 67.195697] RSP: 002b:00007ffecc6134d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 67.196811] RAX: ffffffffffffffda RBX: 00007ffecc613b18 RCX: 00007f9ebd3df0d7
[ 67.197802] RDX: 00007f9ebd44941f RSI: 00007ffecc613470 RDI: 0000000040000000
[ 67.198773] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffecc613280
[ 67.199747] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f9ebd4f1bf0
[ 67.200753] R13: 00007ffecc6135b0 R14: 0000000000000000 R15: 00000000000000f8
[ 67.201744]
[ 67.202094] irq event stamp: 10805
[ 67.202569] hardirqs last enabled at (10815): [] __up_console_sem+0x78/0x80
[ 67.203733] hardirqs last disabled at (10826): [] __up_console_sem+0x5d/0x80
[ 67.204954] softirqs last enabled at (10844): [] irq_exit_rcu+0x93/0xc0
[ 67.206088] softirqs last disabled at (10835): [] irq_exit_rcu+0x93/0xc0
[ 67.207224] ---[ end trace 0000000000000000 ]---
[ 67.209426] ------------[ cut here ]------------
[ 67.210081] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused
[ 67.212171] WARNING: CPU: 0 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 67.213310] Modules linked in:
[ 67.213745] CPU: 0 PID: 259 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1
[ 67.215000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 67.216118] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 67.216823] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 67.219249] RSP: 0018:ffff888018217bf0 EFLAGS: 00010286
[ 67.220027] RAX: 0000000000000000 RBX: ffff88800e351e40 RCX: 0000000000000000
[ 67.221003] RDX: ffff888016c33680 RSI: ffffffff81172af2 RDI: 0000000000000001
[ 67.221973] RBP: ffff88800e351e54 R08: 0000000000000001 R09: 0000000000000000
[ 67.222906] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 67.223887] R13: ffffffff84e223a0 R14: ffff88800e351e48 R15: ffffffff84daf020
[ 67.224858] FS: 000055555639b400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 67.225965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 67.226735] CR2: 00007f52999256f4 CR3: 000000000e5fe000 CR4: 0000000000350ef0
[ 67.227714] Call Trace:
[ 67.228114]
[ 67.228438] nf_ct_net_init+0x224/0x3d0
[ 67.229028] ? __pfx_nf_ct_net_init+0x10/0x10
[ 67.229652] ops_init+0xbb/0x6b0
[ 67.230152] setup_net+0x3d9/0x990
[ 67.230647] ? down_read_killable+0x1d7/0x4e0
[ 67.231280] ? __pfx_setup_net+0x10/0x10
[ 67.231843] ? copy_net_ns+0x17c/0x770
[ 67.232416] copy_net_ns+0x321/0x770
[ 67.232967] create_new_namespaces+0x3f6/0xb30
[ 67.233607] unshare_nsproxy_namespaces+0xc1/0x200
[ 67.234302] ksys_unshare+0x44d/0x8e0
[ 67.234841] ? __pfx_ksys_unshare+0x10/0x10
[ 67.235463] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 67.236298] __x64_sys_unshare+0x31/0x40
[ 67.236864] do_syscall_64+0x3f/0x90
[ 67.237407] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 67.238140] RIP: 0033:0x7f9ebd3df0d7
[ 67.238651] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 67.241061] RSP: 002b:00007ffecc6134d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 67.242093] RAX: ffffffffffffffda RBX: 00007ffecc613b18 RCX: 00007f9ebd3df0d7
[ 67.243079] RDX: 00007f9ebd44941f RSI: 00007ffecc613470 RDI: 0000000040000000
[ 67.244051] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffecc613280
[ 67.245017] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f9ebd4f1bf0
[ 67.245971] R13: 00007ffecc6135b0 R14: 0000000000000000 R15: 00000000000000f8
[ 67.246925]
[ 67.247275] irq event stamp: 11621
[ 67.247749] hardirqs last enabled at (11631): [] __up_console_sem+0x78/0x80
[ 67.248926] hardirqs last disabled at (11642): [] __up_console_sem+0x5d/0x80
[ 67.250102] softirqs last enabled at (11304): [] irq_exit_rcu+0x93/0xc0
[ 67.251240] softirqs last disabled at (11299): [] irq_exit_rcu+0x93/0xc0
[ 67.252370] ---[ end trace 0000000000000000 ]---
executing program
[ 68.796646] Bluetooth: hci0: command 0x0409 tx timeout
[ 70.844005] Bluetooth: hci0: command 0x041b tx timeout
executing program
[ 72.892035] Bluetooth: hci0: command 0x040f tx timeout
executing program
[ 74.940095] Bluetooth: hci0: command 0x0419 tx timeout
VM DIAGNOSIS:
14:11:56 Registers:
info registers vcpu 0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff8880182175f0
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001
R12=0000000000000020 R13=ffffffff87f27bc0 R14=0000000000000010 R15=ffffffff82507670
RIP=ffffffff825076dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555639b400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f52999256f4 CR3=000000000e5fe000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000002f9dd RBX=0000000000000001 RCX=ffffffff844c4a0e RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff81288625 RBP=dffffc0000000000 RSP=ffff888008dcfe68
R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001
R12=ffffffff85d34a10 R13=1ffff110011b9fd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff844c599f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f156aeaa2a0 CR3=000000000e5ee000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=e0627386355173898245205815bd861f
XMM02=6b1e99b806172e3b00000000000aea28 XMM03=ac8bc31478ec851100000000000aefa0
XMM04=3bf22064673fb0ca000000000013b820 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=6d75c8537ba3613100000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000