Warning: Permanently added '[localhost]:21870' (ECDSA) to the list of known hosts. 2023/05/17 22:29:40 fuzzer started 2023/05/17 22:29:40 dialing manager at localhost:44319 2023/05/17 22:29:40 checking machine... 2023/05/17 22:29:40 checking revisions... syzkaller login: [ 45.375055] kmemleak: Automatic memory scanning thread ended 2023/05/17 22:29:41 testing simple program... [ 45.440498] cgroup: Unknown subsys name 'net' [ 45.523836] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 57.857016] audit: type=1400 audit(1684362593.489:6): avc: denied { execmem } for pid=257 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 58.980800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.983797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.985166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.987900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.989610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.990853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.411263] ------------[ cut here ]------------ [ 59.412074] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 59.414186] WARNING: CPU: 0 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 59.415478] Modules linked in: [ 59.415899] CPU: 0 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 59.420492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 59.421567] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 59.422275] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 59.424560] RSP: 0018:ffff88801a40fc00 EFLAGS: 00010282 [ 59.425285] RAX: 0000000000000000 RBX: ffff88800e6e4040 RCX: 0000000000000000 [ 59.426218] RDX: ffff8880191eb680 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 59.427191] RBP: ffff88800e6e4054 R08: 0000000000000001 R09: 0000000000000000 [ 59.428086] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 59.429011] R13: ffffffff84e23fe0 R14: ffff88800e6e4048 R15: ffffffff84d74dc0 [ 59.429955] FS: 00005555565bf400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 59.431028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.431814] CR2: 00007f362e5ff920 CR3: 0000000016d10000 CR4: 0000000000350ef0 [ 59.432772] Call Trace: [ 59.433156] [ 59.433476] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 59.434154] ipv4_frags_init_net+0x269/0x440 [ 59.434758] ops_init+0xbb/0x6b0 [ 59.435256] setup_net+0x3d9/0x990 [ 59.435743] ? down_read_killable+0x1d7/0x4e0 [ 59.436374] ? __pfx_setup_net+0x10/0x10 [ 59.436913] ? copy_net_ns+0x17c/0x770 [ 59.437475] copy_net_ns+0x321/0x770 [ 59.437985] create_new_namespaces+0x3f6/0xb30 [ 59.438658] unshare_nsproxy_namespaces+0xc1/0x200 [ 59.439330] ksys_unshare+0x44d/0x8e0 [ 59.439843] ? __pfx_ksys_unshare+0x10/0x10 [ 59.440452] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 59.441242] __x64_sys_unshare+0x31/0x40 [ 59.441788] do_syscall_64+0x3f/0x90 [ 59.442321] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 59.443022] RIP: 0033:0x7fc356d5b0d7 [ 59.443545] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 59.445840] RSP: 002b:00007ffcf0ae44b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 59.446856] RAX: ffffffffffffffda RBX: 00007ffcf0ae4af8 RCX: 00007fc356d5b0d7 [ 59.447799] RDX: 00007fc356dc541f RSI: 00007ffcf0ae4450 RDI: 0000000040000000 [ 59.448728] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffcf0ae4260 [ 59.449646] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fc356e6dbf0 [ 59.450612] R13: 00007ffcf0ae4590 R14: 0000000000000000 R15: 00000000000000f8 [ 59.451583] [ 59.451901] irq event stamp: 10329 [ 59.452388] hardirqs last enabled at (10341): [] __up_console_sem+0x78/0x80 [ 59.453508] hardirqs last disabled at (10352): [] __up_console_sem+0x5d/0x80 [ 59.454658] softirqs last enabled at (10224): [] irq_exit_rcu+0x93/0xc0 [ 59.455750] softirqs last disabled at (10219): [] irq_exit_rcu+0x93/0xc0 [ 59.456840] ---[ end trace 0000000000000000 ]--- [ 59.462823] ------------[ cut here ]------------ [ 59.463526] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 59.465259] WARNING: CPU: 0 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 59.466381] Modules linked in: [ 59.466816] CPU: 0 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 59.468043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 59.469126] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 59.469799] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 59.472123] RSP: 0018:ffff88801a40fc00 EFLAGS: 00010282 [ 59.472806] RAX: 0000000000000000 RBX: ffff88800e51ac40 RCX: 0000000000000000 [ 59.473752] RDX: ffff8880191eb680 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 59.474689] RBP: ffff88800e51ac54 R08: 0000000000000001 R09: 0000000000000000 [ 59.475608] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 59.476543] R13: ffffffff84e23fe0 R14: ffff88800e51ac48 R15: ffffffff84da7d60 [ 59.477473] FS: 00005555565bf400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 59.478574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.479359] CR2: 00007f362e5ff920 CR3: 0000000016d10000 CR4: 0000000000350ef0 [ 59.480303] Call Trace: [ 59.480645] [ 59.480954] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 59.481650] ipv6_frags_init_net+0x206/0x3c0 [ 59.482282] ops_init+0xbb/0x6b0 [ 59.482764] setup_net+0x3d9/0x990 [ 59.483285] ? down_read_killable+0x1d7/0x4e0 [ 59.483886] ? __pfx_setup_net+0x10/0x10 [ 59.484457] ? copy_net_ns+0x17c/0x770 [ 59.484992] copy_net_ns+0x321/0x770 [ 59.485528] create_new_namespaces+0x3f6/0xb30 [ 59.486161] unshare_nsproxy_namespaces+0xc1/0x200 [ 59.486816] ksys_unshare+0x44d/0x8e0 [ 59.487367] ? __pfx_ksys_unshare+0x10/0x10 [ 59.487952] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 59.488734] __x64_sys_unshare+0x31/0x40 [ 59.489309] do_syscall_64+0x3f/0x90 [ 59.489809] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 59.490545] RIP: 0033:0x7fc356d5b0d7 [ 59.491040] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 59.493332] RSP: 002b:00007ffcf0ae44b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 59.494332] RAX: ffffffffffffffda RBX: 00007ffcf0ae4af8 RCX: 00007fc356d5b0d7 [ 59.495275] RDX: 00007fc356dc541f RSI: 00007ffcf0ae4450 RDI: 0000000040000000 [ 59.496208] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffcf0ae4260 [ 59.497151] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fc356e6dbf0 [ 59.498054] R13: 00007ffcf0ae4590 R14: 0000000000000000 R15: 00000000000000f8 [ 59.499026] [ 59.499366] irq event stamp: 12249 [ 59.499822] hardirqs last enabled at (12259): [] __up_console_sem+0x78/0x80 [ 59.500939] hardirqs last disabled at (12270): [] __up_console_sem+0x5d/0x80 [ 59.502064] softirqs last enabled at (11732): [] irq_exit_rcu+0x93/0xc0 [ 59.503184] softirqs last disabled at (11717): [] irq_exit_rcu+0x93/0xc0 [ 59.504278] ---[ end trace 0000000000000000 ]--- [ 59.505721] ------------[ cut here ]------------ [ 59.506373] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 59.508388] WARNING: CPU: 0 PID: 258 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 59.509497] Modules linked in: [ 59.509923] CPU: 0 PID: 258 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 59.511191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 59.512268] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 59.512939] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 59.515241] RSP: 0018:ffff88801a40fbf0 EFLAGS: 00010286 [ 59.515926] RAX: 0000000000000000 RBX: ffff88800e51a440 RCX: 0000000000000000 [ 59.516868] RDX: ffff8880191eb680 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 59.517790] RBP: ffff88800e51a454 R08: 0000000000000001 R09: 0000000000000000 [ 59.518737] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 59.519673] R13: ffffffff84e23fe0 R14: ffff88800e51a448 R15: ffffffff84db0aa0 [ 59.520604] FS: 00005555565bf400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 59.521650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.522420] CR2: 00007f362e5ff920 CR3: 0000000016d10000 CR4: 0000000000350ef0 [ 59.523380] Call Trace: [ 59.523732] [ 59.524045] nf_ct_net_init+0x224/0x3d0 [ 59.524624] ? __pfx_nf_ct_net_init+0x10/0x10 [ 59.525258] ops_init+0xbb/0x6b0 [ 59.525725] setup_net+0x3d9/0x990 [ 59.526229] ? down_read_killable+0x1d7/0x4e0 [ 59.526852] ? __pfx_setup_net+0x10/0x10 [ 59.527419] ? copy_net_ns+0x17c/0x770 [ 59.527949] copy_net_ns+0x321/0x770 [ 59.528491] create_new_namespaces+0x3f6/0xb30 [ 59.529134] unshare_nsproxy_namespaces+0xc1/0x200 [ 59.529788] ksys_unshare+0x44d/0x8e0 [ 59.530334] ? __pfx_ksys_unshare+0x10/0x10 [ 59.530926] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 59.531695] __x64_sys_unshare+0x31/0x40 [ 59.532269] do_syscall_64+0x3f/0x90 [ 59.532766] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 59.533494] RIP: 0033:0x7fc356d5b0d7 [ 59.533979] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 59.536288] RSP: 002b:00007ffcf0ae44b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 59.537298] RAX: ffffffffffffffda RBX: 00007ffcf0ae4af8 RCX: 00007fc356d5b0d7 [ 59.538229] RDX: 00007fc356dc541f RSI: 00007ffcf0ae4450 RDI: 0000000040000000 [ 59.539172] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffcf0ae4260 [ 59.540087] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fc356e6dbf0 [ 59.541029] R13: 00007ffcf0ae4590 R14: 0000000000000000 R15: 00000000000000f8 [ 59.541986] [ 59.542330] irq event stamp: 13025 [ 59.542806] hardirqs last enabled at (13035): [] __up_console_sem+0x78/0x80 [ 59.543933] hardirqs last disabled at (13046): [] __up_console_sem+0x5d/0x80 [ 59.545058] softirqs last enabled at (12510): [] irq_exit_rcu+0x93/0xc0 [ 59.546194] softirqs last disabled at (12505): [] irq_exit_rcu+0x93/0xc0 [ 59.547302] ---[ end trace 0000000000000000 ]--- executing program [ 61.053760] Bluetooth: hci0: command 0x0409 tx timeout [ 63.101178] Bluetooth: hci0: command 0x041b tx timeout executing program [ 65.149180] Bluetooth: hci0: command 0x040f tx timeout executing program [ 67.197233] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 22:29:54 Registers: info registers vcpu 0 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82507f85 RDI=ffffffff87f2dc00 RBP=ffffffff87f2dbc0 RSP=ffff88801a40f5f0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000078 R11=0000000000000001 R12=0000000000000078 R13=ffffffff87f2dbc0 R14=0000000000000010 R15=ffffffff82507f70 RIP=ffffffff82507fdd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555565bf400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f362e5ff920 CR3=0000000016d10000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000002f2c3 RBX=0000000000000001 RCX=ffffffff844d0a0e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81287415 RBP=dffffc0000000000 RSP=ffff888008dcfe70 R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001 R12=ffffffff85d35a10 R13=1ffff110011b9fd3 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844d199f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f362e6c2020 CR3=000000000ec70000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=51d3371239d7ae938443d46e2699e1eb XMM02=6b1e99b806172e3b00000000000aea28 XMM03=ac8bc31478ec851100000000000aefa0 XMM04=d8f928da5fab84ed0000000000110950 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=f72100c6c5dedeee00000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000