Warning: Permanently added '[localhost]:25609' (ECDSA) to the list of known hosts. 2023/05/18 05:55:24 fuzzer started 2023/05/18 05:55:25 dialing manager at localhost:44319 2023/05/18 05:55:25 checking machine... 2023/05/18 05:55:25 checking revisions... syzkaller login: [ 37.009095] kmemleak: Automatic memory scanning thread ended 2023/05/18 05:55:25 testing simple program... [ 37.079477] cgroup: Unknown subsys name 'net' [ 37.146359] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 49.007534] audit: type=1400 audit(1684389337.252:6): avc: denied { execmem } for pid=259 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 50.142566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.148554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.152962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.163238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.165096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.166828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.539904] ------------[ cut here ]------------ [ 50.541436] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 50.543712] WARNING: CPU: 1 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 50.544862] Modules linked in: [ 50.545403] CPU: 1 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 50.550159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 50.551516] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 50.552455] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 50.555250] RSP: 0018:ffff88800e1e7c00 EFLAGS: 00010282 [ 50.556200] RAX: 0000000000000000 RBX: ffff88800f21b040 RCX: 0000000000000000 [ 50.557477] RDX: ffff888014740000 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 50.558628] RBP: ffff88800f21b054 R08: 0000000000000001 R09: 0000000000000000 [ 50.559603] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 50.560641] R13: ffffffff84e23fe0 R14: ffff88800f21b048 R15: ffffffff84d74dc0 [ 50.561718] FS: 0000555555eb8400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 50.562806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.563629] CR2: 00007f56a97006f4 CR3: 000000000c96e000 CR4: 0000000000350ee0 [ 50.564551] Call Trace: [ 50.564873] [ 50.565220] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 50.565838] ipv4_frags_init_net+0x269/0x440 [ 50.566426] ops_init+0xbb/0x6b0 [ 50.566869] setup_net+0x3d9/0x990 [ 50.567354] ? down_read_killable+0x1d7/0x4e0 [ 50.567929] ? __pfx_setup_net+0x10/0x10 [ 50.568477] ? copy_net_ns+0x17c/0x770 [ 50.568986] copy_net_ns+0x321/0x770 [ 50.569526] create_new_namespaces+0x3f6/0xb30 [ 50.570141] unshare_nsproxy_namespaces+0xc1/0x200 [ 50.570759] ksys_unshare+0x44d/0x8e0 [ 50.571278] ? __pfx_ksys_unshare+0x10/0x10 [ 50.571822] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 50.572555] __x64_sys_unshare+0x31/0x40 [ 50.573112] do_syscall_64+0x3f/0x90 [ 50.573581] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 50.574248] RIP: 0033:0x7fbf0d0c80d7 [ 50.574707] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 50.576840] RSP: 002b:00007ffdb56209a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 50.577782] RAX: ffffffffffffffda RBX: 00007ffdb5620fe8 RCX: 00007fbf0d0c80d7 [ 50.578673] RDX: 00007fbf0d13241f RSI: 00007ffdb5620940 RDI: 0000000040000000 [ 50.579554] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffdb5620750 [ 50.580442] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fbf0d1dabf0 [ 50.581340] R13: 00007ffdb5620a80 R14: 0000000000000000 R15: 00000000000000f8 [ 50.582264] [ 50.582559] irq event stamp: 9365 [ 50.582977] hardirqs last enabled at (9375): [] __up_console_sem+0x78/0x80 [ 50.584060] hardirqs last disabled at (9388): [] __up_console_sem+0x5d/0x80 [ 50.585133] softirqs last enabled at (9050): [] irq_exit_rcu+0x93/0xc0 [ 50.586168] softirqs last disabled at (9035): [] irq_exit_rcu+0x93/0xc0 [ 50.587196] ---[ end trace 0000000000000000 ]--- [ 50.592884] ------------[ cut here ]------------ [ 50.593516] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 50.595147] WARNING: CPU: 1 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 50.596190] Modules linked in: [ 50.596587] CPU: 1 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 50.597692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 50.598659] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 50.599323] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 50.601392] RSP: 0018:ffff88800e1e7c00 EFLAGS: 00010282 [ 50.602042] RAX: 0000000000000000 RBX: ffff888009a28040 RCX: 0000000000000000 [ 50.602851] RDX: ffff888014740000 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 50.603722] RBP: ffff888009a28054 R08: 0000000000000001 R09: 0000000000000000 [ 50.604615] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 50.605520] R13: ffffffff84e23fe0 R14: ffff888009a28048 R15: ffffffff84da7d60 [ 50.606417] FS: 0000555555eb8400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 50.607415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.608163] CR2: 00007f56a97006f4 CR3: 000000000c96e000 CR4: 0000000000350ee0 [ 50.609044] Call Trace: [ 50.609395] [ 50.609690] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 50.610349] ipv6_frags_init_net+0x206/0x3c0 [ 50.610903] ops_init+0xbb/0x6b0 [ 50.611378] setup_net+0x3d9/0x990 [ 50.611830] ? down_read_killable+0x1d7/0x4e0 [ 50.612428] ? __pfx_setup_net+0x10/0x10 [ 50.612937] ? copy_net_ns+0x17c/0x770 [ 50.613477] copy_net_ns+0x321/0x770 [ 50.613949] create_new_namespaces+0x3f6/0xb30 [ 50.614558] unshare_nsproxy_namespaces+0xc1/0x200 [ 50.615204] ksys_unshare+0x44d/0x8e0 [ 50.615693] ? __pfx_ksys_unshare+0x10/0x10 [ 50.616272] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 50.616965] __x64_sys_unshare+0x31/0x40 [ 50.617529] do_syscall_64+0x3f/0x90 [ 50.618037] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 50.618681] RIP: 0033:0x7fbf0d0c80d7 [ 50.619185] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 50.621340] RSP: 002b:00007ffdb56209a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 50.622306] RAX: ffffffffffffffda RBX: 00007ffdb5620fe8 RCX: 00007fbf0d0c80d7 [ 50.623181] RDX: 00007fbf0d13241f RSI: 00007ffdb5620940 RDI: 0000000040000000 [ 50.624072] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffdb5620750 [ 50.624912] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fbf0d1dabf0 [ 50.625815] R13: 00007ffdb5620a80 R14: 0000000000000000 R15: 00000000000000f8 [ 50.626727] [ 50.627062] irq event stamp: 11255 [ 50.627488] hardirqs last enabled at (11265): [] __up_console_sem+0x78/0x80 [ 50.628556] hardirqs last disabled at (11276): [] __up_console_sem+0x5d/0x80 [ 50.629632] softirqs last enabled at (11180): [] irq_exit_rcu+0x93/0xc0 [ 50.630668] softirqs last disabled at (11167): [] irq_exit_rcu+0x93/0xc0 [ 50.631699] ---[ end trace 0000000000000000 ]--- [ 50.633124] ------------[ cut here ]------------ [ 50.633700] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 50.635592] WARNING: CPU: 1 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 50.636650] Modules linked in: [ 50.637097] CPU: 1 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1 [ 50.638253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 50.639255] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 50.639886] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 50.642052] RSP: 0018:ffff88800e1e7bf0 EFLAGS: 00010286 [ 50.642698] RAX: 0000000000000000 RBX: ffff888009b18440 RCX: 0000000000000000 [ 50.643576] RDX: ffff888014740000 RSI: ffffffff81171ad2 RDI: 0000000000000001 [ 50.644457] RBP: ffff888009b18454 R08: 0000000000000001 R09: 0000000000000000 [ 50.645342] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 50.646231] R13: ffffffff84e23fe0 R14: ffff888009b18448 R15: ffffffff84db0aa0 [ 50.647113] FS: 0000555555eb8400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 50.648104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.648803] CR2: 00007f56a97006f4 CR3: 000000000c96e000 CR4: 0000000000350ee0 [ 50.649711] Call Trace: [ 50.650072] [ 50.650375] nf_ct_net_init+0x224/0x3d0 [ 50.650881] ? __pfx_nf_ct_net_init+0x10/0x10 [ 50.651479] ops_init+0xbb/0x6b0 [ 50.651925] setup_net+0x3d9/0x990 [ 50.652415] ? down_read_killable+0x1d7/0x4e0 [ 50.652977] ? __pfx_setup_net+0x10/0x10 [ 50.653527] ? copy_net_ns+0x17c/0x770 [ 50.654065] copy_net_ns+0x321/0x770 [ 50.654544] create_new_namespaces+0x3f6/0xb30 [ 50.655155] unshare_nsproxy_namespaces+0xc1/0x200 [ 50.655753] ksys_unshare+0x44d/0x8e0 [ 50.656269] ? __pfx_ksys_unshare+0x10/0x10 [ 50.656816] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 50.657576] __x64_sys_unshare+0x31/0x40 [ 50.658124] do_syscall_64+0x3f/0x90 [ 50.658602] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 50.659283] RIP: 0033:0x7fbf0d0c80d7 [ 50.659747] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 50.661918] RSP: 002b:00007ffdb56209a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 50.662865] RAX: ffffffffffffffda RBX: 00007ffdb5620fe8 RCX: 00007fbf0d0c80d7 [ 50.663749] RDX: 00007fbf0d13241f RSI: 00007ffdb5620940 RDI: 0000000040000000 [ 50.664633] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffdb5620750 [ 50.665525] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fbf0d1dabf0 [ 50.666409] R13: 00007ffdb5620a80 R14: 0000000000000000 R15: 00000000000000f8 [ 50.667330] [ 50.667642] irq event stamp: 12107 [ 50.668103] hardirqs last enabled at (12119): [] __up_console_sem+0x78/0x80 [ 50.669221] hardirqs last disabled at (12130): [] __up_console_sem+0x5d/0x80 [ 50.670282] softirqs last enabled at (12032): [] irq_exit_rcu+0x93/0xc0 [ 50.671315] softirqs last disabled at (12027): [] irq_exit_rcu+0x93/0xc0 [ 50.672350] ---[ end trace 0000000000000000 ]--- executing program [ 52.222637] Bluetooth: hci0: command 0x0409 tx timeout [ 54.270085] Bluetooth: hci0: command 0x041b tx timeout executing program [ 56.318119] Bluetooth: hci0: command 0x040f tx timeout executing program [ 58.366077] Bluetooth: hci0: command 0x0419 tx timeout VM DIAGNOSIS: 05:55:38 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=ffffffff85d36b70 RCX=ffffffff812d6c9a RDX=0000000000000000 RSI=0000000000000008 RDI=0000000000000000 RBP=1ffff11002d8df30 RSP=ffff888016c6f970 R8 =0000000000000001 R9 =fffffbfff0ba6b42 R10=ffffffff85d35a17 R11=0000000000000001 R12=ffffffff8560b4c0 R13=ffffffff81822799 R14=ffff88800feb1b40 R15=ffffffff8186bee1 RIP=ffffffff812d6d45 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4c39169900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3d84038108 CR3=0000000009856000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=664ac955f6a03b94000000000013c7a8 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=df8b762c89c8eeb600000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff82507f85 RDI=ffffffff87f2dc00 RBP=ffffffff87f2dbc0 RSP=ffff88800e1e75f0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000005 R13=ffffffff87f2dbc0 R14=0000000000000010 R15=ffffffff82507f70 RIP=ffffffff82507fdd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555eb8400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f56a97006f4 CR3=000000000c96e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000