Warning: Permanently added '[localhost]:46441' (ECDSA) to the list of known hosts.
2023/05/18 09:03:00 fuzzer started
2023/05/18 09:03:00 dialing manager at localhost:44319
2023/05/18 09:03:00 checking machine...
2023/05/18 09:03:00 checking revisions...
syzkaller login: [ 42.427112] kmemleak: Automatic memory scanning thread ended
2023/05/18 09:03:01 testing simple program...
[ 42.475617] cgroup: Unknown subsys name 'net'
[ 42.550975] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
[ 54.884816] audit: type=1400 audit(1684400593.475:6): avc: denied { execmem } for pid=258 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 56.021288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 56.031675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 56.033353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 56.036640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 56.039242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 56.040593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 56.341233] ------------[ cut here ]------------
[ 56.341891] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
[ 56.343084] WARNING: CPU: 0 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 56.343802] Modules linked in:
[ 56.344103] CPU: 0 PID: 259 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1
[ 56.345160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 56.348182] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 56.348633] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 56.350139] RSP: 0018:ffff88800cb1fc00 EFLAGS: 00010282
[ 56.350585] RAX: 0000000000000000 RBX: ffff88800f808040 RCX: 0000000000000000
[ 56.351153] RDX: ffff888016b48000 RSI: ffffffff81171ad2 RDI: 0000000000000001
[ 56.351703] RBP: ffff88800f808054 R08: 0000000000000001 R09: 0000000000000000
[ 56.352265] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000
[ 56.352853] R13: ffffffff84e23fe0 R14: ffff88800f808048 R15: ffffffff84d74dc0
[ 56.353454] FS: 0000555556313400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 56.354151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.354668] CR2: 00007fb8936016f4 CR3: 0000000016cc0000 CR4: 0000000000350ef0
[ 56.355267] Call Trace:
[ 56.355515]
[ 56.355705] ? __pfx_ipv4_frags_init_net+0x10/0x10
[ 56.356154] ipv4_frags_init_net+0x269/0x440
[ 56.356533] ops_init+0xbb/0x6b0
[ 56.356939] setup_net+0x3d9/0x990
[ 56.357238] ? down_read_killable+0x1d7/0x4e0
[ 56.357604] ? __pfx_setup_net+0x10/0x10
[ 56.358005] ? copy_net_ns+0x17c/0x770
[ 56.358324] copy_net_ns+0x321/0x770
[ 56.358643] create_new_namespaces+0x3f6/0xb30
[ 56.359038] unshare_nsproxy_namespaces+0xc1/0x200
[ 56.359431] ksys_unshare+0x44d/0x8e0
[ 56.359748] ? __pfx_ksys_unshare+0x10/0x10
[ 56.360120] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 56.360579] __x64_sys_unshare+0x31/0x40
[ 56.360899] do_syscall_64+0x3f/0x90
[ 56.361224] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 56.361649] RIP: 0033:0x7f92d53d50d7
[ 56.361994] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 56.363401] RSP: 002b:00007ffcf34d7608 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 56.364022] RAX: ffffffffffffffda RBX: 00007ffcf34d7c48 RCX: 00007f92d53d50d7
[ 56.364584] RDX: 00007f92d543f41f RSI: 00007ffcf34d75a0 RDI: 0000000040000000
[ 56.365147] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffcf34d73b0
[ 56.365710] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f92d54e7bf0
[ 56.366308] R13: 00007ffcf34d76e0 R14: 0000000000000000 R15: 00000000000000f8
[ 56.366875]
[ 56.367100] irq event stamp: 7505
[ 56.367388] hardirqs last enabled at (7515): [] __up_console_sem+0x78/0x80
[ 56.368134] hardirqs last disabled at (7526): [] __up_console_sem+0x5d/0x80
[ 56.368843] softirqs last enabled at (7024): [] irq_exit_rcu+0x93/0xc0
[ 56.369531] softirqs last disabled at (7019): [] irq_exit_rcu+0x93/0xc0
[ 56.370239] ---[ end trace 0000000000000000 ]---
[ 56.374879] ------------[ cut here ]------------
[ 56.375322] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused
[ 56.376419] WARNING: CPU: 0 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 56.377190] Modules linked in:
[ 56.377483] CPU: 0 PID: 259 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1
[ 56.378291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 56.378944] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 56.379357] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 56.380767] RSP: 0018:ffff88800cb1fc00 EFLAGS: 00010282
[ 56.381206] RAX: 0000000000000000 RBX: ffff888016608c40 RCX: 0000000000000000
[ 56.381769] RDX: ffff888016b48000 RSI: ffffffff81171ad2 RDI: 0000000000000001
[ 56.382361] RBP: ffff888016608c54 R08: 0000000000000001 R09: 0000000000000000
[ 56.382975] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 56.383558] R13: ffffffff84e23fe0 R14: ffff888016608c48 R15: ffffffff84da7d60
[ 56.384209] FS: 0000555556313400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 56.384886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.385382] CR2: 00007fb8936016f4 CR3: 0000000016cc0000 CR4: 0000000000350ef0
[ 56.386045] Call Trace:
[ 56.386273]
[ 56.386477] ? __pfx_ipv6_frags_init_net+0x10/0x10
[ 56.386900] ipv6_frags_init_net+0x206/0x3c0
[ 56.387292] ops_init+0xbb/0x6b0
[ 56.387600] setup_net+0x3d9/0x990
[ 56.387898] ? down_read_killable+0x1d7/0x4e0
[ 56.388307] ? __pfx_setup_net+0x10/0x10
[ 56.388659] ? copy_net_ns+0x17c/0x770
[ 56.389025] copy_net_ns+0x321/0x770
[ 56.389347] create_new_namespaces+0x3f6/0xb30
[ 56.389785] unshare_nsproxy_namespaces+0xc1/0x200
[ 56.390241] ksys_unshare+0x44d/0x8e0
[ 56.390538] ? __pfx_ksys_unshare+0x10/0x10
[ 56.390871] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 56.391317] __x64_sys_unshare+0x31/0x40
[ 56.391661] do_syscall_64+0x3f/0x90
[ 56.391975] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 56.392366] RIP: 0033:0x7f92d53d50d7
[ 56.392685] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 56.394171] RSP: 002b:00007ffcf34d7608 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 56.394759] RAX: ffffffffffffffda RBX: 00007ffcf34d7c48 RCX: 00007f92d53d50d7
[ 56.395345] RDX: 00007f92d543f41f RSI: 00007ffcf34d75a0 RDI: 0000000040000000
[ 56.395937] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffcf34d73b0
[ 56.396494] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f92d54e7bf0
[ 56.397099] R13: 00007ffcf34d76e0 R14: 0000000000000000 R15: 00000000000000f8
[ 56.397698]
[ 56.397966] irq event stamp: 9557
[ 56.398284] hardirqs last enabled at (9567): [] __up_console_sem+0x78/0x80
[ 56.399021] hardirqs last disabled at (9578): [] __up_console_sem+0x5d/0x80
[ 56.399717] softirqs last enabled at (9530): [] irq_exit_rcu+0x93/0xc0
[ 56.400431] softirqs last disabled at (9525): [] irq_exit_rcu+0x93/0xc0
[ 56.401119] ---[ end trace 0000000000000000 ]---
[ 56.402186] ------------[ cut here ]------------
[ 56.402594] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused
[ 56.403970] WARNING: CPU: 0 PID: 259 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0
[ 56.404774] Modules linked in:
[ 56.405076] CPU: 0 PID: 259 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230517 #1
[ 56.405880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 56.406652] RIP: 0010:register_net_sysctl+0x1e6/0x2c0
[ 56.407108] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 60 40 e2 84 e8 fa ff d4 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0
[ 56.408711] RSP: 0018:ffff88800cb1fbf0 EFLAGS: 00010286
[ 56.409185] RAX: 0000000000000000 RBX: ffff888016609240 RCX: 0000000000000000
[ 56.409822] RDX: ffff888016b48000 RSI: ffffffff81171ad2 RDI: 0000000000000001
[ 56.410498] RBP: ffff888016609254 R08: 0000000000000001 R09: 0000000000000000
[ 56.411157] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 56.411774] R13: ffffffff84e23fe0 R14: ffff888016609248 R15: ffffffff84db0aa0
[ 56.412408] FS: 0000555556313400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 56.413118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.413600] CR2: 00007fb8936016f4 CR3: 0000000016cc0000 CR4: 0000000000350ef0
[ 56.414296] Call Trace:
[ 56.414530]
[ 56.414743] nf_ct_net_init+0x224/0x3d0
[ 56.415122] ? __pfx_nf_ct_net_init+0x10/0x10
[ 56.415527] ops_init+0xbb/0x6b0
[ 56.415837] setup_net+0x3d9/0x990
[ 56.416179] ? down_read_killable+0x1d7/0x4e0
[ 56.416587] ? __pfx_setup_net+0x10/0x10
[ 56.416980] ? copy_net_ns+0x17c/0x770
[ 56.417334] copy_net_ns+0x321/0x770
[ 56.417677] create_new_namespaces+0x3f6/0xb30
[ 56.418145] unshare_nsproxy_namespaces+0xc1/0x200
[ 56.418566] ksys_unshare+0x44d/0x8e0
[ 56.418939] ? __pfx_ksys_unshare+0x10/0x10
[ 56.419328] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[ 56.419820] __x64_sys_unshare+0x31/0x40
[ 56.420206] do_syscall_64+0x3f/0x90
[ 56.420535] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 56.421010] RIP: 0033:0x7f92d53d50d7
[ 56.421333] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 56.422976] RSP: 002b:00007ffcf34d7608 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 56.423652] RAX: ffffffffffffffda RBX: 00007ffcf34d7c48 RCX: 00007f92d53d50d7
[ 56.424298] RDX: 00007f92d543f41f RSI: 00007ffcf34d75a0 RDI: 0000000040000000
[ 56.424931] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007ffcf34d73b0
[ 56.425514] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f92d54e7bf0
[ 56.426228] R13: 00007ffcf34d76e0 R14: 0000000000000000 R15: 00000000000000f8
[ 56.426824]
[ 56.427058] irq event stamp: 10315
[ 56.427355] hardirqs last enabled at (10325): [] __up_console_sem+0x78/0x80
[ 56.428080] hardirqs last disabled at (10336): [] __up_console_sem+0x5d/0x80
[ 56.428872] softirqs last enabled at (10042): [] irq_exit_rcu+0x93/0xc0
[ 56.429647] softirqs last disabled at (10033): [] irq_exit_rcu+0x93/0xc0
[ 56.430401] ---[ end trace 0000000000000000 ]---
executing program
[ 58.047378] Bluetooth: hci0: command 0x0409 tx timeout
[ 60.095945] Bluetooth: hci0: command 0x041b tx timeout
executing program
[ 62.144035] Bluetooth: hci0: command 0x040f tx timeout
executing program
[ 64.191965] Bluetooth: hci0: command 0x0419 tx timeout
executing program
VM DIAGNOSIS:
09:03:08 Registers:
info registers vcpu 0
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82507f85 RDI=ffffffff87f2dc00 RBP=ffffffff87f2dbc0 RSP=ffff88800cb1f618
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000036 R11=0000000000000001
R12=0000000000000036 R13=ffffffff87f2dbc0 R14=0000000000000010 R15=ffffffff82507f70
RIP=ffffffff82507fdd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556313400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb8936016f4 CR3=0000000016cc0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00007fb6f00174a8 RBX=0000000000000044 RCX=0000000000000000 RDX=0000000000000044
RSI=00007fb6f00073f0 RDI=00007fb6f00174a8 RBP=00007fb6f00073f0 RSP=00007fb6fb2848a8
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000006
R12=00007fb6f000d800 R13=0000000000000044 R14=0000000000000044 R15=00005570375fda50
RIP=00007fb6fbf7abfb RFL=00000283 [--S---C] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb6fb285700 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2939614430 CR3=000000000df5a000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2034313a33303a39302038312079614d XMM01=5d3230383334332e36352020205b203a
XMM02=74656e20746120393532203a44495020 XMM03=735f74656e5f72657473696765722035
XMM04=7379735f74656e5f7265747369676572 XMM05=732f74656e20746120393532203a4449
XMM06=57205d3438303334332e36352020205b XMM07=79732034313a33303a39302038312079
XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000