Warning: Permanently added '[localhost]:35730' (ECDSA) to the list of known hosts. 2023/05/17 00:30:25 fuzzer started 2023/05/17 00:30:25 dialing manager at localhost:35573 2023/05/17 00:30:25 checking machine... 2023/05/17 00:30:25 checking revisions... syzkaller login: [ 59.369904] kmemleak: Automatic memory scanning thread ended 2023/05/17 00:30:26 testing simple program... [ 59.428329] cgroup: Unknown subsys name 'net' [ 59.519464] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program [ 72.214607] audit: type=1400 audit(1684283438.872:6): avc: denied { execmem } for pid=259 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 73.340521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.343621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.344842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.348713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.351585] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.352773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.745411] ------------[ cut here ]------------ [ 73.746128] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 73.747888] WARNING: CPU: 1 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 73.748961] Modules linked in: [ 73.749386] CPU: 1 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 73.754286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 73.755482] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 73.756298] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 73.758531] RSP: 0018:ffff88801a4ffc00 EFLAGS: 00010282 [ 73.759222] RAX: 0000000000000000 RBX: ffff88800e0d3440 RCX: 0000000000000000 [ 73.760131] RDX: ffff88800e591b40 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 73.761058] RBP: ffff88800e0d3454 R08: 0000000000000001 R09: 0000000000000000 [ 73.761956] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 73.762815] R13: ffffffff84e223a0 R14: ffff88800e0d3448 R15: ffffffff84d73340 [ 73.763713] FS: 000055555723e400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 73.764716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.765499] CR2: 00007f3437100260 CR3: 000000000c744000 CR4: 0000000000350ee0 [ 73.766434] Call Trace: [ 73.766763] [ 73.767090] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 73.767712] ipv4_frags_init_net+0x269/0x440 [ 73.768287] ops_init+0xbb/0x6b0 [ 73.768734] setup_net+0x3d9/0x990 [ 73.769230] ? down_read_killable+0x1d7/0x4e0 [ 73.769807] ? __pfx_setup_net+0x10/0x10 [ 73.770352] ? copy_net_ns+0x17c/0x770 [ 73.770896] copy_net_ns+0x321/0x770 [ 73.771385] create_new_namespaces+0x3f6/0xb30 [ 73.772005] unshare_nsproxy_namespaces+0xc1/0x200 [ 73.772627] ksys_unshare+0x44d/0x8e0 [ 73.773161] ? __pfx_ksys_unshare+0x10/0x10 [ 73.773705] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 73.774445] __x64_sys_unshare+0x31/0x40 [ 73.774996] do_syscall_64+0x3f/0x90 [ 73.775465] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 73.776132] RIP: 0033:0x7f8d1082e0d7 [ 73.776610] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 73.778970] RSP: 002b:00007fff12afccd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 73.779953] RAX: ffffffffffffffda RBX: 00007fff12afd318 RCX: 00007f8d1082e0d7 [ 73.780896] RDX: 00007f8d1089841f RSI: 00007fff12afcc70 RDI: 0000000040000000 [ 73.781784] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff12afca80 [ 73.782715] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f8d10940bf0 [ 73.783653] R13: 00007fff12afcdb0 R14: 0000000000000000 R15: 00000000000000f8 [ 73.784612] [ 73.784984] irq event stamp: 8101 [ 73.785430] hardirqs last enabled at (8111): [] __up_console_sem+0x78/0x80 [ 73.786539] hardirqs last disabled at (8122): [] __up_console_sem+0x5d/0x80 [ 73.787647] softirqs last enabled at (7662): [] irq_exit_rcu+0x93/0xc0 [ 73.788720] softirqs last disabled at (7611): [] irq_exit_rcu+0x93/0xc0 [ 73.789813] ---[ end trace 0000000000000000 ]--- [ 73.795055] ------------[ cut here ]------------ [ 73.795672] sysctl net/ipv6/ip6frag_low_thresh: data points to kernel global data: ip6_frags_low_thresh_unused [ 73.797382] WARNING: CPU: 1 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 73.798498] Modules linked in: [ 73.798948] CPU: 1 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 73.800152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 73.801224] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 73.801930] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 73.804207] RSP: 0018:ffff88801a4ffc00 EFLAGS: 00010282 [ 73.804950] RAX: 0000000000000000 RBX: ffff888009794440 RCX: 0000000000000000 [ 73.805841] RDX: ffff88800e591b40 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 73.806771] RBP: ffff888009794454 R08: 0000000000000001 R09: 0000000000000000 [ 73.807707] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 73.808630] R13: ffffffff84e223a0 R14: ffff888009794448 R15: ffffffff84da62e0 [ 73.809570] FS: 000055555723e400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 73.810617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.811397] CR2: 00007f3437100260 CR3: 000000000c744000 CR4: 0000000000350ee0 [ 73.812326] Call Trace: [ 73.812667] [ 73.813020] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 73.813662] ipv6_frags_init_net+0x206/0x3c0 [ 73.814280] ops_init+0xbb/0x6b0 [ 73.814738] setup_net+0x3d9/0x990 [ 73.815245] ? down_read_killable+0x1d7/0x4e0 [ 73.815832] ? __pfx_setup_net+0x10/0x10 [ 73.816396] ? copy_net_ns+0x17c/0x770 [ 73.816974] copy_net_ns+0x321/0x770 [ 73.817483] create_new_namespaces+0x3f6/0xb30 [ 73.818123] unshare_nsproxy_namespaces+0xc1/0x200 [ 73.818763] ksys_unshare+0x44d/0x8e0 [ 73.819297] ? __pfx_ksys_unshare+0x10/0x10 [ 73.819896] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 73.820639] __x64_sys_unshare+0x31/0x40 [ 73.821220] do_syscall_64+0x3f/0x90 [ 73.821717] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 73.822415] RIP: 0033:0x7f8d1082e0d7 [ 73.822937] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 73.825226] RSP: 002b:00007fff12afccd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 73.826227] RAX: ffffffffffffffda RBX: 00007fff12afd318 RCX: 00007f8d1082e0d7 [ 73.827165] RDX: 00007f8d1089841f RSI: 00007fff12afcc70 RDI: 0000000040000000 [ 73.828090] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff12afca80 [ 73.829052] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f8d10940bf0 [ 73.829987] R13: 00007fff12afcdb0 R14: 0000000000000000 R15: 00000000000000f8 [ 73.830952] [ 73.831269] irq event stamp: 9971 [ 73.831706] hardirqs last enabled at (9981): [] __up_console_sem+0x78/0x80 [ 73.832838] hardirqs last disabled at (9992): [] __up_console_sem+0x5d/0x80 [ 73.833965] softirqs last enabled at (9530): [] irq_exit_rcu+0x93/0xc0 [ 73.835044] softirqs last disabled at (9525): [] irq_exit_rcu+0x93/0xc0 [ 73.836123] ---[ end trace 0000000000000000 ]--- [ 73.837508] ------------[ cut here ]------------ [ 73.838204] sysctl net/netfilter/nf_conntrack_frag6_low_thresh: data points to kernel global data: nf_conntrack_frag6_low_thresh_unused [ 73.840230] WARNING: CPU: 1 PID: 260 at net/sysctl_net.c:155 register_net_sysctl+0x1e6/0x2c0 [ 73.841304] Modules linked in: [ 73.841713] CPU: 1 PID: 260 Comm: syz-executor.0 Tainted: G W 6.4.0-rc2-next-20230516 #1 [ 73.842896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 73.843900] RIP: 0010:register_net_sysctl+0x1e6/0x2c0 [ 73.844544] Code: 89 d8 4c 8b 43 08 48 c1 e8 03 42 80 3c 20 00 0f 85 af 00 00 00 48 8b 13 4c 89 e9 4c 89 fe 48 c7 c7 20 24 e2 84 e8 6a cd d5 fc <0f> 0b 48 89 e8 48 c1 e8 03 42 0f b6 14 20 48 89 e8 83 e0 07 83 c0 [ 73.846706] RSP: 0018:ffff88801a4ffbf0 EFLAGS: 00010286 [ 73.847387] RAX: 0000000000000000 RBX: ffff888009794a40 RCX: 0000000000000000 [ 73.848274] RDX: ffff88800e591b40 RSI: ffffffff81172af2 RDI: 0000000000000001 [ 73.849188] RBP: ffff888009794a54 R08: 0000000000000001 R09: 0000000000000000 [ 73.850082] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 73.850968] R13: ffffffff84e223a0 R14: ffff888009794a48 R15: ffffffff84daf020 [ 73.851830] FS: 000055555723e400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 73.852838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.853587] CR2: 00007f3437100260 CR3: 000000000c744000 CR4: 0000000000350ee0 [ 73.854481] Call Trace: [ 73.854808] [ 73.855141] nf_ct_net_init+0x224/0x3d0 [ 73.855659] ? __pfx_nf_ct_net_init+0x10/0x10 [ 73.856265] ops_init+0xbb/0x6b0 [ 73.856710] setup_net+0x3d9/0x990 [ 73.857256] ? down_read_killable+0x1d7/0x4e0 [ 73.857825] ? __pfx_setup_net+0x10/0x10 [ 73.858367] ? copy_net_ns+0x17c/0x770 [ 73.858905] copy_net_ns+0x321/0x770 [ 73.859390] create_new_namespaces+0x3f6/0xb30 [ 73.860007] unshare_nsproxy_namespaces+0xc1/0x200 [ 73.860628] ksys_unshare+0x44d/0x8e0 [ 73.861166] ? __pfx_ksys_unshare+0x10/0x10 [ 73.861724] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 73.862472] __x64_sys_unshare+0x31/0x40 [ 73.863032] do_syscall_64+0x3f/0x90 [ 73.863510] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 73.864185] RIP: 0033:0x7f8d1082e0d7 [ 73.864656] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 73.866870] RSP: 002b:00007fff12afccd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 73.867798] RAX: ffffffffffffffda RBX: 00007fff12afd318 RCX: 00007f8d1082e0d7 [ 73.868692] RDX: 00007f8d1089841f RSI: 00007fff12afcc70 RDI: 0000000040000000 [ 73.869604] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00007fff12afca80 [ 73.870492] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f8d10940bf0 [ 73.871382] R13: 00007fff12afcdb0 R14: 0000000000000000 R15: 00000000000000f8 [ 73.872307] [ 73.872612] irq event stamp: 10763 [ 73.873091] hardirqs last enabled at (10775): [] __up_console_sem+0x78/0x80 [ 73.874157] hardirqs last disabled at (10786): [] __up_console_sem+0x5d/0x80 [ 73.875227] softirqs last enabled at (10670): [] irq_exit_rcu+0x93/0xc0 [ 73.876278] softirqs last disabled at (10665): [] irq_exit_rcu+0x93/0xc0 [ 73.877346] ---[ end trace 0000000000000000 ]--- executing program [ 75.424476] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 77.471960] Bluetooth: hci0: command 0x041b tx timeout [ 79.519952] Bluetooth: hci0: command 0x040f tx timeout executing program [ 81.567946] Bluetooth: hci0: command 0x0419 tx timeout executing program VM DIAGNOSIS: 00:30:17 Registers: info registers vcpu 0 RAX=ffffffff8186d2e2 RBX=ffffffff85dfca50 RCX=ffffffff8186d2aa RDX=0000000000000000 RSI=ffffffff861384bc RDI=ffffffff85dfca48 RBP=ffffffff85dfca48 RSP=ffff888016caf600 R8 =ffffffff861384bc R9 =ffffffff860a0e9a R10=0000000000038001 R11=0000000000022b12 R12=ffffffff85dfca4c R13=ffffffff85dfca48 R14=ffffffff85dfca48 R15=dffffc0000000000 RIP=ffffffff81130c82 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3448a11900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3447e2f840 CR3=000000000e7b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=0013ad65119292df0000000000110f20 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=f45f4b9382ec425500000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000002000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82507685 RDI=ffffffff87f27c00 RBP=ffffffff87f27bc0 RSP=ffff88801a4ff5f0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=ffffffff87f27bc0 R14=0000000000000010 R15=ffffffff82507670 RIP=ffffffff825076dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555723e400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3437100260 CR3=000000000c744000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000