WARNING in register_net_sysctl ------------[ cut here ]------------ sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused WARNING: CPU: 1 PID: 5007 at net/sysctl_net.c:155 ensure_safe_net_sysctl net/sysctl_net.c:155 [inline] WARNING: CPU: 1 PID: 5007 at net/sysctl_net.c:155 register_net_sysctl+0x207/0x3c0 net/sysctl_net.c:167 Modules linked in: CPU: 1 PID: 5007 Comm: syz-executor.0 Not tainted 6.4.0-rc1-syzkaller-00240-ge641577eb6e8 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 RIP: 0010:ensure_safe_net_sysctl net/sysctl_net.c:155 [inline] RIP: 0010:register_net_sysctl+0x207/0x3c0 net/sysctl_net.c:167 Code: 8b 43 f4 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 a9 01 00 00 48 8b 53 ec 4c 89 e9 4c 89 fe 48 c7 c7 c0 01 85 8b e8 59 61 81 f7 <0f> 0b 48 89 d8 48 c1 e8 03 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01 RSP: 0018:ffffc90003c2fbf8 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff8880220b9054 RCX: 0000000000000000 RDX: ffff888018715940 RSI: ffffffff814c03e7 RDI: 0000000000000001 RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880220b9048 R13: ffffffff8b850040 R14: 0000000000000000 R15: ffffffff8b694ce0 FS: 0000555555a30400(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b12e78cff0 CR3: 000000006f8c6000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ip4_frags_ns_ctl_register net/ipv4/ip_fragment.c:618 [inline] ipv4_frags_init_net net/ipv4/ip_fragment.c:689 [inline] ipv4_frags_init_net+0x269/0x430 net/ipv4/ip_fragment.c:660 ops_init+0xb9/0x6b0 net/core/net_namespace.c:136 setup_net+0x5d1/0xc50 net/core/net_namespace.c:339 copy_net_ns+0x4ee/0x8e0 net/core/net_namespace.c:491 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0xc1/0x1f0 kernel/nsproxy.c:228 ksys_unshare+0x449/0x920 kernel/fork.c:3444 __do_sys_unshare kernel/fork.c:3515 [inline] __se_sys_unshare kernel/fork.c:3513 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3513 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2970288e87 Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc3c780a88 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007ffc3c7810a8 RCX: 00007f2970288e87 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 00007f297038cbf0 R13: 00007ffc3c780b40 R14: 0000000000000000 R15: 00000000000000f8 Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts. 2023/05/16 16:34:58 ignoring optional flag "raw_cover"="false" 2023/05/16 16:34:58 ignoring optional flag "sandbox_arg"="0" 2023/05/16 16:34:58 fuzzer started 2023/05/16 16:34:58 connecting to host at 10.128.0.169:42027 2023/05/16 16:34:58 checking machine... 2023/05/16 16:34:58 checking revisions... 2023/05/16 16:34:59 testing simple program... syzkaller login: [ 83.517990][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.527531][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.535254][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.543431][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.551658][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.559302][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.594007][ T5007] ------------[ cut here ]------------ [ 83.600185][ T5007] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 83.612252][ T5007] WARNING: CPU: 1 PID: 5007 at net/sysctl_net.c:155 register_net_sysctl+0x207/0x3c0 [ 83.621772][ T5007] Modules linked in: [ 83.625866][ T5007] CPU: 1 PID: 5007 Comm: syz-executor.0 Not tainted 6.4.0-rc1-syzkaller-00240-ge641577eb6e8 #0 [ 83.636293][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 83.646867][ T5007] RIP: 0010:register_net_sysctl+0x207/0x3c0 [ 83.652853][ T5007] Code: 8b 43 f4 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 a9 01 00 00 48 8b 53 ec 4c 89 e9 4c 89 fe 48 c7 c7 c0 01 85 8b e8 59 61 81 f7 <0f> 0b 48 89 d8 48 c1 e8 03 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01 [ 83.673177][ T5007] RSP: 0018:ffffc90003c2fbf8 EFLAGS: 00010286 [ 83.679336][ T5007] RAX: 0000000000000000 RBX: ffff8880220b9054 RCX: 0000000000000000 [ 83.687375][ T5007] RDX: ffff888018715940 RSI: ffffffff814c03e7 RDI: 0000000000000001 [ 83.695394][ T5007] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 83.703444][ T5007] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880220b9048 [ 83.711854][ T5007] R13: ffffffff8b850040 R14: 0000000000000000 R15: ffffffff8b694ce0 [ 83.720007][ T5007] FS: 0000555555a30400(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 83.729060][ T5007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.735742][ T5007] CR2: 000055b12e78cff0 CR3: 000000006f8c6000 CR4: 00000000003506e0 [ 83.743795][ T5007] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.751877][ T5007] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.760209][ T5007] Call Trace: [ 83.763606][ T5007] [ 83.766630][ T5007] ? ip4_frag_init+0x380/0x380 [ 83.771474][ T5007] ipv4_frags_init_net+0x269/0x430 [ 83.776987][ T5007] ops_init+0xb9/0x6b0 [ 83.781132][ T5007] setup_net+0x5d1/0xc50 [ 83.785416][ T5007] ? ops_init+0x6b0/0x6b0 [ 83.789955][ T5007] copy_net_ns+0x4ee/0x8e0 [ 83.794421][ T5007] create_new_namespaces+0x3f6/0xb20 [ 83.799819][ T5007] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 83.805808][ T5007] ksys_unshare+0x449/0x920 [ 83.810346][ T5007] ? unshare_fd+0x1c0/0x1c0 [ 83.814877][ T5007] ? unlock_page_memcg+0x2d0/0x2d0 [ 83.820088][ T5007] ? syscall_enter_from_user_mode+0x26/0x80 [ 83.826256][ T5007] __x64_sys_unshare+0x31/0x40 [ 83.831145][ T5007] do_syscall_64+0x39/0xb0 [ 83.836104][ T5007] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.842060][ T5007] RIP: 0033:0x7f2970288e87 [ 83.846566][ T5007] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 83.866699][ T5007] RSP: 002b:00007ffc3c780a88 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 83.875153][ T5007] RAX: ffffffffffffffda RBX: 00007ffc3c7810a8 RCX: 00007f2970288e87 [ 83.884449][ T5007] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 83.892650][ T5007] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 83.901086][ T5007] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f297038cbf0 [ 83.909400][ T5007] R13: 00007ffc3c780b40 R14: 0000000000000000 R15: 00000000000000f8 [ 83.917948][ T5007] [ 83.921192][ T5007] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.928761][ T5007] CPU: 1 PID: 5007 Comm: syz-executor.0 Not tainted 6.4.0-rc1-syzkaller-00240-ge641577eb6e8 #0 [ 83.939281][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 83.949878][ T5007] Call Trace: [ 83.953376][ T5007] [ 83.956898][ T5007] dump_stack_lvl+0xd9/0x150 [ 83.961685][ T5007] panic+0x686/0x730 [ 83.965890][ T5007] ? panic_smp_self_stop+0xa0/0xa0 [ 83.971148][ T5007] ? show_trace_log_lvl+0x285/0x390 [ 83.976482][ T5007] ? register_net_sysctl+0x207/0x3c0 [ 83.981805][ T5007] check_panic_on_warn+0xb1/0xc0 [ 83.986776][ T5007] __warn+0xf2/0x390 [ 83.990716][ T5007] ? preempt_schedule_notrace+0x5f/0xd0 [ 83.996342][ T5007] ? register_net_sysctl+0x207/0x3c0 [ 84.001727][ T5007] report_bug+0x2da/0x500 [ 84.006100][ T5007] handle_bug+0x3c/0x70 [ 84.010293][ T5007] exc_invalid_op+0x18/0x50 [ 84.014839][ T5007] asm_exc_invalid_op+0x1a/0x20 [ 84.019721][ T5007] RIP: 0010:register_net_sysctl+0x207/0x3c0 [ 84.025825][ T5007] Code: 8b 43 f4 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 a9 01 00 00 48 8b 53 ec 4c 89 e9 4c 89 fe 48 c7 c7 c0 01 85 8b e8 59 61 81 f7 <0f> 0b 48 89 d8 48 c1 e8 03 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01 [ 84.046178][ T5007] RSP: 0018:ffffc90003c2fbf8 EFLAGS: 00010286 [ 84.052301][ T5007] RAX: 0000000000000000 RBX: ffff8880220b9054 RCX: 0000000000000000 [ 84.060323][ T5007] RDX: ffff888018715940 RSI: ffffffff814c03e7 RDI: 0000000000000001 [ 84.068346][ T5007] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 84.076603][ T5007] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880220b9048 [ 84.084610][ T5007] R13: ffffffff8b850040 R14: 0000000000000000 R15: ffffffff8b694ce0 [ 84.092806][ T5007] ? __warn_printk+0x187/0x310 [ 84.097639][ T5007] ? register_net_sysctl+0x207/0x3c0 [ 84.103064][ T5007] ? ip4_frag_init+0x380/0x380 [ 84.107873][ T5007] ipv4_frags_init_net+0x269/0x430 [ 84.113033][ T5007] ops_init+0xb9/0x6b0 [ 84.117152][ T5007] setup_net+0x5d1/0xc50 [ 84.121439][ T5007] ? ops_init+0x6b0/0x6b0 [ 84.125925][ T5007] copy_net_ns+0x4ee/0x8e0 [ 84.130467][ T5007] create_new_namespaces+0x3f6/0xb20 [ 84.135801][ T5007] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 84.141484][ T5007] ksys_unshare+0x449/0x920 [ 84.146472][ T5007] ? unshare_fd+0x1c0/0x1c0 [ 84.151032][ T5007] ? unlock_page_memcg+0x2d0/0x2d0 [ 84.156283][ T5007] ? syscall_enter_from_user_mode+0x26/0x80 [ 84.162233][ T5007] __x64_sys_unshare+0x31/0x40 [ 84.167039][ T5007] do_syscall_64+0x39/0xb0 [ 84.171500][ T5007] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.177521][ T5007] RIP: 0033:0x7f2970288e87 [ 84.182063][ T5007] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 84.201785][ T5007] RSP: 002b:00007ffc3c780a88 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 84.210419][ T5007] RAX: ffffffffffffffda RBX: 00007ffc3c7810a8 RCX: 00007f2970288e87 [ 84.219024][ T5007] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 84.227193][ T5007] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 84.235195][ T5007] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f297038cbf0 [ 84.243276][ T5007] R13: 00007ffc3c780b40 R14: 0000000000000000 R15: 00000000000000f8 [ 84.251286][ T5007] [ 84.254391][ T5007] Kernel Offset: disabled [ 84.258882][ T5007] Rebooting in 86400 seconds.. syzkaller build log: go env (err=) GO111MODULE="auto" GOARCH="amd64" GOBIN="" GOCACHE="/syzkaller/.cache/go-build" GOENV="/syzkaller/.config/go/env" GOEXE="" GOEXPERIMENT="" GOFLAGS="" GOHOSTARCH="amd64" GOHOSTOS="linux" GOINSECURE="" GOMODCACHE="/syzkaller/jobs/linux/gopath/pkg/mod" GONOPROXY="" GONOSUMDB="" GOOS="linux" GOPATH="/syzkaller/jobs/linux/gopath" GOPRIVATE="" GOPROXY="https://proxy.golang.org,direct" GOROOT="/usr/local/go" GOSUMDB="sum.golang.org" GOTMPDIR="" GOTOOLDIR="/usr/local/go/pkg/tool/linux_amd64" GOVCS="" GOVERSION="go1.20.1" GCCGO="gccgo" GOAMD64="v1" AR="ar" CC="gcc" CXX="g++" CGO_ENABLED="1" GOMOD="/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod" GOWORK="" CGO_CFLAGS="-O2 -g" CGO_CPPFLAGS="" CGO_CXXFLAGS="-O2 -g" CGO_FFLAGS="-O2 -g" CGO_LDFLAGS="-O2 -g" PKG_CONFIG="pkg-config" GOGCCFLAGS="-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build749537227=/tmp/go-build -gno-record-gcc-switches" git status (err=) HEAD detached at 1d849ab4d nothing to commit, working tree clean go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen make .descriptions bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=1d849ab4d892af13a249f75628790b47e42b7c74 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20210930-173221'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=1d849ab4d892af13a249f75628790b47e42b7c74 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20210930-173221'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=1d849ab4d892af13a249f75628790b47e42b7c74 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20210930-173221'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress mkdir -p ./bin/linux_amd64 gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"1d849ab4d892af13a249f75628790b47e42b7c74\"