WARNING in register_net_sysctl ------------[ cut here ]------------ sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused WARNING: CPU: 0 PID: 5002 at net/sysctl_net.c:155 ensure_safe_net_sysctl net/sysctl_net.c:155 [inline] WARNING: CPU: 0 PID: 5002 at net/sysctl_net.c:155 register_net_sysctl+0x207/0x3c0 net/sysctl_net.c:167 Modules linked in: CPU: 0 PID: 5002 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230516-syzkaller-02748-g885df05bf634 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 RIP: 0010:ensure_safe_net_sysctl net/sysctl_net.c:155 [inline] RIP: 0010:register_net_sysctl+0x207/0x3c0 net/sysctl_net.c:167 Code: 8b 43 f4 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 a9 01 00 00 48 8b 53 ec 4c 89 e9 4c 89 fe 48 c7 c7 c0 98 85 8b e8 69 13 7f f7 <0f> 0b 48 89 d8 48 c1 e8 03 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01 RSP: 0018:ffffc90003c5fbf8 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88802c07b054 RCX: 0000000000000000 RDX: ffff88801e728000 RSI: ffffffff814bd247 RDI: 0000000000000001 RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802c07b048 R13: ffffffff8b859740 R14: 0000000000000000 R15: ffffffff8b69e220 FS: 0000555555790400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fdbfa8d4620 CR3: 0000000070191000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ip4_frags_ns_ctl_register net/ipv4/ip_fragment.c:618 [inline] ipv4_frags_init_net net/ipv4/ip_fragment.c:689 [inline] ipv4_frags_init_net+0x269/0x430 net/ipv4/ip_fragment.c:660 ops_init+0xb9/0x6b0 net/core/net_namespace.c:136 setup_net+0x5d1/0xc50 net/core/net_namespace.c:339 copy_net_ns+0x4ee/0x8e0 net/core/net_namespace.c:491 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0xc1/0x1f0 kernel/nsproxy.c:228 ksys_unshare+0x449/0x920 kernel/fork.c:3440 __do_sys_unshare kernel/fork.c:3511 [inline] __se_sys_unshare kernel/fork.c:3509 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3509 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fdbf9c8d687 Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fffd0fb15f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007fffd0fb1c38 RCX: 00007fdbf9c8d687 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 00007fffd0fb16d0 R14: 00007fdbf9dac9d8 R15: 000000000000000c DUID 00:04:bc:75:22:1c:bd:a7:21:14:02:3c:35:d8:4f:be:4d:56 forked to background, child pid 4667 [ 34.211935][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.232918][ T4668] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts. 2023/05/16 10:01:30 fuzzer started 2023/05/16 10:01:30 connecting to host at 10.128.0.169:35301 2023/05/16 10:01:30 checking machine... 2023/05/16 10:01:30 checking revisions... 2023/05/16 10:01:31 testing simple program... syzkaller login: [ 57.483745][ T5000] cgroup: Unknown subsys name 'net' [ 57.630362][ T5000] cgroup: Unknown subsys name 'rlimit' [ 57.796830][ T4997] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4997 'syz-fuzzer' [ 57.915592][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.923888][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.931743][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.940209][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.948019][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.955625][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.985957][ T5002] ------------[ cut here ]------------ [ 57.991591][ T5002] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused [ 58.003058][ T5002] WARNING: CPU: 0 PID: 5002 at net/sysctl_net.c:155 register_net_sysctl+0x207/0x3c0 [ 58.012654][ T5002] Modules linked in: [ 58.016558][ T5002] CPU: 0 PID: 5002 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230516-syzkaller-02748-g885df05bf634 #0 [ 58.028159][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 58.038267][ T5002] RIP: 0010:register_net_sysctl+0x207/0x3c0 [ 58.044238][ T5002] Code: 8b 43 f4 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 a9 01 00 00 48 8b 53 ec 4c 89 e9 4c 89 fe 48 c7 c7 c0 98 85 8b e8 69 13 7f f7 <0f> 0b 48 89 d8 48 c1 e8 03 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01 [ 58.064043][ T5002] RSP: 0018:ffffc90003c5fbf8 EFLAGS: 00010286 [ 58.070149][ T5002] RAX: 0000000000000000 RBX: ffff88802c07b054 RCX: 0000000000000000 [ 58.078136][ T5002] RDX: ffff88801e728000 RSI: ffffffff814bd247 RDI: 0000000000000001 [ 58.086172][ T5002] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 58.094194][ T5002] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802c07b048 [ 58.102233][ T5002] R13: ffffffff8b859740 R14: 0000000000000000 R15: ffffffff8b69e220 [ 58.110357][ T5002] FS: 0000555555790400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 58.119368][ T5002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.125979][ T5002] CR2: 00007fdbfa8d4620 CR3: 0000000070191000 CR4: 00000000003506f0 [ 58.134020][ T5002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.142045][ T5002] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.150062][ T5002] Call Trace: [ 58.153351][ T5002] [ 58.156290][ T5002] ? ip4_frag_init+0x380/0x380 [ 58.161122][ T5002] ipv4_frags_init_net+0x269/0x430 [ 58.166361][ T5002] ops_init+0xb9/0x6b0 [ 58.170485][ T5002] setup_net+0x5d1/0xc50 [ 58.174754][ T5002] ? down_read_killable+0x14a/0x4f0 [ 58.180021][ T5002] ? ops_init+0x6b0/0x6b0 [ 58.184467][ T5002] copy_net_ns+0x4ee/0x8e0 [ 58.188957][ T5002] create_new_namespaces+0x3f6/0xb20 [ 58.194277][ T5002] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 58.199987][ T5002] ksys_unshare+0x449/0x920 [ 58.204522][ T5002] ? unshare_fd+0x1c0/0x1c0 [ 58.209103][ T5002] ? unlock_page_memcg+0x3b0/0x3b0 [ 58.214254][ T5002] ? syscall_enter_from_user_mode+0x26/0x80 [ 58.220256][ T5002] __x64_sys_unshare+0x31/0x40 [ 58.225134][ T5002] do_syscall_64+0x39/0xb0 [ 58.229595][ T5002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.235606][ T5002] RIP: 0033:0x7fdbf9c8d687 [ 58.240100][ T5002] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.259785][ T5002] RSP: 002b:00007fffd0fb15f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 58.268224][ T5002] RAX: ffffffffffffffda RBX: 00007fffd0fb1c38 RCX: 00007fdbf9c8d687 [ 58.276253][ T5002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 58.284314][ T5002] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 58.292328][ T5002] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 58.300353][ T5002] R13: 00007fffd0fb16d0 R14: 00007fdbf9dac9d8 R15: 000000000000000c [ 58.308331][ T5002] [ 58.311389][ T5002] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.318672][ T5002] CPU: 0 PID: 5002 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230516-syzkaller-02748-g885df05bf634 #0 [ 58.330383][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 58.340432][ T5002] Call Trace: [ 58.343892][ T5002] [ 58.346812][ T5002] dump_stack_lvl+0xd9/0x150 [ 58.351408][ T5002] panic+0x686/0x730 [ 58.355302][ T5002] ? panic_smp_self_stop+0xa0/0xa0 [ 58.360413][ T5002] ? show_trace_log_lvl+0x285/0x390 [ 58.365616][ T5002] ? register_net_sysctl+0x207/0x3c0 [ 58.370900][ T5002] check_panic_on_warn+0xb1/0xc0 [ 58.375857][ T5002] __warn+0xf2/0x390 [ 58.379766][ T5002] ? preempt_schedule_notrace+0x5f/0xd0 [ 58.385404][ T5002] ? register_net_sysctl+0x207/0x3c0 [ 58.390697][ T5002] report_bug+0x2da/0x500 [ 58.395130][ T5002] handle_bug+0x3c/0x70 [ 58.399293][ T5002] exc_invalid_op+0x18/0x50 [ 58.403806][ T5002] asm_exc_invalid_op+0x1a/0x20 [ 58.408670][ T5002] RIP: 0010:register_net_sysctl+0x207/0x3c0 [ 58.414576][ T5002] Code: 8b 43 f4 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 a9 01 00 00 48 8b 53 ec 4c 89 e9 4c 89 fe 48 c7 c7 c0 98 85 8b e8 69 13 7f f7 <0f> 0b 48 89 d8 48 c1 e8 03 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01 [ 58.434184][ T5002] RSP: 0018:ffffc90003c5fbf8 EFLAGS: 00010286 [ 58.440256][ T5002] RAX: 0000000000000000 RBX: ffff88802c07b054 RCX: 0000000000000000 [ 58.448400][ T5002] RDX: ffff88801e728000 RSI: ffffffff814bd247 RDI: 0000000000000001 [ 58.456460][ T5002] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 58.464434][ T5002] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802c07b048 [ 58.472405][ T5002] R13: ffffffff8b859740 R14: 0000000000000000 R15: ffffffff8b69e220 [ 58.480386][ T5002] ? __warn_printk+0x187/0x310 [ 58.485866][ T5002] ? register_net_sysctl+0x207/0x3c0 [ 58.491164][ T5002] ? ip4_frag_init+0x380/0x380 [ 58.495946][ T5002] ipv4_frags_init_net+0x269/0x430 [ 58.501069][ T5002] ops_init+0xb9/0x6b0 [ 58.505165][ T5002] setup_net+0x5d1/0xc50 [ 58.509416][ T5002] ? down_read_killable+0x14a/0x4f0 [ 58.514658][ T5002] ? ops_init+0x6b0/0x6b0 [ 58.519052][ T5002] copy_net_ns+0x4ee/0x8e0 [ 58.523483][ T5002] create_new_namespaces+0x3f6/0xb20 [ 58.528790][ T5002] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 58.534446][ T5002] ksys_unshare+0x449/0x920 [ 58.538964][ T5002] ? unshare_fd+0x1c0/0x1c0 [ 58.543478][ T5002] ? unlock_page_memcg+0x3b0/0x3b0 [ 58.548600][ T5002] ? syscall_enter_from_user_mode+0x26/0x80 [ 58.554510][ T5002] __x64_sys_unshare+0x31/0x40 [ 58.559568][ T5002] do_syscall_64+0x39/0xb0 [ 58.563992][ T5002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.569906][ T5002] RIP: 0033:0x7fdbf9c8d687 [ 58.574327][ T5002] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.594023][ T5002] RSP: 002b:00007fffd0fb15f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 58.602442][ T5002] RAX: ffffffffffffffda RBX: 00007fffd0fb1c38 RCX: 00007fdbf9c8d687 [ 58.610589][ T5002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 58.618643][ T5002] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 58.626628][ T5002] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 58.634601][ T5002] R13: 00007fffd0fb16d0 R14: 00007fdbf9dac9d8 R15: 000000000000000c [ 58.642605][ T5002] [ 58.645769][ T5002] Kernel Offset: disabled [ 58.650198][ T5002] Rebooting in 86400 seconds.. syzkaller build log: go env (err=) GO111MODULE="auto" GOARCH="amd64" GOBIN="" GOCACHE="/syzkaller/.cache/go-build" GOENV="/syzkaller/.config/go/env" GOEXE="" GOEXPERIMENT="" GOFLAGS="" GOHOSTARCH="amd64" GOHOSTOS="linux" GOINSECURE="" GOMODCACHE="/syzkaller/jobs-2/linux/gopath/pkg/mod" GONOPROXY="" GONOSUMDB="" GOOS="linux" GOPATH="/syzkaller/jobs-2/linux/gopath" GOPRIVATE="" GOPROXY="https://proxy.golang.org,direct" GOROOT="/usr/local/go" GOSUMDB="sum.golang.org" GOTMPDIR="" GOTOOLDIR="/usr/local/go/pkg/tool/linux_amd64" GOVCS="" GOVERSION="go1.20.1" GCCGO="gccgo" GOAMD64="v1" AR="ar" CC="gcc" CXX="g++" CGO_ENABLED="1" GOMOD="/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod" GOWORK="" CGO_CFLAGS="-O2 -g" CGO_CPPFLAGS="" CGO_CXXFLAGS="-O2 -g" CGO_FFLAGS="-O2 -g" CGO_LDFLAGS="-O2 -g" PKG_CONFIG="pkg-config" GOGCCFLAGS="-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build2573239778=/tmp/go-build -gno-record-gcc-switches" git status (err=) HEAD detached at be607b78d nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:32: run command via tools/syz-env for best compatibility, see: Makefile:33: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=be607b78d7dea8ef5a0267ae7396fded7dc016d5 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230204-105222'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=be607b78d7dea8ef5a0267ae7396fded7dc016d5 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230204-105222'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=be607b78d7dea8ef5a0267ae7396fded7dc016d5 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230204-105222'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress mkdir -p ./bin/linux_amd64 gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"be607b78d7dea8ef5a0267ae7396fded7dc016d5\"