WARNING in register_net_sysctl
------------[ cut here ]------------
sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
WARNING: CPU: 0 PID: 5002 at net/sysctl_net.c:155 ensure_safe_net_sysctl net/sysctl_net.c:155 [inline]
WARNING: CPU: 0 PID: 5002 at net/sysctl_net.c:155 register_net_sysctl+0x207/0x3c0 net/sysctl_net.c:167
Modules linked in:
CPU: 0 PID: 5002 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230516-syzkaller-02748-g885df05bf634 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
RIP: 0010:ensure_safe_net_sysctl net/sysctl_net.c:155 [inline]
RIP: 0010:register_net_sysctl+0x207/0x3c0 net/sysctl_net.c:167
Code: 8b 43 f4 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 a9 01 00 00 48 8b 53 ec 4c 89 e9 4c 89 fe 48 c7 c7 c0 98 85 8b e8 69 13 7f f7 <0f> 0b 48 89 d8 48 c1 e8 03 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01
RSP: 0018:ffffc900039afbf8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff888018729454 RCX: 0000000000000000
RDX: ffff88807d765940 RSI: ffffffff814bd247 RDI: 0000000000000001
RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff888018729448
R13: ffffffff8b859740 R14: 0000000000000000 R15: ffffffff8b69e220
FS: 0000555556b7f400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d3afeed7b8 CR3: 00000000700bf000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
ip4_frags_ns_ctl_register net/ipv4/ip_fragment.c:618 [inline]
ipv4_frags_init_net net/ipv4/ip_fragment.c:689 [inline]
ipv4_frags_init_net+0x269/0x430 net/ipv4/ip_fragment.c:660
ops_init+0xb9/0x6b0 net/core/net_namespace.c:136
setup_net+0x5d1/0xc50 net/core/net_namespace.c:339
copy_net_ns+0x4ee/0x8e0 net/core/net_namespace.c:491
create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110
unshare_nsproxy_namespaces+0xc1/0x1f0 kernel/nsproxy.c:228
ksys_unshare+0x449/0x920 kernel/fork.c:3440
__do_sys_unshare kernel/fork.c:3511 [inline]
__se_sys_unshare kernel/fork.c:3509 [inline]
__x64_sys_unshare+0x31/0x40 kernel/fork.c:3509
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f1e60c8d6b7
Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff5dfd0838 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fff5dfd0e78 RCX: 00007f1e60c8d6b7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
R13: 00007fff5dfd0910 R14: 00007f1e60dac9d8 R15: 000000000000000c
DUID 00:04:bc:75:22:1c:bd:a7:21:14:02:3c:35:d8:4f:be:4d:56
forked to background, child pid 4668
[ 32.477646][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0
[ 32.488615][ T4669] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts.
2023/05/16 07:25:16 fuzzer started
2023/05/16 07:25:17 connecting to host at 10.128.0.169:43989
2023/05/16 07:25:17 checking machine...
2023/05/16 07:25:17 checking revisions...
2023/05/16 07:25:17 testing simple program...
syzkaller login: [ 54.458448][ T4999] cgroup: Unknown subsys name 'net'
[ 54.613292][ T4999] cgroup: Unknown subsys name 'rlimit'
[ 54.738470][ T4990] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4990 'syz-fuzzer'
[ 54.863078][ T5003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 54.871435][ T5003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 54.879202][ T5003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 54.887203][ T5003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 54.895235][ T5003] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 54.902804][ T5003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 54.933084][ T5002] ------------[ cut here ]------------
[ 54.938647][ T5002] sysctl net/ipv4/ipfrag_low_thresh: data points to kernel global data: ipfrag_low_thresh_unused
[ 54.949965][ T5002] WARNING: CPU: 0 PID: 5002 at net/sysctl_net.c:155 register_net_sysctl+0x207/0x3c0
[ 54.959584][ T5002] Modules linked in:
[ 54.963729][ T5002] CPU: 0 PID: 5002 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230516-syzkaller-02748-g885df05bf634 #0
[ 54.975482][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 54.985615][ T5002] RIP: 0010:register_net_sysctl+0x207/0x3c0
[ 54.991658][ T5002] Code: 8b 43 f4 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 a9 01 00 00 48 8b 53 ec 4c 89 e9 4c 89 fe 48 c7 c7 c0 98 85 8b e8 69 13 7f f7 <0f> 0b 48 89 d8 48 c1 e8 03 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01
[ 55.011382][ T5002] RSP: 0018:ffffc900039afbf8 EFLAGS: 00010286
[ 55.017557][ T5002] RAX: 0000000000000000 RBX: ffff888018729454 RCX: 0000000000000000
[ 55.025760][ T5002] RDX: ffff88807d765940 RSI: ffffffff814bd247 RDI: 0000000000000001
[ 55.033811][ T5002] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[ 55.041928][ T5002] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888018729448
[ 55.050022][ T5002] R13: ffffffff8b859740 R14: 0000000000000000 R15: ffffffff8b69e220
[ 55.058182][ T5002] FS: 0000555556b7f400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 55.067267][ T5002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.074202][ T5002] CR2: 000055d3afeed7b8 CR3: 00000000700bf000 CR4: 00000000003506f0
[ 55.082322][ T5002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.090316][ T5002] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.098376][ T5002] Call Trace:
[ 55.101707][ T5002]
[ 55.104636][ T5002] ? ip4_frag_init+0x380/0x380
[ 55.109400][ T5002] ipv4_frags_init_net+0x269/0x430
[ 55.114708][ T5002] ops_init+0xb9/0x6b0
[ 55.118822][ T5002] setup_net+0x5d1/0xc50
[ 55.124545][ T5002] ? down_read_killable+0x14a/0x4f0
[ 55.129808][ T5002] ? ops_init+0x6b0/0x6b0
[ 55.134422][ T5002] copy_net_ns+0x4ee/0x8e0
[ 55.138874][ T5002] create_new_namespaces+0x3f6/0xb20
[ 55.144404][ T5002] unshare_nsproxy_namespaces+0xc1/0x1f0
[ 55.150253][ T5002] ksys_unshare+0x449/0x920
[ 55.154840][ T5002] ? unshare_fd+0x1c0/0x1c0
[ 55.159371][ T5002] ? unlock_page_memcg+0x3b0/0x3b0
[ 55.164537][ T5002] ? syscall_enter_from_user_mode+0x26/0x80
[ 55.170485][ T5002] __x64_sys_unshare+0x31/0x40
[ 55.175337][ T5002] do_syscall_64+0x39/0xb0
[ 55.179873][ T5002] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.186005][ T5002] RIP: 0033:0x7f1e60c8d6b7
[ 55.190467][ T5002] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 55.210262][ T5002] RSP: 002b:00007fff5dfd0838 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 55.218897][ T5002] RAX: ffffffffffffffda RBX: 00007fff5dfd0e78 RCX: 00007f1e60c8d6b7
[ 55.226987][ T5002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[ 55.235023][ T5002] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[ 55.243107][ T5002] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
[ 55.251142][ T5002] R13: 00007fff5dfd0910 R14: 00007f1e60dac9d8 R15: 000000000000000c
[ 55.259241][ T5002]
[ 55.262507][ T5002] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 55.269810][ T5002] CPU: 0 PID: 5002 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230516-syzkaller-02748-g885df05bf634 #0
[ 55.281365][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 55.291431][ T5002] Call Trace:
[ 55.294698][ T5002]
[ 55.297616][ T5002] dump_stack_lvl+0xd9/0x150
[ 55.302209][ T5002] panic+0x686/0x730
[ 55.306100][ T5002] ? panic_smp_self_stop+0xa0/0xa0
[ 55.311202][ T5002] ? show_trace_log_lvl+0x285/0x390
[ 55.316426][ T5002] ? register_net_sysctl+0x207/0x3c0
[ 55.321707][ T5002] check_panic_on_warn+0xb1/0xc0
[ 55.326640][ T5002] __warn+0xf2/0x390
[ 55.330527][ T5002] ? preempt_schedule_notrace+0x5f/0xd0
[ 55.336072][ T5002] ? register_net_sysctl+0x207/0x3c0
[ 55.341403][ T5002] report_bug+0x2da/0x500
[ 55.345740][ T5002] handle_bug+0x3c/0x70
[ 55.349899][ T5002] exc_invalid_op+0x18/0x50
[ 55.354400][ T5002] asm_exc_invalid_op+0x1a/0x20
[ 55.359243][ T5002] RIP: 0010:register_net_sysctl+0x207/0x3c0
[ 55.365147][ T5002] Code: 8b 43 f4 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 a9 01 00 00 48 8b 53 ec 4c 89 e9 4c 89 fe 48 c7 c7 c0 98 85 8b e8 69 13 7f f7 <0f> 0b 48 89 d8 48 c1 e8 03 0f b6 14 28 48 89 d8 83 e0 07 83 c0 01
[ 55.384878][ T5002] RSP: 0018:ffffc900039afbf8 EFLAGS: 00010286
[ 55.390971][ T5002] RAX: 0000000000000000 RBX: ffff888018729454 RCX: 0000000000000000
[ 55.399152][ T5002] RDX: ffff88807d765940 RSI: ffffffff814bd247 RDI: 0000000000000001
[ 55.407315][ T5002] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[ 55.415468][ T5002] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888018729448
[ 55.423442][ T5002] R13: ffffffff8b859740 R14: 0000000000000000 R15: ffffffff8b69e220
[ 55.431518][ T5002] ? __warn_printk+0x187/0x310
[ 55.436310][ T5002] ? register_net_sysctl+0x207/0x3c0
[ 55.442132][ T5002] ? ip4_frag_init+0x380/0x380
[ 55.446915][ T5002] ipv4_frags_init_net+0x269/0x430
[ 55.452059][ T5002] ops_init+0xb9/0x6b0
[ 55.456241][ T5002] setup_net+0x5d1/0xc50
[ 55.460495][ T5002] ? down_read_killable+0x14a/0x4f0
[ 55.465705][ T5002] ? ops_init+0x6b0/0x6b0
[ 55.470056][ T5002] copy_net_ns+0x4ee/0x8e0
[ 55.474494][ T5002] create_new_namespaces+0x3f6/0xb20
[ 55.479810][ T5002] unshare_nsproxy_namespaces+0xc1/0x1f0
[ 55.485469][ T5002] ksys_unshare+0x449/0x920
[ 55.489985][ T5002] ? unshare_fd+0x1c0/0x1c0
[ 55.494506][ T5002] ? unlock_page_memcg+0x3b0/0x3b0
[ 55.499628][ T5002] ? syscall_enter_from_user_mode+0x26/0x80
[ 55.505539][ T5002] __x64_sys_unshare+0x31/0x40
[ 55.510419][ T5002] do_syscall_64+0x39/0xb0
[ 55.514853][ T5002] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.520784][ T5002] RIP: 0033:0x7f1e60c8d6b7
[ 55.525209][ T5002] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 55.544917][ T5002] RSP: 002b:00007fff5dfd0838 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 55.553341][ T5002] RAX: ffffffffffffffda RBX: 00007fff5dfd0e78 RCX: 00007f1e60c8d6b7
[ 55.561322][ T5002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[ 55.569386][ T5002] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[ 55.577359][ T5002] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
[ 55.585525][ T5002] R13: 00007fff5dfd0910 R14: 00007f1e60dac9d8 R15: 000000000000000c
[ 55.593511][ T5002]
[ 55.596731][ T5002] Kernel Offset: disabled
[ 55.601133][ T5002] Rebooting in 86400 seconds..
syzkaller build log:
go env (err=)
GO111MODULE="auto"
GOARCH="amd64"
GOBIN=""
GOCACHE="/syzkaller/.cache/go-build"
GOENV="/syzkaller/.config/go/env"
GOEXE=""
GOEXPERIMENT=""
GOFLAGS=""
GOHOSTARCH="amd64"
GOHOSTOS="linux"
GOINSECURE=""
GOMODCACHE="/syzkaller/jobs-2/linux/gopath/pkg/mod"
GONOPROXY=""
GONOSUMDB=""
GOOS="linux"
GOPATH="/syzkaller/jobs-2/linux/gopath"
GOPRIVATE=""
GOPROXY="https://proxy.golang.org,direct"
GOROOT="/usr/local/go"
GOSUMDB="sum.golang.org"
GOTMPDIR=""
GOTOOLDIR="/usr/local/go/pkg/tool/linux_amd64"
GOVCS=""
GOVERSION="go1.20.1"
GCCGO="gccgo"
GOAMD64="v1"
AR="ar"
CC="gcc"
CXX="g++"
CGO_ENABLED="1"
GOMOD="/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod"
GOWORK=""
CGO_CFLAGS="-O2 -g"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-O2 -g"
CGO_FFLAGS="-O2 -g"
CGO_LDFLAGS="-O2 -g"
PKG_CONFIG="pkg-config"
GOGCCFLAGS="-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build505425884=/tmp/go-build -gno-record-gcc-switches"
git status (err=)
HEAD detached at 07980f9d1
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:32: run command via tools/syz-env for best compatibility, see:
Makefile:33: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=07980f9d1d998541bd3e9d122ff8da29458bbef2 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230209-124315'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=07980f9d1d998541bd3e9d122ff8da29458bbef2 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230209-124315'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=07980f9d1d998541bd3e9d122ff8da29458bbef2 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230209-124315'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress
mkdir -p ./bin/linux_amd64
gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"07980f9d1d998541bd3e9d122ff8da29458bbef2\"