Warning: Permanently added '[localhost]:25481' (ECDSA) to the list of known hosts. 2023/06/30 04:24:14 fuzzer started 2023/06/30 04:24:14 connecting to host at localhost:33413 2023/06/30 04:24:14 checking machine... 2023/06/30 04:24:14 checking revisions... 2023/06/30 04:24:14 testing simple program... [ 43.228974][ T5137] cgroup: Unknown subsys name 'net' [ 43.418626][ T5137] cgroup: Unknown subsys name 'rlimit' [ 44.276012][ T5137] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 44.284198][ T5133] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5133 'syz-fuzzer' [ 44.370394][ T5141] ================================================================================ [ 44.374405][ T5141] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15 [ 44.377427][ T5141] index 1 is out of range for type 'upid [1]' [ 44.381189][ T5141] CPU: 2 PID: 5141 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08543-g0b26eadbf200 #0 [ 44.384915][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 44.388030][ T5141] Call Trace: [ 44.389222][ T5141] [ 44.390346][ T5141] dump_stack_lvl+0x136/0x150 [ 44.392024][ T5141] __ubsan_handle_out_of_bounds+0xd5/0x140 [ 44.394087][ T5141] ? __ww_mutex_lock.constprop.0+0x801/0x2f30 [ 44.396218][ T5141] alloc_pid+0xbe5/0xdd0 [ 44.397717][ T5141] ? copy_namespaces+0x1e3/0x500 [ 44.399506][ T5141] copy_process+0x4589/0x7620 [ 44.401171][ T5141] ? pidfd_prepare+0x80/0x80 [ 44.402803][ T5141] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 44.405024][ T5141] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 44.407171][ T5141] kernel_clone+0xeb/0x890 [ 44.408747][ T5141] ? create_io_thread+0xe0/0xe0 [ 44.410528][ T5141] ? ksys_unshare+0x676/0x920 [ 44.412182][ T5141] ? lock_downgrade+0x690/0x690 [ 44.413898][ T5141] ? do_raw_spin_lock+0x124/0x2b0 [ 44.415665][ T5141] ? spin_bug+0x1c0/0x1c0 [ 44.417191][ T5141] ? do_raw_spin_unlock+0x175/0x230 [ 44.419052][ T5141] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 44.421067][ T5141] ? pci_biosrom_size+0x90/0x90 [ 44.422910][ T5141] ? unshare_fd+0x1c0/0x1c0 [ 44.424512][ T5141] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 44.426800][ T5141] ? lockdep_hardirqs_on+0x7d/0x100 [ 44.428603][ T5141] __do_fast_syscall_32+0x65/0xf0 [ 44.430426][ T5141] do_fast_syscall_32+0x33/0x70 [ 44.432134][ T5141] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 44.434336][ T5141] RIP: 0023:0xf7f35579 [ 44.435755][ T5141] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 44.442526][ T5141] RSP: 002b:00000000ff9ca2a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 44.445421][ T5141] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 44.448206][ T5141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005695f3e8 [ 44.451021][ T5141] RBP: 00000000f734e000 R08: 0000000000000000 R09: 0000000000000000 [ 44.453811][ T5141] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 44.456583][ T5141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.459426][ T5141] [ 44.460778][ T5141] ================================================================================ [ 44.463997][ T5141] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 44.466609][ T5141] CPU: 2 PID: 5141 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08543-g0b26eadbf200 #0 [ 44.470132][ T5141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 44.473156][ T5141] Call Trace: [ 44.474349][ T5141] [ 44.475610][ T5141] dump_stack_lvl+0xd9/0x150 [ 44.477632][ T5141] panic+0x686/0x730 [ 44.479357][ T5141] ? panic_smp_self_stop+0xa0/0xa0 [ 44.481585][ T5141] ? syslog_print_all+0x3a0/0x3a0 [ 44.483837][ T5141] check_panic_on_warn+0xb1/0xc0 [ 44.486059][ T5141] __ubsan_handle_out_of_bounds+0xfd/0x140 [ 44.488705][ T5141] ? __ww_mutex_lock.constprop.0+0x801/0x2f30 [ 44.491457][ T5141] alloc_pid+0xbe5/0xdd0 [ 44.493359][ T5141] ? copy_namespaces+0x1e3/0x500 [ 44.495575][ T5141] copy_process+0x4589/0x7620 [ 44.497687][ T5141] ? pidfd_prepare+0x80/0x80 [ 44.499759][ T5141] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 44.502487][ T5141] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 44.505220][ T5141] kernel_clone+0xeb/0x890 [ 44.507260][ T5141] ? create_io_thread+0xe0/0xe0 [ 44.509492][ T5141] ? ksys_unshare+0x676/0x920 [ 44.511662][ T5141] ? lock_downgrade+0x690/0x690 [ 44.513874][ T5141] ? do_raw_spin_lock+0x124/0x2b0 [ 44.516169][ T5141] ? spin_bug+0x1c0/0x1c0 [ 44.518146][ T5141] ? do_raw_spin_unlock+0x175/0x230 [ 44.520494][ T5141] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 44.522941][ T5141] ? pci_biosrom_size+0x90/0x90 [ 44.525082][ T5141] ? unshare_fd+0x1c0/0x1c0 [ 44.527133][ T5141] ? syscall_enter_from_user_mode_prepare+0x1d/0x50 [ 44.530107][ T5141] ? lockdep_hardirqs_on+0x7d/0x100 [ 44.532495][ T5141] __do_fast_syscall_32+0x65/0xf0 [ 44.534804][ T5141] do_fast_syscall_32+0x33/0x70 [ 44.537019][ T5141] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 44.539810][ T5141] RIP: 0023:0xf7f35579 [ 44.541619][ T5141] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 44.550156][ T5141] RSP: 002b:00000000ff9ca2a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 44.553897][ T5141] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 44.557446][ T5141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005695f3e8 [ 44.561024][ T5141] RBP: 00000000f734e000 R08: 0000000000000000 R09: 0000000000000000 [ 44.564612][ T5141] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 44.568205][ T5141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.571807][ T5141] Connection to localhost closed by remote host. VM DIAGNOSIS: 04:24:16 Registers: info registers vcpu 0 RAX=00000000000342a1 RBX=ffffe8ffad621e00 RCX=ffffffff8a1c5e05 RDX=0000000000000002 RSI=ffffffff8d3f1960 RDI=ffffe8ffad621e00 RBP=ffffffff8d3f1960 RSP=ffffffff8c607d78 R8 =0000000000000001 R9 =ffffed10058c6d9d R10=ffff88802c636ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d3f1a48 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1c7c23 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f408754c2a9 CR3=000000000c775000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa1 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=64747365742d72656c6c616b7a79732f XMM01=32353938373333333932726964747365 XMM02=6573755f776f6c6c6120303d76676573 XMM03=313d72656c646e61685f766765735f72 XMM04=000000000000000a000000c000036010 XMM05=000000000000000c000000c000036020 XMM06=000000000000000c000000c000036030 XMM07=0000000000000022000000c00003c000 XMM08=0000000000000007000000c000036009 XMM09=000000000000000a000000c000036010 XMM10=000000000000000c000000c000036020 XMM11=000000000000000c000000c000036030 XMM12=0000000000000022000000c00003c000 XMM13=000000000000000d000000c000036040 XMM14=0000000000000005000000c00003601a XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000028af7 RBX=ffffe8ffad721e00 RCX=ffffffff8a1c5e05 RDX=0000000000000002 RSI=ffffffff8d3f1960 RDI=ffffe8ffad721e00 RBP=ffffffff8d3f1960 RSP=ffffc90000467d78 R8 =0000000000000001 R9 =ffffed10058e6d9d R10=ffff88802c736ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d3f1a48 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1c7c23 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f46b10e6000 CR3=000000000c775000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=0000000000000000451b3abd223781f4 XMM02=00000000000000000000000000000000 XMM03=000000c0004402500000000000cbe990 XMM04=000000c0004402300000000000cbe990 XMM05=000000c0004402400000000000cbe990 XMM06=000000c0004402500000000000cbe990 XMM07=000000c0005247200000000000cbea90 XMM08=756f6d0a3232203a64656c6961662029 XMM09=70632f70756f7267637a79732f28746e XMM10=656c696166202974696d696c72202c75 XMM11=732f2e20706177736b6d0a3232203a64 XMM12=676e69747465530a656c69662d706177 XMM13=65762065636170737061777320707520 XMM14=203d20657a6973202c31206e6f697372 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000530d40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8179903e R14=ffffc90003917708 R15=ffffffff8177ef70 RIP=ffffffff8137d3a8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c800000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f737afa0 CR3=00000000001f2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=179ea92a179ea92a7faade0053a28122 XMM01=b17fa2abf26afd6af23cb6b7d69a632a XMM02=b9dd3de57ecdbc3aade31f55b90a9136 XMM03=0faf76c384c62524b37bc12500d682a3 XMM04=ffadc7a28cfa816c684ada7f9f088bcf XMM05=c7007a08f9f975817aa0e4d35e840758 XMM06=b939650e94a8dd2b8cb8014486dfa930 XMM07=ade31f55b90a9136f23cb6b7d69a632a XMM08=0c0d0e0f08090a0b0405060700010203 XMM09=a01dc5bb224f481c756eead76c4b13d5 XMM10=18a73beed1dbe49e71dc9e955dbcff7f XMM11=00000000000000000000000001f0620c XMM12=00000000000000060000000000a523e5 XMM13=00000000000000000000000001f0620a XMM14=00000000000000040000000000a4db3f XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000031f2f RBX=ffffe8ffad921e00 RCX=ffffffff8a1c5e05 RDX=0000000000000002 RSI=ffffffff8d3f1960 RDI=ffffe8ffad921e00 RBP=ffffffff8d3f1960 RSP=ffffc90000487d78 R8 =0000000000000001 R9 =ffffed1005926d9d R10=ffff88802c936ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d3f1a48 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1c7c23 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c0004b1000 CR3=000000000c775000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=54476d8dc8beb5cb6167f04b824c8807 XMM01=00000000000000000000000000000000 XMM02=00000000000000004123333170a420f4 XMM03=32322035312e322e302e303120383335 XMM04=00000000000000050000000000a4fb49 XMM05=00000000000000000000000001f06210 XMM06=00000000000000050000000000a4fb4e XMM07=00000000000000000000000001f0620e XMM08=00000000000000060000000000a52559 XMM09=00000000000000000000000001f0620b XMM10=00000000000000030000000000a4c7d9 XMM11=00000000000000000000000001f0620c XMM12=00000000000000060000000000a523e5 XMM13=00000000000000000000000001f0620a XMM14=00000000000000040000000000a4db3f XMM15=00000000000000000000000000000000