DUID 00:04:2e:b3:b6:17:38:f5:ab:01:59:0b:43:16:c0:36:06:e7 forked to background, child pid 4672 [ 34.400937][ T4673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.412981][ T4673] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.6' (ECDSA) to the list of known hosts. 2023/07/01 12:49:38 fuzzer started 2023/07/01 12:49:38 connecting to host at 10.128.0.169:39973 2023/07/01 12:49:38 checking machine... 2023/07/01 12:49:38 checking revisions... 2023/07/01 12:49:39 testing simple program... syzkaller login: [ 54.529848][ T5004] cgroup: Unknown subsys name 'net' [ 54.670183][ T5004] cgroup: Unknown subsys name 'rlimit' [ 55.997363][ T5004] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.009881][ T4997] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4997 'syz-fuzzer' [ 56.120933][ T5006] ================================================================================ [ 56.130384][ T5006] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15 [ 56.137773][ T5006] index 1 is out of range for type 'upid [1]' [ 56.144829][ T5006] CPU: 0 PID: 5006 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-04285-g26b32974ad2e #0 [ 56.155259][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 56.166140][ T5006] Call Trace: [ 56.169490][ T5006] [ 56.172694][ T5006] dump_stack_lvl+0x136/0x150 [ 56.177667][ T5006] __ubsan_handle_out_of_bounds+0xd5/0x140 [ 56.183999][ T5006] ? down_read_killable+0x4a1/0x4f0 [ 56.189377][ T5006] alloc_pid+0xbe5/0xdd0 [ 56.193705][ T5006] ? copy_namespaces+0x1e3/0x500 [ 56.198823][ T5006] copy_process+0x4589/0x7620 [ 56.203894][ T5006] ? pidfd_prepare+0x80/0x80 [ 56.208667][ T5006] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 56.214927][ T5006] kernel_clone+0xeb/0x890 [ 56.219518][ T5006] ? create_io_thread+0xe0/0xe0 [ 56.224893][ T5006] ? ksys_unshare+0x676/0x920 [ 56.229561][ T5006] ? lock_downgrade+0x690/0x690 [ 56.234410][ T5006] ? do_raw_spin_lock+0x124/0x2b0 [ 56.239538][ T5006] ? spin_bug+0x1c0/0x1c0 [ 56.243874][ T5006] __do_sys_clone+0xba/0x100 [ 56.248661][ T5006] ? kernel_clone+0x890/0x890 [ 56.253430][ T5006] ? syscall_enter_from_user_mode+0x26/0x80 [ 56.259409][ T5006] do_syscall_64+0x39/0xb0 [ 56.263834][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.269744][ T5006] RIP: 0033:0x7fa39ec89fab [ 56.274160][ T5006] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 56.294286][ T5006] RSP: 002b:00007ffd20ba24e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 56.303854][ T5006] RAX: ffffffffffffffda RBX: 00007ffd20ba2b38 RCX: 00007fa39ec89fab [ 56.312197][ T5006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 56.320401][ T5006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556d86400 [ 56.328598][ T5006] R10: 0000555556d866d0 R11: 0000000000000246 R12: 0000000000000000 [ 56.337181][ T5006] R13: 00007ffd20ba25d0 R14: 00007fa39edac9d8 R15: 000000000000000c [ 56.345432][ T5006] [ 56.349085][ T5006] ================================================================================ [ 56.358938][ T5006] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 56.366743][ T5006] CPU: 0 PID: 5006 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-04285-g26b32974ad2e #0 [ 56.376737][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 56.387148][ T5006] Call Trace: [ 56.390444][ T5006] [ 56.393775][ T5006] dump_stack_lvl+0xd9/0x150 [ 56.398420][ T5006] panic+0x686/0x730 [ 56.402416][ T5006] ? panic_smp_self_stop+0xa0/0xa0 [ 56.407719][ T5006] ? syslog_print_all+0x3a0/0x3a0 [ 56.413282][ T5006] check_panic_on_warn+0xb1/0xc0 [ 56.418309][ T5006] __ubsan_handle_out_of_bounds+0xfd/0x140 [ 56.424112][ T5006] ? down_read_killable+0x4a1/0x4f0 [ 56.429413][ T5006] alloc_pid+0xbe5/0xdd0 [ 56.433952][ T5006] ? copy_namespaces+0x1e3/0x500 [ 56.438894][ T5006] copy_process+0x4589/0x7620 [ 56.444554][ T5006] ? pidfd_prepare+0x80/0x80 [ 56.449682][ T5006] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 56.455857][ T5006] kernel_clone+0xeb/0x890 [ 56.460270][ T5006] ? create_io_thread+0xe0/0xe0 [ 56.465475][ T5006] ? ksys_unshare+0x676/0x920 [ 56.472158][ T5006] ? lock_downgrade+0x690/0x690 [ 56.476998][ T5006] ? do_raw_spin_lock+0x124/0x2b0 [ 56.482309][ T5006] ? spin_bug+0x1c0/0x1c0 [ 56.486812][ T5006] __do_sys_clone+0xba/0x100 [ 56.491395][ T5006] ? kernel_clone+0x890/0x890 [ 56.496248][ T5006] ? syscall_enter_from_user_mode+0x26/0x80 [ 56.502398][ T5006] do_syscall_64+0x39/0xb0 [ 56.506817][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.512895][ T5006] RIP: 0033:0x7fa39ec89fab [ 56.517533][ T5006] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 56.539236][ T5006] RSP: 002b:00007ffd20ba24e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 56.548984][ T5006] RAX: ffffffffffffffda RBX: 00007ffd20ba2b38 RCX: 00007fa39ec89fab [ 56.557957][ T5006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 56.566115][ T5006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556d86400 [ 56.574175][ T5006] R10: 0000555556d866d0 R11: 0000000000000246 R12: 0000000000000000 [ 56.582230][ T5006] R13: 00007ffd20ba25d0 R14: 00007fa39edac9d8 R15: 000000000000000c [ 56.590403][ T5006] [ 56.593740][ T5006] Kernel Offset: disabled [ 56.598235][ T5006] Rebooting in 86400 seconds..