forked to background, child pid 4677
[ 35.714415][ T4678] 8021q: adding VLAN 0 to HW filter on device bond0
[ 35.724254][ T4678] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 36.179815][ T4755] sshd (4755) used greatest stack depth: 22440 bytes left
OK
syzkaller
Warning: Permanently added '10.128.1.128' (ECDSA) to the list of known hosts.
2023/06/30 09:17:49 fuzzer started
2023/06/30 09:17:49 connecting to host at 10.128.0.169:40449
2023/06/30 09:17:49 checking machine...
2023/06/30 09:17:49 checking revisions...
2023/06/30 09:17:49 testing simple program...
syzkaller login: [ 55.211334][ T5008] cgroup: Unknown subsys name 'net'
[ 55.345907][ T5008] cgroup: Unknown subsys name 'rlimit'
[ 56.688662][ T5008] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 56.701664][ T5003] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5003 'syz-fuzzer'
[ 56.825975][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 56.834533][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 56.842807][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 56.851062][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 56.860104][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 56.867587][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 56.887820][ T5010] ================================================================================
[ 56.900610][ T5010] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15
[ 56.907944][ T5010] index 1 is out of range for type 'upid [1]'
[ 56.914479][ T5010] CPU: 0 PID: 5010 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08686-ge55e5df193d2 #0
[ 56.924557][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 56.934777][ T5010] Call Trace:
[ 56.938051][ T5010]
[ 56.940982][ T5010] dump_stack_lvl+0x136/0x150
[ 56.945670][ T5010] __ubsan_handle_out_of_bounds+0xd5/0x140
[ 56.951575][ T5010] ? __ww_mutex_lock.constprop.0+0x801/0x2f30
[ 56.957648][ T5010] alloc_pid+0xbe5/0xdd0
[ 56.961897][ T5010] ? copy_namespaces+0x1e3/0x500
[ 56.966881][ T5010] copy_process+0x4589/0x7620
[ 56.971592][ T5010] ? pidfd_prepare+0x80/0x80
[ 56.976205][ T5010] ? print_usage_bug.part.0+0x670/0x670
[ 56.981948][ T5010] ? do_raw_spin_unlock+0x175/0x230
[ 56.987255][ T5010] kernel_clone+0xeb/0x890
[ 56.991770][ T5010] ? reacquire_held_locks+0x214/0x4f0
[ 56.997158][ T5010] ? create_io_thread+0xe0/0xe0
[ 57.002025][ T5010] ? find_held_lock+0x2d/0x110
[ 57.006801][ T5010] ? do_user_addr_fault+0x379/0x1380
[ 57.012100][ T5010] __do_compat_sys_ia32_clone+0x9e/0xd0
[ 57.017653][ T5010] ? pci_biosrom_size+0x90/0x90
[ 57.022525][ T5010] ? lockdep_hardirqs_on+0x7d/0x100
[ 57.027734][ T5010] ? syscall_enter_from_user_mode+0x26/0x80
[ 57.033850][ T5010] do_int80_syscall_32+0x4a/0x90
[ 57.038895][ T5010] entry_INT80_compat+0x8f/0xa0
[ 57.043857][ T5010] RIP: 0023:0xf725c8e4
[ 57.048020][ T5010] Code: 8b 44 24 04 89 41 08 c7 41 04 00 00 00 00 53 56 57 8b 74 24 24 8b 54 24 20 8b 5c 24 18 8b 7c 24 28 b8 78 00 00 00 89 19 cd 80 <5f> 5e 5b 85 c0 0f 8c 61 81 00 00 74 01 c3 89 f5 ff d3 e8 00 00 00
[ 57.068281][ T5010] RSP: 002b:00000000ffd1f6c0 EFLAGS: 00000292 ORIG_RAX: 0000000000000078
[ 57.076766][ T5010] RAX: ffffffffffffffda RBX: 0000000030000000 RCX: 00000000f749ffa4
[ 57.084964][ T5010] RDX: 00000000f73a0000 RSI: 0000000000001000 RDI: 0000000000000000
[ 57.094437][ T5010] RBP: 00000000ffd1fba8 R08: 0000000000000000 R09: 0000000000000000
[ 57.102412][ T5010] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 57.110405][ T5010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 57.118396][ T5010]
[ 57.121894][ T5010] ================================================================================
[ 57.131542][ T5010] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 57.138827][ T5010] CPU: 0 PID: 5010 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08686-ge55e5df193d2 #0
[ 57.148902][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 57.159061][ T5010] Call Trace:
[ 57.162337][ T5010]
[ 57.165258][ T5010] dump_stack_lvl+0xd9/0x150
[ 57.169856][ T5010] panic+0x686/0x730
[ 57.174004][ T5010] ? panic_smp_self_stop+0xa0/0xa0
[ 57.179187][ T5010] ? syslog_print_all+0x3a0/0x3a0
[ 57.184213][ T5010] check_panic_on_warn+0xb1/0xc0
[ 57.189244][ T5010] __ubsan_handle_out_of_bounds+0xfd/0x140
[ 57.195165][ T5010] ? __ww_mutex_lock.constprop.0+0x801/0x2f30
[ 57.201537][ T5010] alloc_pid+0xbe5/0xdd0
[ 57.206236][ T5010] ? copy_namespaces+0x1e3/0x500
[ 57.211327][ T5010] copy_process+0x4589/0x7620
[ 57.216387][ T5010] ? pidfd_prepare+0x80/0x80
[ 57.221095][ T5010] ? print_usage_bug.part.0+0x670/0x670
[ 57.227384][ T5010] ? do_raw_spin_unlock+0x175/0x230
[ 57.233175][ T5010] kernel_clone+0xeb/0x890
[ 57.237722][ T5010] ? reacquire_held_locks+0x214/0x4f0
[ 57.243321][ T5010] ? create_io_thread+0xe0/0xe0
[ 57.248972][ T5010] ? find_held_lock+0x2d/0x110
[ 57.253749][ T5010] ? do_user_addr_fault+0x379/0x1380
[ 57.259110][ T5010] __do_compat_sys_ia32_clone+0x9e/0xd0
[ 57.264691][ T5010] ? pci_biosrom_size+0x90/0x90
[ 57.269825][ T5010] ? lockdep_hardirqs_on+0x7d/0x100
[ 57.275302][ T5010] ? syscall_enter_from_user_mode+0x26/0x80
[ 57.281210][ T5010] do_int80_syscall_32+0x4a/0x90
[ 57.286160][ T5010] entry_INT80_compat+0x8f/0xa0
[ 57.291126][ T5010] RIP: 0023:0xf725c8e4
[ 57.295372][ T5010] Code: 8b 44 24 04 89 41 08 c7 41 04 00 00 00 00 53 56 57 8b 74 24 24 8b 54 24 20 8b 5c 24 18 8b 7c 24 28 b8 78 00 00 00 89 19 cd 80 <5f> 5e 5b 85 c0 0f 8c 61 81 00 00 74 01 c3 89 f5 ff d3 e8 00 00 00
[ 57.316384][ T5010] RSP: 002b:00000000ffd1f6c0 EFLAGS: 00000292 ORIG_RAX: 0000000000000078
[ 57.324986][ T5010] RAX: ffffffffffffffda RBX: 0000000030000000 RCX: 00000000f749ffa4
[ 57.333790][ T5010] RDX: 00000000f73a0000 RSI: 0000000000001000 RDI: 0000000000000000
[ 57.341854][ T5010] RBP: 00000000ffd1fba8 R08: 0000000000000000 R09: 0000000000000000
[ 57.350097][ T5010] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 57.358190][ T5010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 57.366183][ T5010]
[ 57.369448][ T5010] Kernel Offset: disabled
[ 57.373844][ T5010] Rebooting in 86400 seconds..