[ 33.135921][ T4674] dhcpcd-run-hook (4674) used greatest stack depth: 22376 bytes left forked to background, child pid 4670 [ 34.679998][ T4671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.690397][ T4671] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.15.195' (ECDSA) to the list of known hosts. 2023/07/05 21:37:31 fuzzer started 2023/07/05 21:37:31 connecting to host at 10.128.0.169:34401 2023/07/05 21:37:31 checking machine... 2023/07/05 21:37:31 checking revisions... 2023/07/05 21:37:31 testing simple program... syzkaller login: [ 57.756106][ T5002] cgroup: Unknown subsys name 'net' [ 57.861761][ T5002] cgroup: Unknown subsys name 'rlimit' [ 59.202054][ T5002] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.215501][ T4992] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4992 'syz-fuzzer' [ 59.324196][ T5004] ================================================================================ [ 59.333970][ T5004] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15 [ 59.341252][ T5004] index 1 is out of range for type 'upid [1]' [ 59.347533][ T5004] CPU: 0 PID: 5004 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-04326-gcc7eab25b1cf #0 [ 59.357738][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 59.368218][ T5004] Call Trace: [ 59.371494][ T5004] [ 59.374457][ T5004] dump_stack_lvl+0x136/0x150 [ 59.379164][ T5004] __ubsan_handle_out_of_bounds+0xd5/0x140 [ 59.384983][ T5004] ? down_read_killable+0x4a1/0x4f0 [ 59.390266][ T5004] alloc_pid+0xbe5/0xdd0 [ 59.394850][ T5004] ? copy_namespaces+0x1e3/0x500 [ 59.399893][ T5004] copy_process+0x4589/0x7620 [ 59.404599][ T5004] ? pidfd_prepare+0x80/0x80 [ 59.409414][ T5004] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 59.415444][ T5004] kernel_clone+0xeb/0x890 [ 59.419965][ T5004] ? create_io_thread+0xe0/0xe0 [ 59.425096][ T5004] ? ksys_unshare+0x676/0x920 [ 59.435330][ T5004] ? lock_downgrade+0x690/0x690 [ 59.440538][ T5004] ? do_raw_spin_lock+0x124/0x2b0 [ 59.445738][ T5004] ? spin_bug+0x1c0/0x1c0 [ 59.450249][ T5004] __do_sys_clone+0xba/0x100 [ 59.455012][ T5004] ? kernel_clone+0x890/0x890 [ 59.459952][ T5004] ? syscall_enter_from_user_mode+0x26/0x80 [ 59.465929][ T5004] do_syscall_64+0x39/0xb0 [ 59.470438][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.476962][ T5004] RIP: 0033:0x7fdb98a89fab [ 59.481504][ T5004] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 59.501379][ T5004] RSP: 002b:00007ffdb98d8010 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 59.510216][ T5004] RAX: ffffffffffffffda RBX: 00007ffdb98d8668 RCX: 00007fdb98a89fab [ 59.518333][ T5004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 59.526561][ T5004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556eb0400 [ 59.534521][ T5004] R10: 0000555556eb06d0 R11: 0000000000000246 R12: 0000000000000000 [ 59.542518][ T5004] R13: 00007ffdb98d8100 R14: 00007fdb98bac9d8 R15: 000000000000000c [ 59.550925][ T5004] [ 59.554547][ T5004] ================================================================================ [ 59.563904][ T5004] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 59.571346][ T5004] CPU: 0 PID: 5004 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-04326-gcc7eab25b1cf #0 [ 59.582177][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 59.592348][ T5004] Call Trace: [ 59.596142][ T5004] [ 59.599061][ T5004] dump_stack_lvl+0xd9/0x150 [ 59.603645][ T5004] panic+0x686/0x730 [ 59.607542][ T5004] ? panic_smp_self_stop+0xa0/0xa0 [ 59.612918][ T5004] ? syslog_print_all+0x3a0/0x3a0 [ 59.618298][ T5004] check_panic_on_warn+0xb1/0xc0 [ 59.623515][ T5004] __ubsan_handle_out_of_bounds+0xfd/0x140 [ 59.629398][ T5004] ? down_read_killable+0x4a1/0x4f0 [ 59.634592][ T5004] alloc_pid+0xbe5/0xdd0 [ 59.638911][ T5004] ? copy_namespaces+0x1e3/0x500 [ 59.643857][ T5004] copy_process+0x4589/0x7620 [ 59.649144][ T5004] ? pidfd_prepare+0x80/0x80 [ 59.653826][ T5004] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 59.659895][ T5004] kernel_clone+0xeb/0x890 [ 59.664433][ T5004] ? create_io_thread+0xe0/0xe0 [ 59.669458][ T5004] ? ksys_unshare+0x676/0x920 [ 59.675001][ T5004] ? lock_downgrade+0x690/0x690 [ 59.680041][ T5004] ? do_raw_spin_lock+0x124/0x2b0 [ 59.685183][ T5004] ? spin_bug+0x1c0/0x1c0 [ 59.689522][ T5004] __do_sys_clone+0xba/0x100 [ 59.694169][ T5004] ? kernel_clone+0x890/0x890 [ 59.698863][ T5004] ? syscall_enter_from_user_mode+0x26/0x80 [ 59.705064][ T5004] do_syscall_64+0x39/0xb0 [ 59.709486][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.715549][ T5004] RIP: 0033:0x7fdb98a89fab [ 59.720233][ T5004] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 59.740618][ T5004] RSP: 002b:00007ffdb98d8010 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 59.749758][ T5004] RAX: ffffffffffffffda RBX: 00007ffdb98d8668 RCX: 00007fdb98a89fab [ 59.758002][ T5004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 59.766234][ T5004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556eb0400 [ 59.774222][ T5004] R10: 0000555556eb06d0 R11: 0000000000000246 R12: 0000000000000000 [ 59.782184][ T5004] R13: 00007ffdb98d8100 R14: 00007fdb98bac9d8 R15: 000000000000000c [ 59.790711][ T5004] [ 59.794061][ T5004] Kernel Offset: disabled [ 59.798454][ T5004] Rebooting in 86400 seconds..