[ 37.407296][ T38] audit: type=1400 audit(1688075032.627:79): avc: denied { write } for pid=5067 comm="sh" path="pipe:[30564]" dev="pipefs" ino=30564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.419453][ T38] audit: type=1400 audit(1688075032.627:80): avc: denied { rlimitinh } for pid=5067 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.427257][ T38] audit: type=1400 audit(1688075032.627:81): avc: denied { siginh } for pid=5067 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.851094][ T38] audit: type=1400 audit(1688075033.087:82): avc: denied { read } for pid=4609 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '[localhost]:15526' (ECDSA) to the list of known hosts. [ 42.063386][ T38] audit: type=1400 audit(1688075037.297:83): avc: denied { execute } for pid=5131 comm="sh" name="syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.071422][ T38] audit: type=1400 audit(1688075037.307:84): avc: denied { execute_no_trans } for pid=5131 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2023/06/29 21:43:57 fuzzer started 2023/06/29 21:43:57 connecting to host at localhost:35701 2023/06/29 21:43:57 checking machine... 2023/06/29 21:43:57 checking revisions... [ 42.413961][ T38] audit: type=1400 audit(1688075037.647:85): avc: denied { getattr } for pid=5131 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2023/06/29 21:43:57 testing simple program... [ 42.422483][ T38] audit: type=1400 audit(1688075037.647:86): avc: denied { read } for pid=5131 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.430599][ T38] audit: type=1400 audit(1688075037.647:87): avc: denied { open } for pid=5131 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.439394][ T38] audit: type=1400 audit(1688075037.657:88): avc: denied { read } for pid=5131 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.440633][ T5141] cgroup: Unknown subsys name 'net' [ 42.448407][ T38] audit: type=1400 audit(1688075037.657:89): avc: denied { open } for pid=5131 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.461315][ T38] audit: type=1400 audit(1688075037.657:90): avc: denied { read } for pid=5131 comm="syz-fuzzer" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.472007][ T38] audit: type=1400 audit(1688075037.657:91): avc: denied { open } for pid=5131 comm="syz-fuzzer" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.482860][ T38] audit: type=1400 audit(1688075037.657:92): avc: denied { write } for pid=5131 comm="syz-fuzzer" path="pipe:[30615]" dev="pipefs" ino=30615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 42.493625][ T38] audit: type=1400 audit(1688075037.667:93): avc: denied { mounton } for pid=5141 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.503166][ T38] audit: type=1400 audit(1688075037.667:94): avc: denied { mount } for pid=5141 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.635761][ T5141] cgroup: Unknown subsys name 'rlimit' [ 42.866124][ T5142] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.524028][ T5141] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 43.529873][ T5139] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5139 'syz-fuzzer' [ 43.600149][ T5143] ================================================================================ [ 43.604142][ T5143] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15 [ 43.606677][ T5143] index 1 is out of range for type 'upid [1]' [ 43.610353][ T5143] CPU: 2 PID: 5143 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-07208-gc6b0271053e7 #0 [ 43.614367][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 43.617583][ T5143] Call Trace: [ 43.618807][ T5143] [ 43.619898][ T5143] dump_stack_lvl+0x136/0x150 [ 43.621613][ T5143] __ubsan_handle_out_of_bounds+0xd5/0x140 [ 43.623778][ T5143] ? __ww_mutex_lock.constprop.0+0x2231/0x2f30 [ 43.626014][ T5143] alloc_pid+0xbe5/0xdd0 [ 43.627583][ T5143] ? copy_namespaces+0x1e3/0x500 [ 43.629376][ T5143] copy_process+0x4589/0x7620 [ 43.631068][ T5143] ? pidfd_prepare+0x80/0x80 [ 43.632744][ T5143] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 43.635424][ T5143] kernel_clone+0xeb/0x890 [ 43.637273][ T5143] ? create_io_thread+0xe0/0xe0 [ 43.639030][ T5143] ? ksys_unshare+0x676/0x920 [ 43.640734][ T5143] ? lock_downgrade+0x690/0x690 [ 43.642484][ T5143] ? do_raw_spin_lock+0x124/0x2b0 [ 43.644440][ T5143] ? spin_bug+0x1c0/0x1c0 [ 43.645996][ T5143] __do_sys_clone+0xba/0x100 [ 43.647659][ T5143] ? kernel_clone+0x890/0x890 [ 43.649359][ T5143] ? syscall_enter_from_user_mode+0x26/0x80 [ 43.651729][ T5143] do_syscall_64+0x39/0xb0 [ 43.653532][ T5143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.655896][ T5143] RIP: 0033:0x7fecdd489fab [ 43.657662][ T5143] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 43.665270][ T5143] RSP: 002b:00007ffd86481a70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 43.668439][ T5143] RAX: ffffffffffffffda RBX: 00007ffd864820c8 RCX: 00007fecdd489fab [ 43.671387][ T5143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 43.674489][ T5143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556ff2400 [ 43.677648][ T5143] R10: 0000555556ff26d0 R11: 0000000000000246 R12: 0000000000000000 [ 43.680795][ T5143] R13: 00007ffd86481b60 R14: 00007fecdd5ac9d8 R15: 000000000000000c [ 43.683943][ T5143] [ 43.685561][ T5143] ================================================================================ [ 43.689538][ T5143] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 43.692192][ T5143] CPU: 2 PID: 5143 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-07208-gc6b0271053e7 #0 [ 43.695781][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 43.698979][ T5143] Call Trace: [ 43.700230][ T5143] [ 43.701305][ T5143] dump_stack_lvl+0xd9/0x150 [ 43.703001][ T5143] panic+0x686/0x730 [ 43.704438][ T5143] ? panic_smp_self_stop+0xa0/0xa0 [ 43.706288][ T5143] ? syslog_print_all+0x3a0/0x3a0 [ 43.708109][ T5143] check_panic_on_warn+0xb1/0xc0 [ 43.709889][ T5143] __ubsan_handle_out_of_bounds+0xfd/0x140 [ 43.711994][ T5143] ? __ww_mutex_lock.constprop.0+0x2231/0x2f30 [ 43.714197][ T5143] alloc_pid+0xbe5/0xdd0 [ 43.715752][ T5143] ? copy_namespaces+0x1e3/0x500 [ 43.717534][ T5143] copy_process+0x4589/0x7620 [ 43.719227][ T5143] ? pidfd_prepare+0x80/0x80 [ 43.720901][ T5143] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 43.723065][ T5143] kernel_clone+0xeb/0x890 [ 43.724822][ T5143] ? create_io_thread+0xe0/0xe0 [ 43.726587][ T5143] ? ksys_unshare+0x676/0x920 [ 43.728284][ T5143] ? lock_downgrade+0x690/0x690 [ 43.730537][ T5143] ? do_raw_spin_lock+0x124/0x2b0 [ 43.732612][ T5143] ? spin_bug+0x1c0/0x1c0 [ 43.734218][ T5143] __do_sys_clone+0xba/0x100 [ 43.735913][ T5143] ? kernel_clone+0x890/0x890 [ 43.737628][ T5143] ? syscall_enter_from_user_mode+0x26/0x80 [ 43.740017][ T5143] do_syscall_64+0x39/0xb0 [ 43.741936][ T5143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.744219][ T5143] RIP: 0033:0x7fecdd489fab [ 43.746345][ T5143] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 43.753353][ T5143] RSP: 002b:00007ffd86481a70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 43.757107][ T5143] RAX: ffffffffffffffda RBX: 00007ffd864820c8 RCX: 00007fecdd489fab [ 43.760801][ T5143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 43.763865][ T5143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556ff2400 [ 43.767486][ T5143] R10: 0000555556ff26d0 R11: 0000000000000246 R12: 0000000000000000 [ 43.771152][ T5143] R13: 00007ffd86481b60 R14: 00007fecdd5ac9d8 R15: 000000000000000c [ 43.774391][ T5143] Connection to localhost closed by remote host. VM DIAGNOSIS: 21:43:59 Registers: info registers vcpu 0 RAX=0000000000033cf5 RBX=ffffe8fefd655380 RCX=ffffffff8a1b3ef5 RDX=0000000000000002 RSI=ffffffff8d1e8880 RDI=ffffe8fefd655380 RBP=ffffffff8d1e8880 RSP=ffffffff8c407d78 R8 =0000000000000001 R9 =ffffed100d6c6d9d R10=ffff88806b636ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e8968 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1b5d13 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555633a848 CR3=000000000c575000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000001 XMM01=00007ffe545d3f700000003000000010 XMM02=6c5f5f00455441564952505f4342494c XMM03=0000000000000000000000000042494c XMM04=6362696c5f5f00455441564952505f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000003a117 RBX=ffffe8fefd755380 RCX=ffffffff8a1b3ef5 RDX=0000000000000002 RSI=ffffffff8d1e8880 RDI=ffffe8fefd755380 RBP=ffffffff8d1e8880 RSP=ffffc9000037fd78 R8 =0000000000000001 R9 =ffffed100d6e6d9d R10=ffff88806b736ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e8968 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1b5d13 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdcf2845ff8 CR3=000000000c575000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=9a318a48a6e04c2b374ce5c04c380327 XMM01=00000000000000000000000000000000 XMM02=000000000000000041228eabe5676f4d XMM03=32322035312e322e302e303120343739 XMM04=00000000000000050000000000a4fb49 XMM05=00000000000000000000000001f06210 XMM06=00000000000000050000000000a4fb4e XMM07=00000000000000000000000001f0620e XMM08=00000000000000060000000000a52559 XMM09=00000000000000000000000001f0620b XMM10=00000000000000030000000000a4c7d9 XMM11=00000000000000000000000001f0620c XMM12=00000000000000060000000000a523e5 XMM13=00000000000000000000000001f0620a XMM14=00000000000000040000000000a4db3f XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84899fd5 RDI=ffffffff921f4580 RBP=ffffffff921f4540 RSP=ffffc90003aff668 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000000d R14=ffffffff84899f70 R15=0000000000000000 RIP=ffffffff84899fff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556ff2400 ffffffff 00c00000 GS =0000 ffff88806b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fecdd5abf40 CR3=0000000023661000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=70616d7469622d7265766f632d7a7973 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000003 RBX=1ffff92000716f57 RCX=0000000000000000 RDX=ffff8880295ac0c0 RSI=0000000000000001 RDI=0000000000000000 RBP=ffff888028f47b80 RSP=ffffc900038b7a70 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=ffff88802c7bb000 R15=0000000000000001 RIP=ffffffff816cde12 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa7a9e36500 ffffffff 00c00000 GS =0000 ffff88806b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c0000eb000 CR3=000000001d64b000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000001 XMM01=00007fff8b22af200000003000000018 XMM02=6c5f5f00455441564952505f4342494c XMM03=0000000000000000000000000042494c XMM04=6362696c5f5f00455441564952505f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000