[ 38.337115][ T38] audit: type=1400 audit(1687986126.148:79): avc: denied { write } for pid=5082 comm="sh" path="pipe:[32867]" dev="pipefs" ino=32867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 38.345364][ T38] audit: type=1400 audit(1687986126.148:80): avc: denied { rlimitinh } for pid=5082 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 38.352900][ T38] audit: type=1400 audit(1687986126.148:81): avc: denied { siginh } for pid=5082 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 39.307648][ T38] audit: type=1400 audit(1687986127.128:82): avc: denied { read } for pid=4603 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '[localhost]:18575' (ECDSA) to the list of known hosts.
[ 42.610469][ T38] audit: type=1400 audit(1687986130.428:83): avc: denied { execute } for pid=5114 comm="sh" name="syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 42.619356][ T38] audit: type=1400 audit(1687986130.428:84): avc: denied { execute_no_trans } for pid=5114 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
2023/06/28 21:02:10 fuzzer started
2023/06/28 21:02:10 connecting to host at localhost:33559
2023/06/28 21:02:10 checking machine...
2023/06/28 21:02:10 checking revisions...
[ 42.900149][ T38] audit: type=1400 audit(1687986130.718:85): avc: denied { getattr } for pid=5114 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
2023/06/28 21:02:10 testing simple program...
[ 42.908591][ T38] audit: type=1400 audit(1687986130.728:86): avc: denied { read } for pid=5114 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 42.928813][ T5125] cgroup: Unknown subsys name 'net'
[ 43.055225][ T5125] cgroup: Unknown subsys name 'rlimit'
[ 43.233762][ T5126] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 43.832888][ T5125] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 43.839101][ T5121] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5121 'syz-fuzzer'
[ 43.865869][ T38] kauditd_printk_skb: 17 callbacks suppressed
[ 43.865877][ T38] audit: type=1400 audit(1687986131.688:104): avc: denied { execmem } for pid=5129 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 43.912404][ T5129] ================================================================================
[ 43.915811][ T5129] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15
[ 43.918387][ T5129] index 1 is out of range for type 'upid [1]'
[ 43.922703][ T5129] CPU: 2 PID: 5129 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-02218-g1b2c92a1cb24 #0
[ 43.926795][ T5129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 43.930537][ T5129] Call Trace:
[ 43.931957][ T5129]
[ 43.933254][ T5129] dump_stack_lvl+0x136/0x150
[ 43.935335][ T5129] __ubsan_handle_out_of_bounds+0xd5/0x140
[ 43.937961][ T5129] ? rwsem_down_write_slowpath+0xdb1/0x1220
[ 43.940542][ T5129] alloc_pid+0xbe5/0xdd0
[ 43.942423][ T5129] ? copy_namespaces+0x1e3/0x500
[ 43.944603][ T5129] copy_process+0x4589/0x7620
[ 43.946707][ T5129] ? pidfd_prepare+0x80/0x80
[ 43.948708][ T5129] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 43.951340][ T5129] kernel_clone+0xeb/0x890
[ 43.953295][ T5129] ? create_io_thread+0xe0/0xe0
[ 43.955452][ T5129] ? ksys_unshare+0x676/0x920
[ 43.957337][ T5129] ? lock_downgrade+0x690/0x690
[ 43.959089][ T5129] ? do_raw_spin_lock+0x124/0x2b0
[ 43.960971][ T5129] ? spin_bug+0x1c0/0x1c0
[ 43.962876][ T5129] __do_sys_clone+0xba/0x100
[ 43.964902][ T5129] ? kernel_clone+0x890/0x890
[ 43.966978][ T5129] ? syscall_enter_from_user_mode+0x26/0x80
[ 43.969522][ T5129] do_syscall_64+0x39/0xb0
[ 43.971479][ T5129] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 43.974073][ T5129] RIP: 0033:0x7fc4f7689fab
[ 43.976025][ T5129] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 43.984308][ T5129] RSP: 002b:00007ffd8cbe9a50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 43.987818][ T5129] RAX: ffffffffffffffda RBX: 00007ffd8cbea0a8 RCX: 00007fc4f7689fab
[ 43.991112][ T5129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 43.994639][ T5129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555555b32400
[ 43.998254][ T5129] R10: 0000555555b326d0 R11: 0000000000000246 R12: 0000000000000000
[ 44.001721][ T5129] R13: 00007ffd8cbe9b40 R14: 00007fc4f77ac9d8 R15: 000000000000000c
[ 44.005146][ T5129]
[ 44.006813][ T5129] ================================================================================
[ 44.010990][ T5129] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 44.014222][ T5129] CPU: 2 PID: 5129 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-02218-g1b2c92a1cb24 #0
[ 44.018868][ T5129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 44.022774][ T5129] Call Trace:
[ 44.024238][ T5129]
[ 44.025562][ T5129] dump_stack_lvl+0xd9/0x150
[ 44.027634][ T5129] panic+0x686/0x730
[ 44.029369][ T5129] ? panic_smp_self_stop+0xa0/0xa0
[ 44.031305][ T5129] ? syslog_print_all+0x3a0/0x3a0
[ 44.033519][ T5129] check_panic_on_warn+0xb1/0xc0
[ 44.035726][ T5129] __ubsan_handle_out_of_bounds+0xfd/0x140
[ 44.038296][ T5129] ? rwsem_down_write_slowpath+0xdb1/0x1220
[ 44.040781][ T5129] alloc_pid+0xbe5/0xdd0
[ 44.042600][ T5129] ? copy_namespaces+0x1e3/0x500
[ 44.044666][ T5129] copy_process+0x4589/0x7620
[ 44.046681][ T5129] ? pidfd_prepare+0x80/0x80
[ 44.048643][ T5129] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 44.051142][ T5129] kernel_clone+0xeb/0x890
[ 44.052991][ T5129] ? create_io_thread+0xe0/0xe0
[ 44.055244][ T5129] ? ksys_unshare+0x676/0x920
[ 44.057276][ T5129] ? lock_downgrade+0x690/0x690
[ 44.059342][ T5129] ? do_raw_spin_lock+0x124/0x2b0
[ 44.061440][ T5129] ? spin_bug+0x1c0/0x1c0
[ 44.063225][ T5129] __do_sys_clone+0xba/0x100
[ 44.065257][ T5129] ? kernel_clone+0x890/0x890
[ 44.067261][ T5129] ? syscall_enter_from_user_mode+0x26/0x80
[ 44.069747][ T5129] do_syscall_64+0x39/0xb0
[ 44.071708][ T5129] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 44.074281][ T5129] RIP: 0033:0x7fc4f7689fab
[ 44.076234][ T5129] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 44.084156][ T5129] RSP: 002b:00007ffd8cbe9a50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 44.087878][ T5129] RAX: ffffffffffffffda RBX: 00007ffd8cbea0a8 RCX: 00007fc4f7689fab
[ 44.091317][ T5129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 44.094633][ T5129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555555b32400
[ 44.097936][ T5129] R10: 0000555555b326d0 R11: 0000000000000246 R12: 0000000000000000
[ 44.101318][ T5129] R13: 00007ffd8cbe9b40 R14: 00007fc4f77ac9d8 R15: 000000000000000c
[ 44.104769][ T5129]
Connection to localhost closed by remote host.
[ 44.1
VM DIAGNOSIS:
21:02:11 Registers:
info registers vcpu 0
RAX=00000000000386c5 RBX=ffffe8fefd655380 RCX=ffffffff8a1415b5 RDX=0000000000000002
RSI=ffffffff8d1e4900 RDI=ffffe8fefd655380 RBP=ffffffff8d1e4900 RSP=ffffffff8c407d78
R8 =0000000000000001 R9 =ffffed100d6c6d9d R10=ffff88806b636ceb R11=0000000000000001
R12=0000000000000002 R13=ffffffff8d1e49e8 R14=0000000000000002 R15=0000000000000000
RIP=ffffffff8a1433d3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000000c00007b000 CR3=000000000c575000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa1
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=682e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000
XMM04=000000000000000a000000c000036010 XMM05=000000000000000c000000c000036020
XMM06=000000000000000c000000c000036030 XMM07=0000000000000022000000c00003c000
XMM08=0000000000000007000000c000036009 XMM09=000000000000000a000000c000036010
XMM10=000000000000000c000000c000036020 XMM11=000000000000000c000000c000036030
XMM12=0000000000000022000000c00003c000 XMM13=000000000000000d000000c000036040
XMM14=0000000000000005000000c00003601a XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000003 RBX=ffff888014ea0f48 RCX=ffffc90000aa8db0 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888014ea0f6a RBP=1ffff920001551ae RSP=ffffc90000aa8d60
R8 =0000000000000001 R9 =fffffbfff1d0f062 R10=ffffffff8e878317 R11=0000000000000001
R12=ffffffff8c7ab498 R13=ffff888014ea0f40 R14=0000000000000001 R15=ffff888014ea0480
RIP=ffffffff81654338 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc4f77a8008 CR3=000000000c575000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000001 XMM01=00007ffe94da98c00000003000000010
XMM02=6c5f5f00455441564952505f4342494c XMM03=0000000000000000000000000042494c
XMM04=6362696c5f5f00455441564952505f43 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 2
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff848929d5 RDI=ffffffff921cfdc0 RBP=ffffffff921cfd80 RSP=ffffc90003697668
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000020 R14=ffffffff84892970 R15=0000000000000000
RIP=ffffffff848929ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555555b32400 ffffffff 00c00000
GS =0000 ffff88806b800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe000008f000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc4f77abf40 CR3=0000000017491000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=70616d7469622d7265766f632d7a7973 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 3
RAX=000000000002233d RBX=ffffe8fefd955380 RCX=ffffffff8a1415b5 RDX=0000000000000002
RSI=ffffffff8d1e4900 RDI=ffffe8fefd955380 RBP=ffffffff8d1e4900 RSP=ffffc9000039fd78
R8 =0000000000000001 R9 =ffffed100d726d9d R10=ffff88806b936ceb R11=0000000000000001
R12=0000000000000002 R13=ffffffff8d1e49e8 R14=0000000000000002 R15=0000000000000000
RIP=ffffffff8a1433d3 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe00000d6000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe6f0eecff8 CR3=000000000c575000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=85c1e29a77e7621edf578f279644d252 XMM01=fb54b6962c5510d49b44935206a7858e
XMM02=6ef5750f647a028860d9db204af43ad3 XMM03=a56a23ff2e80594cbcdbc62b2346b607
XMM04=00000000ffffffff0000000000000068 XMM05=00000000000000000000000000000028
XMM06=b0a3457d202959870000000100000000 XMM07=82af79fd000000000000000000000000
XMM08=b0ecab5154318da6fae0c3b97c4cad53 XMM09=00000000000000000000000008dd7aa7
XMM10=7e6109116a9c7e04ce164f5c8a5e382b XMM11=6269c590256c9c24427f8ae4454c3d9c
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=a54ff53a3c6ef372bb67ae856a09e667 XMM15=5be0cd191f83d9ab9b05688c510e527f