syzkaller
syzkaller login: [ 49.264695][ T27] kauditd_printk_skb: 42 callbacks suppressed
[ 49.264710][ T27] audit: type=1400 audit(1687986433.835:77): avc: denied { transition } for pid=4845 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 49.293755][ T27] audit: type=1400 audit(1687986433.835:78): avc: denied { noatsecure } for pid=4845 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 49.313376][ T27] audit: type=1400 audit(1687986433.865:79): avc: denied { write } for pid=4845 comm="sh" path="pipe:[28376]" dev="pipefs" ino=28376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 49.335837][ T27] audit: type=1400 audit(1687986433.865:80): avc: denied { rlimitinh } for pid=4845 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 49.354717][ T27] audit: type=1400 audit(1687986433.865:81): avc: denied { siginh } for pid=4845 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 50.612820][ T27] audit: type=1400 audit(1687986435.185:82): avc: denied { read } for pid=4433 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.0.228' (ECDSA) to the list of known hosts.
2023/06/28 21:07:26 fuzzer started
[ 61.997409][ T27] audit: type=1400 audit(1687986446.565:83): avc: denied { write } for pid=4986 comm="syz-fuzzer" path="pipe:[28432]" dev="pipefs" ino=28432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
2023/06/28 21:07:26 connecting to host at 10.128.0.169:35839
2023/06/28 21:07:26 checking machine...
2023/06/28 21:07:26 checking revisions...
2023/06/28 21:07:26 testing simple program...
[ 62.322029][ T27] audit: type=1400 audit(1687986446.895:84): avc: denied { getattr } for pid=4986 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 62.346025][ T27] audit: type=1400 audit(1687986446.895:85): avc: denied { read } for pid=4986 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 62.368113][ T27] audit: type=1400 audit(1687986446.895:86): avc: denied { open } for pid=4986 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 62.391677][ T27] audit: type=1400 audit(1687986446.915:87): avc: denied { read } for pid=4986 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 62.412852][ T4995] cgroup: Unknown subsys name 'net'
[ 62.416687][ T27] audit: type=1400 audit(1687986446.915:88): avc: denied { open } for pid=4986 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 62.447279][ T27] audit: type=1400 audit(1687986446.915:89): avc: denied { read } for pid=4986 comm="syz-fuzzer" name="vhci" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 62.471112][ T27] audit: type=1400 audit(1687986446.915:90): avc: denied { open } for pid=4986 comm="syz-fuzzer" path="/dev/vhci" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 62.495082][ T27] audit: type=1400 audit(1687986446.975:91): avc: denied { mounton } for pid=4995 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 62.518784][ T27] audit: type=1400 audit(1687986446.975:92): avc: denied { mount } for pid=4995 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 62.666075][ T4995] cgroup: Unknown subsys name 'rlimit'
[ 62.823050][ T4997] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 64.019015][ T4995] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 64.032474][ T4989] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4989 'syz-fuzzer'
[ 64.147777][ T4998] ================================================================================
[ 64.157284][ T4998] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15
[ 64.164649][ T4998] index 1 is out of range for type 'upid [1]'
[ 64.170812][ T4998] CPU: 0 PID: 4998 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-02218-g1b2c92a1cb24 #0
[ 64.180895][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 64.191030][ T4998] Call Trace:
[ 64.194300][ T4998]
[ 64.197219][ T4998] dump_stack_lvl+0x136/0x150
[ 64.201999][ T4998] __ubsan_handle_out_of_bounds+0xd5/0x140
[ 64.208181][ T4998] ? rwsem_down_write_slowpath+0xdb1/0x1220
[ 64.214081][ T4998] alloc_pid+0xbe5/0xdd0
[ 64.218323][ T4998] ? copy_namespaces+0x1e3/0x500
[ 64.223446][ T4998] copy_process+0x4589/0x7620
[ 64.228952][ T4998] ? pidfd_prepare+0x80/0x80
[ 64.233679][ T4998] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 64.239884][ T4998] kernel_clone+0xeb/0x890
[ 64.244420][ T4998] ? create_io_thread+0xe0/0xe0
[ 64.249357][ T4998] ? ksys_unshare+0x676/0x920
[ 64.254669][ T4998] ? lock_downgrade+0x690/0x690
[ 64.259735][ T4998] ? do_raw_spin_lock+0x124/0x2b0
[ 64.264872][ T4998] ? spin_bug+0x1c0/0x1c0
[ 64.269201][ T4998] __do_sys_clone+0xba/0x100
[ 64.273784][ T4998] ? kernel_clone+0x890/0x890
[ 64.278637][ T4998] ? syscall_enter_from_user_mode+0x26/0x80
[ 64.284522][ T4998] do_syscall_64+0x39/0xb0
[ 64.288935][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 64.294927][ T4998] RIP: 0033:0x7f9fa8a89fab
[ 64.299334][ T4998] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 64.318941][ T4998] RSP: 002b:00007fffe061fec0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 64.327430][ T4998] RAX: ffffffffffffffda RBX: 00007fffe0620518 RCX: 00007f9fa8a89fab
[ 64.335388][ T4998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 64.343548][ T4998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556d16400
[ 64.351534][ T4998] R10: 0000555556d166d0 R11: 0000000000000246 R12: 0000000000000000
[ 64.359585][ T4998] R13: 00007fffe061ffb0 R14: 00007f9fa8bac9d8 R15: 000000000000000c
[ 64.370864][ T4998]
[ 64.374126][ T4998] ================================================================================
[ 64.383671][ T4998] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 64.390941][ T4998] CPU: 0 PID: 4998 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-02218-g1b2c92a1cb24 #0
[ 64.400938][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 64.410993][ T4998] Call Trace:
[ 64.414272][ T4998]
[ 64.417300][ T4998] dump_stack_lvl+0xd9/0x150
[ 64.421998][ T4998] panic+0x686/0x730
[ 64.425911][ T4998] ? panic_smp_self_stop+0xa0/0xa0
[ 64.431209][ T4998] ? syslog_print_all+0x3a0/0x3a0
[ 64.436245][ T4998] check_panic_on_warn+0xb1/0xc0
[ 64.441193][ T4998] __ubsan_handle_out_of_bounds+0xfd/0x140
[ 64.447011][ T4998] ? rwsem_down_write_slowpath+0xdb1/0x1220
[ 64.452965][ T4998] alloc_pid+0xbe5/0xdd0
[ 64.457312][ T4998] ? copy_namespaces+0x1e3/0x500
[ 64.462346][ T4998] copy_process+0x4589/0x7620
[ 64.467210][ T4998] ? pidfd_prepare+0x80/0x80
[ 64.472000][ T4998] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 64.478434][ T4998] kernel_clone+0xeb/0x890
[ 64.483035][ T4998] ? create_io_thread+0xe0/0xe0
[ 64.487904][ T4998] ? ksys_unshare+0x676/0x920
[ 64.492592][ T4998] ? lock_downgrade+0x690/0x690
[ 64.497454][ T4998] ? do_raw_spin_lock+0x124/0x2b0
[ 64.502497][ T4998] ? spin_bug+0x1c0/0x1c0
[ 64.506924][ T4998] __do_sys_clone+0xba/0x100
[ 64.511523][ T4998] ? kernel_clone+0x890/0x890
[ 64.516249][ T4998] ? syscall_enter_from_user_mode+0x26/0x80
[ 64.522326][ T4998] do_syscall_64+0x39/0xb0
[ 64.526756][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 64.532668][ T4998] RIP: 0033:0x7f9fa8a89fab
[ 64.537173][ T4998] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 64.556805][ T4998] RSP: 002b:00007fffe061fec0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 64.565226][ T4998] RAX: ffffffffffffffda RBX: 00007fffe0620518 RCX: 00007f9fa8a89fab
[ 64.573200][ T4998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 64.581256][ T4998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556d16400
[ 64.589318][ T4998] R10: 0000555556d166d0 R11: 0000000000000246 R12: 0000000000000000
[ 64.597471][ T4998] R13: 00007fffe061ffb0 R14: 00007f9fa8bac9d8 R15: 000000000000000c
[ 64.605452][ T4998]
[ 64.608685][ T4998] Kernel Offset: disabled
[ 64.614325][ T4998] Rebooting in 86400 seconds..