[ 47.246553][ T38] audit: type=1400 audit(1688082508.733:80): avc: denied { rlimitinh } for pid=5043 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 47.255310][ T38] audit: type=1400 audit(1688082508.733:81): avc: denied { siginh } for pid=5043 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 47.591829][ T38] audit: type=1400 audit(1688082509.103:82): avc: denied { read } for pid=4610 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '[localhost]:13990' (ECDSA) to the list of known hosts.
[ 55.139227][ T38] audit: type=1400 audit(1688082516.643:83): avc: denied { execute } for pid=5131 comm="sh" name="syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 55.149093][ T38] audit: type=1400 audit(1688082516.643:84): avc: denied { execute_no_trans } for pid=5131 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
2023/06/29 23:48:36 fuzzer started
2023/06/29 23:48:36 connecting to host at localhost:35741
2023/06/29 23:48:36 checking machine...
2023/06/29 23:48:36 checking revisions...
[ 55.562463][ T38] audit: type=1400 audit(1688082517.063:85): avc: denied { getattr } for pid=5131 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
2023/06/29 23:48:37 testing simple program...
[ 55.572907][ T38] audit: type=1400 audit(1688082517.063:86): avc: denied { read } for pid=5131 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 55.581552][ T38] audit: type=1400 audit(1688082517.063:87): avc: denied { open } for pid=5131 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 55.592059][ T38] audit: type=1400 audit(1688082517.063:88): avc: denied { read } for pid=5131 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 55.598379][ T5141] cgroup: Unknown subsys name 'net'
[ 55.601081][ T38] audit: type=1400 audit(1688082517.083:89): avc: denied { open } for pid=5131 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 55.613719][ T38] audit: type=1400 audit(1688082517.083:90): avc: denied { read } for pid=5131 comm="syz-fuzzer" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 55.623990][ T38] audit: type=1400 audit(1688082517.083:91): avc: denied { open } for pid=5131 comm="syz-fuzzer" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 55.633524][ T38] audit: type=1400 audit(1688082517.083:92): avc: denied { write } for pid=5131 comm="syz-fuzzer" path="pipe:[1921]" dev="pipefs" ino=1921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 55.839269][ T5141] cgroup: Unknown subsys name 'rlimit'
[ 56.042317][ T5142] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 56.975330][ T5141] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 56.983888][ T5140] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5140 'syz-fuzzer'
[ 57.100773][ T5143] ================================================================================
[ 57.105206][ T5143] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15
[ 57.108437][ T5143] index 1 is out of range for type 'upid [1]'
[ 57.112954][ T5143] CPU: 3 PID: 5143 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08514-gbf1fa6f15553 #0
[ 57.117932][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 57.122397][ T5143] Call Trace:
[ 57.123935][ T5143]
[ 57.125327][ T5143] dump_stack_lvl+0x136/0x150
[ 57.127506][ T5143] __ubsan_handle_out_of_bounds+0xd5/0x140
[ 57.130186][ T5143] ? __ww_mutex_lock.constprop.0+0x2231/0x2f30
[ 57.133029][ T5143] alloc_pid+0xbe5/0xdd0
[ 57.135462][ T5143] ? copy_namespaces+0x1e3/0x500
[ 57.138100][ T5143] copy_process+0x4589/0x7620
[ 57.140777][ T5143] ? pidfd_prepare+0x80/0x80
[ 57.143315][ T5143] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 57.146068][ T5143] kernel_clone+0xeb/0x890
[ 57.148137][ T5143] ? create_io_thread+0xe0/0xe0
[ 57.150322][ T5143] ? ksys_unshare+0x676/0x920
[ 57.152245][ T5143] ? lock_downgrade+0x690/0x690
[ 57.154392][ T5143] ? do_raw_spin_lock+0x124/0x2b0
[ 57.157055][ T5143] ? spin_bug+0x1c0/0x1c0
[ 57.159491][ T5143] __do_sys_clone+0xba/0x100
[ 57.161646][ T5143] ? kernel_clone+0x890/0x890
[ 57.163771][ T5143] ? syscall_enter_from_user_mode+0x26/0x80
[ 57.166458][ T5143] do_syscall_64+0x39/0xb0
[ 57.168545][ T5143] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.171320][ T5143] RIP: 0033:0x7f1b5ee89fab
[ 57.173371][ T5143] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 57.183527][ T5143] RSP: 002b:00007ffccef79320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 57.187132][ T5143] RAX: ffffffffffffffda RBX: 00007ffccef79978 RCX: 00007f1b5ee89fab
[ 57.190765][ T5143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 57.194215][ T5143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556334400
[ 57.197569][ T5143] R10: 00005555563346d0 R11: 0000000000000246 R12: 0000000000000000
[ 57.201252][ T5143] R13: 00007ffccef79410 R14: 00007f1b5efac9d8 R15: 000000000000000c
[ 57.204841][ T5143]
[ 57.207413][ T5143] ================================================================================
[ 57.211360][ T5143] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 57.214561][ T5143] CPU: 2 PID: 5143 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08514-gbf1fa6f15553 #0
[ 57.218627][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 57.222475][ T5143] Call Trace:
[ 57.224098][ T5143]
[ 57.225524][ T5143] dump_stack_lvl+0xd9/0x150
[ 57.227994][ T5143] panic+0x686/0x730
[ 57.229909][ T5143] ? panic_smp_self_stop+0xa0/0xa0
[ 57.232379][ T5143] ? syslog_print_all+0x3a0/0x3a0
[ 57.234693][ T5143] check_panic_on_warn+0xb1/0xc0
[ 57.236832][ T5143] __ubsan_handle_out_of_bounds+0xfd/0x140
[ 57.239293][ T5143] ? __ww_mutex_lock.constprop.0+0x2231/0x2f30
[ 57.242174][ T5143] alloc_pid+0xbe5/0xdd0
[ 57.244232][ T5143] ? copy_namespaces+0x1e3/0x500
[ 57.246738][ T5143] copy_process+0x4589/0x7620
[ 57.249035][ T5143] ? pidfd_prepare+0x80/0x80
[ 57.251141][ T5143] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 57.253933][ T5143] kernel_clone+0xeb/0x890
[ 57.256105][ T5143] ? create_io_thread+0xe0/0xe0
[ 57.258545][ T5143] ? ksys_unshare+0x676/0x920
[ 57.260776][ T5143] ? lock_downgrade+0x690/0x690
[ 57.263069][ T5143] ? do_raw_spin_lock+0x124/0x2b0
[ 57.265432][ T5143] ? spin_bug+0x1c0/0x1c0
[ 57.267553][ T5143] __do_sys_clone+0xba/0x100
[ 57.269829][ T5143] ? kernel_clone+0x890/0x890
[ 57.272139][ T5143] ? syscall_enter_from_user_mode+0x26/0x80
[ 57.274951][ T5143] do_syscall_64+0x39/0xb0
[ 57.277115][ T5143] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.279947][ T5143] RIP: 0033:0x7f1b5ee89fab
[ 57.282125][ T5143] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 57.290969][ T5143] RSP: 002b:00007ffccef79320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 57.294916][ T5143] RAX: ffffffffffffffda RBX: 00007ffccef79978 RCX: 00007f1b5ee89fab
[ 57.298675][ T5143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 57.302431][ T5143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556334400
[ 57.306026][ T5143] R10: 00005555563346d0 R11: 0000000000000246 R12: 0000000000000000
[ 57.309624][ T5143] R13: 00007ffccef79410 R14: 00007f1b5efac9d8 R15: 000000000000000c
[ 57.313342][ T5143]
Connection to localhost closed by remote host.
[ 57
VM DIAGNOSIS:
23:48:38 Registers:
info registers vcpu 0
RAX=0000000000037b19 RBX=ffffe8fefd655380 RCX=ffffffff8a1b3ef5 RDX=0000000000000002
RSI=ffffffff8d1e8880 RDI=ffffe8fefd655380 RBP=ffffffff8d1e8880 RSP=ffffffff8c407d78
R8 =0000000000000001 R9 =ffffed100d6c6d9d R10=ffff88806b636ceb R11=0000000000000001
R12=0000000000000002 R13=ffffffff8d1e8968 R14=0000000000000002 R15=0000000000000000
RIP=ffffffff8a1b5d13 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000000c0003ef000 CR3=000000000c575000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa1
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=0000000000000000414a3f9c00000000 XMM03=000000c0002841e0000000c0003ea990
XMM04=000000c000114980000000c00010a990 XMM05=000000c000114a00000000c00010af30
XMM06=000000c00010ac00000000c000114a40 XMM07=000000c000280640000000c00010ac60
XMM08=000000c000495240000000c0000100f0 XMM09=000000c000074900000000c000498360
XMM10=000000c000498480000000c0004983f0 XMM11=000000c0000749c0000000c0004984b0
XMM12=000000c000498600000000c000498570 XMM13=000000c0004986f0000000c000498630
XMM14=000000c0004987e0000000c000498720 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffe8fefd90b240 RCX=0000000000000000 RDX=ffff888013338ec0
RSI=ffffffff81788bb2 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000c8f948
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=fffff91fdfb21649 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000001
RIP=ffffffff81788bb4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff21a39ef0 CR3=000000000c575000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000001 XMM01=00007ffc4c1448800000003000000010
XMM02=6c5f5f00455441564952505f4342494c XMM03=0000000000000000000000000042494c
XMM04=6362696c5f5f00455441564952505f43 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 2
RAX=0000000000023019 RBX=ffffe8fefd855380 RCX=ffffffff8a1b3ef5 RDX=0000000000000002
RSI=ffffffff8d1e8880 RDI=ffffe8fefd855380 RBP=ffffffff8d1e8880 RSP=ffffc9000038fd78
R8 =0000000000000001 R9 =ffffed100d706d9d R10=ffff88806b836ceb R11=0000000000000001
R12=0000000000000002 R13=ffffffff8d1e8968 R14=0000000000000002 R15=0000000000000000
RIP=ffffffff8a1b5d13 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe000008f000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f880c6d53b8 CR3=000000000c575000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa1
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004148d79400000000 XMM03=000000c0002841e0000000c0003ea990
XMM04=000000c000114980000000c00010a990 XMM05=000000c000114a00000000c00010af30
XMM06=000000c00010ac00000000c000114a40 XMM07=000000c000280640000000c00010ac60
XMM08=000000c000495240000000c0000100f0 XMM09=000000c000074900000000c000498360
XMM10=000000c000498480000000c0004983f0 XMM11=000000c0000749c0000000c0004984b0
XMM12=000000c000498600000000c000498570 XMM13=000000c0004986f0000000c000498630
XMM14=000000c0004987e0000000c000498720 XMM15=00000000000000000000000000000000
info registers vcpu 3
RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff84899fd5 RDI=ffffffff921f4580 RBP=ffffffff921f4540 RSP=ffffc9000375f668
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=000000000000005d R14=ffffffff84899f70 R15=0000000000000000
RIP=ffffffff84899fff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555556334400 ffffffff 00c00000
GS =0000 ffff88806b900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe00000d6000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1b5efabf40 CR3=0000000026502000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=70616d7469622d7265766f632d7a7973 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000