[ 46.305505][ T27] audit: type=1400 audit(1688104791.123:80): avc: denied { rlimitinh } for pid=4845 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.324977][ T27] audit: type=1400 audit(1688104791.123:81): avc: denied { siginh } for pid=4845 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.232359][ T27] audit: type=1400 audit(1688104792.113:82): avc: denied { read } for pid=4432 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.3' (ECDSA) to the list of known hosts. 2023/06/30 06:00:03 fuzzer started [ 58.403138][ T27] audit: type=1400 audit(1688104803.283:83): avc: denied { write } for pid=4986 comm="syz-fuzzer" path="pipe:[1945]" dev="pipefs" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2023/06/30 06:00:03 connecting to host at 10.128.0.169:34649 2023/06/30 06:00:03 checking machine... 2023/06/30 06:00:03 checking revisions... 2023/06/30 06:00:03 testing simple program... [ 58.721969][ T27] audit: type=1400 audit(1688104803.603:84): avc: denied { getattr } for pid=4986 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.746283][ T27] audit: type=1400 audit(1688104803.603:85): avc: denied { read } for pid=4986 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.768165][ T27] audit: type=1400 audit(1688104803.603:86): avc: denied { open } for pid=4986 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.782935][ T4995] cgroup: Unknown subsys name 'net' [ 58.797490][ T27] audit: type=1400 audit(1688104803.623:87): avc: denied { read } for pid=4986 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.821604][ T27] audit: type=1400 audit(1688104803.623:88): avc: denied { open } for pid=4986 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.845064][ T27] audit: type=1400 audit(1688104803.633:89): avc: denied { read } for pid=4986 comm="syz-fuzzer" name="vhci" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.869036][ T27] audit: type=1400 audit(1688104803.633:90): avc: denied { open } for pid=4986 comm="syz-fuzzer" path="/dev/vhci" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.894873][ T27] audit: type=1400 audit(1688104803.663:91): avc: denied { mounton } for pid=4995 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.918232][ T27] audit: type=1400 audit(1688104803.663:92): avc: denied { mount } for pid=4995 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.030435][ T4995] cgroup: Unknown subsys name 'rlimit' [ 59.198973][ T4996] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.386736][ T4995] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.400340][ T4990] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4990 'syz-fuzzer' [ 60.505763][ T4997] ================================================================================ [ 60.515110][ T4997] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15 [ 60.522382][ T4997] index 1 is out of range for type 'upid [1]' [ 60.528826][ T4997] CPU: 1 PID: 4997 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08543-g0b26eadbf200 #0 [ 60.539172][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 60.549401][ T4997] Call Trace: [ 60.552738][ T4997] [ 60.555772][ T4997] dump_stack_lvl+0x136/0x150 [ 60.560497][ T4997] __ubsan_handle_out_of_bounds+0xd5/0x140 [ 60.566473][ T4997] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0xe91/0xf50 [ 60.573778][ T4997] alloc_pid+0xbe5/0xdd0 [ 60.578126][ T4997] ? copy_namespaces+0x1e3/0x500 [ 60.583061][ T4997] copy_process+0x4589/0x7620 [ 60.587748][ T4997] ? pidfd_prepare+0x80/0x80 [ 60.592420][ T4997] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 60.598401][ T4997] kernel_clone+0xeb/0x890 [ 60.602906][ T4997] ? create_io_thread+0xe0/0xe0 [ 60.607803][ T4997] ? ksys_unshare+0x676/0x920 [ 60.612704][ T4997] ? lock_downgrade+0x690/0x690 [ 60.617572][ T4997] ? do_raw_spin_lock+0x124/0x2b0 [ 60.622709][ T4997] ? spin_bug+0x1c0/0x1c0 [ 60.627137][ T4997] __do_sys_clone+0xba/0x100 [ 60.631748][ T4997] ? kernel_clone+0x890/0x890 [ 60.636457][ T4997] ? syscall_enter_from_user_mode+0x26/0x80 [ 60.642810][ T4997] do_syscall_64+0x39/0xb0 [ 60.647241][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.653314][ T4997] RIP: 0033:0x7ff933689fab [ 60.657754][ T4997] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 60.677458][ T4997] RSP: 002b:00007ffc9e689fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 60.686062][ T4997] RAX: ffffffffffffffda RBX: 00007ffc9e68a638 RCX: 00007ff933689fab [ 60.694100][ T4997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 60.702683][ T4997] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005555569d4400 [ 60.710743][ T4997] R10: 00005555569d46d0 R11: 0000000000000246 R12: 0000000000000000 [ 60.718804][ T4997] R13: 00007ffc9e68a0d0 R14: 00007ff9337ac9d8 R15: 000000000000000c [ 60.727040][ T4997] [ 60.730353][ T4997] ================================================================================ [ 60.741404][ T4997] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 60.749062][ T4997] CPU: 0 PID: 4997 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08543-g0b26eadbf200 #0 [ 60.759645][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 60.770134][ T4997] Call Trace: [ 60.773486][ T4997] [ 60.776403][ T4997] dump_stack_lvl+0xd9/0x150 [ 60.780991][ T4997] panic+0x686/0x730 [ 60.784972][ T4997] ? panic_smp_self_stop+0xa0/0xa0 [ 60.790165][ T4997] ? syslog_print_all+0x3a0/0x3a0 [ 60.795181][ T4997] check_panic_on_warn+0xb1/0xc0 [ 60.800293][ T4997] __ubsan_handle_out_of_bounds+0xfd/0x140 [ 60.806266][ T4997] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0xe91/0xf50 [ 60.814419][ T4997] alloc_pid+0xbe5/0xdd0 [ 60.818659][ T4997] ? copy_namespaces+0x1e3/0x500 [ 60.823591][ T4997] copy_process+0x4589/0x7620 [ 60.828345][ T4997] ? pidfd_prepare+0x80/0x80 [ 60.832932][ T4997] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 60.838993][ T4997] kernel_clone+0xeb/0x890 [ 60.843399][ T4997] ? create_io_thread+0xe0/0xe0 [ 60.848340][ T4997] ? ksys_unshare+0x676/0x920 [ 60.853117][ T4997] ? lock_downgrade+0x690/0x690 [ 60.858072][ T4997] ? do_raw_spin_lock+0x124/0x2b0 [ 60.863105][ T4997] ? spin_bug+0x1c0/0x1c0 [ 60.867441][ T4997] __do_sys_clone+0xba/0x100 [ 60.872241][ T4997] ? kernel_clone+0x890/0x890 [ 60.878065][ T4997] ? syscall_enter_from_user_mode+0x26/0x80 [ 60.883971][ T4997] do_syscall_64+0x39/0xb0 [ 60.889257][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.895518][ T4997] RIP: 0033:0x7ff933689fab [ 60.900196][ T4997] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 60.920260][ T4997] RSP: 002b:00007ffc9e689fe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 60.928771][ T4997] RAX: ffffffffffffffda RBX: 00007ffc9e68a638 RCX: 00007ff933689fab [ 60.936920][ T4997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 60.945183][ T4997] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005555569d4400 [ 60.953428][ T4997] R10: 00005555569d46d0 R11: 0000000000000246 R12: 0000000000000000 [ 60.962186][ T4997] R13: 00007ffc9e68a0d0 R14: 00007ff9337ac9d8 R15: 000000000000000c [ 60.970619][ T4997] [ 60.973958][ T4997] Kernel Offset: disabled [ 60.978622][ T4997] Rebooting in 86400 seconds..