[ 30.455217][ T38] audit: type=1400 audit(1688034552.797:79): avc: denied { write } for pid=5041 comm="sh" path="pipe:[2895]" dev="pipefs" ino=2895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 30.462651][ T38] audit: type=1400 audit(1688034552.797:80): avc: denied { rlimitinh } for pid=5041 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.469118][ T38] audit: type=1400 audit(1688034552.797:81): avc: denied { siginh } for pid=5041 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.892881][ T38] audit: type=1400 audit(1688034553.247:82): avc: denied { read } for pid=4609 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '[localhost]:42514' (ECDSA) to the list of known hosts. [ 34.480487][ T38] audit: type=1400 audit(1688034556.827:83): avc: denied { execute } for pid=5112 comm="sh" name="syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 34.487859][ T38] audit: type=1400 audit(1688034556.827:84): avc: denied { execute_no_trans } for pid=5112 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2023/06/29 10:29:16 fuzzer started 2023/06/29 10:29:17 connecting to host at localhost:37061 2023/06/29 10:29:17 checking machine... 2023/06/29 10:29:17 checking revisions... [ 34.754899][ T38] audit: type=1400 audit(1688034557.107:85): avc: denied { getattr } for pid=5112 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.763132][ T38] audit: type=1400 audit(1688034557.117:86): avc: denied { read } for pid=5112 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2023/06/29 10:29:17 testing simple program... [ 34.784711][ T5128] cgroup: Unknown subsys name 'net' [ 34.915665][ T5128] cgroup: Unknown subsys name 'rlimit' [ 35.131985][ T5130] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.706564][ T5128] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 35.712200][ T5115] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5115 'syz-fuzzer' [ 35.734740][ T38] kauditd_printk_skb: 17 callbacks suppressed [ 35.734748][ T38] audit: type=1400 audit(1688034558.087:104): avc: denied { execmem } for pid=5133 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.776818][ T5133] ================================================================================ [ 35.780190][ T5133] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15 [ 35.782841][ T5133] index 1 is out of range for type 'upid [1]' [ 35.786176][ T5133] CPU: 3 PID: 5133 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-04247-g3a8a670eeeaa #0 [ 35.789744][ T5133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 35.792923][ T5133] Call Trace: [ 35.794149][ T5133] [ 35.795217][ T5133] dump_stack_lvl+0x136/0x150 [ 35.796947][ T5133] __ubsan_handle_out_of_bounds+0xd5/0x140 [ 35.799049][ T5133] ? _raw_spin_trylock_bh+0x11/0x70 [ 35.800913][ T5133] alloc_pid+0xbe5/0xdd0 [ 35.802462][ T5133] ? copy_namespaces+0x1e3/0x500 [ 35.804238][ T5133] copy_process+0x4589/0x7620 [ 35.805945][ T5133] ? pidfd_prepare+0x80/0x80 [ 35.807630][ T5133] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 35.809797][ T5133] kernel_clone+0xeb/0x890 [ 35.811403][ T5133] ? create_io_thread+0xe0/0xe0 [ 35.813157][ T5133] ? ksys_unshare+0x676/0x920 [ 35.814860][ T5133] ? lock_downgrade+0x690/0x690 [ 35.816614][ T5133] ? do_raw_spin_lock+0x124/0x2b0 [ 35.818431][ T5133] ? spin_bug+0x1c0/0x1c0 [ 35.819983][ T5133] __do_sys_clone+0xba/0x100 [ 35.821664][ T5133] ? kernel_clone+0x890/0x890 [ 35.823375][ T5133] ? syscall_enter_from_user_mode+0x26/0x80 [ 35.825508][ T5133] do_syscall_64+0x39/0xb0 [ 35.827111][ T5133] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 35.829238][ T5133] RIP: 0033:0x7f1feca89fab [ 35.830865][ T5133] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 35.837717][ T5133] RSP: 002b:00007ffcb1ab7ef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 35.840637][ T5133] RAX: ffffffffffffffda RBX: 00007ffcb1ab8548 RCX: 00007f1feca89fab [ 35.843423][ T5133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 35.846216][ T5133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555557451400 [ 35.849010][ T5133] R10: 00005555574516d0 R11: 0000000000000246 R12: 0000000000000000 [ 35.851823][ T5133] R13: 00007ffcb1ab7fe0 R14: 00007f1fecbac9d8 R15: 000000000000000c [ 35.854656][ T5133] [ 35.855894][ T5133] ================================================================================ [ 35.859204][ T5133] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 35.861783][ T5133] CPU: 3 PID: 5133 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-04247-g3a8a670eeeaa #0 [ 35.865293][ T5133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 35.868424][ T5133] Call Trace: [ 35.869636][ T5133] [ 35.870693][ T5133] dump_stack_lvl+0xd9/0x150 [ 35.872345][ T5133] panic+0x686/0x730 [ 35.873761][ T5133] ? panic_smp_self_stop+0xa0/0xa0 [ 35.875588][ T5133] ? syslog_print_all+0x3a0/0x3a0 [ 35.877397][ T5133] check_panic_on_warn+0xb1/0xc0 [ 35.879163][ T5133] __ubsan_handle_out_of_bounds+0xfd/0x140 [ 35.881239][ T5133] ? _raw_spin_trylock_bh+0x11/0x70 [ 35.883108][ T5133] alloc_pid+0xbe5/0xdd0 [ 35.884635][ T5133] ? copy_namespaces+0x1e3/0x500 [ 35.886423][ T5133] copy_process+0x4589/0x7620 [ 35.888111][ T5133] ? pidfd_prepare+0x80/0x80 [ 35.889785][ T5133] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 35.891924][ T5133] kernel_clone+0xeb/0x890 [ 35.893550][ T5133] ? create_io_thread+0xe0/0xe0 [ 35.895292][ T5133] ? ksys_unshare+0x676/0x920 [ 35.896975][ T5133] ? lock_downgrade+0x690/0x690 [ 35.898733][ T5133] ? do_raw_spin_lock+0x124/0x2b0 [ 35.900533][ T5133] ? spin_bug+0x1c0/0x1c0 [ 35.902086][ T5133] __do_sys_clone+0xba/0x100 [ 35.903738][ T5133] ? kernel_clone+0x890/0x890 [ 35.905439][ T5133] ? syscall_enter_from_user_mode+0x26/0x80 [ 35.907538][ T5133] do_syscall_64+0x39/0xb0 [ 35.909133][ T5133] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 35.911247][ T5133] RIP: 0033:0x7f1feca89fab [ 35.912848][ T5133] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 35.919657][ T5133] RSP: 002b:00007ffcb1ab7ef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 35.922717][ T5133] RAX: ffffffffffffffda RBX: 00007ffcb1ab8548 RCX: 00007f1feca89fab [ 35.925525][ T5133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 35.928321][ T5133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555557451400 [ 35.931118][ T5133] R10: 00005555574516d0 R11: 0000000000000246 R12: 0000000000000000 [ 35.933946][ T5133] R13: 00007ffcb1ab7fe0 R14: 00007f1fecbac9d8 R15: 000000000000000c [ 35.936755][ T5133] Connection to localhost closed by remote host. [ 35 VM DIAGNOSIS: 10:29:18 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806b9421a0 RCX=0000000000000000 RDX=ffff888022369340 RSI=ffffffff81788c52 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000745f948 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d728435 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff81788c54 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005563eef75680 CR3=000000000c575000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa1 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000040893c0235c35205 XMM01=00000000000000000000000000000000 XMM02=00000000000000004146c9e800000000 XMM03=000000c000495680000000c000012878 XMM04=000000c0000123a0000000c000012398 XMM05=000000c0000123b0000000c0000123a8 XMM06=000000c000007380000000c000012360 XMM07=000000c000074300000000c0005b6000 XMM08=000000c0000120c8000000c000013b58 XMM09=000000c000012108000000c000013b60 XMM10=000000c000012118000000c000013b68 XMM11=000000c000012150000000c000013b70 XMM12=000000c000012170000000c000013b78 XMM13=000000c000012190000000c000013b80 XMM14=000000c0000121b0000000c000013b88 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000033ac5 RBX=ffffe8fefd755380 RCX=ffffffff8a166765 RDX=0000000000000002 RSI=ffffffff8d1e73e0 RDI=ffffe8fefd755380 RBP=ffffffff8d1e73e0 RSP=ffffc9000037fd78 R8 =0000000000000001 R9 =ffffed100d6e6d9d R10=ffff88806b736ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e74c8 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a168583 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005563eef75680 CR3=000000000c575000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000001 XMM01=00007fff7518a9300000003000000010 XMM02=6c5f5f00455441564952505f4342494c XMM03=0000000000000000000000000042494c XMM04=6362696c5f5f00455441564952505f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000022add RBX=ffffe8fefd855380 RCX=ffffffff8a166765 RDX=0000000000000002 RSI=ffffffff8d1e73e0 RDI=ffffe8fefd855380 RBP=ffffffff8d1e73e0 RSP=ffffc9000038fd78 R8 =0000000000000001 R9 =ffffed100d706d9d R10=ffff88806b836ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e74c8 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a168583 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558998765098 CR3=000000000c575000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000001 XMM01=00007fff657a9c800000003000000018 XMM02=6c5f5f00455441564952505f4342494c XMM03=0000000000000000000000000042494c XMM04=6362696c5f5f00455441564952505f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff84896fd0 RDI=ffffffff921dc5c0 RBP=ffffffff921dc580 RSP=ffffc900037d75d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff243b909 R15=dffffc0000000000 RIP=ffffffff84896ff7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555557451400 ffffffff 00c00000 GS =0000 ffff88806b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1fecbabf40 CR3=0000000021e87000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=70616d7469622d7265766f632d7a7973 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffff00 XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000