[ 29.763746][ T40] audit: type=1400 audit(1688034552.119:80): avc: denied { rlimitinh } for pid=5038 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 29.771243][ T40] audit: type=1400 audit(1688034552.119:81): avc: denied { siginh } for pid=5038 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.710030][ T40] audit: type=1400 audit(1688034553.079:82): avc: denied { read } for pid=4608 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '[localhost]:37429' (ECDSA) to the list of known hosts. [ 33.600244][ T40] audit: type=1400 audit(1688034555.969:83): avc: denied { execute } for pid=5079 comm="sh" name="syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 33.607979][ T40] audit: type=1400 audit(1688034555.969:84): avc: denied { execute_no_trans } for pid=5079 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 33.663157][ T40] audit: type=1400 audit(1688034556.029:85): avc: denied { append } for pid=4608 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.670988][ T40] audit: type=1400 audit(1688034556.029:86): avc: denied { open } for pid=4608 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2023/06/29 10:29:16 fuzzer started 2023/06/29 10:29:16 connecting to host at localhost:38567 2023/06/29 10:29:16 checking machine... 2023/06/29 10:29:16 checking revisions... 2023/06/29 10:29:16 testing simple program... [ 33.900254][ T5095] cgroup: Unknown subsys name 'net' [ 34.061607][ T5095] cgroup: Unknown subsys name 'rlimit' [ 34.286376][ T5114] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.873974][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 34.879682][ T5079] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5079 'syz-fuzzer' [ 34.904109][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 34.904117][ T40] audit: type=1400 audit(1688034557.269:104): avc: denied { execmem } for pid=5122 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 34.944904][ T5122] ================================================================================ [ 34.948268][ T5122] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15 [ 34.950745][ T5122] index 1 is out of range for type 'upid [1]' [ 34.953844][ T5122] CPU: 2 PID: 5122 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-04247-g3a8a670eeeaa #0 [ 34.957358][ T5122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 34.960480][ T5122] Call Trace: [ 34.961667][ T5122] [ 34.962723][ T5122] dump_stack_lvl+0x136/0x150 [ 34.964448][ T5122] __ubsan_handle_out_of_bounds+0xd5/0x140 [ 34.966519][ T5122] ? _raw_spin_trylock_bh+0x11/0x70 [ 34.968445][ T5122] alloc_pid+0xbe5/0xdd0 [ 34.969992][ T5122] ? copy_namespaces+0x1e3/0x500 [ 34.971770][ T5122] copy_process+0x4589/0x7620 [ 34.973452][ T5122] ? pidfd_prepare+0x80/0x80 [ 34.975160][ T5122] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 34.977322][ T5122] kernel_clone+0xeb/0x890 [ 34.978908][ T5122] ? create_io_thread+0xe0/0xe0 [ 34.980653][ T5122] ? ksys_unshare+0x676/0x920 [ 34.982328][ T5122] ? lock_downgrade+0x690/0x690 [ 34.984066][ T5122] ? do_raw_spin_lock+0x124/0x2b0 [ 34.985853][ T5122] ? spin_bug+0x1c0/0x1c0 [ 34.987418][ T5122] __do_sys_clone+0xba/0x100 [ 34.989065][ T5122] ? kernel_clone+0x890/0x890 [ 34.990734][ T5122] ? syscall_enter_from_user_mode+0x26/0x80 [ 34.992841][ T5122] do_syscall_64+0x39/0xb0 [ 34.994435][ T5122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 34.996539][ T5122] RIP: 0033:0x7ff75e089fab [ 34.998126][ T5122] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 35.004918][ T5122] RSP: 002b:00007ffcb510d140 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 35.007870][ T5122] RAX: ffffffffffffffda RBX: 00007ffcb510d798 RCX: 00007ff75e089fab [ 35.010656][ T5122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 35.013449][ T5122] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005555561da400 [ 35.016250][ T5122] R10: 00005555561da6d0 R11: 0000000000000246 R12: 0000000000000000 [ 35.019044][ T5122] R13: 00007ffcb510d230 R14: 00007ff75e1ac9d8 R15: 000000000000000c [ 35.021838][ T5122] [ 35.023085][ T5122] ================================================================================ [ 35.026589][ T5122] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 35.029139][ T5122] CPU: 2 PID: 5122 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-04247-g3a8a670eeeaa #0 [ 35.032629][ T5122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 35.035751][ T5122] Call Trace: [ 35.036955][ T5122] [ 35.038005][ T5122] dump_stack_lvl+0xd9/0x150 [ 35.039666][ T5122] panic+0x686/0x730 [ 35.041057][ T5122] ? panic_smp_self_stop+0xa0/0xa0 [ 35.042867][ T5122] ? syslog_print_all+0x3a0/0x3a0 [ 35.044668][ T5122] check_panic_on_warn+0xb1/0xc0 [ 35.046425][ T5122] __ubsan_handle_out_of_bounds+0xfd/0x140 [ 35.048500][ T5122] ? _raw_spin_trylock_bh+0x11/0x70 [ 35.050339][ T5122] alloc_pid+0xbe5/0xdd0 [ 35.051857][ T5122] ? copy_namespaces+0x1e3/0x500 [ 35.053615][ T5122] copy_process+0x4589/0x7620 [ 35.055284][ T5122] ? pidfd_prepare+0x80/0x80 [ 35.056941][ T5122] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 35.059059][ T5122] kernel_clone+0xeb/0x890 [ 35.060651][ T5122] ? create_io_thread+0xe0/0xe0 [ 35.062381][ T5122] ? ksys_unshare+0x676/0x920 [ 35.064067][ T5122] ? lock_downgrade+0x690/0x690 [ 35.065797][ T5122] ? do_raw_spin_lock+0x124/0x2b0 [ 35.067601][ T5122] ? spin_bug+0x1c0/0x1c0 [ 35.069147][ T5122] __do_sys_clone+0xba/0x100 [ 35.070789][ T5122] ? kernel_clone+0x890/0x890 [ 35.072464][ T5122] ? syscall_enter_from_user_mode+0x26/0x80 [ 35.074551][ T5122] do_syscall_64+0x39/0xb0 [ 35.076147][ T5122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 35.078240][ T5122] RIP: 0033:0x7ff75e089fab [ 35.079830][ T5122] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 35.086579][ T5122] RSP: 002b:00007ffcb510d140 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 35.089520][ T5122] RAX: ffffffffffffffda RBX: 00007ffcb510d798 RCX: 00007ff75e089fab [ 35.092312][ T5122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 35.095089][ T5122] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005555561da400 [ 35.097878][ T5122] R10: 00005555561da6d0 R11: 0000000000000246 R12: 0000000000000000 [ 35.100655][ T5122] R13: 00007ffcb510d230 R14: 00007ff75e1ac9d8 R15: 000000000000000c [ 35.103444][ T5122] Connection to localhost closed by remote host. [ 35 VM DIAGNOSIS: 10:29:17 Registers: info registers vcpu 0 RAX=000000000003616d RBX=ffffe8fefd655380 RCX=ffffffff8a166765 RDX=0000000000000002 RSI=ffffffff8d1e73e0 RDI=ffffe8fefd655380 RBP=ffffffff8d1e73e0 RSP=ffffffff8c407d78 R8 =0000000000000001 R9 =ffffed100d6c6d9d R10=ffff88806b636ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e74c8 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a168583 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558f0e731160 CR3=000000000c575000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa1 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=682e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000 XMM04=000000000000000a000000c000036010 XMM05=000000000000000c000000c000036020 XMM06=000000000000000c000000c000036030 XMM07=0000000000000022000000c00003c000 XMM08=0000000000000007000000c000036009 XMM09=000000000000000a000000c000036010 XMM10=000000000000000c000000c000036020 XMM11=000000000000000c000000c000036030 XMM12=0000000000000022000000c00003c000 XMM13=000000000000000d000000c000036040 XMM14=0000000000000005000000c00003601a XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000003ed63 RBX=ffffe8fefd755380 RCX=ffffffff8a166765 RDX=0000000000000002 RSI=ffffffff8d1e73e0 RDI=ffffe8fefd755380 RBP=ffffffff8d1e73e0 RSP=ffffc9000037fd78 R8 =0000000000000001 R9 =ffffed100d6e6d9d R10=ffff88806b736ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e74c8 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a168583 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00084c000 CR3=000000000c575000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=81f42aa1e1358393744607a73ff34ade XMM01=00000000000000000000000000000000 XMM02=000000000000000040fe7e5641d24c54 XMM03=32322035312e322e302e303120363431 XMM04=00000000000000050000000000a4fb49 XMM05=00000000000000000000000001f06210 XMM06=00000000000000050000000000a4fb4e XMM07=00000000000000000000000001f0620e XMM08=00000000000000060000000000a52559 XMM09=00000000000000000000000001f0620b XMM10=00000000000000030000000000a4c7d9 XMM11=00000000000000000000000001f0620c XMM12=00000000000000060000000000a523e5 XMM13=00000000000000000000000001f0620a XMM14=00000000000000040000000000a4db3f XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000070 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84896f25 RDI=ffffffff921dc5c0 RBP=ffffffff921dc580 RSP=ffffc900037af668 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000070 R14=ffffffff84896ec0 R15=0000000000000000 RIP=ffffffff84896f4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555561da400 ffffffff 00c00000 GS =0000 ffff88806b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff75e1abf40 CR3=000000001fc1d000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=70616d7469622d7265766f632d7a7973 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=000000000002297b RBX=ffffe8fefd955380 RCX=ffffffff8a166765 RDX=0000000000000002 RSI=ffffffff8d1e73e0 RDI=ffffe8fefd955380 RBP=ffffffff8d1e73e0 RSP=ffffc9000039fd78 R8 =0000000000000001 R9 =ffffed100d726d9d R10=ffff88806b936ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e74c8 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a168583 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f68f2a1b580 CR3=000000000c575000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000003f6af5fec880d42a XMM01=000000000000000041b21c572a1d1e3d XMM02=000000000000000040c3880000000000 XMM03=00000000000000003ff14d79df31a946 XMM04=00000000000000003f83f896cd68e902 XMM05=00000000000000000000000000000000 XMM06=00000000000000003f6af5fec880d42a XMM07=000000000000000041486a0000000000 XMM08=00000000000000000000000000000000 XMM09=000000000000000041cdcd6500000000 XMM10=6c6f636f746f72700a0a736e64207365 XMM11=65730a73656c69662020202020203a73 XMM12=6966202020202020203a736563697672 XMM13=20202020203a7372656874650a73656c XMM14=20203a6370720a73656c696620202020 XMM15=00000000000000000000000000000000