[ 38.080121][ T39] audit: type=1400 audit(1688100247.759:80): avc: denied { rlimitinh } for pid=5037 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 38.088113][ T39] audit: type=1400 audit(1688100247.759:81): avc: denied { siginh } for pid=5037 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 38.348151][ T39] audit: type=1400 audit(1688100248.049:82): avc: denied { read } for pid=4608 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '[localhost]:41839' (ECDSA) to the list of known hosts.
[ 43.294524][ T39] audit: type=1400 audit(1688100252.999:83): avc: denied { execute } for pid=5117 comm="sh" name="syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 43.304598][ T39] audit: type=1400 audit(1688100252.999:84): avc: denied { execute_no_trans } for pid=5117 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 43.320009][ T39] audit: type=1400 audit(1688100253.029:85): avc: denied { append } for pid=4608 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 43.328959][ T39] audit: type=1400 audit(1688100253.029:86): avc: denied { open } for pid=4608 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 43.337613][ T39] audit: type=1400 audit(1688100253.029:87): avc: denied { getattr } for pid=4608 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
2023/06/30 04:44:13 fuzzer started
2023/06/30 04:44:13 connecting to host at localhost:32927
2023/06/30 04:44:13 checking machine...
2023/06/30 04:44:13 checking revisions...
[ 43.700379][ T39] audit: type=1400 audit(1688100253.409:88): avc: denied { getattr } for pid=5117 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
2023/06/30 04:44:13 testing simple program...
[ 43.711089][ T39] audit: type=1400 audit(1688100253.409:89): avc: denied { read } for pid=5117 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 43.721353][ T39] audit: type=1400 audit(1688100253.409:90): avc: denied { open } for pid=5117 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 43.731756][ T39] audit: type=1400 audit(1688100253.419:91): avc: denied { read } for pid=5117 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 43.735346][ T5129] cgroup: Unknown subsys name 'net'
[ 43.741948][ T39] audit: type=1400 audit(1688100253.419:92): avc: denied { open } for pid=5117 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 43.934670][ T5129] cgroup: Unknown subsys name 'rlimit'
[ 44.108526][ T5131] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 44.940570][ T5129] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 44.947339][ T5125] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5125 'syz-fuzzer'
[ 45.026243][ T5135] ================================================================================
[ 45.029696][ T5135] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15
[ 45.032710][ T5135] index 1 is out of range for type 'upid [1]'
[ 45.036668][ T5135] CPU: 1 PID: 5135 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08679-g1e6d5dea3432 #0
[ 45.041113][ T5135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 45.044571][ T5135] Call Trace:
[ 45.046045][ T5135]
[ 45.047342][ T5135] dump_stack_lvl+0x136/0x150
[ 45.049416][ T5135] __ubsan_handle_out_of_bounds+0xd5/0x140
[ 45.051818][ T5135] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0xe91/0xf50
[ 45.054797][ T5135] alloc_pid+0xbe5/0xdd0
[ 45.056675][ T5135] ? copy_namespaces+0x1e3/0x500
[ 45.058886][ T5135] copy_process+0x4589/0x7620
[ 45.061052][ T5135] ? pidfd_prepare+0x80/0x80
[ 45.063116][ T5135] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 45.065685][ T5135] kernel_clone+0xeb/0x890
[ 45.067741][ T5135] ? create_io_thread+0xe0/0xe0
[ 45.069909][ T5135] ? ksys_unshare+0x676/0x920
[ 45.072131][ T5135] ? lock_downgrade+0x690/0x690
[ 45.074401][ T5135] ? do_raw_spin_lock+0x124/0x2b0
[ 45.076537][ T5135] ? spin_bug+0x1c0/0x1c0
[ 45.078346][ T5135] __do_sys_clone+0xba/0x100
[ 45.080238][ T5135] ? kernel_clone+0x890/0x890
[ 45.082259][ T5135] ? syscall_enter_from_user_mode+0x26/0x80
[ 45.084686][ T5135] do_syscall_64+0x39/0xb0
[ 45.086500][ T5135] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 45.089301][ T5135] RIP: 0033:0x7fe898a89fab
[ 45.091484][ T5135] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 45.099637][ T5135] RSP: 002b:00007ffc8b44c3a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 45.102942][ T5135] RAX: ffffffffffffffda RBX: 00007ffc8b44c9f8 RCX: 00007fe898a89fab
[ 45.106036][ T5135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 45.109211][ T5135] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005555563a5400
[ 45.112025][ T5135] R10: 00005555563a56d0 R11: 0000000000000246 R12: 0000000000000000
[ 45.115435][ T5135] R13: 00007ffc8b44c490 R14: 00007fe898bac9d8 R15: 000000000000000c
[ 45.118651][ T5135]
[ 45.120234][ T5135] ================================================================================
[ 45.123590][ T5135] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 45.126319][ T5135] CPU: 1 PID: 5135 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08679-g1e6d5dea3432 #0
[ 45.130098][ T5135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 45.133713][ T5135] Call Trace:
[ 45.135269][ T5135]
[ 45.136450][ T5135] dump_stack_lvl+0xd9/0x150
[ 45.138378][ T5135] panic+0x686/0x730
[ 45.140031][ T5135] ? panic_smp_self_stop+0xa0/0xa0
[ 45.142155][ T5135] ? syslog_print_all+0x3a0/0x3a0
[ 45.144343][ T5135] check_panic_on_warn+0xb1/0xc0
[ 45.146617][ T5135] __ubsan_handle_out_of_bounds+0xfd/0x140
[ 45.148849][ T5135] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0xe91/0xf50
[ 45.151442][ T5135] alloc_pid+0xbe5/0xdd0
[ 45.152917][ T5135] ? copy_namespaces+0x1e3/0x500
[ 45.154854][ T5135] copy_process+0x4589/0x7620
[ 45.157060][ T5135] ? pidfd_prepare+0x80/0x80
[ 45.159303][ T5135] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 45.161941][ T5135] kernel_clone+0xeb/0x890
[ 45.163769][ T5135] ? create_io_thread+0xe0/0xe0
[ 45.165744][ T5135] ? ksys_unshare+0x676/0x920
[ 45.167705][ T5135] ? lock_downgrade+0x690/0x690
[ 45.169663][ T5135] ? do_raw_spin_lock+0x124/0x2b0
[ 45.171959][ T5135] ? spin_bug+0x1c0/0x1c0
[ 45.173957][ T5135] __do_sys_clone+0xba/0x100
[ 45.176077][ T5135] ? kernel_clone+0x890/0x890
[ 45.178265][ T5135] ? syscall_enter_from_user_mode+0x26/0x80
[ 45.180724][ T5135] do_syscall_64+0x39/0xb0
[ 45.182359][ T5135] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 45.184598][ T5135] RIP: 0033:0x7fe898a89fab
[ 45.186406][ T5135] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 45.194661][ T5135] RSP: 002b:00007ffc8b44c3a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 45.198249][ T5135] RAX: ffffffffffffffda RBX: 00007ffc8b44c9f8 RCX: 00007fe898a89fab
[ 45.201269][ T5135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 45.204341][ T5135] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005555563a5400
[ 45.207739][ T5135] R10: 00005555563a56d0 R11: 0000000000000246 R12: 0000000000000000
[ 45.210516][ T5135] R13: 00007ffc8b44c490 R14: 00007fe898bac9d8 R15: 000000000000000c
[ 45.213756][ T5135]
Connection to localhost closed by remote host.
[ 4
VM DIAGNOSIS:
04:44:14 Registers:
info registers vcpu 0
RAX=0000000000039609 RBX=ffffe8fefd622000 RCX=ffffffff8a1ba0f5 RDX=0000000000000002
RSI=ffffffff8d1e9080 RDI=ffffe8fefd622000 RBP=ffffffff8d1e9080 RSP=ffffffff8c407d78
R8 =0000000000000001 R9 =ffffed100d6c6d9d R10=ffff88806b636ceb R11=0000000000000001
R12=0000000000000002 R13=ffffffff8d1e9168 R14=0000000000000002 R15=0000000000000000
RIP=ffffffff8a1bbf13 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000000c000558000 CR3=000000000c575000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=682e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000
XMM04=000000000000000a000000c000036010 XMM05=000000000000000c000000c000036020
XMM06=000000000000000c000000c000036030 XMM07=0000000000000022000000c00003c000
XMM08=0000000000000007000000c000036009 XMM09=000000000000000a000000c000036010
XMM10=000000000000000c000000c000036020 XMM11=000000000000000c000000c000036030
XMM12=0000000000000022000000c00003c000 XMM13=000000000000000d000000c000036040
XMM14=0000000000000005000000c00003601a XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8489f625 RDI=ffffffff921f15c0 RBP=ffffffff921f1580 RSP=ffffc90003587668
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000075 R14=ffffffff8489f5c0 R15=0000000000000000
RIP=ffffffff8489f64f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555563a5400 ffffffff 00c00000
GS =0000 ffff88806b700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe898babf40 CR3=000000001e11e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=70616d7469622d7265766f632d7a7973 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 2
RAX=0000000000029c9b RBX=ffffe8fefd822000 RCX=ffffffff8a1ba0f5 RDX=0000000000000002
RSI=ffffffff8d1e9080 RDI=ffffe8fefd822000 RBP=ffffffff8d1e9080 RSP=ffffc90000187d78
R8 =0000000000000001 R9 =ffffed100d706d9d R10=ffff88806b836ceb R11=0000000000000001
R12=0000000000000002 R13=ffffffff8d1e9168 R14=0000000000000002 R15=0000000000000000
RIP=ffffffff8a1bbf13 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe000008f000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0063ed53b8 CR3=000000000c575000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=36b377c65d3e8f5eeed5b5683688fa03 XMM01=00000000000000000000000000000000
XMM02=000000000000000040dcbfa28c1d31b6 XMM03=32322035312e322e302e303120323832
XMM04=00000000000000050000000000a4fb49 XMM05=00000000000000000000000001f06210
XMM06=00000000000000050000000000a4fb4e XMM07=00000000000000000000000001f0620e
XMM08=00000000000000060000000000a52559 XMM09=00000000000000000000000001f0620b
XMM10=00000000000000030000000000a4c7d9 XMM11=00000000000000000000000001f0620c
XMM12=00000000000000060000000000a523e5 XMM13=00000000000000000000000001f0620a
XMM14=00000000000000040000000000a4db3f XMM15=00000000000000000000000000000000
info registers vcpu 3
RAX=00000000000285bf RBX=ffffe8fefd922000 RCX=ffffffff8a1ba0f5 RDX=0000000000000002
RSI=ffffffff8d1e9080 RDI=ffffe8fefd922000 RBP=ffffffff8d1e9080 RSP=ffffc90000197d78
R8 =0000000000000001 R9 =ffffed100d726d9d R10=ffff88806b936ceb R11=0000000000000001
R12=0000000000000002 R13=ffffffff8d1e9168 R14=0000000000000002 R15=0000000000000000
RIP=ffffffff8a1bbf13 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe00000d6000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0064c49ff8 CR3=000000000c575000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=36b377c65d3e8f5eeed5b5683688fa03 XMM01=00000000000000000000000000000000
XMM02=000000000000000040dcbfa28c1d31b6 XMM03=32322035312e322e302e303120323832
XMM04=00000000000000050000000000a4fb49 XMM05=00000000000000000000000001f06210
XMM06=00000000000000050000000000a4fb4e XMM07=00000000000000000000000001f0620e
XMM08=00000000000000060000000000a52559 XMM09=00000000000000000000000001f0620b
XMM10=00000000000000030000000000a4c7d9 XMM11=00000000000000000000000001f0620c
XMM12=00000000000000060000000000a523e5 XMM13=00000000000000000000000001f0620a
XMM14=00000000000000040000000000a4db3f XMM15=00000000000000000000000000000000