[ 43.325706][ T39] audit: type=1400 audit(1688086942.847:80): avc: denied { rlimitinh } for pid=5109 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.335975][ T39] audit: type=1400 audit(1688086942.847:81): avc: denied { siginh } for pid=5109 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.935136][ T39] audit: type=1400 audit(1688086944.477:82): avc: denied { read } for pid=4611 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '[localhost]:61442' (ECDSA) to the list of known hosts. [ 48.904823][ T39] audit: type=1400 audit(1688086948.447:83): avc: denied { execute } for pid=5122 comm="sh" name="syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.913614][ T39] audit: type=1400 audit(1688086948.447:84): avc: denied { execute_no_trans } for pid=5122 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2023/06/30 01:02:28 fuzzer started 2023/06/30 01:02:28 connecting to host at localhost:40031 2023/06/30 01:02:28 checking machine... 2023/06/30 01:02:28 checking revisions... [ 49.310909][ T39] audit: type=1400 audit(1688086948.857:85): avc: denied { getattr } for pid=5122 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2023/06/30 01:02:28 testing simple program... [ 49.321201][ T39] audit: type=1400 audit(1688086948.857:86): avc: denied { read } for pid=5122 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.330432][ T39] audit: type=1400 audit(1688086948.857:87): avc: denied { open } for pid=5122 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.340680][ T39] audit: type=1400 audit(1688086948.867:88): avc: denied { read } for pid=5122 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.349979][ T5132] cgroup: Unknown subsys name 'net' [ 49.351011][ T39] audit: type=1400 audit(1688086948.867:89): avc: denied { open } for pid=5122 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.363643][ T39] audit: type=1400 audit(1688086948.867:90): avc: denied { read } for pid=5122 comm="syz-fuzzer" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.373176][ T39] audit: type=1400 audit(1688086948.867:91): avc: denied { open } for pid=5122 comm="syz-fuzzer" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.383999][ T39] audit: type=1400 audit(1688086948.867:92): avc: denied { write } for pid=5122 comm="syz-fuzzer" path="pipe:[31222]" dev="pipefs" ino=31222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 49.526816][ T5132] cgroup: Unknown subsys name 'rlimit' [ 49.717592][ T5133] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.504562][ T5132] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.520014][ T5129] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5129 'syz-fuzzer' [ 50.627617][ T5136] ================================================================================ [ 50.631581][ T5136] UBSAN: array-index-out-of-bounds in kernel/pid.c:244:15 [ 50.634292][ T5136] index 1 is out of range for type 'upid [1]' [ 50.637864][ T5136] CPU: 1 PID: 5136 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08531-g632f54b4d60b #0 [ 50.641584][ T5136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 50.644735][ T5136] Call Trace: [ 50.645936][ T5136] [ 50.647009][ T5136] dump_stack_lvl+0x136/0x150 [ 50.648875][ T5136] __ubsan_handle_out_of_bounds+0xd5/0x140 [ 50.651577][ T5136] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0xe91/0xf50 [ 50.654963][ T5136] alloc_pid+0xbe5/0xdd0 [ 50.656969][ T5136] ? copy_namespaces+0x1e3/0x500 [ 50.659281][ T5136] copy_process+0x4589/0x7620 [ 50.661491][ T5136] ? pidfd_prepare+0x80/0x80 [ 50.663642][ T5136] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 50.666456][ T5136] kernel_clone+0xeb/0x890 [ 50.668243][ T5136] ? create_io_thread+0xe0/0xe0 [ 50.670368][ T5136] ? ksys_unshare+0x676/0x920 [ 50.672608][ T5136] ? lock_downgrade+0x690/0x690 [ 50.674874][ T5136] ? do_raw_spin_lock+0x124/0x2b0 [ 50.677163][ T5136] ? spin_bug+0x1c0/0x1c0 [ 50.678821][ T5136] __do_sys_clone+0xba/0x100 [ 50.680582][ T5136] ? kernel_clone+0x890/0x890 [ 50.682336][ T5136] ? syscall_enter_from_user_mode+0x26/0x80 [ 50.684560][ T5136] do_syscall_64+0x39/0xb0 [ 50.686254][ T5136] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.688476][ T5136] RIP: 0033:0x7fed01689fab [ 50.690215][ T5136] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 50.697397][ T5136] RSP: 002b:00007ffda9aa8bc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 50.700725][ T5136] RAX: ffffffffffffffda RBX: 00007ffda9aa9218 RCX: 00007fed01689fab [ 50.703663][ T5136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 50.706631][ T5136] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005555568d6400 [ 50.710033][ T5136] R10: 00005555568d66d0 R11: 0000000000000246 R12: 0000000000000000 [ 50.713151][ T5136] R13: 00007ffda9aa8cb0 R14: 00007fed017ac9d8 R15: 000000000000000c [ 50.716335][ T5136] [ 50.717840][ T5136] ================================================================================ [ 50.721641][ T5136] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 50.724489][ T5136] CPU: 1 PID: 5136 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-08531-g632f54b4d60b #0 [ 50.728098][ T5136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 50.731416][ T5136] Call Trace: [ 50.732669][ T5136] [ 50.733791][ T5136] dump_stack_lvl+0xd9/0x150 [ 50.735527][ T5136] panic+0x686/0x730 [ 50.736977][ T5136] ? panic_smp_self_stop+0xa0/0xa0 [ 50.738869][ T5136] ? syslog_print_all+0x3a0/0x3a0 [ 50.740709][ T5136] check_panic_on_warn+0xb1/0xc0 [ 50.742571][ T5136] __ubsan_handle_out_of_bounds+0xfd/0x140 [ 50.744792][ T5136] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0xe91/0xf50 [ 50.747418][ T5136] alloc_pid+0xbe5/0xdd0 [ 50.749048][ T5136] ? copy_namespaces+0x1e3/0x500 [ 50.750946][ T5136] copy_process+0x4589/0x7620 [ 50.752762][ T5136] ? pidfd_prepare+0x80/0x80 [ 50.754552][ T5136] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 50.756799][ T5136] kernel_clone+0xeb/0x890 [ 50.758427][ T5136] ? create_io_thread+0xe0/0xe0 [ 50.760242][ T5136] ? ksys_unshare+0x676/0x920 [ 50.761957][ T5136] ? lock_downgrade+0x690/0x690 [ 50.763773][ T5136] ? do_raw_spin_lock+0x124/0x2b0 [ 50.765662][ T5136] ? spin_bug+0x1c0/0x1c0 [ 50.767243][ T5136] __do_sys_clone+0xba/0x100 [ 50.768985][ T5136] ? kernel_clone+0x890/0x890 [ 50.770709][ T5136] ? syscall_enter_from_user_mode+0x26/0x80 [ 50.772893][ T5136] do_syscall_64+0x39/0xb0 [ 50.774613][ T5136] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.776859][ T5136] RIP: 0033:0x7fed01689fab [ 50.778481][ T5136] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 50.785516][ T5136] RSP: 002b:00007ffda9aa8bc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 50.788528][ T5136] RAX: ffffffffffffffda RBX: 00007ffda9aa9218 RCX: 00007fed01689fab [ 50.791393][ T5136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 50.794263][ T5136] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005555568d6400 [ 50.797187][ T5136] R10: 00005555568d66d0 R11: 0000000000000246 R12: 0000000000000000 [ 50.800093][ T5136] R13: 00007ffda9aa8cb0 R14: 00007fed017ac9d8 R15: 000000000000000c [ 50.803015][ T5136] Connection to localhost closed by remote host. [ 50.805276] VM DIAGNOSIS: 01:02:30 Registers: info registers vcpu 0 RAX=000000000003af99 RBX=ffffe8fefd622000 RCX=ffffffff8a1ba0f5 RDX=0000000000000002 RSI=ffffffff8d1e9080 RDI=ffffe8fefd622000 RBP=ffffffff8d1e9080 RSP=ffffffff8c407d78 R8 =0000000000000001 R9 =ffffed100d6c6d9d R10=ffff88806b636ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e9168 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1bbf13 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd5813f3870 CR3=000000000c575000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8489f775 RDI=ffffffff921f05c0 RBP=ffffffff921f0580 RSP=ffffc900034a7668 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006f R14=ffffffff8489f710 R15=0000000000000000 RIP=ffffffff8489f79f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555568d6400 ffffffff 00c00000 GS =0000 ffff88806b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fed017abf40 CR3=00000000214ec000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=70616d7469622d7265766f632d7a7973 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=000000000002b63b RBX=ffffe8fefd822000 RCX=ffffffff8a1ba0f5 RDX=0000000000000002 RSI=ffffffff8d1e9080 RDI=ffffe8fefd822000 RBP=ffffffff8d1e9080 RSP=ffffc90000187d78 R8 =0000000000000001 R9 =ffffed100d706d9d R10=ffff88806b836ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e9168 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1bbf13 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe7d5df3870 CR3=000000000c575000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000001 XMM01=00007ffd6ffeca900000003000000010 XMM02=6c5f5f00455441564952505f4342494c XMM03=0000000000000000000000000042494c XMM04=6362696c5f5f00455441564952505f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000028f25 RBX=ffffe8fefd922000 RCX=ffffffff8a1ba0f5 RDX=0000000000000002 RSI=ffffffff8d1e9080 RDI=ffffe8fefd922000 RBP=ffffffff8d1e9080 RSP=ffffc90000197d78 R8 =0000000000000001 R9 =ffffed100d726d9d R10=ffff88806b936ceb R11=0000000000000001 R12=0000000000000002 R13=ffffffff8d1e9168 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff8a1bbf13 RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ff8af92224 CR3=000000000c575000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000