Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. 2021/11/04 22:50:52 fuzzer started 2021/11/04 22:50:52 connecting to host at 10.128.0.163:39029 2021/11/04 22:50:52 checking machine... 2021/11/04 22:50:52 checking revisions... 2021/11/04 22:50:52 testing simple program... [ 21.853849][ T23] audit: type=1400 audit(1636066252.740:73): avc: denied { getattr } for pid=364 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.869847][ T373] cgroup: Unknown subsys name 'net' [ 21.878113][ T23] audit: type=1400 audit(1636066252.740:74): avc: denied { read } for pid=364 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.906540][ T23] audit: type=1400 audit(1636066252.740:75): avc: denied { open } for pid=364 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.906941][ T373] cgroup: Unknown subsys name 'devices' [ 21.929958][ T23] audit: type=1400 audit(1636066252.740:76): avc: denied { read } for pid=364 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.929974][ T23] audit: type=1400 audit(1636066252.740:77): avc: denied { open } for pid=364 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.929993][ T23] audit: type=1400 audit(1636066252.740:78): avc: denied { mounton } for pid=373 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.007324][ T23] audit: type=1400 audit(1636066252.740:79): avc: denied { mount } for pid=373 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.029944][ T23] audit: type=1400 audit(1636066252.770:80): avc: denied { unmount } for pid=373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.148306][ T373] cgroup: Unknown subsys name 'hugetlb' [ 22.154088][ T373] cgroup: Unknown subsys name 'rlimit' [ 22.247868][ T23] audit: type=1400 audit(1636066253.140:81): avc: denied { setattr } for pid=373 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.284732][ T23] audit: type=1400 audit(1636066253.170:82): avc: denied { execmem } for pid=374 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.364877][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.373797][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.381865][ T375] device bridge_slave_0 entered promiscuous mode [ 22.389489][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.396645][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.404163][ T375] device bridge_slave_1 entered promiscuous mode [ 22.435719][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.442882][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.450300][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.457515][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.477174][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.484746][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.493213][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.501043][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.510513][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.519122][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.526148][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.547329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.555830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.564281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.573804][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.580993][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.588594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.596826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.608154][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.619506][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.630080][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.644974][ T19] ================================================================================ [ 22.654472][ T19] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 22.662315][ T19] member access within address ffffc900001471c0 with insufficient space [ 22.671109][ T19] for an object of type 'struct sk_buff' [ 22.676751][ T19] CPU: 1 PID: 19 Comm: kworker/1:0 Not tainted 5.10.77-syzkaller-01139-ga7c8ce846007 #0 [ 22.686633][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.697917][ T19] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.703888][ T19] Call Trace: [ 22.707181][ T19] dump_stack_lvl+0x1e2/0x24b [ 22.711847][ T19] ? show_regs_print_info+0x18/0x18 [ 22.717123][ T19] ? wg_allowedips_lookup_dst+0x190/0x190 [ 22.722843][ T19] dump_stack+0x15/0x1d [ 22.727011][ T19] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.732819][ T19] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 22.738887][ T19] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.745023][ T19] wg_xmit+0x4a2/0xae0 [ 22.749250][ T19] ? wg_stop+0x140/0x140 [ 22.753816][ T19] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 22.760255][ T19] netdev_start_xmit+0x8a/0x160 [ 22.765616][ T19] dev_hard_start_xmit+0x18d/0x2f0 [ 22.770720][ T19] __dev_queue_xmit+0xfbe/0x1bb0 [ 22.775766][ T19] ? dev_queue_xmit+0x20/0x20 [ 22.780525][ T19] ? __local_bh_enable_ip+0xa8/0x170 [ 22.785902][ T19] ? do_raw_spin_unlock+0x50/0x50 [ 22.791063][ T19] ? _local_bh_enable+0x30/0x30 [ 22.795944][ T19] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.802259][ T19] ? ndisc_constructor+0x690/0x8a0 [ 22.807606][ T19] ? _raw_write_unlock_bh+0x31/0x47 [ 22.812825][ T19] ? dev_hard_header+0xdb/0xf0 [ 22.817707][ T19] dev_queue_xmit+0x17/0x20 [ 22.822965][ T19] neigh_connected_output+0x288/0x2b0 [ 22.828590][ T19] ip6_finish_output2+0xde2/0x1440 [ 22.834046][ T19] ? __rcu_read_lock+0x50/0x50 [ 22.839072][ T19] ? __ip6_finish_output+0x520/0x520 [ 22.844517][ T19] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.850061][ T19] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.856629][ T19] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.861546][ T19] __ip6_finish_output+0x3e4/0x520 [ 22.866638][ T19] ip6_finish_output+0x3f/0x220 [ 22.871468][ T19] ? ip6_output+0x1d3/0x4b0 [ 22.876124][ T19] ip6_output+0x1f8/0x4b0 [ 22.880548][ T19] ? asan.module_dtor+0x20/0x20 [ 22.885580][ T19] ? skb_dst+0x40/0x40 [ 22.889724][ T19] ? __rcu_read_lock+0x50/0x50 [ 22.894496][ T19] ? selinux_ipv6_forward+0x50/0x50 [ 22.899953][ T19] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.905900][ T19] ? nf_hook_slow+0x150/0x1b0 [ 22.910571][ T19] NF_HOOK+0xdd/0x280 [ 22.915515][ T19] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.921315][ T19] ? NF_HOOK+0x280/0x280 [ 22.925540][ T19] ? __rcu_read_lock+0x50/0x50 [ 22.930602][ T19] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.937117][ T19] ? ndisc_send_skb+0x547/0x9f0 [ 22.942234][ T19] ? memcpy+0x56/0x70 [ 22.946387][ T19] ndisc_send_skb+0x646/0x9f0 [ 22.951070][ T19] ? slab_post_alloc_hook+0x90/0xa0 [ 22.956251][ T19] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.962113][ T19] ? skb_set_owner_w+0x1a8/0x310 [ 22.967136][ T19] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.973054][ T19] ? skb_put+0x11d/0x200 [ 22.977378][ T19] ndisc_send_rs+0x26c/0x360 [ 22.982181][ T19] addrconf_dad_completed+0x4f3/0x9f0 [ 22.987544][ T19] ? addrconf_dad_stop+0x430/0x430 [ 22.994705][ T19] ? __queue_delayed_work+0x16c/0x1f0 [ 23.000351][ T19] addrconf_dad_work+0x9c1/0x1520 [ 23.005548][ T19] ? __kasan_check_write+0x14/0x20 [ 23.010645][ T19] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.016432][ T19] ? __kasan_check_write+0x14/0x20 [ 23.021889][ T19] process_one_work+0x3ca/0x660 [ 23.026733][ T19] worker_thread+0x709/0xa20 [ 23.031481][ T19] kthread+0x371/0x390 [ 23.035534][ T19] ? pr_cont_work+0x110/0x110 [ 23.040282][ T19] ? __list_add+0xc0/0xc0 [ 23.044979][ T19] ret_from_fork+0x1f/0x30 [ 23.049542][ T19] ================================================================================ [ 23.059579][ T19] ================================================================================ [ 23.069098][ T19] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 23.076847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 23.077186][ T19] member access within address ffffc900001471c0 with insufficient space [ 23.095273][ T19] for an object of type 'struct sk_buff' [ 23.101026][ T19] CPU: 1 PID: 19 Comm: kworker/1:0 Not tainted 5.10.77-syzkaller-01139-ga7c8ce846007 #0 [ 23.110979][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.121113][ T19] Workqueue: ipv6_addrconf addrconf_dad_work [ 23.127223][ T19] Call Trace: [ 23.130611][ T19] dump_stack_lvl+0x1e2/0x24b [ 23.135460][ T19] ? show_regs_print_info+0x18/0x18 [ 23.140642][ T19] ? wg_allowedips_lookup_dst+0x190/0x190 [ 23.146466][ T19] dump_stack+0x15/0x1d [ 23.150780][ T19] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 23.156860][ T19] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 23.162860][ T19] wg_xmit+0x513/0xae0 [ 23.166921][ T19] ? wg_stop+0x140/0x140 [ 23.171324][ T19] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 23.177550][ T19] netdev_start_xmit+0x8a/0x160 [ 23.182468][ T19] dev_hard_start_xmit+0x18d/0x2f0 [ 23.187860][ T19] __dev_queue_xmit+0xfbe/0x1bb0 [ 23.192868][ T19] ? dev_queue_xmit+0x20/0x20 [ 23.197614][ T19] ? __local_bh_enable_ip+0xa8/0x170 [ 23.202971][ T19] ? do_raw_spin_unlock+0x50/0x50 [ 23.208001][ T19] ? _local_bh_enable+0x30/0x30 [ 23.213131][ T19] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.219360][ T19] ? ndisc_constructor+0x690/0x8a0 [ 23.224741][ T19] ? _raw_write_unlock_bh+0x31/0x47 [ 23.230279][ T19] ? dev_hard_header+0xdb/0xf0 [ 23.235034][ T19] dev_queue_xmit+0x17/0x20 [ 23.239526][ T19] neigh_connected_output+0x288/0x2b0 [ 23.245078][ T19] ip6_finish_output2+0xde2/0x1440 [ 23.250173][ T19] ? __rcu_read_lock+0x50/0x50 [ 23.255204][ T19] ? __ip6_finish_output+0x520/0x520 [ 23.260649][ T19] ? dst_cow_metrics_generic+0x55/0x1d0 [ 23.266245][ T19] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.272495][ T19] ? ip6_skb_dst_mtu+0xaf/0x260 [ 23.277528][ T19] __ip6_finish_output+0x3e4/0x520 [ 23.283400][ T19] ip6_finish_output+0x3f/0x220 [ 23.288241][ T19] ? ip6_output+0x1d3/0x4b0 [ 23.292792][ T19] ip6_output+0x1f8/0x4b0 [ 23.297133][ T19] ? asan.module_dtor+0x20/0x20 [ 23.302064][ T19] ? skb_dst+0x40/0x40 [ 23.306392][ T19] ? __rcu_read_lock+0x50/0x50 [ 23.311229][ T19] ? selinux_ipv6_forward+0x50/0x50 [ 23.316408][ T19] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.322196][ T19] ? nf_hook_slow+0x150/0x1b0 [ 23.326878][ T19] NF_HOOK+0xdd/0x280 [ 23.331190][ T19] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 23.336994][ T19] ? NF_HOOK+0x280/0x280 [ 23.341315][ T19] ? __rcu_read_lock+0x50/0x50 [ 23.346146][ T19] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.352735][ T19] ? ndisc_send_skb+0x547/0x9f0 [ 23.357664][ T19] ? memcpy+0x56/0x70 [ 23.361714][ T19] ndisc_send_skb+0x646/0x9f0 [ 23.366376][ T19] ? slab_post_alloc_hook+0x90/0xa0 [ 23.371569][ T19] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 23.377354][ T19] ? skb_set_owner_w+0x1a8/0x310 [ 23.382620][ T19] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 23.388488][ T19] ? skb_put+0x11d/0x200 [ 23.392725][ T19] ndisc_send_rs+0x26c/0x360 [ 23.397381][ T19] addrconf_dad_completed+0x4f3/0x9f0 [ 23.402907][ T19] ? addrconf_dad_stop+0x430/0x430 [ 23.407998][ T19] ? __queue_delayed_work+0x16c/0x1f0 [ 23.413356][ T19] addrconf_dad_work+0x9c1/0x1520 [ 23.418364][ T19] ? __kasan_check_write+0x14/0x20 [ 23.423461][ T19] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.429256][ T19] ? __kasan_check_write+0x14/0x20 [ 23.434353][ T19] process_one_work+0x3ca/0x660 [ 23.439198][ T19] worker_thread+0x709/0xa20 [ 23.444118][ T19] kthread+0x371/0x390 2021/11/04 22:50:54 building call list... [ 23.448381][ T19] ? pr_cont_work+0x110/0x110 [ 23.453207][ T19] ? __list_add+0xc0/0xc0 [ 23.457603][ T19] ret_from_fork+0x1f/0x30 [ 23.462225][ T19] ================================================================================ [ 23.474834][ T375] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.046880][ T9] device bridge_slave_1 left promiscuous mode [ 24.053056][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.060841][ T9] device bridge_slave_0 left promiscuous mode [ 24.067252][ T9] bridge0: port 1(bridge_slave_0) entered disabled state