Warning: Permanently added '10.128.1.178' (ECDSA) to the list of known hosts. 2021/11/16 10:04:50 fuzzer started 2021/11/16 10:04:50 connecting to host at 10.128.0.163:36745 2021/11/16 10:04:50 checking machine... 2021/11/16 10:04:50 checking revisions... 2021/11/16 10:04:50 testing simple program... [ 22.389650][ T23] audit: type=1400 audit(1637057090.610:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 22.413169][ T23] audit: type=1400 audit(1637057090.620:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 22.417954][ T371] cgroup: Unknown subsys name 'net' [ 22.434544][ T23] audit: type=1400 audit(1637057090.620:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 22.462737][ T23] audit: type=1400 audit(1637057090.620:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.462940][ T371] cgroup: Unknown subsys name 'devices' [ 22.485769][ T23] audit: type=1400 audit(1637057090.620:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.514778][ T23] audit: type=1400 audit(1637057090.630:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.537515][ T23] audit: type=1400 audit(1637057090.630:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.559640][ T23] audit: type=1400 audit(1637057090.660:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.670471][ T371] cgroup: Unknown subsys name 'hugetlb' [ 22.676170][ T371] cgroup: Unknown subsys name 'rlimit' [ 22.800292][ T23] audit: type=1400 audit(1637057091.020:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.836651][ T23] audit: type=1400 audit(1637057091.050:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.916478][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.923899][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.931485][ T373] device bridge_slave_0 entered promiscuous mode [ 22.938405][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.945524][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.953455][ T373] device bridge_slave_1 entered promiscuous mode [ 22.985160][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.992226][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.999579][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.006600][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.024830][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.032208][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.040628][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.048064][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.069616][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.077921][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.085939][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.094342][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.101384][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.109323][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.117762][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.124845][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.132153][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.140207][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.156341][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.164743][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.173281][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.184409][ T24] ================================================================================ [ 23.193724][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 23.201731][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 23.210162][ T24] for an object of type 'struct sk_buff' [ 23.215875][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 23.225568][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.235645][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 23.241607][ T24] Call Trace: [ 23.244892][ T24] dump_stack_lvl+0x1e2/0x24b [ 23.249570][ T24] ? show_regs_print_info+0x18/0x18 [ 23.254751][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 23.260450][ T24] dump_stack+0x15/0x1d [ 23.264689][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 23.270390][ T24] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 23.276267][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 23.282230][ T24] wg_xmit+0x4a2/0xae0 [ 23.286289][ T24] ? wg_stop+0x140/0x140 [ 23.290599][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 23.296821][ T24] netdev_start_xmit+0x8a/0x160 [ 23.301999][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 23.307108][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 23.312038][ T24] ? dev_queue_xmit+0x20/0x20 [ 23.316700][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 23.322056][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 23.327065][ T24] ? _local_bh_enable+0x30/0x30 [ 23.332074][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.338295][ T24] ? ndisc_constructor+0x690/0x8a0 [ 23.343758][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 23.348937][ T24] ? dev_hard_header+0xdb/0xf0 [ 23.353784][ T24] dev_queue_xmit+0x17/0x20 [ 23.358284][ T24] neigh_connected_output+0x288/0x2b0 [ 23.363646][ T24] ip6_finish_output2+0xde2/0x1440 [ 23.368739][ T24] ? __rcu_read_lock+0x50/0x50 [ 23.373578][ T24] ? __ip6_finish_output+0x520/0x520 [ 23.378844][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 23.384373][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.390703][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 23.395533][ T24] __ip6_finish_output+0x3e4/0x520 [ 23.400636][ T24] ip6_finish_output+0x3f/0x220 [ 23.405652][ T24] ? ip6_output+0x1d3/0x4b0 [ 23.410222][ T24] ip6_output+0x1f8/0x4b0 [ 23.414542][ T24] ? asan.module_dtor+0x20/0x20 [ 23.419388][ T24] ? skb_dst+0x40/0x40 [ 23.423435][ T24] ? __rcu_read_lock+0x50/0x50 [ 23.428178][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 23.433368][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.439063][ T24] ? nf_hook_slow+0x150/0x1b0 [ 23.443722][ T24] NF_HOOK+0xdd/0x280 [ 23.447685][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 23.453296][ T24] ? NF_HOOK+0x280/0x280 [ 23.457524][ T24] ? __rcu_read_lock+0x50/0x50 [ 23.462270][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.468501][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 23.473340][ T24] ? memcpy+0x56/0x70 [ 23.477302][ T24] ndisc_send_skb+0x646/0x9f0 [ 23.481957][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 23.487234][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 23.492853][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 23.497784][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 23.503601][ T24] ? skb_put+0x11d/0x200 [ 23.507822][ T24] ndisc_send_rs+0x26c/0x360 [ 23.512401][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 23.517753][ T24] ? addrconf_dad_stop+0x430/0x430 [ 23.522842][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.528541][ T24] addrconf_dad_work+0x9c1/0x1520 [ 23.533549][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.539252][ T24] ? __kasan_check_write+0x14/0x20 [ 23.544350][ T24] process_one_work+0x3ca/0x660 [ 23.549189][ T24] worker_thread+0x709/0xa20 [ 23.554361][ T24] ? __kthread_parkme+0x11b/0x150 [ 23.559386][ T24] kthread+0x371/0x390 [ 23.563901][ T24] ? pr_cont_work+0x110/0x110 [ 23.568559][ T24] ? __list_add+0xc0/0xc0 [ 23.572886][ T24] ret_from_fork+0x1f/0x30 [ 23.577312][ T24] ================================================================================ [ 23.586688][ T24] ================================================================================ [ 23.595982][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 23.603714][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 23.612050][ T24] for an object of type 'struct sk_buff' [ 23.617938][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 23.627638][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.637685][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 23.643743][ T24] Call Trace: [ 23.647017][ T24] dump_stack_lvl+0x1e2/0x24b [ 23.651678][ T24] ? show_regs_print_info+0x18/0x18 [ 23.656857][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 23.662556][ T24] dump_stack+0x15/0x1d [ 23.666698][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 23.672399][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 23.678362][ T24] wg_xmit+0x513/0xae0 [ 23.682432][ T24] ? wg_stop+0x140/0x140 [ 23.686695][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 23.692938][ T24] netdev_start_xmit+0x8a/0x160 [ 23.697776][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 23.702885][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 23.707898][ T24] ? dev_queue_xmit+0x20/0x20 [ 23.712559][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 23.717822][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 23.722828][ T24] ? _local_bh_enable+0x30/0x30 [ 23.727659][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.734052][ T24] ? ndisc_constructor+0x690/0x8a0 [ 23.739148][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 23.744330][ T24] ? dev_hard_header+0xdb/0xf0 [ 23.749095][ T24] dev_queue_xmit+0x17/0x20 [ 23.753604][ T24] neigh_connected_output+0x288/0x2b0 [ 23.758964][ T24] ip6_finish_output2+0xde2/0x1440 [ 23.764060][ T24] ? __rcu_read_lock+0x50/0x50 [ 23.768806][ T24] ? __ip6_finish_output+0x520/0x520 [ 23.774074][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 23.779604][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.785869][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 23.790711][ T24] __ip6_finish_output+0x3e4/0x520 [ 23.795805][ T24] ip6_finish_output+0x3f/0x220 [ 23.800635][ T24] ? ip6_output+0x1d3/0x4b0 [ 23.805120][ T24] ip6_output+0x1f8/0x4b0 [ 23.809626][ T24] ? asan.module_dtor+0x20/0x20 [ 23.814457][ T24] ? skb_dst+0x40/0x40 [ 23.818508][ T24] ? __rcu_read_lock+0x50/0x50 [ 23.823251][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 23.828434][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.834134][ T24] ? nf_hook_slow+0x150/0x1b0 [ 23.838792][ T24] NF_HOOK+0xdd/0x280 [ 23.842756][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 23.848374][ T24] ? NF_HOOK+0x280/0x280 [ 23.852642][ T24] ? __rcu_read_lock+0x50/0x50 [ 23.857391][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.863611][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 23.868530][ T24] ? memcpy+0x56/0x70 [ 23.872493][ T24] ndisc_send_skb+0x646/0x9f0 [ 23.877171][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 23.882380][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 23.887917][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 23.892930][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 23.898649][ T24] ? skb_put+0x11d/0x200 [ 23.902872][ T24] ndisc_send_rs+0x26c/0x360 [ 23.907448][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 23.912914][ T24] ? addrconf_dad_stop+0x430/0x430 [ 23.918004][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.923731][ T24] addrconf_dad_work+0x9c1/0x1520 [ 23.928738][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.934449][ T24] ? __kasan_check_write+0x14/0x20 [ 23.939714][ T24] process_one_work+0x3ca/0x660 [ 23.944574][ T24] worker_thread+0x709/0xa20 [ 23.949177][ T24] ? __kthread_parkme+0x11b/0x150 [ 23.954184][ T24] kthread+0x371/0x390 [ 23.958234][ T24] ? pr_cont_work+0x110/0x110 [ 23.962984][ T24] ? __list_add+0xc0/0xc0 [ 23.967311][ T24] ret_from_fork+0x1f/0x30 [ 23.971753][ T24] ================================================================================ 2021/11/16 10:04:52 building call list... [ 23.983350][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.548999][ T9] device bridge_slave_1 left promiscuous mode [ 24.555173][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.563131][ T9] device bridge_slave_0 left promiscuous mode [ 24.569597][ T9] bridge0: port 1(bridge_slave_0) entered disabled state