Warning: Permanently added '10.128.0.81' (ECDSA) to the list of known hosts. 2021/11/08 23:35:06 fuzzer started 2021/11/08 23:35:06 connecting to host at 10.128.0.163:40281 2021/11/08 23:35:06 checking machine... 2021/11/08 23:35:06 checking revisions... 2021/11/08 23:35:06 testing simple program... [ 19.074242][ T23] audit: type=1400 audit(1636414506.240:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.079055][ T23] audit: type=1400 audit(1636414506.240:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.083341][ T23] audit: type=1400 audit(1636414506.240:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.087625][ T23] audit: type=1400 audit(1636414506.250:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.092456][ T371] cgroup: Unknown subsys name 'net' [ 19.093934][ T23] audit: type=1400 audit(1636414506.250:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.119379][ T23] audit: type=1400 audit(1636414506.250:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.119561][ T371] cgroup: Unknown subsys name 'devices' [ 19.143262][ T23] audit: type=1400 audit(1636414506.250:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.171012][ T23] audit: type=1400 audit(1636414506.270:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.275690][ T371] cgroup: Unknown subsys name 'hugetlb' [ 19.281380][ T371] cgroup: Unknown subsys name 'rlimit' [ 19.345287][ T23] audit: type=1400 audit(1636414506.510:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.368759][ T23] audit: type=1400 audit(1636414506.530:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.444796][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.452091][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.459708][ T373] device bridge_slave_0 entered promiscuous mode [ 19.466960][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.474170][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.481955][ T373] device bridge_slave_1 entered promiscuous mode [ 19.511536][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.518618][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.526276][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.533505][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.552769][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.560064][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.567645][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.575261][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.595530][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.604488][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.612657][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.619705][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.627683][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.636056][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.643170][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.650638][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.658572][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.673858][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.682988][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.691314][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.702519][ T67] ================================================================================ [ 19.711837][ T67] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 19.719723][ T67] member access within address ffffc9000024f1c0 with insufficient space [ 19.728060][ T67] for an object of type 'struct sk_buff' [ 19.733670][ T67] CPU: 0 PID: 67 Comm: kworker/0:1 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 19.743703][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.753761][ T67] Workqueue: ipv6_addrconf addrconf_dad_work [ 19.759729][ T67] Call Trace: [ 19.763007][ T67] dump_stack_lvl+0x1e2/0x24b [ 19.767677][ T67] ? show_regs_print_info+0x18/0x18 [ 19.772865][ T67] ? wg_allowedips_lookup_dst+0x190/0x190 [ 19.778560][ T67] dump_stack+0x15/0x1d [ 19.782950][ T67] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 19.788651][ T67] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 19.794519][ T67] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 19.800490][ T67] wg_xmit+0x4a2/0xae0 [ 19.804577][ T67] ? wg_stop+0x140/0x140 [ 19.808797][ T67] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 19.815009][ T67] netdev_start_xmit+0x8a/0x160 [ 19.819845][ T67] dev_hard_start_xmit+0x18d/0x2f0 [ 19.825013][ T67] __dev_queue_xmit+0xfbe/0x1bb0 [ 19.830197][ T67] ? dev_queue_xmit+0x20/0x20 [ 19.834942][ T67] ? __local_bh_enable_ip+0xa8/0x170 [ 19.840211][ T67] ? do_raw_spin_unlock+0x50/0x50 [ 19.845213][ T67] ? _local_bh_enable+0x30/0x30 [ 19.850045][ T67] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.856271][ T67] ? ndisc_constructor+0x690/0x8a0 [ 19.861356][ T67] ? _raw_write_unlock_bh+0x31/0x47 [ 19.866662][ T67] ? dev_hard_header+0xdb/0xf0 [ 19.871505][ T67] dev_queue_xmit+0x17/0x20 [ 19.876012][ T67] neigh_connected_output+0x288/0x2b0 [ 19.881472][ T67] ip6_finish_output2+0xde2/0x1440 [ 19.886836][ T67] ? __rcu_read_lock+0x50/0x50 [ 19.891590][ T67] ? __ip6_finish_output+0x520/0x520 [ 19.896852][ T67] ? dst_cow_metrics_generic+0x55/0x1d0 [ 19.902376][ T67] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.908633][ T67] ? ip6_skb_dst_mtu+0xaf/0x260 [ 19.913470][ T67] __ip6_finish_output+0x3e4/0x520 [ 19.918557][ T67] ip6_finish_output+0x3f/0x220 [ 19.923398][ T67] ? ip6_output+0x1d3/0x4b0 [ 19.927877][ T67] ip6_output+0x1f8/0x4b0 [ 19.932182][ T67] ? asan.module_dtor+0x20/0x20 [ 19.937007][ T67] ? skb_dst+0x40/0x40 [ 19.941052][ T67] ? __rcu_read_lock+0x50/0x50 [ 19.945814][ T67] ? selinux_ipv6_forward+0x50/0x50 [ 19.951270][ T67] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 19.957429][ T67] ? nf_hook_slow+0x150/0x1b0 [ 19.962287][ T67] NF_HOOK+0xdd/0x280 [ 19.966279][ T67] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 19.971891][ T67] ? NF_HOOK+0x280/0x280 [ 19.976122][ T67] ? __rcu_read_lock+0x50/0x50 [ 19.980911][ T67] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.987124][ T67] ? ndisc_send_skb+0x547/0x9f0 [ 19.991947][ T67] ? memcpy+0x56/0x70 [ 19.995912][ T67] ndisc_send_skb+0x646/0x9f0 [ 20.000725][ T67] ? slab_post_alloc_hook+0x90/0xa0 [ 20.006240][ T67] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.011781][ T67] ? skb_set_owner_w+0x1a8/0x310 [ 20.016975][ T67] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.022692][ T67] ? skb_put+0x11d/0x200 [ 20.027131][ T67] ndisc_send_rs+0x26c/0x360 [ 20.031739][ T67] addrconf_dad_completed+0x4f3/0x9f0 [ 20.037808][ T67] ? addrconf_dad_stop+0x430/0x430 [ 20.043209][ T67] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.049019][ T67] addrconf_dad_work+0x9c1/0x1520 [ 20.054216][ T67] ? move_linked_works+0x118/0x130 [ 20.060125][ T67] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.066297][ T67] ? __kasan_check_write+0x14/0x20 [ 20.071925][ T67] process_one_work+0x3ca/0x660 [ 20.076756][ T67] worker_thread+0x709/0xa20 [ 20.081421][ T67] ? __kthread_parkme+0x11b/0x150 [ 20.086603][ T67] kthread+0x371/0x390 [ 20.090834][ T67] ? pr_cont_work+0x110/0x110 [ 20.095491][ T67] ? __list_add+0xc0/0xc0 [ 20.099810][ T67] ret_from_fork+0x1f/0x30 [ 20.104424][ T67] ================================================================================ [ 20.113837][ T67] ================================================================================ [ 20.123307][ T67] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 20.131056][ T67] member access within address ffffc9000024f1c0 with insufficient space [ 20.139400][ T67] for an object of type 'struct sk_buff' [ 20.145225][ T67] CPU: 0 PID: 67 Comm: kworker/0:1 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 20.155112][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.165173][ T67] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.171141][ T67] Call Trace: [ 20.174878][ T67] dump_stack_lvl+0x1e2/0x24b [ 20.179662][ T67] ? show_regs_print_info+0x18/0x18 [ 20.184955][ T67] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.191093][ T67] dump_stack+0x15/0x1d [ 20.195322][ T67] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.201646][ T67] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.207619][ T67] wg_xmit+0x513/0xae0 [ 20.211970][ T67] ? wg_stop+0x140/0x140 [ 20.216415][ T67] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.222646][ T67] netdev_start_xmit+0x8a/0x160 [ 20.227478][ T67] dev_hard_start_xmit+0x18d/0x2f0 [ 20.232593][ T67] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.238019][ T67] ? dev_queue_xmit+0x20/0x20 [ 20.244083][ T67] ? __local_bh_enable_ip+0xa8/0x170 [ 20.249518][ T67] ? do_raw_spin_unlock+0x50/0x50 [ 20.255207][ T67] ? _local_bh_enable+0x30/0x30 [ 20.260334][ T67] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.266692][ T67] ? ndisc_constructor+0x690/0x8a0 [ 20.271857][ T67] ? _raw_write_unlock_bh+0x31/0x47 [ 20.277604][ T67] ? dev_hard_header+0xdb/0xf0 [ 20.282465][ T67] dev_queue_xmit+0x17/0x20 [ 20.287694][ T67] neigh_connected_output+0x288/0x2b0 [ 20.293231][ T67] ip6_finish_output2+0xde2/0x1440 [ 20.298356][ T67] ? __rcu_read_lock+0x50/0x50 [ 20.303109][ T67] ? __ip6_finish_output+0x520/0x520 [ 20.308520][ T67] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.314068][ T67] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.320393][ T67] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.325503][ T67] __ip6_finish_output+0x3e4/0x520 [ 20.330901][ T67] ip6_finish_output+0x3f/0x220 [ 20.336398][ T67] ? ip6_output+0x1d3/0x4b0 [ 20.341622][ T67] ip6_output+0x1f8/0x4b0 [ 20.346107][ T67] ? asan.module_dtor+0x20/0x20 [ 20.351142][ T67] ? skb_dst+0x40/0x40 [ 20.355291][ T67] ? __rcu_read_lock+0x50/0x50 [ 20.360039][ T67] ? selinux_ipv6_forward+0x50/0x50 [ 20.365439][ T67] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.371329][ T67] ? nf_hook_slow+0x150/0x1b0 [ 20.376463][ T67] NF_HOOK+0xdd/0x280 [ 20.380443][ T67] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.386216][ T67] ? NF_HOOK+0x280/0x280 [ 20.390640][ T67] ? __rcu_read_lock+0x50/0x50 [ 20.395748][ T67] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.402091][ T67] ? ndisc_send_skb+0x547/0x9f0 [ 20.406921][ T67] ? memcpy+0x56/0x70 [ 20.410893][ T67] ndisc_send_skb+0x646/0x9f0 [ 20.415863][ T67] ? slab_post_alloc_hook+0x90/0xa0 [ 20.421223][ T67] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.426745][ T67] ? skb_set_owner_w+0x1a8/0x310 [ 20.431834][ T67] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.437638][ T67] ? skb_put+0x11d/0x200 [ 20.442094][ T67] ndisc_send_rs+0x26c/0x360 [ 20.446793][ T67] addrconf_dad_completed+0x4f3/0x9f0 [ 20.452142][ T67] ? addrconf_dad_stop+0x430/0x430 [ 20.457337][ T67] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.463437][ T67] addrconf_dad_work+0x9c1/0x1520 [ 20.470574][ T67] ? move_linked_works+0x118/0x130 [ 20.475715][ T67] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.481784][ T67] ? __kasan_check_write+0x14/0x20 [ 20.486887][ T67] process_one_work+0x3ca/0x660 [ 20.491933][ T67] worker_thread+0x709/0xa20 [ 20.496923][ T67] ? __kthread_parkme+0x11b/0x150 [ 20.502016][ T67] kthread+0x371/0x390 [ 20.506170][ T67] ? pr_cont_work+0x110/0x110 [ 20.511010][ T67] ? __list_add+0xc0/0xc0 2021/11/08 23:35:07 building call list... [ 20.515645][ T67] ret_from_fork+0x1f/0x30 [ 20.520398][ T67] ================================================================================ [ 20.530809][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.547743][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.134089][ T177] device bridge_slave_1 left promiscuous mode [ 21.140662][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.149273][ T177] device bridge_slave_0 left promiscuous mode [ 21.155868][ T177] bridge0: port 1(bridge_slave_0) entered disabled state