Warning: Permanently added '10.128.1.193' (ECDSA) to the list of known hosts. 2021/11/16 22:07:39 fuzzer started 2021/11/16 22:07:39 connecting to host at 10.128.0.163:33077 2021/11/16 22:07:39 checking machine... 2021/11/16 22:07:39 checking revisions... 2021/11/16 22:07:39 testing simple program... [ 20.465833][ T23] audit: type=1400 audit(1637100459.710:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.489679][ T23] audit: type=1400 audit(1637100459.730:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.502276][ T370] cgroup: Unknown subsys name 'net' [ 20.511183][ T23] audit: type=1400 audit(1637100459.730:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.538850][ T23] audit: type=1400 audit(1637100459.730:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.539012][ T370] cgroup: Unknown subsys name 'devices' [ 20.561770][ T23] audit: type=1400 audit(1637100459.730:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.590492][ T23] audit: type=1400 audit(1637100459.730:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.613275][ T23] audit: type=1400 audit(1637100459.730:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.635632][ T23] audit: type=1400 audit(1637100459.760:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.726930][ T370] cgroup: Unknown subsys name 'hugetlb' [ 20.732625][ T370] cgroup: Unknown subsys name 'rlimit' [ 20.856620][ T23] audit: type=1400 audit(1637100460.100:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.880033][ T23] audit: type=1400 audit(1637100460.120:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.949573][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.956639][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.963916][ T373] device bridge_slave_0 entered promiscuous mode [ 20.970774][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.977801][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.985081][ T373] device bridge_slave_1 entered promiscuous mode [ 21.012951][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.019993][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.027278][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.034287][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.050588][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.057835][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.065583][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.072980][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.081974][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.090111][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.097157][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.116841][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.125295][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.133115][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.142116][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.149160][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.156759][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.164624][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.181178][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.189646][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.198829][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.207637][ T108] ================================================================================ [ 21.216970][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 21.224775][ T108] member access within address ffffc90000ac71c0 with insufficient space [ 21.233111][ T108] for an object of type 'struct sk_buff' [ 21.238876][ T108] CPU: 0 PID: 108 Comm: kworker/0:2 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 21.248666][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.258769][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.264734][ T108] Call Trace: [ 21.268015][ T108] dump_stack_lvl+0x1e2/0x24b [ 21.272669][ T108] ? show_regs_print_info+0x18/0x18 [ 21.277839][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.283540][ T108] dump_stack+0x15/0x1d [ 21.287683][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.293374][ T108] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 21.299256][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.305352][ T108] wg_xmit+0x4a2/0xae0 [ 21.309403][ T108] ? wg_stop+0x140/0x140 [ 21.313732][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.319967][ T108] netdev_start_xmit+0x8a/0x160 [ 21.324794][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 21.329936][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.334982][ T108] ? dev_queue_xmit+0x20/0x20 [ 21.339632][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 21.344905][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 21.349901][ T108] ? _local_bh_enable+0x30/0x30 [ 21.354723][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.360940][ T108] ? ndisc_constructor+0x690/0x8a0 [ 21.366030][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 21.371209][ T108] ? dev_hard_header+0xdb/0xf0 [ 21.375945][ T108] dev_queue_xmit+0x17/0x20 [ 21.380422][ T108] neigh_connected_output+0x288/0x2b0 [ 21.385771][ T108] ip6_finish_output2+0xde2/0x1440 [ 21.390859][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.395595][ T108] ? __ip6_finish_output+0x520/0x520 [ 21.400856][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.406378][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.412587][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.417420][ T108] __ip6_finish_output+0x3e4/0x520 [ 21.422504][ T108] ip6_finish_output+0x3f/0x220 [ 21.427343][ T108] ? ip6_output+0x1d3/0x4b0 [ 21.431820][ T108] ip6_output+0x1f8/0x4b0 [ 21.436124][ T108] ? asan.module_dtor+0x20/0x20 [ 21.440966][ T108] ? skb_dst+0x40/0x40 [ 21.445018][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.449761][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 21.454933][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.460628][ T108] ? nf_hook_slow+0x150/0x1b0 [ 21.465282][ T108] NF_HOOK+0xdd/0x280 [ 21.469257][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.474868][ T108] ? NF_HOOK+0x280/0x280 [ 21.479084][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.483823][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.490037][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 21.494873][ T108] ? memcpy+0x56/0x70 [ 21.498833][ T108] ndisc_send_skb+0x646/0x9f0 [ 21.503513][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 21.508701][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.514231][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 21.519317][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.525008][ T108] ? skb_put+0x11d/0x200 [ 21.529234][ T108] ndisc_send_rs+0x26c/0x360 [ 21.533800][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 21.539164][ T108] ? addrconf_dad_stop+0x430/0x430 [ 21.544256][ T108] ? mutex_unlock+0x34/0x40 [ 21.548744][ T108] addrconf_dad_work+0x9c1/0x1520 [ 21.553742][ T108] ? move_linked_works+0x118/0x130 [ 21.558823][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.564517][ T108] ? __kasan_check_write+0x14/0x20 [ 21.569606][ T108] process_one_work+0x3ca/0x660 [ 21.574436][ T108] worker_thread+0x709/0xa20 [ 21.579006][ T108] ? __kthread_parkme+0x11b/0x150 [ 21.584013][ T108] kthread+0x371/0x390 [ 21.588052][ T108] ? pr_cont_work+0x110/0x110 [ 21.592699][ T108] ? __list_add+0xc0/0xc0 [ 21.597000][ T108] ret_from_fork+0x1f/0x30 [ 21.601436][ T108] ================================================================================ [ 21.610714][ T108] ================================================================================ [ 21.620003][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 21.627734][ T108] member access within address ffffc90000ac71c0 with insufficient space [ 21.636051][ T108] for an object of type 'struct sk_buff' [ 21.641667][ T108] CPU: 0 PID: 108 Comm: kworker/0:2 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 21.651438][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.661476][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.667428][ T108] Call Trace: [ 21.670694][ T108] dump_stack_lvl+0x1e2/0x24b [ 21.675345][ T108] ? show_regs_print_info+0x18/0x18 [ 21.680515][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.686206][ T108] dump_stack+0x15/0x1d [ 21.690346][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.696039][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.701993][ T108] wg_xmit+0x513/0xae0 [ 21.706034][ T108] ? wg_stop+0x140/0x140 [ 21.710425][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.716725][ T108] netdev_start_xmit+0x8a/0x160 [ 21.721564][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 21.726647][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.731555][ T108] ? dev_queue_xmit+0x20/0x20 [ 21.736221][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 21.741476][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 21.746483][ T108] ? _local_bh_enable+0x30/0x30 [ 21.751303][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.757514][ T108] ? ndisc_constructor+0x690/0x8a0 [ 21.762605][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 21.767784][ T108] ? dev_hard_header+0xdb/0xf0 [ 21.772518][ T108] dev_queue_xmit+0x17/0x20 [ 21.777003][ T108] neigh_connected_output+0x288/0x2b0 [ 21.782452][ T108] ip6_finish_output2+0xde2/0x1440 [ 21.787536][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.792293][ T108] ? __ip6_finish_output+0x520/0x520 [ 21.797563][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.803273][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.809533][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.814369][ T108] __ip6_finish_output+0x3e4/0x520 [ 21.819462][ T108] ip6_finish_output+0x3f/0x220 [ 21.824292][ T108] ? ip6_output+0x1d3/0x4b0 [ 21.828771][ T108] ip6_output+0x1f8/0x4b0 [ 21.833087][ T108] ? asan.module_dtor+0x20/0x20 [ 21.837926][ T108] ? skb_dst+0x40/0x40 [ 21.841977][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.846724][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 21.851896][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.857602][ T108] ? nf_hook_slow+0x150/0x1b0 [ 21.862263][ T108] NF_HOOK+0xdd/0x280 [ 21.866220][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.871835][ T108] ? NF_HOOK+0x280/0x280 [ 21.876051][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.880796][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.887073][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 21.891912][ T108] ? memcpy+0x56/0x70 [ 21.896017][ T108] ndisc_send_skb+0x646/0x9f0 [ 21.900694][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 21.905893][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.911434][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 21.916359][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.922060][ T108] ? skb_put+0x11d/0x200 [ 21.926284][ T108] ndisc_send_rs+0x26c/0x360 [ 21.930853][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 21.936199][ T108] ? addrconf_dad_stop+0x430/0x430 [ 21.941284][ T108] ? mutex_unlock+0x34/0x40 [ 21.945762][ T108] addrconf_dad_work+0x9c1/0x1520 [ 21.950943][ T108] ? move_linked_works+0x118/0x130 [ 21.956104][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.961881][ T108] ? __kasan_check_write+0x14/0x20 [ 21.966987][ T108] process_one_work+0x3ca/0x660 [ 21.971815][ T108] worker_thread+0x709/0xa20 [ 21.976400][ T108] ? __kthread_parkme+0x11b/0x150 [ 21.981426][ T108] kthread+0x371/0x390 [ 21.986090][ T108] ? pr_cont_work+0x110/0x110 [ 21.990741][ T108] ? __list_add+0xc0/0xc0 [ 21.995047][ T108] ret_from_fork+0x1f/0x30 [ 21.999498][ T108] ================================================================================ 2021/11/16 22:07:41 building call list... [ 22.017026][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.585524][ T9] device bridge_slave_1 left promiscuous mode [ 22.592046][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.599763][ T9] device bridge_slave_0 left promiscuous mode [ 22.606297][ T9] bridge0: port 1(bridge_slave_0) entered disabled state