Warning: Permanently added '10.128.1.209' (ECDSA) to the list of known hosts. 2021/11/08 11:29:07 fuzzer started 2021/11/08 11:29:07 connecting to host at 10.128.0.163:38235 2021/11/08 11:29:07 checking machine... 2021/11/08 11:29:07 checking revisions... 2021/11/08 11:29:07 testing simple program... [ 21.706364][ T23] audit: type=1400 audit(1636370947.780:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.723799][ T370] cgroup: Unknown subsys name 'net' [ 21.730620][ T23] audit: type=1400 audit(1636370947.780:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.757233][ T23] audit: type=1400 audit(1636370947.780:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.757416][ T370] cgroup: Unknown subsys name 'devices' [ 21.780556][ T23] audit: type=1400 audit(1636370947.790:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.809468][ T23] audit: type=1400 audit(1636370947.790:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.833281][ T23] audit: type=1400 audit(1636370947.800:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.856755][ T23] audit: type=1400 audit(1636370947.800:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.880097][ T23] audit: type=1400 audit(1636370947.820:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.969582][ T370] cgroup: Unknown subsys name 'hugetlb' [ 21.975578][ T370] cgroup: Unknown subsys name 'rlimit' [ 22.069412][ T23] audit: type=1400 audit(1636370948.150:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.110803][ T23] audit: type=1400 audit(1636370948.200:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.188290][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.195417][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.203543][ T374] device bridge_slave_0 entered promiscuous mode [ 22.210581][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.217735][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.225246][ T374] device bridge_slave_1 entered promiscuous mode [ 22.257297][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.264464][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.271983][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.279122][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.298645][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.306881][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.315277][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.323246][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.332964][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.341459][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.348608][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.357376][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.366875][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.373944][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.386449][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.398083][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.419562][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.429202][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.438185][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.446419][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.456220][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.469446][ T108] ================================================================================ [ 22.479636][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 22.487798][ T108] member access within address ffffc90000b071c0 with insufficient space [ 22.496485][ T108] for an object of type 'struct sk_buff' [ 22.502374][ T108] CPU: 1 PID: 108 Comm: kworker/1:2 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 22.512599][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.523101][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.529073][ T108] Call Trace: [ 22.532632][ T108] dump_stack_lvl+0x1e2/0x24b [ 22.537448][ T108] ? show_regs_print_info+0x18/0x18 [ 22.542649][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 22.548663][ T108] dump_stack+0x15/0x1d [ 22.552834][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.558627][ T108] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 22.564698][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.570949][ T108] wg_xmit+0x4a2/0xae0 [ 22.575007][ T108] ? worker_thread+0x709/0xa20 [ 22.579863][ T108] ? wg_stop+0x140/0x140 [ 22.584283][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 22.592876][ T108] netdev_start_xmit+0x8a/0x160 [ 22.597905][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 22.603194][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 22.608631][ T108] ? dev_queue_xmit+0x20/0x20 [ 22.613413][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 22.618774][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 22.623883][ T108] ? _local_bh_enable+0x30/0x30 [ 22.628975][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.635340][ T108] ? ndisc_constructor+0x690/0x8a0 [ 22.640443][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 22.645904][ T108] ? dev_hard_header+0xdb/0xf0 [ 22.650846][ T108] dev_queue_xmit+0x17/0x20 [ 22.655789][ T108] neigh_connected_output+0x288/0x2b0 [ 22.661404][ T108] ip6_finish_output2+0xde2/0x1440 [ 22.666605][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.671466][ T108] ? __ip6_finish_output+0x520/0x520 [ 22.676734][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.682264][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.688487][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.693491][ T108] __ip6_finish_output+0x3e4/0x520 [ 22.699196][ T108] ip6_finish_output+0x3f/0x220 [ 22.704022][ T108] ? ip6_output+0x1d3/0x4b0 [ 22.708515][ T108] ip6_output+0x1f8/0x4b0 [ 22.713037][ T108] ? asan.module_dtor+0x20/0x20 [ 22.717977][ T108] ? skb_dst+0x40/0x40 [ 22.722020][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.726759][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 22.731936][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.737806][ T108] ? nf_hook_slow+0x150/0x1b0 [ 22.742485][ T108] NF_HOOK+0xdd/0x280 [ 22.746493][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.752552][ T108] ? NF_HOOK+0x280/0x280 [ 22.756869][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.761878][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.768219][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 22.773703][ T108] ? memcpy+0x56/0x70 [ 22.777960][ T108] ndisc_send_skb+0x646/0x9f0 [ 22.783031][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 22.788252][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.793976][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 22.799016][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.804927][ T108] ? skb_put+0x11d/0x200 [ 22.809159][ T108] ndisc_send_rs+0x26c/0x360 [ 22.813732][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 22.820049][ T108] ? addrconf_dad_stop+0x430/0x430 [ 22.825316][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.831104][ T108] addrconf_dad_work+0x9c1/0x1520 [ 22.836581][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.842981][ T108] ? __kasan_check_write+0x14/0x20 [ 22.848090][ T108] process_one_work+0x3ca/0x660 [ 22.853143][ T108] worker_thread+0x709/0xa20 [ 22.857829][ T108] ? __kthread_parkme+0x11b/0x150 [ 22.862880][ T108] kthread+0x371/0x390 [ 22.867196][ T108] ? pr_cont_work+0x110/0x110 [ 22.871864][ T108] ? __list_add+0xc0/0xc0 [ 22.876364][ T108] ret_from_fork+0x1f/0x30 [ 22.881037][ T108] ================================================================================ [ 22.890647][ T108] ================================================================================ [ 22.900321][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 22.908482][ T108] member access within address ffffc90000b071c0 with insufficient space [ 22.917146][ T108] for an object of type 'struct sk_buff' [ 22.923251][ T108] CPU: 1 PID: 108 Comm: kworker/1:2 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 22.933311][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.943834][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.949896][ T108] Call Trace: [ 22.953199][ T108] dump_stack_lvl+0x1e2/0x24b [ 22.957994][ T108] ? show_regs_print_info+0x18/0x18 [ 22.963374][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 22.969417][ T108] dump_stack+0x15/0x1d [ 22.973940][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.979642][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.985599][ T108] wg_xmit+0x513/0xae0 [ 22.989859][ T108] ? worker_thread+0x709/0xa20 [ 22.994948][ T108] ? wg_stop+0x140/0x140 [ 22.999386][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 23.005609][ T108] netdev_start_xmit+0x8a/0x160 [ 23.010919][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 23.016011][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 23.021018][ T108] ? dev_queue_xmit+0x20/0x20 [ 23.025694][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 23.030983][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 23.036012][ T108] ? _local_bh_enable+0x30/0x30 [ 23.040889][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.047124][ T108] ? ndisc_constructor+0x690/0x8a0 [ 23.052397][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 23.057583][ T108] ? dev_hard_header+0xdb/0xf0 [ 23.062707][ T108] dev_queue_xmit+0x17/0x20 [ 23.067363][ T108] neigh_connected_output+0x288/0x2b0 [ 23.072801][ T108] ip6_finish_output2+0xde2/0x1440 [ 23.078225][ T108] ? __rcu_read_lock+0x50/0x50 [ 23.083155][ T108] ? __ip6_finish_output+0x520/0x520 [ 23.088506][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 23.094473][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.101299][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 23.106676][ T108] __ip6_finish_output+0x3e4/0x520 [ 23.112322][ T108] ip6_finish_output+0x3f/0x220 [ 23.117152][ T108] ? ip6_output+0x1d3/0x4b0 [ 23.121717][ T108] ip6_output+0x1f8/0x4b0 [ 23.126195][ T108] ? asan.module_dtor+0x20/0x20 [ 23.131475][ T108] ? skb_dst+0x40/0x40 [ 23.135522][ T108] ? __rcu_read_lock+0x50/0x50 [ 23.140281][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 23.145566][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.151277][ T108] ? nf_hook_slow+0x150/0x1b0 [ 23.156020][ T108] NF_HOOK+0xdd/0x280 [ 23.160011][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 23.165858][ T108] ? NF_HOOK+0x280/0x280 [ 23.170148][ T108] ? __rcu_read_lock+0x50/0x50 [ 23.174887][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.181292][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 23.186247][ T108] ? memcpy+0x56/0x70 [ 23.190291][ T108] ndisc_send_skb+0x646/0x9f0 [ 23.194943][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 23.200205][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 23.205726][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 23.210830][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 23.216801][ T108] ? skb_put+0x11d/0x200 [ 23.221080][ T108] ndisc_send_rs+0x26c/0x360 [ 23.225993][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 23.231706][ T108] ? addrconf_dad_stop+0x430/0x430 [ 23.236794][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.242658][ T108] addrconf_dad_work+0x9c1/0x1520 [ 23.247858][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.253733][ T108] ? __kasan_check_write+0x14/0x20 [ 23.258826][ T108] process_one_work+0x3ca/0x660 [ 23.263669][ T108] worker_thread+0x709/0xa20 [ 23.268496][ T108] ? __kthread_parkme+0x11b/0x150 2021/11/08 11:29:09 building call list... [ 23.273495][ T108] kthread+0x371/0x390 [ 23.277712][ T108] ? pr_cont_work+0x110/0x110 [ 23.282407][ T108] ? __list_add+0xc0/0xc0 [ 23.286809][ T108] ret_from_fork+0x1f/0x30 [ 23.291459][ T108] ================================================================================ [ 23.306344][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.888113][ T177] device bridge_slave_1 left promiscuous mode [ 23.894529][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.903296][ T177] device bridge_slave_0 left promiscuous mode [ 23.909756][ T177] bridge0: port 1(bridge_slave_0) entered disabled state