Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. 2021/11/08 09:11:35 fuzzer started 2021/11/08 09:11:35 connecting to host at 10.128.0.163:39375 2021/11/08 09:11:35 checking machine... 2021/11/08 09:11:35 checking revisions... 2021/11/08 09:11:35 testing simple program... [ 21.889382][ T23] audit: type=1400 audit(1636362695.290:73): avc: denied { getattr } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.914259][ T371] cgroup: Unknown subsys name 'net' [ 21.916062][ T23] audit: type=1400 audit(1636362695.290:74): avc: denied { read } for pid=363 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.944021][ T23] audit: type=1400 audit(1636362695.290:75): avc: denied { open } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.944371][ T371] cgroup: Unknown subsys name 'devices' [ 21.968054][ T23] audit: type=1400 audit(1636362695.300:76): avc: denied { read } for pid=363 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.997765][ T23] audit: type=1400 audit(1636362695.300:77): avc: denied { open } for pid=363 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.022847][ T23] audit: type=1400 audit(1636362695.310:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.047459][ T23] audit: type=1400 audit(1636362695.310:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.070707][ T23] audit: type=1400 audit(1636362695.320:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.168458][ T371] cgroup: Unknown subsys name 'hugetlb' [ 22.175608][ T371] cgroup: Unknown subsys name 'rlimit' [ 22.268093][ T23] audit: type=1400 audit(1636362695.670:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.305226][ T23] audit: type=1400 audit(1636362695.700:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.391641][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.401905][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.410086][ T374] device bridge_slave_0 entered promiscuous mode [ 22.417699][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.425278][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.433431][ T374] device bridge_slave_1 entered promiscuous mode [ 22.468199][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.475899][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.483478][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.490533][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.510470][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.518170][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.525705][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.534272][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.559513][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.568613][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.577792][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.585115][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.593513][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.601761][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.609630][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.617368][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.626522][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.637073][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.652961][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.662638][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.672715][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.684429][ T378] ================================================================================ [ 22.694716][ T378] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 22.702980][ T378] member access within address ffffc90000c671c0 with insufficient space [ 22.712994][ T378] for an object of type 'struct sk_buff' [ 22.719206][ T378] CPU: 0 PID: 378 Comm: kworker/0:2 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 22.730080][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.740578][ T378] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.747854][ T378] Call Trace: [ 22.751876][ T378] dump_stack_lvl+0x1e2/0x24b [ 22.756893][ T378] ? show_regs_print_info+0x18/0x18 [ 22.762337][ T378] ? wg_allowedips_lookup_dst+0x190/0x190 [ 22.768935][ T378] dump_stack+0x15/0x1d [ 22.773279][ T378] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.779161][ T378] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 22.785319][ T378] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.791943][ T378] wg_xmit+0x4a2/0xae0 [ 22.796530][ T378] ? wg_stop+0x140/0x140 [ 22.801745][ T378] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 22.808913][ T378] netdev_start_xmit+0x8a/0x160 [ 22.813754][ T378] dev_hard_start_xmit+0x18d/0x2f0 [ 22.819100][ T378] __dev_queue_xmit+0xfbe/0x1bb0 [ 22.824171][ T378] ? dev_queue_xmit+0x20/0x20 [ 22.829449][ T378] ? __local_bh_enable_ip+0xa8/0x170 [ 22.835319][ T378] ? do_raw_spin_unlock+0x50/0x50 [ 22.841004][ T378] ? _local_bh_enable+0x30/0x30 [ 22.846354][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.853257][ T378] ? ndisc_constructor+0x690/0x8a0 [ 22.858573][ T378] ? _raw_write_unlock_bh+0x31/0x47 [ 22.864098][ T378] ? dev_hard_header+0xdb/0xf0 [ 22.869060][ T378] dev_queue_xmit+0x17/0x20 [ 22.873611][ T378] neigh_connected_output+0x288/0x2b0 [ 22.879118][ T378] ip6_finish_output2+0xde2/0x1440 [ 22.884437][ T378] ? __rcu_read_lock+0x50/0x50 [ 22.889210][ T378] ? __ip6_finish_output+0x520/0x520 [ 22.894991][ T378] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.901739][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.908296][ T378] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.913783][ T378] __ip6_finish_output+0x3e4/0x520 [ 22.919425][ T378] ip6_finish_output+0x3f/0x220 [ 22.924396][ T378] ? ip6_output+0x1d3/0x4b0 [ 22.929457][ T378] ip6_output+0x1f8/0x4b0 [ 22.934011][ T378] ? asan.module_dtor+0x20/0x20 [ 22.939433][ T378] ? skb_dst+0x40/0x40 [ 22.943837][ T378] ? __rcu_read_lock+0x50/0x50 [ 22.949006][ T378] ? selinux_ipv6_forward+0x50/0x50 [ 22.954229][ T378] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.960233][ T378] ? nf_hook_slow+0x150/0x1b0 [ 22.965108][ T378] NF_HOOK+0xdd/0x280 [ 22.969363][ T378] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.975433][ T378] ? NF_HOOK+0x280/0x280 [ 22.979681][ T378] ? __rcu_read_lock+0x50/0x50 [ 22.985003][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.992136][ T378] ? ndisc_send_skb+0x547/0x9f0 [ 22.997563][ T378] ? memcpy+0x56/0x70 [ 23.001546][ T378] ndisc_send_skb+0x646/0x9f0 [ 23.006335][ T378] ? slab_post_alloc_hook+0x90/0xa0 [ 23.012399][ T378] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 23.018387][ T378] ? skb_set_owner_w+0x1a8/0x310 [ 23.024229][ T378] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 23.030868][ T378] ? skb_put+0x11d/0x200 [ 23.035520][ T378] ndisc_send_rs+0x26c/0x360 [ 23.040574][ T378] addrconf_dad_completed+0x4f3/0x9f0 [ 23.046935][ T378] ? addrconf_dad_stop+0x430/0x430 [ 23.053473][ T378] ? __queue_delayed_work+0x16c/0x1f0 [ 23.059730][ T378] addrconf_dad_work+0x9c1/0x1520 [ 23.065758][ T378] ? __kasan_check_write+0x14/0x20 [ 23.071627][ T378] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.077619][ T378] ? __kasan_check_write+0x14/0x20 [ 23.083665][ T378] process_one_work+0x3ca/0x660 [ 23.089581][ T378] worker_thread+0x709/0xa20 [ 23.094870][ T378] ? __kthread_parkme+0x11b/0x150 [ 23.100521][ T378] kthread+0x371/0x390 [ 23.104821][ T378] ? pr_cont_work+0x110/0x110 [ 23.112895][ T378] ? __list_add+0xc0/0xc0 [ 23.118536][ T378] ret_from_fork+0x1f/0x30 [ 23.123729][ T378] ================================================================================ [ 23.134487][ T378] ================================================================================ [ 23.144806][ T378] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 23.153209][ T378] member access within address ffffc90000c671c0 with insufficient space [ 23.162340][ T378] for an object of type 'struct sk_buff' [ 23.168977][ T378] CPU: 0 PID: 378 Comm: kworker/0:2 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 23.178844][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.189361][ T378] Workqueue: ipv6_addrconf addrconf_dad_work [ 23.195463][ T378] Call Trace: [ 23.199188][ T378] dump_stack_lvl+0x1e2/0x24b [ 23.204432][ T378] ? show_regs_print_info+0x18/0x18 [ 23.210003][ T378] ? wg_allowedips_lookup_dst+0x190/0x190 [ 23.216249][ T378] dump_stack+0x15/0x1d [ 23.220465][ T378] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 23.226452][ T378] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 23.232861][ T378] wg_xmit+0x513/0xae0 [ 23.237126][ T378] ? wg_stop+0x140/0x140 [ 23.241877][ T378] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 23.248347][ T378] netdev_start_xmit+0x8a/0x160 [ 23.254052][ T378] dev_hard_start_xmit+0x18d/0x2f0 [ 23.259558][ T378] __dev_queue_xmit+0xfbe/0x1bb0 [ 23.265729][ T378] ? dev_queue_xmit+0x20/0x20 [ 23.271160][ T378] ? __local_bh_enable_ip+0xa8/0x170 [ 23.276831][ T378] ? do_raw_spin_unlock+0x50/0x50 [ 23.282639][ T378] ? _local_bh_enable+0x30/0x30 [ 23.287920][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.294676][ T378] ? ndisc_constructor+0x690/0x8a0 [ 23.300088][ T378] ? _raw_write_unlock_bh+0x31/0x47 [ 23.305467][ T378] ? dev_hard_header+0xdb/0xf0 [ 23.310223][ T378] dev_queue_xmit+0x17/0x20 [ 23.314744][ T378] neigh_connected_output+0x288/0x2b0 [ 23.320410][ T378] ip6_finish_output2+0xde2/0x1440 [ 23.326059][ T378] ? __rcu_read_lock+0x50/0x50 [ 23.330958][ T378] ? __ip6_finish_output+0x520/0x520 [ 23.336393][ T378] ? dst_cow_metrics_generic+0x55/0x1d0 [ 23.342262][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.348642][ T378] ? ip6_skb_dst_mtu+0xaf/0x260 [ 23.353835][ T378] __ip6_finish_output+0x3e4/0x520 [ 23.359370][ T378] ip6_finish_output+0x3f/0x220 [ 23.364330][ T378] ? ip6_output+0x1d3/0x4b0 [ 23.368845][ T378] ip6_output+0x1f8/0x4b0 [ 23.373181][ T378] ? asan.module_dtor+0x20/0x20 [ 23.378366][ T378] ? skb_dst+0x40/0x40 [ 23.382428][ T378] ? __rcu_read_lock+0x50/0x50 [ 23.387557][ T378] ? selinux_ipv6_forward+0x50/0x50 [ 23.393074][ T378] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.398795][ T378] ? nf_hook_slow+0x150/0x1b0 [ 23.403519][ T378] NF_HOOK+0xdd/0x280 [ 23.407819][ T378] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 23.413776][ T378] ? NF_HOOK+0x280/0x280 [ 23.418584][ T378] ? __rcu_read_lock+0x50/0x50 [ 23.424155][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.430961][ T378] ? ndisc_send_skb+0x547/0x9f0 [ 23.436072][ T378] ? memcpy+0x56/0x70 [ 23.440175][ T378] ndisc_send_skb+0x646/0x9f0 [ 23.445160][ T378] ? slab_post_alloc_hook+0x90/0xa0 [ 23.450637][ T378] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 23.456595][ T378] ? skb_set_owner_w+0x1a8/0x310 [ 23.461671][ T378] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 23.467847][ T378] ? skb_put+0x11d/0x200 [ 23.472944][ T378] ndisc_send_rs+0x26c/0x360 [ 23.477523][ T378] addrconf_dad_completed+0x4f3/0x9f0 [ 23.482971][ T378] ? addrconf_dad_stop+0x430/0x430 [ 23.488177][ T378] ? __queue_delayed_work+0x16c/0x1f0 [ 23.493810][ T378] addrconf_dad_work+0x9c1/0x1520 [ 23.499156][ T378] ? __kasan_check_write+0x14/0x20 [ 23.504682][ T378] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.510725][ T378] ? __kasan_check_write+0x14/0x20 [ 23.516130][ T378] process_one_work+0x3ca/0x660 [ 23.521301][ T378] worker_thread+0x709/0xa20 [ 23.526330][ T378] ? __kthread_parkme+0x11b/0x150 [ 23.531727][ T378] kthread+0x371/0x390 [ 23.535973][ T378] ? pr_cont_work+0x110/0x110 [ 23.540825][ T378] ? __list_add+0xc0/0xc0 [ 23.545263][ T378] ret_from_fork+0x1f/0x30 [ 23.549727][ T378] ================================================================================ 2021/11/08 09:11:37 building call list... [ 23.570001][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.116919][ T381] device bridge_slave_1 left promiscuous mode [ 24.123445][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.131585][ T381] device bridge_slave_0 left promiscuous mode [ 24.138241][ T381] bridge0: port 1(bridge_slave_0) entered disabled state