Warning: Permanently added '10.128.0.188' (ECDSA) to the list of known hosts. 2021/11/08 11:29:06 fuzzer started 2021/11/08 11:29:07 connecting to host at 10.128.0.163:44293 2021/11/08 11:29:07 checking machine... 2021/11/08 11:29:07 checking revisions... 2021/11/08 11:29:07 testing simple program... [ 20.914300][ T23] audit: type=1400 audit(1636370947.129:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.938016][ T23] audit: type=1400 audit(1636370947.149:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.947533][ T370] cgroup: Unknown subsys name 'net' [ 20.959478][ T23] audit: type=1400 audit(1636370947.149:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.987559][ T23] audit: type=1400 audit(1636370947.149:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.987753][ T370] cgroup: Unknown subsys name 'devices' [ 21.010389][ T23] audit: type=1400 audit(1636370947.149:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.039171][ T23] audit: type=1400 audit(1636370947.149:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.061896][ T23] audit: type=1400 audit(1636370947.149:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.084109][ T23] audit: type=1400 audit(1636370947.179:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.171692][ T370] cgroup: Unknown subsys name 'hugetlb' [ 21.177545][ T370] cgroup: Unknown subsys name 'rlimit' [ 21.301013][ T23] audit: type=1400 audit(1636370947.519:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.324226][ T23] audit: type=1400 audit(1636370947.539:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.392663][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.399729][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.407239][ T373] device bridge_slave_0 entered promiscuous mode [ 21.414108][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.421230][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.428522][ T373] device bridge_slave_1 entered promiscuous mode [ 21.458225][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.465389][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.472673][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.479675][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.497828][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.505416][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.512920][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.521034][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.540660][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.548911][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.556877][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.565340][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.572365][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.579752][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.587921][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.594934][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.602243][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.610140][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.626545][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.635715][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.644275][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.657179][ T378] ================================================================================ [ 21.666488][ T378] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 21.674300][ T378] member access within address ffffc90000bf71c0 with insufficient space [ 21.682737][ T378] for an object of type 'struct sk_buff' [ 21.688486][ T378] CPU: 1 PID: 378 Comm: kworker/1:3 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 21.698260][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.708323][ T378] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.714282][ T378] Call Trace: [ 21.717555][ T378] dump_stack_lvl+0x1e2/0x24b [ 21.722213][ T378] ? show_regs_print_info+0x18/0x18 [ 21.727391][ T378] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.733090][ T378] dump_stack+0x15/0x1d [ 21.737225][ T378] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.742923][ T378] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 21.748798][ T378] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.754758][ T378] wg_xmit+0x4a2/0xae0 [ 21.758805][ T378] ? wg_stop+0x140/0x140 [ 21.763042][ T378] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.769274][ T378] netdev_start_xmit+0x8a/0x160 [ 21.774103][ T378] dev_hard_start_xmit+0x18d/0x2f0 [ 21.779196][ T378] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.784126][ T378] ? dev_queue_xmit+0x20/0x20 [ 21.788871][ T378] ? __local_bh_enable_ip+0xa8/0x170 [ 21.794137][ T378] ? do_raw_spin_unlock+0x50/0x50 [ 21.799139][ T378] ? _local_bh_enable+0x30/0x30 [ 21.803970][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.810192][ T378] ? ndisc_constructor+0x690/0x8a0 [ 21.815284][ T378] ? _raw_write_unlock_bh+0x31/0x47 [ 21.820487][ T378] ? dev_hard_header+0xdb/0xf0 [ 21.825233][ T378] dev_queue_xmit+0x17/0x20 [ 21.829715][ T378] neigh_connected_output+0x288/0x2b0 [ 21.835065][ T378] ip6_finish_output2+0xde2/0x1440 [ 21.840152][ T378] ? __rcu_read_lock+0x50/0x50 [ 21.844894][ T378] ? __ip6_finish_output+0x520/0x520 [ 21.850158][ T378] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.855948][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.862165][ T378] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.866995][ T378] __ip6_finish_output+0x3e4/0x520 [ 21.872090][ T378] ip6_finish_output+0x3f/0x220 [ 21.876938][ T378] ? ip6_output+0x1d3/0x4b0 [ 21.881417][ T378] ip6_output+0x1f8/0x4b0 [ 21.885727][ T378] ? asan.module_dtor+0x20/0x20 [ 21.890571][ T378] ? skb_dst+0x40/0x40 [ 21.894651][ T378] ? __rcu_read_lock+0x50/0x50 [ 21.899398][ T378] ? selinux_ipv6_forward+0x50/0x50 [ 21.904573][ T378] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.910268][ T378] ? nf_hook_slow+0x150/0x1b0 [ 21.915276][ T378] NF_HOOK+0xdd/0x280 [ 21.919241][ T378] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.924854][ T378] ? NF_HOOK+0x280/0x280 [ 21.929091][ T378] ? __rcu_read_lock+0x50/0x50 [ 21.933847][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.940063][ T378] ? ndisc_send_skb+0x547/0x9f0 [ 21.944897][ T378] ? memcpy+0x56/0x70 [ 21.948857][ T378] ndisc_send_skb+0x646/0x9f0 [ 21.953513][ T378] ? slab_post_alloc_hook+0x90/0xa0 [ 21.958705][ T378] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.964230][ T378] ? skb_set_owner_w+0x1a8/0x310 [ 21.969148][ T378] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.974845][ T378] ? skb_put+0x11d/0x200 [ 21.979086][ T378] ndisc_send_rs+0x26c/0x360 [ 21.983684][ T378] addrconf_dad_completed+0x4f3/0x9f0 [ 21.989044][ T378] ? addrconf_dad_stop+0x430/0x430 [ 21.994139][ T378] addrconf_dad_work+0x9c1/0x1520 [ 21.999153][ T378] ? move_linked_works+0x118/0x130 [ 22.004247][ T378] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.009949][ T378] ? __kasan_check_write+0x14/0x20 [ 22.015039][ T378] process_one_work+0x3ca/0x660 [ 22.019869][ T378] worker_thread+0x709/0xa20 [ 22.024444][ T378] ? __kthread_parkme+0x11b/0x150 [ 22.029445][ T378] kthread+0x371/0x390 [ 22.033491][ T378] ? pr_cont_work+0x110/0x110 [ 22.038146][ T378] ? __list_add+0xc0/0xc0 [ 22.042451][ T378] ret_from_fork+0x1f/0x30 [ 22.046894][ T378] ================================================================================ [ 22.056166][ T378] ================================================================================ [ 22.065458][ T378] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 22.073191][ T378] member access within address ffffc90000bf71c0 with insufficient space [ 22.081512][ T378] for an object of type 'struct sk_buff' [ 22.087118][ T378] CPU: 1 PID: 378 Comm: kworker/1:3 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 22.097153][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.107192][ T378] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.113302][ T378] Call Trace: [ 22.116570][ T378] dump_stack_lvl+0x1e2/0x24b [ 22.121220][ T378] ? show_regs_print_info+0x18/0x18 [ 22.126502][ T378] ? wg_allowedips_lookup_dst+0x190/0x190 [ 22.132195][ T378] dump_stack+0x15/0x1d [ 22.136346][ T378] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.142036][ T378] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.147989][ T378] wg_xmit+0x513/0xae0 [ 22.152034][ T378] ? wg_stop+0x140/0x140 [ 22.156253][ T378] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 22.162481][ T378] netdev_start_xmit+0x8a/0x160 [ 22.167311][ T378] dev_hard_start_xmit+0x18d/0x2f0 [ 22.172413][ T378] __dev_queue_xmit+0xfbe/0x1bb0 [ 22.177349][ T378] ? dev_queue_xmit+0x20/0x20 [ 22.182095][ T378] ? __local_bh_enable_ip+0xa8/0x170 [ 22.187368][ T378] ? do_raw_spin_unlock+0x50/0x50 [ 22.192374][ T378] ? _local_bh_enable+0x30/0x30 [ 22.197209][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.203437][ T378] ? ndisc_constructor+0x690/0x8a0 [ 22.208527][ T378] ? _raw_write_unlock_bh+0x31/0x47 [ 22.213703][ T378] ? dev_hard_header+0xdb/0xf0 [ 22.218444][ T378] dev_queue_xmit+0x17/0x20 [ 22.223019][ T378] neigh_connected_output+0x288/0x2b0 [ 22.228488][ T378] ip6_finish_output2+0xde2/0x1440 [ 22.233673][ T378] ? __rcu_read_lock+0x50/0x50 [ 22.238431][ T378] ? __ip6_finish_output+0x520/0x520 [ 22.243692][ T378] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.249306][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.255521][ T378] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.260344][ T378] __ip6_finish_output+0x3e4/0x520 [ 22.265429][ T378] ip6_finish_output+0x3f/0x220 [ 22.270267][ T378] ? ip6_output+0x1d3/0x4b0 [ 22.274743][ T378] ip6_output+0x1f8/0x4b0 [ 22.279048][ T378] ? asan.module_dtor+0x20/0x20 [ 22.283890][ T378] ? skb_dst+0x40/0x40 [ 22.287934][ T378] ? __rcu_read_lock+0x50/0x50 [ 22.292682][ T378] ? selinux_ipv6_forward+0x50/0x50 [ 22.297890][ T378] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.303602][ T378] ? nf_hook_slow+0x150/0x1b0 [ 22.308327][ T378] NF_HOOK+0xdd/0x280 [ 22.312295][ T378] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.317917][ T378] ? NF_HOOK+0x280/0x280 [ 22.322141][ T378] ? __rcu_read_lock+0x50/0x50 [ 22.326971][ T378] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.333190][ T378] ? ndisc_send_skb+0x547/0x9f0 [ 22.338128][ T378] ? memcpy+0x56/0x70 [ 22.342102][ T378] ndisc_send_skb+0x646/0x9f0 [ 22.346765][ T378] ? slab_post_alloc_hook+0x90/0xa0 [ 22.351948][ T378] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.357484][ T378] ? skb_set_owner_w+0x1a8/0x310 [ 22.362470][ T378] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.368221][ T378] ? skb_put+0x11d/0x200 [ 22.372471][ T378] ndisc_send_rs+0x26c/0x360 [ 22.377058][ T378] addrconf_dad_completed+0x4f3/0x9f0 [ 22.382410][ T378] ? addrconf_dad_stop+0x430/0x430 [ 22.387499][ T378] addrconf_dad_work+0x9c1/0x1520 [ 22.392519][ T378] ? move_linked_works+0x118/0x130 [ 22.397611][ T378] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.403312][ T378] ? __kasan_check_write+0x14/0x20 2021/11/08 11:29:08 building call list... [ 22.408400][ T378] process_one_work+0x3ca/0x660 [ 22.413232][ T378] worker_thread+0x709/0xa20 [ 22.417812][ T378] ? __kthread_parkme+0x11b/0x150 [ 22.422821][ T378] kthread+0x371/0x390 [ 22.426924][ T378] ? pr_cont_work+0x110/0x110 [ 22.431580][ T378] ? __list_add+0xc0/0xc0 [ 22.435892][ T378] ret_from_fork+0x1f/0x30 [ 22.440327][ T378] ================================================================================ [ 22.452740][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.030200][ T177] device bridge_slave_1 left promiscuous mode [ 23.036364][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.044205][ T177] device bridge_slave_0 left promiscuous mode [ 23.050534][ T177] bridge0: port 1(bridge_slave_0) entered disabled state