Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. 2021/11/29 14:32:54 fuzzer started 2021/11/29 14:32:54 connecting to host at 10.128.0.163:44913 2021/11/29 14:32:54 checking machine... 2021/11/29 14:32:54 checking revisions... 2021/11/29 14:32:54 testing simple program... [ 20.175840][ T23] audit: type=1400 audit(1638196374.399:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.193792][ T371] cgroup: Unknown subsys name 'net' [ 20.199362][ T23] audit: type=1400 audit(1638196374.399:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.225873][ T23] audit: type=1400 audit(1638196374.399:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.226063][ T371] cgroup: Unknown subsys name 'devices' [ 20.248919][ T23] audit: type=1400 audit(1638196374.399:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.277194][ T23] audit: type=1400 audit(1638196374.399:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.300309][ T23] audit: type=1400 audit(1638196374.399:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.322925][ T23] audit: type=1400 audit(1638196374.399:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.345014][ T23] audit: type=1400 audit(1638196374.429:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.445006][ T371] cgroup: Unknown subsys name 'hugetlb' [ 20.450823][ T371] cgroup: Unknown subsys name 'rlimit' [ 20.514366][ T23] audit: type=1400 audit(1638196374.739:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.543996][ T23] audit: type=1400 audit(1638196374.769:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.617678][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.624831][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.632274][ T373] device bridge_slave_0 entered promiscuous mode [ 20.639302][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.646414][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.654009][ T373] device bridge_slave_1 entered promiscuous mode [ 20.683619][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.690659][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.697971][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.705003][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.724108][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.731332][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.738865][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.746611][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.755518][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.763896][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.770991][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.794004][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.802309][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.810505][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.818557][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.826849][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.833905][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.841373][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.849436][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.864402][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.872725][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.882722][ T24] ================================================================================ [ 20.892133][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 20.900059][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 20.908382][ T24] for an object of type 'struct sk_buff' [ 20.914046][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.81-syzkaller-00001-g4b644356291a #0 [ 20.923743][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.933883][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.939838][ T24] Call Trace: [ 20.943119][ T24] dump_stack_lvl+0x1e2/0x24b [ 20.947769][ T24] ? show_regs_print_info+0x18/0x18 [ 20.952944][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.958639][ T24] dump_stack+0x15/0x1d [ 20.962772][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.968464][ T24] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 20.974367][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.980345][ T24] wg_xmit+0x4a2/0xae0 [ 20.984464][ T24] ? wg_stop+0x140/0x140 [ 20.988704][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.994943][ T24] netdev_start_xmit+0x8a/0x160 [ 20.999872][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 21.004966][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.009973][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 21.015242][ T24] ? ndisc_mc_map+0x329/0x9e0 [ 21.019909][ T24] ? dev_queue_xmit+0x20/0x20 [ 21.024575][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.030801][ T24] ? ndisc_constructor+0x690/0x8a0 [ 21.035953][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 21.041139][ T24] ? ___neigh_create+0x162d/0x1ab0 [ 21.046388][ T24] ? dev_hard_header+0xdb/0xf0 [ 21.051153][ T24] dev_queue_xmit+0x17/0x20 [ 21.055646][ T24] neigh_connected_output+0x288/0x2b0 [ 21.061019][ T24] ip6_finish_output2+0xde2/0x1440 [ 21.066314][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.071072][ T24] ? __ip6_finish_output+0x520/0x520 [ 21.076359][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.081913][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.088229][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.093073][ T24] __ip6_finish_output+0x3e4/0x520 [ 21.098172][ T24] ip6_finish_output+0x3f/0x220 [ 21.103013][ T24] ? ip6_output+0x1d3/0x4b0 [ 21.107528][ T24] ip6_output+0x1f8/0x4b0 [ 21.111934][ T24] ? asan.module_dtor+0x20/0x20 [ 21.116776][ T24] ? skb_dst+0x40/0x40 [ 21.120856][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.125605][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 21.130844][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.136561][ T24] ? nf_hook_slow+0x150/0x1b0 [ 21.141234][ T24] NF_HOOK+0xdd/0x280 [ 21.145213][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.150896][ T24] ? NF_HOOK+0x280/0x280 [ 21.155255][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.160003][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.166227][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 21.171176][ T24] ? memcpy+0x56/0x70 [ 21.175151][ T24] ndisc_send_skb+0x646/0x9f0 [ 21.181931][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 21.187116][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.192653][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 21.197588][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.203304][ T24] ? skb_put+0x11d/0x200 [ 21.207533][ T24] ndisc_send_rs+0x26c/0x360 [ 21.212099][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 21.217462][ T24] ? addrconf_dad_stop+0x430/0x430 [ 21.222566][ T24] ? switch_mm_irqs_off+0x6ba/0x720 [ 21.227746][ T24] addrconf_dad_work+0x9c1/0x1520 [ 21.232978][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.238783][ T24] ? __kasan_check_write+0x14/0x20 [ 21.243886][ T24] process_one_work+0x3ca/0x660 [ 21.248730][ T24] worker_thread+0x709/0xa20 [ 21.253302][ T24] ? __kthread_parkme+0x11b/0x150 [ 21.258405][ T24] kthread+0x371/0x390 [ 21.262459][ T24] ? pr_cont_work+0x110/0x110 [ 21.267123][ T24] ? __list_add+0xc0/0xc0 [ 21.271436][ T24] ret_from_fork+0x1f/0x30 [ 21.275882][ T24] ================================================================================ [ 21.285340][ T24] ================================================================================ [ 21.294642][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 21.302353][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 21.310695][ T24] for an object of type 'struct sk_buff' [ 21.316324][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.81-syzkaller-00001-g4b644356291a #0 [ 21.326033][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.336071][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.342021][ T24] Call Trace: [ 21.345284][ T24] dump_stack_lvl+0x1e2/0x24b [ 21.350201][ T24] ? show_regs_print_info+0x18/0x18 [ 21.355379][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.361068][ T24] dump_stack+0x15/0x1d [ 21.365200][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.370891][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.376931][ T24] wg_xmit+0x513/0xae0 [ 21.380970][ T24] ? wg_stop+0x140/0x140 [ 21.385196][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.391409][ T24] netdev_start_xmit+0x8a/0x160 [ 21.396230][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 21.401427][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.406348][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 21.411621][ T24] ? ndisc_mc_map+0x329/0x9e0 [ 21.416328][ T24] ? dev_queue_xmit+0x20/0x20 [ 21.421010][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.427263][ T24] ? ndisc_constructor+0x690/0x8a0 [ 21.432365][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 21.437591][ T24] ? ___neigh_create+0x162d/0x1ab0 [ 21.442708][ T24] ? dev_hard_header+0xdb/0xf0 [ 21.447550][ T24] dev_queue_xmit+0x17/0x20 [ 21.452032][ T24] neigh_connected_output+0x288/0x2b0 [ 21.457379][ T24] ip6_finish_output2+0xde2/0x1440 [ 21.463341][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.468073][ T24] ? __ip6_finish_output+0x520/0x520 [ 21.473332][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.478849][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.485062][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.489913][ T24] __ip6_finish_output+0x3e4/0x520 [ 21.494995][ T24] ip6_finish_output+0x3f/0x220 [ 21.499902][ T24] ? ip6_output+0x1d3/0x4b0 [ 21.504377][ T24] ip6_output+0x1f8/0x4b0 [ 21.508676][ T24] ? asan.module_dtor+0x20/0x20 [ 21.513496][ T24] ? skb_dst+0x40/0x40 [ 21.517537][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.522273][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 21.527543][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.533239][ T24] ? nf_hook_slow+0x150/0x1b0 [ 21.537896][ T24] NF_HOOK+0xdd/0x280 [ 21.541861][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.547465][ T24] ? NF_HOOK+0x280/0x280 [ 21.551687][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.556441][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.563173][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 21.567993][ T24] ? memcpy+0x56/0x70 [ 21.571947][ T24] ndisc_send_skb+0x646/0x9f0 [ 21.576604][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 21.581784][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.587302][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 21.592924][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.598710][ T24] ? skb_put+0x11d/0x200 [ 21.603038][ T24] ndisc_send_rs+0x26c/0x360 [ 21.607774][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 21.613387][ T24] ? addrconf_dad_stop+0x430/0x430 [ 21.618833][ T24] ? switch_mm_irqs_off+0x6ba/0x720 [ 21.624031][ T24] addrconf_dad_work+0x9c1/0x1520 [ 21.629028][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.634737][ T24] ? __kasan_check_write+0x14/0x20 [ 21.639819][ T24] process_one_work+0x3ca/0x660 2021/11/29 14:32:55 building call list... [ 21.644752][ T24] worker_thread+0x709/0xa20 [ 21.649313][ T24] ? __kthread_parkme+0x11b/0x150 [ 21.654307][ T24] kthread+0x371/0x390 [ 21.658345][ T24] ? pr_cont_work+0x110/0x110 [ 21.662994][ T24] ? __list_add+0xc0/0xc0 [ 21.667381][ T24] ret_from_fork+0x1f/0x30 [ 21.671816][ T24] ================================================================================ [ 21.688056][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.333467][ T177] device bridge_slave_1 left promiscuous mode [ 22.339623][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.347894][ T177] device bridge_slave_0 left promiscuous mode [ 22.354180][ T177] bridge0: port 1(bridge_slave_0) entered disabled state