Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. 2021/12/01 07:32:11 fuzzer started 2021/12/01 07:32:11 connecting to host at 10.128.0.163:43967 2021/12/01 07:32:11 checking machine... 2021/12/01 07:32:11 checking revisions... 2021/12/01 07:32:12 testing simple program... [ 18.857382][ T23] audit: type=1400 audit(1638343932.029:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 18.874519][ T370] cgroup: Unknown subsys name 'net' [ 18.880863][ T23] audit: type=1400 audit(1638343932.029:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 18.907065][ T23] audit: type=1400 audit(1638343932.029:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 18.907254][ T370] cgroup: Unknown subsys name 'devices' [ 18.930119][ T23] audit: type=1400 audit(1638343932.039:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.958711][ T23] audit: type=1400 audit(1638343932.039:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.982018][ T23] audit: type=1400 audit(1638343932.049:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.004834][ T23] audit: type=1400 audit(1638343932.049:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.027238][ T23] audit: type=1400 audit(1638343932.059:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.141514][ T370] cgroup: Unknown subsys name 'hugetlb' [ 19.147140][ T370] cgroup: Unknown subsys name 'rlimit' [ 19.211200][ T23] audit: type=1400 audit(1638343932.389:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.246091][ T23] audit: type=1400 audit(1638343932.419:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.317779][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.324874][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.332251][ T374] device bridge_slave_0 entered promiscuous mode [ 19.339005][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.346034][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.353343][ T374] device bridge_slave_1 entered promiscuous mode [ 19.382093][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.389139][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.396563][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.403601][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.420428][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.427944][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.435932][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.443810][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.461364][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.469434][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.476478][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.483954][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.492612][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.499616][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.506994][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.514854][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.525700][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.535937][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.550051][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.558423][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.567791][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.580511][ T5] ================================================================================ [ 19.589811][ T5] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 19.598259][ T5] member access within address ffffc900000571c0 with insufficient space [ 19.606631][ T5] for an object of type 'struct sk_buff' [ 19.612275][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.82-syzkaller-00155-g8d21bcc704ea #0 [ 19.621890][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.631950][ T5] Workqueue: ipv6_addrconf addrconf_dad_work [ 19.637911][ T5] Call Trace: [ 19.641184][ T5] dump_stack_lvl+0x1e2/0x24b [ 19.645981][ T5] ? show_regs_print_info+0x18/0x18 [ 19.651186][ T5] ? wg_allowedips_lookup_dst+0x190/0x190 [ 19.656903][ T5] dump_stack+0x15/0x1d [ 19.661048][ T5] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 19.666754][ T5] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 19.672672][ T5] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 19.678653][ T5] wg_xmit+0x4a2/0xae0 [ 19.682708][ T5] ? wg_stop+0x140/0x140 [ 19.686939][ T5] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 19.693161][ T5] netdev_start_xmit+0x8a/0x160 [ 19.698005][ T5] dev_hard_start_xmit+0x18d/0x2f0 [ 19.703098][ T5] __dev_queue_xmit+0xfbe/0x1bb0 [ 19.708102][ T5] ? __local_bh_enable_ip+0xa8/0x170 [ 19.713368][ T5] ? ndisc_mc_map+0x329/0x9e0 [ 19.718032][ T5] ? dev_queue_xmit+0x20/0x20 [ 19.722690][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.728907][ T5] ? ndisc_constructor+0x690/0x8a0 [ 19.734002][ T5] ? _raw_write_unlock_bh+0x31/0x47 [ 19.739180][ T5] ? ___neigh_create+0x162d/0x1ab0 [ 19.744269][ T5] ? dev_hard_header+0xdb/0xf0 [ 19.749013][ T5] dev_queue_xmit+0x17/0x20 [ 19.753583][ T5] neigh_connected_output+0x288/0x2b0 [ 19.758951][ T5] ip6_finish_output2+0xde2/0x1440 [ 19.764043][ T5] ? __rcu_read_lock+0x50/0x50 [ 19.768789][ T5] ? __ip6_finish_output+0x520/0x520 [ 19.774055][ T5] ? dst_cow_metrics_generic+0x55/0x1d0 [ 19.779580][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.785803][ T5] ? ip6_skb_dst_mtu+0xaf/0x260 [ 19.790640][ T5] __ip6_finish_output+0x3e4/0x520 [ 19.795741][ T5] ip6_finish_output+0x3f/0x220 [ 19.800568][ T5] ? ip6_output+0x1d3/0x4b0 [ 19.805048][ T5] ip6_output+0x1f8/0x4b0 [ 19.809358][ T5] ? asan.module_dtor+0x20/0x20 [ 19.814182][ T5] ? skb_dst+0x40/0x40 [ 19.818241][ T5] ? __rcu_read_lock+0x50/0x50 [ 19.822985][ T5] ? selinux_ipv6_forward+0x50/0x50 [ 19.828171][ T5] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 19.833864][ T5] ? nf_hook_slow+0x150/0x1b0 [ 19.838521][ T5] NF_HOOK+0xdd/0x280 [ 19.842485][ T5] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 19.848442][ T5] ? NF_HOOK+0x280/0x280 [ 19.852663][ T5] ? __rcu_read_lock+0x50/0x50 [ 19.857402][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.863620][ T5] ? ndisc_send_skb+0x547/0x9f0 [ 19.868460][ T5] ? memcpy+0x56/0x70 [ 19.872418][ T5] ndisc_send_skb+0x646/0x9f0 [ 19.877072][ T5] ? slab_post_alloc_hook+0x90/0xa0 [ 19.882249][ T5] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 19.887770][ T5] ? skb_set_owner_w+0x1a8/0x310 [ 19.892691][ T5] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 19.898396][ T5] ? skb_put+0x11d/0x200 [ 19.902616][ T5] ndisc_send_rs+0x26c/0x360 [ 19.907206][ T5] addrconf_dad_completed+0x4f3/0x9f0 [ 19.912556][ T5] ? addrconf_dad_stop+0x430/0x430 [ 19.917644][ T5] ? __queue_delayed_work+0x16c/0x1f0 [ 19.922992][ T5] addrconf_dad_work+0x9c1/0x1520 [ 19.927996][ T5] ? __kasan_check_write+0x14/0x20 [ 19.933085][ T5] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 19.938779][ T5] ? __kasan_check_write+0x14/0x20 [ 19.943875][ T5] process_one_work+0x3ca/0x660 [ 19.948712][ T5] worker_thread+0x709/0xa20 [ 19.953284][ T5] kthread+0x371/0x390 [ 19.957338][ T5] ? pr_cont_work+0x110/0x110 [ 19.962003][ T5] ? __list_add+0xc0/0xc0 [ 19.966594][ T5] ret_from_fork+0x1f/0x30 [ 19.971032][ T5] ================================================================================ [ 19.980311][ T5] ================================================================================ [ 19.989705][ T5] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 19.997442][ T5] member access within address ffffc900000571c0 with insufficient space [ 20.005781][ T5] for an object of type 'struct sk_buff' [ 20.011424][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.82-syzkaller-00155-g8d21bcc704ea #0 [ 20.021035][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.031664][ T5] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.037737][ T5] Call Trace: [ 20.041016][ T5] dump_stack_lvl+0x1e2/0x24b [ 20.045687][ T5] ? show_regs_print_info+0x18/0x18 [ 20.050868][ T5] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.056564][ T5] dump_stack+0x15/0x1d [ 20.060722][ T5] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.066418][ T5] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.072393][ T5] wg_xmit+0x513/0xae0 [ 20.076447][ T5] ? wg_stop+0x140/0x140 [ 20.080762][ T5] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.086981][ T5] netdev_start_xmit+0x8a/0x160 [ 20.091810][ T5] dev_hard_start_xmit+0x18d/0x2f0 [ 20.096903][ T5] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.101821][ T5] ? __local_bh_enable_ip+0xa8/0x170 [ 20.107084][ T5] ? ndisc_mc_map+0x329/0x9e0 [ 20.111741][ T5] ? dev_queue_xmit+0x20/0x20 [ 20.116398][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.122613][ T5] ? ndisc_constructor+0x690/0x8a0 [ 20.127702][ T5] ? _raw_write_unlock_bh+0x31/0x47 [ 20.132877][ T5] ? ___neigh_create+0x162d/0x1ab0 [ 20.137969][ T5] ? dev_hard_header+0xdb/0xf0 [ 20.142710][ T5] dev_queue_xmit+0x17/0x20 [ 20.147203][ T5] neigh_connected_output+0x288/0x2b0 [ 20.152556][ T5] ip6_finish_output2+0xde2/0x1440 [ 20.157647][ T5] ? __rcu_read_lock+0x50/0x50 [ 20.162388][ T5] ? __ip6_finish_output+0x520/0x520 [ 20.167651][ T5] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.173175][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.179390][ T5] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.184219][ T5] __ip6_finish_output+0x3e4/0x520 [ 20.189344][ T5] ip6_finish_output+0x3f/0x220 [ 20.194169][ T5] ? ip6_output+0x1d3/0x4b0 [ 20.198654][ T5] ip6_output+0x1f8/0x4b0 [ 20.202959][ T5] ? asan.module_dtor+0x20/0x20 [ 20.207786][ T5] ? skb_dst+0x40/0x40 [ 20.211833][ T5] ? __rcu_read_lock+0x50/0x50 [ 20.216573][ T5] ? selinux_ipv6_forward+0x50/0x50 [ 20.221747][ T5] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.227463][ T5] ? nf_hook_slow+0x150/0x1b0 [ 20.232135][ T5] NF_HOOK+0xdd/0x280 [ 20.236108][ T5] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.241727][ T5] ? NF_HOOK+0x280/0x280 [ 20.245965][ T5] ? __rcu_read_lock+0x50/0x50 [ 20.251155][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.257374][ T5] ? ndisc_send_skb+0x547/0x9f0 [ 20.262204][ T5] ? memcpy+0x56/0x70 [ 20.266163][ T5] ndisc_send_skb+0x646/0x9f0 [ 20.270819][ T5] ? slab_post_alloc_hook+0x90/0xa0 [ 20.275996][ T5] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.281528][ T5] ? skb_set_owner_w+0x1a8/0x310 [ 20.286449][ T5] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.292151][ T5] ? skb_put+0x11d/0x200 [ 20.296376][ T5] ndisc_send_rs+0x26c/0x360 [ 20.300954][ T5] addrconf_dad_completed+0x4f3/0x9f0 [ 20.306304][ T5] ? addrconf_dad_stop+0x430/0x430 [ 20.311417][ T5] ? __queue_delayed_work+0x16c/0x1f0 [ 20.316771][ T5] addrconf_dad_work+0x9c1/0x1520 [ 20.321789][ T5] ? __kasan_check_write+0x14/0x20 [ 20.326880][ T5] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 2021/12/01 07:32:13 building call list... [ 20.332584][ T5] ? __kasan_check_write+0x14/0x20 [ 20.337682][ T5] process_one_work+0x3ca/0x660 [ 20.342538][ T5] worker_thread+0x709/0xa20 [ 20.347119][ T5] kthread+0x371/0x390 [ 20.351167][ T5] ? pr_cont_work+0x110/0x110 [ 20.355823][ T5] ? __list_add+0xc0/0xc0 [ 20.360131][ T5] ret_from_fork+0x1f/0x30 [ 20.364573][ T5] ================================================================================ [ 20.376253][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.960499][ T177] device bridge_slave_1 left promiscuous mode [ 20.966654][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.975136][ T177] device bridge_slave_0 left promiscuous mode [ 20.981520][ T177] bridge0: port 1(bridge_slave_0) entered disabled state