Warning: Permanently added '10.128.1.13' (ECDSA) to the list of known hosts. 2021/11/20 02:17:16 fuzzer started 2021/11/20 02:17:16 connecting to host at 10.128.0.163:37935 2021/11/20 02:17:16 checking machine... 2021/11/20 02:17:16 checking revisions... 2021/11/20 02:17:16 testing simple program... [ 19.551531][ T23] audit: type=1400 audit(1637374636.710:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.575198][ T23] audit: type=1400 audit(1637374636.720:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.586817][ T370] cgroup: Unknown subsys name 'net' [ 19.596517][ T23] audit: type=1400 audit(1637374636.720:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.624883][ T23] audit: type=1400 audit(1637374636.730:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.625293][ T370] cgroup: Unknown subsys name 'devices' [ 19.647655][ T23] audit: type=1400 audit(1637374636.730:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.647673][ T23] audit: type=1400 audit(1637374636.740:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.647689][ T23] audit: type=1400 audit(1637374636.740:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.647703][ T23] audit: type=1400 audit(1637374636.760:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.831432][ T370] cgroup: Unknown subsys name 'hugetlb' [ 19.837187][ T370] cgroup: Unknown subsys name 'rlimit' [ 19.931206][ T23] audit: type=1400 audit(1637374637.090:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.954524][ T23] audit: type=1400 audit(1637374637.090:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.026127][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.033289][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.040850][ T373] device bridge_slave_0 entered promiscuous mode [ 20.047738][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.054838][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.062667][ T373] device bridge_slave_1 entered promiscuous mode [ 20.092018][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.099157][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.106515][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.113557][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.131368][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.138760][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.146669][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.154567][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.170584][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.178704][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.185864][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.193189][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.202732][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.209884][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.217183][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.225661][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.238027][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.248213][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.260173][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.274256][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.282655][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.291285][ T24] ================================================================================ [ 20.300669][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 20.308450][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 20.316793][ T24] for an object of type 'struct sk_buff' [ 20.322443][ T24] CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 5.10.80-syzkaller-01801-g971945b72224 #0 [ 20.332131][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.342186][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.348149][ T24] Call Trace: [ 20.351424][ T24] dump_stack_lvl+0x1e2/0x24b [ 20.356082][ T24] ? show_regs_print_info+0x18/0x18 [ 20.361261][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.366973][ T24] dump_stack+0x15/0x1d [ 20.371118][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.376876][ T24] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 20.382854][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.388920][ T24] wg_xmit+0x4a2/0xae0 [ 20.392975][ T24] ? wg_stop+0x140/0x140 [ 20.397198][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.403412][ T24] netdev_start_xmit+0x8a/0x160 [ 20.408334][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 20.413418][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.418507][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 20.424112][ T24] ? ndisc_mc_map+0x33d/0xa70 [ 20.428762][ T24] ? dev_queue_xmit+0x20/0x20 [ 20.433499][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.439809][ T24] ? ndisc_constructor+0x690/0x8a0 [ 20.444901][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 20.450160][ T24] ? ___neigh_create+0x162d/0x1ab0 [ 20.455243][ T24] ? dev_hard_header+0xdb/0xf0 [ 20.459978][ T24] dev_queue_xmit+0x17/0x20 [ 20.464541][ T24] neigh_connected_output+0x288/0x2b0 [ 20.469898][ T24] ip6_finish_output2+0xde2/0x1440 [ 20.475007][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.479833][ T24] ? __ip6_finish_output+0x520/0x520 [ 20.485101][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.490620][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.496834][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.501664][ T24] __ip6_finish_output+0x3e4/0x520 [ 20.506750][ T24] ip6_finish_output+0x3f/0x220 [ 20.511748][ T24] ? ip6_output+0x1d3/0x4b0 [ 20.516225][ T24] ip6_output+0x1f8/0x4b0 [ 20.520542][ T24] ? asan.module_dtor+0x20/0x20 [ 20.525365][ T24] ? skb_dst+0x40/0x40 [ 20.529412][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.534155][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 20.539352][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.545145][ T24] ? nf_hook_slow+0x150/0x1b0 [ 20.549832][ T24] NF_HOOK+0xdd/0x280 [ 20.553806][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.559432][ T24] ? NF_HOOK+0x280/0x280 [ 20.563924][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.568756][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.575058][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 20.579989][ T24] ? memcpy+0x56/0x70 [ 20.583997][ T24] ndisc_send_skb+0x646/0x9f0 [ 20.588894][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 20.594189][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.599994][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 20.604909][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.610618][ T24] ? skb_put+0x11d/0x200 [ 20.614855][ T24] ndisc_send_rs+0x26c/0x360 [ 20.619437][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 20.624875][ T24] ? addrconf_dad_stop+0x430/0x430 [ 20.629980][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.635708][ T24] addrconf_dad_work+0x9c1/0x1520 [ 20.640718][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.646678][ T24] ? __kasan_check_write+0x14/0x20 [ 20.651768][ T24] process_one_work+0x3ca/0x660 [ 20.656593][ T24] worker_thread+0x709/0xa20 [ 20.661162][ T24] ? __kthread_parkme+0x11b/0x150 [ 20.666294][ T24] kthread+0x371/0x390 [ 20.670384][ T24] ? pr_cont_work+0x110/0x110 [ 20.675048][ T24] ? __list_add+0xc0/0xc0 [ 20.679447][ T24] ret_from_fork+0x1f/0x30 [ 20.683982][ T24] ================================================================================ [ 20.693278][ T24] ================================================================================ [ 20.702594][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 20.710341][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 20.718746][ T24] for an object of type 'struct sk_buff' [ 20.724392][ T24] CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 5.10.80-syzkaller-01801-g971945b72224 #0 [ 20.734104][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.744274][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.750289][ T24] Call Trace: [ 20.753566][ T24] dump_stack_lvl+0x1e2/0x24b [ 20.758238][ T24] ? show_regs_print_info+0x18/0x18 [ 20.763540][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.769244][ T24] dump_stack+0x15/0x1d [ 20.773378][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.779075][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.785052][ T24] wg_xmit+0x513/0xae0 [ 20.789114][ T24] ? wg_stop+0x140/0x140 [ 20.793685][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.799907][ T24] netdev_start_xmit+0x8a/0x160 [ 20.804768][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 20.809881][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.814817][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 20.820360][ T24] ? ndisc_mc_map+0x33d/0xa70 [ 20.825032][ T24] ? dev_queue_xmit+0x20/0x20 [ 20.829706][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.835950][ T24] ? ndisc_constructor+0x690/0x8a0 [ 20.841152][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 20.846352][ T24] ? ___neigh_create+0x162d/0x1ab0 [ 20.851442][ T24] ? dev_hard_header+0xdb/0xf0 [ 20.856199][ T24] dev_queue_xmit+0x17/0x20 [ 20.860693][ T24] neigh_connected_output+0x288/0x2b0 [ 20.866061][ T24] ip6_finish_output2+0xde2/0x1440 [ 20.871155][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.875893][ T24] ? __ip6_finish_output+0x520/0x520 [ 20.881155][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.886677][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.892891][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.897737][ T24] __ip6_finish_output+0x3e4/0x520 [ 20.902837][ T24] ip6_finish_output+0x3f/0x220 [ 20.907671][ T24] ? ip6_output+0x1d3/0x4b0 [ 20.912173][ T24] ip6_output+0x1f8/0x4b0 [ 20.916485][ T24] ? asan.module_dtor+0x20/0x20 [ 20.921325][ T24] ? skb_dst+0x40/0x40 [ 20.925399][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.930151][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 20.935345][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.941136][ T24] ? nf_hook_slow+0x150/0x1b0 [ 20.945792][ T24] NF_HOOK+0xdd/0x280 [ 20.949754][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.955369][ T24] ? NF_HOOK+0x280/0x280 [ 20.959590][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.964348][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.970566][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 20.975582][ T24] ? memcpy+0x56/0x70 [ 20.979538][ T24] ndisc_send_skb+0x646/0x9f0 [ 20.984192][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 20.989367][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.994887][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 20.999801][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.005496][ T24] ? skb_put+0x11d/0x200 [ 21.009713][ T24] ndisc_send_rs+0x26c/0x360 [ 21.014286][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 21.019636][ T24] ? addrconf_dad_stop+0x430/0x430 [ 21.024734][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.030431][ T24] addrconf_dad_work+0x9c1/0x1520 [ 21.035435][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.041143][ T24] ? __kasan_check_write+0x14/0x20 [ 21.046233][ T24] process_one_work+0x3ca/0x660 [ 21.051058][ T24] worker_thread+0x709/0xa20 [ 21.055642][ T24] ? __kthread_parkme+0x11b/0x150 [ 21.060640][ T24] kthread+0x371/0x390 [ 21.064684][ T24] ? pr_cont_work+0x110/0x110 [ 21.069334][ T24] ? __list_add+0xc0/0xc0 [ 21.073638][ T24] ret_from_fork+0x1f/0x30 [ 21.078080][ T24] ================================================================================ 2021/11/20 02:17:18 building call list... [ 21.095686][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.710111][ T9] device bridge_slave_1 left promiscuous mode [ 21.716400][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.724109][ T9] device bridge_slave_0 left promiscuous mode [ 21.730495][ T9] bridge0: port 1(bridge_slave_0) entered disabled state