Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts. 2021/11/10 00:32:31 fuzzer started 2021/11/10 00:32:31 connecting to host at 10.128.0.163:35809 2021/11/10 00:32:31 checking machine... 2021/11/10 00:32:31 checking revisions... 2021/11/10 00:32:31 testing simple program... [ 20.490050][ T23] audit: type=1400 audit(1636504351.379:73): avc: denied { getattr } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.494893][ T23] audit: type=1400 audit(1636504351.379:74): avc: denied { read } for pid=363 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.500421][ T23] audit: type=1400 audit(1636504351.379:75): avc: denied { open } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.506534][ T23] audit: type=1400 audit(1636504351.389:76): avc: denied { read } for pid=363 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.511274][ T371] cgroup: Unknown subsys name 'net' [ 20.513982][ T23] audit: type=1400 audit(1636504351.389:77): avc: denied { open } for pid=363 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.543171][ T23] audit: type=1400 audit(1636504351.399:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.543532][ T371] cgroup: Unknown subsys name 'devices' [ 20.568048][ T23] audit: type=1400 audit(1636504351.399:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.597572][ T23] audit: type=1400 audit(1636504351.409:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.704010][ T371] cgroup: Unknown subsys name 'hugetlb' [ 20.710007][ T371] cgroup: Unknown subsys name 'rlimit' [ 20.803924][ T23] audit: type=1400 audit(1636504351.699:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.827572][ T23] audit: type=1400 audit(1636504351.699:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.903872][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.911320][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.919177][ T374] device bridge_slave_0 entered promiscuous mode [ 20.926912][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.934426][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.941976][ T374] device bridge_slave_1 entered promiscuous mode [ 20.972337][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.979455][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.986808][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.993887][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.012509][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.019875][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.028393][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.035985][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.053683][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.062398][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.069989][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.077890][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.086968][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.094683][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.102576][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.110941][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.124499][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.135094][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.147069][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.164012][ T68] ================================================================================ [ 21.173818][ T68] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 21.181699][ T68] member access within address ffffc9000022f1c0 with insufficient space [ 21.190482][ T68] for an object of type 'struct sk_buff' [ 21.196399][ T68] CPU: 0 PID: 68 Comm: kworker/0:1 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 21.206380][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.216538][ T68] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.222503][ T68] Call Trace: [ 21.225902][ T68] dump_stack_lvl+0x1e2/0x24b [ 21.230743][ T68] ? show_regs_print_info+0x18/0x18 [ 21.235934][ T68] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.241884][ T68] dump_stack+0x15/0x1d [ 21.246305][ T68] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.252136][ T68] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 21.258428][ T68] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.264658][ T68] wg_xmit+0x4a2/0xae0 [ 21.268903][ T68] ? wg_stop+0x140/0x140 [ 21.273245][ T68] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.280014][ T68] netdev_start_xmit+0x8a/0x160 [ 21.285047][ T68] dev_hard_start_xmit+0x18d/0x2f0 [ 21.290690][ T68] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.295748][ T68] ? dev_queue_xmit+0x20/0x20 [ 21.300883][ T68] ? __local_bh_enable_ip+0xa8/0x170 [ 21.306161][ T68] ? do_raw_spin_unlock+0x50/0x50 [ 21.311370][ T68] ? _local_bh_enable+0x30/0x30 [ 21.316324][ T68] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.323004][ T68] ? ndisc_constructor+0x690/0x8a0 [ 21.328359][ T68] ? _raw_write_unlock_bh+0x31/0x47 [ 21.333648][ T68] ? dev_hard_header+0xdb/0xf0 [ 21.338707][ T68] dev_queue_xmit+0x17/0x20 [ 21.343398][ T68] neigh_connected_output+0x288/0x2b0 [ 21.349639][ T68] ip6_finish_output2+0xde2/0x1440 [ 21.355011][ T68] ? __rcu_read_lock+0x50/0x50 [ 21.359937][ T68] ? __ip6_finish_output+0x520/0x520 [ 21.365216][ T68] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.371213][ T68] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.377890][ T68] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.383228][ T68] __ip6_finish_output+0x3e4/0x520 [ 21.388579][ T68] ip6_finish_output+0x3f/0x220 [ 21.393691][ T68] ? ip6_output+0x1d3/0x4b0 [ 21.398897][ T68] ip6_output+0x1f8/0x4b0 [ 21.403599][ T68] ? asan.module_dtor+0x20/0x20 [ 21.408546][ T68] ? skb_dst+0x40/0x40 [ 21.412604][ T68] ? __rcu_read_lock+0x50/0x50 [ 21.417351][ T68] ? selinux_ipv6_forward+0x50/0x50 [ 21.422528][ T68] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.428222][ T68] ? nf_hook_slow+0x150/0x1b0 [ 21.432874][ T68] NF_HOOK+0xdd/0x280 [ 21.436830][ T68] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.442437][ T68] ? NF_HOOK+0x280/0x280 [ 21.446654][ T68] ? __rcu_read_lock+0x50/0x50 [ 21.451393][ T68] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.457629][ T68] ? ndisc_send_skb+0x547/0x9f0 [ 21.462541][ T68] ? memcpy+0x56/0x70 [ 21.466582][ T68] ndisc_send_skb+0x646/0x9f0 [ 21.471630][ T68] ? slab_post_alloc_hook+0x90/0xa0 [ 21.477961][ T68] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.483586][ T68] ? skb_set_owner_w+0x1a8/0x310 [ 21.489760][ T68] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.496198][ T68] ? skb_put+0x11d/0x200 [ 21.500542][ T68] ndisc_send_rs+0x26c/0x360 [ 21.505406][ T68] addrconf_dad_completed+0x4f3/0x9f0 [ 21.511764][ T68] ? addrconf_dad_stop+0x430/0x430 [ 21.517128][ T68] addrconf_dad_work+0x9c1/0x1520 [ 21.522401][ T68] ? __kasan_check_write+0x14/0x20 [ 21.527575][ T68] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.533376][ T68] ? __kasan_check_write+0x14/0x20 [ 21.539304][ T68] process_one_work+0x3ca/0x660 [ 21.544799][ T68] worker_thread+0x709/0xa20 [ 21.550060][ T68] ? __kthread_parkme+0x11b/0x150 [ 21.555666][ T68] kthread+0x371/0x390 [ 21.559913][ T68] ? pr_cont_work+0x110/0x110 [ 21.564825][ T68] ? __list_add+0xc0/0xc0 [ 21.569272][ T68] ret_from_fork+0x1f/0x30 [ 21.574139][ T68] ================================================================================ [ 21.583648][ T68] ================================================================================ [ 21.593191][ T68] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 21.601083][ T68] member access within address ffffc9000022f1c0 with insufficient space [ 21.609522][ T68] for an object of type 'struct sk_buff' [ 21.615272][ T68] CPU: 0 PID: 68 Comm: kworker/0:1 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 21.625046][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.635181][ T68] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.641231][ T68] Call Trace: [ 21.644772][ T68] dump_stack_lvl+0x1e2/0x24b [ 21.649602][ T68] ? show_regs_print_info+0x18/0x18 [ 21.654898][ T68] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.660686][ T68] dump_stack+0x15/0x1d [ 21.664848][ T68] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.670643][ T68] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.676613][ T68] wg_xmit+0x513/0xae0 [ 21.680675][ T68] ? wg_stop+0x140/0x140 [ 21.685123][ T68] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.691371][ T68] netdev_start_xmit+0x8a/0x160 [ 21.696219][ T68] dev_hard_start_xmit+0x18d/0x2f0 [ 21.701407][ T68] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.706341][ T68] ? dev_queue_xmit+0x20/0x20 [ 21.711275][ T68] ? __local_bh_enable_ip+0xa8/0x170 [ 21.716626][ T68] ? do_raw_spin_unlock+0x50/0x50 [ 21.721715][ T68] ? _local_bh_enable+0x30/0x30 [ 21.726645][ T68] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.732947][ T68] ? ndisc_constructor+0x690/0x8a0 [ 21.738062][ T68] ? _raw_write_unlock_bh+0x31/0x47 [ 21.743645][ T68] ? dev_hard_header+0xdb/0xf0 [ 21.748764][ T68] dev_queue_xmit+0x17/0x20 [ 21.753366][ T68] neigh_connected_output+0x288/0x2b0 [ 21.758760][ T68] ip6_finish_output2+0xde2/0x1440 [ 21.764847][ T68] ? __rcu_read_lock+0x50/0x50 [ 21.770069][ T68] ? __ip6_finish_output+0x520/0x520 [ 21.775710][ T68] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.781880][ T68] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.788997][ T68] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.794299][ T68] __ip6_finish_output+0x3e4/0x520 [ 21.799403][ T68] ip6_finish_output+0x3f/0x220 [ 21.804350][ T68] ? ip6_output+0x1d3/0x4b0 [ 21.808933][ T68] ip6_output+0x1f8/0x4b0 [ 21.814216][ T68] ? asan.module_dtor+0x20/0x20 [ 21.819147][ T68] ? skb_dst+0x40/0x40 [ 21.823219][ T68] ? __rcu_read_lock+0x50/0x50 [ 21.828016][ T68] ? selinux_ipv6_forward+0x50/0x50 [ 21.833365][ T68] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.839410][ T68] ? nf_hook_slow+0x150/0x1b0 [ 21.844244][ T68] NF_HOOK+0xdd/0x280 [ 21.848506][ T68] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.854310][ T68] ? NF_HOOK+0x280/0x280 [ 21.859474][ T68] ? __rcu_read_lock+0x50/0x50 [ 21.864602][ T68] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.871030][ T68] ? ndisc_send_skb+0x547/0x9f0 [ 21.876143][ T68] ? memcpy+0x56/0x70 [ 21.880312][ T68] ndisc_send_skb+0x646/0x9f0 [ 21.885082][ T68] ? slab_post_alloc_hook+0x90/0xa0 [ 21.890527][ T68] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.896223][ T68] ? skb_set_owner_w+0x1a8/0x310 [ 21.901269][ T68] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.906986][ T68] ? skb_put+0x11d/0x200 [ 21.911222][ T68] ndisc_send_rs+0x26c/0x360 [ 21.915813][ T68] addrconf_dad_completed+0x4f3/0x9f0 [ 21.921170][ T68] ? addrconf_dad_stop+0x430/0x430 [ 21.926283][ T68] addrconf_dad_work+0x9c1/0x1520 [ 21.931459][ T68] ? __kasan_check_write+0x14/0x20 [ 21.936561][ T68] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.942779][ T68] ? __kasan_check_write+0x14/0x20 [ 21.948279][ T68] process_one_work+0x3ca/0x660 [ 21.953361][ T68] worker_thread+0x709/0xa20 [ 21.957947][ T68] ? __kthread_parkme+0x11b/0x150 [ 21.963154][ T68] kthread+0x371/0x390 [ 21.967214][ T68] ? pr_cont_work+0x110/0x110 [ 21.972468][ T68] ? __list_add+0xc0/0xc0 2021/11/10 00:32:32 building call list... [ 21.976792][ T68] ret_from_fork+0x1f/0x30 [ 21.981906][ T68] ================================================================================ [ 21.992658][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.001107][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.015252][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.632472][ T178] device bridge_slave_1 left promiscuous mode [ 22.638635][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.646710][ T178] device bridge_slave_0 left promiscuous mode [ 22.654275][ T178] bridge0: port 1(bridge_slave_0) entered disabled state