Warning: Permanently added '10.128.1.250' (ECDSA) to the list of known hosts. 2021/11/13 15:35:41 fuzzer started 2021/11/13 15:35:41 connecting to host at 10.128.0.163:37963 2021/11/13 15:35:41 checking machine... 2021/11/13 15:35:41 checking revisions... 2021/11/13 15:35:41 testing simple program... [ 22.335007][ T23] audit: type=1400 audit(1636817741.250:73): avc: denied { getattr } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 22.351644][ T371] cgroup: Unknown subsys name 'net' [ 22.358954][ T23] audit: type=1400 audit(1636817741.250:74): avc: denied { read } for pid=363 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 22.386683][ T23] audit: type=1400 audit(1636817741.250:75): avc: denied { open } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 22.386891][ T371] cgroup: Unknown subsys name 'devices' [ 22.410162][ T23] audit: type=1400 audit(1636817741.260:76): avc: denied { read } for pid=363 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.439078][ T23] audit: type=1400 audit(1636817741.260:77): avc: denied { open } for pid=363 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.462596][ T23] audit: type=1400 audit(1636817741.260:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.485849][ T23] audit: type=1400 audit(1636817741.260:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.509117][ T23] audit: type=1400 audit(1636817741.280:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.615305][ T371] cgroup: Unknown subsys name 'hugetlb' [ 22.621235][ T371] cgroup: Unknown subsys name 'rlimit' [ 22.684917][ T23] audit: type=1400 audit(1636817741.600:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.708331][ T23] audit: type=1400 audit(1636817741.600:82): avc: denied { execmem } for pid=374 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.785066][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.792419][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.800604][ T375] device bridge_slave_0 entered promiscuous mode [ 22.807798][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.814857][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.822372][ T375] device bridge_slave_1 entered promiscuous mode [ 22.853149][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.860402][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.867802][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.874830][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.893165][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.900459][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.908337][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.915947][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.925661][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.934122][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.941289][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.964240][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.974016][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.982164][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.990675][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.999306][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.006418][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.014270][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.022806][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.038652][ T34] ================================================================================ [ 23.048475][ T34] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 23.056402][ T34] member access within address ffffc9000023f1c0 with insufficient space [ 23.065135][ T34] for an object of type 'struct sk_buff' [ 23.070865][ T34] CPU: 1 PID: 34 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 23.081142][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.091859][ T34] Workqueue: ipv6_addrconf addrconf_dad_work [ 23.098133][ T34] Call Trace: [ 23.101411][ T34] dump_stack_lvl+0x1e2/0x24b [ 23.106443][ T34] ? show_regs_print_info+0x18/0x18 [ 23.111626][ T34] ? wg_allowedips_lookup_dst+0x190/0x190 [ 23.117529][ T34] dump_stack+0x15/0x1d [ 23.121689][ T34] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 23.127416][ T34] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 23.133497][ T34] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 23.139665][ T34] wg_xmit+0x4a2/0xae0 [ 23.143729][ T34] ? wg_stop+0x140/0x140 [ 23.147963][ T34] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 23.154191][ T34] netdev_start_xmit+0x8a/0x160 [ 23.159025][ T34] dev_hard_start_xmit+0x18d/0x2f0 [ 23.164131][ T34] __dev_queue_xmit+0xfbe/0x1bb0 [ 23.169164][ T34] ? dev_queue_xmit+0x20/0x20 [ 23.173837][ T34] ? __local_bh_enable_ip+0xa8/0x170 [ 23.179195][ T34] ? do_raw_spin_unlock+0x50/0x50 [ 23.184198][ T34] ? _local_bh_enable+0x30/0x30 [ 23.189591][ T34] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.195829][ T34] ? ndisc_constructor+0x690/0x8a0 [ 23.200963][ T34] ? _raw_write_unlock_bh+0x31/0x47 [ 23.206257][ T34] ? dev_hard_header+0xdb/0xf0 [ 23.211180][ T34] dev_queue_xmit+0x17/0x20 [ 23.215693][ T34] neigh_connected_output+0x288/0x2b0 [ 23.221065][ T34] ip6_finish_output2+0xde2/0x1440 [ 23.226257][ T34] ? __rcu_read_lock+0x50/0x50 [ 23.231198][ T34] ? __ip6_finish_output+0x520/0x520 [ 23.236684][ T34] ? dst_cow_metrics_generic+0x55/0x1d0 [ 23.242220][ T34] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.248448][ T34] ? ip6_skb_dst_mtu+0xaf/0x260 [ 23.253472][ T34] __ip6_finish_output+0x3e4/0x520 [ 23.258707][ T34] ip6_finish_output+0x3f/0x220 [ 23.263538][ T34] ? ip6_output+0x1d3/0x4b0 [ 23.268018][ T34] ip6_output+0x1f8/0x4b0 [ 23.272344][ T34] ? asan.module_dtor+0x20/0x20 [ 23.277264][ T34] ? skb_dst+0x40/0x40 [ 23.281314][ T34] ? __rcu_read_lock+0x50/0x50 [ 23.286111][ T34] ? selinux_ipv6_forward+0x50/0x50 [ 23.291434][ T34] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.297228][ T34] ? nf_hook_slow+0x150/0x1b0 [ 23.302433][ T34] NF_HOOK+0xdd/0x280 [ 23.306408][ T34] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 23.312196][ T34] ? NF_HOOK+0x280/0x280 [ 23.316520][ T34] ? __rcu_read_lock+0x50/0x50 [ 23.321270][ T34] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.327496][ T34] ? ndisc_send_skb+0x547/0x9f0 [ 23.332432][ T34] ? memcpy+0x56/0x70 [ 23.336588][ T34] ndisc_send_skb+0x646/0x9f0 [ 23.341257][ T34] ? slab_post_alloc_hook+0x90/0xa0 [ 23.346450][ T34] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 23.352253][ T34] ? skb_set_owner_w+0x1a8/0x310 [ 23.357204][ T34] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 23.362929][ T34] ? skb_put+0x11d/0x200 [ 23.367158][ T34] ndisc_send_rs+0x26c/0x360 [ 23.373915][ T34] addrconf_dad_completed+0x4f3/0x9f0 [ 23.379380][ T34] ? addrconf_dad_stop+0x430/0x430 [ 23.384649][ T34] addrconf_dad_work+0x9c1/0x1520 [ 23.389758][ T34] ? move_linked_works+0x118/0x130 [ 23.394937][ T34] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.400814][ T34] ? __kasan_check_write+0x14/0x20 [ 23.405908][ T34] process_one_work+0x3ca/0x660 [ 23.410828][ T34] worker_thread+0x709/0xa20 [ 23.415489][ T34] ? __kthread_parkme+0x11b/0x150 [ 23.421064][ T34] kthread+0x371/0x390 [ 23.425477][ T34] ? pr_cont_work+0x110/0x110 [ 23.430249][ T34] ? __list_add+0xc0/0xc0 [ 23.434858][ T34] ret_from_fork+0x1f/0x30 [ 23.439427][ T34] ================================================================================ [ 23.449357][ T34] ================================================================================ [ 23.459947][ T34] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 23.467803][ T34] member access within address ffffc9000023f1c0 with insufficient space [ 23.476256][ T34] for an object of type 'struct sk_buff' [ 23.482083][ T34] CPU: 1 PID: 34 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 23.491891][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.502219][ T34] Workqueue: ipv6_addrconf addrconf_dad_work [ 23.508495][ T34] Call Trace: [ 23.511865][ T34] dump_stack_lvl+0x1e2/0x24b [ 23.516755][ T34] ? show_regs_print_info+0x18/0x18 [ 23.522206][ T34] ? wg_allowedips_lookup_dst+0x190/0x190 [ 23.528034][ T34] dump_stack+0x15/0x1d [ 23.532288][ T34] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 23.538147][ T34] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 23.544206][ T34] wg_xmit+0x513/0xae0 [ 23.548280][ T34] ? wg_stop+0x140/0x140 [ 23.552771][ T34] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 23.559633][ T34] netdev_start_xmit+0x8a/0x160 [ 23.564926][ T34] dev_hard_start_xmit+0x18d/0x2f0 [ 23.570463][ T34] __dev_queue_xmit+0xfbe/0x1bb0 [ 23.575622][ T34] ? dev_queue_xmit+0x20/0x20 [ 23.581695][ T34] ? __local_bh_enable_ip+0xa8/0x170 [ 23.587278][ T34] ? do_raw_spin_unlock+0x50/0x50 [ 23.592636][ T34] ? _local_bh_enable+0x30/0x30 [ 23.597786][ T34] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.604722][ T34] ? ndisc_constructor+0x690/0x8a0 [ 23.610039][ T34] ? _raw_write_unlock_bh+0x31/0x47 [ 23.615586][ T34] ? dev_hard_header+0xdb/0xf0 [ 23.620353][ T34] dev_queue_xmit+0x17/0x20 [ 23.624938][ T34] neigh_connected_output+0x288/0x2b0 [ 23.630748][ T34] ip6_finish_output2+0xde2/0x1440 [ 23.636194][ T34] ? __rcu_read_lock+0x50/0x50 [ 23.641168][ T34] ? __ip6_finish_output+0x520/0x520 [ 23.646793][ T34] ? dst_cow_metrics_generic+0x55/0x1d0 [ 23.652589][ T34] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.660327][ T34] ? ip6_skb_dst_mtu+0xaf/0x260 [ 23.665188][ T34] __ip6_finish_output+0x3e4/0x520 [ 23.671991][ T34] ip6_finish_output+0x3f/0x220 [ 23.676864][ T34] ? ip6_output+0x1d3/0x4b0 [ 23.681387][ T34] ip6_output+0x1f8/0x4b0 [ 23.685714][ T34] ? asan.module_dtor+0x20/0x20 [ 23.690673][ T34] ? skb_dst+0x40/0x40 [ 23.694814][ T34] ? __rcu_read_lock+0x50/0x50 [ 23.699584][ T34] ? selinux_ipv6_forward+0x50/0x50 [ 23.704935][ T34] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.710717][ T34] ? nf_hook_slow+0x150/0x1b0 [ 23.715381][ T34] NF_HOOK+0xdd/0x280 [ 23.719435][ T34] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 23.725141][ T34] ? NF_HOOK+0x280/0x280 [ 23.729358][ T34] ? __rcu_read_lock+0x50/0x50 [ 23.734299][ T34] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.740795][ T34] ? ndisc_send_skb+0x547/0x9f0 [ 23.745640][ T34] ? memcpy+0x56/0x70 [ 23.749692][ T34] ndisc_send_skb+0x646/0x9f0 [ 23.754367][ T34] ? slab_post_alloc_hook+0x90/0xa0 [ 23.759875][ T34] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 23.766035][ T34] ? skb_set_owner_w+0x1a8/0x310 [ 23.771424][ T34] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 23.777365][ T34] ? skb_put+0x11d/0x200 [ 23.781660][ T34] ndisc_send_rs+0x26c/0x360 [ 23.786358][ T34] addrconf_dad_completed+0x4f3/0x9f0 [ 23.791812][ T34] ? addrconf_dad_stop+0x430/0x430 [ 23.797076][ T34] addrconf_dad_work+0x9c1/0x1520 [ 23.802087][ T34] ? move_linked_works+0x118/0x130 [ 23.807434][ T34] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.813218][ T34] ? __kasan_check_write+0x14/0x20 [ 23.818390][ T34] process_one_work+0x3ca/0x660 [ 23.823225][ T34] worker_thread+0x709/0xa20 [ 23.827896][ T34] ? __kthread_parkme+0x11b/0x150 [ 23.832898][ T34] kthread+0x371/0x390 [ 23.836962][ T34] ? pr_cont_work+0x110/0x110 [ 23.841631][ T34] ? __list_add+0xc0/0xc0 [ 23.846106][ T34] ret_from_fork+0x1f/0x30 [ 23.850557][ T34] ================================================================================ [ 23.860825][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2021/11/13 15:35:42 building call list... [ 23.869419][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.882811][ T375] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.463817][ T178] device bridge_slave_1 left promiscuous mode [ 24.471482][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.479307][ T178] device bridge_slave_0 left promiscuous mode [ 24.485945][ T178] bridge0: port 1(bridge_slave_0) entered disabled state