Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. 2021/11/10 00:32:26 fuzzer started 2021/11/10 00:32:27 connecting to host at 10.128.0.163:41739 2021/11/10 00:32:27 checking machine... 2021/11/10 00:32:27 checking revisions... 2021/11/10 00:32:27 testing simple program... [ 18.094237][ T23] audit: type=1400 audit(1636504347.109:73): avc: denied { getattr } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 18.099677][ T23] audit: type=1400 audit(1636504347.109:74): avc: denied { read } for pid=363 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 18.105358][ T23] audit: type=1400 audit(1636504347.109:75): avc: denied { open } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 18.110767][ T23] audit: type=1400 audit(1636504347.109:76): avc: denied { read } for pid=363 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.110805][ T372] cgroup: Unknown subsys name 'net' [ 18.119611][ T23] audit: type=1400 audit(1636504347.109:77): avc: denied { open } for pid=363 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.147577][ T23] audit: type=1400 audit(1636504347.119:78): avc: denied { mounton } for pid=372 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.147780][ T372] cgroup: Unknown subsys name 'devices' [ 18.174474][ T23] audit: type=1400 audit(1636504347.119:79): avc: denied { mount } for pid=372 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.202087][ T23] audit: type=1400 audit(1636504347.139:80): avc: denied { unmount } for pid=372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.323875][ T372] cgroup: Unknown subsys name 'hugetlb' [ 18.329828][ T372] cgroup: Unknown subsys name 'rlimit' [ 18.423449][ T23] audit: type=1400 audit(1636504347.439:81): avc: denied { setattr } for pid=372 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.459451][ T23] audit: type=1400 audit(1636504347.469:82): avc: denied { execmem } for pid=374 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.540381][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.547855][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.555565][ T375] device bridge_slave_0 entered promiscuous mode [ 18.563001][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.570039][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.577736][ T375] device bridge_slave_1 entered promiscuous mode [ 18.609363][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.616563][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.624003][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.631327][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.649967][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.657486][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.665356][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 18.673089][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.682218][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.690705][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.697755][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.702264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 18.715106][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.723609][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.730627][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.752779][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 18.761090][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 18.769962][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 18.778216][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 18.786621][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 18.797836][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 18.810921][ T109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 18.819745][ T40] ================================================================================ [ 18.829204][ T40] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 18.837087][ T40] member access within address ffffc9000023f1c0 with insufficient space [ 18.845527][ T40] for an object of type 'struct sk_buff' [ 18.851326][ T40] CPU: 0 PID: 40 Comm: kworker/0:1 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 18.861327][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 18.871432][ T40] Workqueue: ipv6_addrconf addrconf_dad_work [ 18.877484][ T40] Call Trace: [ 18.880776][ T40] dump_stack_lvl+0x1e2/0x24b [ 18.885459][ T40] ? show_regs_print_info+0x18/0x18 [ 18.890813][ T40] ? wg_allowedips_lookup_dst+0x190/0x190 [ 18.896932][ T40] dump_stack+0x15/0x1d [ 18.901180][ T40] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 18.906998][ T40] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 18.912923][ T40] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 18.918904][ T40] wg_xmit+0x4a2/0xae0 [ 18.922968][ T40] ? wg_stop+0x140/0x140 [ 18.927269][ T40] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 18.933586][ T40] netdev_start_xmit+0x8a/0x160 [ 18.938692][ T40] dev_hard_start_xmit+0x18d/0x2f0 [ 18.943916][ T40] __dev_queue_xmit+0xfbe/0x1bb0 [ 18.949136][ T40] ? dev_queue_xmit+0x20/0x20 [ 18.953891][ T40] ? __local_bh_enable_ip+0xa8/0x170 [ 18.959254][ T40] ? do_raw_spin_unlock+0x50/0x50 [ 18.964252][ T40] ? _local_bh_enable+0x30/0x30 [ 18.969089][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 18.975436][ T40] ? ndisc_constructor+0x690/0x8a0 [ 18.980631][ T40] ? _raw_write_unlock_bh+0x31/0x47 [ 18.985914][ T40] ? dev_hard_header+0xdb/0xf0 [ 18.990664][ T40] dev_queue_xmit+0x17/0x20 [ 18.995163][ T40] neigh_connected_output+0x288/0x2b0 [ 19.000525][ T40] ip6_finish_output2+0xde2/0x1440 [ 19.005639][ T40] ? __rcu_read_lock+0x50/0x50 [ 19.010430][ T40] ? __ip6_finish_output+0x520/0x520 [ 19.015692][ T40] ? dst_cow_metrics_generic+0x55/0x1d0 [ 19.021231][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.027451][ T40] ? ip6_skb_dst_mtu+0xaf/0x260 [ 19.032379][ T40] __ip6_finish_output+0x3e4/0x520 [ 19.037484][ T40] ip6_finish_output+0x3f/0x220 [ 19.042510][ T40] ? ip6_output+0x1d3/0x4b0 [ 19.047000][ T40] ip6_output+0x1f8/0x4b0 [ 19.051315][ T40] ? asan.module_dtor+0x20/0x20 [ 19.056305][ T40] ? skb_dst+0x40/0x40 [ 19.060454][ T40] ? __rcu_read_lock+0x50/0x50 [ 19.065204][ T40] ? selinux_ipv6_forward+0x50/0x50 [ 19.070384][ T40] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 19.076079][ T40] ? nf_hook_slow+0x150/0x1b0 [ 19.080739][ T40] NF_HOOK+0xdd/0x280 [ 19.084718][ T40] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 19.090323][ T40] ? NF_HOOK+0x280/0x280 [ 19.094545][ T40] ? __rcu_read_lock+0x50/0x50 [ 19.099288][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.105507][ T40] ? ndisc_send_skb+0x547/0x9f0 [ 19.110344][ T40] ? memcpy+0x56/0x70 [ 19.114499][ T40] ndisc_send_skb+0x646/0x9f0 [ 19.119166][ T40] ? slab_post_alloc_hook+0x90/0xa0 [ 19.124353][ T40] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 19.129954][ T40] ? skb_set_owner_w+0x1a8/0x310 [ 19.134980][ T40] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 19.140698][ T40] ? skb_put+0x11d/0x200 [ 19.145174][ T40] ndisc_send_rs+0x26c/0x360 [ 19.149771][ T40] addrconf_dad_completed+0x4f3/0x9f0 [ 19.155144][ T40] ? addrconf_dad_stop+0x430/0x430 [ 19.160234][ T40] ? psi_task_switch+0x1f7/0x3b0 [ 19.165274][ T40] addrconf_dad_work+0x9c1/0x1520 [ 19.170276][ T40] ? move_linked_works+0x118/0x130 [ 19.175458][ T40] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 19.181167][ T40] ? __kasan_check_write+0x14/0x20 [ 19.186254][ T40] process_one_work+0x3ca/0x660 [ 19.191079][ T40] worker_thread+0x709/0xa20 [ 19.195736][ T40] ? __kthread_parkme+0x11b/0x150 [ 19.200993][ T40] kthread+0x371/0x390 [ 19.205035][ T40] ? pr_cont_work+0x110/0x110 [ 19.209699][ T40] ? __list_add+0xc0/0xc0 [ 19.214019][ T40] ret_from_fork+0x1f/0x30 [ 19.218594][ T40] ================================================================================ [ 19.227912][ T40] ================================================================================ [ 19.237239][ T40] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 19.245069][ T40] member access within address ffffc9000023f1c0 with insufficient space [ 19.253409][ T40] for an object of type 'struct sk_buff' [ 19.259030][ T40] CPU: 0 PID: 40 Comm: kworker/0:1 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 19.268714][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.278764][ T40] Workqueue: ipv6_addrconf addrconf_dad_work [ 19.284726][ T40] Call Trace: [ 19.288209][ T40] dump_stack_lvl+0x1e2/0x24b [ 19.292874][ T40] ? show_regs_print_info+0x18/0x18 [ 19.298763][ T40] ? wg_allowedips_lookup_dst+0x190/0x190 [ 19.304458][ T40] dump_stack+0x15/0x1d [ 19.308598][ T40] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 19.314464][ T40] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 19.321397][ T40] wg_xmit+0x513/0xae0 [ 19.325479][ T40] ? wg_stop+0x140/0x140 [ 19.329724][ T40] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 19.335951][ T40] netdev_start_xmit+0x8a/0x160 [ 19.341119][ T40] dev_hard_start_xmit+0x18d/0x2f0 [ 19.346226][ T40] __dev_queue_xmit+0xfbe/0x1bb0 [ 19.351927][ T40] ? dev_queue_xmit+0x20/0x20 [ 19.356757][ T40] ? __local_bh_enable_ip+0xa8/0x170 [ 19.362084][ T40] ? do_raw_spin_unlock+0x50/0x50 [ 19.367242][ T40] ? _local_bh_enable+0x30/0x30 [ 19.372086][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.378471][ T40] ? ndisc_constructor+0x690/0x8a0 [ 19.383755][ T40] ? _raw_write_unlock_bh+0x31/0x47 [ 19.389024][ T40] ? dev_hard_header+0xdb/0xf0 [ 19.393772][ T40] dev_queue_xmit+0x17/0x20 [ 19.398345][ T40] neigh_connected_output+0x288/0x2b0 [ 19.403713][ T40] ip6_finish_output2+0xde2/0x1440 [ 19.408799][ T40] ? __rcu_read_lock+0x50/0x50 [ 19.413536][ T40] ? __ip6_finish_output+0x520/0x520 [ 19.418794][ T40] ? dst_cow_metrics_generic+0x55/0x1d0 [ 19.424535][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.430862][ T40] ? ip6_skb_dst_mtu+0xaf/0x260 [ 19.435774][ T40] __ip6_finish_output+0x3e4/0x520 [ 19.440899][ T40] ip6_finish_output+0x3f/0x220 [ 19.445917][ T40] ? ip6_output+0x1d3/0x4b0 [ 19.450538][ T40] ip6_output+0x1f8/0x4b0 [ 19.454848][ T40] ? asan.module_dtor+0x20/0x20 [ 19.459672][ T40] ? skb_dst+0x40/0x40 [ 19.463733][ T40] ? __rcu_read_lock+0x50/0x50 [ 19.468922][ T40] ? selinux_ipv6_forward+0x50/0x50 [ 19.474095][ T40] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 19.479788][ T40] ? nf_hook_slow+0x150/0x1b0 [ 19.484466][ T40] NF_HOOK+0xdd/0x280 [ 19.488743][ T40] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 19.494718][ T40] ? NF_HOOK+0x280/0x280 [ 19.498945][ T40] ? __rcu_read_lock+0x50/0x50 [ 19.503770][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.510101][ T40] ? ndisc_send_skb+0x547/0x9f0 [ 19.514924][ T40] ? memcpy+0x56/0x70 [ 19.518890][ T40] ndisc_send_skb+0x646/0x9f0 [ 19.523555][ T40] ? slab_post_alloc_hook+0x90/0xa0 [ 19.528816][ T40] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 19.534420][ T40] ? skb_set_owner_w+0x1a8/0x310 [ 19.539419][ T40] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 19.545206][ T40] ? skb_put+0x11d/0x200 [ 19.549434][ T40] ndisc_send_rs+0x26c/0x360 [ 19.554013][ T40] addrconf_dad_completed+0x4f3/0x9f0 [ 19.559360][ T40] ? addrconf_dad_stop+0x430/0x430 [ 19.564459][ T40] ? psi_task_switch+0x1f7/0x3b0 [ 19.569392][ T40] addrconf_dad_work+0x9c1/0x1520 [ 19.574480][ T40] ? move_linked_works+0x118/0x130 [ 19.579652][ T40] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 19.585369][ T40] ? __kasan_check_write+0x14/0x20 [ 19.590470][ T40] process_one_work+0x3ca/0x660 [ 19.595317][ T40] worker_thread+0x709/0xa20 [ 19.600064][ T40] ? __kthread_parkme+0x11b/0x150 [ 19.605070][ T40] kthread+0x371/0x390 [ 19.609549][ T40] ? pr_cont_work+0x110/0x110 2021/11/10 00:32:28 building call list... [ 19.614201][ T40] ? __list_add+0xc0/0xc0 [ 19.618591][ T40] ret_from_fork+0x1f/0x30 [ 19.623035][ T40] ================================================================================ [ 19.639698][ T375] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.182359][ T178] device bridge_slave_1 left promiscuous mode [ 20.188532][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.196525][ T178] device bridge_slave_0 left promiscuous mode [ 20.202918][ T178] bridge0: port 1(bridge_slave_0) entered disabled state