Warning: Permanently added '10.128.0.136' (ECDSA) to the list of known hosts. 2021/11/16 10:04:48 fuzzer started 2021/11/16 10:04:48 connecting to host at 10.128.0.163:33495 2021/11/16 10:04:48 checking machine... 2021/11/16 10:04:48 checking revisions... 2021/11/16 10:04:48 testing simple program... [ 20.062614][ T23] audit: type=1400 audit(1637057088.319:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.086225][ T23] audit: type=1400 audit(1637057088.319:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.087084][ T370] cgroup: Unknown subsys name 'net' [ 20.107600][ T23] audit: type=1400 audit(1637057088.319:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.135763][ T23] audit: type=1400 audit(1637057088.319:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.135973][ T370] cgroup: Unknown subsys name 'devices' [ 20.158723][ T23] audit: type=1400 audit(1637057088.319:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.187387][ T23] audit: type=1400 audit(1637057088.319:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.210437][ T23] audit: type=1400 audit(1637057088.349:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.232802][ T23] audit: type=1400 audit(1637057088.379:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.319687][ T370] cgroup: Unknown subsys name 'hugetlb' [ 20.325362][ T370] cgroup: Unknown subsys name 'rlimit' [ 20.449136][ T23] audit: type=1400 audit(1637057088.709:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.486897][ T23] audit: type=1400 audit(1637057088.739:82): avc: denied { execmem } for pid=374 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.563900][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.570991][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.578882][ T375] device bridge_slave_0 entered promiscuous mode [ 20.585661][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.592754][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.600071][ T375] device bridge_slave_1 entered promiscuous mode [ 20.630219][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.637242][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.644628][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.651670][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.670220][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.677498][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.684895][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.692607][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.709121][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.717355][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.724437][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.731875][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.740777][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.747799][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.755609][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.763936][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.778182][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.786481][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.797134][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.812423][ T24] ================================================================================ [ 20.821724][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 20.829721][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 20.838192][ T24] for an object of type 'struct sk_buff' [ 20.843838][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 20.853679][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.863822][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.869797][ T24] Call Trace: [ 20.873165][ T24] dump_stack_lvl+0x1e2/0x24b [ 20.877824][ T24] ? show_regs_print_info+0x18/0x18 [ 20.883002][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.888695][ T24] dump_stack+0x15/0x1d [ 20.892845][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.898553][ T24] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 20.904420][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.910375][ T24] wg_xmit+0x4a2/0xae0 [ 20.914417][ T24] ? wg_stop+0x140/0x140 [ 20.918637][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.924866][ T24] netdev_start_xmit+0x8a/0x160 [ 20.929700][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 20.934799][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.939716][ T24] ? dev_queue_xmit+0x20/0x20 [ 20.944377][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 20.949638][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 20.954651][ T24] ? _local_bh_enable+0x30/0x30 [ 20.959485][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.965721][ T24] ? ndisc_constructor+0x690/0x8a0 [ 20.970816][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 20.976032][ T24] ? dev_hard_header+0xdb/0xf0 [ 20.980782][ T24] dev_queue_xmit+0x17/0x20 [ 20.985263][ T24] neigh_connected_output+0x288/0x2b0 [ 20.990621][ T24] ip6_finish_output2+0xde2/0x1440 [ 20.995723][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.000472][ T24] ? __ip6_finish_output+0x520/0x520 [ 21.005732][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.011251][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.017495][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.022335][ T24] __ip6_finish_output+0x3e4/0x520 [ 21.027529][ T24] ip6_finish_output+0x3f/0x220 [ 21.032365][ T24] ? ip6_output+0x1d3/0x4b0 [ 21.036846][ T24] ip6_output+0x1f8/0x4b0 [ 21.041159][ T24] ? asan.module_dtor+0x20/0x20 [ 21.045996][ T24] ? skb_dst+0x40/0x40 [ 21.050065][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.054808][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 21.059986][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.065776][ T24] ? nf_hook_slow+0x150/0x1b0 [ 21.070540][ T24] NF_HOOK+0xdd/0x280 [ 21.074513][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.080128][ T24] ? NF_HOOK+0x280/0x280 [ 21.084348][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.089090][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.095307][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 21.100231][ T24] ? memcpy+0x56/0x70 [ 21.104191][ T24] ndisc_send_skb+0x646/0x9f0 [ 21.108848][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 21.114022][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.119544][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 21.124481][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.130177][ T24] ? skb_put+0x11d/0x200 [ 21.134516][ T24] ndisc_send_rs+0x26c/0x360 [ 21.139095][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 21.144457][ T24] ? addrconf_dad_stop+0x430/0x430 [ 21.149541][ T24] addrconf_dad_work+0x9c1/0x1520 [ 21.154547][ T24] ? move_linked_works+0x118/0x130 [ 21.159633][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.165328][ T24] ? __kasan_check_write+0x14/0x20 [ 21.170419][ T24] process_one_work+0x3ca/0x660 [ 21.175245][ T24] worker_thread+0x709/0xa20 [ 21.179826][ T24] ? __kthread_parkme+0x11b/0x150 [ 21.184828][ T24] kthread+0x371/0x390 [ 21.188867][ T24] ? pr_cont_work+0x110/0x110 [ 21.193515][ T24] ? __list_add+0xc0/0xc0 [ 21.197818][ T24] ret_from_fork+0x1f/0x30 [ 21.202247][ T24] ================================================================================ [ 21.211539][ T24] ================================================================================ [ 21.220822][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 21.228531][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 21.236821][ T24] for an object of type 'struct sk_buff' [ 21.242470][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 21.252167][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.262207][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.268160][ T24] Call Trace: [ 21.271445][ T24] dump_stack_lvl+0x1e2/0x24b [ 21.276105][ T24] ? show_regs_print_info+0x18/0x18 [ 21.281278][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.286974][ T24] dump_stack+0x15/0x1d [ 21.291105][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.296802][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.302758][ T24] wg_xmit+0x513/0xae0 [ 21.306806][ T24] ? wg_stop+0x140/0x140 [ 21.311024][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.317255][ T24] netdev_start_xmit+0x8a/0x160 [ 21.322081][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 21.327233][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.332251][ T24] ? dev_queue_xmit+0x20/0x20 [ 21.336932][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 21.342200][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 21.347211][ T24] ? _local_bh_enable+0x30/0x30 [ 21.352043][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.358371][ T24] ? ndisc_constructor+0x690/0x8a0 [ 21.363511][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 21.368696][ T24] ? dev_hard_header+0xdb/0xf0 [ 21.373480][ T24] dev_queue_xmit+0x17/0x20 [ 21.377964][ T24] neigh_connected_output+0x288/0x2b0 [ 21.383316][ T24] ip6_finish_output2+0xde2/0x1440 [ 21.388409][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.393167][ T24] ? __ip6_finish_output+0x520/0x520 [ 21.398433][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.403972][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.410187][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.415226][ T24] __ip6_finish_output+0x3e4/0x520 [ 21.420327][ T24] ip6_finish_output+0x3f/0x220 [ 21.425258][ T24] ? ip6_output+0x1d3/0x4b0 [ 21.429740][ T24] ip6_output+0x1f8/0x4b0 [ 21.434046][ T24] ? asan.module_dtor+0x20/0x20 [ 21.438892][ T24] ? skb_dst+0x40/0x40 [ 21.442941][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.447684][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 21.452897][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.458589][ T24] ? nf_hook_slow+0x150/0x1b0 [ 21.463242][ T24] NF_HOOK+0xdd/0x280 [ 21.467218][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.472837][ T24] ? NF_HOOK+0x280/0x280 [ 21.477078][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.481937][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.488172][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 21.493002][ T24] ? memcpy+0x56/0x70 [ 21.496976][ T24] ndisc_send_skb+0x646/0x9f0 [ 21.501643][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 21.506822][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.512348][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 21.517797][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.523503][ T24] ? skb_put+0x11d/0x200 [ 21.527728][ T24] ndisc_send_rs+0x26c/0x360 [ 21.532307][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 21.537655][ T24] ? addrconf_dad_stop+0x430/0x430 [ 21.542752][ T24] addrconf_dad_work+0x9c1/0x1520 [ 21.547754][ T24] ? move_linked_works+0x118/0x130 [ 21.552839][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.558892][ T24] ? __kasan_check_write+0x14/0x20 [ 21.563980][ T24] process_one_work+0x3ca/0x660 [ 21.568904][ T24] worker_thread+0x709/0xa20 [ 21.573483][ T24] ? __kthread_parkme+0x11b/0x150 [ 21.578501][ T24] kthread+0x371/0x390 [ 21.582908][ T24] ? pr_cont_work+0x110/0x110 [ 21.587562][ T24] ? __list_add+0xc0/0xc0 [ 21.591873][ T24] ret_from_fork+0x1f/0x30 [ 21.596328][ T24] ================================================================================ [ 21.607058][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.615480][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2021/11/16 10:04:49 building call list... [ 21.631104][ T375] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.228227][ T7] device bridge_slave_1 left promiscuous mode [ 22.234472][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.242355][ T7] device bridge_slave_0 left promiscuous mode [ 22.248746][ T7] bridge0: port 1(bridge_slave_0) entered disabled state