Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts. 2021/11/18 14:01:03 fuzzer started 2021/11/18 14:01:03 connecting to host at 10.128.0.163:43891 2021/11/18 14:01:03 checking machine... 2021/11/18 14:01:03 checking revisions... 2021/11/18 14:01:03 testing simple program... [ 21.006923][ T23] audit: type=1400 audit(1637244063.819:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.030825][ T23] audit: type=1400 audit(1637244063.839:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.035628][ T371] cgroup: Unknown subsys name 'net' [ 21.052258][ T23] audit: type=1400 audit(1637244063.839:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.080669][ T23] audit: type=1400 audit(1637244063.839:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.080861][ T371] cgroup: Unknown subsys name 'devices' [ 21.103652][ T23] audit: type=1400 audit(1637244063.839:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.132300][ T23] audit: type=1400 audit(1637244063.849:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.155284][ T23] audit: type=1400 audit(1637244063.849:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.177771][ T23] audit: type=1400 audit(1637244063.869:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.329598][ T371] cgroup: Unknown subsys name 'hugetlb' [ 21.335638][ T371] cgroup: Unknown subsys name 'rlimit' [ 21.459102][ T23] audit: type=1400 audit(1637244064.279:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.482328][ T23] audit: type=1400 audit(1637244064.279:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.572261][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.579621][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.587065][ T374] device bridge_slave_0 entered promiscuous mode [ 21.594052][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.601608][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.609068][ T374] device bridge_slave_1 entered promiscuous mode [ 21.639728][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.646962][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.654495][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.661558][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.680311][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.688077][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.695344][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.703678][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.718968][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.727290][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.734435][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.742353][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.750746][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.757911][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.765203][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.773195][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.786606][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.806632][ T24] ================================================================================ [ 21.816086][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 21.823894][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 21.832209][ T24] for an object of type 'struct sk_buff' [ 21.837957][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 21.847928][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.857988][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.863945][ T24] Call Trace: [ 21.867216][ T24] dump_stack_lvl+0x1e2/0x24b [ 21.871883][ T24] ? show_regs_print_info+0x18/0x18 [ 21.877058][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.882753][ T24] dump_stack+0x15/0x1d [ 21.886900][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.892601][ T24] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 21.898591][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.904564][ T24] wg_xmit+0x4a2/0xae0 [ 21.908611][ T24] ? wg_stop+0x140/0x140 [ 21.912844][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.919191][ T24] netdev_start_xmit+0x8a/0x160 [ 21.924035][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 21.929202][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.934403][ T24] ? dev_queue_xmit+0x20/0x20 [ 21.939156][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 21.944525][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 21.949541][ T24] ? _local_bh_enable+0x30/0x30 [ 21.954392][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.960612][ T24] ? ndisc_constructor+0x690/0x8a0 [ 21.965723][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 21.970986][ T24] ? dev_hard_header+0xdb/0xf0 [ 21.975814][ T24] dev_queue_xmit+0x17/0x20 [ 21.980299][ T24] neigh_connected_output+0x288/0x2b0 [ 21.985662][ T24] ip6_finish_output2+0xde2/0x1440 [ 21.990853][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.995768][ T24] ? __ip6_finish_output+0x520/0x520 [ 22.001050][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.006578][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.012795][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.017636][ T24] __ip6_finish_output+0x3e4/0x520 [ 22.022744][ T24] ip6_finish_output+0x3f/0x220 [ 22.027687][ T24] ? ip6_output+0x1d3/0x4b0 [ 22.032174][ T24] ip6_output+0x1f8/0x4b0 [ 22.036479][ T24] ? asan.module_dtor+0x20/0x20 [ 22.041318][ T24] ? skb_dst+0x40/0x40 [ 22.045373][ T24] ? __rcu_read_lock+0x50/0x50 [ 22.050251][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 22.055439][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.061143][ T24] ? nf_hook_slow+0x150/0x1b0 [ 22.065801][ T24] NF_HOOK+0xdd/0x280 [ 22.069771][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.075378][ T24] ? NF_HOOK+0x280/0x280 [ 22.079599][ T24] ? __rcu_read_lock+0x50/0x50 [ 22.084436][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.090659][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 22.095498][ T24] ? memcpy+0x56/0x70 [ 22.099486][ T24] ndisc_send_skb+0x646/0x9f0 [ 22.104226][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 22.109403][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.114928][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 22.119844][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.125736][ T24] ? skb_put+0x11d/0x200 [ 22.129970][ T24] ndisc_send_rs+0x26c/0x360 [ 22.134558][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 22.140132][ T24] ? addrconf_dad_stop+0x430/0x430 [ 22.145248][ T24] addrconf_dad_work+0x9c1/0x1520 [ 22.150268][ T24] ? move_linked_works+0x118/0x130 [ 22.155361][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.161092][ T24] ? __kasan_check_write+0x14/0x20 [ 22.166207][ T24] process_one_work+0x3ca/0x660 [ 22.171046][ T24] worker_thread+0x709/0xa20 [ 22.175620][ T24] ? __kthread_parkme+0x11b/0x150 [ 22.180632][ T24] kthread+0x371/0x390 [ 22.184702][ T24] ? pr_cont_work+0x110/0x110 [ 22.189380][ T24] ? __list_add+0xc0/0xc0 [ 22.193809][ T24] ret_from_fork+0x1f/0x30 [ 22.198248][ T24] ================================================================================ [ 22.207716][ T24] ================================================================================ [ 22.217274][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 22.225042][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 22.233397][ T24] for an object of type 'struct sk_buff' [ 22.239060][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 22.248766][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.258813][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.264804][ T24] Call Trace: [ 22.268082][ T24] dump_stack_lvl+0x1e2/0x24b [ 22.273546][ T24] ? show_regs_print_info+0x18/0x18 [ 22.278900][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 22.284616][ T24] dump_stack+0x15/0x1d [ 22.288761][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.294466][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.300653][ T24] wg_xmit+0x513/0xae0 [ 22.305100][ T24] ? wg_stop+0x140/0x140 [ 22.309346][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 22.315574][ T24] netdev_start_xmit+0x8a/0x160 [ 22.320417][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 22.325566][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 22.330509][ T24] ? dev_queue_xmit+0x20/0x20 [ 22.335172][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 22.340441][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 22.345444][ T24] ? _local_bh_enable+0x30/0x30 [ 22.350271][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.356587][ T24] ? ndisc_constructor+0x690/0x8a0 [ 22.361705][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 22.366889][ T24] ? dev_hard_header+0xdb/0xf0 [ 22.371631][ T24] dev_queue_xmit+0x17/0x20 [ 22.376110][ T24] neigh_connected_output+0x288/0x2b0 [ 22.381459][ T24] ip6_finish_output2+0xde2/0x1440 [ 22.386552][ T24] ? __rcu_read_lock+0x50/0x50 [ 22.392871][ T24] ? __ip6_finish_output+0x520/0x520 [ 22.398132][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.403654][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.409967][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.414804][ T24] __ip6_finish_output+0x3e4/0x520 [ 22.419901][ T24] ip6_finish_output+0x3f/0x220 [ 22.424736][ T24] ? ip6_output+0x1d3/0x4b0 [ 22.429230][ T24] ip6_output+0x1f8/0x4b0 [ 22.433551][ T24] ? asan.module_dtor+0x20/0x20 [ 22.438397][ T24] ? skb_dst+0x40/0x40 [ 22.442474][ T24] ? __rcu_read_lock+0x50/0x50 [ 22.447240][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 22.452466][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.458166][ T24] ? nf_hook_slow+0x150/0x1b0 [ 22.463009][ T24] NF_HOOK+0xdd/0x280 [ 22.466972][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.472582][ T24] ? NF_HOOK+0x280/0x280 [ 22.476823][ T24] ? __rcu_read_lock+0x50/0x50 [ 22.481563][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.487784][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 22.492626][ T24] ? memcpy+0x56/0x70 [ 22.496714][ T24] ndisc_send_skb+0x646/0x9f0 [ 22.501384][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 22.506579][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.512140][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 22.517271][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.523096][ T24] ? skb_put+0x11d/0x200 [ 22.527368][ T24] ndisc_send_rs+0x26c/0x360 [ 22.531940][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 22.537310][ T24] ? addrconf_dad_stop+0x430/0x430 [ 22.542414][ T24] addrconf_dad_work+0x9c1/0x1520 [ 22.547623][ T24] ? move_linked_works+0x118/0x130 [ 22.552732][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.558447][ T24] ? __kasan_check_write+0x14/0x20 [ 22.563563][ T24] process_one_work+0x3ca/0x660 [ 22.568434][ T24] worker_thread+0x709/0xa20 [ 22.573009][ T24] ? __kthread_parkme+0x11b/0x150 [ 22.578220][ T24] kthread+0x371/0x390 [ 22.582272][ T24] ? pr_cont_work+0x110/0x110 [ 22.586934][ T24] ? __list_add+0xc0/0xc0 [ 22.591269][ T24] ret_from_fork+0x1f/0x30 [ 22.595716][ T24] ================================================================================ [ 22.606088][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.615634][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.624122][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.632244][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2021/11/18 14:01:05 building call list... [ 22.649023][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.162494][ T177] device bridge_slave_1 left promiscuous mode [ 23.168767][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.178029][ T177] device bridge_slave_0 left promiscuous mode [ 23.184205][ T177] bridge0: port 1(bridge_slave_0) entered disabled state