Warning: Permanently added '10.128.1.88' (ECDSA) to the list of known hosts. 2021/11/10 12:34:47 fuzzer started 2021/11/10 12:34:47 connecting to host at 10.128.0.163:34913 2021/11/10 12:34:47 checking machine... 2021/11/10 12:34:47 checking revisions... 2021/11/10 12:34:47 testing simple program... [ 19.689250][ T23] audit: type=1400 audit(1636547687.430:73): avc: denied { getattr } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.693357][ T23] audit: type=1400 audit(1636547687.430:74): avc: denied { read } for pid=363 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.697389][ T23] audit: type=1400 audit(1636547687.430:75): avc: denied { open } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.701802][ T23] audit: type=1400 audit(1636547687.440:76): avc: denied { read } for pid=363 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.707158][ T23] audit: type=1400 audit(1636547687.440:77): avc: denied { open } for pid=363 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.707578][ T372] cgroup: Unknown subsys name 'net' [ 19.726386][ T23] audit: type=1400 audit(1636547687.450:78): avc: denied { mounton } for pid=372 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.754652][ T23] audit: type=1400 audit(1636547687.450:79): avc: denied { mount } for pid=372 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.754807][ T372] cgroup: Unknown subsys name 'devices' [ 19.777208][ T23] audit: type=1400 audit(1636547687.480:80): avc: denied { unmount } for pid=372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.893512][ T372] cgroup: Unknown subsys name 'hugetlb' [ 19.899342][ T372] cgroup: Unknown subsys name 'rlimit' [ 19.962672][ T23] audit: type=1400 audit(1636547687.710:81): avc: denied { setattr } for pid=372 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.001526][ T23] audit: type=1400 audit(1636547687.740:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.083609][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.091114][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.098964][ T374] device bridge_slave_0 entered promiscuous mode [ 20.106137][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.113469][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.121254][ T374] device bridge_slave_1 entered promiscuous mode [ 20.153941][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.161508][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.169017][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.176627][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.195390][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.203231][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.210633][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.219028][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.228673][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.237540][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.244795][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.253777][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.262257][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.269604][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.281988][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.292471][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.308763][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.317813][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.329218][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.342311][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.354621][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.365871][ T51] ================================================================================ [ 20.375629][ T51] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 20.383581][ T51] member access within address ffffc9000024f1c0 with insufficient space [ 20.392379][ T51] for an object of type 'struct sk_buff' [ 20.398250][ T51] CPU: 0 PID: 51 Comm: kworker/0:1 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 20.408307][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.418577][ T51] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.424661][ T51] Call Trace: [ 20.428052][ T51] dump_stack_lvl+0x1e2/0x24b [ 20.432731][ T51] ? show_regs_print_info+0x18/0x18 [ 20.437921][ T51] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.443651][ T51] dump_stack+0x15/0x1d [ 20.447916][ T51] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.453632][ T51] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 20.459538][ T51] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.465842][ T51] wg_xmit+0x4a2/0xae0 [ 20.470436][ T51] ? wg_stop+0x140/0x140 [ 20.474773][ T51] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.481276][ T51] netdev_start_xmit+0x8a/0x160 [ 20.486738][ T51] dev_hard_start_xmit+0x18d/0x2f0 [ 20.492143][ T51] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.497154][ T51] ? dev_queue_xmit+0x20/0x20 [ 20.501807][ T51] ? __local_bh_enable_ip+0xa8/0x170 [ 20.507174][ T51] ? do_raw_spin_unlock+0x50/0x50 [ 20.512653][ T51] ? _local_bh_enable+0x30/0x30 [ 20.517491][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.524139][ T51] ? ndisc_constructor+0x690/0x8a0 [ 20.529239][ T51] ? _raw_write_unlock_bh+0x31/0x47 [ 20.534414][ T51] ? dev_hard_header+0xdb/0xf0 [ 20.539152][ T51] dev_queue_xmit+0x17/0x20 [ 20.543632][ T51] neigh_connected_output+0x288/0x2b0 [ 20.549151][ T51] ip6_finish_output2+0xde2/0x1440 [ 20.554257][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.559015][ T51] ? __ip6_finish_output+0x520/0x520 [ 20.564286][ T51] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.569823][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.576045][ T51] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.581122][ T51] __ip6_finish_output+0x3e4/0x520 [ 20.586234][ T51] ip6_finish_output+0x3f/0x220 [ 20.591243][ T51] ? ip6_output+0x1d3/0x4b0 [ 20.595733][ T51] ip6_output+0x1f8/0x4b0 [ 20.600036][ T51] ? asan.module_dtor+0x20/0x20 [ 20.604866][ T51] ? skb_dst+0x40/0x40 [ 20.609063][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.613901][ T51] ? selinux_ipv6_forward+0x50/0x50 [ 20.619103][ T51] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.624788][ T51] ? nf_hook_slow+0x150/0x1b0 [ 20.629460][ T51] NF_HOOK+0xdd/0x280 [ 20.633425][ T51] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.639212][ T51] ? NF_HOOK+0x280/0x280 [ 20.643602][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.648551][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.654908][ T51] ? ndisc_send_skb+0x547/0x9f0 [ 20.659820][ T51] ? memcpy+0x56/0x70 [ 20.663779][ T51] ndisc_send_skb+0x646/0x9f0 [ 20.668427][ T51] ? slab_post_alloc_hook+0x90/0xa0 [ 20.673636][ T51] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.679243][ T51] ? skb_set_owner_w+0x1a8/0x310 [ 20.684601][ T51] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.690446][ T51] ? skb_put+0x11d/0x200 [ 20.695144][ T51] ndisc_send_rs+0x26c/0x360 [ 20.699931][ T51] addrconf_dad_completed+0x4f3/0x9f0 [ 20.705282][ T51] ? addrconf_dad_stop+0x430/0x430 [ 20.710374][ T51] ? mutex_unlock+0x34/0x40 [ 20.715044][ T51] addrconf_dad_work+0x9c1/0x1520 [ 20.721357][ T51] ? move_linked_works+0x118/0x130 [ 20.726535][ T51] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.732607][ T51] ? __kasan_check_write+0x14/0x20 [ 20.738412][ T51] process_one_work+0x3ca/0x660 [ 20.743513][ T51] worker_thread+0x709/0xa20 [ 20.748177][ T51] ? __kthread_parkme+0x11b/0x150 [ 20.753180][ T51] kthread+0x371/0x390 [ 20.757680][ T51] ? pr_cont_work+0x110/0x110 [ 20.762765][ T51] ? __list_add+0xc0/0xc0 [ 20.767165][ T51] ret_from_fork+0x1f/0x30 [ 20.771805][ T51] ================================================================================ [ 20.781100][ T51] ================================================================================ [ 20.790516][ T51] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 20.798623][ T51] member access within address ffffc9000024f1c0 with insufficient space [ 20.807217][ T51] for an object of type 'struct sk_buff' [ 20.813025][ T51] CPU: 0 PID: 51 Comm: kworker/0:1 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 20.822805][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.834071][ T51] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.840561][ T51] Call Trace: [ 20.843936][ T51] dump_stack_lvl+0x1e2/0x24b [ 20.848592][ T51] ? show_regs_print_info+0x18/0x18 [ 20.853770][ T51] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.859570][ T51] dump_stack+0x15/0x1d [ 20.863703][ T51] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.869483][ T51] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.875647][ T51] wg_xmit+0x513/0xae0 [ 20.879790][ T51] ? wg_stop+0x140/0x140 [ 20.884100][ T51] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.890445][ T51] netdev_start_xmit+0x8a/0x160 [ 20.895359][ T51] dev_hard_start_xmit+0x18d/0x2f0 [ 20.900792][ T51] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.905882][ T51] ? dev_queue_xmit+0x20/0x20 [ 20.910617][ T51] ? __local_bh_enable_ip+0xa8/0x170 [ 20.916026][ T51] ? do_raw_spin_unlock+0x50/0x50 [ 20.921325][ T51] ? _local_bh_enable+0x30/0x30 [ 20.926194][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.932692][ T51] ? ndisc_constructor+0x690/0x8a0 [ 20.938158][ T51] ? _raw_write_unlock_bh+0x31/0x47 [ 20.943867][ T51] ? dev_hard_header+0xdb/0xf0 [ 20.948718][ T51] dev_queue_xmit+0x17/0x20 [ 20.953348][ T51] neigh_connected_output+0x288/0x2b0 [ 20.959428][ T51] ip6_finish_output2+0xde2/0x1440 [ 20.965377][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.970318][ T51] ? __ip6_finish_output+0x520/0x520 [ 20.976046][ T51] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.981748][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.988151][ T51] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.993421][ T51] __ip6_finish_output+0x3e4/0x520 [ 20.998633][ T51] ip6_finish_output+0x3f/0x220 [ 21.003478][ T51] ? ip6_output+0x1d3/0x4b0 [ 21.007959][ T51] ip6_output+0x1f8/0x4b0 [ 21.012434][ T51] ? asan.module_dtor+0x20/0x20 [ 21.017267][ T51] ? skb_dst+0x40/0x40 [ 21.021321][ T51] ? __rcu_read_lock+0x50/0x50 [ 21.026106][ T51] ? selinux_ipv6_forward+0x50/0x50 [ 21.031292][ T51] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.037033][ T51] ? nf_hook_slow+0x150/0x1b0 [ 21.041976][ T51] NF_HOOK+0xdd/0x280 [ 21.045967][ T51] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.051840][ T51] ? NF_HOOK+0x280/0x280 [ 21.056087][ T51] ? __rcu_read_lock+0x50/0x50 [ 21.061110][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.067654][ T51] ? ndisc_send_skb+0x547/0x9f0 [ 21.072572][ T51] ? memcpy+0x56/0x70 [ 21.076723][ T51] ndisc_send_skb+0x646/0x9f0 [ 21.081468][ T51] ? slab_post_alloc_hook+0x90/0xa0 [ 21.086817][ T51] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.092537][ T51] ? skb_set_owner_w+0x1a8/0x310 [ 21.098090][ T51] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.104163][ T51] ? skb_put+0x11d/0x200 [ 21.108388][ T51] ndisc_send_rs+0x26c/0x360 [ 21.112962][ T51] addrconf_dad_completed+0x4f3/0x9f0 [ 21.118399][ T51] ? addrconf_dad_stop+0x430/0x430 [ 21.123571][ T51] ? mutex_unlock+0x34/0x40 [ 21.128106][ T51] addrconf_dad_work+0x9c1/0x1520 [ 21.133128][ T51] ? move_linked_works+0x118/0x130 [ 21.138414][ T51] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.144361][ T51] ? __kasan_check_write+0x14/0x20 [ 21.150273][ T51] process_one_work+0x3ca/0x660 [ 21.155542][ T51] worker_thread+0x709/0xa20 2021/11/10 12:34:48 building call list... [ 21.160814][ T51] ? __kthread_parkme+0x11b/0x150 [ 21.165926][ T51] kthread+0x371/0x390 [ 21.170026][ T51] ? pr_cont_work+0x110/0x110 [ 21.174694][ T51] ? __list_add+0xc0/0xc0 [ 21.179140][ T51] ret_from_fork+0x1f/0x30 [ 21.183742][ T51] ================================================================================ [ 21.201145][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.771739][ T7] device bridge_slave_1 left promiscuous mode [ 21.778168][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.786521][ T7] device bridge_slave_0 left promiscuous mode [ 21.792784][ T7] bridge0: port 1(bridge_slave_0) entered disabled state