Warning: Permanently added '10.128.1.191' (ECDSA) to the list of known hosts. 2021/11/16 22:07:38 fuzzer started 2021/11/16 22:07:38 connecting to host at 10.128.0.163:43101 2021/11/16 22:07:38 checking machine... 2021/11/16 22:07:38 checking revisions... 2021/11/16 22:07:38 testing simple program... [ 20.332519][ T23] audit: type=1400 audit(1637100458.570:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.355862][ T23] audit: type=1400 audit(1637100458.570:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.368535][ T371] cgroup: Unknown subsys name 'net' [ 20.377017][ T23] audit: type=1400 audit(1637100458.570:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.405282][ T23] audit: type=1400 audit(1637100458.600:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.405518][ T371] cgroup: Unknown subsys name 'devices' [ 20.428219][ T23] audit: type=1400 audit(1637100458.600:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.456954][ T23] audit: type=1400 audit(1637100458.600:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.479866][ T23] audit: type=1400 audit(1637100458.600:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.502079][ T23] audit: type=1400 audit(1637100458.620:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.610975][ T371] cgroup: Unknown subsys name 'hugetlb' [ 20.616784][ T371] cgroup: Unknown subsys name 'rlimit' [ 20.710386][ T23] audit: type=1400 audit(1637100458.950:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.733564][ T23] audit: type=1400 audit(1637100458.970:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.810550][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.817685][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.825388][ T374] device bridge_slave_0 entered promiscuous mode [ 20.832388][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.839540][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.846855][ T374] device bridge_slave_1 entered promiscuous mode [ 20.876836][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.883883][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.891357][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.898373][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.916741][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.924130][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.932120][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.939697][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.960283][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.968600][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.976798][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.985151][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.992222][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.999623][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.007822][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.014867][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.022189][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.030335][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.042731][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.054337][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.072913][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.081590][ T24] ================================================================================ [ 21.091173][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 21.098952][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 21.107307][ T24] for an object of type 'struct sk_buff' [ 21.112951][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 21.122816][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.132869][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.138827][ T24] Call Trace: [ 21.142110][ T24] dump_stack_lvl+0x1e2/0x24b [ 21.146766][ T24] ? show_regs_print_info+0x18/0x18 [ 21.152024][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.157804][ T24] dump_stack+0x15/0x1d [ 21.161953][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.167806][ T24] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 21.173685][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.179735][ T24] wg_xmit+0x4a2/0xae0 [ 21.183870][ T24] ? wg_stop+0x140/0x140 [ 21.188104][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.194322][ T24] netdev_start_xmit+0x8a/0x160 [ 21.199160][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 21.204250][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.209164][ T24] ? dev_queue_xmit+0x20/0x20 [ 21.213821][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 21.219081][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 21.224094][ T24] ? _local_bh_enable+0x30/0x30 [ 21.228918][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.235136][ T24] ? ndisc_constructor+0x690/0x8a0 [ 21.240230][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 21.245601][ T24] ? dev_hard_header+0xdb/0xf0 [ 21.250429][ T24] dev_queue_xmit+0x17/0x20 [ 21.254906][ T24] neigh_connected_output+0x288/0x2b0 [ 21.260255][ T24] ip6_finish_output2+0xde2/0x1440 [ 21.265343][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.270087][ T24] ? __ip6_finish_output+0x520/0x520 [ 21.275344][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.280875][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.287094][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.291920][ T24] __ip6_finish_output+0x3e4/0x520 [ 21.297196][ T24] ip6_finish_output+0x3f/0x220 [ 21.302039][ T24] ? ip6_output+0x1d3/0x4b0 [ 21.306521][ T24] ip6_output+0x1f8/0x4b0 [ 21.310827][ T24] ? asan.module_dtor+0x20/0x20 [ 21.315670][ T24] ? skb_dst+0x40/0x40 [ 21.319725][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.324472][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 21.329675][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.335423][ T24] ? nf_hook_slow+0x150/0x1b0 [ 21.340084][ T24] NF_HOOK+0xdd/0x280 [ 21.344044][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.349668][ T24] ? NF_HOOK+0x280/0x280 [ 21.353885][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.358625][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.364850][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 21.369675][ T24] ? memcpy+0x56/0x70 [ 21.373640][ T24] ndisc_send_skb+0x646/0x9f0 [ 21.378297][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 21.383470][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.388990][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 21.393900][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.399590][ T24] ? skb_put+0x11d/0x200 [ 21.403810][ T24] ndisc_send_rs+0x26c/0x360 [ 21.408390][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 21.413735][ T24] ? addrconf_dad_stop+0x430/0x430 [ 21.418823][ T24] ? switch_mm_irqs_off+0x2dd/0x720 [ 21.423996][ T24] addrconf_dad_work+0x9c1/0x1520 [ 21.428998][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.434717][ T24] ? __kasan_check_write+0x14/0x20 [ 21.439804][ T24] process_one_work+0x3ca/0x660 [ 21.444634][ T24] worker_thread+0x709/0xa20 [ 21.449203][ T24] ? __kthread_parkme+0x11b/0x150 [ 21.454308][ T24] kthread+0x371/0x390 [ 21.458351][ T24] ? pr_cont_work+0x110/0x110 [ 21.463001][ T24] ? __list_add+0xc0/0xc0 [ 21.467305][ T24] ret_from_fork+0x1f/0x30 [ 21.471755][ T24] ================================================================================ [ 21.481058][ T24] ================================================================================ [ 21.490392][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 21.498184][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 21.506529][ T24] for an object of type 'struct sk_buff' [ 21.512163][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 21.521863][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.532009][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.537969][ T24] Call Trace: [ 21.541241][ T24] dump_stack_lvl+0x1e2/0x24b [ 21.546329][ T24] ? show_regs_print_info+0x18/0x18 [ 21.551511][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.557212][ T24] dump_stack+0x15/0x1d [ 21.561353][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.567051][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.573010][ T24] wg_xmit+0x513/0xae0 [ 21.577059][ T24] ? wg_stop+0x140/0x140 [ 21.581283][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.587509][ T24] netdev_start_xmit+0x8a/0x160 [ 21.592339][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 21.597430][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.602348][ T24] ? dev_queue_xmit+0x20/0x20 [ 21.607004][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 21.612265][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 21.617275][ T24] ? _local_bh_enable+0x30/0x30 [ 21.622110][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.628329][ T24] ? ndisc_constructor+0x690/0x8a0 [ 21.633432][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 21.638619][ T24] ? dev_hard_header+0xdb/0xf0 [ 21.643361][ T24] dev_queue_xmit+0x17/0x20 [ 21.647846][ T24] neigh_connected_output+0x288/0x2b0 [ 21.653199][ T24] ip6_finish_output2+0xde2/0x1440 [ 21.658289][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.663032][ T24] ? __ip6_finish_output+0x520/0x520 [ 21.668295][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.673845][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.680065][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.684895][ T24] __ip6_finish_output+0x3e4/0x520 [ 21.689986][ T24] ip6_finish_output+0x3f/0x220 [ 21.694814][ T24] ? ip6_output+0x1d3/0x4b0 [ 21.699314][ T24] ip6_output+0x1f8/0x4b0 [ 21.703624][ T24] ? asan.module_dtor+0x20/0x20 [ 21.708454][ T24] ? skb_dst+0x40/0x40 [ 21.712505][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.717267][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 21.722444][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.728172][ T24] ? nf_hook_slow+0x150/0x1b0 [ 21.732836][ T24] NF_HOOK+0xdd/0x280 [ 21.736824][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.742435][ T24] ? NF_HOOK+0x280/0x280 [ 21.746662][ T24] ? __rcu_read_lock+0x50/0x50 [ 21.751412][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.757822][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 21.762664][ T24] ? memcpy+0x56/0x70 [ 21.766643][ T24] ndisc_send_skb+0x646/0x9f0 [ 21.771319][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 21.776498][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.782039][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 21.786974][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.792674][ T24] ? skb_put+0x11d/0x200 [ 21.796896][ T24] ndisc_send_rs+0x26c/0x360 [ 21.801469][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 21.806820][ T24] ? addrconf_dad_stop+0x430/0x430 [ 21.811948][ T24] ? switch_mm_irqs_off+0x2dd/0x720 [ 21.817219][ T24] addrconf_dad_work+0x9c1/0x1520 [ 21.822223][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.827921][ T24] ? __kasan_check_write+0x14/0x20 [ 21.833009][ T24] process_one_work+0x3ca/0x660 [ 21.837841][ T24] worker_thread+0x709/0xa20 [ 21.842414][ T24] ? __kthread_parkme+0x11b/0x150 [ 21.847417][ T24] kthread+0x371/0x390 [ 21.851487][ T24] ? pr_cont_work+0x110/0x110 [ 21.856155][ T24] ? __list_add+0xc0/0xc0 [ 21.860470][ T24] ret_from_fork+0x1f/0x30 [ 21.864911][ T24] ================================================================================ 2021/11/16 22:07:40 building call list... [ 21.876262][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.399703][ T9] device bridge_slave_1 left promiscuous mode [ 22.406051][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.413644][ T9] device bridge_slave_0 left promiscuous mode [ 22.420179][ T9] bridge0: port 1(bridge_slave_0) entered disabled state