Starting sshd: OK syzkaller syzkaller login: [ 10.912987][ T1626] rm (1626) used greatest stack depth: 11880 bytes left [ 10.978836][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 10.978849][ T24] audit: type=1400 audit(1648607054.558:72): avc: denied { transition } for pid=1627 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 10.985971][ T24] audit: type=1400 audit(1648607054.558:73): avc: denied { write } for pid=1627 comm="sh" path="pipe:[574]" dev="pipefs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 11.594477][ T1628] sshd (1628) used greatest stack depth: 11864 bytes left Warning: Permanently added '10.128.10.22' (ECDSA) to the list of known hosts. 2022/03/30 02:24:20 fuzzer started [ 17.292233][ T1705] sed (1705) used greatest stack depth: 11432 bytes left 2022/03/30 02:24:21 connecting to host at 10.128.0.163:41377 2022/03/30 02:24:21 checking machine... 2022/03/30 02:24:21 checking revisions... 2022/03/30 02:24:21 testing simple program... [ 17.722099][ T24] audit: type=1400 audit(1648607061.298:74): avc: denied { getattr } for pid=1706 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 17.738120][ T1779] cgroup: Unknown subsys name 'net' [ 17.746011][ T24] audit: type=1400 audit(1648607061.298:75): avc: denied { read } for pid=1706 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 17.772748][ T24] audit: type=1400 audit(1648607061.298:76): avc: denied { open } for pid=1706 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 17.796371][ T24] audit: type=1400 audit(1648607061.318:77): avc: denied { mounton } for pid=1779 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.819796][ T24] audit: type=1400 audit(1648607061.318:78): avc: denied { mount } for pid=1779 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.842061][ T24] audit: type=1400 audit(1648607061.338:79): avc: denied { unmount } for pid=1779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.842387][ T1779] cgroup: Unknown subsys name 'devices' [ 17.867746][ T1779] cgroup: Unknown subsys name 'blkio' [ 17.957013][ T1779] cgroup: Unknown subsys name 'hugetlb' [ 17.962675][ T1779] cgroup: Unknown subsys name 'rlimit' [ 18.089971][ T24] audit: type=1400 audit(1648607061.668:80): avc: denied { execmem } for pid=1781 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.111313][ T24] audit: type=1400 audit(1648607061.688:81): avc: denied { mounton } for pid=1782 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 18.133722][ T24] audit: type=1400 audit(1648607061.698:82): avc: denied { module_request } for pid=1782 comm="syz-executor.0" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 18.155997][ T24] audit: type=1400 audit(1648607061.698:83): avc: denied { sys_module } for pid=1782 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 18.211488][ T1782] chnl_net:caif_netlink_parms(): no params data found [ 18.239992][ T1782] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.247236][ T1782] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.254900][ T1782] device bridge_slave_0 entered promiscuous mode [ 18.262399][ T1782] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.269545][ T1782] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.277323][ T1782] device bridge_slave_1 entered promiscuous mode [ 18.291978][ T1782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 18.301959][ T1782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 18.319119][ T1782] team0: Port device team_slave_0 added [ 18.325498][ T1782] team0: Port device team_slave_1 added [ 18.339619][ T1782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 18.346599][ T1782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 18.372614][ T1782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 18.383603][ T1782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 18.390570][ T1782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 18.416984][ T1782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 18.438259][ T1782] device hsr_slave_0 entered promiscuous mode [ 18.444847][ T1782] device hsr_slave_1 entered promiscuous mode [ 18.502573][ T1782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 18.511575][ T1782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 18.520348][ T1782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 18.529582][ T1782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 18.542797][ T1782] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.549875][ T1782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.557129][ T1782] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.564328][ T1782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.591640][ T1782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 18.601716][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 18.609899][ T1798] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.618386][ T1798] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.627136][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 18.637333][ T1782] 8021q: adding VLAN 0 to HW filter on device team0 [ 18.647480][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 18.655975][ T1799] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.663077][ T1799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 18.679650][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 18.688590][ T1795] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.695961][ T1795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 18.705232][ T1795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 18.719390][ T1782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 18.730051][ T1782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 18.744010][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 18.752549][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 18.761818][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 18.770491][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 18.784729][ T1782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 18.792421][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 18.799944][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 18.807392][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 18.852994][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 18.891828][ T1782] device veth0_vlan entered promiscuous mode [ 18.899121][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 18.908498][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 18.916545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 18.926209][ T1782] device veth1_vlan entered promiscuous mode [ 18.938515][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 18.946732][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 18.955101][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 18.964784][ T1782] device veth0_macvtap entered promiscuous mode [ 18.973033][ T1782] device veth1_macvtap entered promiscuous mode [ 18.984618][ T1782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 18.992272][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.001517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 19.011387][ T1782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 19.019093][ T1799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.028977][ T1782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 19.037710][ T1782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 19.046478][ T1782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 19.055241][ T1782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 19.121299][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 21.968171][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2022/03/30 02:24:25 BUG: program execution failed: executor 0: failed to write control pipe: write |1: broken pipe SYZFAIL: control pipe write failed (errno 9: Bad file descriptor) loop exited with status 67