BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe 2024/03/28 17:53:11 SYZFATAL: BUG: program execution failed: executor 0: failed to write control pipe: write |1: broken pipe SYZFAIL: arptable checkpoint: getsockopt(ARPT_SO_GET_INFO) failed table=filter (errno 22: Invalid argument) loop exited with status 67 Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. 2024/03/28 17:53:09 ignoring optional flag "pprof_port"="0" 2024/03/28 17:53:09 ignoring optional flag "reset_acc_state"="false" 2024/03/28 17:53:09 fuzzer started 2024/03/28 17:53:09 connecting to host at 10.128.0.163:37037 2024/03/28 17:53:09 checking machine... 2024/03/28 17:53:09 checking revisions... 2024/03/28 17:53:09 testing simple program... [ 26.547673][ T29] audit: type=1400 audit(1711648389.690:66): avc: denied { getattr } for pid=281 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.572673][ T29] audit: type=1400 audit(1711648389.720:67): avc: denied { read } for pid=281 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.594509][ T29] audit: type=1400 audit(1711648389.720:68): avc: denied { open } for pid=281 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.598735][ T290] cgroup: Unknown subsys name 'net' [ 26.618228][ T29] audit: type=1400 audit(1711648389.730:69): avc: denied { read } for pid=281 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.646144][ T29] audit: type=1400 audit(1711648389.730:70): avc: denied { open } for pid=281 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.646406][ T290] cgroup: Unknown subsys name 'devices' [ 26.669563][ T29] audit: type=1400 audit(1711648389.740:71): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.697531][ T29] audit: type=1400 audit(1711648389.740:72): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.720876][ T29] audit: type=1400 audit(1711648389.770:73): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.827004][ T290] cgroup: Unknown subsys name 'hugetlb' [ 26.832756][ T290] cgroup: Unknown subsys name 'rlimit' [ 26.925502][ T29] audit: type=1400 audit(1711648390.070:74): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.966993][ T29] audit: type=1400 audit(1711648390.110:75): avc: denied { execmem } for pid=292 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.132631][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.139525][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.146489][ T293] bridge_slave_0: entered allmulticast mode [ 27.152904][ T293] bridge_slave_0: entered promiscuous mode [ 27.159745][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.166878][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.173904][ T293] bridge_slave_1: entered allmulticast mode [ 27.180158][ T293] bridge_slave_1: entered promiscuous mode [ 27.266025][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.273069][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.280696][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.287593][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.320671][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.328215][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.344020][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.350899][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.358680][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.366292][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.398882][ T293] veth0_vlan: entered promiscuous mode [ 27.415697][ T293] veth1_macvtap: entered promiscuous mode [ 27.445914][ T293] ------------[ cut here ]------------ [ 27.451286][ T293] WARNING: CPU: 1 PID: 293 at net/netfilter/core.c:316 nf_hook_entry_head+0x150/0x210 [ 27.460772][ T293] Modules linked in: [ 27.464799][ T293] CPU: 1 PID: 293 Comm: syz-executor.0 Tainted: G W 6.9.0-rc1-syzkaller-00061-g8d025e2092e2 #0 [ 27.478345][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 27.488945][ T293] RIP: 0010:nf_hook_entry_head+0x150/0x210 [ 27.494880][ T293] Code: 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 55 05 73 fd 4c 39 33 0f 84 8b 00 00 00 e8 87 40 21 fd eb 61 e8 80 40 21 fd <0f> 0b eb 5a bf 01 00 00 00 44 89 e6 e8 af 44 21 fd 41 83 fc 01 75 [ 27.514818][ T293] RSP: 0018:ffffc90001027410 EFLAGS: 00010293 [ 27.520929][ T293] RAX: ffffffff845bec30 RBX: 0000000000000003 RCX: ffff88811ebf8000 [ 27.528781][ T293] RDX: 0000000000000000 RSI: ffffffff86f9c6b0 RDI: 0000000000000003 [ 27.536870][ T293] RBP: ffffc90001027430 R08: 0000000000000005 R09: ffffffff845beb09 [ 27.545002][ T293] R10: 0000000000000004 R11: ffff88811ebf8000 R12: 0000000000000000 [ 27.552939][ T293] R13: dffffc0000000000 R14: ffff888122500000 R15: 0000000000000000 [ 27.560941][ T293] FS: 0000555572bfe480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.569959][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.576692][ T293] CR2: 00007f42e45754a8 CR3: 000000011b6f4000 CR4: 00000000003506b0 [ 27.584559][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.592445][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.600329][ T293] Call Trace: [ 27.603512][ T293] [ 27.606237][ T293] ? show_regs+0x88/0xa0 [ 27.610450][ T293] ? __warn+0x165/0x3e0 [ 27.615224][ T293] ? nf_hook_entry_head+0x150/0x210 [ 27.621209][ T293] ? report_bug+0x4d9/0x750 [ 27.626379][ T293] ? nf_hook_entry_head+0x150/0x210 [ 27.631611][ T293] ? handle_bug+0x41/0x70 [ 27.636315][ T293] ? exc_invalid_op+0x1f/0x50 [ 27.641782][ T293] ? asm_exc_invalid_op+0x1f/0x30 [ 27.646957][ T293] ? nf_hook_entry_head+0x29/0x210 [ 27.651907][ T293] ? nf_hook_entry_head+0x150/0x210 [ 27.656974][ T293] ? nf_hook_entry_head+0x150/0x210 [ 27.662148][ T293] __nf_register_net_hook+0x1cc/0x810 [ 27.667403][ T293] ? __kasan_kmalloc+0x9d/0xb0 [ 27.672058][ T293] nf_register_net_hook+0xba/0x1a0 [ 27.677318][ T293] nf_register_net_hooks+0x48/0x1b0 [ 27.682415][ T293] arpt_register_table+0x65b/0x770 [ 27.687494][ T293] ? __pfx_arpt_register_table+0x10/0x10 [ 27.693448][ T293] ? arpt_alloc_initial_table+0x1ba/0xc80 [ 27.699039][ T293] ? arpt_alloc_initial_table+0x1ba/0xc80 [ 27.704809][ T293] ? arpt_alloc_initial_table+0x651/0xc80 [ 27.710424][ T293] ? arpt_alloc_initial_table+0x6b8/0xc80 [ 27.716289][ T293] arptable_filter_table_init+0x45/0x70 [ 27.721904][ T293] xt_find_table_lock+0x328/0x400 [ 27.726884][ T293] xt_request_find_table_lock+0x2b/0x100 [ 27.733572][ T293] do_arpt_get_ctl+0x7aa/0x1510 [ 27.738233][ T293] ? _raw_spin_unlock_bh+0x54/0x60 [ 27.744332][ T293] ? release_sock+0x24b/0x2b0 [ 27.748776][ T293] ? __pfx_do_arpt_get_ctl+0x10/0x10 [ 27.753967][ T293] ? sockopt_release_sock+0x5c/0x70 [ 27.759187][ T293] ? do_ip_getsockopt+0x1659/0x26e0 [ 27.764259][ T293] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 27.770478][ T293] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 27.775715][ T293] ? memcg_rstat_updated+0x80/0x300 [ 27.780837][ T293] ? __mod_memcg_lruvec_state+0x11f/0x170 [ 27.786536][ T293] ? folio_remove_rmap_ptes+0x59/0x2b0 [ 27.791768][ T293] ? free_swap_cache+0x7a/0x1d0 [ 27.796584][ T293] ? mutex_lock+0xba/0x130 [ 27.800792][ T293] ? mutex_unlock+0xa6/0x110 [ 27.805597][ T293] ? __kasan_check_write+0x18/0x20 [ 27.810516][ T293] ? mutex_unlock+0xa6/0x110 [ 27.815183][ T293] ? __pfx_mutex_unlock+0x10/0x10 [ 27.820067][ T293] ? avc_has_perm_noaudit+0x277/0x2e0 [ 27.825324][ T293] ? try_module_get+0xe3/0x240 [ 27.830090][ T293] nf_getsockopt+0x277/0x2a0 [ 27.835101][ T293] ip_getsockopt+0x1e5/0x290 [ 27.839618][ T293] ? __pfx_ip_getsockopt+0x10/0x10 [ 27.844933][ T293] ? selinux_socket_getsockopt+0x2b5/0x3e0 [ 27.850617][ T293] tcp_getsockopt+0x163/0x1c0 [ 27.855268][ T293] ? __count_memcg_events+0x95/0xf0 [ 27.860526][ T293] ? __pfx_tcp_getsockopt+0x10/0x10 [ 27.865689][ T293] sock_common_getsockopt+0xa0/0xc0 [ 27.871017][ T293] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 27.876789][ T293] do_sock_getsockopt+0x373/0x850 [ 27.882263][ T293] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 27.887861][ T293] ? __fdget+0x58/0x200 [ 27.892080][ T293] ? __kasan_check_read+0x15/0x20 [ 27.896974][ T293] __sys_getsockopt+0x1da/0x2b0 [ 27.901711][ T293] ? __pfx___sys_getsockopt+0x10/0x10 [ 27.907053][ T293] ? fpregs_assert_state_consistent+0xbb/0xf0 [ 27.913046][ T293] __x64_sys_getsockopt+0xc3/0xe0 [ 27.918420][ T293] do_syscall_64+0x62/0x100 [ 27.922687][ T293] entry_SYSCALL_64_after_hwframe+0x6c/0x74 [ 27.928580][ T293] RIP: 0033:0x7f42e447e47a [ 27.932928][ T293] Code: c4 c1 e0 1a 0d 00 00 04 00 89 01 e9 e0 fe ff ff e8 3b 05 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 b0 ff ff ff f7 [ 27.952542][ T293] RSP: 002b:00007ffff70e13b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 27.960816][ T293] RAX: ffffffffffffffda RBX: 00007f42e45754a8 RCX: 00007f42e447e47a [ 27.969368][ T293] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 27.977308][ T293] RBP: 00007ffff70e13cc R08: 00007ffff70e13cc R09: 00007ffff70e1347 [ 27.985717][ T293] R10: 00007f42e45754a8 R11: 0000000000000246 R12: 0000000000000003 [ 27.994015][ T293] R13: 00007f42e4574120 R14: 0000000000000003 R15: 00007ffff70e1ae0 [ 28.002091][ T293] [ 28.004929][ T293] ---[ end trace 0000000000000000 ]--- 2024/03/28 17:53:11 SYZFATAL: BUG: program execution failed: executor 0: failed to write control pipe: write |1: broken pipe SYZFAIL: arptable checkpoint: getsockopt(ARPT_SO_GET_INFO) failed table=filter (errno 22: Invalid argument) loop exited with status 67 [ 28.043637][ T293] syz-executor.0 (293) used greatest stack depth: 20520 bytes left [ 28.053253][ T51] bridge_slave_1: left allmulticast mode [ 28.058725][ T51] bridge_slave_1: left promiscuous mode [ 28.064407][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.072676][ T51] bridge_slave_0: left allmulticast mode [ 28.078257][ T51] bridge_slave_0: left promiscuous mode [ 28.084507][ T51] bridge0: port 1(bridge_slave_0) entered disabled state syzkaller build log: go env (err=) GO111MODULE='auto' GOARCH='amd64' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFLAGS='' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs-2/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/usr/local/go' GOSUMDB='sum.golang.org' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.21.4' GCCGO='gccgo' GOAMD64='v1' AR='ar' CC='gcc' CXX='g++' CGO_ENABLED='1' GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod' GOWORK='' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' PKG_CONFIG='pkg-config' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build2236594132=/tmp/go-build -gno-record-gcc-switches' git status (err=) HEAD detached at 5205ef306 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:32: run command via tools/syz-env for best compatibility, see: Makefile:33: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=5205ef306e8b4217fc49cb8d8bd18670b7d08c3c -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230310-074518'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=5205ef306e8b4217fc49cb8d8bd18670b7d08c3c -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230310-074518'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=5205ef306e8b4217fc49cb8d8bd18670b7d08c3c -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230310-074518'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress mkdir -p ./bin/linux_amd64 gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"5205ef306e8b4217fc49cb8d8bd18670b7d08c3c\"