Warning: Permanently added '10.128.1.185' (ECDSA) to the list of known hosts. 2021/11/19 14:13:58 fuzzer started 2021/11/19 14:13:58 connecting to host at 10.128.0.163:41747 2021/11/19 14:13:58 checking machine... 2021/11/19 14:13:58 checking revisions... 2021/11/19 14:13:58 testing simple program... [ 20.371288][ T23] audit: type=1400 audit(1637331238.370:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.390162][ T370] cgroup: Unknown subsys name 'net' [ 20.394949][ T23] audit: type=1400 audit(1637331238.370:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.422156][ T23] audit: type=1400 audit(1637331238.370:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.422335][ T370] cgroup: Unknown subsys name 'devices' [ 20.445215][ T23] audit: type=1400 audit(1637331238.370:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.476816][ T23] audit: type=1400 audit(1637331238.370:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.500526][ T23] audit: type=1400 audit(1637331238.370:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.523617][ T23] audit: type=1400 audit(1637331238.370:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.545968][ T23] audit: type=1400 audit(1637331238.410:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.680562][ T370] cgroup: Unknown subsys name 'hugetlb' [ 20.686290][ T370] cgroup: Unknown subsys name 'rlimit' [ 20.810119][ T23] audit: type=1400 audit(1637331238.810:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.838119][ T23] audit: type=1400 audit(1637331238.830:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.914205][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.921476][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.928813][ T374] device bridge_slave_0 entered promiscuous mode [ 20.935968][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.943294][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.950805][ T374] device bridge_slave_1 entered promiscuous mode [ 20.983122][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.990186][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.997644][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.004782][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.022717][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.030309][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.037648][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.046071][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.059776][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.068052][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.075189][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.083187][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.091750][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.098928][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.106301][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.119522][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.128200][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.147106][ T108] ================================================================================ [ 21.157514][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 21.165462][ T108] member access within address ffffc90000b671c0 with insufficient space [ 21.173810][ T108] for an object of type 'struct sk_buff' [ 21.179557][ T108] CPU: 0 PID: 108 Comm: kworker/0:2 Not tainted 5.10.79-syzkaller-01226-g706ebf15a1f9 #0 [ 21.189429][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.199971][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.205934][ T108] Call Trace: [ 21.209520][ T108] dump_stack_lvl+0x1e2/0x24b [ 21.214179][ T108] ? show_regs_print_info+0x18/0x18 [ 21.219554][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.225453][ T108] dump_stack+0x15/0x1d [ 21.229775][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.235489][ T108] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 21.241386][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.247345][ T108] wg_xmit+0x4a2/0xae0 [ 21.251403][ T108] ? wg_stop+0x140/0x140 [ 21.255655][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.261891][ T108] netdev_start_xmit+0x8a/0x160 [ 21.266738][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 21.271849][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.277203][ T108] ? dev_queue_xmit+0x20/0x20 [ 21.281864][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 21.287129][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 21.292280][ T108] ? _local_bh_enable+0x30/0x30 [ 21.297153][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.303487][ T108] ? ndisc_constructor+0x690/0x8a0 [ 21.308596][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 21.313782][ T108] ? dev_hard_header+0xdb/0xf0 [ 21.318535][ T108] dev_queue_xmit+0x17/0x20 [ 21.323022][ T108] neigh_connected_output+0x288/0x2b0 [ 21.328655][ T108] ip6_finish_output2+0xde2/0x1440 [ 21.333750][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.338608][ T108] ? __ip6_finish_output+0x520/0x520 [ 21.343874][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.349584][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.356103][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.361027][ T108] __ip6_finish_output+0x3e4/0x520 [ 21.366258][ T108] ip6_finish_output+0x3f/0x220 [ 21.371275][ T108] ? ip6_output+0x1d3/0x4b0 [ 21.376300][ T108] ip6_output+0x1f8/0x4b0 [ 21.380609][ T108] ? asan.module_dtor+0x20/0x20 [ 21.385441][ T108] ? skb_dst+0x40/0x40 [ 21.389571][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.394329][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 21.399508][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.405220][ T108] ? nf_hook_slow+0x150/0x1b0 [ 21.409880][ T108] NF_HOOK+0xdd/0x280 [ 21.414037][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.419820][ T108] ? NF_HOOK+0x280/0x280 [ 21.424141][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.428895][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.435112][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 21.440213][ T108] ? memcpy+0x56/0x70 [ 21.444262][ T108] ndisc_send_skb+0x646/0x9f0 [ 21.449199][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 21.454378][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.460006][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 21.464941][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.470663][ T108] ? skb_put+0x11d/0x200 [ 21.474988][ T108] ndisc_send_rs+0x26c/0x360 [ 21.479653][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 21.485006][ T108] ? addrconf_dad_stop+0x430/0x430 [ 21.490100][ T108] addrconf_dad_work+0x9c1/0x1520 [ 21.495123][ T108] ? move_linked_works+0x118/0x130 [ 21.500234][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.505938][ T108] ? __kasan_check_write+0x14/0x20 [ 21.511125][ T108] process_one_work+0x3ca/0x660 [ 21.516056][ T108] worker_thread+0x709/0xa20 [ 21.520635][ T108] ? __kthread_parkme+0x11b/0x150 [ 21.525729][ T108] kthread+0x371/0x390 [ 21.529799][ T108] ? pr_cont_work+0x110/0x110 [ 21.534545][ T108] ? __list_add+0xc0/0xc0 [ 21.538886][ T108] ret_from_fork+0x1f/0x30 [ 21.543314][ T108] ================================================================================ [ 21.552691][ T108] ================================================================================ [ 21.562076][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 21.569806][ T108] member access within address ffffc90000b671c0 with insufficient space [ 21.578234][ T108] for an object of type 'struct sk_buff' [ 21.583916][ T108] CPU: 0 PID: 108 Comm: kworker/0:2 Not tainted 5.10.79-syzkaller-01226-g706ebf15a1f9 #0 [ 21.593708][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.604174][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.610142][ T108] Call Trace: [ 21.613422][ T108] dump_stack_lvl+0x1e2/0x24b [ 21.618084][ T108] ? show_regs_print_info+0x18/0x18 [ 21.623362][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.629182][ T108] dump_stack+0x15/0x1d [ 21.633324][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.639029][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.645089][ T108] wg_xmit+0x513/0xae0 [ 21.649144][ T108] ? wg_stop+0x140/0x140 [ 21.653373][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.659619][ T108] netdev_start_xmit+0x8a/0x160 [ 21.664460][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 21.669562][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.674547][ T108] ? dev_queue_xmit+0x20/0x20 [ 21.679263][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 21.684742][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 21.689754][ T108] ? _local_bh_enable+0x30/0x30 [ 21.694592][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.700990][ T108] ? ndisc_constructor+0x690/0x8a0 [ 21.706091][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 21.711270][ T108] ? dev_hard_header+0xdb/0xf0 [ 21.716022][ T108] dev_queue_xmit+0x17/0x20 [ 21.720524][ T108] neigh_connected_output+0x288/0x2b0 [ 21.726003][ T108] ip6_finish_output2+0xde2/0x1440 [ 21.731134][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.735899][ T108] ? __ip6_finish_output+0x520/0x520 [ 21.741548][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.747087][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.753320][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.758168][ T108] __ip6_finish_output+0x3e4/0x520 [ 21.763269][ T108] ip6_finish_output+0x3f/0x220 [ 21.768115][ T108] ? ip6_output+0x1d3/0x4b0 [ 21.772880][ T108] ip6_output+0x1f8/0x4b0 [ 21.777207][ T108] ? asan.module_dtor+0x20/0x20 [ 21.782051][ T108] ? skb_dst+0x40/0x40 [ 21.786566][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.791315][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 21.796587][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.802380][ T108] ? nf_hook_slow+0x150/0x1b0 [ 21.807146][ T108] NF_HOOK+0xdd/0x280 [ 21.811129][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.816742][ T108] ? NF_HOOK+0x280/0x280 [ 21.821676][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.826429][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.832754][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 21.837930][ T108] ? memcpy+0x56/0x70 [ 21.841907][ T108] ndisc_send_skb+0x646/0x9f0 [ 21.846666][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 21.852160][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.857703][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 21.862641][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.868356][ T108] ? skb_put+0x11d/0x200 [ 21.872675][ T108] ndisc_send_rs+0x26c/0x360 [ 21.877340][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 21.882705][ T108] ? addrconf_dad_stop+0x430/0x430 [ 21.887854][ T108] addrconf_dad_work+0x9c1/0x1520 [ 21.892989][ T108] ? move_linked_works+0x118/0x130 [ 21.898397][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.904112][ T108] ? __kasan_check_write+0x14/0x20 [ 21.909238][ T108] process_one_work+0x3ca/0x660 [ 21.914200][ T108] worker_thread+0x709/0xa20 [ 21.918793][ T108] ? __kthread_parkme+0x11b/0x150 [ 21.923819][ T108] kthread+0x371/0x390 [ 21.927887][ T108] ? pr_cont_work+0x110/0x110 [ 21.932581][ T108] ? __list_add+0xc0/0xc0 [ 21.937249][ T108] ret_from_fork+0x1f/0x30 [ 21.941741][ T108] ================================================================================ [ 21.952279][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.960716][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.969450][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.977379][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2021/11/19 14:14:00 building call list... [ 21.993604][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.559231][ T7] device bridge_slave_1 left promiscuous mode [ 22.565399][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.573543][ T7] device bridge_slave_0 left promiscuous mode [ 22.579876][ T7] bridge0: port 1(bridge_slave_0) entered disabled state