Warning: Permanently added '10.128.10.63' (ECDSA) to the list of known hosts. [ 21.455639][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! 2021/11/19 11:01:22 fuzzer started 2021/11/19 11:01:22 connecting to host at 10.128.0.163:43003 2021/11/19 11:01:22 checking machine... 2021/11/19 11:01:22 checking revisions... 2021/11/19 11:01:22 testing simple program... [ 21.752832][ T23] audit: type=1400 audit(1637319682.920:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.768808][ T370] cgroup: Unknown subsys name 'net' [ 21.776642][ T23] audit: type=1400 audit(1637319682.920:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.802423][ T23] audit: type=1400 audit(1637319682.920:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.802601][ T370] cgroup: Unknown subsys name 'devices' [ 21.825640][ T23] audit: type=1400 audit(1637319682.920:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.853818][ T23] audit: type=1400 audit(1637319682.920:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.877121][ T23] audit: type=1400 audit(1637319682.920:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.899733][ T23] audit: type=1400 audit(1637319682.920:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.921845][ T23] audit: type=1400 audit(1637319682.950:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.097110][ T370] cgroup: Unknown subsys name 'hugetlb' [ 22.102774][ T370] cgroup: Unknown subsys name 'rlimit' [ 22.196801][ T23] audit: type=1400 audit(1637319683.370:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.236612][ T23] audit: type=1400 audit(1637319683.410:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.314745][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.321863][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.329386][ T374] device bridge_slave_0 entered promiscuous mode [ 22.336359][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.343509][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.351200][ T374] device bridge_slave_1 entered promiscuous mode [ 22.383451][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.390510][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.397790][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.404798][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.424075][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.431439][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.439061][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.446607][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.455171][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.463627][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.470723][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.480508][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.488775][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.495894][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.507782][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.525773][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.534067][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.542572][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.552125][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.567167][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.575801][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.586237][ T24] ================================================================================ [ 22.595537][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 22.603324][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 22.611665][ T24] for an object of type 'struct sk_buff' [ 22.617299][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01226-g706ebf15a1f9 #0 [ 22.626997][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.637052][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.643093][ T24] Call Trace: [ 22.646359][ T24] dump_stack_lvl+0x1e2/0x24b [ 22.651015][ T24] ? show_regs_print_info+0x18/0x18 [ 22.656209][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 22.661909][ T24] dump_stack+0x15/0x1d [ 22.666044][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.671739][ T24] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 22.677614][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.683614][ T24] wg_xmit+0x4a2/0xae0 [ 22.687690][ T24] ? wg_stop+0x140/0x140 [ 22.692002][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 22.698214][ T24] netdev_start_xmit+0x8a/0x160 [ 22.703037][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 22.708122][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 22.713035][ T24] ? dev_queue_xmit+0x20/0x20 [ 22.717701][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 22.722956][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 22.727964][ T24] ? _local_bh_enable+0x30/0x30 [ 22.732786][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.739008][ T24] ? ndisc_constructor+0x690/0x8a0 [ 22.744093][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 22.749265][ T24] ? dev_hard_header+0xdb/0xf0 [ 22.754002][ T24] dev_queue_xmit+0x17/0x20 [ 22.758492][ T24] neigh_connected_output+0x288/0x2b0 [ 22.763840][ T24] ip6_finish_output2+0xde2/0x1440 [ 22.768928][ T24] ? __rcu_read_lock+0x50/0x50 [ 22.773664][ T24] ? __ip6_finish_output+0x520/0x520 [ 22.778924][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.784442][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.790660][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.795496][ T24] __ip6_finish_output+0x3e4/0x520 [ 22.800577][ T24] ip6_finish_output+0x3f/0x220 [ 22.805407][ T24] ? ip6_output+0x1d3/0x4b0 [ 22.809890][ T24] ip6_output+0x1f8/0x4b0 [ 22.814194][ T24] ? asan.module_dtor+0x20/0x20 [ 22.819027][ T24] ? skb_dst+0x40/0x40 [ 22.823066][ T24] ? __rcu_read_lock+0x50/0x50 [ 22.827803][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 22.832986][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.838689][ T24] ? nf_hook_slow+0x150/0x1b0 [ 22.843339][ T24] NF_HOOK+0xdd/0x280 [ 22.847298][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.852901][ T24] ? NF_HOOK+0x280/0x280 [ 22.857115][ T24] ? __rcu_read_lock+0x50/0x50 [ 22.861850][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.868080][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 22.872901][ T24] ? memcpy+0x56/0x70 [ 22.876873][ T24] ndisc_send_skb+0x646/0x9f0 [ 22.881523][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 22.886692][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.892207][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 22.897117][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.902805][ T24] ? skb_put+0x11d/0x200 [ 22.907019][ T24] ndisc_send_rs+0x26c/0x360 [ 22.911579][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 22.916921][ T24] ? addrconf_dad_stop+0x430/0x430 [ 22.922004][ T24] ? mutex_unlock+0x34/0x40 [ 22.926482][ T24] addrconf_dad_work+0x9c1/0x1520 [ 22.931479][ T24] ? move_linked_works+0x118/0x130 [ 22.936562][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.942257][ T24] ? __kasan_check_write+0x14/0x20 [ 22.947345][ T24] process_one_work+0x3ca/0x660 [ 22.952167][ T24] worker_thread+0x709/0xa20 [ 22.956729][ T24] ? __kthread_parkme+0x11b/0x150 [ 22.961724][ T24] kthread+0x371/0x390 [ 22.965767][ T24] ? pr_cont_work+0x110/0x110 [ 22.970425][ T24] ? __list_add+0xc0/0xc0 [ 22.974735][ T24] ret_from_fork+0x1f/0x30 [ 22.979176][ T24] ================================================================================ [ 22.988452][ T24] ================================================================================ [ 22.997753][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 23.005473][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 23.013816][ T24] for an object of type 'struct sk_buff' [ 23.019448][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01226-g706ebf15a1f9 #0 [ 23.029131][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.039164][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 23.045112][ T24] Call Trace: [ 23.048375][ T24] dump_stack_lvl+0x1e2/0x24b [ 23.053022][ T24] ? show_regs_print_info+0x18/0x18 [ 23.058208][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 23.063896][ T24] dump_stack+0x15/0x1d [ 23.068911][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 23.074605][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 23.080559][ T24] wg_xmit+0x513/0xae0 [ 23.084600][ T24] ? wg_stop+0x140/0x140 [ 23.088821][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 23.095050][ T24] netdev_start_xmit+0x8a/0x160 [ 23.099875][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 23.104960][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 23.109872][ T24] ? dev_queue_xmit+0x20/0x20 [ 23.114525][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 23.119794][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 23.124789][ T24] ? _local_bh_enable+0x30/0x30 [ 23.129616][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.135830][ T24] ? ndisc_constructor+0x690/0x8a0 [ 23.140920][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 23.146090][ T24] ? dev_hard_header+0xdb/0xf0 [ 23.150848][ T24] dev_queue_xmit+0x17/0x20 [ 23.155325][ T24] neigh_connected_output+0x288/0x2b0 [ 23.160684][ T24] ip6_finish_output2+0xde2/0x1440 [ 23.165772][ T24] ? __rcu_read_lock+0x50/0x50 [ 23.170551][ T24] ? __ip6_finish_output+0x520/0x520 [ 23.175911][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 23.181429][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.187649][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 23.192474][ T24] __ip6_finish_output+0x3e4/0x520 [ 23.197558][ T24] ip6_finish_output+0x3f/0x220 [ 23.202390][ T24] ? ip6_output+0x1d3/0x4b0 [ 23.206865][ T24] ip6_output+0x1f8/0x4b0 [ 23.211167][ T24] ? asan.module_dtor+0x20/0x20 [ 23.215988][ T24] ? skb_dst+0x40/0x40 [ 23.220029][ T24] ? __rcu_read_lock+0x50/0x50 [ 23.224766][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 23.229941][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 23.235644][ T24] ? nf_hook_slow+0x150/0x1b0 [ 23.240293][ T24] NF_HOOK+0xdd/0x280 [ 23.244247][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 23.249854][ T24] ? NF_HOOK+0x280/0x280 [ 23.254067][ T24] ? __rcu_read_lock+0x50/0x50 [ 23.258803][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 23.265017][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 23.269856][ T24] ? memcpy+0x56/0x70 [ 23.273822][ T24] ndisc_send_skb+0x646/0x9f0 [ 23.278475][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 23.283647][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 23.289163][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 23.294077][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 23.299768][ T24] ? skb_put+0x11d/0x200 [ 23.303995][ T24] ndisc_send_rs+0x26c/0x360 [ 23.308572][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 23.313928][ T24] ? addrconf_dad_stop+0x430/0x430 [ 23.319012][ T24] ? mutex_unlock+0x34/0x40 [ 23.323488][ T24] addrconf_dad_work+0x9c1/0x1520 [ 23.328485][ T24] ? move_linked_works+0x118/0x130 [ 23.333570][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 23.339262][ T24] ? __kasan_check_write+0x14/0x20 [ 23.344345][ T24] process_one_work+0x3ca/0x660 [ 23.349169][ T24] worker_thread+0x709/0xa20 [ 23.353733][ T24] ? __kthread_parkme+0x11b/0x150 [ 23.358729][ T24] kthread+0x371/0x390 [ 23.362766][ T24] ? pr_cont_work+0x110/0x110 [ 23.367416][ T24] ? __list_add+0xc0/0xc0 [ 23.371717][ T24] ret_from_fork+0x1f/0x30 [ 23.376147][ T24] ================================================================================ 2021/11/19 11:01:24 building call list... [ 23.392736][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.905804][ T9] device bridge_slave_1 left promiscuous mode [ 23.911961][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.920045][ T9] device bridge_slave_0 left promiscuous mode [ 23.926314][ T9] bridge0: port 1(bridge_slave_0) entered disabled state