[ 6.513801][ T23] audit: type=1400 audit(1636547672.499:70): avc: denied { read } for pid=255 comm="getty" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 6.904737][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 13.327028][ T23] audit: type=1400 audit(1636547679.329:71): avc: denied { transition } for pid=290 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.333288][ T23] audit: type=1400 audit(1636547679.329:72): avc: denied { write } for pid=290 comm="sh" path="pipe:[11565]" dev="pipefs" ino=11565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 13.496252][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 14.624593][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. 2021/11/10 12:34:46 fuzzer started 2021/11/10 12:34:46 connecting to host at 10.128.0.163:40805 2021/11/10 12:34:46 checking machine... 2021/11/10 12:34:46 checking revisions... 2021/11/10 12:34:46 testing simple program... [ 20.550500][ T23] audit: type=1400 audit(1636547686.549:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.574337][ T23] audit: type=1400 audit(1636547686.549:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.580921][ T370] cgroup: Unknown subsys name 'net' [ 20.596087][ T23] audit: type=1400 audit(1636547686.549:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.624230][ T23] audit: type=1400 audit(1636547686.549:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.624437][ T370] cgroup: Unknown subsys name 'devices' [ 20.646977][ T23] audit: type=1400 audit(1636547686.549:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.675986][ T23] audit: type=1400 audit(1636547686.569:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.698608][ T23] audit: type=1400 audit(1636547686.569:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.720962][ T23] audit: type=1400 audit(1636547686.599:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.876220][ T370] cgroup: Unknown subsys name 'hugetlb' [ 20.882081][ T370] cgroup: Unknown subsys name 'rlimit' [ 20.985989][ T23] audit: type=1400 audit(1636547686.989:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.010172][ T23] audit: type=1400 audit(1636547687.009:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.088147][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.095563][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.103177][ T373] device bridge_slave_0 entered promiscuous mode [ 21.110325][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.117591][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.125311][ T373] device bridge_slave_1 entered promiscuous mode [ 21.158943][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.166201][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.173728][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.180867][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.199501][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.207384][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.215186][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.222839][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.231835][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.240744][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.248239][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.265640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.273818][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.280972][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.288790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.297468][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.306848][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.325017][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.333657][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.335162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 21.342592][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.359137][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.370980][ T108] ================================================================================ [ 21.374779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 21.380583][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 21.397737][ T108] member access within address ffffc90000ae71c0 with insufficient space [ 21.406076][ T108] for an object of type 'struct sk_buff' [ 21.411790][ T108] CPU: 1 PID: 108 Comm: kworker/1:2 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 21.421757][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.431924][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.437892][ T108] Call Trace: [ 21.441168][ T108] dump_stack_lvl+0x1e2/0x24b [ 21.445835][ T108] ? show_regs_print_info+0x18/0x18 [ 21.451008][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.456703][ T108] dump_stack+0x15/0x1d [ 21.460860][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.466642][ T108] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 21.472527][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.478922][ T108] wg_xmit+0x4a2/0xae0 [ 21.483064][ T108] ? wg_stop+0x140/0x140 [ 21.487292][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.494028][ T108] netdev_start_xmit+0x8a/0x160 [ 21.498929][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 21.504045][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.509124][ T108] ? dev_queue_xmit+0x20/0x20 [ 21.513978][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 21.519556][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 21.524590][ T108] ? _local_bh_enable+0x30/0x30 [ 21.529620][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.536137][ T108] ? ndisc_constructor+0x690/0x8a0 [ 21.541338][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 21.546517][ T108] ? dev_hard_header+0xdb/0xf0 [ 21.551438][ T108] dev_queue_xmit+0x17/0x20 [ 21.556268][ T108] neigh_connected_output+0x288/0x2b0 [ 21.561965][ T108] ip6_finish_output2+0xde2/0x1440 [ 21.567148][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.571897][ T108] ? __ip6_finish_output+0x520/0x520 [ 21.577156][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.583025][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.589243][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.594085][ T108] __ip6_finish_output+0x3e4/0x520 [ 21.599177][ T108] ip6_finish_output+0x3f/0x220 [ 21.604003][ T108] ? ip6_output+0x1d3/0x4b0 [ 21.608588][ T108] ip6_output+0x1f8/0x4b0 [ 21.613078][ T108] ? asan.module_dtor+0x20/0x20 [ 21.618087][ T108] ? skb_dst+0x40/0x40 [ 21.622133][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.626873][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 21.632082][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.637885][ T108] ? nf_hook_slow+0x150/0x1b0 [ 21.643556][ T108] NF_HOOK+0xdd/0x280 [ 21.647524][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.653324][ T108] ? NF_HOOK+0x280/0x280 [ 21.657855][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.662712][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.669134][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 21.673980][ T108] ? memcpy+0x56/0x70 [ 21.677956][ T108] ndisc_send_skb+0x646/0x9f0 [ 21.682624][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 21.687801][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.693334][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 21.698272][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.704152][ T108] ? skb_put+0x11d/0x200 [ 21.708499][ T108] ndisc_send_rs+0x26c/0x360 [ 21.713084][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 21.718576][ T108] ? addrconf_dad_stop+0x430/0x430 [ 21.724365][ T108] ? switch_mm_irqs_off+0x2dd/0x720 [ 21.729639][ T108] addrconf_dad_work+0x9c1/0x1520 [ 21.734994][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.740693][ T108] ? __kasan_check_write+0x14/0x20 [ 21.745993][ T108] process_one_work+0x3ca/0x660 [ 21.751143][ T108] worker_thread+0x709/0xa20 [ 21.756179][ T108] ? __kthread_parkme+0x11b/0x150 [ 21.761527][ T108] kthread+0x371/0x390 [ 21.765566][ T108] ? pr_cont_work+0x110/0x110 [ 21.770487][ T108] ? __list_add+0xc0/0xc0 [ 21.774816][ T108] ret_from_fork+0x1f/0x30 [ 21.779368][ T108] ================================================================================ [ 21.788775][ T108] ================================================================================ [ 21.798200][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 21.806103][ T108] member access within address ffffc90000ae71c0 with insufficient space [ 21.814849][ T108] for an object of type 'struct sk_buff' [ 21.820789][ T108] CPU: 1 PID: 108 Comm: kworker/1:2 Not tainted 5.10.78-syzkaller-01155-gbb235e8cc2b6 #0 [ 21.831113][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.844013][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.850178][ T108] Call Trace: [ 21.853464][ T108] dump_stack_lvl+0x1e2/0x24b [ 21.858124][ T108] ? show_regs_print_info+0x18/0x18 [ 21.863319][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.869021][ T108] dump_stack+0x15/0x1d [ 21.873157][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.878859][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.884835][ T108] wg_xmit+0x513/0xae0 [ 21.888993][ T108] ? wg_stop+0x140/0x140 [ 21.893237][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.899470][ T108] netdev_start_xmit+0x8a/0x160 [ 21.904308][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 21.909421][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.914352][ T108] ? dev_queue_xmit+0x20/0x20 [ 21.919027][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 21.924297][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 21.929500][ T108] ? _local_bh_enable+0x30/0x30 [ 21.934339][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.940686][ T108] ? ndisc_constructor+0x690/0x8a0 [ 21.945917][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 21.951105][ T108] ? dev_hard_header+0xdb/0xf0 [ 21.955871][ T108] dev_queue_xmit+0x17/0x20 [ 21.960353][ T108] neigh_connected_output+0x288/0x2b0 [ 21.965702][ T108] ip6_finish_output2+0xde2/0x1440 [ 21.970805][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.975679][ T108] ? __ip6_finish_output+0x520/0x520 [ 21.981363][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.986899][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.993119][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.997951][ T108] __ip6_finish_output+0x3e4/0x520 [ 22.003055][ T108] ip6_finish_output+0x3f/0x220 [ 22.007881][ T108] ? ip6_output+0x1d3/0x4b0 [ 22.012468][ T108] ip6_output+0x1f8/0x4b0 [ 22.016882][ T108] ? asan.module_dtor+0x20/0x20 [ 22.021710][ T108] ? skb_dst+0x40/0x40 [ 22.025766][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.030522][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 22.035698][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.041415][ T108] ? nf_hook_slow+0x150/0x1b0 [ 22.046219][ T108] NF_HOOK+0xdd/0x280 [ 22.050192][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.055804][ T108] ? NF_HOOK+0x280/0x280 [ 22.060025][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.064960][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.071236][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 22.076230][ T108] ? memcpy+0x56/0x70 [ 22.080215][ T108] ndisc_send_skb+0x646/0x9f0 [ 22.085056][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 22.090311][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.096289][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 22.101363][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.107071][ T108] ? skb_put+0x11d/0x200 [ 22.111294][ T108] ndisc_send_rs+0x26c/0x360 [ 22.115863][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 22.121404][ T108] ? addrconf_dad_stop+0x430/0x430 [ 22.126508][ T108] ? switch_mm_irqs_off+0x2dd/0x720 [ 22.131865][ T108] addrconf_dad_work+0x9c1/0x1520 [ 22.136880][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.142759][ T108] ? __kasan_check_write+0x14/0x20 [ 22.147905][ T108] process_one_work+0x3ca/0x660 [ 22.152746][ T108] worker_thread+0x709/0xa20 [ 22.157339][ T108] ? __kthread_parkme+0x11b/0x150 [ 22.162356][ T108] kthread+0x371/0x390 [ 22.166411][ T108] ? pr_cont_work+0x110/0x110 [ 22.171242][ T108] ? __list_add+0xc0/0xc0 2021/11/10 12:34:48 building call list... [ 22.175738][ T108] ret_from_fork+0x1f/0x30 [ 22.180183][ T108] ================================================================================ [ 22.195233][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.764969][ T177] device bridge_slave_1 left promiscuous mode [ 22.771424][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.779389][ T177] device bridge_slave_0 left promiscuous mode [ 22.785796][ T177] bridge0: port 1(bridge_slave_0) entered disabled state