UBSAN: object-size-mismatch in wg_xmit IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready ================================================================================ UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2085:28 member access within address ffffc90000927140 with insufficient space for an object of type 'struct sk_buff' CPU: 0 PID: 69 Comm: kworker/0:2 Not tainted 5.16.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106 dump_stack+0x15/0x17 lib/dump_stack.c:113 ubsan_epilogue lib/ubsan.c:151 [inline] handle_object_size_mismatch lib/ubsan.c:232 [inline] ubsan_type_mismatch_common+0x1e9/0x390 lib/ubsan.c:245 __ubsan_handle_type_mismatch_v1+0x4b/0x60 lib/ubsan.c:274 __skb_queue_before include/linux/skbuff.h:2085 [inline] __skb_queue_tail include/linux/skbuff.h:2118 [inline] wg_xmit+0x502/0xae0 drivers/net/wireguard/device.c:185 __netdev_start_xmit include/linux/netdevice.h:4994 [inline] netdev_start_xmit+0x8a/0x160 include/linux/netdevice.h:5008 xmit_one net/core/dev.c:3590 [inline] dev_hard_start_xmit+0x18d/0x2f0 net/core/dev.c:3606 __dev_queue_xmit+0x1273/0x2110 net/core/dev.c:4229 dev_queue_xmit+0x17/0x20 net/core/dev.c:4262 neigh_connected_output+0x288/0x2b0 net/core/neighbour.c:1552 neigh_output include/net/neighbour.h:527 [inline] ip6_finish_output2+0xb23/0x10c0 net/ipv6/ip6_output.c:126 __ip6_finish_output+0x3e6/0x530 net/ipv6/ip6_output.c:191 ip6_finish_output+0x20b/0x220 net/ipv6/ip6_output.c:201 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x1f8/0x4a0 net/ipv6/ip6_output.c:224 dst_output include/net/dst.h:450 [inline] NF_HOOK+0xdd/0x280 include/linux/netfilter.h:307 ndisc_send_skb+0x6b6/0xaa0 net/ipv6/ndisc.c:508 ndisc_send_rs+0x26c/0x360 net/ipv6/ndisc.c:702 addrconf_dad_completed+0x543/0xa70 net/ipv6/addrconf.c:4216 addrconf_dad_work+0xbdf/0x1440 process_one_work+0x405/0x6c0 kernel/workqueue.c:2298 worker_thread+0x6fd/0xa80 kernel/workqueue.c:2445 kthread+0x372/0x450 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 ================================================================================ ================================================================================ UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1978:2 member access within address ffffc90000927140 with insufficient space for an object of type 'struct sk_buff' CPU: 0 PID: 69 Comm: kworker/0:2 Not tainted 5.16.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106 dump_stack+0x15/0x17 lib/dump_stack.c:113 ubsan_epilogue lib/ubsan.c:151 [inline] handle_object_size_mismatch lib/ubsan.c:232 [inline] ubsan_type_mismatch_common+0x1e9/0x390 lib/ubsan.c:245 __ubsan_handle_type_mismatch_v1+0x4b/0x60 lib/ubsan.c:274 __skb_insert include/linux/skbuff.h:1978 [inline] __skb_queue_before include/linux/skbuff.h:2085 [inline] __skb_queue_tail include/linux/skbuff.h:2118 [inline] wg_xmit+0x573/0xae0 drivers/net/wireguard/device.c:185 __netdev_start_xmit include/linux/netdevice.h:4994 [inline] netdev_start_xmit+0x8a/0x160 include/linux/netdevice.h:5008 xmit_one net/core/dev.c:3590 [inline] dev_hard_start_xmit+0x18d/0x2f0 net/core/dev.c:3606 __dev_queue_xmit+0x1273/0x2110 net/core/dev.c:4229 dev_queue_xmit+0x17/0x20 net/core/dev.c:4262 neigh_connected_output+0x288/0x2b0 net/core/neighbour.c:1552 neigh_output include/net/neighbour.h:527 [inline] ip6_finish_output2+0xb23/0x10c0 net/ipv6/ip6_output.c:126 __ip6_finish_output+0x3e6/0x530 net/ipv6/ip6_output.c:191 ip6_finish_output+0x20b/0x220 net/ipv6/ip6_output.c:201 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x1f8/0x4a0 net/ipv6/ip6_output.c:224 dst_output include/net/dst.h:450 [inline] NF_HOOK+0xdd/0x280 include/linux/netfilter.h:307 ndisc_send_skb+0x6b6/0xaa0 net/ipv6/ndisc.c:508 ndisc_send_rs+0x26c/0x360 net/ipv6/ndisc.c:702 addrconf_dad_completed+0x543/0xa70 net/ipv6/addrconf.c:4216 addrconf_dad_work+0xbdf/0x1440 process_one_work+0x405/0x6c0 kernel/workqueue.c:2298 worker_thread+0x6fd/0xa80 kernel/workqueue.c:2445 kthread+0x372/0x450 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 ================================================================================ [ 4.082312][ T199] RDX: 0000000000000013 RSI: 00005629def74748 RDI: 0000000000000003 [ 4.083489][ T199] RBP: 000000000000001e R08: 000000000000001e R09: 0030312e322e332d [ 4.084604][ T199] R10: 00007fff95c49004 R11: 0000000000000246 R12: 00007fff95c48ed0 [ 4.085756][ T199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000007 [ 4.086882][ T199] [ 4.089020][ T199] ================================================================================ [ 4.513181][ T217] dhcpcd (217) used greatest stack depth: 23144 bytes left [ 14.328551][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 14.328570][ T28] audit: type=1400 audit(1669439876.290:60): avc: denied { transition } for pid=321 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.333208][ T28] audit: type=1400 audit(1669439876.290:61): avc: denied { write } for pid=321 comm="sh" path="pipe:[282]" dev="pipefs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2022/11/26 05:18:02 fuzzer started 2022/11/26 05:18:03 connecting to host at 10.128.0.163:42605 2022/11/26 05:18:03 checking machine... 2022/11/26 05:18:03 checking revisions... 2022/11/26 05:18:03 testing simple program... [ 21.233906][ T28] audit: type=1400 audit(1669439883.190:62): avc: denied { getattr } for pid=400 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.247312][ T408] cgroup: Unknown subsys name 'net' [ 21.257757][ T28] audit: type=1400 audit(1669439883.190:63): avc: denied { read } for pid=400 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.284028][ T28] audit: type=1400 audit(1669439883.190:64): avc: denied { open } for pid=400 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.284225][ T408] cgroup: Unknown subsys name 'devices' [ 21.307752][ T28] audit: type=1400 audit(1669439883.190:65): avc: denied { read } for pid=400 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.336267][ T28] audit: type=1400 audit(1669439883.190:66): avc: denied { open } for pid=400 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.361510][ T28] audit: type=1400 audit(1669439883.190:67): avc: denied { mounton } for pid=408 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.385131][ T28] audit: type=1400 audit(1669439883.190:68): avc: denied { mount } for pid=408 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.409284][ T28] audit: type=1400 audit(1669439883.220:69): avc: denied { unmount } for pid=408 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.518050][ T408] cgroup: Unknown subsys name 'hugetlb' [ 21.523636][ T408] cgroup: Unknown subsys name 'rlimit' [ 21.617462][ T28] audit: type=1400 audit(1669439883.580:70): avc: denied { setattr } for pid=408 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.650693][ T28] audit: type=1400 audit(1669439883.610:71): avc: denied { execmem } for pid=411 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.697181][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.704026][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.711456][ T412] device bridge_slave_0 entered promiscuous mode [ 21.718229][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.725169][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.732730][ T412] device bridge_slave_1 entered promiscuous mode [ 21.766418][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.773311][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.780535][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.787758][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.806045][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.813311][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.820720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.829068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.837931][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.846225][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.853224][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.864532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.872957][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.879841][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.887249][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.902561][ T412] device veth0_vlan entered promiscuous mode [ 21.909276][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.917571][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.925319][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.933046][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.941414][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.953111][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.962060][ T412] device veth1_macvtap entered promiscuous mode [ 21.973735][ T69] ================================================================================ [ 21.983125][ T69] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2085:28 [ 21.990819][ T69] member access within address ffffc90000927140 with insufficient space [ 21.999063][ T69] for an object of type 'struct sk_buff' [ 22.004500][ T69] CPU: 0 PID: 69 Comm: kworker/0:2 Not tainted 5.16.0-rc4-syzkaller #0 [ 22.012568][ T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 22.022971][ T69] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.028808][ T69] Call Trace: [ 22.031995][ T69] [ 22.034782][ T69] dump_stack_lvl+0x151/0x1b7 [ 22.039402][ T69] ? bfq_pos_tree_add_move+0x439/0x439 [ 22.044766][ T69] ? lookup+0x388/0x3d0 [ 22.048834][ T69] dump_stack+0x15/0x17 [ 22.052852][ T69] ubsan_type_mismatch_common+0x1e9/0x390 [ 22.058413][ T69] __ubsan_handle_type_mismatch_v1+0x4b/0x60 [ 22.064392][ T69] wg_xmit+0x502/0xae0 [ 22.068298][ T69] ? wg_stop+0x5d0/0x5d0 [ 22.072365][ T69] netdev_start_xmit+0x8a/0x160 [ 22.077057][ T69] dev_hard_start_xmit+0x18d/0x2f0 [ 22.082010][ T69] __dev_queue_xmit+0x1273/0x2110 [ 22.087915][ T69] ? dev_queue_xmit+0x20/0x20 [ 22.092415][ T69] ? __kasan_check_write+0x14/0x20 [ 22.097470][ T69] ? _raw_write_lock_bh+0xa3/0x170 [ 22.102416][ T69] ? _raw_write_lock_irq+0x170/0x170 [ 22.108134][ T69] ? __kasan_check_write+0x14/0x20 [ 22.113085][ T69] ? ndisc_constructor+0x653/0x850 [ 22.118022][ T69] ? __local_bh_enable_ip+0x58/0x80 [ 22.123059][ T69] ? _raw_write_unlock_bh+0x31/0x47 [ 22.128237][ T69] ? ___neigh_create+0x17b3/0x1c30 [ 22.134049][ T69] ? dev_hard_header+0xdb/0xf0 [ 22.138645][ T69] dev_queue_xmit+0x17/0x20 [ 22.143074][ T69] neigh_connected_output+0x288/0x2b0 [ 22.148548][ T69] ip6_finish_output2+0xb23/0x10c0 [ 22.153681][ T69] ? __ip6_finish_output+0x530/0x530 [ 22.159372][ T69] ? ip6_mtu+0xd8/0x120 [ 22.163551][ T69] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.168360][ T69] __ip6_finish_output+0x3e6/0x530 [ 22.173300][ T69] ip6_finish_output+0x20b/0x220 [ 22.178073][ T69] ? ip6_output+0x1d3/0x4a0 [ 22.182425][ T69] ip6_output+0x1f8/0x4a0 [ 22.186672][ T69] ? xfrm_pols_put+0x102/0x110 [ 22.191256][ T69] ? ac6_get_next+0x2a0/0x2a0 [ 22.195916][ T69] ? ip6_dst_idev+0x40/0x40 [ 22.200291][ T69] ? selinux_ip_forward+0x7f0/0x7f0 [ 22.205416][ T69] NF_HOOK+0xdd/0x280 [ 22.209236][ T69] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.214787][ T69] ? NF_HOOK+0x280/0x280 [ 22.218780][ T69] ? xfrm_lookup+0x38/0x50 [ 22.223115][ T69] ? ndisc_send_skb+0x5b7/0xaa0 [ 22.228111][ T69] ? memcpy+0x56/0x70 [ 22.231968][ T69] ndisc_send_skb+0x6b6/0xaa0 [ 22.236548][ T69] ? ndisc_fill_addr_option+0x320/0x320 [ 22.242044][ T69] ? __kasan_check_write+0x14/0x20 [ 22.247454][ T69] ? skb_set_owner_w+0x1b8/0x330 [ 22.252339][ T69] ? skb_put+0x119/0x200 [ 22.257230][ T69] ndisc_send_rs+0x26c/0x360 [ 22.261639][ T69] addrconf_dad_completed+0x543/0xa70 [ 22.266943][ T69] ? addrconf_dad_stop+0x480/0x480 [ 22.271890][ T69] addrconf_dad_work+0xbdf/0x1440 [ 22.276762][ T69] ? INIT_LIST_HEAD+0x60/0x60 [ 22.281342][ T69] ? __kasan_check_write+0x14/0x20 [ 22.286294][ T69] process_one_work+0x405/0x6c0 [ 22.291510][ T69] worker_thread+0x6fd/0xa80 [ 22.296286][ T69] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 22.301632][ T69] ? __kthread_parkme+0x139/0x180 [ 22.306529][ T69] kthread+0x372/0x450 [ 22.310877][ T69] ? pr_cont_work+0x110/0x110 [ 22.315372][ T69] ? __list_add+0xc0/0xc0 [ 22.319544][ T69] ret_from_fork+0x1f/0x30 [ 22.323934][ T69] [ 22.326782][ T69] ================================================================================ [ 22.335861][ T69] ================================================================================ [ 22.345038][ T69] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1978:2 [ 22.352704][ T69] member access within address ffffc90000927140 with insufficient space [ 22.360920][ T69] for an object of type 'struct sk_buff' [ 22.366369][ T69] CPU: 0 PID: 69 Comm: kworker/0:2 Not tainted 5.16.0-rc4-syzkaller #0 [ 22.374477][ T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 22.384537][ T69] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.390336][ T69] Call Trace: [ 22.393549][ T69] [ 22.396313][ T69] dump_stack_lvl+0x151/0x1b7 [ 22.401271][ T69] ? bfq_pos_tree_add_move+0x439/0x439 [ 22.406648][ T69] ? lookup+0x388/0x3d0 [ 22.410761][ T69] dump_stack+0x15/0x17 [ 22.415364][ T69] ubsan_type_mismatch_common+0x1e9/0x390 [ 22.421037][ T69] __ubsan_handle_type_mismatch_v1+0x4b/0x60 [ 22.427032][ T69] wg_xmit+0x573/0xae0 [ 22.431107][ T69] ? wg_stop+0x5d0/0x5d0 [ 22.435161][ T69] netdev_start_xmit+0x8a/0x160 [ 22.439865][ T69] dev_hard_start_xmit+0x18d/0x2f0 [ 22.444909][ T69] __dev_queue_xmit+0x1273/0x2110 [ 22.449925][ T69] ? dev_queue_xmit+0x20/0x20 [ 22.454603][ T69] ? __kasan_check_write+0x14/0x20 [ 22.459633][ T69] ? _raw_write_lock_bh+0xa3/0x170 [ 22.464580][ T69] ? _raw_write_lock_irq+0x170/0x170 [ 22.469984][ T69] ? __kasan_check_write+0x14/0x20 [ 22.474945][ T69] ? ndisc_constructor+0x653/0x850 [ 22.479880][ T69] ? __local_bh_enable_ip+0x58/0x80 [ 22.484924][ T69] ? _raw_write_unlock_bh+0x31/0x47 [ 22.490275][ T69] ? ___neigh_create+0x17b3/0x1c30 [ 22.495466][ T69] ? dev_hard_header+0xdb/0xf0 [ 22.500475][ T69] dev_queue_xmit+0x17/0x20 [ 22.505173][ T69] neigh_connected_output+0x288/0x2b0 [ 22.510474][ T69] ip6_finish_output2+0xb23/0x10c0 [ 22.515540][ T69] ? __ip6_finish_output+0x530/0x530 [ 22.520912][ T69] ? ip6_mtu+0xd8/0x120 [ 22.525077][ T69] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.529917][ T69] __ip6_finish_output+0x3e6/0x530 [ 22.535236][ T69] ip6_finish_output+0x20b/0x220 [ 22.540226][ T69] ? ip6_output+0x1d3/0x4a0 [ 22.544631][ T69] ip6_output+0x1f8/0x4a0 [ 22.548872][ T69] ? xfrm_pols_put+0x102/0x110 [ 22.553545][ T69] ? ac6_get_next+0x2a0/0x2a0 [ 22.558235][ T69] ? ip6_dst_idev+0x40/0x40 [ 22.562693][ T69] ? selinux_ip_forward+0x7f0/0x7f0 [ 22.567910][ T69] NF_HOOK+0xdd/0x280 [ 22.571721][ T69] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.577287][ T69] ? NF_HOOK+0x280/0x280 [ 22.581388][ T69] ? xfrm_lookup+0x38/0x50 [ 22.585633][ T69] ? ndisc_send_skb+0x5b7/0xaa0 [ 22.590317][ T69] ? memcpy+0x56/0x70 [ 22.594224][ T69] ndisc_send_skb+0x6b6/0xaa0 [ 22.598736][ T69] ? ndisc_fill_addr_option+0x320/0x320 [ 22.604195][ T69] ? __kasan_check_write+0x14/0x20 [ 22.609278][ T69] ? skb_set_owner_w+0x1b8/0x330 [ 22.614315][ T69] ? skb_put+0x119/0x200 [ 22.618458][ T69] ndisc_send_rs+0x26c/0x360 [ 22.622895][ T69] addrconf_dad_completed+0x543/0xa70 [ 22.628458][ T69] ? addrconf_dad_stop+0x480/0x480 [ 22.633594][ T69] addrconf_dad_work+0xbdf/0x1440 [ 22.638455][ T69] ? INIT_LIST_HEAD+0x60/0x60 [ 22.642954][ T69] ? __kasan_check_write+0x14/0x20 [ 22.647996][ T69] process_one_work+0x405/0x6c0 [ 22.652699][ T69] worker_thread+0x6fd/0xa80 [ 22.657112][ T69] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 22.665271][ T69] ? __kthread_parkme+0x139/0x180 2022/11/26 05:18:04 building call list... [ 22.670228][ T69] kthread+0x372/0x450 [ 22.674130][ T69] ? pr_cont_work+0x110/0x110 [ 22.678727][ T69] ? __list_add+0xc0/0xc0 [ 22.682891][ T69] ret_from_fork+0x1f/0x30 [ 22.687143][ T69] [ 22.690051][ T69] ================================================================================ [ 22.699714][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.707977][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.797087][ T412] syz-executor.0 (412) used greatest stack depth: 21640 bytes left [ 23.267579][ T7] device bridge_slave_1 left promiscuous mode [ 23.273843][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.283141][ T7] device bridge_slave_0 left promiscuous mode [ 23.289278][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.297773][ T7] device veth1_macvtap left promiscuous mode [ 23.303707][ T7] device veth0_vlan left promiscuous mode syzkaller build log: go env (err=) GO111MODULE="auto" GOARCH="amd64" GOBIN="" GOCACHE="/syzkaller/.cache/go-build" GOENV="/syzkaller/.config/go/env" GOEXE="" GOEXPERIMENT="" GOFLAGS="" GOHOSTARCH="amd64" GOHOSTOS="linux" GOINSECURE="" GOMODCACHE="/syzkaller/jobs/linux/gopath/pkg/mod" GONOPROXY="" GONOSUMDB="" GOOS="linux" GOPATH="/syzkaller/jobs/linux/gopath" GOPRIVATE="" GOPROXY="https://proxy.golang.org,direct" GOROOT="/usr/local/go" GOSUMDB="sum.golang.org" GOTMPDIR="" GOTOOLDIR="/usr/local/go/pkg/tool/linux_amd64" GOVCS="" GOVERSION="go1.17" GCCGO="gccgo" AR="ar" CC="gcc" CXX="g++" CGO_ENABLED="1" GOMOD="/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod" CGO_CFLAGS="-g -O2" CGO_CPPFLAGS="" CGO_CXXFLAGS="-g -O2" CGO_FFLAGS="-g -O2" CGO_LDFLAGS="-g -O2" PKG_CONFIG="pkg-config" GOGCCFLAGS="-fPIC -m64 -pthread -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build2012801252=/tmp/go-build -gno-record-gcc-switches" git status (err=) HEAD detached at 9da37ae85 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:32: run command via tools/syz-env for best compatibility, see: Makefile:33: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=9da37ae85383e0dda5fc114ec808909f72fe038d -X 'github.com/google/syzkaller/prog.gitRevisionDate=20221122-120757'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=9da37ae85383e0dda5fc114ec808909f72fe038d -X 'github.com/google/syzkaller/prog.gitRevisionDate=20221122-120757'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=9da37ae85383e0dda5fc114ec808909f72fe038d -X 'github.com/google/syzkaller/prog.gitRevisionDate=20221122-120757'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress mkdir -p ./bin/linux_amd64 gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"9da37ae85383e0dda5fc114ec808909f72fe038d\"