Starting sshd: OK
syzkaller
syzkaller login: [ 12.022079][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!!
[ 12.256699][ T23] kauditd_printk_skb: 60 callbacks suppressed
[ 12.256710][ T23] audit: type=1400 audit(1637244057.020:71): avc: denied { transition } for pid=289 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 12.285895][ T23] audit: type=1400 audit(1637244057.020:72): avc: denied { write } for pid=289 comm="sh" path="pipe:[10824]" dev="pipefs" ino=10824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1
[ 13.172969][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!!
Warning: Permanently added '10.128.1.103' (ECDSA) to the list of known hosts.
2021/11/18 14:01:04 fuzzer started
2021/11/18 14:01:04 connecting to host at 10.128.0.163:38319
2021/11/18 14:01:04 checking machine...
2021/11/18 14:01:04 checking revisions...
2021/11/18 14:01:04 testing simple program...
[ 19.574017][ T23] audit: type=1400 audit(1637244064.340:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 19.591627][ T371] cgroup: Unknown subsys name 'net'
[ 19.598892][ T23] audit: type=1400 audit(1637244064.340:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 19.625612][ T23] audit: type=1400 audit(1637244064.340:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 19.625827][ T371] cgroup: Unknown subsys name 'devices'
[ 19.649617][ T23] audit: type=1400 audit(1637244064.340:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 19.678423][ T23] audit: type=1400 audit(1637244064.340:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 19.701974][ T23] audit: type=1400 audit(1637244064.340:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 19.725116][ T23] audit: type=1400 audit(1637244064.340:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 19.747582][ T23] audit: type=1400 audit(1637244064.380:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 19.853903][ T371] cgroup: Unknown subsys name 'hugetlb'
[ 19.859962][ T371] cgroup: Unknown subsys name 'rlimit'
[ 20.113241][ T23] audit: type=1400 audit(1637244064.880:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 20.136792][ T23] audit: type=1400 audit(1637244064.910:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 20.224109][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 20.231146][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 20.238718][ T374] device bridge_slave_0 entered promiscuous mode
[ 20.245613][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 20.252742][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 20.260082][ T374] device bridge_slave_1 entered promiscuous mode
[ 20.293284][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 20.300508][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 20.307922][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 20.314988][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 20.333877][ T372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 20.341426][ T372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 20.349023][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 20.357064][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 20.373231][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 20.381727][ T19] bridge0: port 1(bridge_slave_0) entered blocking state
[ 20.388944][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 20.396351][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 20.406129][ T19] bridge0: port 2(bridge_slave_1) entered blocking state
[ 20.413215][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 20.420576][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 20.429105][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 20.441926][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 20.462818][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 20.471156][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 20.480652][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 20.488891][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 20.497900][ T77] ================================================================================
[ 20.507508][ T77] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28
[ 20.515417][ T77] member access within address ffffc900002bf1c0 with insufficient space
[ 20.523831][ T77] for an object of type 'struct sk_buff'
[ 20.529496][ T77] CPU: 0 PID: 77 Comm: kworker/0:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0
[ 20.539203][ T77] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 20.549284][ T77] Workqueue: ipv6_addrconf addrconf_dad_work
[ 20.555429][ T77] Call Trace:
[ 20.558982][ T77] dump_stack_lvl+0x1e2/0x24b
[ 20.563685][ T77] ? show_regs_print_info+0x18/0x18
[ 20.568864][ T77] ? wg_allowedips_lookup_dst+0x190/0x190
[ 20.574578][ T77] dump_stack+0x15/0x1d
[ 20.578749][ T77] ubsan_type_mismatch_common+0x1ed/0x3a0
[ 20.584500][ T77] ? __sanitizer_cov_trace_switch+0x74/0x90
[ 20.590382][ T77] __ubsan_handle_type_mismatch_v1+0x5b/0x70
[ 20.596432][ T77] wg_xmit+0x4a2/0xae0
[ 20.600488][ T77] ? wg_stop+0x140/0x140
[ 20.604708][ T77] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20
[ 20.610935][ T77] netdev_start_xmit+0x8a/0x160
[ 20.615762][ T77] dev_hard_start_xmit+0x18d/0x2f0
[ 20.620847][ T77] __dev_queue_xmit+0xfbe/0x1bb0
[ 20.625784][ T77] ? dev_queue_xmit+0x20/0x20
[ 20.630631][ T77] ? __local_bh_enable_ip+0xa8/0x170
[ 20.635904][ T77] ? do_raw_spin_unlock+0x50/0x50
[ 20.640909][ T77] ? _local_bh_enable+0x30/0x30
[ 20.645744][ T77] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20
[ 20.651996][ T77] ? ndisc_constructor+0x690/0x8a0
[ 20.657114][ T77] ? _raw_write_unlock_bh+0x31/0x47
[ 20.662302][ T77] ? dev_hard_header+0xdb/0xf0
[ 20.667150][ T77] dev_queue_xmit+0x17/0x20
[ 20.671646][ T77] neigh_connected_output+0x288/0x2b0
[ 20.677044][ T77] ip6_finish_output2+0xde2/0x1440
[ 20.682228][ T77] ? __rcu_read_lock+0x50/0x50
[ 20.687064][ T77] ? __ip6_finish_output+0x520/0x520
[ 20.692326][ T77] ? dst_cow_metrics_generic+0x55/0x1d0
[ 20.697853][ T77] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20
[ 20.704168][ T77] ? ip6_skb_dst_mtu+0xaf/0x260
[ 20.709002][ T77] __ip6_finish_output+0x3e4/0x520
[ 20.714101][ T77] ip6_finish_output+0x3f/0x220
[ 20.718936][ T77] ? ip6_output+0x1d3/0x4b0
[ 20.723465][ T77] ip6_output+0x1f8/0x4b0
[ 20.727802][ T77] ? asan.module_dtor+0x20/0x20
[ 20.732739][ T77] ? skb_dst+0x40/0x40
[ 20.736970][ T77] ? __rcu_read_lock+0x50/0x50
[ 20.741824][ T77] ? selinux_ipv6_forward+0x50/0x50
[ 20.747084][ T77] ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 20.752924][ T77] ? nf_hook_slow+0x150/0x1b0
[ 20.757604][ T77] NF_HOOK+0xdd/0x280
[ 20.761578][ T77] ? addrconf_addr_solict_mult+0xe0/0xe0
[ 20.767200][ T77] ? NF_HOOK+0x280/0x280
[ 20.771579][ T77] ? __rcu_read_lock+0x50/0x50
[ 20.776433][ T77] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20
[ 20.782680][ T77] ? ndisc_send_skb+0x547/0x9f0
[ 20.787711][ T77] ? memcpy+0x56/0x70
[ 20.791768][ T77] ndisc_send_skb+0x646/0x9f0
[ 20.796518][ T77] ? slab_post_alloc_hook+0x90/0xa0
[ 20.801817][ T77] ? ndisc_fill_addr_option+0x2f0/0x2f0
[ 20.807422][ T77] ? skb_set_owner_w+0x1a8/0x310
[ 20.812476][ T77] ? __sanitizer_cov_trace_cmp4+0x19/0x20
[ 20.818180][ T77] ? skb_put+0x11d/0x200
[ 20.822401][ T77] ndisc_send_rs+0x26c/0x360
[ 20.826972][ T77] addrconf_dad_completed+0x4f3/0x9f0
[ 20.832405][ T77] ? addrconf_dad_stop+0x430/0x430
[ 20.837733][ T77] ? rcu_force_quiescent_state+0x180/0x180
[ 20.843548][ T77] addrconf_dad_work+0x9c1/0x1520
[ 20.848922][ T77] ? move_linked_works+0x118/0x130
[ 20.854032][ T77] ? ipv6_use_optimistic_addr+0x1d0/0x1d0
[ 20.859831][ T77] ? __kasan_check_write+0x14/0x20
[ 20.865256][ T77] process_one_work+0x3ca/0x660
[ 20.870103][ T77] worker_thread+0x709/0xa20
[ 20.874818][ T77] ? __kthread_parkme+0x11b/0x150
[ 20.879830][ T77] kthread+0x371/0x390
[ 20.883965][ T77] ? pr_cont_work+0x110/0x110
[ 20.888929][ T77] ? __list_add+0xc0/0xc0
[ 20.893239][ T77] ret_from_fork+0x1f/0x30
[ 20.897722][ T77] ================================================================================
[ 20.907018][ T77] ================================================================================
[ 20.916526][ T77] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2
[ 20.924525][ T77] member access within address ffffc900002bf1c0 with insufficient space
[ 20.933174][ T77] for an object of type 'struct sk_buff'
[ 20.938909][ T77] CPU: 0 PID: 77 Comm: kworker/0:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0
[ 20.948698][ T77] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 20.958902][ T77] Workqueue: ipv6_addrconf addrconf_dad_work
[ 20.964865][ T77] Call Trace:
[ 20.968142][ T77] dump_stack_lvl+0x1e2/0x24b
[ 20.972800][ T77] ? show_regs_print_info+0x18/0x18
[ 20.978101][ T77] ? wg_allowedips_lookup_dst+0x190/0x190
[ 20.983803][ T77] dump_stack+0x15/0x1d
[ 20.987938][ T77] ubsan_type_mismatch_common+0x1ed/0x3a0
[ 20.993642][ T77] __ubsan_handle_type_mismatch_v1+0x5b/0x70
[ 20.999598][ T77] wg_xmit+0x513/0xae0
[ 21.003749][ T77] ? wg_stop+0x140/0x140
[ 21.008271][ T77] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20
[ 21.014513][ T77] netdev_start_xmit+0x8a/0x160
[ 21.019348][ T77] dev_hard_start_xmit+0x18d/0x2f0
[ 21.024554][ T77] __dev_queue_xmit+0xfbe/0x1bb0
[ 21.029589][ T77] ? dev_queue_xmit+0x20/0x20
[ 21.034443][ T77] ? __local_bh_enable_ip+0xa8/0x170
[ 21.039719][ T77] ? do_raw_spin_unlock+0x50/0x50
[ 21.044961][ T77] ? _local_bh_enable+0x30/0x30
[ 21.049803][ T77] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20
[ 21.056273][ T77] ? ndisc_constructor+0x690/0x8a0
[ 21.061362][ T77] ? _raw_write_unlock_bh+0x31/0x47
[ 21.066540][ T77] ? dev_hard_header+0xdb/0xf0
[ 21.071281][ T77] dev_queue_xmit+0x17/0x20
[ 21.075865][ T77] neigh_connected_output+0x288/0x2b0
[ 21.081231][ T77] ip6_finish_output2+0xde2/0x1440
[ 21.086346][ T77] ? __rcu_read_lock+0x50/0x50
[ 21.091619][ T77] ? __ip6_finish_output+0x520/0x520
[ 21.096890][ T77] ? dst_cow_metrics_generic+0x55/0x1d0
[ 21.102421][ T77] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20
[ 21.108636][ T77] ? ip6_skb_dst_mtu+0xaf/0x260
[ 21.113685][ T77] __ip6_finish_output+0x3e4/0x520
[ 21.118785][ T77] ip6_finish_output+0x3f/0x220
[ 21.123609][ T77] ? ip6_output+0x1d3/0x4b0
[ 21.128371][ T77] ip6_output+0x1f8/0x4b0
[ 21.132680][ T77] ? asan.module_dtor+0x20/0x20
[ 21.137522][ T77] ? skb_dst+0x40/0x40
[ 21.141676][ T77] ? __rcu_read_lock+0x50/0x50
[ 21.146439][ T77] ? selinux_ipv6_forward+0x50/0x50
[ 21.151886][ T77] ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 21.157627][ T77] ? nf_hook_slow+0x150/0x1b0
[ 21.162400][ T77] NF_HOOK+0xdd/0x280
[ 21.166404][ T77] ? addrconf_addr_solict_mult+0xe0/0xe0
[ 21.172038][ T77] ? NF_HOOK+0x280/0x280
[ 21.176271][ T77] ? __rcu_read_lock+0x50/0x50
[ 21.181120][ T77] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20
[ 21.187392][ T77] ? ndisc_send_skb+0x547/0x9f0
[ 21.192234][ T77] ? memcpy+0x56/0x70
[ 21.196210][ T77] ndisc_send_skb+0x646/0x9f0
[ 21.201072][ T77] ? slab_post_alloc_hook+0x90/0xa0
[ 21.206372][ T77] ? ndisc_fill_addr_option+0x2f0/0x2f0
[ 21.211956][ T77] ? skb_set_owner_w+0x1a8/0x310
[ 21.216891][ T77] ? __sanitizer_cov_trace_cmp4+0x19/0x20
[ 21.222593][ T77] ? skb_put+0x11d/0x200
[ 21.226827][ T77] ndisc_send_rs+0x26c/0x360
[ 21.231512][ T77] addrconf_dad_completed+0x4f3/0x9f0
[ 21.236959][ T77] ? addrconf_dad_stop+0x430/0x430
[ 21.242260][ T77] ? rcu_force_quiescent_state+0x180/0x180
[ 21.248305][ T77] addrconf_dad_work+0x9c1/0x1520
[ 21.253321][ T77] ? move_linked_works+0x118/0x130
[ 21.258437][ T77] ? ipv6_use_optimistic_addr+0x1d0/0x1d0
[ 21.264141][ T77] ? __kasan_check_write+0x14/0x20
[ 21.269246][ T77] process_one_work+0x3ca/0x660
[ 21.274190][ T77] worker_thread+0x709/0xa20
[ 21.278773][ T77] ? __kthread_parkme+0x11b/0x150
[ 21.283783][ T77] kthread+0x371/0x390
[ 21.287903][ T77] ? pr_cont_work+0x110/0x110
[ 21.292614][ T77] ? __list_add+0xc0/0xc0
2021/11/18 14:01:06 building call list...
[ 21.296963][ T77] ret_from_fork+0x1f/0x30
[ 21.301450][ T77] ================================================================================
[ 21.321939][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[ 21.922351][ T177] device bridge_slave_1 left promiscuous mode
[ 21.928695][ T177] bridge0: port 2(bridge_slave_1) entered disabled state
[ 21.936603][ T177] device bridge_slave_0 left promiscuous mode
[ 21.943121][ T177] bridge0: port 1(bridge_slave_0) entered disabled state