[ 16.280063][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! Warning: Permanently added '10.128.1.239' (ECDSA) to the list of known hosts. 2021/11/22 13:03:53 fuzzer started 2021/11/22 13:03:53 connecting to host at 10.128.0.163:41377 2021/11/22 13:03:53 checking machine... 2021/11/22 13:03:53 checking revisions... 2021/11/22 13:03:53 testing simple program... [ 19.321747][ T23] audit: type=1400 audit(1637586233.409:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.339609][ T370] cgroup: Unknown subsys name 'net' [ 19.350559][ T23] audit: type=1400 audit(1637586233.409:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.371716][ T23] audit: type=1400 audit(1637586233.409:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.371761][ T370] cgroup: Unknown subsys name 'devices' [ 19.396273][ T23] audit: type=1400 audit(1637586233.409:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.425078][ T23] audit: type=1400 audit(1637586233.409:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.449438][ T23] audit: type=1400 audit(1637586233.409:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.472543][ T23] audit: type=1400 audit(1637586233.409:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.494815][ T23] audit: type=1400 audit(1637586233.439:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.611564][ T370] cgroup: Unknown subsys name 'hugetlb' [ 19.617230][ T370] cgroup: Unknown subsys name 'rlimit' [ 19.710945][ T23] audit: type=1400 audit(1637586233.799:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.747154][ T23] audit: type=1400 audit(1637586233.829:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.826525][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.834451][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.842217][ T373] device bridge_slave_0 entered promiscuous mode [ 19.849050][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.856305][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.863740][ T373] device bridge_slave_1 entered promiscuous mode [ 19.893638][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.900793][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.908244][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.915293][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.934430][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.941873][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.949692][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.957575][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.966940][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.975379][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.982565][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.990116][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 20.000952][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.009143][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.016245][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.020392][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 20.040744][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.048662][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.059130][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.078102][ T51] ================================================================================ [ 20.080306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 20.087512][ T51] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 20.104403][ T51] member access within address ffffc9000020f1c0 with insufficient space [ 20.113335][ T51] for an object of type 'struct sk_buff' [ 20.119088][ T51] CPU: 0 PID: 51 Comm: kworker/0:1 Not tainted 5.10.81-syzkaller-01825-g4b644356291a #0 [ 20.128778][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.139006][ T51] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.144985][ T51] Call Trace: [ 20.148258][ T51] dump_stack_lvl+0x1e2/0x24b [ 20.152927][ T51] ? show_regs_print_info+0x18/0x18 [ 20.158099][ T51] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.163807][ T51] dump_stack+0x15/0x1d [ 20.167956][ T51] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.173656][ T51] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 20.179526][ T51] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.185478][ T51] wg_xmit+0x4a2/0xae0 [ 20.189923][ T51] ? wg_stop+0x140/0x140 [ 20.194159][ T51] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.200381][ T51] netdev_start_xmit+0x8a/0x160 [ 20.205304][ T51] dev_hard_start_xmit+0x18d/0x2f0 [ 20.210413][ T51] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.215503][ T51] ? __local_bh_enable_ip+0xa8/0x170 [ 20.220850][ T51] ? ndisc_mc_map+0x329/0x9e0 [ 20.225517][ T51] ? dev_queue_xmit+0x20/0x20 [ 20.230255][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.236469][ T51] ? ndisc_constructor+0x690/0x8a0 [ 20.241817][ T51] ? _raw_write_unlock_bh+0x31/0x47 [ 20.246996][ T51] ? ___neigh_create+0x162d/0x1ab0 [ 20.252080][ T51] ? dev_hard_header+0xdb/0xf0 [ 20.256838][ T51] dev_queue_xmit+0x17/0x20 [ 20.261319][ T51] neigh_connected_output+0x288/0x2b0 [ 20.266666][ T51] ip6_finish_output2+0xde2/0x1440 [ 20.272049][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.277914][ T51] ? __ip6_finish_output+0x520/0x520 [ 20.283217][ T51] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.288822][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.295044][ T51] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.299895][ T51] __ip6_finish_output+0x3e4/0x520 [ 20.305073][ T51] ip6_finish_output+0x3f/0x220 [ 20.309903][ T51] ? ip6_output+0x1d3/0x4b0 [ 20.314394][ T51] ip6_output+0x1f8/0x4b0 [ 20.318703][ T51] ? asan.module_dtor+0x20/0x20 [ 20.323528][ T51] ? skb_dst+0x40/0x40 [ 20.327661][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.332407][ T51] ? selinux_ipv6_forward+0x50/0x50 [ 20.337586][ T51] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.343458][ T51] ? nf_hook_slow+0x150/0x1b0 [ 20.348122][ T51] NF_HOOK+0xdd/0x280 [ 20.352085][ T51] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.357690][ T51] ? NF_HOOK+0x280/0x280 [ 20.361927][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.366677][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.373239][ T51] ? ndisc_send_skb+0x547/0x9f0 [ 20.378153][ T51] ? memcpy+0x56/0x70 [ 20.382219][ T51] ndisc_send_skb+0x646/0x9f0 [ 20.387403][ T51] ? slab_post_alloc_hook+0x90/0xa0 [ 20.392705][ T51] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.398360][ T51] ? skb_set_owner_w+0x1a8/0x310 [ 20.403277][ T51] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.408969][ T51] ? skb_put+0x11d/0x200 [ 20.413201][ T51] ndisc_send_rs+0x26c/0x360 [ 20.417770][ T51] addrconf_dad_completed+0x4f3/0x9f0 [ 20.423116][ T51] ? addrconf_dad_stop+0x430/0x430 [ 20.428201][ T51] addrconf_dad_work+0x9c1/0x1520 [ 20.433202][ T51] ? move_linked_works+0x118/0x130 [ 20.438287][ T51] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.443986][ T51] ? __kasan_check_write+0x14/0x20 [ 20.449348][ T51] process_one_work+0x3ca/0x660 [ 20.454261][ T51] worker_thread+0x709/0xa20 [ 20.458828][ T51] ? __kthread_parkme+0x11b/0x150 [ 20.463861][ T51] kthread+0x371/0x390 [ 20.467934][ T51] ? pr_cont_work+0x110/0x110 [ 20.472613][ T51] ? __list_add+0xc0/0xc0 [ 20.476935][ T51] ret_from_fork+0x1f/0x30 [ 20.481396][ T51] ================================================================================ [ 20.490704][ T51] ================================================================================ [ 20.500007][ T51] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 20.507738][ T51] member access within address ffffc9000020f1c0 with insufficient space [ 20.516436][ T51] for an object of type 'struct sk_buff' [ 20.522107][ T51] CPU: 0 PID: 51 Comm: kworker/0:1 Not tainted 5.10.81-syzkaller-01825-g4b644356291a #0 [ 20.531806][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.542028][ T51] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.549881][ T51] Call Trace: [ 20.553246][ T51] dump_stack_lvl+0x1e2/0x24b [ 20.558029][ T51] ? show_regs_print_info+0x18/0x18 [ 20.563232][ T51] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.568974][ T51] dump_stack+0x15/0x1d [ 20.573110][ T51] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.578807][ T51] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.584808][ T51] wg_xmit+0x513/0xae0 [ 20.589203][ T51] ? wg_stop+0x140/0x140 [ 20.593528][ T51] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.599760][ T51] netdev_start_xmit+0x8a/0x160 [ 20.604607][ T51] dev_hard_start_xmit+0x18d/0x2f0 [ 20.609714][ T51] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.614636][ T51] ? __local_bh_enable_ip+0xa8/0x170 [ 20.619922][ T51] ? ndisc_mc_map+0x329/0x9e0 [ 20.624589][ T51] ? dev_queue_xmit+0x20/0x20 [ 20.629308][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.635528][ T51] ? ndisc_constructor+0x690/0x8a0 [ 20.640768][ T51] ? _raw_write_unlock_bh+0x31/0x47 [ 20.645970][ T51] ? ___neigh_create+0x162d/0x1ab0 [ 20.651055][ T51] ? dev_hard_header+0xdb/0xf0 [ 20.655795][ T51] dev_queue_xmit+0x17/0x20 [ 20.660359][ T51] neigh_connected_output+0x288/0x2b0 [ 20.665703][ T51] ip6_finish_output2+0xde2/0x1440 [ 20.670792][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.675528][ T51] ? __ip6_finish_output+0x520/0x520 [ 20.680786][ T51] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.686393][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.692704][ T51] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.697539][ T51] __ip6_finish_output+0x3e4/0x520 [ 20.702639][ T51] ip6_finish_output+0x3f/0x220 [ 20.707723][ T51] ? ip6_output+0x1d3/0x4b0 [ 20.712200][ T51] ip6_output+0x1f8/0x4b0 [ 20.716514][ T51] ? asan.module_dtor+0x20/0x20 [ 20.721338][ T51] ? skb_dst+0x40/0x40 [ 20.725381][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.730118][ T51] ? selinux_ipv6_forward+0x50/0x50 [ 20.735293][ T51] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.741077][ T51] ? nf_hook_slow+0x150/0x1b0 [ 20.745747][ T51] NF_HOOK+0xdd/0x280 [ 20.749844][ T51] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.755464][ T51] ? NF_HOOK+0x280/0x280 [ 20.759688][ T51] ? __rcu_read_lock+0x50/0x50 [ 20.764443][ T51] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.770815][ T51] ? ndisc_send_skb+0x547/0x9f0 [ 20.775674][ T51] ? memcpy+0x56/0x70 [ 20.779735][ T51] ndisc_send_skb+0x646/0x9f0 [ 20.784522][ T51] ? slab_post_alloc_hook+0x90/0xa0 [ 20.789710][ T51] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.795443][ T51] ? skb_set_owner_w+0x1a8/0x310 [ 20.800481][ T51] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.806183][ T51] ? skb_put+0x11d/0x200 [ 20.810534][ T51] ndisc_send_rs+0x26c/0x360 [ 20.815113][ T51] addrconf_dad_completed+0x4f3/0x9f0 [ 20.820479][ T51] ? addrconf_dad_stop+0x430/0x430 [ 20.825573][ T51] addrconf_dad_work+0x9c1/0x1520 [ 20.830577][ T51] ? move_linked_works+0x118/0x130 [ 20.835680][ T51] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.841465][ T51] ? __kasan_check_write+0x14/0x20 [ 20.846803][ T51] process_one_work+0x3ca/0x660 [ 20.851858][ T51] worker_thread+0x709/0xa20 [ 20.856587][ T51] ? __kthread_parkme+0x11b/0x150 [ 20.861785][ T51] kthread+0x371/0x390 [ 20.865853][ T51] ? pr_cont_work+0x110/0x110 [ 20.870528][ T51] ? __list_add+0xc0/0xc0 [ 20.874923][ T51] ret_from_fork+0x1f/0x30 [ 20.879580][ T51] ================================================================================ [ 20.890432][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.891135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 20.898853][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.916669][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.924931][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2021/11/22 13:03:55 building call list... [ 20.941500][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.951599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 21.190034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 21.550488][ T177] device bridge_slave_1 left promiscuous mode [ 21.556647][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.564642][ T177] device bridge_slave_0 left promiscuous mode [ 21.570957][ T177] bridge0: port 1(bridge_slave_0) entered disabled state