[ 16.292507][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! Warning: Permanently added '10.128.1.112' (ECDSA) to the list of known hosts. 2021/11/11 12:36:15 fuzzer started 2021/11/11 12:36:15 connecting to host at 10.128.0.163:35843 2021/11/11 12:36:15 checking machine... 2021/11/11 12:36:15 checking revisions... 2021/11/11 12:36:15 testing simple program... [ 19.126935][ T23] audit: type=1400 audit(1636634175.339:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.150469][ T23] audit: type=1400 audit(1636634175.339:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.150734][ T371] cgroup: Unknown subsys name 'net' [ 19.171515][ T23] audit: type=1400 audit(1636634175.339:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.200093][ T23] audit: type=1400 audit(1636634175.339:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.200290][ T371] cgroup: Unknown subsys name 'devices' [ 19.223135][ T23] audit: type=1400 audit(1636634175.339:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.251833][ T23] audit: type=1400 audit(1636634175.339:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.274763][ T23] audit: type=1400 audit(1636634175.339:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.297043][ T23] audit: type=1400 audit(1636634175.389:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.404136][ T371] cgroup: Unknown subsys name 'hugetlb' [ 19.409966][ T371] cgroup: Unknown subsys name 'rlimit' [ 19.533632][ T23] audit: type=1400 audit(1636634175.749:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.556850][ T23] audit: type=1400 audit(1636634175.769:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.629283][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.636345][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.643908][ T373] device bridge_slave_0 entered promiscuous mode [ 19.650968][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.658238][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.665624][ T373] device bridge_slave_1 entered promiscuous mode [ 19.696847][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.703909][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.711623][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.718697][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.737021][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.744265][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.751567][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.759316][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.768306][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.776440][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.783488][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.793360][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.801571][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.808605][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.823403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.831402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.851228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.859818][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.869862][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.878246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.886099][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.894860][ T5] ================================================================================ [ 19.904143][ T5] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 19.911921][ T5] member access within address ffffc900000571c0 with insufficient space [ 19.920250][ T5] for an object of type 'struct sk_buff' [ 19.925884][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.78-syzkaller-01179-gbe686d451ef9 #0 [ 19.935502][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.945554][ T5] Workqueue: ipv6_addrconf addrconf_dad_work [ 19.951529][ T5] Call Trace: [ 19.954807][ T5] dump_stack_lvl+0x1e2/0x24b [ 19.959460][ T5] ? show_regs_print_info+0x18/0x18 [ 19.964637][ T5] ? wg_allowedips_lookup_dst+0x190/0x190 [ 19.970436][ T5] dump_stack+0x15/0x1d [ 19.974583][ T5] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 19.980405][ T5] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 19.982626][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 19.986383][ T5] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.001172][ T5] wg_xmit+0x4a2/0xae0 [ 20.005336][ T5] ? wg_stop+0x140/0x140 [ 20.009561][ T5] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.015884][ T5] netdev_start_xmit+0x8a/0x160 [ 20.020815][ T5] dev_hard_start_xmit+0x18d/0x2f0 [ 20.026171][ T5] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.031099][ T5] ? dev_queue_xmit+0x20/0x20 [ 20.035960][ T5] ? __local_bh_enable_ip+0xa8/0x170 [ 20.041319][ T5] ? do_raw_spin_unlock+0x50/0x50 [ 20.046463][ T5] ? _local_bh_enable+0x30/0x30 [ 20.051298][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.057664][ T5] ? ndisc_constructor+0x690/0x8a0 [ 20.062756][ T5] ? _raw_write_unlock_bh+0x31/0x47 [ 20.067935][ T5] ? dev_hard_header+0xdb/0xf0 [ 20.072772][ T5] dev_queue_xmit+0x17/0x20 [ 20.077254][ T5] neigh_connected_output+0x288/0x2b0 [ 20.082618][ T5] ip6_finish_output2+0xde2/0x1440 [ 20.087831][ T5] ? __rcu_read_lock+0x50/0x50 [ 20.092624][ T5] ? __ip6_finish_output+0x520/0x520 [ 20.097902][ T5] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.103439][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.109886][ T5] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.114810][ T5] __ip6_finish_output+0x3e4/0x520 [ 20.120020][ T5] ip6_finish_output+0x3f/0x220 [ 20.124853][ T5] ? ip6_output+0x1d3/0x4b0 [ 20.129332][ T5] ip6_output+0x1f8/0x4b0 [ 20.133665][ T5] ? asan.module_dtor+0x20/0x20 [ 20.138510][ T5] ? skb_dst+0x40/0x40 [ 20.142557][ T5] ? __rcu_read_lock+0x50/0x50 [ 20.147490][ T5] ? selinux_ipv6_forward+0x50/0x50 [ 20.152763][ T5] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.158585][ T5] ? nf_hook_slow+0x150/0x1b0 [ 20.163515][ T5] NF_HOOK+0xdd/0x280 [ 20.167565][ T5] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.173177][ T5] ? NF_HOOK+0x280/0x280 [ 20.177418][ T5] ? __rcu_read_lock+0x50/0x50 [ 20.182444][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.189085][ T5] ? ndisc_send_skb+0x547/0x9f0 [ 20.194011][ T5] ? memcpy+0x56/0x70 [ 20.198000][ T5] ndisc_send_skb+0x646/0x9f0 [ 20.202695][ T5] ? slab_post_alloc_hook+0x90/0xa0 [ 20.207971][ T5] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.213493][ T5] ? skb_set_owner_w+0x1a8/0x310 [ 20.218590][ T5] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.224373][ T5] ? skb_put+0x11d/0x200 [ 20.228604][ T5] ndisc_send_rs+0x26c/0x360 [ 20.233190][ T5] addrconf_dad_completed+0x4f3/0x9f0 [ 20.238538][ T5] ? addrconf_dad_stop+0x430/0x430 [ 20.243628][ T5] addrconf_dad_work+0x9c1/0x1520 [ 20.248748][ T5] ? move_linked_works+0x118/0x130 [ 20.253856][ T5] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.259594][ T5] ? __kasan_check_write+0x14/0x20 [ 20.264701][ T5] process_one_work+0x3ca/0x660 [ 20.269533][ T5] worker_thread+0x709/0xa20 [ 20.274100][ T5] kthread+0x371/0x390 [ 20.278145][ T5] ? pr_cont_work+0x110/0x110 [ 20.282799][ T5] ? __list_add+0xc0/0xc0 [ 20.287105][ T5] ret_from_fork+0x1f/0x30 [ 20.291632][ T5] ================================================================================ [ 20.301023][ T5] ================================================================================ [ 20.310318][ T5] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 20.318127][ T5] member access within address ffffc900000571c0 with insufficient space [ 20.326458][ T5] for an object of type 'struct sk_buff' [ 20.332100][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.78-syzkaller-01179-gbe686d451ef9 #0 [ 20.341699][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.351747][ T5] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.357830][ T5] Call Trace: [ 20.361112][ T5] dump_stack_lvl+0x1e2/0x24b [ 20.365776][ T5] ? show_regs_print_info+0x18/0x18 [ 20.370953][ T5] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.376647][ T5] dump_stack+0x15/0x1d [ 20.380777][ T5] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.386476][ T5] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.392441][ T5] wg_xmit+0x513/0xae0 [ 20.396493][ T5] ? wg_stop+0x140/0x140 [ 20.400725][ T5] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.407050][ T5] netdev_start_xmit+0x8a/0x160 [ 20.411901][ T5] dev_hard_start_xmit+0x18d/0x2f0 [ 20.417002][ T5] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.421920][ T5] ? dev_queue_xmit+0x20/0x20 [ 20.426682][ T5] ? __local_bh_enable_ip+0xa8/0x170 [ 20.432135][ T5] ? do_raw_spin_unlock+0x50/0x50 [ 20.437145][ T5] ? _local_bh_enable+0x30/0x30 [ 20.441998][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.448222][ T5] ? ndisc_constructor+0x690/0x8a0 [ 20.453334][ T5] ? _raw_write_unlock_bh+0x31/0x47 [ 20.458544][ T5] ? dev_hard_header+0xdb/0xf0 [ 20.463304][ T5] dev_queue_xmit+0x17/0x20 [ 20.467794][ T5] neigh_connected_output+0x288/0x2b0 [ 20.473153][ T5] ip6_finish_output2+0xde2/0x1440 [ 20.478248][ T5] ? __rcu_read_lock+0x50/0x50 [ 20.482993][ T5] ? __ip6_finish_output+0x520/0x520 [ 20.488257][ T5] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.493781][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.499998][ T5] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.504930][ T5] __ip6_finish_output+0x3e4/0x520 [ 20.510102][ T5] ip6_finish_output+0x3f/0x220 [ 20.514929][ T5] ? ip6_output+0x1d3/0x4b0 [ 20.519449][ T5] ip6_output+0x1f8/0x4b0 [ 20.523779][ T5] ? asan.module_dtor+0x20/0x20 [ 20.528704][ T5] ? skb_dst+0x40/0x40 [ 20.532771][ T5] ? __rcu_read_lock+0x50/0x50 [ 20.537754][ T5] ? selinux_ipv6_forward+0x50/0x50 [ 20.542935][ T5] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.548778][ T5] ? nf_hook_slow+0x150/0x1b0 [ 20.553504][ T5] NF_HOOK+0xdd/0x280 [ 20.557487][ T5] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.563132][ T5] ? NF_HOOK+0x280/0x280 [ 20.567790][ T5] ? __rcu_read_lock+0x50/0x50 [ 20.572535][ T5] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.578776][ T5] ? ndisc_send_skb+0x547/0x9f0 [ 20.583703][ T5] ? memcpy+0x56/0x70 [ 20.587691][ T5] ndisc_send_skb+0x646/0x9f0 [ 20.592442][ T5] ? slab_post_alloc_hook+0x90/0xa0 [ 20.597629][ T5] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.603329][ T5] ? skb_set_owner_w+0x1a8/0x310 [ 20.608318][ T5] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.614033][ T5] ? skb_put+0x11d/0x200 [ 20.618259][ T5] ndisc_send_rs+0x26c/0x360 [ 20.622828][ T5] addrconf_dad_completed+0x4f3/0x9f0 [ 20.628280][ T5] ? addrconf_dad_stop+0x430/0x430 [ 20.633391][ T5] addrconf_dad_work+0x9c1/0x1520 [ 20.638412][ T5] ? move_linked_works+0x118/0x130 [ 20.643504][ T5] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.649219][ T5] ? __kasan_check_write+0x14/0x20 [ 20.654323][ T5] process_one_work+0x3ca/0x660 [ 20.659194][ T5] worker_thread+0x709/0xa20 [ 20.663767][ T5] kthread+0x371/0x390 [ 20.668133][ T5] ? pr_cont_work+0x110/0x110 [ 20.673170][ T5] ? __list_add+0xc0/0xc0 [ 20.677594][ T5] ret_from_fork+0x1f/0x30 [ 20.682143][ T5] ================================================================================ [ 20.685453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! 2021/11/11 12:36:16 building call list... [ 20.708915][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.732865][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 21.282757][ T177] device bridge_slave_1 left promiscuous mode [ 21.288918][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.297213][ T177] device bridge_slave_0 left promiscuous mode [ 21.303766][ T177] bridge0: port 1(bridge_slave_0) entered disabled state