[ 15.154643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! Warning: Permanently added '10.128.1.246' (ECDSA) to the list of known hosts. 2021/11/16 10:04:47 fuzzer started 2021/11/16 10:04:47 connecting to host at 10.128.0.163:36469 2021/11/16 10:04:47 checking machine... 2021/11/16 10:04:47 checking revisions... 2021/11/16 10:04:47 testing simple program... [ 19.027026][ T23] audit: type=1400 audit(1637057087.259:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.044155][ T370] cgroup: Unknown subsys name 'net' [ 19.050551][ T23] audit: type=1400 audit(1637057087.259:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.076846][ T23] audit: type=1400 audit(1637057087.259:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.077041][ T370] cgroup: Unknown subsys name 'devices' [ 19.100141][ T23] audit: type=1400 audit(1637057087.259:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.128283][ T23] audit: type=1400 audit(1637057087.259:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.151682][ T23] audit: type=1400 audit(1637057087.259:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.174806][ T23] audit: type=1400 audit(1637057087.259:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.197426][ T23] audit: type=1400 audit(1637057087.289:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.316274][ T370] cgroup: Unknown subsys name 'hugetlb' [ 19.321958][ T370] cgroup: Unknown subsys name 'rlimit' [ 19.455724][ T23] audit: type=1400 audit(1637057087.689:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.479178][ T23] audit: type=1400 audit(1637057087.689:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.553138][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.560207][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.567917][ T373] device bridge_slave_0 entered promiscuous mode [ 19.574991][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.582149][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.589635][ T373] device bridge_slave_1 entered promiscuous mode [ 19.620028][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.627188][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.634475][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.641547][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.660728][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.668164][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.675967][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.683332][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.692343][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.700789][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.707830][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.725859][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.734161][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.741211][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.748605][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.754769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 19.756610][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.784634][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 19.793148][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.802094][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.810745][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.818683][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.828154][ T24] ================================================================================ [ 19.837449][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 19.845262][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 19.854336][ T24] for an object of type 'struct sk_buff' [ 19.859998][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 19.870183][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.880524][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 19.886488][ T24] Call Trace: [ 19.889759][ T24] dump_stack_lvl+0x1e2/0x24b [ 19.894419][ T24] ? show_regs_print_info+0x18/0x18 [ 19.899627][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 19.905359][ T24] dump_stack+0x15/0x1d [ 19.909517][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 19.915243][ T24] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 19.921117][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 19.927077][ T24] wg_xmit+0x4a2/0xae0 [ 19.931123][ T24] ? wg_stop+0x140/0x140 [ 19.935349][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 19.941571][ T24] netdev_start_xmit+0x8a/0x160 [ 19.946398][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 19.951572][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 19.956489][ T24] ? dev_queue_xmit+0x20/0x20 [ 19.961241][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 19.966526][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 19.971531][ T24] ? _local_bh_enable+0x30/0x30 [ 19.976448][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 19.982666][ T24] ? ndisc_constructor+0x690/0x8a0 [ 19.987773][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 19.992948][ T24] ? dev_hard_header+0xdb/0xf0 [ 19.997809][ T24] dev_queue_xmit+0x17/0x20 [ 20.002298][ T24] neigh_connected_output+0x288/0x2b0 [ 20.007765][ T24] ip6_finish_output2+0xde2/0x1440 [ 20.012869][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.017801][ T24] ? __ip6_finish_output+0x520/0x520 [ 20.023266][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.028794][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.035216][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.040158][ T24] __ip6_finish_output+0x3e4/0x520 [ 20.045260][ T24] ip6_finish_output+0x3f/0x220 [ 20.050098][ T24] ? ip6_output+0x1d3/0x4b0 [ 20.054594][ T24] ip6_output+0x1f8/0x4b0 [ 20.058914][ T24] ? asan.module_dtor+0x20/0x20 [ 20.063764][ T24] ? skb_dst+0x40/0x40 [ 20.067818][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.072563][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 20.077745][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.083455][ T24] ? nf_hook_slow+0x150/0x1b0 [ 20.088116][ T24] NF_HOOK+0xdd/0x280 [ 20.092082][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.097697][ T24] ? NF_HOOK+0x280/0x280 [ 20.101923][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.106670][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.112892][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 20.117729][ T24] ? memcpy+0x56/0x70 [ 20.121691][ T24] ndisc_send_skb+0x646/0x9f0 [ 20.126415][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 20.131595][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.137120][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 20.142037][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.147736][ T24] ? skb_put+0x11d/0x200 [ 20.151958][ T24] ndisc_send_rs+0x26c/0x360 [ 20.156527][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 20.162003][ T24] ? addrconf_dad_stop+0x430/0x430 [ 20.167094][ T24] ? switch_mm_irqs_off+0x2dd/0x720 [ 20.172271][ T24] addrconf_dad_work+0x9c1/0x1520 [ 20.177279][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.182984][ T24] ? __kasan_check_write+0x14/0x20 [ 20.188073][ T24] process_one_work+0x3ca/0x660 [ 20.192988][ T24] worker_thread+0x709/0xa20 [ 20.197556][ T24] ? __kthread_parkme+0x11b/0x150 [ 20.202558][ T24] kthread+0x371/0x390 [ 20.206603][ T24] ? pr_cont_work+0x110/0x110 [ 20.211263][ T24] ? __list_add+0xc0/0xc0 [ 20.215573][ T24] ret_from_fork+0x1f/0x30 [ 20.220003][ T24] ================================================================================ [ 20.229288][ T24] ================================================================================ [ 20.238574][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 20.246300][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 20.254733][ T24] for an object of type 'struct sk_buff' [ 20.260586][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.79-syzkaller-01201-g87acf4924e1b #0 [ 20.270288][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.280524][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.286496][ T24] Call Trace: [ 20.289767][ T24] dump_stack_lvl+0x1e2/0x24b [ 20.294427][ T24] ? show_regs_print_info+0x18/0x18 [ 20.299605][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.305301][ T24] dump_stack+0x15/0x1d [ 20.309437][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.315158][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.321117][ T24] wg_xmit+0x513/0xae0 [ 20.325164][ T24] ? wg_stop+0x140/0x140 [ 20.329388][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.335606][ T24] netdev_start_xmit+0x8a/0x160 [ 20.340434][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 20.345523][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.350441][ T24] ? dev_queue_xmit+0x20/0x20 [ 20.355119][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 20.360394][ T24] ? do_raw_spin_unlock+0x50/0x50 [ 20.365399][ T24] ? _local_bh_enable+0x30/0x30 [ 20.370351][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.376588][ T24] ? ndisc_constructor+0x690/0x8a0 [ 20.381680][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 20.386858][ T24] ? dev_hard_header+0xdb/0xf0 [ 20.391599][ T24] dev_queue_xmit+0x17/0x20 [ 20.396081][ T24] neigh_connected_output+0x288/0x2b0 [ 20.401433][ T24] ip6_finish_output2+0xde2/0x1440 [ 20.406542][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.411303][ T24] ? __ip6_finish_output+0x520/0x520 [ 20.416587][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.422126][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.428341][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.433267][ T24] __ip6_finish_output+0x3e4/0x520 [ 20.438378][ T24] ip6_finish_output+0x3f/0x220 [ 20.443293][ T24] ? ip6_output+0x1d3/0x4b0 [ 20.447773][ T24] ip6_output+0x1f8/0x4b0 [ 20.452079][ T24] ? asan.module_dtor+0x20/0x20 [ 20.456926][ T24] ? skb_dst+0x40/0x40 [ 20.460974][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.465733][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 20.470912][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.476695][ T24] ? nf_hook_slow+0x150/0x1b0 [ 20.481348][ T24] NF_HOOK+0xdd/0x280 [ 20.485309][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.490926][ T24] ? NF_HOOK+0x280/0x280 [ 20.495144][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.499890][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.506194][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 20.511019][ T24] ? memcpy+0x56/0x70 [ 20.515116][ T24] ndisc_send_skb+0x646/0x9f0 [ 20.519772][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 20.525144][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.530684][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 20.535689][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.541489][ T24] ? skb_put+0x11d/0x200 [ 20.545709][ T24] ndisc_send_rs+0x26c/0x360 [ 20.550369][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 20.555718][ T24] ? addrconf_dad_stop+0x430/0x430 [ 20.560946][ T24] ? switch_mm_irqs_off+0x2dd/0x720 [ 20.566135][ T24] addrconf_dad_work+0x9c1/0x1520 [ 20.571151][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.576984][ T24] ? __kasan_check_write+0x14/0x20 [ 20.582204][ T24] process_one_work+0x3ca/0x660 [ 20.587037][ T24] worker_thread+0x709/0xa20 [ 20.591612][ T24] ? __kthread_parkme+0x11b/0x150 [ 20.596616][ T24] kthread+0x371/0x390 [ 20.600679][ T24] ? pr_cont_work+0x110/0x110 [ 20.605679][ T24] ? __list_add+0xc0/0xc0 [ 20.610107][ T24] ret_from_fork+0x1f/0x30 [ 20.614574][ T24] ================================================================================ 2021/11/16 10:04:48 building call list... [ 20.632179][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.264877][ T9] device bridge_slave_1 left promiscuous mode [ 21.271122][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.279171][ T9] device bridge_slave_0 left promiscuous mode [ 21.285449][ T9] bridge0: port 1(bridge_slave_0) entered disabled state