syzkaller login: [ 6.835042][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 12.876103][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 12.876110][ T23] audit: type=1400 audit(1638269760.199:71): avc: denied { transition } for pid=290 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.881943][ T23] audit: type=1400 audit(1638269760.199:72): avc: denied { write } for pid=290 comm="sh" path="pipe:[10889]" dev="pipefs" ino=10889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 13.035001][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 13.056011][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 13.065904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 13.324935][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 13.414980][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! Warning: Permanently added '10.128.1.15' (ECDSA) to the list of known hosts. 2021/11/30 10:56:07 fuzzer started 2021/11/30 10:56:07 connecting to host at 10.128.0.163:35749 2021/11/30 10:56:07 checking machine... 2021/11/30 10:56:07 checking revisions... 2021/11/30 10:56:07 testing simple program... [ 20.039978][ T23] audit: type=1400 audit(1638269767.359:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.061208][ T371] cgroup: Unknown subsys name 'net' [ 20.063434][ T23] audit: type=1400 audit(1638269767.359:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.089463][ T23] audit: type=1400 audit(1638269767.359:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.089628][ T371] cgroup: Unknown subsys name 'devices' [ 20.112690][ T23] audit: type=1400 audit(1638269767.359:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.140896][ T23] audit: type=1400 audit(1638269767.359:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.164199][ T23] audit: type=1400 audit(1638269767.359:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.187039][ T23] audit: type=1400 audit(1638269767.359:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.209249][ T23] audit: type=1400 audit(1638269767.389:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.326502][ T371] cgroup: Unknown subsys name 'hugetlb' [ 20.332145][ T371] cgroup: Unknown subsys name 'rlimit' [ 20.396281][ T23] audit: type=1400 audit(1638269767.719:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.431622][ T23] audit: type=1400 audit(1638269767.749:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.504690][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.511770][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.519372][ T374] device bridge_slave_0 entered promiscuous mode [ 20.526282][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.533290][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.540715][ T374] device bridge_slave_1 entered promiscuous mode [ 20.569945][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.576998][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.584228][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.591352][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.609130][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.616334][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.623549][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.631647][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.640566][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.648693][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.655774][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.665151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 20.675820][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.684008][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.691057][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.698660][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.707110][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.725286][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.733604][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.742231][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.750341][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.758451][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.772562][ T108] ================================================================================ [ 20.781917][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 20.790099][ T108] member access within address ffffc90000ad71c0 with insufficient space [ 20.798444][ T108] for an object of type 'struct sk_buff' [ 20.804082][ T108] CPU: 1 PID: 108 Comm: kworker/1:2 Not tainted 5.10.82-syzkaller-00155-g8d21bcc704ea #0 [ 20.813858][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.823932][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.829905][ T108] Call Trace: [ 20.833177][ T108] dump_stack_lvl+0x1e2/0x24b [ 20.837859][ T108] ? show_regs_print_info+0x18/0x18 [ 20.843050][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.848748][ T108] dump_stack+0x15/0x1d [ 20.852887][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.858609][ T108] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 20.864513][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.870486][ T108] wg_xmit+0x4a2/0xae0 [ 20.874539][ T108] ? wg_stop+0x140/0x140 [ 20.878771][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.885015][ T108] netdev_start_xmit+0x8a/0x160 [ 20.889859][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 20.894964][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.899895][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 20.905161][ T108] ? ndisc_mc_map+0x329/0x9e0 [ 20.909831][ T108] ? dev_queue_xmit+0x20/0x20 [ 20.914500][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.920757][ T108] ? ndisc_constructor+0x690/0x8a0 [ 20.925852][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 20.931046][ T108] ? ___neigh_create+0x162d/0x1ab0 [ 20.936137][ T108] ? dev_hard_header+0xdb/0xf0 [ 20.940880][ T108] dev_queue_xmit+0x17/0x20 [ 20.945362][ T108] neigh_connected_output+0x288/0x2b0 [ 20.950801][ T108] ip6_finish_output2+0xde2/0x1440 [ 20.955892][ T108] ? __rcu_read_lock+0x50/0x50 [ 20.960639][ T108] ? __ip6_finish_output+0x520/0x520 [ 20.966261][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.971788][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.980094][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.985033][ T108] __ip6_finish_output+0x3e4/0x520 [ 20.990477][ T108] ip6_finish_output+0x3f/0x220 [ 20.995304][ T108] ? ip6_output+0x1d3/0x4b0 [ 20.999784][ T108] ip6_output+0x1f8/0x4b0 [ 21.004096][ T108] ? asan.module_dtor+0x20/0x20 [ 21.009269][ T108] ? skb_dst+0x40/0x40 [ 21.013322][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.018071][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 21.023335][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.029030][ T108] ? nf_hook_slow+0x150/0x1b0 [ 21.033694][ T108] NF_HOOK+0xdd/0x280 [ 21.037656][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.043263][ T108] ? NF_HOOK+0x280/0x280 [ 21.047484][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.052227][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.058447][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 21.063275][ T108] ? memcpy+0x56/0x70 [ 21.067245][ T108] ndisc_send_skb+0x646/0x9f0 [ 21.072076][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 21.077259][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.082794][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 21.087717][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.093412][ T108] ? skb_put+0x11d/0x200 [ 21.097634][ T108] ndisc_send_rs+0x26c/0x360 [ 21.102218][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 21.107677][ T108] ? addrconf_dad_stop+0x430/0x430 [ 21.112775][ T108] ? __queue_delayed_work+0x16c/0x1f0 [ 21.118137][ T108] addrconf_dad_work+0x9c1/0x1520 [ 21.123139][ T108] ? __kasan_check_write+0x14/0x20 [ 21.128226][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.133922][ T108] ? __kasan_check_write+0x14/0x20 [ 21.139012][ T108] process_one_work+0x3ca/0x660 [ 21.143929][ T108] worker_thread+0x709/0xa20 [ 21.148498][ T108] ? __kthread_parkme+0x11b/0x150 [ 21.153515][ T108] kthread+0x371/0x390 [ 21.157575][ T108] ? pr_cont_work+0x110/0x110 [ 21.162237][ T108] ? __list_add+0xc0/0xc0 [ 21.166563][ T108] ret_from_fork+0x1f/0x30 [ 21.171007][ T108] ================================================================================ [ 21.180314][ T108] ================================================================================ [ 21.189615][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 21.197337][ T108] member access within address ffffc90000ad71c0 with insufficient space [ 21.205659][ T108] for an object of type 'struct sk_buff' [ 21.211277][ T108] CPU: 1 PID: 108 Comm: kworker/1:2 Not tainted 5.10.82-syzkaller-00155-g8d21bcc704ea #0 [ 21.221049][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.231084][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.237129][ T108] Call Trace: [ 21.240394][ T108] dump_stack_lvl+0x1e2/0x24b [ 21.245045][ T108] ? show_regs_print_info+0x18/0x18 [ 21.250301][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.255988][ T108] dump_stack+0x15/0x1d [ 21.260118][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.265900][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.271857][ T108] wg_xmit+0x513/0xae0 [ 21.275903][ T108] ? wg_stop+0x140/0x140 [ 21.280123][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.286359][ T108] netdev_start_xmit+0x8a/0x160 [ 21.291184][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 21.296268][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.301184][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 21.306457][ T108] ? ndisc_mc_map+0x329/0x9e0 [ 21.311113][ T108] ? dev_queue_xmit+0x20/0x20 [ 21.315761][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.322042][ T108] ? ndisc_constructor+0x690/0x8a0 [ 21.327129][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 21.332315][ T108] ? ___neigh_create+0x162d/0x1ab0 [ 21.337405][ T108] ? dev_hard_header+0xdb/0xf0 [ 21.342177][ T108] dev_queue_xmit+0x17/0x20 [ 21.346694][ T108] neigh_connected_output+0x288/0x2b0 [ 21.352039][ T108] ip6_finish_output2+0xde2/0x1440 [ 21.357128][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.361866][ T108] ? __ip6_finish_output+0x520/0x520 [ 21.367137][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.372657][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.378870][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.383692][ T108] __ip6_finish_output+0x3e4/0x520 [ 21.388789][ T108] ip6_finish_output+0x3f/0x220 [ 21.393632][ T108] ? ip6_output+0x1d3/0x4b0 [ 21.398109][ T108] ip6_output+0x1f8/0x4b0 [ 21.402948][ T108] ? asan.module_dtor+0x20/0x20 [ 21.407799][ T108] ? skb_dst+0x40/0x40 [ 21.411856][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.416601][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 21.421776][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.427473][ T108] ? nf_hook_slow+0x150/0x1b0 [ 21.432124][ T108] NF_HOOK+0xdd/0x280 [ 21.436098][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.441707][ T108] ? NF_HOOK+0x280/0x280 [ 21.445925][ T108] ? __rcu_read_lock+0x50/0x50 [ 21.450666][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.456881][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 21.461792][ T108] ? memcpy+0x56/0x70 [ 21.465769][ T108] ndisc_send_skb+0x646/0x9f0 [ 21.470420][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 21.475605][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.481126][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 21.486040][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.492079][ T108] ? skb_put+0x11d/0x200 [ 21.496297][ T108] ndisc_send_rs+0x26c/0x360 [ 21.500875][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 21.506314][ T108] ? addrconf_dad_stop+0x430/0x430 [ 21.511400][ T108] ? __queue_delayed_work+0x16c/0x1f0 [ 21.517121][ T108] addrconf_dad_work+0x9c1/0x1520 [ 21.522207][ T108] ? __kasan_check_write+0x14/0x20 [ 21.527297][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.533090][ T108] ? __kasan_check_write+0x14/0x20 [ 21.538172][ T108] process_one_work+0x3ca/0x660 [ 21.543255][ T108] worker_thread+0x709/0xa20 [ 21.547818][ T108] ? __kthread_parkme+0x11b/0x150 [ 21.552813][ T108] kthread+0x371/0x390 [ 21.556854][ T108] ? pr_cont_work+0x110/0x110 [ 21.561599][ T108] ? __list_add+0xc0/0xc0 [ 21.565987][ T108] ret_from_fork+0x1f/0x30 [ 21.570419][ T108] ================================================================================ 2021/11/30 10:56:08 building call list... [ 21.582076][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.165208][ T9] device bridge_slave_1 left promiscuous mode [ 22.171370][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.179371][ T9] device bridge_slave_0 left promiscuous mode [ 22.185704][ T9] bridge0: port 1(bridge_slave_0) entered disabled state