[ 14.759402][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! Warning: Permanently added '10.128.15.220' (ECDSA) to the list of known hosts. 2021/11/04 22:50:49 fuzzer started 2021/11/04 22:50:49 connecting to host at 10.128.0.163:38667 2021/11/04 22:50:49 checking machine... 2021/11/04 22:50:49 checking revisions... 2021/11/04 22:50:49 testing simple program... [ 21.148110][ T23] audit: type=1400 audit(1636066249.959:73): avc: denied { getattr } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.166540][ T371] cgroup: Unknown subsys name 'net' [ 21.172442][ T23] audit: type=1400 audit(1636066249.959:74): avc: denied { read } for pid=363 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.199924][ T23] audit: type=1400 audit(1636066249.959:75): avc: denied { open } for pid=363 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 21.200116][ T371] cgroup: Unknown subsys name 'devices' [ 21.224048][ T23] audit: type=1400 audit(1636066249.959:76): avc: denied { read } for pid=363 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.254591][ T23] audit: type=1400 audit(1636066249.959:77): avc: denied { open } for pid=363 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.278866][ T23] audit: type=1400 audit(1636066249.959:78): avc: denied { mounton } for pid=371 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.302997][ T23] audit: type=1400 audit(1636066249.959:79): avc: denied { mount } for pid=371 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.326207][ T23] audit: type=1400 audit(1636066249.999:80): avc: denied { unmount } for pid=371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.411271][ T371] cgroup: Unknown subsys name 'hugetlb' [ 21.417213][ T371] cgroup: Unknown subsys name 'rlimit' [ 21.630497][ T23] audit: type=1400 audit(1636066250.449:81): avc: denied { setattr } for pid=371 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.654151][ T23] audit: type=1400 audit(1636066250.449:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.728335][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.736097][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.744394][ T374] device bridge_slave_0 entered promiscuous mode [ 21.752920][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.760581][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.767998][ T374] device bridge_slave_1 entered promiscuous mode [ 21.800304][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.807699][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.815048][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.822354][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.840601][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.848219][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.855920][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.864048][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.880211][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.888678][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.895827][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.903945][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.912319][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.919567][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.927077][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.935381][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.950366][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.959040][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.974777][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.984260][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.993605][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.007335][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.019776][ T108] ================================================================================ [ 22.029092][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 22.037184][ T108] member access within address ffffc90000ac71c0 with insufficient space [ 22.045651][ T108] for an object of type 'struct sk_buff' [ 22.051496][ T108] CPU: 1 PID: 108 Comm: kworker/1:2 Not tainted 5.10.77-syzkaller-01139-ga7c8ce846007 #0 [ 22.062171][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.073147][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.079394][ T108] Call Trace: [ 22.082686][ T108] dump_stack_lvl+0x1e2/0x24b [ 22.087806][ T108] ? show_regs_print_info+0x18/0x18 [ 22.093013][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 2021/11/04 22:50:50 building call list... [ 22.098884][ T108] dump_stack+0x15/0x1d [ 22.103227][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.109138][ T108] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 22.115315][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.121383][ T108] wg_xmit+0x4a2/0xae0 [ 22.125814][ T108] ? wg_stop+0x140/0x140 [ 22.130236][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 22.136565][ T108] netdev_start_xmit+0x8a/0x160 [ 22.141705][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 22.147092][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 22.152110][ T108] ? dev_queue_xmit+0x20/0x20 [ 22.157479][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 22.162864][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 22.167901][ T108] ? _local_bh_enable+0x30/0x30 [ 22.172756][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.179090][ T108] ? ndisc_constructor+0x690/0x8a0 [ 22.184385][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 22.189575][ T108] ? dev_hard_header+0xdb/0xf0 [ 22.194528][ T108] dev_queue_xmit+0x17/0x20 [ 22.199200][ T108] neigh_connected_output+0x288/0x2b0 [ 22.204566][ T108] ip6_finish_output2+0xde2/0x1440 [ 22.209671][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.214765][ T108] ? __ip6_finish_output+0x520/0x520 [ 22.221701][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.227238][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.233479][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.238407][ T108] __ip6_finish_output+0x3e4/0x520 [ 22.243704][ T108] ip6_finish_output+0x3f/0x220 [ 22.248567][ T108] ? ip6_output+0x1d3/0x4b0 [ 22.253084][ T108] ip6_output+0x1f8/0x4b0 [ 22.257509][ T108] ? asan.module_dtor+0x20/0x20 [ 22.262368][ T108] ? skb_dst+0x40/0x40 [ 22.266520][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.271274][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 22.276634][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.282468][ T108] ? nf_hook_slow+0x150/0x1b0 [ 22.287320][ T108] NF_HOOK+0xdd/0x280 [ 22.291293][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.297270][ T108] ? NF_HOOK+0x280/0x280 [ 22.301768][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.306807][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.313925][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 22.318873][ T108] ? memcpy+0x56/0x70 [ 22.323106][ T108] ndisc_send_skb+0x646/0x9f0 [ 22.328184][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 22.333649][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.340233][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 22.345250][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.351045][ T108] ? skb_put+0x11d/0x200 [ 22.355459][ T108] ndisc_send_rs+0x26c/0x360 [ 22.360153][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 22.365885][ T108] ? addrconf_dad_stop+0x430/0x430 [ 22.371079][ T108] addrconf_dad_work+0x9c1/0x1520 [ 22.376270][ T108] ? move_linked_works+0x118/0x130 [ 22.382345][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.388326][ T108] ? __kasan_check_write+0x14/0x20 [ 22.393447][ T108] process_one_work+0x3ca/0x660 [ 22.398293][ T108] worker_thread+0x709/0xa20 [ 22.402966][ T108] ? __kthread_parkme+0x11b/0x150 [ 22.408065][ T108] kthread+0x371/0x390 [ 22.412141][ T108] ? pr_cont_work+0x110/0x110 [ 22.416926][ T108] ? __list_add+0xc0/0xc0 [ 22.421371][ T108] ret_from_fork+0x1f/0x30 [ 22.425937][ T108] ================================================================================ [ 22.435597][ T108] ================================================================================ [ 22.444912][ T108] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 22.452990][ T108] member access within address ffffc90000ac71c0 with insufficient space [ 22.461501][ T108] for an object of type 'struct sk_buff' [ 22.467327][ T108] CPU: 1 PID: 108 Comm: kworker/1:2 Not tainted 5.10.77-syzkaller-01139-ga7c8ce846007 #0 [ 22.477197][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.487608][ T108] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.493575][ T108] Call Trace: [ 22.497046][ T108] dump_stack_lvl+0x1e2/0x24b [ 22.501722][ T108] ? show_regs_print_info+0x18/0x18 [ 22.507099][ T108] ? wg_allowedips_lookup_dst+0x190/0x190 [ 22.512893][ T108] dump_stack+0x15/0x1d [ 22.517163][ T108] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.522886][ T108] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.529137][ T108] wg_xmit+0x513/0xae0 [ 22.533374][ T108] ? wg_stop+0x140/0x140 [ 22.537787][ T108] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 22.544267][ T108] netdev_start_xmit+0x8a/0x160 [ 22.549280][ T108] dev_hard_start_xmit+0x18d/0x2f0 [ 22.554470][ T108] __dev_queue_xmit+0xfbe/0x1bb0 [ 22.559400][ T108] ? dev_queue_xmit+0x20/0x20 [ 22.564251][ T108] ? __local_bh_enable_ip+0xa8/0x170 [ 22.569536][ T108] ? do_raw_spin_unlock+0x50/0x50 [ 22.574545][ T108] ? _local_bh_enable+0x30/0x30 [ 22.582603][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.589178][ T108] ? ndisc_constructor+0x690/0x8a0 [ 22.594479][ T108] ? _raw_write_unlock_bh+0x31/0x47 [ 22.599670][ T108] ? dev_hard_header+0xdb/0xf0 [ 22.604510][ T108] dev_queue_xmit+0x17/0x20 [ 22.609438][ T108] neigh_connected_output+0x288/0x2b0 [ 22.614803][ T108] ip6_finish_output2+0xde2/0x1440 [ 22.619907][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.624750][ T108] ? __ip6_finish_output+0x520/0x520 [ 22.630115][ T108] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.635913][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.642351][ T108] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.647647][ T108] __ip6_finish_output+0x3e4/0x520 [ 22.653126][ T108] ip6_finish_output+0x3f/0x220 [ 22.657966][ T108] ? ip6_output+0x1d3/0x4b0 [ 22.662466][ T108] ip6_output+0x1f8/0x4b0 [ 22.666987][ T108] ? asan.module_dtor+0x20/0x20 [ 22.671917][ T108] ? skb_dst+0x40/0x40 [ 22.676074][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.681003][ T108] ? selinux_ipv6_forward+0x50/0x50 [ 22.686379][ T108] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.692746][ T108] ? nf_hook_slow+0x150/0x1b0 [ 22.697637][ T108] NF_HOOK+0xdd/0x280 [ 22.701703][ T108] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.707608][ T108] ? NF_HOOK+0x280/0x280 [ 22.712117][ T108] ? __rcu_read_lock+0x50/0x50 [ 22.717232][ T108] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.723743][ T108] ? ndisc_send_skb+0x547/0x9f0 [ 22.728817][ T108] ? memcpy+0x56/0x70 [ 22.732987][ T108] ndisc_send_skb+0x646/0x9f0 [ 22.737653][ T108] ? slab_post_alloc_hook+0x90/0xa0 [ 22.742845][ T108] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.750063][ T108] ? skb_set_owner_w+0x1a8/0x310 [ 22.755077][ T108] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.760799][ T108] ? skb_put+0x11d/0x200 [ 22.765069][ T108] ndisc_send_rs+0x26c/0x360 [ 22.769766][ T108] addrconf_dad_completed+0x4f3/0x9f0 [ 22.775150][ T108] ? addrconf_dad_stop+0x430/0x430 [ 22.780383][ T108] addrconf_dad_work+0x9c1/0x1520 [ 22.785504][ T108] ? move_linked_works+0x118/0x130 [ 22.790616][ T108] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.796351][ T108] ? __kasan_check_write+0x14/0x20 [ 22.801458][ T108] process_one_work+0x3ca/0x660 [ 22.806576][ T108] worker_thread+0x709/0xa20 [ 22.811277][ T108] ? __kthread_parkme+0x11b/0x150 [ 22.816393][ T108] kthread+0x371/0x390 [ 22.820453][ T108] ? pr_cont_work+0x110/0x110 [ 22.825248][ T108] ? __list_add+0xc0/0xc0 [ 22.829657][ T108] ret_from_fork+0x1f/0x30 [ 22.834356][ T108] ================================================================================