[ 12.271943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 12.275836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! Warning: Permanently added '10.128.1.22' (ECDSA) to the list of known hosts. 2021/11/25 17:38:41 fuzzer started 2021/11/25 17:38:41 connecting to host at 10.128.0.163:40269 2021/11/25 17:38:41 checking machine... 2021/11/25 17:38:41 checking revisions... 2021/11/25 17:38:41 testing simple program... [ 19.319469][ T23] audit: type=1400 audit(1637861921.409:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.325253][ T23] audit: type=1400 audit(1637861921.409:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.331249][ T23] audit: type=1400 audit(1637861921.409:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 19.335671][ T370] cgroup: Unknown subsys name 'net' [ 19.336872][ T23] audit: type=1400 audit(1637861921.419:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.355625][ T23] audit: type=1400 audit(1637861921.419:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.355794][ T370] cgroup: Unknown subsys name 'devices' [ 19.378863][ T23] audit: type=1400 audit(1637861921.429:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.407014][ T23] audit: type=1400 audit(1637861921.429:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.429188][ T23] audit: type=1400 audit(1637861921.429:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.534044][ T370] cgroup: Unknown subsys name 'hugetlb' [ 19.539749][ T370] cgroup: Unknown subsys name 'rlimit' [ 19.643726][ T23] audit: type=1400 audit(1637861921.739:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.667233][ T23] audit: type=1400 audit(1637861921.759:82): avc: denied { execmem } for pid=373 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.742348][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.749407][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.757065][ T374] device bridge_slave_0 entered promiscuous mode [ 19.764009][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.771176][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.778839][ T374] device bridge_slave_1 entered promiscuous mode [ 19.810495][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.817718][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.825027][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.832042][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.849369][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.856727][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.864340][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.871727][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.894370][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.902883][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.910640][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.919757][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.926797][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.934175][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.942430][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.949441][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.956828][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.964735][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.976026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 19.989399][ T24] ================================================================================ [ 19.999113][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 20.007024][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 20.015357][ T24] for an object of type 'struct sk_buff' [ 20.021070][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.81-syzkaller-00001-g4b644356291a #0 [ 20.030868][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.040930][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.046900][ T24] Call Trace: [ 20.050187][ T24] dump_stack_lvl+0x1e2/0x24b [ 20.054851][ T24] ? show_regs_print_info+0x18/0x18 [ 20.060030][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.065746][ T24] dump_stack+0x15/0x1d [ 20.069883][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.075582][ T24] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 20.081454][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.087427][ T24] wg_xmit+0x4a2/0xae0 [ 20.091592][ T24] ? wg_stop+0x140/0x140 [ 20.095991][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.102311][ T24] netdev_start_xmit+0x8a/0x160 [ 20.107144][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 20.112233][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.117513][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 20.122781][ T24] ? ndisc_mc_map+0x329/0x9e0 [ 20.127436][ T24] ? dev_queue_xmit+0x20/0x20 [ 20.132182][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.138523][ T24] ? ndisc_constructor+0x690/0x8a0 [ 20.143621][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 20.148797][ T24] ? ___neigh_create+0x162d/0x1ab0 [ 20.153889][ T24] ? dev_hard_header+0xdb/0xf0 [ 20.158659][ T24] dev_queue_xmit+0x17/0x20 [ 20.163243][ T24] neigh_connected_output+0x288/0x2b0 [ 20.168609][ T24] ip6_finish_output2+0xde2/0x1440 [ 20.173720][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.178464][ T24] ? __ip6_finish_output+0x520/0x520 [ 20.183742][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.189277][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.195583][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.200432][ T24] __ip6_finish_output+0x3e4/0x520 [ 20.205526][ T24] ip6_finish_output+0x3f/0x220 [ 20.210375][ T24] ? ip6_output+0x1d3/0x4b0 [ 20.215464][ T24] ip6_output+0x1f8/0x4b0 [ 20.220737][ T24] ? asan.module_dtor+0x20/0x20 [ 20.225564][ T24] ? skb_dst+0x40/0x40 [ 20.229621][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.234384][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 20.239599][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.245303][ T24] ? nf_hook_slow+0x150/0x1b0 [ 20.249969][ T24] NF_HOOK+0xdd/0x280 [ 20.253938][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.259560][ T24] ? NF_HOOK+0x280/0x280 [ 20.263785][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.268526][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.274746][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 20.279572][ T24] ? memcpy+0x56/0x70 [ 20.283535][ T24] ndisc_send_skb+0x646/0x9f0 [ 20.288188][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 20.293365][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.299086][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 20.304028][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.309726][ T24] ? skb_put+0x11d/0x200 [ 20.313951][ T24] ndisc_send_rs+0x26c/0x360 [ 20.318521][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 20.323870][ T24] ? addrconf_dad_stop+0x430/0x430 [ 20.328959][ T24] addrconf_dad_work+0x9c1/0x1520 [ 20.333961][ T24] ? move_linked_works+0x118/0x130 [ 20.339050][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.344768][ T24] ? __kasan_check_write+0x14/0x20 [ 20.349857][ T24] process_one_work+0x3ca/0x660 [ 20.354685][ T24] worker_thread+0x709/0xa20 [ 20.359257][ T24] ? __kthread_parkme+0x11b/0x150 [ 20.364259][ T24] kthread+0x371/0x390 [ 20.368303][ T24] ? pr_cont_work+0x110/0x110 [ 20.372954][ T24] ? __list_add+0xc0/0xc0 [ 20.377261][ T24] ret_from_fork+0x1f/0x30 [ 20.381718][ T24] ================================================================================ [ 20.391016][ T24] ================================================================================ [ 20.400306][ T24] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 20.408179][ T24] member access within address ffffc9000019f1c0 with insufficient space [ 20.416546][ T24] for an object of type 'struct sk_buff' [ 20.422174][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.10.81-syzkaller-00001-g4b644356291a #0 [ 20.433362][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.443551][ T24] Workqueue: ipv6_addrconf addrconf_dad_work [ 20.449535][ T24] Call Trace: [ 20.452996][ T24] dump_stack_lvl+0x1e2/0x24b [ 20.457756][ T24] ? show_regs_print_info+0x18/0x18 [ 20.463045][ T24] ? wg_allowedips_lookup_dst+0x190/0x190 [ 20.468739][ T24] dump_stack+0x15/0x1d [ 20.472869][ T24] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 20.478561][ T24] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 20.484518][ T24] wg_xmit+0x513/0xae0 [ 20.488562][ T24] ? wg_stop+0x140/0x140 [ 20.492793][ T24] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 20.499017][ T24] netdev_start_xmit+0x8a/0x160 [ 20.503854][ T24] dev_hard_start_xmit+0x18d/0x2f0 [ 20.508952][ T24] __dev_queue_xmit+0xfbe/0x1bb0 [ 20.513867][ T24] ? __local_bh_enable_ip+0xa8/0x170 [ 20.519395][ T24] ? ndisc_mc_map+0x329/0x9e0 [ 20.524133][ T24] ? dev_queue_xmit+0x20/0x20 [ 20.528785][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.534998][ T24] ? ndisc_constructor+0x690/0x8a0 [ 20.540083][ T24] ? _raw_write_unlock_bh+0x31/0x47 [ 20.545346][ T24] ? ___neigh_create+0x162d/0x1ab0 [ 20.550427][ T24] ? dev_hard_header+0xdb/0xf0 [ 20.555264][ T24] dev_queue_xmit+0x17/0x20 [ 20.559741][ T24] neigh_connected_output+0x288/0x2b0 [ 20.565088][ T24] ip6_finish_output2+0xde2/0x1440 [ 20.570213][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.575166][ T24] ? __ip6_finish_output+0x520/0x520 [ 20.580755][ T24] ? dst_cow_metrics_generic+0x55/0x1d0 [ 20.586286][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.592634][ T24] ? ip6_skb_dst_mtu+0xaf/0x260 [ 20.597461][ T24] __ip6_finish_output+0x3e4/0x520 [ 20.602572][ T24] ip6_finish_output+0x3f/0x220 [ 20.607406][ T24] ? ip6_output+0x1d3/0x4b0 [ 20.611889][ T24] ip6_output+0x1f8/0x4b0 [ 20.616281][ T24] ? asan.module_dtor+0x20/0x20 [ 20.621106][ T24] ? skb_dst+0x40/0x40 [ 20.625153][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.629903][ T24] ? selinux_ipv6_forward+0x50/0x50 [ 20.635077][ T24] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 20.640768][ T24] ? nf_hook_slow+0x150/0x1b0 [ 20.645417][ T24] NF_HOOK+0xdd/0x280 [ 20.649375][ T24] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 20.654980][ T24] ? NF_HOOK+0x280/0x280 [ 20.659195][ T24] ? __rcu_read_lock+0x50/0x50 [ 20.664278][ T24] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 20.670490][ T24] ? ndisc_send_skb+0x547/0x9f0 [ 20.675321][ T24] ? memcpy+0x56/0x70 [ 20.679452][ T24] ndisc_send_skb+0x646/0x9f0 [ 20.684102][ T24] ? slab_post_alloc_hook+0x90/0xa0 [ 20.689631][ T24] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 20.695157][ T24] ? skb_set_owner_w+0x1a8/0x310 [ 20.700245][ T24] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 20.706029][ T24] ? skb_put+0x11d/0x200 [ 20.710267][ T24] ndisc_send_rs+0x26c/0x360 [ 20.715091][ T24] addrconf_dad_completed+0x4f3/0x9f0 [ 20.720545][ T24] ? addrconf_dad_stop+0x430/0x430 [ 20.725645][ T24] addrconf_dad_work+0x9c1/0x1520 [ 20.730714][ T24] ? move_linked_works+0x118/0x130 [ 20.735796][ T24] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 20.741502][ T24] ? __kasan_check_write+0x14/0x20 [ 20.746936][ T24] process_one_work+0x3ca/0x660 [ 20.751760][ T24] worker_thread+0x709/0xa20 [ 20.756445][ T24] ? __kthread_parkme+0x11b/0x150 [ 20.761622][ T24] kthread+0x371/0x390 [ 20.765678][ T24] ? pr_cont_work+0x110/0x110 [ 20.770333][ T24] ? __list_add+0xc0/0xc0 [ 20.774656][ T24] ret_from_fork+0x1f/0x30 [ 20.779098][ T24] ================================================================================ [ 20.789800][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.798416][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2021/11/25 17:38:42 building call list... [ 20.815178][ T374] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.412621][ T9] device bridge_slave_1 left promiscuous mode [ 21.419026][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.426827][ T9] device bridge_slave_0 left promiscuous mode [ 21.433115][ T9] bridge0: port 1(bridge_slave_0) entered disabled state