[ 13.606623][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 13.609128][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 14.929952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. 2021/11/04 22:50:51 fuzzer started 2021/11/04 22:50:51 connecting to host at 10.128.0.163:46349 2021/11/04 22:50:51 checking machine... 2021/11/04 22:50:51 checking revisions... 2021/11/04 22:50:51 testing simple program... [ 20.801341][ T23] audit: type=1400 audit(1636066251.790:73): avc: denied { getattr } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.820069][ T370] cgroup: Unknown subsys name 'net' [ 20.825004][ T23] audit: type=1400 audit(1636066251.790:74): avc: denied { read } for pid=362 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.851289][ T23] audit: type=1400 audit(1636066251.790:75): avc: denied { open } for pid=362 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 20.851464][ T370] cgroup: Unknown subsys name 'devices' [ 20.874978][ T23] audit: type=1400 audit(1636066251.800:76): avc: denied { read } for pid=362 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.903951][ T23] audit: type=1400 audit(1636066251.800:77): avc: denied { open } for pid=362 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.927864][ T23] audit: type=1400 audit(1636066251.800:78): avc: denied { mounton } for pid=370 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.951309][ T23] audit: type=1400 audit(1636066251.800:79): avc: denied { mount } for pid=370 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.974070][ T23] audit: type=1400 audit(1636066251.820:80): avc: denied { unmount } for pid=370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.091765][ T370] cgroup: Unknown subsys name 'hugetlb' [ 21.097540][ T370] cgroup: Unknown subsys name 'rlimit' [ 21.251053][ T23] audit: type=1400 audit(1636066252.240:81): avc: denied { setattr } for pid=370 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.275365][ T23] audit: type=1400 audit(1636066252.270:82): avc: denied { execmem } for pid=372 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.348284][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.355631][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.363167][ T373] device bridge_slave_0 entered promiscuous mode [ 21.370096][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.377247][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.385047][ T373] device bridge_slave_1 entered promiscuous mode [ 21.416180][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.423324][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.430784][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.437884][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.456900][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.464308][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.472462][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.480189][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.489533][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.498091][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.505172][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.520827][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.529167][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.536202][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.543974][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.552081][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.570556][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.578884][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.588577][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.603125][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.611608][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.620259][ T40] ================================================================================ [ 21.629674][ T40] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:2023:28 [ 21.637935][ T40] member access within address ffffc9000023f1c0 with insufficient space [ 21.646350][ T40] for an object of type 'struct sk_buff' [ 21.651996][ T40] CPU: 1 PID: 40 Comm: kworker/1:1 Not tainted 5.10.77-syzkaller-01139-ga7c8ce846007 #0 [ 21.661863][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.672023][ T40] Workqueue: ipv6_addrconf addrconf_dad_work [ 21.678015][ T40] Call Trace: [ 21.681305][ T40] dump_stack_lvl+0x1e2/0x24b [ 21.685970][ T40] ? show_regs_print_info+0x18/0x18 [ 21.691578][ T40] ? wg_allowedips_lookup_dst+0x190/0x190 [ 21.697623][ T40] dump_stack+0x15/0x1d [ 21.701914][ T40] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 21.707965][ T40] ? __sanitizer_cov_trace_switch+0x74/0x90 [ 21.714140][ T40] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 21.720129][ T40] wg_xmit+0x4a2/0xae0 [ 21.724187][ T40] ? wg_stop+0x140/0x140 [ 21.728491][ T40] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 21.735618][ T40] netdev_start_xmit+0x8a/0x160 [ 21.740461][ T40] dev_hard_start_xmit+0x18d/0x2f0 [ 21.745569][ T40] __dev_queue_xmit+0xfbe/0x1bb0 [ 21.750489][ T40] ? dev_queue_xmit+0x20/0x20 [ 21.755144][ T40] ? __local_bh_enable_ip+0xa8/0x170 [ 21.760491][ T40] ? do_raw_spin_unlock+0x50/0x50 [ 21.765574][ T40] ? _local_bh_enable+0x30/0x30 [ 21.770398][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.776609][ T40] ? ndisc_constructor+0x690/0x8a0 [ 21.781693][ T40] ? _raw_write_unlock_bh+0x31/0x47 [ 21.786863][ T40] ? dev_hard_header+0xdb/0xf0 [ 21.791766][ T40] dev_queue_xmit+0x17/0x20 [ 21.796426][ T40] neigh_connected_output+0x288/0x2b0 [ 21.801805][ T40] ip6_finish_output2+0xde2/0x1440 [ 21.807182][ T40] ? __rcu_read_lock+0x50/0x50 [ 21.811926][ T40] ? __ip6_finish_output+0x520/0x520 [ 21.817185][ T40] ? dst_cow_metrics_generic+0x55/0x1d0 [ 21.822703][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.828936][ T40] ? ip6_skb_dst_mtu+0xaf/0x260 [ 21.833777][ T40] __ip6_finish_output+0x3e4/0x520 [ 21.839189][ T40] ip6_finish_output+0x3f/0x220 [ 21.844120][ T40] ? ip6_output+0x1d3/0x4b0 [ 21.848614][ T40] ip6_output+0x1f8/0x4b0 [ 21.852935][ T40] ? asan.module_dtor+0x20/0x20 [ 21.857783][ T40] ? skb_dst+0x40/0x40 [ 21.861832][ T40] ? __rcu_read_lock+0x50/0x50 [ 21.866576][ T40] ? selinux_ipv6_forward+0x50/0x50 [ 21.871752][ T40] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 21.877443][ T40] ? nf_hook_slow+0x150/0x1b0 [ 21.882091][ T40] NF_HOOK+0xdd/0x280 [ 21.886721][ T40] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 21.893368][ T40] ? NF_HOOK+0x280/0x280 [ 21.898096][ T40] ? __rcu_read_lock+0x50/0x50 [ 21.903067][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 21.909708][ T40] ? ndisc_send_skb+0x547/0x9f0 [ 21.914820][ T40] ? memcpy+0x56/0x70 [ 21.918799][ T40] ndisc_send_skb+0x646/0x9f0 [ 21.923544][ T40] ? slab_post_alloc_hook+0x90/0xa0 [ 21.928747][ T40] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 21.934423][ T40] ? skb_set_owner_w+0x1a8/0x310 [ 21.939359][ T40] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 21.945072][ T40] ? skb_put+0x11d/0x200 [ 21.949349][ T40] ndisc_send_rs+0x26c/0x360 [ 21.954024][ T40] addrconf_dad_completed+0x4f3/0x9f0 [ 21.959493][ T40] ? addrconf_dad_stop+0x430/0x430 [ 21.964608][ T40] ? switch_mm_irqs_off+0x2dd/0x720 [ 21.970040][ T40] addrconf_dad_work+0x9c1/0x1520 [ 21.975077][ T40] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 21.981061][ T40] ? __kasan_check_write+0x14/0x20 [ 21.986346][ T40] process_one_work+0x3ca/0x660 [ 21.991184][ T40] worker_thread+0x709/0xa20 [ 21.995885][ T40] ? __kthread_parkme+0x11b/0x150 [ 22.001018][ T40] kthread+0x371/0x390 [ 22.005105][ T40] ? pr_cont_work+0x110/0x110 [ 22.009775][ T40] ? __list_add+0xc0/0xc0 [ 22.014289][ T40] ret_from_fork+0x1f/0x30 [ 22.019284][ T40] ================================================================================ [ 22.028765][ T40] ================================================================================ [ 22.038291][ T40] UBSAN: object-size-mismatch in ./include/linux/skbuff.h:1916:2 [ 22.046122][ T40] member access within address ffffc9000023f1c0 with insufficient space [ 22.054482][ T40] for an object of type 'struct sk_buff' [ 22.060139][ T40] CPU: 1 PID: 40 Comm: kworker/1:1 Not tainted 5.10.77-syzkaller-01139-ga7c8ce846007 #0 [ 22.069837][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.080239][ T40] Workqueue: ipv6_addrconf addrconf_dad_work [ 22.086292][ T40] Call Trace: [ 22.089588][ T40] dump_stack_lvl+0x1e2/0x24b [ 22.094861][ T40] ? show_regs_print_info+0x18/0x18 [ 22.100131][ T40] ? wg_allowedips_lookup_dst+0x190/0x190 [ 22.105839][ T40] dump_stack+0x15/0x1d [ 22.109988][ T40] ubsan_type_mismatch_common+0x1ed/0x3a0 [ 22.115711][ T40] __ubsan_handle_type_mismatch_v1+0x5b/0x70 [ 22.121685][ T40] wg_xmit+0x513/0xae0 [ 22.125758][ T40] ? wg_stop+0x140/0x140 [ 22.130037][ T40] ? __sanitizer_cov_trace_const_cmp2+0x19/0x20 [ 22.136272][ T40] netdev_start_xmit+0x8a/0x160 [ 22.141293][ T40] dev_hard_start_xmit+0x18d/0x2f0 [ 22.146521][ T40] __dev_queue_xmit+0xfbe/0x1bb0 [ 22.151457][ T40] ? dev_queue_xmit+0x20/0x20 [ 22.156301][ T40] ? __local_bh_enable_ip+0xa8/0x170 [ 22.161744][ T40] ? do_raw_spin_unlock+0x50/0x50 [ 22.166842][ T40] ? _local_bh_enable+0x30/0x30 [ 22.171683][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.177921][ T40] ? ndisc_constructor+0x690/0x8a0 [ 22.183023][ T40] ? _raw_write_unlock_bh+0x31/0x47 [ 22.188471][ T40] ? dev_hard_header+0xdb/0xf0 [ 22.194101][ T40] dev_queue_xmit+0x17/0x20 [ 22.198615][ T40] neigh_connected_output+0x288/0x2b0 [ 22.204194][ T40] ip6_finish_output2+0xde2/0x1440 [ 22.209286][ T40] ? __rcu_read_lock+0x50/0x50 [ 22.214225][ T40] ? __ip6_finish_output+0x520/0x520 [ 22.219692][ T40] ? dst_cow_metrics_generic+0x55/0x1d0 [ 22.225346][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.231852][ T40] ? ip6_skb_dst_mtu+0xaf/0x260 [ 22.236716][ T40] __ip6_finish_output+0x3e4/0x520 [ 22.241839][ T40] ip6_finish_output+0x3f/0x220 [ 22.247135][ T40] ? ip6_output+0x1d3/0x4b0 [ 22.251620][ T40] ip6_output+0x1f8/0x4b0 [ 22.255965][ T40] ? asan.module_dtor+0x20/0x20 [ 22.260820][ T40] ? skb_dst+0x40/0x40 [ 22.264967][ T40] ? __rcu_read_lock+0x50/0x50 [ 22.269912][ T40] ? selinux_ipv6_forward+0x50/0x50 [ 22.275557][ T40] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 22.281600][ T40] ? nf_hook_slow+0x150/0x1b0 [ 22.286574][ T40] NF_HOOK+0xdd/0x280 [ 22.290657][ T40] ? addrconf_addr_solict_mult+0xe0/0xe0 [ 22.296540][ T40] ? NF_HOOK+0x280/0x280 [ 22.300901][ T40] ? __rcu_read_lock+0x50/0x50 [ 22.305679][ T40] ? __sanitizer_cov_trace_const_cmp4+0x19/0x20 [ 22.311999][ T40] ? ndisc_send_skb+0x547/0x9f0 [ 22.317306][ T40] ? memcpy+0x56/0x70 [ 22.321272][ T40] ndisc_send_skb+0x646/0x9f0 [ 22.326265][ T40] ? slab_post_alloc_hook+0x90/0xa0 [ 22.331623][ T40] ? ndisc_fill_addr_option+0x2f0/0x2f0 [ 22.337428][ T40] ? skb_set_owner_w+0x1a8/0x310 [ 22.342869][ T40] ? __sanitizer_cov_trace_cmp4+0x19/0x20 [ 22.348731][ T40] ? skb_put+0x11d/0x200 [ 22.353079][ T40] ndisc_send_rs+0x26c/0x360 [ 22.358536][ T40] addrconf_dad_completed+0x4f3/0x9f0 [ 22.363904][ T40] ? addrconf_dad_stop+0x430/0x430 [ 22.369437][ T40] ? switch_mm_irqs_off+0x2dd/0x720 [ 22.374798][ T40] addrconf_dad_work+0x9c1/0x1520 [ 22.380262][ T40] ? ipv6_use_optimistic_addr+0x1d0/0x1d0 [ 22.386654][ T40] ? __kasan_check_write+0x14/0x20 [ 22.391979][ T40] process_one_work+0x3ca/0x660 [ 22.396817][ T40] worker_thread+0x709/0xa20 [ 22.401409][ T40] ? __kthread_parkme+0x11b/0x150 [ 22.406433][ T40] kthread+0x371/0x390 [ 22.410963][ T40] ? pr_cont_work+0x110/0x110 [ 22.415725][ T40] ? __list_add+0xc0/0xc0 [ 22.420381][ T40] ret_from_fork+0x1f/0x30 2021/11/04 22:50:53 building call list... [ 22.424944][ T40] ================================================================================ [ 22.440503][ T373] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.050270][ T9] device bridge_slave_1 left promiscuous mode [ 23.056439][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.064582][ T9] device bridge_slave_0 left promiscuous mode [ 23.070854][ T9] bridge0: port 1(bridge_slave_0) entered disabled state