Warning: Permanently added '10.128.15.198' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 85.574978][ T9963] ================================================================== [ 85.583315][ T9963] BUG: KASAN: slab-out-of-bounds in bitmap_ip_list+0x40f/0xf20 [ 85.590867][ T9963] Read of size 8 at addr ffff8880a38f2a00 by task syz-executor885/9963 [ 85.599082][ T9963] [ 85.601409][ T9963] CPU: 0 PID: 9963 Comm: syz-executor885 Not tainted 5.5.0-rc6-syzkaller #0 [ 85.610051][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.620095][ T9963] Call Trace: [ 85.623378][ T9963] dump_stack+0x197/0x210 [ 85.627706][ T9963] ? bitmap_ip_list+0x40f/0xf20 [ 85.632559][ T9963] print_address_description.constprop.0.cold+0xd4/0x30b [ 85.639578][ T9963] ? bitmap_ip_list+0x40f/0xf20 [ 85.644457][ T9963] ? bitmap_ip_list+0x40f/0xf20 [ 85.649379][ T9963] __kasan_report.cold+0x1b/0x41 [ 85.654325][ T9963] ? bitmap_ip_list+0x40f/0xf20 [ 85.659179][ T9963] kasan_report+0x12/0x20 [ 85.663499][ T9963] check_memory_region+0x134/0x1a0 [ 85.668597][ T9963] __kasan_check_read+0x11/0x20 [ 85.673452][ T9963] bitmap_ip_list+0x40f/0xf20 [ 85.678113][ T9963] ? bitmap_ip_add+0xe60/0xe60 [ 85.682870][ T9963] ? nla_put+0x110/0x150 [ 85.687092][ T9963] ip_set_dump_start+0x96c/0x1ca0 [ 85.692102][ T9963] ? ip_set_rename+0x720/0x720 [ 85.697108][ T9963] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 85.702635][ T9963] ? perf_trace_lock_acquire+0x4a0/0x530 [ 85.708276][ T9963] ? __kasan_check_write+0x14/0x20 [ 85.713383][ T9963] netlink_dump+0x558/0xfb0 [ 85.717868][ T9963] ? __netlink_sendskb+0xc0/0xc0 [ 85.722809][ T9963] __netlink_dump_start+0x66a/0x930 [ 85.727988][ T9963] ip_set_dump+0x15a/0x1d0 [ 85.732382][ T9963] ? call_ad+0x5a0/0x5a0 [ 85.736603][ T9963] ? ip_set_rename+0x720/0x720 [ 85.741347][ T9963] ? __ip_set_put_netlink.isra.0+0x90/0x90 [ 85.747132][ T9963] ? call_ad+0x5a0/0x5a0 [ 85.751355][ T9963] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 85.756277][ T9963] ? nfnetlink_bind+0x2c0/0x2c0 [ 85.761112][ T9963] ? __kasan_check_read+0x11/0x20 [ 85.766115][ T9963] ? __lock_acquire+0x8a0/0x4a00 [ 85.771029][ T9963] ? save_stack+0x5c/0x90 [ 85.775340][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.781578][ T9963] ? apparmor_capable+0x497/0x900 [ 85.786601][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.792845][ T9963] ? __kasan_check_read+0x11/0x20 [ 85.797949][ T9963] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 85.803416][ T9963] netlink_rcv_skb+0x177/0x450 [ 85.808162][ T9963] ? nfnetlink_bind+0x2c0/0x2c0 [ 85.813004][ T9963] ? netlink_ack+0xb50/0xb50 [ 85.817574][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.823795][ T9963] ? ns_capable_common+0x93/0x100 [ 85.828801][ T9963] ? ns_capable+0x20/0x30 [ 85.833111][ T9963] ? __netlink_ns_capable+0x104/0x140 [ 85.838476][ T9963] nfnetlink_rcv+0x1ba/0x460 [ 85.843059][ T9963] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 85.848520][ T9963] ? netlink_deliver_tap+0x24a/0xbe0 [ 85.853790][ T9963] ? __kasan_check_write+0x14/0x20 [ 85.858885][ T9963] netlink_unicast+0x58c/0x7d0 [ 85.863645][ T9963] ? netlink_attachskb+0x870/0x870 [ 85.868738][ T9963] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 85.874455][ T9963] ? __check_object_size+0x3d/0x437 [ 85.879658][ T9963] netlink_sendmsg+0x91c/0xea0 [ 85.884455][ T9963] ? netlink_unicast+0x7d0/0x7d0 [ 85.890341][ T9963] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 85.895903][ T9963] ? apparmor_socket_sendmsg+0x2a/0x30 [ 85.901350][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.907588][ T9963] ? security_socket_sendmsg+0x8d/0xc0 [ 85.913031][ T9963] ? netlink_unicast+0x7d0/0x7d0 [ 85.917948][ T9963] sock_sendmsg+0xd7/0x130 [ 85.922345][ T9963] ____sys_sendmsg+0x753/0x880 [ 85.927090][ T9963] ? kernel_sendmsg+0x50/0x50 [ 85.931749][ T9963] ? lockdep_init_map+0x1be/0x6d0 [ 85.936761][ T9963] ___sys_sendmsg+0x100/0x170 [ 85.941428][ T9963] ? sendmsg_copy_msghdr+0x70/0x70 [ 85.946530][ T9963] ? __kasan_check_read+0x11/0x20 [ 85.951533][ T9963] ? __lock_acquire+0x8a0/0x4a00 [ 85.956449][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.962682][ T9963] ? __this_cpu_preempt_check+0x35/0x190 [ 85.968301][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.974540][ T9963] ? percpu_counter_add_batch+0x13c/0x190 [ 85.980257][ T9963] ? __fd_install+0x1bc/0x640 [ 85.984920][ T9963] ? find_held_lock+0x35/0x130 [ 85.989670][ T9963] ? __fd_install+0x1bc/0x640 [ 85.994339][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.000560][ T9963] ? __fget_light+0x1a9/0x230 [ 86.005216][ T9963] ? __fdget+0x1b/0x20 [ 86.009271][ T9963] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 86.015510][ T9963] __sys_sendmsg+0x105/0x1d0 [ 86.020230][ T9963] ? __sys_sendmsg_sock+0xc0/0xc0 [ 86.025264][ T9963] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.030724][ T9963] ? do_fast_syscall_32+0xd1/0xe16 [ 86.035839][ T9963] ? entry_SYSENTER_compat+0x70/0x7f [ 86.041102][ T9963] ? do_fast_syscall_32+0xd1/0xe16 [ 86.046197][ T9963] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 86.051638][ T9963] do_fast_syscall_32+0x27b/0xe16 [ 86.056646][ T9963] entry_SYSENTER_compat+0x70/0x7f [ 86.061735][ T9963] RIP: 0023:0xf7ff79a9 [ 86.065783][ T9963] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 86.085373][ T9963] RSP: 002b:00000000ffea0fcc EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 86.093764][ T9963] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 86.101714][ T9963] RDX: 0000000000000010 RSI: 00000000080ea080 RDI: 00000000ffea1020 [ 86.109848][ T9963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.117803][ T9963] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 86.125762][ T9963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.133732][ T9963] [ 86.136038][ T9963] Allocated by task 9963: [ 86.140349][ T9963] save_stack+0x23/0x90 [ 86.144497][ T9963] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 86.150114][ T9963] kasan_kmalloc+0x9/0x10 [ 86.154433][ T9963] __kmalloc+0x163/0x770 [ 86.158688][ T9963] ip_set_alloc+0x38/0x5e [ 86.163341][ T9963] bitmap_ip_create+0x6ec/0xc20 [ 86.168174][ T9963] ip_set_create+0x6f1/0x1500 [ 86.172846][ T9963] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 86.177780][ T9963] netlink_rcv_skb+0x177/0x450 [ 86.182522][ T9963] nfnetlink_rcv+0x1ba/0x460 [ 86.187085][ T9963] netlink_unicast+0x58c/0x7d0 [ 86.191840][ T9963] netlink_sendmsg+0x91c/0xea0 [ 86.196594][ T9963] sock_sendmsg+0xd7/0x130 [ 86.201159][ T9963] ____sys_sendmsg+0x753/0x880 [ 86.205907][ T9963] ___sys_sendmsg+0x100/0x170 [ 86.210568][ T9963] __sys_sendmsg+0x105/0x1d0 [ 86.215153][ T9963] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 86.220604][ T9963] do_fast_syscall_32+0x27b/0xe16 [ 86.225635][ T9963] entry_SYSENTER_compat+0x70/0x7f [ 86.230773][ T9963] [ 86.233129][ T9963] Freed by task 9697: [ 86.237115][ T9963] save_stack+0x23/0x90 [ 86.241265][ T9963] __kasan_slab_free+0x102/0x150 [ 86.246186][ T9963] kasan_slab_free+0xe/0x10 [ 86.250691][ T9963] kfree+0x10a/0x2c0 [ 86.254586][ T9963] tomoyo_path_perm+0x24e/0x430 [ 86.259471][ T9963] tomoyo_inode_getattr+0x1d/0x30 [ 86.264491][ T9963] security_inode_getattr+0xf2/0x150 [ 86.269915][ T9963] vfs_getattr+0x25/0x70 [ 86.274152][ T9963] vfs_statx+0x157/0x200 [ 86.278440][ T9963] __do_sys_newstat+0xa4/0x130 [ 86.283263][ T9963] __x64_sys_newstat+0x54/0x80 [ 86.288124][ T9963] do_syscall_64+0xfa/0x790 [ 86.292620][ T9963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.298497][ T9963] [ 86.300821][ T9963] The buggy address belongs to the object at ffff8880a38f2a00 [ 86.300821][ T9963] which belongs to the cache kmalloc-32 of size 32 [ 86.314729][ T9963] The buggy address is located 0 bytes inside of [ 86.314729][ T9963] 32-byte region [ffff8880a38f2a00, ffff8880a38f2a20) [ 86.327742][ T9963] The buggy address belongs to the page: [ 86.333373][ T9963] page:ffffea00028e3c80 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff8880a38f2fc1 [ 86.343783][ T9963] raw: 00fffe0000000200 ffffea00027b1fc8 ffffea00029e05c8 ffff8880aa4001c0 [ 86.352472][ T9963] raw: ffff8880a38f2fc1 ffff8880a38f2000 0000000100000028 0000000000000000 [ 86.361116][ T9963] page dumped because: kasan: bad access detected [ 86.367516][ T9963] [ 86.369842][ T9963] Memory state around the buggy address: [ 86.375820][ T9963] ffff8880a38f2900: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 86.383891][ T9963] ffff8880a38f2980: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 86.392086][ T9963] >ffff8880a38f2a00: 04 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 86.400435][ T9963] ^ [ 86.404559][ T9963] ffff8880a38f2a80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 86.412644][ T9963] ffff8880a38f2b00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 86.420723][ T9963] ================================================================== [ 86.428890][ T9963] Disabling lock debugging due to kernel taint [ 86.436010][ T9963] Kernel panic - not syncing: panic_on_warn set ... [ 86.442628][ T9963] CPU: 0 PID: 9963 Comm: syz-executor885 Tainted: G B 5.5.0-rc6-syzkaller #0 [ 86.452672][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.462915][ T9963] Call Trace: [ 86.466243][ T9963] dump_stack+0x197/0x210 [ 86.470585][ T9963] panic+0x2e3/0x75c [ 86.474469][ T9963] ? add_taint.cold+0x16/0x16 [ 86.479233][ T9963] ? bitmap_ip_list+0x40f/0xf20 [ 86.484097][ T9963] ? preempt_schedule+0x4b/0x60 [ 86.488974][ T9963] ? ___preempt_schedule+0x16/0x18 [ 86.494183][ T9963] ? trace_hardirqs_on+0x5e/0x240 [ 86.499193][ T9963] ? bitmap_ip_list+0x40f/0xf20 [ 86.504043][ T9963] end_report+0x47/0x4f [ 86.508183][ T9963] ? bitmap_ip_list+0x40f/0xf20 [ 86.513035][ T9963] __kasan_report.cold+0xe/0x41 [ 86.517884][ T9963] ? bitmap_ip_list+0x40f/0xf20 [ 86.522860][ T9963] kasan_report+0x12/0x20 [ 86.527697][ T9963] check_memory_region+0x134/0x1a0 [ 86.532862][ T9963] __kasan_check_read+0x11/0x20 [ 86.537700][ T9963] bitmap_ip_list+0x40f/0xf20 [ 86.542810][ T9963] ? bitmap_ip_add+0xe60/0xe60 [ 86.547576][ T9963] ? nla_put+0x110/0x150 [ 86.551834][ T9963] ip_set_dump_start+0x96c/0x1ca0 [ 86.557081][ T9963] ? ip_set_rename+0x720/0x720 [ 86.561850][ T9963] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 86.567538][ T9963] ? perf_trace_lock_acquire+0x4a0/0x530 [ 86.573286][ T9963] ? __kasan_check_write+0x14/0x20 [ 86.578397][ T9963] netlink_dump+0x558/0xfb0 [ 86.582935][ T9963] ? __netlink_sendskb+0xc0/0xc0 [ 86.587861][ T9963] __netlink_dump_start+0x66a/0x930 [ 86.593053][ T9963] ip_set_dump+0x15a/0x1d0 [ 86.597449][ T9963] ? call_ad+0x5a0/0x5a0 [ 86.601686][ T9963] ? ip_set_rename+0x720/0x720 [ 86.606441][ T9963] ? __ip_set_put_netlink.isra.0+0x90/0x90 [ 86.612227][ T9963] ? call_ad+0x5a0/0x5a0 [ 86.616465][ T9963] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 86.622069][ T9963] ? nfnetlink_bind+0x2c0/0x2c0 [ 86.626909][ T9963] ? __kasan_check_read+0x11/0x20 [ 86.631936][ T9963] ? __lock_acquire+0x8a0/0x4a00 [ 86.636853][ T9963] ? save_stack+0x5c/0x90 [ 86.641195][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.647435][ T9963] ? apparmor_capable+0x497/0x900 [ 86.652440][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.658671][ T9963] ? __kasan_check_read+0x11/0x20 [ 86.663674][ T9963] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 86.669128][ T9963] netlink_rcv_skb+0x177/0x450 [ 86.673881][ T9963] ? nfnetlink_bind+0x2c0/0x2c0 [ 86.678710][ T9963] ? netlink_ack+0xb50/0xb50 [ 86.683285][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.689676][ T9963] ? ns_capable_common+0x93/0x100 [ 86.694691][ T9963] ? ns_capable+0x20/0x30 [ 86.699001][ T9963] ? __netlink_ns_capable+0x104/0x140 [ 86.704438][ T9963] nfnetlink_rcv+0x1ba/0x460 [ 86.709017][ T9963] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 86.714484][ T9963] ? netlink_deliver_tap+0x24a/0xbe0 [ 86.719768][ T9963] ? __kasan_check_write+0x14/0x20 [ 86.742741][ T9963] netlink_unicast+0x58c/0x7d0 [ 86.747496][ T9963] ? netlink_attachskb+0x870/0x870 [ 86.752629][ T9963] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 86.758793][ T9963] ? __check_object_size+0x3d/0x437 [ 86.763982][ T9963] netlink_sendmsg+0x91c/0xea0 [ 86.768734][ T9963] ? netlink_unicast+0x7d0/0x7d0 [ 86.773738][ T9963] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 86.779397][ T9963] ? apparmor_socket_sendmsg+0x2a/0x30 [ 86.785101][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.791327][ T9963] ? security_socket_sendmsg+0x8d/0xc0 [ 86.796798][ T9963] ? netlink_unicast+0x7d0/0x7d0 [ 86.801895][ T9963] sock_sendmsg+0xd7/0x130 [ 86.806336][ T9963] ____sys_sendmsg+0x753/0x880 [ 86.812393][ T9963] ? kernel_sendmsg+0x50/0x50 [ 86.817131][ T9963] ? lockdep_init_map+0x1be/0x6d0 [ 86.825635][ T9963] ___sys_sendmsg+0x100/0x170 [ 86.830307][ T9963] ? sendmsg_copy_msghdr+0x70/0x70 [ 86.835425][ T9963] ? __kasan_check_read+0x11/0x20 [ 86.840537][ T9963] ? __lock_acquire+0x8a0/0x4a00 [ 86.845487][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.851726][ T9963] ? __this_cpu_preempt_check+0x35/0x190 [ 86.857864][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.864086][ T9963] ? percpu_counter_add_batch+0x13c/0x190 [ 86.869807][ T9963] ? __fd_install+0x1bc/0x640 [ 86.874478][ T9963] ? find_held_lock+0x35/0x130 [ 86.879231][ T9963] ? __fd_install+0x1bc/0x640 [ 86.883907][ T9963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.890220][ T9963] ? __fget_light+0x1a9/0x230 [ 86.894962][ T9963] ? __fdget+0x1b/0x20 [ 86.899023][ T9963] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 86.905331][ T9963] __sys_sendmsg+0x105/0x1d0 [ 86.909919][ T9963] ? __sys_sendmsg_sock+0xc0/0xc0 [ 86.914939][ T9963] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.920373][ T9963] ? do_fast_syscall_32+0xd1/0xe16 [ 86.925462][ T9963] ? entry_SYSENTER_compat+0x70/0x7f [ 86.930829][ T9963] ? do_fast_syscall_32+0xd1/0xe16 [ 86.935957][ T9963] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 86.941414][ T9963] do_fast_syscall_32+0x27b/0xe16 [ 86.946436][ T9963] entry_SYSENTER_compat+0x70/0x7f [ 86.951539][ T9963] RIP: 0023:0xf7ff79a9 [ 86.955615][ T9963] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 86.975834][ T9963] RSP: 002b:00000000ffea0fcc EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 86.984237][ T9963] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 86.992736][ T9963] RDX: 0000000000000010 RSI: 00000000080ea080 RDI: 00000000ffea1020 [ 87.000695][ T9963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.009371][ T9963] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 87.017349][ T9963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.026994][ T9963] Kernel Offset: disabled [ 87.031343][ T9963] Rebooting in 86400 seconds..