Warning: Permanently added '10.128.0.232' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 65.566515][ T8485] ================================================================== [ 65.574839][ T8485] BUG: KASAN: global-out-of-bounds in string+0x39c/0x3d0 [ 65.581848][ T8485] Read of size 1 at addr ffffffff8fadd9e0 by task syz-executor145/8485 [ 65.590066][ T8485] [ 65.592390][ T8485] CPU: 0 PID: 8485 Comm: syz-executor145 Not tainted 5.10.0-rc7-syzkaller #0 [ 65.601293][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.611333][ T8485] Call Trace: [ 65.614623][ T8485] dump_stack+0x107/0x163 [ 65.618943][ T8485] ? string+0x39c/0x3d0 [ 65.623081][ T8485] ? string+0x39c/0x3d0 [ 65.627359][ T8485] print_address_description.constprop.0.cold+0x5/0x4c8 [ 65.634311][ T8485] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 65.639709][ T8485] ? vprintk_func+0x95/0x1e0 [ 65.644290][ T8485] ? string+0x39c/0x3d0 [ 65.648430][ T8485] ? string+0x39c/0x3d0 [ 65.652569][ T8485] kasan_report.cold+0x1f/0x37 [ 65.657316][ T8485] ? string+0x39c/0x3d0 [ 65.661452][ T8485] string+0x39c/0x3d0 [ 65.665472][ T8485] ? format_decode+0x230/0xad0 [ 65.670253][ T8485] ? ip6_addr_string_sa+0x830/0x830 [ 65.675445][ T8485] ? lockdep_unlock+0x11c/0x290 [ 65.680314][ T8485] ? __lock_acquire+0x2510/0x5500 [ 65.685334][ T8485] vsnprintf+0x71b/0x14f0 [ 65.689695][ T8485] ? pointer+0x930/0x930 [ 65.693933][ T8485] snprintf+0xbb/0xf0 [ 65.697901][ T8485] ? vsprintf+0x30/0x30 [ 65.702046][ T8485] ? __nla_reserve+0x9a/0xc0 [ 65.706619][ T8485] ? memcpy+0x39/0x60 [ 65.710602][ T8485] smc_nl_get_sys_info+0x493/0x880 [ 65.715698][ T8485] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 65.722095][ T8485] ? genl_lock_dumpit+0x3c/0x90 [ 65.726929][ T8485] ? mutex_lock_io_nested+0xf60/0xf60 [ 65.732294][ T8485] ? rcu_read_lock_sched_held+0x3a/0x70 [ 65.737815][ T8485] ? trace_kmalloc_node+0xc1/0xf0 [ 65.742816][ T8485] ? __kmalloc_node_track_caller+0x21a/0x3e0 [ 65.748781][ T8485] ? netlink_dump+0x680/0xb70 [ 65.753435][ T8485] ? __phys_addr+0x9a/0x110 [ 65.757915][ T8485] ? memset+0x20/0x40 [ 65.761879][ T8485] genl_lock_dumpit+0x60/0x90 [ 65.766535][ T8485] netlink_dump+0x4b9/0xb70 [ 65.771019][ T8485] ? netlink_insert+0x1670/0x1670 [ 65.776019][ T8485] ? __mutex_unlock_slowpath+0xe2/0x610 [ 65.781544][ T8485] ? kasan_unpoison_shadow+0x33/0x40 [ 65.786810][ T8485] ? genl_start+0x44a/0x670 [ 65.791306][ T8485] __netlink_dump_start+0x642/0x900 [ 65.796482][ T8485] ? genl_family_rcv_msg_doit+0x320/0x320 [ 65.802184][ T8485] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 65.808582][ T8485] genl_family_rcv_msg_dumpit+0x2af/0x310 [ 65.814283][ T8485] ? genl_rcv+0x40/0x40 [ 65.818415][ T8485] ? mutex_lock_io_nested+0xf60/0xf60 [ 65.823773][ T8485] ? __lock_acquire+0x2510/0x5500 [ 65.828776][ T8485] ? genl_family_rcv_msg_doit+0x320/0x320 [ 65.834469][ T8485] ? genl_unlock+0x20/0x20 [ 65.838860][ T8485] ? genl_parallel_done+0xc0/0xc0 [ 65.843866][ T8485] ? __radix_tree_lookup+0x1f3/0x290 [ 65.849129][ T8485] ? genl_get_cmd+0x3cf/0x480 [ 65.853801][ T8485] genl_rcv_msg+0x434/0x580 [ 65.858294][ T8485] ? genl_get_cmd+0x480/0x480 [ 65.862951][ T8485] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 65.869342][ T8485] ? lock_release+0x710/0x710 [ 65.874011][ T8485] netlink_rcv_skb+0x153/0x420 [ 65.878750][ T8485] ? genl_get_cmd+0x480/0x480 [ 65.883408][ T8485] ? netlink_ack+0xaa0/0xaa0 [ 65.887985][ T8485] genl_rcv+0x24/0x40 [ 65.891947][ T8485] netlink_unicast+0x533/0x7d0 [ 65.896699][ T8485] ? netlink_attachskb+0x810/0x810 [ 65.901804][ T8485] ? __phys_addr_symbol+0x2c/0x70 [ 65.906810][ T8485] ? __check_object_size+0x171/0x3f0 [ 65.912076][ T8485] netlink_sendmsg+0x856/0xd90 [ 65.916831][ T8485] ? netlink_unicast+0x7d0/0x7d0 [ 65.921752][ T8485] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 65.927013][ T8485] ? netlink_unicast+0x7d0/0x7d0 [ 65.931928][ T8485] sock_sendmsg+0xcf/0x120 [ 65.936323][ T8485] ____sys_sendmsg+0x6e8/0x810 [ 65.941078][ T8485] ? kernel_sendmsg+0x50/0x50 [ 65.945750][ T8485] ? do_recvmmsg+0x6c0/0x6c0 [ 65.950336][ T8485] ? find_held_lock+0x2d/0x110 [ 65.955090][ T8485] ___sys_sendmsg+0xf3/0x170 [ 65.959659][ T8485] ? sendmsg_copy_msghdr+0x160/0x160 [ 65.964944][ T8485] ? do_huge_pmd_anonymous_page+0x8f1/0x2170 [ 65.970914][ T8485] ? find_held_lock+0x2d/0x110 [ 65.975655][ T8485] ? __fget_light+0x215/0x280 [ 65.980317][ T8485] __sys_sendmsg+0xe5/0x1b0 [ 65.984802][ T8485] ? __sys_sendmsg_sock+0xb0/0xb0 [ 65.989812][ T8485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 65.995689][ T8485] do_syscall_64+0x2d/0x70 [ 66.000093][ T8485] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 66.005964][ T8485] RIP: 0033:0x440299 [ 66.009836][ T8485] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 66.029416][ T8485] RSP: 002b:00007ffe69ef5728 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.037819][ T8485] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440299 [ 66.045771][ T8485] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 66.053726][ T8485] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 66.061676][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401aa0 [ 66.069709][ T8485] R13: 0000000000401b30 R14: 0000000000000000 R15: 0000000000000000 [ 66.077764][ T8485] [ 66.080075][ T8485] The buggy address belongs to the variable: [ 66.086038][ T8485] smc_hostname+0x20/0x40 [ 66.090338][ T8485] [ 66.092640][ T8485] Memory state around the buggy address: [ 66.098300][ T8485] ffffffff8fadd880: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 66.106345][ T8485] ffffffff8fadd900: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 66.114436][ T8485] >ffffffff8fadd980: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 [ 66.122484][ T8485] ^ [ 66.129662][ T8485] ffffffff8fadda00: 04 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 66.137716][ T8485] ffffffff8fadda80: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 66.145764][ T8485] ================================================================== [ 66.153817][ T8485] Disabling lock debugging due to kernel taint [ 66.161941][ T8485] Kernel panic - not syncing: panic_on_warn set ... [ 66.168546][ T8485] CPU: 1 PID: 8485 Comm: syz-executor145 Tainted: G B 5.10.0-rc7-syzkaller #0 [ 66.178690][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.188799][ T8485] Call Trace: [ 66.192068][ T8485] dump_stack+0x107/0x163 [ 66.196370][ T8485] ? string+0x390/0x3d0 [ 66.200538][ T8485] panic+0x306/0x73d [ 66.204404][ T8485] ? __warn_printk+0xf3/0xf3 [ 66.208970][ T8485] ? preempt_schedule_common+0x59/0xc0 [ 66.214402][ T8485] ? string+0x39c/0x3d0 [ 66.218532][ T8485] ? preempt_schedule_thunk+0x16/0x18 [ 66.224000][ T8485] ? trace_hardirqs_on+0x51/0x1c0 [ 66.228998][ T8485] ? string+0x39c/0x3d0 [ 66.233140][ T8485] ? string+0x39c/0x3d0 [ 66.237270][ T8485] end_report+0x58/0x5e [ 66.241399][ T8485] kasan_report.cold+0xd/0x37 [ 66.246048][ T8485] ? string+0x39c/0x3d0 [ 66.250176][ T8485] string+0x39c/0x3d0 [ 66.254129][ T8485] ? format_decode+0x230/0xad0 [ 66.258878][ T8485] ? ip6_addr_string_sa+0x830/0x830 [ 66.264062][ T8485] ? lockdep_unlock+0x11c/0x290 [ 66.268884][ T8485] ? __lock_acquire+0x2510/0x5500 [ 66.273882][ T8485] vsnprintf+0x71b/0x14f0 [ 66.278186][ T8485] ? pointer+0x930/0x930 [ 66.282402][ T8485] snprintf+0xbb/0xf0 [ 66.286356][ T8485] ? vsprintf+0x30/0x30 [ 66.290483][ T8485] ? __nla_reserve+0x9a/0xc0 [ 66.295057][ T8485] ? memcpy+0x39/0x60 [ 66.299012][ T8485] smc_nl_get_sys_info+0x493/0x880 [ 66.304099][ T8485] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 66.310498][ T8485] ? genl_lock_dumpit+0x3c/0x90 [ 66.315321][ T8485] ? mutex_lock_io_nested+0xf60/0xf60 [ 66.320668][ T8485] ? rcu_read_lock_sched_held+0x3a/0x70 [ 66.326203][ T8485] ? trace_kmalloc_node+0xc1/0xf0 [ 66.331228][ T8485] ? __kmalloc_node_track_caller+0x21a/0x3e0 [ 66.337179][ T8485] ? netlink_dump+0x680/0xb70 [ 66.341827][ T8485] ? __phys_addr+0x9a/0x110 [ 66.346301][ T8485] ? memset+0x20/0x40 [ 66.350255][ T8485] genl_lock_dumpit+0x60/0x90 [ 66.354901][ T8485] netlink_dump+0x4b9/0xb70 [ 66.359389][ T8485] ? netlink_insert+0x1670/0x1670 [ 66.364398][ T8485] ? __mutex_unlock_slowpath+0xe2/0x610 [ 66.369916][ T8485] ? kasan_unpoison_shadow+0x33/0x40 [ 66.375172][ T8485] ? genl_start+0x44a/0x670 [ 66.379671][ T8485] __netlink_dump_start+0x642/0x900 [ 66.384842][ T8485] ? genl_family_rcv_msg_doit+0x320/0x320 [ 66.390533][ T8485] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 66.396917][ T8485] genl_family_rcv_msg_dumpit+0x2af/0x310 [ 66.402610][ T8485] ? genl_rcv+0x40/0x40 [ 66.406739][ T8485] ? mutex_lock_io_nested+0xf60/0xf60 [ 66.412095][ T8485] ? __lock_acquire+0x2510/0x5500 [ 66.417090][ T8485] ? genl_family_rcv_msg_doit+0x320/0x320 [ 66.422780][ T8485] ? genl_unlock+0x20/0x20 [ 66.427168][ T8485] ? genl_parallel_done+0xc0/0xc0 [ 66.432164][ T8485] ? __radix_tree_lookup+0x1f3/0x290 [ 66.437419][ T8485] ? genl_get_cmd+0x3cf/0x480 [ 66.442072][ T8485] genl_rcv_msg+0x434/0x580 [ 66.446547][ T8485] ? genl_get_cmd+0x480/0x480 [ 66.451197][ T8485] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 66.457581][ T8485] ? lock_release+0x710/0x710 [ 66.462236][ T8485] netlink_rcv_skb+0x153/0x420 [ 66.466983][ T8485] ? genl_get_cmd+0x480/0x480 [ 66.471630][ T8485] ? netlink_ack+0xaa0/0xaa0 [ 66.476192][ T8485] genl_rcv+0x24/0x40 [ 66.480146][ T8485] netlink_unicast+0x533/0x7d0 [ 66.484882][ T8485] ? netlink_attachskb+0x810/0x810 [ 66.489971][ T8485] ? __phys_addr_symbol+0x2c/0x70 [ 66.494968][ T8485] ? __check_object_size+0x171/0x3f0 [ 66.500236][ T8485] netlink_sendmsg+0x856/0xd90 [ 66.504984][ T8485] ? netlink_unicast+0x7d0/0x7d0 [ 66.509903][ T8485] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 66.515168][ T8485] ? netlink_unicast+0x7d0/0x7d0 [ 66.520117][ T8485] sock_sendmsg+0xcf/0x120 [ 66.524508][ T8485] ____sys_sendmsg+0x6e8/0x810 [ 66.529243][ T8485] ? kernel_sendmsg+0x50/0x50 [ 66.533916][ T8485] ? do_recvmmsg+0x6c0/0x6c0 [ 66.538480][ T8485] ? find_held_lock+0x2d/0x110 [ 66.543239][ T8485] ___sys_sendmsg+0xf3/0x170 [ 66.547801][ T8485] ? sendmsg_copy_msghdr+0x160/0x160 [ 66.553062][ T8485] ? do_huge_pmd_anonymous_page+0x8f1/0x2170 [ 66.559016][ T8485] ? find_held_lock+0x2d/0x110 [ 66.563755][ T8485] ? __fget_light+0x215/0x280 [ 66.568402][ T8485] __sys_sendmsg+0xe5/0x1b0 [ 66.572876][ T8485] ? __sys_sendmsg_sock+0xb0/0xb0 [ 66.577876][ T8485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 66.583755][ T8485] do_syscall_64+0x2d/0x70 [ 66.588149][ T8485] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 66.594023][ T8485] RIP: 0033:0x440299 [ 66.597894][ T8485] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 66.617604][ T8485] RSP: 002b:00007ffe69ef5728 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.626015][ T8485] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440299 [ 66.634052][ T8485] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 66.642282][ T8485] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 66.650265][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401aa0 [ 66.658209][ T8485] R13: 0000000000401b30 R14: 0000000000000000 R15: 0000000000000000 [ 66.666645][ T8485] Kernel Offset: disabled [ 66.670953][ T8485] Rebooting in 86400 seconds..