Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. executing program [ 63.687651][ T8497] ================================================================== [ 63.695841][ T8497] BUG: KASAN: global-out-of-bounds in string+0x39c/0x3d0 [ 63.702843][ T8497] Read of size 1 at addr ffffffff8faea960 by task syz-executor349/8497 [ 63.711092][ T8497] [ 63.713404][ T8497] CPU: 1 PID: 8497 Comm: syz-executor349 Not tainted 5.10.0-syzkaller #0 [ 63.721790][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.731844][ T8497] Call Trace: [ 63.735127][ T8497] dump_stack+0x107/0x163 [ 63.739435][ T8497] ? string+0x39c/0x3d0 [ 63.743571][ T8497] ? string+0x39c/0x3d0 [ 63.747706][ T8497] print_address_description.constprop.0.cold+0x5/0x4c8 [ 63.754629][ T8497] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 63.759982][ T8497] ? vprintk_func+0x95/0x1e0 [ 63.764553][ T8497] ? string+0x39c/0x3d0 [ 63.768683][ T8497] ? string+0x39c/0x3d0 [ 63.772816][ T8497] kasan_report.cold+0x1f/0x37 [ 63.777562][ T8497] ? string+0x39c/0x3d0 [ 63.781697][ T8497] string+0x39c/0x3d0 [ 63.785686][ T8497] ? format_decode+0x230/0xad0 [ 63.790429][ T8497] ? ip6_addr_string_sa+0x830/0x830 [ 63.795628][ T8497] ? lockdep_unlock+0x11c/0x290 [ 63.800463][ T8497] ? __lock_acquire+0x2510/0x5500 [ 63.805482][ T8497] vsnprintf+0x71b/0x14f0 [ 63.809802][ T8497] ? pointer+0x930/0x930 [ 63.814032][ T8497] snprintf+0xbb/0xf0 [ 63.817996][ T8497] ? vsprintf+0x30/0x30 [ 63.822136][ T8497] ? __nla_reserve+0x9a/0xc0 [ 63.826711][ T8497] ? memcpy+0x39/0x60 [ 63.830705][ T8497] smc_nl_get_sys_info+0x493/0x880 [ 63.835811][ T8497] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 63.842216][ T8497] ? genl_lock_dumpit+0x3c/0x90 [ 63.847054][ T8497] ? mark_held_locks+0x9f/0xe0 [ 63.851892][ T8497] ? mutex_lock_io_nested+0xf60/0xf60 [ 63.857307][ T8497] ? rcu_read_lock_sched_held+0x3a/0x70 [ 63.862833][ T8497] ? trace_kmalloc_node+0xc1/0xf0 [ 63.867837][ T8497] ? __kmalloc_node_track_caller+0x21a/0x3e0 [ 63.873797][ T8497] ? netlink_dump+0x680/0xb70 [ 63.878453][ T8497] ? __phys_addr+0x9a/0x110 [ 63.882944][ T8497] ? memset+0x20/0x40 [ 63.886916][ T8497] genl_lock_dumpit+0x60/0x90 [ 63.891594][ T8497] netlink_dump+0x4b9/0xb70 [ 63.896088][ T8497] ? netlink_insert+0x1670/0x1670 [ 63.901102][ T8497] ? __mutex_unlock_slowpath+0xe2/0x610 [ 63.906634][ T8497] ? kasan_unpoison_shadow+0x33/0x40 [ 63.911908][ T8497] ? genl_start+0x44a/0x670 [ 63.916400][ T8497] __netlink_dump_start+0x642/0x900 [ 63.921581][ T8497] ? genl_family_rcv_msg_doit+0x320/0x320 [ 63.927284][ T8497] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 63.933676][ T8497] genl_family_rcv_msg_dumpit+0x2af/0x310 [ 63.939376][ T8497] ? genl_rcv+0x40/0x40 [ 63.943545][ T8497] ? mutex_lock_io_nested+0xf60/0xf60 [ 63.948898][ T8497] ? __lock_acquire+0x2510/0x5500 [ 63.953902][ T8497] ? genl_family_rcv_msg_doit+0x320/0x320 [ 63.959598][ T8497] ? genl_unlock+0x20/0x20 [ 63.964002][ T8497] ? genl_parallel_done+0xc0/0xc0 [ 63.969026][ T8497] ? __radix_tree_lookup+0x1f3/0x290 [ 63.974311][ T8497] ? genl_get_cmd+0x3cf/0x480 [ 63.978972][ T8497] genl_rcv_msg+0x434/0x580 [ 63.983470][ T8497] ? genl_get_cmd+0x480/0x480 [ 63.988130][ T8497] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 63.994531][ T8497] ? lock_release+0x710/0x710 [ 63.999202][ T8497] netlink_rcv_skb+0x153/0x420 [ 64.003948][ T8497] ? genl_get_cmd+0x480/0x480 [ 64.008607][ T8497] ? netlink_ack+0xaa0/0xaa0 [ 64.013188][ T8497] genl_rcv+0x24/0x40 [ 64.017152][ T8497] netlink_unicast+0x533/0x7d0 [ 64.021898][ T8497] ? netlink_attachskb+0x870/0x870 [ 64.026990][ T8497] ? __phys_addr_symbol+0x2c/0x70 [ 64.031993][ T8497] ? __check_object_size+0x171/0x3f0 [ 64.037258][ T8497] netlink_sendmsg+0x856/0xd90 [ 64.042005][ T8497] ? netlink_unicast+0x7d0/0x7d0 [ 64.046972][ T8497] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.052240][ T8497] ? netlink_unicast+0x7d0/0x7d0 [ 64.057158][ T8497] sock_sendmsg+0xcf/0x120 [ 64.061598][ T8497] ____sys_sendmsg+0x6e8/0x810 [ 64.066373][ T8497] ? kernel_sendmsg+0x50/0x50 [ 64.071025][ T8497] ? do_recvmmsg+0x6c0/0x6c0 [ 64.075600][ T8497] ? find_held_lock+0x2d/0x110 [ 64.080347][ T8497] ___sys_sendmsg+0xf3/0x170 [ 64.084919][ T8497] ? sendmsg_copy_msghdr+0x160/0x160 [ 64.090208][ T8497] ? do_huge_pmd_anonymous_page+0x8f1/0x2390 [ 64.096179][ T8497] ? find_held_lock+0x2d/0x110 [ 64.100922][ T8497] ? __fget_light+0x215/0x280 [ 64.105582][ T8497] __sys_sendmsg+0xe5/0x1b0 [ 64.110064][ T8497] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.115093][ T8497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 64.120965][ T8497] do_syscall_64+0x2d/0x70 [ 64.125362][ T8497] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.131252][ T8497] RIP: 0033:0x440299 [ 64.135130][ T8497] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.154799][ T8497] RSP: 002b:00007fff220e9468 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.163190][ T8497] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440299 [ 64.171152][ T8497] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 64.179104][ T8497] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 64.187055][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401aa0 [ 64.195005][ T8497] R13: 0000000000401b30 R14: 0000000000000000 R15: 0000000000000000 [ 64.202966][ T8497] [ 64.205271][ T8497] The buggy address belongs to the variable: [ 64.211244][ T8497] smc_hostname+0x20/0x40 [ 64.215561][ T8497] [ 64.217877][ T8497] Memory state around the buggy address: [ 64.223489][ T8497] ffffffff8faea800: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 64.231529][ T8497] ffffffff8faea880: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 64.239567][ T8497] >ffffffff8faea900: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 [ 64.247619][ T8497] ^ [ 64.254791][ T8497] ffffffff8faea980: 04 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 64.262832][ T8497] ffffffff8faeaa00: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 64.270866][ T8497] ================================================================== [ 64.278912][ T8497] Disabling lock debugging due to kernel taint [ 64.285340][ T8497] Kernel panic - not syncing: panic_on_warn set ... [ 64.291938][ T8497] CPU: 1 PID: 8497 Comm: syz-executor349 Tainted: G B 5.10.0-syzkaller #0 [ 64.301843][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.311978][ T8497] Call Trace: [ 64.315260][ T8497] dump_stack+0x107/0x163 [ 64.319563][ T8497] ? string+0x2c0/0x3d0 [ 64.323692][ T8497] panic+0x306/0x73d [ 64.327560][ T8497] ? __warn_printk+0xf3/0xf3 [ 64.332124][ T8497] ? preempt_schedule_common+0x59/0xc0 [ 64.337556][ T8497] ? string+0x39c/0x3d0 [ 64.341684][ T8497] ? preempt_schedule_thunk+0x16/0x18 [ 64.347031][ T8497] ? trace_hardirqs_on+0x51/0x1c0 [ 64.352028][ T8497] ? string+0x39c/0x3d0 [ 64.356158][ T8497] ? string+0x39c/0x3d0 [ 64.360288][ T8497] end_report+0x58/0x5e [ 64.364512][ T8497] kasan_report.cold+0xd/0x37 [ 64.369164][ T8497] ? string+0x39c/0x3d0 [ 64.373293][ T8497] string+0x39c/0x3d0 [ 64.377250][ T8497] ? format_decode+0x230/0xad0 [ 64.381988][ T8497] ? ip6_addr_string_sa+0x830/0x830 [ 64.387162][ T8497] ? lockdep_unlock+0x11c/0x290 [ 64.391987][ T8497] ? __lock_acquire+0x2510/0x5500 [ 64.396983][ T8497] vsnprintf+0x71b/0x14f0 [ 64.401288][ T8497] ? pointer+0x930/0x930 [ 64.405513][ T8497] snprintf+0xbb/0xf0 [ 64.409468][ T8497] ? vsprintf+0x30/0x30 [ 64.413597][ T8497] ? __nla_reserve+0x9a/0xc0 [ 64.418160][ T8497] ? memcpy+0x39/0x60 [ 64.422116][ T8497] smc_nl_get_sys_info+0x493/0x880 [ 64.427201][ T8497] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 64.433586][ T8497] ? genl_lock_dumpit+0x3c/0x90 [ 64.438410][ T8497] ? mark_held_locks+0x9f/0xe0 [ 64.443150][ T8497] ? mutex_lock_io_nested+0xf60/0xf60 [ 64.448497][ T8497] ? rcu_read_lock_sched_held+0x3a/0x70 [ 64.454014][ T8497] ? trace_kmalloc_node+0xc1/0xf0 [ 64.459008][ T8497] ? __kmalloc_node_track_caller+0x21a/0x3e0 [ 64.464974][ T8497] ? netlink_dump+0x680/0xb70 [ 64.469623][ T8497] ? __phys_addr+0x9a/0x110 [ 64.474099][ T8497] ? memset+0x20/0x40 [ 64.478053][ T8497] genl_lock_dumpit+0x60/0x90 [ 64.482704][ T8497] netlink_dump+0x4b9/0xb70 [ 64.487179][ T8497] ? netlink_insert+0x1670/0x1670 [ 64.492178][ T8497] ? __mutex_unlock_slowpath+0xe2/0x610 [ 64.497698][ T8497] ? kasan_unpoison_shadow+0x33/0x40 [ 64.502958][ T8497] ? genl_start+0x44a/0x670 [ 64.507432][ T8497] __netlink_dump_start+0x642/0x900 [ 64.512620][ T8497] ? genl_family_rcv_msg_doit+0x320/0x320 [ 64.518310][ T8497] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 64.524695][ T8497] genl_family_rcv_msg_dumpit+0x2af/0x310 [ 64.530386][ T8497] ? genl_rcv+0x40/0x40 [ 64.534520][ T8497] ? mutex_lock_io_nested+0xf60/0xf60 [ 64.539882][ T8497] ? __lock_acquire+0x2510/0x5500 [ 64.544880][ T8497] ? genl_family_rcv_msg_doit+0x320/0x320 [ 64.550570][ T8497] ? genl_unlock+0x20/0x20 [ 64.554958][ T8497] ? genl_parallel_done+0xc0/0xc0 [ 64.559957][ T8497] ? __radix_tree_lookup+0x1f3/0x290 [ 64.565222][ T8497] ? genl_get_cmd+0x3cf/0x480 [ 64.569872][ T8497] genl_rcv_msg+0x434/0x580 [ 64.574366][ T8497] ? genl_get_cmd+0x480/0x480 [ 64.579039][ T8497] ? smc_nl_fill_lgr_list.constprop.0+0x980/0x980 [ 64.585445][ T8497] ? lock_release+0x710/0x710 [ 64.590093][ T8497] netlink_rcv_skb+0x153/0x420 [ 64.594839][ T8497] ? genl_get_cmd+0x480/0x480 [ 64.599486][ T8497] ? netlink_ack+0xaa0/0xaa0 [ 64.604068][ T8497] genl_rcv+0x24/0x40 [ 64.608021][ T8497] netlink_unicast+0x533/0x7d0 [ 64.612758][ T8497] ? netlink_attachskb+0x870/0x870 [ 64.617842][ T8497] ? __phys_addr_symbol+0x2c/0x70 [ 64.622838][ T8497] ? __check_object_size+0x171/0x3f0 [ 64.628110][ T8497] netlink_sendmsg+0x856/0xd90 [ 64.632850][ T8497] ? netlink_unicast+0x7d0/0x7d0 [ 64.637778][ T8497] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.643034][ T8497] ? netlink_unicast+0x7d0/0x7d0 [ 64.647944][ T8497] sock_sendmsg+0xcf/0x120 [ 64.652334][ T8497] ____sys_sendmsg+0x6e8/0x810 [ 64.657068][ T8497] ? kernel_sendmsg+0x50/0x50 [ 64.661714][ T8497] ? do_recvmmsg+0x6c0/0x6c0 [ 64.666287][ T8497] ? find_held_lock+0x2d/0x110 [ 64.671022][ T8497] ___sys_sendmsg+0xf3/0x170 [ 64.675584][ T8497] ? sendmsg_copy_msghdr+0x160/0x160 [ 64.680843][ T8497] ? do_huge_pmd_anonymous_page+0x8f1/0x2390 [ 64.686798][ T8497] ? find_held_lock+0x2d/0x110 [ 64.691537][ T8497] ? __fget_light+0x215/0x280 [ 64.696188][ T8497] __sys_sendmsg+0xe5/0x1b0 [ 64.700664][ T8497] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.705669][ T8497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 64.711535][ T8497] do_syscall_64+0x2d/0x70 [ 64.715926][ T8497] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.721792][ T8497] RIP: 0033:0x440299 [ 64.725661][ T8497] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.745236][ T8497] RSP: 002b:00007fff220e9468 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.753636][ T8497] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440299 [ 64.761579][ T8497] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 64.769523][ T8497] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 64.777486][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401aa0 [ 64.785455][ T8497] R13: 0000000000401b30 R14: 0000000000000000 R15: 0000000000000000 [ 64.794020][ T8497] Kernel Offset: disabled [ 64.798329][ T8497] Rebooting in 86400 seconds..