Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts. [ 65.431568][ T6803] IPVS: ftp: loaded support on port[0] = 21 [ 65.442917][ T6797] IPVS: ftp: loaded support on port[0] = 21 [ 65.443797][ T6805] IPVS: ftp: loaded support on port[0] = 21 [ 65.453349][ T6804] IPVS: ftp: loaded support on port[0] = 21 [ 65.465169][ T6802] IPVS: ftp: loaded support on port[0] = 21 [ 65.472321][ T6800] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 65.543137][ T6842] netlink: 6 bytes leftover after parsing attributes in process `syz-executor368'. [ 65.555376][ T6842] netlink: 512 bytes leftover after parsing attributes in process `syz-executor368'. [ 65.581392][ T6869] netlink: 6 bytes leftover after parsing attributes in process `syz-executor368'. executing program executing program [ 65.601903][ T6869] netlink: 512 bytes leftover after parsing attributes in process `syz-executor368'. [ 65.624950][ T6896] netlink: 6 bytes leftover after parsing attributes in process `syz-executor368'. [ 65.641473][ T6896] netlink: 512 bytes leftover after parsing attributes in process `syz-executor368'. executing program executing program executing program executing program [ 65.657217][ T6897] netlink: 6 bytes leftover after parsing attributes in process `syz-executor368'. [ 65.672049][ T6914] netlink: 6 bytes leftover after parsing attributes in process `syz-executor368'. [ 65.689714][ T6897] netlink: 512 bytes leftover after parsing attributes in process `syz-executor368'. executing program executing program executing program executing program executing program [ 65.703447][ T6929] netlink: 6 bytes leftover after parsing attributes in process `syz-executor368'. [ 65.715455][ T6914] ================================================================== [ 65.723700][ T6914] BUG: KASAN: vmalloc-out-of-bounds in tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 65.732895][ T6914] Read of size 2 at addr ffffc90001da5024 by task syz-executor368/6914 [ 65.741117][ T6914] [ 65.743431][ T6914] CPU: 0 PID: 6914 Comm: syz-executor368 Not tainted 5.8.0-rc1-syzkaller #0 [ 65.752078][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.762115][ T6914] Call Trace: [ 65.765391][ T6914] dump_stack+0x18f/0x20d [ 65.769707][ T6914] ? tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 65.775935][ T6914] ? tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 65.782161][ T6914] print_address_description.constprop.0.cold+0x5/0x436 [ 65.789081][ T6914] ? do_raw_spin_lock+0x120/0x2b0 [ 65.794103][ T6914] ? vprintk_func+0x97/0x1a6 [ 65.798689][ T6914] ? tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 65.804909][ T6914] kasan_report.cold+0x1f/0x37 [ 65.809729][ T6914] ? tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 65.815963][ T6914] tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 65.822033][ T6914] ? tipc_nl_node_dump_monitor+0x300/0x300 [ 65.827833][ T6914] ? check_preemption_disabled+0x38/0x220 [ 65.833574][ T6914] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 65.839122][ T6914] ? __phys_addr+0x9a/0x110 [ 65.843610][ T6914] ? memset+0x20/0x40 [ 65.847587][ T6914] genl_lock_dumpit+0x7f/0xb0 [ 65.852249][ T6914] netlink_dump+0x4cd/0xf60 [ 65.856763][ T6914] ? netlink_insert+0x1670/0x1670 [ 65.861781][ T6914] ? __mutex_unlock_slowpath+0xe2/0x610 [ 65.867314][ T6914] ? genl_start+0x45a/0x6e0 [ 65.871838][ T6914] __netlink_dump_start+0x643/0x900 [ 65.877060][ T6914] ? genl_rcv_msg+0x9e0/0x9e0 [ 65.881729][ T6914] ? tipc_nl_node_dump_monitor+0x300/0x300 [ 65.887517][ T6914] genl_family_rcv_msg_dumpit+0x2ac/0x310 [ 65.893226][ T6914] ? genl_rcv+0x40/0x40 [ 65.897383][ T6914] ? mutex_lock_io_nested+0xf60/0xf60 [ 65.902748][ T6914] ? mark_lock+0xbc/0x1710 [ 65.907165][ T6914] ? genl_rcv_msg+0x9e0/0x9e0 [ 65.911833][ T6914] ? genl_unlock+0x20/0x20 [ 65.916227][ T6914] ? genl_parallel_done+0x170/0x170 [ 65.921405][ T6914] ? __radix_tree_lookup+0x1f3/0x290 [ 65.926692][ T6914] genl_rcv_msg+0x797/0x9e0 [ 65.931213][ T6914] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 65.938183][ T6914] ? lock_acquire+0x1f1/0xad0 [ 65.942898][ T6914] ? genl_rcv+0x15/0x40 [ 65.947128][ T6914] ? lock_release+0x8d0/0x8d0 [ 65.951800][ T6914] netlink_rcv_skb+0x15a/0x430 [ 65.956553][ T6914] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 65.963471][ T6914] ? netlink_ack+0xa10/0xa10 [ 65.968086][ T6914] genl_rcv+0x24/0x40 [ 65.972064][ T6914] netlink_unicast+0x533/0x7d0 [ 65.976814][ T6914] ? netlink_attachskb+0x810/0x810 [ 65.981907][ T6914] ? _copy_from_iter_full+0x247/0x890 [ 65.987262][ T6914] ? __phys_addr_symbol+0x2c/0x70 [ 65.992295][ T6914] ? __check_object_size+0x171/0x3e4 [ 65.997591][ T6914] netlink_sendmsg+0x856/0xd90 [ 66.002359][ T6914] ? netlink_unicast+0x7d0/0x7d0 [ 66.007282][ T6914] ? netlink_unicast+0x7d0/0x7d0 [ 66.012210][ T6914] sock_sendmsg+0xcf/0x120 [ 66.016626][ T6914] ____sys_sendmsg+0x6e8/0x810 [ 66.021372][ T6914] ? kernel_sendmsg+0x50/0x50 [ 66.026037][ T6914] ? do_recvmmsg+0x6d0/0x6d0 [ 66.030626][ T6914] ? release_pages+0x641/0x17a0 [ 66.035476][ T6914] ___sys_sendmsg+0xf3/0x170 [ 66.040063][ T6914] ? sendmsg_copy_msghdr+0x160/0x160 [ 66.045333][ T6914] ? do_huge_pmd_anonymous_page+0x1b94/0x2230 [ 66.051394][ T6914] ? check_preemption_disabled+0x38/0x220 [ 66.057112][ T6914] ? do_huge_pmd_anonymous_page+0x8ef/0x2230 [ 66.063083][ T6914] ? handle_mm_fault+0xad9/0x4420 [ 66.068092][ T6914] ? __fget_light+0x215/0x280 [ 66.072776][ T6914] __sys_sendmsg+0xe5/0x1b0 [ 66.077280][ T6914] ? __sys_sendmsg_sock+0xb0/0xb0 [ 66.082300][ T6914] ? check_preemption_disabled+0x38/0x220 [ 66.088037][ T6914] ? do_syscall_64+0x1c/0xe0 [ 66.092612][ T6914] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 66.098581][ T6914] do_syscall_64+0x60/0xe0 [ 66.102982][ T6914] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 66.108862][ T6914] RIP: 0033:0x441919 [ 66.112743][ T6914] Code: Bad RIP value. [ 66.116786][ T6914] RSP: 002b:00007ffe76aa2628 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.125184][ T6914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441919 [ 66.133154][ T6914] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 66.141115][ T6914] RBP: 0000000000010058 R08: 0000000000000000 R09: 0000000000000000 [ 66.149095][ T6914] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402730 [ 66.157059][ T6914] R13: 00000000004027c0 R14: 0000000000000000 R15: 0000000000000000 [ 66.165021][ T6914] [ 66.167325][ T6914] [ 66.169626][ T6914] Memory state around the buggy address: [ 66.175276][ T6914] ffffc90001da4f00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 66.183758][ T6914] ffffc90001da4f80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 66.191805][ T6914] >ffffc90001da5000: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 66.199860][ T6914] ^ [ 66.204952][ T6914] ffffc90001da5080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 66.213046][ T6914] ffffc90001da5100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 66.221215][ T6914] ================================================================== [ 66.229276][ T6914] Disabling lock debugging due to kernel taint [ 66.236610][ T6914] Kernel panic - not syncing: panic_on_warn set ... [ 66.243207][ T6914] CPU: 0 PID: 6914 Comm: syz-executor368 Tainted: G B 5.8.0-rc1-syzkaller #0 [ 66.253263][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.263314][ T6914] Call Trace: [ 66.266599][ T6914] dump_stack+0x18f/0x20d [ 66.270928][ T6914] ? tipc_nl_node_dump_monitor_peer+0x470/0x590 [ 66.277154][ T6914] panic+0x2e3/0x75c [ 66.281034][ T6914] ? __warn_printk+0xf3/0xf3 [ 66.285612][ T6914] ? preempt_schedule_common+0x59/0xc0 [ 66.291061][ T6914] ? tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 66.297282][ T6914] ? preempt_schedule_thunk+0x16/0x18 [ 66.302649][ T6914] ? trace_hardirqs_on+0x55/0x220 [ 66.307662][ T6914] ? tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 66.313889][ T6914] ? tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 66.320109][ T6914] end_report+0x4d/0x53 [ 66.324252][ T6914] kasan_report.cold+0xd/0x37 [ 66.328914][ T6914] ? tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 66.335131][ T6914] tipc_nl_node_dump_monitor_peer+0x4da/0x590 [ 66.341177][ T6914] ? tipc_nl_node_dump_monitor+0x300/0x300 [ 66.346961][ T6914] ? check_preemption_disabled+0x38/0x220 [ 66.352707][ T6914] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 66.358230][ T6914] ? __phys_addr+0x9a/0x110 [ 66.362733][ T6914] ? memset+0x20/0x40 [ 66.366726][ T6914] genl_lock_dumpit+0x7f/0xb0 [ 66.371433][ T6914] netlink_dump+0x4cd/0xf60 [ 66.375929][ T6914] ? netlink_insert+0x1670/0x1670 [ 66.380950][ T6914] ? __mutex_unlock_slowpath+0xe2/0x610 [ 66.386500][ T6914] ? genl_start+0x45a/0x6e0 [ 66.391037][ T6914] __netlink_dump_start+0x643/0x900 [ 66.396222][ T6914] ? genl_rcv_msg+0x9e0/0x9e0 [ 66.400886][ T6914] ? tipc_nl_node_dump_monitor+0x300/0x300 [ 66.406677][ T6914] genl_family_rcv_msg_dumpit+0x2ac/0x310 [ 66.412382][ T6914] ? genl_rcv+0x40/0x40 [ 66.416516][ T6914] ? mutex_lock_io_nested+0xf60/0xf60 [ 66.421878][ T6914] ? mark_lock+0xbc/0x1710 [ 66.426269][ T6914] ? genl_rcv_msg+0x9e0/0x9e0 [ 66.430930][ T6914] ? genl_unlock+0x20/0x20 [ 66.435343][ T6914] ? genl_parallel_done+0x170/0x170 [ 66.440536][ T6914] ? __radix_tree_lookup+0x1f3/0x290 [ 66.445797][ T6914] genl_rcv_msg+0x797/0x9e0 [ 66.450281][ T6914] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 66.457191][ T6914] ? lock_acquire+0x1f1/0xad0 [ 66.461853][ T6914] ? genl_rcv+0x15/0x40 [ 66.465986][ T6914] ? lock_release+0x8d0/0x8d0 [ 66.470651][ T6914] netlink_rcv_skb+0x15a/0x430 [ 66.475417][ T6914] ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310 [ 66.482351][ T6914] ? netlink_ack+0xa10/0xa10 [ 66.486940][ T6914] genl_rcv+0x24/0x40 [ 66.490910][ T6914] netlink_unicast+0x533/0x7d0 [ 66.495666][ T6914] ? netlink_attachskb+0x810/0x810 [ 66.500755][ T6914] ? _copy_from_iter_full+0x247/0x890 [ 66.506105][ T6914] ? __phys_addr_symbol+0x2c/0x70 [ 66.511107][ T6914] ? __check_object_size+0x171/0x3e4 [ 66.516384][ T6914] netlink_sendmsg+0x856/0xd90 [ 66.521128][ T6914] ? netlink_unicast+0x7d0/0x7d0 [ 66.526055][ T6914] ? netlink_unicast+0x7d0/0x7d0 [ 66.530986][ T6914] sock_sendmsg+0xcf/0x120 [ 66.535403][ T6914] ____sys_sendmsg+0x6e8/0x810 [ 66.540168][ T6914] ? kernel_sendmsg+0x50/0x50 [ 66.544848][ T6914] ? do_recvmmsg+0x6d0/0x6d0 [ 66.549417][ T6914] ? release_pages+0x641/0x17a0 [ 66.554333][ T6914] ___sys_sendmsg+0xf3/0x170 [ 66.558939][ T6914] ? sendmsg_copy_msghdr+0x160/0x160 [ 66.564215][ T6914] ? do_huge_pmd_anonymous_page+0x1b94/0x2230 [ 66.570267][ T6914] ? check_preemption_disabled+0x38/0x220 [ 66.575968][ T6914] ? do_huge_pmd_anonymous_page+0x8ef/0x2230 [ 66.581930][ T6914] ? handle_mm_fault+0xad9/0x4420 [ 66.586932][ T6914] ? __fget_light+0x215/0x280 [ 66.591601][ T6914] __sys_sendmsg+0xe5/0x1b0 [ 66.596091][ T6914] ? __sys_sendmsg_sock+0xb0/0xb0 [ 66.601106][ T6914] ? check_preemption_disabled+0x38/0x220 [ 66.606808][ T6914] ? do_syscall_64+0x1c/0xe0 [ 66.611384][ T6914] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 66.617368][ T6914] do_syscall_64+0x60/0xe0 [ 66.621787][ T6914] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 66.627662][ T6914] RIP: 0033:0x441919 [ 66.631539][ T6914] Code: Bad RIP value. [ 66.635590][ T6914] RSP: 002b:00007ffe76aa2628 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.643974][ T6914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441919 [ 66.651940][ T6914] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 66.659891][ T6914] RBP: 0000000000010058 R08: 0000000000000000 R09: 0000000000000000 [ 66.667846][ T6914] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402730 [ 66.675811][ T6914] R13: 00000000004027c0 R14: 0000000000000000 R15: 0000000000000000 [ 66.685140][ T6914] Kernel Offset: disabled [ 66.689458][ T6914] Rebooting in 86400 seconds..