Warning: Permanently added '10.128.15.214' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 67.971478][ T8921] ================================================================== [ 67.979694][ T8921] BUG: KASAN: slab-out-of-bounds in pipe_write+0xe30/0x1000 [ 67.987151][ T8921] Write of size 8 at addr ffff888097898da8 by task syz-executor958/8921 [ 67.995555][ T8921] [ 67.997874][ T8921] CPU: 0 PID: 8921 Comm: syz-executor958 Not tainted 5.4.0-syzkaller #0 [ 68.006283][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.016335][ T8921] Call Trace: [ 68.019630][ T8921] dump_stack+0x197/0x210 [ 68.023948][ T8921] ? pipe_write+0xe30/0x1000 [ 68.028542][ T8921] print_address_description.constprop.0.cold+0xd4/0x30b [ 68.035544][ T8921] ? pipe_write+0xe30/0x1000 [ 68.040125][ T8921] ? pipe_write+0xe30/0x1000 [ 68.044697][ T8921] __kasan_report.cold+0x1b/0x41 [ 68.049618][ T8921] ? pipe_write+0xe30/0x1000 [ 68.054292][ T8921] kasan_report+0x12/0x20 [ 68.058613][ T8921] __asan_report_store8_noabort+0x17/0x20 [ 68.064315][ T8921] pipe_write+0xe30/0x1000 [ 68.068720][ T8921] new_sync_write+0x4d3/0x770 [ 68.073374][ T8921] ? new_sync_read+0x800/0x800 [ 68.078118][ T8921] ? __fget+0x37f/0x550 [ 68.082256][ T8921] ? apparmor_file_permission+0x25/0x30 [ 68.087794][ T8921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 68.094013][ T8921] ? security_file_permission+0x8f/0x380 [ 68.099623][ T8921] __vfs_write+0xe1/0x110 [ 68.103948][ T8921] vfs_write+0x268/0x5d0 [ 68.108173][ T8921] ksys_write+0x220/0x290 [ 68.112491][ T8921] ? __ia32_sys_read+0xb0/0xb0 [ 68.117245][ T8921] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 68.122682][ T8921] ? do_syscall_64+0x26/0x790 [ 68.127355][ T8921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.133487][ T8921] ? do_syscall_64+0x26/0x790 [ 68.138171][ T8921] __x64_sys_write+0x73/0xb0 [ 68.142758][ T8921] do_syscall_64+0xfa/0x790 [ 68.147249][ T8921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.153136][ T8921] RIP: 0033:0x445a19 [ 68.157028][ T8921] Code: e8 dc bd 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb 11 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 68.176621][ T8921] RSP: 002b:00007ff2a040ace8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.185016][ T8921] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000445a19 [ 68.192981][ T8921] RDX: 00000000fffffef3 RSI: 00000000200001c0 RDI: 0000000000000004 [ 68.200938][ T8921] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 68.208907][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 68.216860][ T8921] R13: 00007ffefe60157f R14: 00007ff2a040b9c0 R15: 20c49ba5e353f7cf [ 68.224834][ T8921] [ 68.227142][ T8921] Allocated by task 8923: [ 68.231475][ T8921] save_stack+0x23/0x90 [ 68.235608][ T8921] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 68.241231][ T8921] kasan_kmalloc+0x9/0x10 [ 68.245536][ T8921] __kmalloc+0x163/0x770 [ 68.249769][ T8921] pipe_fcntl+0x3f7/0x8e0 [ 68.254073][ T8921] do_fcntl+0x255/0x1030 [ 68.258289][ T8921] __x64_sys_fcntl+0x16d/0x1e0 [ 68.263031][ T8921] do_syscall_64+0xfa/0x790 [ 68.267511][ T8921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.273374][ T8921] [ 68.275678][ T8921] Freed by task 8660: [ 68.279661][ T8921] save_stack+0x23/0x90 [ 68.283809][ T8921] __kasan_slab_free+0x102/0x150 [ 68.288729][ T8921] kasan_slab_free+0xe/0x10 [ 68.293320][ T8921] kfree+0x10a/0x2c0 [ 68.297192][ T8921] tomoyo_check_open_permission+0x19e/0x3e0 [ 68.303063][ T8921] tomoyo_file_open+0xa9/0xd0 [ 68.307718][ T8921] security_file_open+0x71/0x300 [ 68.312652][ T8921] do_dentry_open+0x37a/0x1380 [ 68.317406][ T8921] vfs_open+0xa0/0xd0 [ 68.321367][ T8921] path_openat+0x10e4/0x4710 [ 68.325958][ T8921] do_filp_open+0x1a1/0x280 [ 68.330437][ T8921] do_sys_open+0x3fe/0x5d0 [ 68.334830][ T8921] __x64_sys_open+0x7e/0xc0 [ 68.339312][ T8921] do_syscall_64+0xfa/0x790 [ 68.343795][ T8921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.349657][ T8921] [ 68.351963][ T8921] The buggy address belongs to the object at ffff888097898d80 [ 68.351963][ T8921] which belongs to the cache kmalloc-64 of size 64 [ 68.365816][ T8921] The buggy address is located 40 bytes inside of [ 68.365816][ T8921] 64-byte region [ffff888097898d80, ffff888097898dc0) [ 68.378921][ T8921] The buggy address belongs to the page: [ 68.384543][ T8921] page:ffffea00025e2600 refcount:1 mapcount:0 mapping:ffff8880aa400380 index:0x0 [ 68.393819][ T8921] raw: 00fffe0000000200 ffffea00025dbcc8 ffffea00026365c8 ffff8880aa400380 [ 68.402405][ T8921] raw: 0000000000000000 ffff888097898000 0000000100000020 0000000000000000 [ 68.410962][ T8921] page dumped because: kasan: bad access detected [ 68.417360][ T8921] [ 68.419677][ T8921] Memory state around the buggy address: [ 68.425300][ T8921] ffff888097898c80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 68.433339][ T8921] ffff888097898d00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 68.441379][ T8921] >ffff888097898d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 68.449411][ T8921] ^ [ 68.454775][ T8921] ffff888097898e00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 68.462828][ T8921] ffff888097898e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 68.470889][ T8921] ================================================================== [ 68.478934][ T8921] Disabling lock debugging due to kernel taint [ 68.485733][ T8921] Kernel panic - not syncing: panic_on_warn set ... [ 68.492326][ T8921] CPU: 0 PID: 8921 Comm: syz-executor958 Tainted: G B 5.4.0-syzkaller #0 [ 68.502029][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.512084][ T8921] Call Trace: [ 68.515367][ T8921] dump_stack+0x197/0x210 [ 68.519713][ T8921] panic+0x2e3/0x75c [ 68.523629][ T8921] ? add_taint.cold+0x16/0x16 [ 68.528300][ T8921] ? pipe_write+0xe30/0x1000 [ 68.532872][ T8921] ? preempt_schedule+0x4b/0x60 [ 68.537712][ T8921] ? ___preempt_schedule+0x16/0x18 [ 68.542807][ T8921] ? trace_hardirqs_on+0x5e/0x240 [ 68.547832][ T8921] ? pipe_write+0xe30/0x1000 [ 68.552411][ T8921] end_report+0x47/0x4f [ 68.556569][ T8921] ? pipe_write+0xe30/0x1000 [ 68.561151][ T8921] __kasan_report.cold+0xe/0x41 [ 68.566116][ T8921] ? pipe_write+0xe30/0x1000 [ 68.570718][ T8921] kasan_report+0x12/0x20 [ 68.575034][ T8921] __asan_report_store8_noabort+0x17/0x20 [ 68.580739][ T8921] pipe_write+0xe30/0x1000 [ 68.585152][ T8921] new_sync_write+0x4d3/0x770 [ 68.589836][ T8921] ? new_sync_read+0x800/0x800 [ 68.594595][ T8921] ? __fget+0x37f/0x550 [ 68.598738][ T8921] ? apparmor_file_permission+0x25/0x30 [ 68.604262][ T8921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 68.610497][ T8921] ? security_file_permission+0x8f/0x380 [ 68.616107][ T8921] __vfs_write+0xe1/0x110 [ 68.620427][ T8921] vfs_write+0x268/0x5d0 [ 68.624650][ T8921] ksys_write+0x220/0x290 [ 68.628957][ T8921] ? __ia32_sys_read+0xb0/0xb0 [ 68.633789][ T8921] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 68.639273][ T8921] ? do_syscall_64+0x26/0x790 [ 68.643952][ T8921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.650008][ T8921] ? do_syscall_64+0x26/0x790 [ 68.654680][ T8921] __x64_sys_write+0x73/0xb0 [ 68.659274][ T8921] do_syscall_64+0xfa/0x790 [ 68.663772][ T8921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.669640][ T8921] RIP: 0033:0x445a19 [ 68.673542][ T8921] Code: e8 dc bd 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb 11 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 68.693223][ T8921] RSP: 002b:00007ff2a040ace8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.701630][ T8921] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000445a19 [ 68.709588][ T8921] RDX: 00000000fffffef3 RSI: 00000000200001c0 RDI: 0000000000000004 [ 68.717550][ T8921] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 68.725549][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 68.733537][ T8921] R13: 00007ffefe60157f R14: 00007ff2a040b9c0 R15: 20c49ba5e353f7cf [ 68.742914][ T8921] Kernel Offset: disabled [ 68.747240][ T8921] Rebooting in 86400 seconds..