Warning: Permanently added '10.128.0.73' (ECDSA) to the list of known hosts.
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
syzkaller login: [  111.264559][    C0] ==================================================================
[  111.273443][    C0] BUG: KASAN: slab-out-of-bounds in bitmap_ipmac_gc+0x119/0x590
[  111.281070][    C0] Read of size 8 at addr ffff888092cdb540 by task syz-executor620/10258
[  111.289501][    C0] 
[  111.291836][    C0] CPU: 0 PID: 10258 Comm: syz-executor620 Not tainted 5.5.0-rc7-syzkaller #0
[  111.300804][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  111.310894][    C0] Call Trace:
[  111.314180][    C0]  <IRQ>
[  111.317166][    C0]  dump_stack+0x197/0x210
[  111.321514][    C0]  ? bitmap_ipmac_gc+0x119/0x590
[  111.326482][    C0]  print_address_description.constprop.0.cold+0xd4/0x30b
[  111.333589][    C0]  ? bitmap_ipmac_gc+0x119/0x590
[  111.338545][    C0]  ? bitmap_ipmac_gc+0x119/0x590
[  111.343478][    C0]  __kasan_report.cold+0x1b/0x41
[  111.348501][    C0]  ? bitmap_ipmac_gc+0x119/0x590
[  111.353589][    C0]  kasan_report+0x12/0x20
[  111.358086][    C0]  check_memory_region+0x134/0x1a0
[  111.363465][    C0]  __kasan_check_read+0x11/0x20
[  111.368357][    C0]  bitmap_ipmac_gc+0x119/0x590
[  111.373683][    C0]  call_timer_fn+0x1ac/0x780
[  111.378509][    C0]  ? bitmap_ipmac_list+0x1080/0x1080
[  111.384035][    C0]  ? msleep_interruptible+0x150/0x150
[  111.389738][    C0]  ? run_timer_softirq+0x6b1/0x1790
[  111.395098][    C0]  ? trace_hardirqs_on+0x67/0x240
[  111.400137][    C0]  ? bitmap_ipmac_list+0x1080/0x1080
[  111.405420][    C0]  ? bitmap_ipmac_list+0x1080/0x1080
[  111.410973][    C0]  run_timer_softirq+0x6c3/0x1790
[  111.416425][    C0]  ? add_timer+0x930/0x930
[  111.420903][    C0]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[  111.427223][    C0]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  111.433049][    C0]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  111.439244][    C0]  ? trace_hardirqs_on+0x67/0x240
[  111.444636][    C0]  __do_softirq+0x262/0x98c
[  111.449160][    C0]  ? sched_clock_cpu+0x1b/0x1b0
[  111.454124][    C0]  irq_exit+0x19b/0x1e0
[  111.458306][    C0]  smp_apic_timer_interrupt+0x1a3/0x610
[  111.464128][    C0]  apic_timer_interrupt+0xf/0x20
[  111.469214][    C0]  </IRQ>
[  111.472366][    C0] RIP: 0010:unlink_anon_vmas+0x6d/0x870
[  111.478054][    C0] Code: 48 8b 45 b8 48 8b 58 78 48 b8 00 00 00 00 00 fc ff df 4c 8d 63 f0 48 89 da 48 c1 ea 03 80 3c 02 00 0f 85 48 07 00 00 48 8b 03 <48> 89 5d c0 48 39 5d c8 4c 8d 70 f0 0f 84 48 05 00 00 48 c7 45 d0
[  111.497716][    C0] RSP: 0018:ffffc900034b7b70 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  111.506920][    C0] RAX: ffff88809582aa90 RBX: ffff88809582abe0 RCX: ffffffff81a20f0f
[  111.515525][    C0] RDX: 1ffff11012b0557c RSI: ffffffff81a73b7d RDI: ffff88809597a420
[  111.523595][    C0] RBP: ffffc900034b7bc0 R08: ffff8880a8ca4580 R09: ffffed10124198e9
[  111.531880][    C0] R10: ffffed10124198e8 R11: ffff8880920cc747 R12: ffff88809582abd0
[  111.539981][    C0] R13: ffff88809597a318 R14: 00000000080eb000 R15: 0000000000000000
[  111.547977][    C0]  ? free_pgtables+0x17f/0x2f0
[  111.552743][    C0]  ? unlink_anon_vmas+0x1d/0x870
[  111.557832][    C0]  free_pgtables+0x1af/0x2f0
[  111.562449][    C0]  exit_mmap+0x2c9/0x530
[  111.566927][    C0]  ? __ia32_sys_munmap+0x80/0x80
[  111.572506][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  111.578745][    C0]  ? __khugepaged_exit+0xcf/0x410
[  111.584067][    C0]  mmput+0x179/0x4d0
[  111.587966][    C0]  do_exit+0xac2/0x2f50
[  111.592345][    C0]  ? mm_update_next_owner+0x7c0/0x7c0
[  111.597995][    C0]  ? down_read_non_owner+0x490/0x490
[  111.603362][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  111.609694][    C0]  ? handle_mm_fault+0x4ab/0xa50
[  111.614745][    C0]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  111.620776][    C0]  do_group_exit+0x135/0x360
[  111.625555][    C0]  __ia32_sys_exit_group+0x44/0x50
[  111.630695][    C0]  do_fast_syscall_32+0x27b/0xe16
[  111.635866][    C0]  entry_SYSENTER_compat+0x70/0x7f
[  111.641124][    C0] RIP: 0023:0xf7ff89a9
[  111.645307][    C0] Code: Bad RIP value.
[  111.649379][    C0] RSP: 002b:00000000ffca7acc EFLAGS: 00000296 ORIG_RAX: 00000000000000fc
[  111.658027][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000080ed298
[  111.666233][    C0] RDX: 0000000000000000 RSI: 00000000080d6f9c RDI: 00000000080ed2a0
[  111.674309][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  111.682298][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  111.690288][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  111.698293][    C0] 
[  111.700623][    C0] Allocated by task 9953:
[  111.704988][    C0]  save_stack+0x23/0x90
[  111.709196][    C0]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[  111.714828][    C0]  kasan_kmalloc+0x9/0x10
[  111.719149][    C0]  __kmalloc+0x163/0x770
[  111.723479][    C0]  ip_set_alloc+0x38/0x5e
[  111.727843][    C0]  bitmap_ipmac_create+0x4e8/0xa00
[  111.732963][    C0]  ip_set_create+0x6f1/0x1500
[  111.737861][    C0]  nfnetlink_rcv_msg+0xcf2/0xfb0
[  111.742804][    C0]  netlink_rcv_skb+0x177/0x450
[  111.747582][    C0]  nfnetlink_rcv+0x1ba/0x460
[  111.752226][    C0]  netlink_unicast+0x58c/0x7d0
[  111.757103][    C0]  netlink_sendmsg+0x91c/0xea0
[  111.761870][    C0]  sock_sendmsg+0xd7/0x130
[  111.766279][    C0]  ____sys_sendmsg+0x753/0x880
[  111.771040][    C0]  ___sys_sendmsg+0x100/0x170
[  111.775786][    C0]  __sys_sendmsg+0x105/0x1d0
[  111.780366][    C0]  __ia32_compat_sys_sendmsg+0x7a/0xb0
[  111.785880][    C0]  do_fast_syscall_32+0x27b/0xe16
[  111.791051][    C0]  entry_SYSENTER_compat+0x70/0x7f
[  111.796221][    C0] 
[  111.798538][    C0] Freed by task 9684:
[  111.802628][    C0]  save_stack+0x23/0x90
[  111.806790][    C0]  __kasan_slab_free+0x102/0x150
[  111.812170][    C0]  kasan_slab_free+0xe/0x10
[  111.816911][    C0]  kfree+0x10a/0x2c0
[  111.820806][    C0]  tomoyo_check_open_permission+0x19e/0x3e0
[  111.826912][    C0]  tomoyo_file_open+0xa9/0xd0
[  111.831588][    C0]  security_file_open+0x71/0x300
[  111.836522][    C0]  do_dentry_open+0x37a/0x1380
[  111.841290][    C0]  vfs_open+0xa0/0xd0
[  111.845263][    C0]  path_openat+0x118b/0x3180
[  111.849851][    C0]  do_filp_open+0x1a1/0x280
[  111.854772][    C0]  do_sys_open+0x3fe/0x5d0
[  111.859324][    C0]  __x64_sys_open+0x7e/0xc0
[  111.864028][    C0]  do_syscall_64+0xfa/0x790
[  111.868531][    C0]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  111.874511][    C0] 
[  111.876842][    C0] The buggy address belongs to the object at ffff888092cdb540
[  111.876842][    C0]  which belongs to the cache kmalloc-32 of size 32
[  111.890915][    C0] The buggy address is located 0 bytes inside of
[  111.890915][    C0]  32-byte region [ffff888092cdb540, ffff888092cdb560)
[  111.904245][    C0] The buggy address belongs to the page:
[  111.910023][    C0] page:ffffea00024b36c0 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff888092cdbfc1
[  111.920596][    C0] raw: 00fffe0000000200 ffffea00028d9c48 ffffea00024e8a08 ffff8880aa4001c0
[  111.932165][    C0] raw: ffff888092cdbfc1 ffff888092cdb000 000000010000003f 0000000000000000
[  111.940962][    C0] page dumped because: kasan: bad access detected
[  111.947367][    C0] 
[  111.949831][    C0] Memory state around the buggy address:
[  111.956331][    C0]  ffff888092cdb400: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[  111.964510][    C0]  ffff888092cdb480: 00 00 06 fc fc fc fc fc fb fb fb fb fc fc fc fc
[  111.972568][    C0] >ffff888092cdb500: fb fb fb fb fc fc fc fc 04 fc fc fc fc fc fc fc
[  111.980723][    C0]                                            ^
[  111.986866][    C0]  ffff888092cdb580: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[  111.995170][    C0]  ffff888092cdb600: 00 00 02 fc fc fc fc fc fb fb fb fb fc fc fc fc
[  112.003505][    C0] ==================================================================
[  112.011702][    C0] Disabling lock debugging due to kernel taint
[  112.018079][    C0] Kernel panic - not syncing: panic_on_warn set ...
[  112.024846][    C0] CPU: 0 PID: 10258 Comm: syz-executor620 Tainted: G    B             5.5.0-rc7-syzkaller #0
[  112.035066][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  112.045336][    C0] Call Trace:
[  112.048608][    C0]  <IRQ>
[  112.051458][    C0]  dump_stack+0x197/0x210
[  112.055887][    C0]  panic+0x2e3/0x75c
[  112.059966][    C0]  ? add_taint.cold+0x16/0x16
[  112.064638][    C0]  ? retint_kernel+0x2b/0x2b
[  112.069226][    C0]  ? trace_hardirqs_on+0x5e/0x240
[  112.074243][    C0]  ? bitmap_ipmac_gc+0x119/0x590
[  112.079311][    C0]  end_report+0x47/0x4f
[  112.083464][    C0]  ? bitmap_ipmac_gc+0x119/0x590
[  112.088522][    C0]  __kasan_report.cold+0xe/0x41
[  112.093409][    C0]  ? bitmap_ipmac_gc+0x119/0x590
[  112.098344][    C0]  kasan_report+0x12/0x20
[  112.102902][    C0]  check_memory_region+0x134/0x1a0
[  112.108067][    C0]  __kasan_check_read+0x11/0x20
[  112.112911][    C0]  bitmap_ipmac_gc+0x119/0x590
[  112.117675][    C0]  call_timer_fn+0x1ac/0x780
[  112.122623][    C0]  ? bitmap_ipmac_list+0x1080/0x1080
[  112.128266][    C0]  ? msleep_interruptible+0x150/0x150
[  112.133713][    C0]  ? run_timer_softirq+0x6b1/0x1790
[  112.139020][    C0]  ? trace_hardirqs_on+0x67/0x240
[  112.144116][    C0]  ? bitmap_ipmac_list+0x1080/0x1080
[  112.149399][    C0]  ? bitmap_ipmac_list+0x1080/0x1080
[  112.154678][    C0]  run_timer_softirq+0x6c3/0x1790
[  112.159824][    C0]  ? add_timer+0x930/0x930
[  112.164383][    C0]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[  112.170557][    C0]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  112.176102][    C0]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  112.182075][    C0]  ? trace_hardirqs_on+0x67/0x240
[  112.187105][    C0]  __do_softirq+0x262/0x98c
[  112.191604][    C0]  ? sched_clock_cpu+0x1b/0x1b0
[  112.196457][    C0]  irq_exit+0x19b/0x1e0
[  112.200727][    C0]  smp_apic_timer_interrupt+0x1a3/0x610
[  112.206274][    C0]  apic_timer_interrupt+0xf/0x20
[  112.211321][    C0]  </IRQ>
[  112.214265][    C0] RIP: 0010:unlink_anon_vmas+0x6d/0x870
[  112.219806][    C0] Code: 48 8b 45 b8 48 8b 58 78 48 b8 00 00 00 00 00 fc ff df 4c 8d 63 f0 48 89 da 48 c1 ea 03 80 3c 02 00 0f 85 48 07 00 00 48 8b 03 <48> 89 5d c0 48 39 5d c8 4c 8d 70 f0 0f 84 48 05 00 00 48 c7 45 d0
[  112.240028][    C0] RSP: 0018:ffffc900034b7b70 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  112.248552][    C0] RAX: ffff88809582aa90 RBX: ffff88809582abe0 RCX: ffffffff81a20f0f
[  112.256715][    C0] RDX: 1ffff11012b0557c RSI: ffffffff81a73b7d RDI: ffff88809597a420
[  112.265188][    C0] RBP: ffffc900034b7bc0 R08: ffff8880a8ca4580 R09: ffffed10124198e9
[  112.274721][    C0] R10: ffffed10124198e8 R11: ffff8880920cc747 R12: ffff88809582abd0
[  112.284214][    C0] R13: ffff88809597a318 R14: 00000000080eb000 R15: 0000000000000000
[  112.292196][    C0]  ? free_pgtables+0x17f/0x2f0
[  112.296967][    C0]  ? unlink_anon_vmas+0x1d/0x870
[  112.302269][    C0]  free_pgtables+0x1af/0x2f0
[  112.306957][    C0]  exit_mmap+0x2c9/0x530
[  112.311198][    C0]  ? __ia32_sys_munmap+0x80/0x80
[  112.316150][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  112.322482][    C0]  ? __khugepaged_exit+0xcf/0x410
[  112.327744][    C0]  mmput+0x179/0x4d0
[  112.331761][    C0]  do_exit+0xac2/0x2f50
[  112.335940][    C0]  ? mm_update_next_owner+0x7c0/0x7c0
[  112.341519][    C0]  ? down_read_non_owner+0x490/0x490
[  112.347451][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  112.354016][    C0]  ? handle_mm_fault+0x4ab/0xa50
[  112.358987][    C0]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  112.364528][    C0]  do_group_exit+0x135/0x360
[  112.369206][    C0]  __ia32_sys_exit_group+0x44/0x50
[  112.374310][    C0]  do_fast_syscall_32+0x27b/0xe16
[  112.379332][    C0]  entry_SYSENTER_compat+0x70/0x7f
[  112.384557][    C0] RIP: 0023:0xf7ff89a9
[  112.388710][    C0] Code: Bad RIP value.
[  112.392882][    C0] RSP: 002b:00000000ffca7acc EFLAGS: 00000296 ORIG_RAX: 00000000000000fc
[  112.401423][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000080ed298
[  112.409406][    C0] RDX: 0000000000000000 RSI: 00000000080d6f9c RDI: 00000000080ed2a0
[  112.417495][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  112.425577][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  112.433546][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  112.443223][    C0] Kernel Offset: disabled
[  112.448056][    C0] Rebooting in 86400 seconds..