Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 93.308399][ T9609] ================================================================== [ 93.317775][ T9609] BUG: KASAN: slab-out-of-bounds in bitmap_ip_list+0x40f/0xf20 [ 93.325304][ T9609] Read of size 8 at addr ffff88809e88e100 by task syz-executor671/9609 [ 93.333620][ T9609] [ 93.336016][ T9609] CPU: 1 PID: 9609 Comm: syz-executor671 Not tainted 5.5.0-rc5-syzkaller #0 [ 93.344671][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.354739][ T9609] Call Trace: [ 93.358019][ T9609] dump_stack+0x197/0x210 [ 93.362433][ T9609] ? bitmap_ip_list+0x40f/0xf20 [ 93.367289][ T9609] print_address_description.constprop.0.cold+0xd4/0x30b [ 93.374298][ T9609] ? bitmap_ip_list+0x40f/0xf20 [ 93.379146][ T9609] ? bitmap_ip_list+0x40f/0xf20 [ 93.383994][ T9609] __kasan_report.cold+0x1b/0x41 [ 93.388927][ T9609] ? bitmap_ip_list+0x40f/0xf20 [ 93.393773][ T9609] kasan_report+0x12/0x20 [ 93.398115][ T9609] check_memory_region+0x134/0x1a0 [ 93.403228][ T9609] __kasan_check_read+0x11/0x20 [ 93.408062][ T9609] bitmap_ip_list+0x40f/0xf20 [ 93.412743][ T9609] ? bitmap_ip_add+0xe60/0xe60 [ 93.417499][ T9609] ? nla_put+0x110/0x150 [ 93.421744][ T9609] ip_set_dump_start+0x96c/0x1ca0 [ 93.426766][ T9609] ? ip_set_rename+0x720/0x720 [ 93.431520][ T9609] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 93.437065][ T9609] ? zap_class+0xe40/0xe60 [ 93.441471][ T9609] ? __kasan_check_write+0x14/0x20 [ 93.446592][ T9609] netlink_dump+0x558/0xfb0 [ 93.451191][ T9609] ? __netlink_sendskb+0xc0/0xc0 [ 93.456134][ T9609] __netlink_dump_start+0x673/0x930 [ 93.461551][ T9609] ip_set_dump+0x15a/0x1d0 [ 93.465970][ T9609] ? call_ad+0x5a0/0x5a0 [ 93.470212][ T9609] ? ip_set_rename+0x720/0x720 [ 93.474971][ T9609] ? __ip_set_put_netlink.isra.0+0x90/0x90 [ 93.480957][ T9609] ? call_ad+0x5a0/0x5a0 [ 93.485203][ T9609] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 93.490146][ T9609] ? nfnetlink_bind+0x2c0/0x2c0 [ 93.494996][ T9609] ? __kasan_check_read+0x11/0x20 [ 93.500008][ T9609] ? __lock_acquire+0x8a0/0x4a00 [ 93.504945][ T9609] ? save_stack+0x5c/0x90 [ 93.509281][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.515565][ T9609] ? apparmor_capable+0x497/0x900 [ 93.520601][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.526847][ T9609] ? __kasan_check_read+0x11/0x20 [ 93.531863][ T9609] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 93.537401][ T9609] netlink_rcv_skb+0x177/0x450 [ 93.542214][ T9609] ? nfnetlink_bind+0x2c0/0x2c0 [ 93.547066][ T9609] ? netlink_ack+0xb50/0xb50 [ 93.552198][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.558432][ T9609] ? ns_capable_common+0x93/0x100 [ 93.563466][ T9609] ? ns_capable+0x20/0x30 [ 93.567799][ T9609] ? __netlink_ns_capable+0x104/0x140 [ 93.573176][ T9609] nfnetlink_rcv+0x1ba/0x460 [ 93.577778][ T9609] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 93.583232][ T9609] ? netlink_deliver_tap+0x24a/0xbf0 [ 93.588521][ T9609] ? __kasan_check_write+0x14/0x20 [ 93.593634][ T9609] netlink_unicast+0x59e/0x7e0 [ 93.598400][ T9609] ? netlink_attachskb+0x870/0x870 [ 93.603547][ T9609] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 93.609275][ T9609] ? __check_object_size+0x3d/0x437 [ 93.614551][ T9609] netlink_sendmsg+0x91c/0xea0 [ 93.619333][ T9609] ? netlink_unicast+0x7e0/0x7e0 [ 93.624306][ T9609] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 93.629856][ T9609] ? apparmor_socket_sendmsg+0x2a/0x30 [ 93.635437][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.641679][ T9609] ? security_socket_sendmsg+0x8d/0xc0 [ 93.647245][ T9609] ? netlink_unicast+0x7e0/0x7e0 [ 93.652171][ T9609] sock_sendmsg+0xd7/0x130 [ 93.656586][ T9609] ____sys_sendmsg+0x753/0x880 [ 93.661364][ T9609] ? kernel_sendmsg+0x50/0x50 [ 93.666057][ T9609] ? lockdep_init_map+0x1be/0x6d0 [ 93.671145][ T9609] ___sys_sendmsg+0x100/0x170 [ 93.675821][ T9609] ? sendmsg_copy_msghdr+0x70/0x70 [ 93.681048][ T9609] ? __kasan_check_read+0x11/0x20 [ 93.686074][ T9609] ? __lock_acquire+0x8a0/0x4a00 [ 93.691017][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.697395][ T9609] ? __this_cpu_preempt_check+0x35/0x190 [ 93.703154][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.709402][ T9609] ? percpu_counter_add_batch+0x13c/0x190 [ 93.715135][ T9609] ? __fd_install+0x1bc/0x640 [ 93.719831][ T9609] ? find_held_lock+0x35/0x130 [ 93.724762][ T9609] ? __fd_install+0x1bc/0x640 [ 93.729458][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.735767][ T9609] ? __fget_light+0x1a9/0x230 [ 93.740445][ T9609] ? __fdget+0x1b/0x20 [ 93.747032][ T9609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 93.753271][ T9609] __sys_sendmsg+0x105/0x1d0 [ 93.757858][ T9609] ? __sys_sendmsg_sock+0xc0/0xc0 [ 93.762892][ T9609] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 93.768353][ T9609] ? do_syscall_64+0x26/0x790 [ 93.773038][ T9609] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.779161][ T9609] ? do_syscall_64+0x26/0x790 [ 93.783956][ T9609] __x64_sys_sendmsg+0x78/0xb0 [ 93.788804][ T9609] do_syscall_64+0xfa/0x790 [ 93.793309][ T9609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.799190][ T9609] RIP: 0033:0x440569 [ 93.803176][ T9609] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 93.822830][ T9609] RSP: 002b:00007ffda9245308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.831344][ T9609] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440569 [ 93.839524][ T9609] RDX: 0000000000000010 RSI: 00000000200003c0 RDI: 0000000000000004 [ 93.847493][ T9609] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 93.855461][ T9609] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401df0 [ 93.863508][ T9609] R13: 0000000000401e80 R14: 0000000000000000 R15: 0000000000000000 [ 93.871482][ T9609] [ 93.873798][ T9609] Allocated by task 9609: [ 93.878241][ T9609] save_stack+0x23/0x90 [ 93.882382][ T9609] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 93.887997][ T9609] kasan_kmalloc+0x9/0x10 [ 93.892306][ T9609] __kmalloc+0x163/0x770 [ 93.896530][ T9609] ip_set_alloc+0x38/0x5e [ 93.900836][ T9609] bitmap_ip_create+0x6ec/0xc20 [ 93.905663][ T9609] ip_set_create+0x6f1/0x1500 [ 93.910319][ T9609] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 93.915250][ T9609] netlink_rcv_skb+0x177/0x450 [ 93.920012][ T9609] nfnetlink_rcv+0x1ba/0x460 [ 93.924592][ T9609] netlink_unicast+0x59e/0x7e0 [ 93.929337][ T9609] netlink_sendmsg+0x91c/0xea0 [ 93.934085][ T9609] sock_sendmsg+0xd7/0x130 [ 93.938485][ T9609] ____sys_sendmsg+0x753/0x880 [ 93.943231][ T9609] ___sys_sendmsg+0x100/0x170 [ 93.947888][ T9609] __sys_sendmsg+0x105/0x1d0 [ 93.952470][ T9609] __x64_sys_sendmsg+0x78/0xb0 [ 93.957230][ T9609] do_syscall_64+0xfa/0x790 [ 93.961728][ T9609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.967969][ T9609] [ 93.970303][ T9609] Freed by task 9335: [ 93.974289][ T9609] save_stack+0x23/0x90 [ 93.978442][ T9609] __kasan_slab_free+0x102/0x150 [ 93.983371][ T9609] kasan_slab_free+0xe/0x10 [ 93.987867][ T9609] kfree+0x10a/0x2c0 [ 93.991800][ T9609] tomoyo_check_open_permission+0x19e/0x3e0 [ 93.997743][ T9609] tomoyo_file_open+0xa9/0xd0 [ 94.002430][ T9609] security_file_open+0x71/0x300 [ 94.007415][ T9609] do_dentry_open+0x37a/0x1380 [ 94.012175][ T9609] vfs_open+0xa0/0xd0 [ 94.016216][ T9609] path_openat+0x10df/0x4500 [ 94.021034][ T9609] do_filp_open+0x1a1/0x280 [ 94.025525][ T9609] do_sys_open+0x3fe/0x5d0 [ 94.029927][ T9609] __x64_sys_open+0x7e/0xc0 [ 94.034445][ T9609] do_syscall_64+0xfa/0x790 [ 94.038948][ T9609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.045035][ T9609] [ 94.047351][ T9609] The buggy address belongs to the object at ffff88809e88e100 [ 94.047351][ T9609] which belongs to the cache kmalloc-32 of size 32 [ 94.061227][ T9609] The buggy address is located 0 bytes inside of [ 94.061227][ T9609] 32-byte region [ffff88809e88e100, ffff88809e88e120) [ 94.074343][ T9609] The buggy address belongs to the page: [ 94.079968][ T9609] page:ffffea00027a2380 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff88809e88efc1 [ 94.090373][ T9609] raw: 00fffe0000000200 ffffea00029ae488 ffffea0002717c48 ffff8880aa4001c0 [ 94.099011][ T9609] raw: ffff88809e88efc1 ffff88809e88e000 000000010000003e 0000000000000000 [ 94.107603][ T9609] page dumped because: kasan: bad access detected [ 94.114017][ T9609] [ 94.116327][ T9609] Memory state around the buggy address: [ 94.121960][ T9609] ffff88809e88e000: fb fb fb fb fc fc fc fc 00 00 fc fc fc fc fc fc [ 94.130009][ T9609] ffff88809e88e080: fb fb fb fb fc fc fc fc 00 00 fc fc fc fc fc fc [ 94.138150][ T9609] >ffff88809e88e100: 04 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 94.146203][ T9609] ^ [ 94.150368][ T9609] ffff88809e88e180: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 94.158467][ T9609] ffff88809e88e200: 00 06 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 94.166517][ T9609] ================================================================== [ 94.175031][ T9609] Disabling lock debugging due to kernel taint [ 94.181951][ T9609] Kernel panic - not syncing: panic_on_warn set ... [ 94.188547][ T9609] CPU: 1 PID: 9609 Comm: syz-executor671 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 94.198672][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.208787][ T9609] Call Trace: [ 94.212076][ T9609] dump_stack+0x197/0x210 [ 94.216407][ T9609] panic+0x2e3/0x75c [ 94.220286][ T9609] ? add_taint.cold+0x16/0x16 [ 94.225010][ T9609] ? bitmap_ip_list+0x40f/0xf20 [ 94.229900][ T9609] ? preempt_schedule+0x4b/0x60 [ 94.234748][ T9609] ? ___preempt_schedule+0x16/0x18 [ 94.239864][ T9609] ? trace_hardirqs_on+0x5e/0x240 [ 94.244875][ T9609] ? bitmap_ip_list+0x40f/0xf20 [ 94.249725][ T9609] end_report+0x47/0x4f [ 94.253872][ T9609] ? bitmap_ip_list+0x40f/0xf20 [ 94.258733][ T9609] __kasan_report.cold+0xe/0x41 [ 94.263631][ T9609] ? bitmap_ip_list+0x40f/0xf20 [ 94.268473][ T9609] kasan_report+0x12/0x20 [ 94.272788][ T9609] check_memory_region+0x134/0x1a0 [ 94.277895][ T9609] __kasan_check_read+0x11/0x20 [ 94.282914][ T9609] bitmap_ip_list+0x40f/0xf20 [ 94.287636][ T9609] ? bitmap_ip_add+0xe60/0xe60 [ 94.292388][ T9609] ? nla_put+0x110/0x150 [ 94.296623][ T9609] ip_set_dump_start+0x96c/0x1ca0 [ 94.301654][ T9609] ? ip_set_rename+0x720/0x720 [ 94.306405][ T9609] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 94.311951][ T9609] ? zap_class+0xe40/0xe60 [ 94.316356][ T9609] ? __kasan_check_write+0x14/0x20 [ 94.321466][ T9609] netlink_dump+0x558/0xfb0 [ 94.325953][ T9609] ? __netlink_sendskb+0xc0/0xc0 [ 94.330873][ T9609] __netlink_dump_start+0x673/0x930 [ 94.336055][ T9609] ip_set_dump+0x15a/0x1d0 [ 94.340465][ T9609] ? call_ad+0x5a0/0x5a0 [ 94.344698][ T9609] ? ip_set_rename+0x720/0x720 [ 94.349441][ T9609] ? __ip_set_put_netlink.isra.0+0x90/0x90 [ 94.355228][ T9609] ? call_ad+0x5a0/0x5a0 [ 94.359448][ T9609] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 94.364364][ T9609] ? nfnetlink_bind+0x2c0/0x2c0 [ 94.369208][ T9609] ? __kasan_check_read+0x11/0x20 [ 94.374237][ T9609] ? __lock_acquire+0x8a0/0x4a00 [ 94.379167][ T9609] ? save_stack+0x5c/0x90 [ 94.383493][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.389729][ T9609] ? apparmor_capable+0x497/0x900 [ 94.394790][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.401061][ T9609] ? __kasan_check_read+0x11/0x20 [ 94.406082][ T9609] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 94.411553][ T9609] netlink_rcv_skb+0x177/0x450 [ 94.416307][ T9609] ? nfnetlink_bind+0x2c0/0x2c0 [ 94.421158][ T9609] ? netlink_ack+0xb50/0xb50 [ 94.426359][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.432582][ T9609] ? ns_capable_common+0x93/0x100 [ 94.437588][ T9609] ? ns_capable+0x20/0x30 [ 94.441912][ T9609] ? __netlink_ns_capable+0x104/0x140 [ 94.447263][ T9609] nfnetlink_rcv+0x1ba/0x460 [ 94.451829][ T9609] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 94.457284][ T9609] ? netlink_deliver_tap+0x24a/0xbf0 [ 94.462561][ T9609] ? __kasan_check_write+0x14/0x20 [ 94.467651][ T9609] netlink_unicast+0x59e/0x7e0 [ 94.472392][ T9609] ? netlink_attachskb+0x870/0x870 [ 94.477483][ T9609] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 94.483201][ T9609] ? __check_object_size+0x3d/0x437 [ 94.488397][ T9609] netlink_sendmsg+0x91c/0xea0 [ 94.493143][ T9609] ? netlink_unicast+0x7e0/0x7e0 [ 94.498057][ T9609] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 94.503603][ T9609] ? apparmor_socket_sendmsg+0x2a/0x30 [ 94.509039][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.515260][ T9609] ? security_socket_sendmsg+0x8d/0xc0 [ 94.520713][ T9609] ? netlink_unicast+0x7e0/0x7e0 [ 94.525648][ T9609] sock_sendmsg+0xd7/0x130 [ 94.530064][ T9609] ____sys_sendmsg+0x753/0x880 [ 94.534813][ T9609] ? kernel_sendmsg+0x50/0x50 [ 94.539471][ T9609] ? lockdep_init_map+0x1be/0x6d0 [ 94.544485][ T9609] ___sys_sendmsg+0x100/0x170 [ 94.549146][ T9609] ? sendmsg_copy_msghdr+0x70/0x70 [ 94.554253][ T9609] ? __kasan_check_read+0x11/0x20 [ 94.559265][ T9609] ? __lock_acquire+0x8a0/0x4a00 [ 94.564186][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.570407][ T9609] ? __this_cpu_preempt_check+0x35/0x190 [ 94.576042][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.582270][ T9609] ? percpu_counter_add_batch+0x13c/0x190 [ 94.587966][ T9609] ? __fd_install+0x1bc/0x640 [ 94.592636][ T9609] ? find_held_lock+0x35/0x130 [ 94.597389][ T9609] ? __fd_install+0x1bc/0x640 [ 94.602179][ T9609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.608404][ T9609] ? __fget_light+0x1a9/0x230 [ 94.613065][ T9609] ? __fdget+0x1b/0x20 [ 94.617126][ T9609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 94.623545][ T9609] __sys_sendmsg+0x105/0x1d0 [ 94.628128][ T9609] ? __sys_sendmsg_sock+0xc0/0xc0 [ 94.633154][ T9609] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 94.638600][ T9609] ? do_syscall_64+0x26/0x790 [ 94.643259][ T9609] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.649302][ T9609] ? do_syscall_64+0x26/0x790 [ 94.653958][ T9609] __x64_sys_sendmsg+0x78/0xb0 [ 94.658709][ T9609] do_syscall_64+0xfa/0x790 [ 94.663204][ T9609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.669156][ T9609] RIP: 0033:0x440569 [ 94.673029][ T9609] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 94.692626][ T9609] RSP: 002b:00007ffda9245308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.701032][ T9609] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440569 [ 94.709037][ T9609] RDX: 0000000000000010 RSI: 00000000200003c0 RDI: 0000000000000004 [ 94.717000][ T9609] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 94.724955][ T9609] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401df0 [ 94.732918][ T9609] R13: 0000000000401e80 R14: 0000000000000000 R15: 0000000000000000 [ 94.742220][ T9609] Kernel Offset: disabled [ 94.746563][ T9609] Rebooting in 86400 seconds..