Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. executing program syzkaller login: [ 50.436998][ T3546] ================================================================== [ 50.445122][ T3546] BUG: KASAN: slab-out-of-bounds in dns_resolver_preparse+0xcaf/0xd20 [ 50.453301][ T3546] Read of size 1 at addr ffff888018f7657c by task syz-executor400/3546 [ 50.461607][ T3546] [ 50.463913][ T3546] CPU: 0 PID: 3546 Comm: syz-executor400 Not tainted 6.1.70-syzkaller #0 [ 50.472301][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 50.482338][ T3546] Call Trace: [ 50.485598][ T3546] [ 50.488508][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 50.493179][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 50.498624][ T3546] ? panic+0x75d/0x75d [ 50.502774][ T3546] ? _printk+0xd1/0x111 [ 50.507454][ T3546] ? _raw_spin_lock_irqsave+0xac/0x120 [ 50.512922][ T3546] print_report+0x15f/0x4f0 [ 50.517434][ T3546] ? __virt_addr_valid+0x22b/0x2e0 [ 50.522557][ T3546] ? __phys_addr+0xb6/0x170 [ 50.527059][ T3546] ? dns_resolver_preparse+0xcaf/0xd20 [ 50.532618][ T3546] kasan_report+0x136/0x160 [ 50.537132][ T3546] ? dns_resolver_preparse+0xcaf/0xd20 [ 50.542589][ T3546] dns_resolver_preparse+0xcaf/0xd20 [ 50.547874][ T3546] ? net_ctl_permissions+0xb0/0xb0 [ 50.552979][ T3546] ? __down_common+0x8b0/0x8b0 [ 50.557730][ T3546] ? lookup_user_key+0x10b1/0x14f0 [ 50.562846][ T3546] ? __lock_acquire+0x1f80/0x1f80 [ 50.567884][ T3546] ? key_lookup+0x12e/0x3a0 [ 50.572391][ T3546] key_create_or_update+0x47b/0xbf0 [ 50.577682][ T3546] ? key_type_put+0x20/0x20 [ 50.582181][ T3546] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 50.588150][ T3546] ? __might_fault+0xbd/0x110 [ 50.592819][ T3546] __se_sys_add_key+0x33b/0x480 [ 50.597657][ T3546] ? __x64_sys_add_key+0xc0/0xc0 [ 50.602580][ T3546] ? syscall_enter_from_user_mode+0x2e/0x220 [ 50.608559][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 50.613745][ T3546] ? __x64_sys_add_key+0x1c/0xc0 [ 50.618669][ T3546] do_syscall_64+0x3d/0xb0 [ 50.623167][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.629050][ T3546] RIP: 0033:0x7f538c7c1329 [ 50.633452][ T3546] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.653046][ T3546] RSP: 002b:00007ffee89b21a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 50.661448][ T3546] RAX: ffffffffffffffda RBX: 00007ffee89b2378 RCX: 00007f538c7c1329 [ 50.669409][ T3546] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 00000000200003c0 [ 50.677369][ T3546] RBP: 00007f538c834610 R08: 00000000173ffeb4 R09: 00007ffee89b2378 [ 50.685430][ T3546] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 50.693395][ T3546] R13: 00007ffee89b2368 R14: 0000000000000001 R15: 0000000000000001 [ 50.701367][ T3546] [ 50.704370][ T3546] [ 50.706675][ T3546] Allocated by task 3546: [ 50.710981][ T3546] kasan_set_track+0x4b/0x70 [ 50.715565][ T3546] __kasan_kmalloc+0x97/0xb0 [ 50.720148][ T3546] __kmalloc_node+0xb3/0x230 [ 50.724723][ T3546] kvmalloc_node+0x6e/0x180 [ 50.729208][ T3546] __se_sys_add_key+0x26c/0x480 [ 50.734042][ T3546] do_syscall_64+0x3d/0xb0 [ 50.738450][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.744332][ T3546] [ 50.746637][ T3546] The buggy address belongs to the object at ffff888018f76578 [ 50.746637][ T3546] which belongs to the cache kmalloc-8 of size 8 [ 50.760324][ T3546] The buggy address is located 4 bytes inside of [ 50.760324][ T3546] 8-byte region [ffff888018f76578, ffff888018f76580) [ 50.773233][ T3546] [ 50.775540][ T3546] The buggy address belongs to the physical page: [ 50.781932][ T3546] page:ffffea000063dd80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18f76 [ 50.792063][ T3546] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 50.799618][ T3546] raw: 00fff00000000200 ffffea00008fba80 dead000000000002 ffff888012441280 [ 50.808186][ T3546] raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000 [ 50.816747][ T3546] page dumped because: kasan: bad access detected [ 50.823138][ T3546] page_owner tracks the page as allocated [ 50.828832][ T3546] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3003, tgid 3003 (udevadm), ts 15293965490, free_ts 12727125892 [ 50.846698][ T3546] post_alloc_hook+0x18d/0x1b0 [ 50.851497][ T3546] get_page_from_freelist+0x31a1/0x3320 [ 50.857026][ T3546] __alloc_pages+0x28d/0x770 [ 50.861601][ T3546] alloc_slab_page+0x6a/0x150 [ 50.866266][ T3546] new_slab+0x84/0x2d0 [ 50.870320][ T3546] ___slab_alloc+0xc20/0x1270 [ 50.874983][ T3546] __kmem_cache_alloc_node+0x19f/0x260 [ 50.880430][ T3546] __kmalloc+0xa1/0x230 [ 50.884573][ T3546] kernfs_fop_write_iter+0x157/0x4f0 [ 50.889855][ T3546] vfs_write+0x7ae/0xba0 [ 50.894087][ T3546] ksys_write+0x19c/0x2c0 [ 50.898484][ T3546] do_syscall_64+0x3d/0xb0 [ 50.902888][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.908765][ T3546] page last free stack trace: [ 50.913417][ T3546] free_unref_page_prepare+0xf63/0x1120 [ 50.918946][ T3546] free_unref_page+0x33/0x3e0 [ 50.923612][ T3546] kasan_depopulate_vmalloc_pte+0x66/0x80 [ 50.929322][ T3546] __apply_to_page_range+0x9c5/0xcc0 [ 50.934594][ T3546] kasan_release_vmalloc+0x96/0xb0 [ 50.939690][ T3546] __purge_vmap_area_lazy+0x157c/0x1720 [ 50.945226][ T3546] _vm_unmap_aliases+0x476/0x4e0 [ 50.950149][ T3546] change_page_attr_set_clr+0x308/0x1050 [ 50.955857][ T3546] set_memory_nx+0xee/0x130 [ 50.960357][ T3546] free_initmem+0x71/0xc0 [ 50.964670][ T3546] kernel_init+0x2d/0x290 [ 50.968982][ T3546] ret_from_fork+0x1f/0x30 [ 50.973388][ T3546] [ 50.975696][ T3546] Memory state around the buggy address: [ 50.981307][ T3546] ffff888018f76400: fc fc fa fc fc fc fc fa fc fc fc fc 00 fc fc fc [ 50.989352][ T3546] ffff888018f76480: fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc [ 50.997396][ T3546] >ffff888018f76500: fa fc fc fc fc fa fc fc fc fc 05 fc fc fc fc 04 [ 51.005436][ T3546] ^ [ 51.013830][ T3546] ffff888018f76580: fc fc fc fc fb fc fc fc fc fb fc fc fc fc 00 fc [ 51.021873][ T3546] ffff888018f76600: fc fc fc 00 fc fc fc fc fb fc fc fc fc fb fc fc [ 51.029943][ T3546] ================================================================== [ 51.038205][ T3546] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 51.045409][ T3546] CPU: 1 PID: 3546 Comm: syz-executor400 Not tainted 6.1.70-syzkaller #0 [ 51.053810][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 51.063850][ T3546] Call Trace: [ 51.067115][ T3546] [ 51.070032][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 51.074705][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 51.080157][ T3546] ? panic+0x75d/0x75d [ 51.084209][ T3546] ? preempt_schedule_common+0xa6/0xd0 [ 51.089658][ T3546] ? vscnprintf+0x59/0x80 [ 51.093975][ T3546] panic+0x318/0x75d [ 51.097856][ T3546] ? check_panic_on_warn+0x1d/0xa0 [ 51.102953][ T3546] ? memcpy_page_flushcache+0xfc/0xfc [ 51.108311][ T3546] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 51.114280][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 51.119116][ T3546] ? print_report+0x4a3/0x4f0 [ 51.123787][ T3546] check_panic_on_warn+0x7e/0xa0 [ 51.128712][ T3546] ? dns_resolver_preparse+0xcaf/0xd20 [ 51.134163][ T3546] end_report+0x66/0x110 [ 51.138398][ T3546] kasan_report+0x143/0x160 [ 51.142891][ T3546] ? dns_resolver_preparse+0xcaf/0xd20 [ 51.148342][ T3546] dns_resolver_preparse+0xcaf/0xd20 [ 51.153619][ T3546] ? net_ctl_permissions+0xb0/0xb0 [ 51.158721][ T3546] ? __down_common+0x8b0/0x8b0 [ 51.163471][ T3546] ? lookup_user_key+0x10b1/0x14f0 [ 51.168567][ T3546] ? __lock_acquire+0x1f80/0x1f80 [ 51.173586][ T3546] ? key_lookup+0x12e/0x3a0 [ 51.178081][ T3546] key_create_or_update+0x47b/0xbf0 [ 51.183273][ T3546] ? key_type_put+0x20/0x20 [ 51.187766][ T3546] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 51.193735][ T3546] ? __might_fault+0xbd/0x110 [ 51.198400][ T3546] __se_sys_add_key+0x33b/0x480 [ 51.203236][ T3546] ? __x64_sys_add_key+0xc0/0xc0 [ 51.208157][ T3546] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.214121][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 51.219306][ T3546] ? __x64_sys_add_key+0x1c/0xc0 [ 51.224228][ T3546] do_syscall_64+0x3d/0xb0 [ 51.228634][ T3546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.234515][ T3546] RIP: 0033:0x7f538c7c1329 [ 51.238920][ T3546] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.258513][ T3546] RSP: 002b:00007ffee89b21a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 51.266915][ T3546] RAX: ffffffffffffffda RBX: 00007ffee89b2378 RCX: 00007f538c7c1329 [ 51.274873][ T3546] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 00000000200003c0 [ 51.282920][ T3546] RBP: 00007f538c834610 R08: 00000000173ffeb4 R09: 00007ffee89b2378 [ 51.290875][ T3546] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 51.298847][ T3546] R13: 00007ffee89b2368 R14: 0000000000000001 R15: 0000000000000001 [ 51.306834][ T3546] [ 51.310034][ T3546] Kernel Offset: disabled [ 51.314352][ T3546] Rebooting in 86400 seconds..