Warning: Permanently added '10.128.0.177' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 91.648960][ T9683] ================================================================== [ 91.657255][ T9683] BUG: KASAN: slab-out-of-bounds in bitmap_port_list+0x3cf/0xdb0 [ 91.664964][ T9683] Read of size 8 at addr ffff888094406080 by task syz-executor379/9683 [ 91.673199][ T9683] [ 91.675513][ T9683] CPU: 0 PID: 9683 Comm: syz-executor379 Not tainted 5.5.0-rc6-syzkaller #0 [ 91.684160][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.694196][ T9683] Call Trace: [ 91.697480][ T9683] dump_stack+0x197/0x210 [ 91.701800][ T9683] ? bitmap_port_list+0x3cf/0xdb0 [ 91.706821][ T9683] print_address_description.constprop.0.cold+0xd4/0x30b [ 91.713822][ T9683] ? bitmap_port_list+0x3cf/0xdb0 [ 91.718826][ T9683] ? bitmap_port_list+0x3cf/0xdb0 [ 91.723840][ T9683] __kasan_report.cold+0x1b/0x41 [ 91.728758][ T9683] ? bitmap_port_list+0x3cf/0xdb0 [ 91.733762][ T9683] kasan_report+0x12/0x20 [ 91.738076][ T9683] check_memory_region+0x134/0x1a0 [ 91.743181][ T9683] __kasan_check_read+0x11/0x20 [ 91.748022][ T9683] bitmap_port_list+0x3cf/0xdb0 [ 91.752871][ T9683] ? bitmap_port_head+0x296/0x600 [ 91.757899][ T9683] ? bitmap_port_del+0x380/0x380 [ 91.762824][ T9683] ? nla_put+0x110/0x150 [ 91.767051][ T9683] ip_set_dump_start+0x96c/0x1ca0 [ 91.772069][ T9683] ? ip_set_rename+0x720/0x720 [ 91.776830][ T9683] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 91.782381][ T9683] ? perf_trace_lock_acquire+0x4c0/0x530 [ 91.788012][ T9683] ? __kasan_check_write+0x14/0x20 [ 91.793158][ T9683] netlink_dump+0x558/0xfb0 [ 91.797766][ T9683] ? __netlink_sendskb+0xc0/0xc0 [ 91.802695][ T9683] __netlink_dump_start+0x66a/0x930 [ 91.807887][ T9683] ip_set_dump+0x15a/0x1d0 [ 91.812289][ T9683] ? call_ad+0x5a0/0x5a0 [ 91.816516][ T9683] ? ip_set_rename+0x720/0x720 [ 91.821281][ T9683] ? __ip_set_put_netlink.isra.0+0x90/0x90 [ 91.827129][ T9683] ? call_ad+0x5a0/0x5a0 [ 91.831415][ T9683] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 91.836353][ T9683] ? nfnetlink_bind+0x2c0/0x2c0 [ 91.841194][ T9683] ? __kasan_check_read+0x11/0x20 [ 91.846726][ T9683] ? __lock_acquire+0x8a0/0x4a00 [ 91.851652][ T9683] ? save_stack+0x5c/0x90 [ 91.855975][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.862891][ T9683] ? apparmor_capable+0x497/0x900 [ 91.867919][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.874147][ T9683] ? __kasan_check_read+0x11/0x20 [ 91.879150][ T9683] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 91.884601][ T9683] netlink_rcv_skb+0x177/0x450 [ 91.889360][ T9683] ? nfnetlink_bind+0x2c0/0x2c0 [ 91.894202][ T9683] ? netlink_ack+0xb50/0xb50 [ 91.898775][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.904996][ T9683] ? ns_capable_common+0x93/0x100 [ 91.910010][ T9683] ? ns_capable+0x20/0x30 [ 91.914328][ T9683] ? __netlink_ns_capable+0x104/0x140 [ 91.919730][ T9683] nfnetlink_rcv+0x1ba/0x460 [ 91.924331][ T9683] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 91.929783][ T9683] ? netlink_deliver_tap+0x24a/0xbe0 [ 91.935054][ T9683] ? __kasan_check_write+0x14/0x20 [ 91.940229][ T9683] netlink_unicast+0x58c/0x7d0 [ 91.945026][ T9683] ? netlink_attachskb+0x870/0x870 [ 91.950116][ T9683] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 91.955829][ T9683] ? __check_object_size+0x3d/0x437 [ 91.961018][ T9683] netlink_sendmsg+0x91c/0xea0 [ 91.965775][ T9683] ? netlink_unicast+0x7d0/0x7d0 [ 91.970703][ T9683] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 91.976239][ T9683] ? apparmor_socket_sendmsg+0x2a/0x30 [ 91.981699][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.987928][ T9683] ? security_socket_sendmsg+0x8d/0xc0 [ 91.993371][ T9683] ? netlink_unicast+0x7d0/0x7d0 [ 91.998337][ T9683] sock_sendmsg+0xd7/0x130 [ 92.002737][ T9683] ____sys_sendmsg+0x753/0x880 [ 92.007484][ T9683] ? kernel_sendmsg+0x50/0x50 [ 92.012208][ T9683] ? lockdep_init_map+0x1be/0x6d0 [ 92.017251][ T9683] ___sys_sendmsg+0x100/0x170 [ 92.021983][ T9683] ? sendmsg_copy_msghdr+0x70/0x70 [ 92.027091][ T9683] ? __kasan_check_read+0x11/0x20 [ 92.032103][ T9683] ? __lock_acquire+0x8a0/0x4a00 [ 92.037029][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.043278][ T9683] ? __this_cpu_preempt_check+0x35/0x190 [ 92.048909][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.055184][ T9683] ? percpu_counter_add_batch+0x13c/0x190 [ 92.060887][ T9683] ? __fd_install+0x1bc/0x640 [ 92.065584][ T9683] ? find_held_lock+0x35/0x130 [ 92.070358][ T9683] ? __fd_install+0x1bc/0x640 [ 92.075024][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.081362][ T9683] ? __fget_light+0x1a9/0x230 [ 92.086482][ T9683] ? __fdget+0x1b/0x20 [ 92.090540][ T9683] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 92.096782][ T9683] __sys_sendmsg+0x105/0x1d0 [ 92.101353][ T9683] ? __sys_sendmsg_sock+0xc0/0xc0 [ 92.106370][ T9683] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 92.111819][ T9683] ? do_syscall_64+0x26/0x790 [ 92.116479][ T9683] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.122523][ T9683] ? do_syscall_64+0x26/0x790 [ 92.127179][ T9683] __x64_sys_sendmsg+0x78/0xb0 [ 92.131934][ T9683] do_syscall_64+0xfa/0x790 [ 92.136427][ T9683] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.142310][ T9683] RIP: 0033:0x4404e9 [ 92.146186][ T9683] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 92.165782][ T9683] RSP: 002b:00007fffe3b14828 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.174172][ T9683] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004404e9 [ 92.182134][ T9683] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000004 [ 92.190100][ T9683] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 92.198053][ T9683] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401d70 [ 92.208620][ T9683] R13: 0000000000401e00 R14: 0000000000000000 R15: 0000000000000000 [ 92.216582][ T9683] [ 92.218889][ T9683] Allocated by task 9683: [ 92.223209][ T9683] save_stack+0x23/0x90 [ 92.227346][ T9683] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 92.232955][ T9683] kasan_kmalloc+0x9/0x10 [ 92.237263][ T9683] __kmalloc+0x163/0x770 [ 92.241482][ T9683] ip_set_alloc+0x38/0x5e [ 92.245799][ T9683] bitmap_port_create+0x3dc/0x7c0 [ 92.250797][ T9683] ip_set_create+0x6f1/0x1500 [ 92.255455][ T9683] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 92.260389][ T9683] netlink_rcv_skb+0x177/0x450 [ 92.265149][ T9683] nfnetlink_rcv+0x1ba/0x460 [ 92.269734][ T9683] netlink_unicast+0x58c/0x7d0 [ 92.274493][ T9683] netlink_sendmsg+0x91c/0xea0 [ 92.279247][ T9683] sock_sendmsg+0xd7/0x130 [ 92.283661][ T9683] ____sys_sendmsg+0x753/0x880 [ 92.288418][ T9683] ___sys_sendmsg+0x100/0x170 [ 92.293091][ T9683] __sys_sendmsg+0x105/0x1d0 [ 92.297679][ T9683] __x64_sys_sendmsg+0x78/0xb0 [ 92.302494][ T9683] do_syscall_64+0xfa/0x790 [ 92.306985][ T9683] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.312933][ T9683] [ 92.315255][ T9683] Freed by task 9425: [ 92.319241][ T9683] save_stack+0x23/0x90 [ 92.323410][ T9683] __kasan_slab_free+0x102/0x150 [ 92.328408][ T9683] kasan_slab_free+0xe/0x10 [ 92.332927][ T9683] kfree+0x10a/0x2c0 [ 92.336808][ T9683] tomoyo_init_log+0x15a9/0x2070 [ 92.341794][ T9683] tomoyo_supervisor+0x33f/0xef0 [ 92.346738][ T9683] tomoyo_env_perm+0x18e/0x210 [ 92.351493][ T9683] tomoyo_find_next_domain+0x1354/0x1f6c [ 92.357122][ T9683] tomoyo_bprm_check_security+0x124/0x1a0 [ 92.362825][ T9683] security_bprm_check+0x63/0xb0 [ 92.367745][ T9683] search_binary_handler+0x71/0x570 [ 92.372970][ T9683] __do_execve_file.isra.0+0x1329/0x22b0 [ 92.378639][ T9683] __x64_sys_execve+0x8f/0xc0 [ 92.383313][ T9683] do_syscall_64+0xfa/0x790 [ 92.387816][ T9683] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.393696][ T9683] [ 92.396017][ T9683] The buggy address belongs to the object at ffff888094406080 [ 92.396017][ T9683] which belongs to the cache kmalloc-32 of size 32 [ 92.409892][ T9683] The buggy address is located 0 bytes inside of [ 92.409892][ T9683] 32-byte region [ffff888094406080, ffff8880944060a0) [ 92.423003][ T9683] The buggy address belongs to the page: [ 92.428631][ T9683] page:ffffea0002510180 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff888094406fc1 [ 92.439037][ T9683] raw: 00fffe0000000200 ffffea0002853a08 ffffea00025900c8 ffff8880aa4001c0 [ 92.447621][ T9683] raw: ffff888094406fc1 ffff888094406000 000000010000003f 0000000000000000 [ 92.456191][ T9683] page dumped because: kasan: bad access detected [ 92.462588][ T9683] [ 92.464901][ T9683] Memory state around the buggy address: [ 92.471496][ T9683] ffff888094405f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.479546][ T9683] ffff888094406000: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 92.487602][ T9683] >ffff888094406080: 04 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 92.495702][ T9683] ^ [ 92.499797][ T9683] ffff888094406100: fb fb fb fb fc fc fc fc 00 01 fc fc fc fc fc fc [ 92.507934][ T9683] ffff888094406180: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 92.516081][ T9683] ================================================================== [ 92.524133][ T9683] Disabling lock debugging due to kernel taint [ 92.531130][ T9683] Kernel panic - not syncing: panic_on_warn set ... [ 92.537757][ T9683] CPU: 0 PID: 9683 Comm: syz-executor379 Tainted: G B 5.5.0-rc6-syzkaller #0 [ 92.547801][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.557857][ T9683] Call Trace: [ 92.561136][ T9683] dump_stack+0x197/0x210 [ 92.565457][ T9683] panic+0x2e3/0x75c [ 92.569370][ T9683] ? add_taint.cold+0x16/0x16 [ 92.574051][ T9683] ? bitmap_port_list+0x3cf/0xdb0 [ 92.579132][ T9683] ? preempt_schedule+0x4b/0x60 [ 92.583974][ T9683] ? ___preempt_schedule+0x16/0x18 [ 92.589125][ T9683] ? trace_hardirqs_on+0x5e/0x240 [ 92.594168][ T9683] ? bitmap_port_list+0x3cf/0xdb0 [ 92.599176][ T9683] end_report+0x47/0x4f [ 92.603364][ T9683] ? bitmap_port_list+0x3cf/0xdb0 [ 92.608373][ T9683] __kasan_report.cold+0xe/0x41 [ 92.613206][ T9683] ? bitmap_port_list+0x3cf/0xdb0 [ 92.618232][ T9683] kasan_report+0x12/0x20 [ 92.622540][ T9683] check_memory_region+0x134/0x1a0 [ 92.627657][ T9683] __kasan_check_read+0x11/0x20 [ 92.632601][ T9683] bitmap_port_list+0x3cf/0xdb0 [ 92.637439][ T9683] ? bitmap_port_head+0x296/0x600 [ 92.642571][ T9683] ? bitmap_port_del+0x380/0x380 [ 92.647492][ T9683] ? nla_put+0x110/0x150 [ 92.651726][ T9683] ip_set_dump_start+0x96c/0x1ca0 [ 92.656800][ T9683] ? ip_set_rename+0x720/0x720 [ 92.661702][ T9683] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 92.667237][ T9683] ? perf_trace_lock_acquire+0x4c0/0x530 [ 92.672902][ T9683] ? __kasan_check_write+0x14/0x20 [ 92.678114][ T9683] netlink_dump+0x558/0xfb0 [ 92.682658][ T9683] ? __netlink_sendskb+0xc0/0xc0 [ 92.687599][ T9683] __netlink_dump_start+0x66a/0x930 [ 92.693090][ T9683] ip_set_dump+0x15a/0x1d0 [ 92.697540][ T9683] ? call_ad+0x5a0/0x5a0 [ 92.701771][ T9683] ? ip_set_rename+0x720/0x720 [ 92.706852][ T9683] ? __ip_set_put_netlink.isra.0+0x90/0x90 [ 92.712669][ T9683] ? call_ad+0x5a0/0x5a0 [ 92.716904][ T9683] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 92.721865][ T9683] ? nfnetlink_bind+0x2c0/0x2c0 [ 92.726707][ T9683] ? __kasan_check_read+0x11/0x20 [ 92.731806][ T9683] ? __lock_acquire+0x8a0/0x4a00 [ 92.736769][ T9683] ? save_stack+0x5c/0x90 [ 92.741097][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.747330][ T9683] ? apparmor_capable+0x497/0x900 [ 92.752351][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.758581][ T9683] ? __kasan_check_read+0x11/0x20 [ 92.763601][ T9683] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 92.769057][ T9683] netlink_rcv_skb+0x177/0x450 [ 92.773910][ T9683] ? nfnetlink_bind+0x2c0/0x2c0 [ 92.778772][ T9683] ? netlink_ack+0xb50/0xb50 [ 92.784055][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.790297][ T9683] ? ns_capable_common+0x93/0x100 [ 92.795420][ T9683] ? ns_capable+0x20/0x30 [ 92.799732][ T9683] ? __netlink_ns_capable+0x104/0x140 [ 92.805172][ T9683] nfnetlink_rcv+0x1ba/0x460 [ 92.809808][ T9683] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 92.815353][ T9683] ? netlink_deliver_tap+0x24a/0xbe0 [ 92.820770][ T9683] ? __kasan_check_write+0x14/0x20 [ 92.825944][ T9683] netlink_unicast+0x58c/0x7d0 [ 92.830789][ T9683] ? netlink_attachskb+0x870/0x870 [ 92.835891][ T9683] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 92.841662][ T9683] ? __check_object_size+0x3d/0x437 [ 92.846874][ T9683] netlink_sendmsg+0x91c/0xea0 [ 92.851636][ T9683] ? netlink_unicast+0x7d0/0x7d0 [ 92.856680][ T9683] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 92.862263][ T9683] ? apparmor_socket_sendmsg+0x2a/0x30 [ 92.867717][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.873975][ T9683] ? security_socket_sendmsg+0x8d/0xc0 [ 92.879451][ T9683] ? netlink_unicast+0x7d0/0x7d0 [ 92.884458][ T9683] sock_sendmsg+0xd7/0x130 [ 92.888862][ T9683] ____sys_sendmsg+0x753/0x880 [ 92.895798][ T9683] ? kernel_sendmsg+0x50/0x50 [ 92.900629][ T9683] ? lockdep_init_map+0x1be/0x6d0 [ 92.905652][ T9683] ___sys_sendmsg+0x100/0x170 [ 92.910312][ T9683] ? sendmsg_copy_msghdr+0x70/0x70 [ 92.915811][ T9683] ? __kasan_check_read+0x11/0x20 [ 92.920920][ T9683] ? __lock_acquire+0x8a0/0x4a00 [ 92.925847][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.932185][ T9683] ? __this_cpu_preempt_check+0x35/0x190 [ 92.937861][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.944091][ T9683] ? percpu_counter_add_batch+0x13c/0x190 [ 92.949793][ T9683] ? __fd_install+0x1bc/0x640 [ 92.954497][ T9683] ? find_held_lock+0x35/0x130 [ 92.959243][ T9683] ? __fd_install+0x1bc/0x640 [ 92.963931][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.970217][ T9683] ? __fget_light+0x1a9/0x230 [ 92.974875][ T9683] ? __fdget+0x1b/0x20 [ 92.978975][ T9683] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 92.985208][ T9683] __sys_sendmsg+0x105/0x1d0 [ 92.989782][ T9683] ? __sys_sendmsg_sock+0xc0/0xc0 [ 92.994959][ T9683] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 93.000402][ T9683] ? do_syscall_64+0x26/0x790 [ 93.005070][ T9683] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.011122][ T9683] ? do_syscall_64+0x26/0x790 [ 93.015789][ T9683] __x64_sys_sendmsg+0x78/0xb0 [ 93.020536][ T9683] do_syscall_64+0xfa/0x790 [ 93.025023][ T9683] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.030906][ T9683] RIP: 0033:0x4404e9 [ 93.034786][ T9683] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 93.054685][ T9683] RSP: 002b:00007fffe3b14828 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.063134][ T9683] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004404e9 [ 93.071147][ T9683] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000004 [ 93.079109][ T9683] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 93.087153][ T9683] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401d70 [ 93.095195][ T9683] R13: 0000000000401e00 R14: 0000000000000000 R15: 0000000000000000 [ 93.104769][ T9683] Kernel Offset: disabled [ 93.109103][ T9683] Rebooting in 86400 seconds..