keychord: unsupported version 40 keychord: unsupported version 40 ================================================================== BUG: KASAN: stack-out-of-bounds in memcmp+0xe3/0x160 lib/string.c:768 at addr ffff8801940778c0 Read of size 1 by task syz-executor4/20768 page:ffffea0006501dc0 count:0 mapcount:0 mapping: (null) index:0x0 flags: 0x8000000000000000() page dumped because: kasan: bad access detected SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20763 comm=syz-executor7 CPU: 1 PID: 20768 Comm: syz-executor4 Not tainted 4.9.40-g682c1e3 #12 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801940773d0[ 230.542338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20763 comm=syz-executor7 keychord: keycode 4095 out of range ffffffff81d8de49 ffffed003280ef18 0000000000000001 0000000000000000 ffffed003280ef18[ 230.569597] keychord: keycode 4095 out of range ffff8801940778c0 ffff880194077458 ffffffff815385c3 ffff880194077498[ 230.584678] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. 0000000000000246 ffffffff81dabbe3 [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:208 [inline] [] kasan_report_error mm/kasan/report.c:287 [inline] [] kasan_report.part.1+0x4c3/0x500 mm/kasan/report.c:309 netlink: 1 bytes leftover after parsing attributes in process `syz-executor1'. IPv6: NLM_F_CREATE should be specified when creating new route netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'. [] kasan_report mm/kasan/report.c:327 [inline] [] __asan_report_load1_noabort+0x29/0x30 mm/kasan/report.c:327 [] memcmp+0xe3/0x160 lib/string.c:768 netlink: 1 bytes leftover after parsing attributes in process `syz-executor1'. [] addr_match include/net/xfrm.h:830 [inline] [] __xfrm6_selector_match net/xfrm/xfrm_policy.c:87 [inline] [] xfrm_selector_match+0x1c7/0xe40 net/xfrm/xfrm_policy.c:101 [] xfrm_sk_policy_lookup+0x113/0x390 net/xfrm/xfrm_policy.c:1259 [] xfrm_lookup+0x1b3/0xc00 net/xfrm/xfrm_policy.c:2209 [] xfrm_lookup_route+0x39/0x1a0 net/xfrm/xfrm_policy.c:2343 [] ip_route_output_flow+0x7f/0xa0 net/ipv4/route.c:2430 [] udp_sendmsg+0xe36/0x1c10 net/ipv4/udp.c:1026 [] udpv6_sendmsg+0x588/0x2390 net/ipv6/udp.c:1085 [] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:753 [] sock_sendmsg_nosec net/socket.c:635 [inline] [] sock_sendmsg+0xca/0x110 net/socket.c:645 [] SYSC_sendto+0x2c8/0x340 net/socket.c:1670 [] SyS_sendto+0x40/0x50 net/socket.c:1638 [] entry_SYSCALL_64_fastpath+0x23/0xc6 Memory state around the buggy address: ffff880194077780: 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 ffff880194077800: f1 00 f2 f2 f2 f2 f2 f2 f2 00 00 00 00 f2 f2 f2 >ffff880194077880: f2 00 00 00 00 00 00 00 f2 f2 f2 f2 f2 00 00 00 ^ ffff880194077900: 00 00 00 00 00 00 f2 f2 f2 00 00 00 00 00 00 00 ffff880194077980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ================================================================== 9pnet_virtio: no channels available for device ./bus netlink: 6 bytes leftover after parsing attributes in process `syz-executor3'. 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 9pnet_virtio: no channels available for device ./bus netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pig=20904 comm=syz-executor3 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pig=20923 comm=syz-executor3 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus binder: 21485:21487 ioctl 80045400 20000ffc returned -22 9pnet_virtio: no channels available for device ./bus binder: 21485:21487 ioctl 80045400 20000ffc returned -22 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5098 sclass=netlink_audit_socket pig=21511 comm=syz-executor7 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 Buffer I/O error on dev loop7, logical block 0, async page read Buffer I/O error on dev loop7, logical block 1, async page read Buffer I/O error on dev loop7, logical block 2, async page read Buffer I/O error on dev loop7, logical block 3, async page read 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus binder: 22422:22426 ioctl 4b35 7fff returned -22 9pnet_virtio: no channels available for device ./bus binder: 22422:22427 ioctl 4b35 7fff returned -22 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus binder: 22868:22870 ioctl 890c 205a1fb0 returned -22 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 binder: 22868:22874 ioctl 890c 205a1fb0 returned -22 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus binder: 22915:22918 ioctl 8906 2087fffc returned -22 binder: 22915:22918 ioctl 8906 2087fffc returned -22 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus tmpfs: Bad mount option "'?wjXJU;"La'\.Km;j)dv-Vjh4G)vדXH5^]9#T0u xbm&E}AVJ 9 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus 9pnet_virtio: no channels available for device ./bus