netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. ================================================================== BUG: KASAN: use-after-free in memcpy include/linux/string.h:377 [inline] BUG: KASAN: use-after-free in memcpy_dir crypto/scatterwalk.c:28 [inline] BUG: KASAN: use-after-free in scatterwalk_copychunks+0x271/0x6a0 crypto/scatterwalk.c:43 Read of size 4096 at addr ffff88801acb6000 by task syz-executor.3/17388 CPU: 1 PID: 17388 Comm: syz-executor.3 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_address_description.cold+0x54/0x219 mm/kasan/report.c:256 kasan_report_error.cold+0x8a/0x1b9 mm/kasan/report.c:354 kasan_report+0x8f/0xa0 mm/kasan/report.c:412 memcpy+0x20/0x50 mm/kasan/kasan.c:302 memcpy include/linux/string.h:377 [inline] memcpy_dir crypto/scatterwalk.c:28 [inline] scatterwalk_copychunks+0x271/0x6a0 crypto/scatterwalk.c:43 scatterwalk_map_and_copy crypto/scatterwalk.c:72 [inline] scatterwalk_map_and_copy+0x121/0x1a0 crypto/scatterwalk.c:60 gcmaes_encrypt.constprop.0+0x760/0xd90 arch/x86/crypto/aesni-intel_glue.c:956 The buggy address belongs to the page: page:ffffea00006b2d80 count:1 mapcount:0 mapping:ffff8880422ad7b8 index:0x1a2 flags: 0xfff00000000028(uptodate|lru) raw: 00fff00000000028 ffffea00003fc248 ffffea00007a3388 ffff8880422ad7b8 raw: 00000000000001a2 0000000000000000 00000001ffffffff ffff8880b59f68c0 page dumped because: kasan: bad access detected page->mem_cgroup:ffff8880b59f68c0 Memory state around the buggy address: ffff88801acb5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff88801acb5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff88801acb6000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ^ ffff88801acb6080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff88801acb6100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ==================================================================