Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. executing program [ 35.910254][ T3965] ================================================================== [ 35.912088][ T3965] BUG: KASAN: slab-out-of-bounds in dns_resolver_preparse+0xa98/0xaf8 [ 35.913827][ T3965] Read of size 1 at addr ffff0000c9641c04 by task syz-executor388/3965 [ 35.915513][ T3965] [ 35.915994][ T3965] CPU: 1 PID: 3965 Comm: syz-executor388 Not tainted 5.15.146-syzkaller #0 [ 35.917741][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 35.919848][ T3965] Call trace: [ 35.920534][ T3965] dump_backtrace+0x0/0x530 [ 35.921527][ T3965] show_stack+0x2c/0x3c [ 35.922423][ T3965] dump_stack_lvl+0x108/0x170 [ 35.923395][ T3965] print_address_description+0x7c/0x3f0 [ 35.924599][ T3965] kasan_report+0x174/0x1e4 [ 35.925541][ T3965] __asan_report_load1_noabort+0x44/0x50 [ 35.926738][ T3965] dns_resolver_preparse+0xa98/0xaf8 [ 35.927825][ T3965] key_create_or_update+0x43c/0xa38 [ 35.928825][ T3965] __arm64_sys_add_key+0x440/0x578 [ 35.929984][ T3965] invoke_syscall+0x98/0x2b8 [ 35.931018][ T3965] el0_svc_common+0x138/0x258 [ 35.931991][ T3965] do_el0_svc+0x58/0x14c [ 35.932938][ T3965] el0_svc+0x7c/0x1f0 [ 35.933758][ T3965] el0t_64_sync_handler+0x84/0xe4 [ 35.934802][ T3965] el0t_64_sync+0x1a0/0x1a4 [ 35.935795][ T3965] [ 35.936276][ T3965] Allocated by task 3965: [ 35.937195][ T3965] ____kasan_kmalloc+0xbc/0xfc [ 35.938223][ T3965] __kasan_kmalloc+0x10/0x1c [ 35.939196][ T3965] __kmalloc_node+0x2c0/0x5b8 [ 35.940186][ T3965] kvmalloc_node+0x88/0x204 [ 35.941119][ T3965] __arm64_sys_add_key+0x29c/0x578 [ 35.942257][ T3965] invoke_syscall+0x98/0x2b8 [ 35.943222][ T3965] el0_svc_common+0x138/0x258 [ 35.944206][ T3965] do_el0_svc+0x58/0x14c [ 35.945095][ T3965] el0_svc+0x7c/0x1f0 [ 35.945914][ T3965] el0t_64_sync_handler+0x84/0xe4 [ 35.946976][ T3965] el0t_64_sync+0x1a0/0x1a4 [ 35.947966][ T3965] [ 35.948451][ T3965] The buggy address belongs to the object at ffff0000c9641c00 [ 35.948451][ T3965] which belongs to the cache kmalloc-128 of size 128 [ 35.951445][ T3965] The buggy address is located 4 bytes inside of [ 35.951445][ T3965] 128-byte region [ffff0000c9641c00, ffff0000c9641c80) [ 35.954289][ T3965] The buggy address belongs to the page: [ 35.955471][ T3965] page:00000000b441518f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109641 [ 35.957641][ T3965] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 35.959100][ T3965] raw: 05ffc00000000200 fffffc0003269700 0000000200000002 ffff0000c0002300 [ 35.960944][ T3965] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 35.962771][ T3965] page dumped because: kasan: bad access detected [ 35.964155][ T3965] [ 35.964679][ T3965] Memory state around the buggy address: [ 35.965811][ T3965] ffff0000c9641b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 35.967472][ T3965] ffff0000c9641b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.969160][ T3965] >ffff0000c9641c00: 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.970855][ T3965] ^ [ 35.971706][ T3965] ffff0000c9641c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.973368][ T3965] ffff0000c9641d00: 05 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 35.975123][ T3965] ================================================================== [ 35.976827][ T3965] Disabling lock debugging due to kernel taint