./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2659126993
<...>
[ 97.249967][ T8] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts.
execve("./syz-executor2659126993", ["./syz-executor2659126993"], 0x7ffd3f297390 /* 10 vars */) = 0
brk(NULL) = 0x555556d7b000
brk(0x555556d7bd00) = 0x555556d7bd00
arch_prctl(ARCH_SET_FS, 0x555556d7b380) = 0
set_tid_address(0x555556d7b650) = 5069
set_robust_list(0x555556d7b660, 24) = 0
rseq(0x555556d7bca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2659126993", 4096) = 28
getrandom("\x60\xba\xfe\xe3\x42\xd8\x93\x6a", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555556d7bd00
brk(0x555556d9cd00) = 0x555556d9cd00
brk(0x555556d9d000) = 0x555556d9d000
mprotect(0x7fd37f3c2000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
add_key("keyring", "syz!", NULL, 0, KEY_SPEC_USER_SESSION_KEYRING) = 42286130
[ 98.603767][ T5069] ==================================================================
[ 98.611886][ T5069] BUG: KASAN: slab-out-of-bounds in dns_resolver_preparse+0xc9f/0xd60
[ 98.620083][ T5069] Read of size 1 at addr ffff888028894084 by task syz-executor265/5069
[ 98.628320][ T5069]
[ 98.630637][ T5069] CPU: 0 PID: 5069 Comm: syz-executor265 Not tainted 6.7.0-rc5-next-20231213-syzkaller #0
[ 98.640526][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 98.650596][ T5069] Call Trace:
[ 98.653875][ T5069]
[ 98.656817][ T5069] dump_stack_lvl+0xd9/0x1b0
[ 98.661444][ T5069] print_report+0xc3/0x620
[ 98.665884][ T5069] ? __virt_addr_valid+0x5e/0x580
[ 98.670944][ T5069] ? __phys_addr+0xc6/0x140
[ 98.675487][ T5069] kasan_report+0xd9/0x110
[ 98.679930][ T5069] ? dns_resolver_preparse+0xc9f/0xd60
[ 98.685428][ T5069] ? dns_resolver_preparse+0xc9f/0xd60
[ 98.690928][ T5069] dns_resolver_preparse+0xc9f/0xd60
[ 98.696289][ T5069] ? lock_sync+0x190/0x190
[ 98.700724][ T5069] ? rwsem_read_trylock+0x129/0x250
[ 98.705949][ T5069] ? dns_resolver_free_preparse+0x40/0x40
[ 98.711702][ T5069] ? preempt_count_sub+0x160/0x160
[ 98.716853][ T5069] ? down_read+0xc9/0x330
[ 98.721213][ T5069] ? rwsem_down_read_slowpath+0xb20/0xb20
[ 98.726975][ T5069] ? dns_resolver_free_preparse+0x40/0x40
[ 98.732741][ T5069] __key_create_or_update+0x453/0xdf0
[ 98.738172][ T5069] ? key_alloc+0x1370/0x1370
[ 98.742792][ T5069] ? lookup_user_key+0x314/0x13a0
[ 98.747842][ T5069] ? key_validate+0x100/0x100
[ 98.752534][ T5069] ? key_default_cmp+0x90/0x90
[ 98.757342][ T5069] key_create_or_update+0x42/0x50
[ 98.762406][ T5069] __do_sys_add_key+0x29c/0x450
[ 98.767274][ T5069] ? keyring_restriction_gc+0x1b0/0x1b0
[ 98.773010][ T5069] ? lockdep_hardirqs_on+0x7c/0x110
[ 98.778235][ T5069] ? ptrace_notify+0xf1/0x130
[ 98.782934][ T5069] ? syscall_trace_enter.constprop.0+0xad/0x1f0
[ 98.789206][ T5069] do_syscall_64+0x40/0x110
[ 98.793728][ T5069] entry_SYSCALL_64_after_hwframe+0x62/0x6a
[ 98.799651][ T5069] RIP: 0033:0x7fd37f34f2e9
[ 98.804079][ T5069] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 98.823714][ T5069] RSP: 002b:00007fff2f4f3198 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 98.832172][ T5069] RAX: ffffffffffffffda RBX: 00007fff2f4f3368 RCX: 00007fd37f34f2e9
[ 98.840160][ T5069] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 00000000200003c0
[ 98.848157][ T5069] RBP: 00007fd37f3c2610 R08: 0000000002853c32 R09: 00007fff2f4f3368
[ 98.856163][ T5069] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[ 98.864150][ T5069] R13: 00007fff2f4f3358 R14: 0000000000000001 R15: 0000000000000001
[ 98.872152][ T5069]
[ 98.875188][ T5069]
[ 98.877514][ T5069] Allocated by task 5069:
[ 98.881840][ T5069] kasan_save_stack+0x33/0x50
[ 98.886536][ T5069] kasan_set_track+0x24/0x30
[ 98.891142][ T5069] __kasan_kmalloc+0xa2/0xb0
[ 98.895748][ T5069] __kmalloc_node+0x226/0x480
[ 98.900451][ T5069] kvmalloc_node+0x99/0x1a0
[ 98.904972][ T5069] __do_sys_add_key+0x1f8/0x450
[ 98.909831][ T5069] do_syscall_64+0x40/0x110
[ 98.914345][ T5069] entry_SYSCALL_64_after_hwframe+0x62/0x6a
[ 98.920274][ T5069]
[ 98.922596][ T5069] The buggy address belongs to the object at ffff888028894080
[ 98.922596][ T5069] which belongs to the cache kmalloc-8 of size 8
[ 98.936307][ T5069] The buggy address is located 0 bytes to the right of
[ 98.936307][ T5069] allocated 4-byte region [ffff888028894080, ffff888028894084)
[ 98.950633][ T5069]
[ 98.952958][ T5069] The buggy address belongs to the physical page:
[ 98.959367][ T5069] page:ffffea0000a22500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28894
[ 98.969721][ T5069] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 98.977705][ T5069] page_type: 0xffffffff()
[ 98.982049][ T5069] raw: 00fff00000000800 ffff888013041280 0000000000000000 dead000000000001
[ 98.990649][ T5069] raw: 0000000000000000 0000000080800080 00000001ffffffff 0000000000000000
[ 98.999232][ T5069] page dumped because: kasan: bad access detected
[ 99.005678][ T5069] page_owner tracks the page as allocated
[ 99.011398][ T5069] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 27978623390, free_ts 27978121808
[ 99.029052][ T5069] post_alloc_hook+0x2d0/0x350
[ 99.033847][ T5069] get_page_from_freelist+0xa19/0x3740
[ 99.039316][ T5069] __alloc_pages+0x22e/0x2410
[ 99.044001][ T5069] alloc_pages_mpol+0x258/0x5f0
[ 99.048864][ T5069] new_slab+0x283/0x3c0
[ 99.053041][ T5069] ___slab_alloc+0x4ab/0x1990
[ 99.057756][ T5069] __slab_alloc.constprop.0+0x56/0xa0
[ 99.063167][ T5069] __kmalloc_node_track_caller+0x367/0x470
[ 99.069007][ T5069] kstrdup+0x3c/0x70
[ 99.072926][ T5069] kstrdup_const+0x5f/0x70
[ 99.077366][ T5069] kvasprintf_const+0x10b/0x190
[ 99.082234][ T5069] kobject_set_name_vargs+0x5a/0x130
[ 99.087553][ T5069] kobject_init_and_add+0xe8/0x190
[ 99.092674][ T5069] locate_module_kobject+0xef/0x190
[ 99.097886][ T5069] param_sysfs_builtin_init+0x25f/0x450
[ 99.103477][ T5069] do_one_initcall+0x128/0x680
[ 99.108263][ T5069] page last free pid 3062 tgid 3062 stack trace:
[ 99.114588][ T5069] free_unref_page_prepare+0x51f/0xb10
[ 99.120069][ T5069] free_unref_page+0x33/0x3b0
[ 99.124769][ T5069] __mmdrop+0xd5/0x470
[ 99.128849][ T5069] __mmput+0x40a/0x4d0
[ 99.132930][ T5069] mmput+0x62/0x70
[ 99.136661][ T5069] free_bprm+0x143/0x3e0
[ 99.140921][ T5069] kernel_execve+0x3e6/0x4e0
[ 99.145544][ T5069] call_usermodehelper_exec_async+0x252/0x4c0
[ 99.151624][ T5069] ret_from_fork+0x45/0x80
[ 99.156079][ T5069] ret_from_fork_asm+0x11/0x20
[ 99.160873][ T5069]
[ 99.163196][ T5069] Memory state around the buggy address:
[ 99.168828][ T5069] ffff888028893f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 99.176898][ T5069] ffff888028894000: 07 fc fc fc 07 fc fc fc fa fc fc fc 05 fc fc fc
[ 99.184966][ T5069] >ffff888028894080: 04 fc fc fc fb fc fc fc fb fc fc fc 06 fc fc fc
[ 99.193030][ T5069] ^
[ 99.197099][ T5069] ffff888028894100: 06 fc fc fc fb fc fc fc 00 fc fc fc 00 fc fc fc
[ 99.205165][ T5069] ffff888028894180: fb fc fc fc 04 fc fc fc 04 fc fc fc fb fc fc fc
[ 99.213228][ T5069] ==================================================================
[ 99.221837][ T5069] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 99.229073][ T5069] CPU: 1 PID: 5069 Comm: syz-executor265 Not tainted 6.7.0-rc5-next-20231213-syzkaller #0
[ 99.239016][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 99.249110][ T5069] Call Trace:
[ 99.252415][ T5069]
[ 99.255360][ T5069] dump_stack_lvl+0xd9/0x1b0
[ 99.259961][ T5069] panic+0x6dc/0x790
[ 99.263869][ T5069] ? panic_smp_self_stop+0xa0/0xa0
[ 99.268996][ T5069] ? irqentry_exit+0x3b/0x80
[ 99.273601][ T5069] ? lockdep_hardirqs_on+0x7c/0x110
[ 99.278815][ T5069] ? preempt_schedule_thunk+0x1a/0x30
[ 99.284206][ T5069] ? preempt_schedule_common+0x44/0xc0
[ 99.289669][ T5069] ? check_panic_on_warn+0x1f/0xb0
[ 99.294801][ T5069] check_panic_on_warn+0xab/0xb0
[ 99.299799][ T5069] end_report+0x117/0x160
[ 99.304139][ T5069] kasan_report+0xe9/0x110
[ 99.308562][ T5069] ? dns_resolver_preparse+0xc9f/0xd60
[ 99.314042][ T5069] ? dns_resolver_preparse+0xc9f/0xd60
[ 99.319523][ T5069] dns_resolver_preparse+0xc9f/0xd60
[ 99.324924][ T5069] ? lock_sync+0x190/0x190
[ 99.329346][ T5069] ? rwsem_read_trylock+0x129/0x250
[ 99.334561][ T5069] ? dns_resolver_free_preparse+0x40/0x40
[ 99.340300][ T5069] ? preempt_count_sub+0x160/0x160
[ 99.345421][ T5069] ? down_read+0xc9/0x330
[ 99.349764][ T5069] ? rwsem_down_read_slowpath+0xb20/0xb20
[ 99.355515][ T5069] ? dns_resolver_free_preparse+0x40/0x40
[ 99.361259][ T5069] __key_create_or_update+0x453/0xdf0
[ 99.366655][ T5069] ? key_alloc+0x1370/0x1370
[ 99.371264][ T5069] ? lookup_user_key+0x314/0x13a0
[ 99.376307][ T5069] ? key_validate+0x100/0x100
[ 99.381010][ T5069] ? key_default_cmp+0x90/0x90
[ 99.385802][ T5069] key_create_or_update+0x42/0x50
[ 99.390848][ T5069] __do_sys_add_key+0x29c/0x450
[ 99.395702][ T5069] ? keyring_restriction_gc+0x1b0/0x1b0
[ 99.401252][ T5069] ? lockdep_hardirqs_on+0x7c/0x110
[ 99.406461][ T5069] ? ptrace_notify+0xf1/0x130
[ 99.411166][ T5069] ? syscall_trace_enter.constprop.0+0xad/0x1f0
[ 99.417427][ T5069] do_syscall_64+0x40/0x110
[ 99.421944][ T5069] entry_SYSCALL_64_after_hwframe+0x62/0x6a
[ 99.427866][ T5069] RIP: 0033:0x7fd37f34f2e9
[ 99.432293][ T5069] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 99.452002][ T5069] RSP: 002b:00007fff2f4f3198 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 99.460426][ T5069] RAX: ffffffffffffffda RBX: 00007fff2f4f3368 RCX: 00007fd37f34f2e9
[ 99.468412][ T5069] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 00000000200003c0
[ 99.476389][ T5069] RBP: 00007fd37f3c2610 R08: 0000000002853c32 R09: 00007fff2f4f3368
[ 99.484389][ T5069] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[ 99.492383][ T5069] R13: 00007fff2f4f3358 R14: 0000000000000001 R15: 0000000000000001
[ 99.500390][ T5069]
[ 99.503748][ T5069] Kernel Offset: disabled
[ 99.508078][ T5069] Rebooting in 86400 seconds..