./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3557451274
<...>
Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts.
execve("./syz-executor3557451274", ["./syz-executor3557451274"], 0x7ffe67a85ba0 /* 10 vars */) = 0
brk(NULL) = 0x55556d748000
brk(0x55556d748d00) = 0x55556d748d00
arch_prctl(ARCH_SET_FS, 0x55556d748380) = 0
set_tid_address(0x55556d748650) = 5842
set_robust_list(0x55556d748660, 24) = 0
rseq(0x55556d748ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3557451274", 4096) = 28
getrandom("\x7c\x07\x24\xb7\x47\xfe\x6d\x9c", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556d748d00
brk(0x55556d769d00) = 0x55556d769d00
brk(0x55556d76a000) = 0x55556d76a000
mprotect(0x7f56d857c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
executing program
write(1, "executing program\n", 18) = 18
socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 3
sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x28\x00\x00\x00\x00\x0a\x01\x01\x00\x00\x00\x00\x5e\x1a\xff\xd5\x02\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x08\x00\x02\x40\x00\x00\x00\x03\x2c\x00\x00\x00\x03\x0a\x01\x03\x00\x00\xe6\xff\x00\x00\x00\x00\x02\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32"..., iov_len=124}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 124
[ 61.565088][ T5842] ==================================================================
[ 61.573278][ T5842] BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70
[ 61.579979][ T5842] Read of size 1 at addr ffff8881422aa1c8 by task syz-executor355/5842
[ 61.588201][ T5842]
[ 61.590532][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor355 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[ 61.601643][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 61.611694][ T5842] Call Trace:
[ 61.614960][ T5842]
[ 61.617879][ T5842] dump_stack_lvl+0x241/0x360
[ 61.622555][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10
[ 61.627757][ T5842] ? __pfx__printk+0x10/0x10
[ 61.632337][ T5842] ? _printk+0xd5/0x120
[ 61.636485][ T5842] ? __virt_addr_valid+0x183/0x530
[ 61.641585][ T5842] ? __virt_addr_valid+0x183/0x530
[ 61.646686][ T5842] print_report+0x169/0x550
[ 61.651179][ T5842] ? __virt_addr_valid+0x183/0x530
[ 61.656279][ T5842] ? __virt_addr_valid+0x183/0x530
[ 61.661377][ T5842] ? __virt_addr_valid+0x45f/0x530
[ 61.666491][ T5842] ? __phys_addr+0xba/0x170
[ 61.670984][ T5842] ? strlen+0x58/0x70
[ 61.674959][ T5842] kasan_report+0x143/0x180
[ 61.679455][ T5842] ? strlen+0x58/0x70
[ 61.683428][ T5842] strlen+0x58/0x70
[ 61.687253][ T5842] kstrdup+0x20/0x80
[ 61.691153][ T5842] led_tg_check+0x18b/0x3c0
[ 61.695653][ T5842] xt_check_target+0x3b9/0xa40
[ 61.700417][ T5842] ? __pfx_xt_check_target+0x10/0x10
[ 61.705784][ T5842] ? stack_depot_save_flags+0x6e4/0x830
[ 61.711331][ T5842] ? nft_target_init+0x174/0xc30
[ 61.716265][ T5842] nft_target_init+0x82d/0xc30
[ 61.721195][ T5842] ? __pfx_nft_target_init+0x10/0x10
[ 61.726476][ T5842] ? nf_tables_newrule+0x1609/0x2980
[ 61.731839][ T5842] ? nf_tables_newrule+0x1609/0x2980
[ 61.737117][ T5842] ? rcu_is_watching+0x15/0xb0
[ 61.741871][ T5842] ? nf_tables_newrule+0x1609/0x2980
[ 61.747144][ T5842] ? nf_tables_newrule+0x1609/0x2980
[ 61.752431][ T5842] ? __kmalloc_noprof+0x21a/0x400
[ 61.757447][ T5842] nf_tables_newrule+0x185e/0x2980
[ 61.762561][ T5842] ? __pfx_nf_tables_newrule+0x10/0x10
[ 61.768016][ T5842] ? __nla_parse+0x40/0x60
[ 61.772424][ T5842] nfnetlink_rcv+0x14e3/0x2ab0
[ 61.777195][ T5842] ? __pfx_validate_chain+0x10/0x10
[ 61.782408][ T5842] ? __pfx_nfnetlink_rcv+0x10/0x10
[ 61.787518][ T5842] ? __lock_acquire+0x1384/0x2050
[ 61.792544][ T5842] ? netlink_deliver_tap+0x2e/0x1b0
[ 61.797736][ T5842] ? __pfx_lock_release+0x10/0x10
[ 61.802758][ T5842] ? netlink_deliver_tap+0x2e/0x1b0
[ 61.807953][ T5842] netlink_unicast+0x7f6/0x990
[ 61.812713][ T5842] ? __pfx_netlink_unicast+0x10/0x10
[ 61.817988][ T5842] ? __virt_addr_valid+0x183/0x530
[ 61.823092][ T5842] ? __check_object_size+0x48e/0x900
[ 61.828372][ T5842] netlink_sendmsg+0x8e4/0xcb0
[ 61.833136][ T5842] ? __pfx_netlink_sendmsg+0x10/0x10
[ 61.838417][ T5842] ? aa_sock_msg_perm+0x91/0x160
[ 61.843356][ T5842] ? __pfx_netlink_sendmsg+0x10/0x10
[ 61.848635][ T5842] __sock_sendmsg+0x221/0x270
[ 61.853309][ T5842] ____sys_sendmsg+0x52a/0x7e0
[ 61.858074][ T5842] ? __pfx_____sys_sendmsg+0x10/0x10
[ 61.863353][ T5842] ? do_raw_spin_lock+0x14f/0x370
[ 61.868373][ T5842] __sys_sendmsg+0x292/0x380
[ 61.872961][ T5842] ? __pfx___sys_sendmsg+0x10/0x10
[ 61.878073][ T5842] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 61.884420][ T5842] ? _raw_spin_unlock_irq+0x2e/0x50
[ 61.889609][ T5842] ? ptrace_notify+0x279/0x380
[ 61.894371][ T5842] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 61.900694][ T5842] ? exc_page_fault+0x590/0x8c0
[ 61.905536][ T5842] do_syscall_64+0xf3/0x230
[ 61.910038][ T5842] ? clear_bhb_loop+0x35/0x90
[ 61.914708][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.920605][ T5842] RIP: 0033:0x7f56d8509729
[ 61.925027][ T5842] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.944634][ T5842] RSP: 002b:00007ffc32fd10f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 61.953040][ T5842] RAX: ffffffffffffffda RBX: 00007ffc32fd12c8 RCX: 00007f56d8509729
[ 61.961005][ T5842] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 61.968965][ T5842] RBP: 00007f56d857c610 R08: 0000000000000011 R09: 00007ffc32fd12c8
[ 61.976927][ T5842] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 61.984885][ T5842] R13: 00007ffc32fd12b8 R14: 0000000000000001 R15: 0000000000000001
[ 61.992851][ T5842]
[ 61.995868][ T5842]
[ 61.998178][ T5842] Allocated by task 5842:
[ 62.002495][ T5842] kasan_save_track+0x3f/0x80
[ 62.007169][ T5842] __kasan_kmalloc+0x98/0xb0
[ 62.011751][ T5842] __kmalloc_noprof+0x1fc/0x400
[ 62.016593][ T5842] nf_tables_newrule+0x1609/0x2980
[ 62.021697][ T5842] nfnetlink_rcv+0x14e3/0x2ab0
[ 62.026454][ T5842] netlink_unicast+0x7f6/0x990
[ 62.031209][ T5842] netlink_sendmsg+0x8e4/0xcb0
[ 62.035978][ T5842] __sock_sendmsg+0x221/0x270
[ 62.040650][ T5842] ____sys_sendmsg+0x52a/0x7e0
[ 62.045405][ T5842] __sys_sendmsg+0x292/0x380
[ 62.049986][ T5842] do_syscall_64+0xf3/0x230
[ 62.054487][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.060371][ T5842]
[ 62.062682][ T5842] The buggy address belongs to the object at ffff8881422aa180
[ 62.062682][ T5842] which belongs to the cache kmalloc-cg-96 of size 96
[ 62.076808][ T5842] The buggy address is located 0 bytes to the right of
[ 62.076808][ T5842] allocated 72-byte region [ffff8881422aa180, ffff8881422aa1c8)
[ 62.091212][ T5842]
[ 62.093530][ T5842] The buggy address belongs to the physical page:
[ 62.099937][ T5842] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1422aa
[ 62.108792][ T5842] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[ 62.115988][ T5842] page_type: f5(slab)
[ 62.119962][ T5842] raw: 057ff00000000000 ffff88801ac4d640 dead000000000122 0000000000000000
[ 62.128536][ T5842] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000
[ 62.137104][ T5842] page dumped because: kasan: bad access detected
[ 62.143510][ T5842] page_owner tracks the page as allocated
[ 62.149217][ T5842] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2682440014, free_ts 0
[ 62.166744][ T5842] post_alloc_hook+0x1f3/0x230
[ 62.171508][ T5842] get_page_from_freelist+0x3649/0x3790
[ 62.177043][ T5842] __alloc_pages_noprof+0x292/0x710
[ 62.182231][ T5842] alloc_pages_mpol_noprof+0x3e8/0x680
[ 62.187679][ T5842] alloc_slab_page+0x6a/0x140
[ 62.192346][ T5842] allocate_slab+0x5a/0x2f0
[ 62.196841][ T5842] ___slab_alloc+0xcd1/0x14b0
[ 62.201510][ T5842] __slab_alloc+0x58/0xa0
[ 62.205829][ T5842] __kmalloc_noprof+0x25a/0x400
[ 62.210670][ T5842] __register_sysctl_table+0x65/0x1550
[ 62.216140][ T5842] net_sysctl_init+0x20/0x90
[ 62.220735][ T5842] sock_init+0x6b/0x1c0
[ 62.224892][ T5842] do_one_initcall+0x248/0x880
[ 62.229655][ T5842] do_initcall_level+0x157/0x210
[ 62.234588][ T5842] do_initcalls+0x3f/0x80
[ 62.238907][ T5842] kernel_init_freeable+0x435/0x5d0
[ 62.244098][ T5842] page_owner free stack trace missing
[ 62.249471][ T5842]
[ 62.251793][ T5842] Memory state around the buggy address:
[ 62.257411][ T5842] ffff8881422aa080: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 62.265458][ T5842] ffff8881422aa100: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 62.273507][ T5842] >ffff8881422aa180: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 62.281555][ T5842] ^
[ 62.287952][ T5842] ffff8881422aa200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 62.295996][ T5842] ffff8881422aa280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 62.304038][ T5842] ==================================================================
[ 62.312822][ T5842] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 62.320028][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor355 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0
[ 62.331119][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 62.341167][ T5842] Call Trace:
[ 62.344428][ T5842]
[ 62.347430][ T5842] dump_stack_lvl+0x241/0x360
[ 62.352094][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10
[ 62.357275][ T5842] ? __pfx__printk+0x10/0x10
[ 62.361856][ T5842] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 62.367836][ T5842] ? vscnprintf+0x5d/0x90
[ 62.372190][ T5842] panic+0x349/0x880
[ 62.376079][ T5842] ? check_panic_on_warn+0x21/0xb0
[ 62.381180][ T5842] ? __pfx_panic+0x10/0x10
[ 62.385589][ T5842] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 62.391567][ T5842] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 62.397885][ T5842] check_panic_on_warn+0x86/0xb0
[ 62.402821][ T5842] ? strlen+0x58/0x70
[ 62.406810][ T5842] end_report+0x77/0x160
[ 62.411061][ T5842] kasan_report+0x154/0x180
[ 62.415564][ T5842] ? strlen+0x58/0x70
[ 62.419556][ T5842] strlen+0x58/0x70
[ 62.423391][ T5842] kstrdup+0x20/0x80
[ 62.427286][ T5842] led_tg_check+0x18b/0x3c0
[ 62.431785][ T5842] xt_check_target+0x3b9/0xa40
[ 62.436546][ T5842] ? __pfx_xt_check_target+0x10/0x10
[ 62.441833][ T5842] ? stack_depot_save_flags+0x6e4/0x830
[ 62.447459][ T5842] ? nft_target_init+0x174/0xc30
[ 62.452398][ T5842] nft_target_init+0x82d/0xc30
[ 62.457155][ T5842] ? __pfx_nft_target_init+0x10/0x10
[ 62.462444][ T5842] ? nf_tables_newrule+0x1609/0x2980
[ 62.467818][ T5842] ? nf_tables_newrule+0x1609/0x2980
[ 62.473094][ T5842] ? rcu_is_watching+0x15/0xb0
[ 62.477849][ T5842] ? nf_tables_newrule+0x1609/0x2980
[ 62.483123][ T5842] ? nf_tables_newrule+0x1609/0x2980
[ 62.488402][ T5842] ? __kmalloc_noprof+0x21a/0x400
[ 62.493424][ T5842] nf_tables_newrule+0x185e/0x2980
[ 62.498534][ T5842] ? __pfx_nf_tables_newrule+0x10/0x10
[ 62.503990][ T5842] ? __nla_parse+0x40/0x60
[ 62.508400][ T5842] nfnetlink_rcv+0x14e3/0x2ab0
[ 62.513166][ T5842] ? __pfx_validate_chain+0x10/0x10
[ 62.518368][ T5842] ? __pfx_nfnetlink_rcv+0x10/0x10
[ 62.523509][ T5842] ? __lock_acquire+0x1384/0x2050
[ 62.528539][ T5842] ? netlink_deliver_tap+0x2e/0x1b0
[ 62.533732][ T5842] ? __pfx_lock_release+0x10/0x10
[ 62.538822][ T5842] ? netlink_deliver_tap+0x2e/0x1b0
[ 62.544011][ T5842] netlink_unicast+0x7f6/0x990
[ 62.548772][ T5842] ? __pfx_netlink_unicast+0x10/0x10
[ 62.554070][ T5842] ? __virt_addr_valid+0x183/0x530
[ 62.559177][ T5842] ? __check_object_size+0x48e/0x900
[ 62.564462][ T5842] netlink_sendmsg+0x8e4/0xcb0
[ 62.569223][ T5842] ? __pfx_netlink_sendmsg+0x10/0x10
[ 62.574500][ T5842] ? aa_sock_msg_perm+0x91/0x160
[ 62.579430][ T5842] ? __pfx_netlink_sendmsg+0x10/0x10
[ 62.584709][ T5842] __sock_sendmsg+0x221/0x270
[ 62.589381][ T5842] ____sys_sendmsg+0x52a/0x7e0
[ 62.594142][ T5842] ? __pfx_____sys_sendmsg+0x10/0x10
[ 62.599425][ T5842] ? do_raw_spin_lock+0x14f/0x370
[ 62.604445][ T5842] __sys_sendmsg+0x292/0x380
[ 62.609033][ T5842] ? __pfx___sys_sendmsg+0x10/0x10
[ 62.614142][ T5842] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 62.620471][ T5842] ? _raw_spin_unlock_irq+0x2e/0x50
[ 62.625665][ T5842] ? ptrace_notify+0x279/0x380
[ 62.630433][ T5842] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 62.636753][ T5842] ? exc_page_fault+0x590/0x8c0
[ 62.641614][ T5842] do_syscall_64+0xf3/0x230
[ 62.646110][ T5842] ? clear_bhb_loop+0x35/0x90
[ 62.650781][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.656665][ T5842] RIP: 0033:0x7f56d8509729
[ 62.661070][ T5842] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 62.680663][ T5842] RSP: 002b:00007ffc32fd10f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 62.689069][ T5842] RAX: ffffffffffffffda RBX: 00007ffc32fd12c8 RCX: 00007f56d8509729
[ 62.697033][ T5842] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 62.704993][ T5842] RBP: 00007f56d857c610 R08: 0000000000000011 R09: 00007ffc32fd12c8
[ 62.712954][ T5842] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 62.720925][ T5842] R13: 00007ffc32fd12b8 R14: 0000000000000001 R15: 0000000000000001
[ 62.728889][ T5842]
[ 62.732148][ T5842] Kernel Offset: disabled
[ 62.736464][ T5842] Rebooting in 86400 seconds..