./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3611361397
<...>
Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts.
execve("./syz-executor3611361397", ["./syz-executor3611361397"], 0x7fff875af440 /* 10 vars */) = 0
brk(NULL) = 0x555558392000
brk(0x555558392d00) = 0x555558392d00
arch_prctl(ARCH_SET_FS, 0x555558392380) = 0
set_tid_address(0x555558392650) = 5080
set_robust_list(0x555558392660, 24) = 0
rseq(0x555558392ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3611361397", 4096) = 28
getrandom("\x24\xb0\x0b\x8f\x2b\x38\x51\x8e", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555558392d00
brk(0x5555583b3d00) = 0x5555583b3d00
brk(0x5555583b4000) = 0x5555583b4000
mprotect(0x7f831a635000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[ 61.287500][ T5080] ==================================================================
[ 61.295791][ T5080] BUG: KASAN: global-out-of-bounds in __nla_validate_parse+0x1f1c/0x2f70
[ 61.304389][ T5080] Read of size 1 at addr ffffffff8c55d030 by task syz-executor361/5080
[ 61.312972][ T5080]
[ 61.315313][ T5080] CPU: 1 PID: 5080 Comm: syz-executor361 Not tainted 6.9.0-rc2-next-20240405-syzkaller #0
[ 61.325384][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 61.335663][ T5080] Call Trace:
[ 61.339105][ T5080]
[ 61.342053][ T5080] dump_stack_lvl+0x241/0x360
[ 61.346926][ T5080] ? __pfx_dump_stack_lvl+0x10/0x10
[ 61.352122][ T5080] ? __pfx__printk+0x10/0x10
[ 61.356714][ T5080] ? _printk+0xd5/0x120
[ 61.360868][ T5080] ? __virt_addr_valid+0x183/0x520
[ 61.366078][ T5080] ? __virt_addr_valid+0x183/0x520
[ 61.371205][ T5080] print_report+0x169/0x550
[ 61.375797][ T5080] ? __virt_addr_valid+0x183/0x520
[ 61.380904][ T5080] ? __virt_addr_valid+0x183/0x520
[ 61.386046][ T5080] ? __virt_addr_valid+0x44e/0x520
[ 61.391377][ T5080] ? __phys_addr+0x113/0x170
[ 61.396216][ T5080] ? __nla_validate_parse+0x1f1c/0x2f70
[ 61.401851][ T5080] kasan_report+0x143/0x180
[ 61.406556][ T5080] ? stack_depot_save_flags+0x29/0x830
[ 61.412053][ T5080] ? __nla_validate_parse+0x1f1c/0x2f70
[ 61.417876][ T5080] __nla_validate_parse+0x1f1c/0x2f70
[ 61.423832][ T5080] ? netlink_sendmsg+0x8e1/0xcb0
[ 61.428921][ T5080] ? __sys_sendmsg+0x2b0/0x3a0
[ 61.434699][ T5080] ? __pfx___nla_validate_parse+0x10/0x10
[ 61.441182][ T5080] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[ 61.447862][ T5080] ? rcu_is_watching+0x15/0xb0
[ 61.453003][ T5080] __nla_parse+0x40/0x60
[ 61.457452][ T5080] genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[ 61.463642][ T5080] genl_rcv_msg+0x802/0xec0
[ 61.468275][ T5080] ? mark_lock+0x9a/0x350
[ 61.473100][ T5080] ? __pfx_genl_rcv_msg+0x10/0x10
[ 61.478748][ T5080] ? __pfx_lock_acquire+0x10/0x10
[ 61.484385][ T5080] ? __pfx_team_nl_options_get_doit+0x10/0x10
[ 61.491167][ T5080] ? __pfx___might_resched+0x10/0x10
[ 61.496713][ T5080] netlink_rcv_skb+0x1e3/0x430
[ 61.501562][ T5080] ? __pfx_genl_rcv_msg+0x10/0x10
[ 61.506946][ T5080] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 61.513248][ T5080] genl_rcv+0x28/0x40
[ 61.517249][ T5080] netlink_unicast+0x7ea/0x980
[ 61.522101][ T5080] ? __pfx_netlink_unicast+0x10/0x10
[ 61.527380][ T5080] ? __virt_addr_valid+0x183/0x520
[ 61.532837][ T5080] ? __check_object_size+0x49c/0x900
[ 61.538304][ T5080] ? bpf_lsm_netlink_send+0x9/0x10
[ 61.543710][ T5080] netlink_sendmsg+0x8e1/0xcb0
[ 61.548567][ T5080] ? __pfx_netlink_sendmsg+0x10/0x10
[ 61.553857][ T5080] ? __import_iovec+0x536/0x820
[ 61.558798][ T5080] ? aa_sock_msg_perm+0x91/0x160
[ 61.563822][ T5080] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 61.569109][ T5080] ? security_socket_sendmsg+0x87/0xb0
[ 61.574562][ T5080] ? __pfx_netlink_sendmsg+0x10/0x10
[ 61.579838][ T5080] __sock_sendmsg+0x221/0x270
[ 61.584771][ T5080] ____sys_sendmsg+0x525/0x7d0
[ 61.589544][ T5080] ? __pfx_____sys_sendmsg+0x10/0x10
[ 61.594916][ T5080] ? do_raw_spin_lock+0x14f/0x370
[ 61.600114][ T5080] __sys_sendmsg+0x2b0/0x3a0
[ 61.604786][ T5080] ? __pfx___sys_sendmsg+0x10/0x10
[ 61.609894][ T5080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 61.616477][ T5080] ? _raw_spin_unlock_irq+0x2e/0x50
[ 61.621872][ T5080] ? ptrace_notify+0x279/0x380
[ 61.626831][ T5080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 61.633167][ T5080] ? exc_page_fault+0x59e/0x900
[ 61.638018][ T5080] do_syscall_64+0xfb/0x240
[ 61.642540][ T5080] entry_SYSCALL_64_after_hwframe+0x72/0x7a
[ 61.648452][ T5080] RIP: 0033:0x7f831a5c23a9
[ 61.652866][ T5080] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.672741][ T5080] RSP: 002b:00007ffcd752ec88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 61.681165][ T5080] RAX: ffffffffffffffda RBX: 00007ffcd752ee58 RCX: 00007f831a5c23a9
[ 61.689390][ T5080] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 61.697981][ T5080] RBP: 00007f831a635610 R08: 00007f831a5fda23 R09: 00007ffcd752ee58
[ 61.706183][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 61.714251][ T5080] R13: 00007ffcd752ee48 R14: 0000000000000001 R15: 0000000000000001
[ 61.722320][ T5080]
[ 61.725592][ T5080]
[ 61.727905][ T5080] The buggy address belongs to the variable:
[ 61.733864][ T5080] team_nl_policy+0x30/0x60
[ 61.738366][ T5080]
[ 61.740688][ T5080] The buggy address belongs to the physical page:
[ 61.747518][ T5080] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xc55d
[ 61.756183][ T5080] flags: 0xfff80000002000(reserved|node=0|zone=1|lastcpupid=0xfff)
[ 61.764155][ T5080] raw: 00fff80000002000 ffffea0000315748 ffffea0000315748 0000000000000000
[ 61.774208][ T5080] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 61.782772][ T5080] page dumped because: kasan: bad access detected
[ 61.789171][ T5080] page_owner info is not present (never set?)
[ 61.795308][ T5080]
[ 61.797708][ T5080] Memory state around the buggy address:
[ 61.803328][ T5080] ffffffff8c55cf00: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[ 61.811550][ T5080] ffffffff8c55cf80: 00 00 00 00 f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9
[ 61.819597][ T5080] >ffffffff8c55d000: 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 00 00 00 00
[ 61.827819][ T5080] ^
[ 61.833436][ T5080] ffffffff8c55d080: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00
[ 61.841575][ T5080] ffffffff8c55d100: 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 00 02 f9 f9
[ 61.849649][ T5080] ==================================================================
[ 61.858323][ T5080] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 61.865541][ T5080] CPU: 0 PID: 5080 Comm: syz-executor361 Not tainted 6.9.0-rc2-next-20240405-syzkaller #0
[ 61.875442][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 61.885508][ T5080] Call Trace:
[ 61.888784][ T5080]
[ 61.891803][ T5080] dump_stack_lvl+0x241/0x360
[ 61.896646][ T5080] ? __pfx_dump_stack_lvl+0x10/0x10
[ 61.902033][ T5080] ? __pfx__printk+0x10/0x10
[ 61.906793][ T5080] ? preempt_schedule+0xe1/0xf0
[ 61.911779][ T5080] ? vscnprintf+0x5d/0x90
[ 61.916449][ T5080] panic+0x349/0x860
[ 61.920540][ T5080] ? check_panic_on_warn+0x21/0xb0
[ 61.925732][ T5080] ? __pfx_panic+0x10/0x10
[ 61.930153][ T5080] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 61.936215][ T5080] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 61.942525][ T5080] ? print_report+0x502/0x550
[ 61.947182][ T5080] check_panic_on_warn+0x86/0xb0
[ 61.952213][ T5080] ? __nla_validate_parse+0x1f1c/0x2f70
[ 61.957759][ T5080] end_report+0x77/0x160
[ 61.962014][ T5080] kasan_report+0x154/0x180
[ 61.966793][ T5080] ? stack_depot_save_flags+0x29/0x830
[ 61.972252][ T5080] ? __nla_validate_parse+0x1f1c/0x2f70
[ 61.977806][ T5080] __nla_validate_parse+0x1f1c/0x2f70
[ 61.983181][ T5080] ? netlink_sendmsg+0x8e1/0xcb0
[ 61.988117][ T5080] ? __sys_sendmsg+0x2b0/0x3a0
[ 61.992895][ T5080] ? __pfx___nla_validate_parse+0x10/0x10
[ 61.998636][ T5080] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[ 62.006011][ T5080] ? rcu_is_watching+0x15/0xb0
[ 62.010772][ T5080] __nla_parse+0x40/0x60
[ 62.015025][ T5080] genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[ 62.021359][ T5080] genl_rcv_msg+0x802/0xec0
[ 62.025865][ T5080] ? mark_lock+0x9a/0x350
[ 62.030369][ T5080] ? __pfx_genl_rcv_msg+0x10/0x10
[ 62.035475][ T5080] ? __pfx_lock_acquire+0x10/0x10
[ 62.040490][ T5080] ? __pfx_team_nl_options_get_doit+0x10/0x10
[ 62.047150][ T5080] ? __pfx___might_resched+0x10/0x10
[ 62.052425][ T5080] netlink_rcv_skb+0x1e3/0x430
[ 62.057177][ T5080] ? __pfx_genl_rcv_msg+0x10/0x10
[ 62.062185][ T5080] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 62.067463][ T5080] genl_rcv+0x28/0x40
[ 62.071436][ T5080] netlink_unicast+0x7ea/0x980
[ 62.076186][ T5080] ? __pfx_netlink_unicast+0x10/0x10
[ 62.081452][ T5080] ? __virt_addr_valid+0x183/0x520
[ 62.086566][ T5080] ? __check_object_size+0x49c/0x900
[ 62.091834][ T5080] ? bpf_lsm_netlink_send+0x9/0x10
[ 62.096931][ T5080] netlink_sendmsg+0x8e1/0xcb0
[ 62.101701][ T5080] ? __pfx_netlink_sendmsg+0x10/0x10
[ 62.106968][ T5080] ? __import_iovec+0x536/0x820
[ 62.111910][ T5080] ? aa_sock_msg_perm+0x91/0x160
[ 62.116926][ T5080] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 62.122372][ T5080] ? security_socket_sendmsg+0x87/0xb0
[ 62.127826][ T5080] ? __pfx_netlink_sendmsg+0x10/0x10
[ 62.133421][ T5080] __sock_sendmsg+0x221/0x270
[ 62.138084][ T5080] ____sys_sendmsg+0x525/0x7d0
[ 62.142932][ T5080] ? __pfx_____sys_sendmsg+0x10/0x10
[ 62.148243][ T5080] ? do_raw_spin_lock+0x14f/0x370
[ 62.153446][ T5080] __sys_sendmsg+0x2b0/0x3a0
[ 62.158031][ T5080] ? __pfx___sys_sendmsg+0x10/0x10
[ 62.163129][ T5080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 62.169466][ T5080] ? _raw_spin_unlock_irq+0x2e/0x50
[ 62.174760][ T5080] ? ptrace_notify+0x279/0x380
[ 62.179546][ T5080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 62.186214][ T5080] ? exc_page_fault+0x59e/0x900
[ 62.191066][ T5080] do_syscall_64+0xfb/0x240
[ 62.195575][ T5080] entry_SYSCALL_64_after_hwframe+0x72/0x7a
[ 62.201641][ T5080] RIP: 0033:0x7f831a5c23a9
[ 62.206044][ T5080] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 62.225735][ T5080] RSP: 002b:00007ffcd752ec88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 62.234333][ T5080] RAX: ffffffffffffffda RBX: 00007ffcd752ee58 RCX: 00007f831a5c23a9
[ 62.242343][ T5080] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 62.250299][ T5080] RBP: 00007f831a635610 R08: 00007f831a5fda23 R09: 00007ffcd752ee58
[ 62.258273][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 62.266242][ T5080] R13: 00007ffcd752ee48 R14: 0000000000000001 R15: 0000000000000001
[ 62.274202][ T5080]
[ 62.277303][ T5080] Kernel Offset: disabled
[ 62.281917][ T5080] Rebooting in 86400 seconds..