./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor323261301
<...>
DUID 00:04:8a:84:28:17:ce:93:6d:14:d5:a0:40:fa:67:36:71:42
forked to background, child pid 4667
[ 47.689782][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0
[ 47.707073][ T4668] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.107' (ECDSA) to the list of known hosts.
execve("./syz-executor323261301", ["./syz-executor323261301"], 0x7ffef08fc3a0 /* 10 vars */) = 0
brk(NULL) = 0x555556ea0000
brk(0x555556ea0c40) = 0x555556ea0c40
arch_prctl(ARCH_SET_FS, 0x555556ea0300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor323261301", 4096) = 27
brk(0x555556ec1c40) = 0x555556ec1c40
brk(0x555556ec2000) = 0x555556ec2000
mprotect(0x7f40e8928000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556ea05d0) = 5004
./strace-static-x86_64: Process 5004 attached
[pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5004] setpgid(0, 0) = 0
[pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5004] write(3, "1000", 4) = 4
[pid 5004] close(3) = 0
[pid 5004] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
syzkaller login: [ 76.241021][ T5004] netlink: 'syz-executor323': attribute type 27 has an invalid length.
[ 76.249770][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor323'.
[ 76.621686][ T5017] netlink: 'syz-executor323': attribute type 27 has an invalid length.
[ 76.632658][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor323'.
[ 76.653541][ T5017] ------------[ cut here ]------------
[ 76.659294][ T5017] wlan0: Failed check-sdata-in-driver check, flags: 0x0
[ 76.668974][ T5017] WARNING: CPU: 0 PID: 5017 at net/mac80211/main.c:236 ieee80211_bss_info_change_notify+0x787/0x8d0
[ 76.679933][ T5017] Modules linked in:
[ 76.684369][ T5017] CPU: 0 PID: 5017 Comm: syz-executor323 Not tainted 6.3.0-syzkaller-07921-g042334a8d424 #0
[ 76.694551][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 76.704694][ T5017] RIP: 0010:ieee80211_bss_info_change_notify+0x787/0x8d0
[ 76.711790][ T5017] Code: 00 00 48 8b ab f8 08 00 00 48 85 ed 74 79 e8 20 8b 03 f8 e8 1b 8b 03 f8 44 89 fa 48 89 ee 48 c7 c7 a0 33 7e 8b e8 59 b9 cb f7 <0f> 0b e9 90 f9 ff ff e8 fd 8a 03 f8 e8 28 ae ec f7 31 ff 41 89 c7
[ 76.731841][ T5017] RSP: 0018:ffffc9000399f358 EFLAGS: 00010282
[ 76.738006][ T5017] RAX: 0000000000000000 RBX: ffff888020d60c80 RCX: 0000000000000000
[ 76.746183][ T5017] RDX: ffff888013ba9dc0 RSI: ffffffff814bef47 RDI: 0000000000000001
[ 76.754230][ T5017] RBP: ffff888020d60000 R08: 0000000000000001 R09: 0000000000000000
[ 76.762228][ T5017] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400000
[ 76.770379][ T5017] R13: ffff888020d62918 R14: 0000000000000000 R15: 0000000000000000
[ 76.778445][ T5017] FS: 0000555556ea0300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 76.787458][ T5017] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 76.794212][ T5017] CR2: 0000000020000340 CR3: 000000007accc000 CR4: 00000000003506f0
[ 76.802232][ T5017] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 76.810273][ T5017] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 76.818390][ T5017] Call Trace:
[ 76.821692][ T5017]
[ 76.824724][ T5017] ieee80211_ocb_leave+0x24d/0x3c0
[ 76.829939][ T5017] __cfg80211_leave_ocb+0x1eb/0x640
[ 76.835242][ T5017] cfg80211_leave_ocb+0x52/0x70
[ 76.840344][ T5017] cfg80211_change_iface+0x86c/0xe00
[ 76.845761][ T5017] nl80211_set_interface+0x695/0x960
[ 76.851108][ T5017] ? nl80211_notify_iface+0x190/0x190
[ 76.856678][ T5017] ? nl80211_pre_doit+0x120/0xab0
[ 76.861772][ T5017] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 76.868055][ T5017] ? genl_start+0x660/0x660
[ 76.872672][ T5017] ? ns_capable+0xe0/0x110
[ 76.877169][ T5017] genl_rcv_msg+0x4ff/0x7e0
[ 76.881750][ T5017] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 76.888234][ T5017] ? validate_beacon_tx_rate+0x790/0x790
[ 76.893969][ T5017] ? nl80211_notify_iface+0x190/0x190
[ 76.899413][ T5017] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0
[ 76.905313][ T5017] netlink_rcv_skb+0x165/0x440
[ 76.910143][ T5017] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 76.916583][ T5017] ? netlink_ack+0x1360/0x1360
[ 76.921428][ T5017] genl_rcv+0x28/0x40
[ 76.925503][ T5017] netlink_unicast+0x547/0x7f0
[ 76.930325][ T5017] ? netlink_attachskb+0x890/0x890
[ 76.935544][ T5017] ? __virt_addr_valid+0x61/0x2e0
[ 76.940651][ T5017] ? __phys_addr_symbol+0x30/0x70
[ 76.945774][ T5017] ? __check_object_size+0x323/0x730
[ 76.951146][ T5017] netlink_sendmsg+0x925/0xe30
[ 76.956042][ T5017] ? netlink_unicast+0x7f0/0x7f0
[ 76.961037][ T5017] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 76.966431][ T5017] ? netlink_unicast+0x7f0/0x7f0
[ 76.971440][ T5017] sock_sendmsg+0xde/0x190
[ 76.976001][ T5017] ____sys_sendmsg+0x71c/0x900
[ 76.980934][ T5017] ? copy_msghdr_from_user+0xfc/0x150
[ 76.986414][ T5017] ? kernel_sendmsg+0x50/0x50
[ 76.991156][ T5017] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 76.997312][ T5017] ___sys_sendmsg+0x110/0x1b0
[ 77.002043][ T5017] ? do_recvmmsg+0x6e0/0x6e0
[ 77.006755][ T5017] ? lock_sync+0x190/0x190
[ 77.011223][ T5017] ? ptrace_stop.part.0+0x4a3/0x8e0
[ 77.016532][ T5017] ? do_raw_spin_lock+0x124/0x2b0
[ 77.021612][ T5017] ? spin_bug+0x1c0/0x1c0
[ 77.026022][ T5017] ? _raw_spin_lock_irq+0x45/0x50
[ 77.031126][ T5017] ? __fget_light+0x20a/0x270
[ 77.035892][ T5017] __sys_sendmsg+0xf7/0x1c0
[ 77.040446][ T5017] ? __sys_sendmsg_sock+0x40/0x40
[ 77.045586][ T5017] ? lock_downgrade+0x690/0x690
[ 77.050521][ T5017] ? lockdep_hardirqs_on+0x7d/0x100
[ 77.055823][ T5017] ? _raw_spin_unlock_irq+0x2e/0x50
[ 77.061091][ T5017] ? ptrace_notify+0xfe/0x140
[ 77.065867][ T5017] do_syscall_64+0x39/0xb0
[ 77.070323][ T5017] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.076299][ T5017] RIP: 0033:0x7f40e88bba99
[ 77.080747][ T5017] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 77.100437][ T5017] RSP: 002b:00007fff2fd5ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 77.108940][ T5017] RAX: ffffffffffffffda RBX: 000000000001237e RCX: 00007f40e88bba99
[ 77.116998][ T5017] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 77.125042][ T5017] RBP: 0000000000000000 R08: 00007fff2fd5bc08 R09: 00007fff2fd5bc08
[ 77.133104][ T5017] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2fd5ba7c
[ 77.141119][ T5017] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 77.149199][ T5017]
[ 77.152250][ T5017] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.159541][ T5017] CPU: 0 PID: 5017 Comm: syz-executor323 Not tainted 6.3.0-syzkaller-07921-g042334a8d424 #0
[ 77.169650][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 77.179742][ T5017] Call Trace:
[ 77.183046][ T5017]
[ 77.186224][ T5017] dump_stack_lvl+0xd9/0x150
[ 77.190882][ T5017] panic+0x688/0x730
[ 77.194839][ T5017] ? panic_smp_self_stop+0x90/0x90
[ 77.199983][ T5017] ? show_trace_log_lvl+0x285/0x390
[ 77.205228][ T5017] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.211693][ T5017] check_panic_on_warn+0xb1/0xc0
[ 77.216702][ T5017] __warn+0xf2/0x390
[ 77.220640][ T5017] ? preempt_schedule_notrace+0x5f/0xd0
[ 77.226241][ T5017] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.232701][ T5017] report_bug+0x2da/0x500
[ 77.237101][ T5017] handle_bug+0x3c/0x70
[ 77.241304][ T5017] exc_invalid_op+0x18/0x50
[ 77.245835][ T5017] asm_exc_invalid_op+0x1a/0x20
[ 77.250731][ T5017] RIP: 0010:ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.257798][ T5017] Code: 00 00 48 8b ab f8 08 00 00 48 85 ed 74 79 e8 20 8b 03 f8 e8 1b 8b 03 f8 44 89 fa 48 89 ee 48 c7 c7 a0 33 7e 8b e8 59 b9 cb f7 <0f> 0b e9 90 f9 ff ff e8 fd 8a 03 f8 e8 28 ae ec f7 31 ff 41 89 c7
[ 77.277433][ T5017] RSP: 0018:ffffc9000399f358 EFLAGS: 00010282
[ 77.283530][ T5017] RAX: 0000000000000000 RBX: ffff888020d60c80 RCX: 0000000000000000
[ 77.291519][ T5017] RDX: ffff888013ba9dc0 RSI: ffffffff814bef47 RDI: 0000000000000001
[ 77.299514][ T5017] RBP: ffff888020d60000 R08: 0000000000000001 R09: 0000000000000000
[ 77.307506][ T5017] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400000
[ 77.315501][ T5017] R13: ffff888020d62918 R14: 0000000000000000 R15: 0000000000000000
[ 77.323510][ T5017] ? __warn_printk+0x187/0x310
[ 77.328318][ T5017] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.334773][ T5017] ieee80211_ocb_leave+0x24d/0x3c0
[ 77.339937][ T5017] __cfg80211_leave_ocb+0x1eb/0x640
[ 77.345179][ T5017] cfg80211_leave_ocb+0x52/0x70
[ 77.350071][ T5017] cfg80211_change_iface+0x86c/0xe00
[ 77.355407][ T5017] nl80211_set_interface+0x695/0x960
[ 77.360727][ T5017] ? nl80211_notify_iface+0x190/0x190
[ 77.366144][ T5017] ? nl80211_pre_doit+0x120/0xab0
[ 77.371206][ T5017] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 77.377409][ T5017] ? genl_start+0x660/0x660
[ 77.381956][ T5017] ? ns_capable+0xe0/0x110
[ 77.386418][ T5017] genl_rcv_msg+0x4ff/0x7e0
[ 77.390968][ T5017] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 77.397335][ T5017] ? validate_beacon_tx_rate+0x790/0x790
[ 77.403024][ T5017] ? nl80211_notify_iface+0x190/0x190
[ 77.408433][ T5017] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0
[ 77.414293][ T5017] netlink_rcv_skb+0x165/0x440
[ 77.419091][ T5017] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 77.425455][ T5017] ? netlink_ack+0x1360/0x1360
[ 77.430292][ T5017] genl_rcv+0x28/0x40
[ 77.434421][ T5017] netlink_unicast+0x547/0x7f0
[ 77.439239][ T5017] ? netlink_attachskb+0x890/0x890
[ 77.444389][ T5017] ? __virt_addr_valid+0x61/0x2e0
[ 77.449467][ T5017] ? __phys_addr_symbol+0x30/0x70
[ 77.454534][ T5017] ? __check_object_size+0x323/0x730
[ 77.459868][ T5017] netlink_sendmsg+0x925/0xe30
[ 77.464690][ T5017] ? netlink_unicast+0x7f0/0x7f0
[ 77.469684][ T5017] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 77.475037][ T5017] ? netlink_unicast+0x7f0/0x7f0
[ 77.480020][ T5017] sock_sendmsg+0xde/0x190
[ 77.484492][ T5017] ____sys_sendmsg+0x71c/0x900
[ 77.489315][ T5017] ? copy_msghdr_from_user+0xfc/0x150
[ 77.494737][ T5017] ? kernel_sendmsg+0x50/0x50
[ 77.499463][ T5017] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.505489][ T5017] ___sys_sendmsg+0x110/0x1b0
[ 77.510208][ T5017] ? do_recvmmsg+0x6e0/0x6e0
[ 77.514850][ T5017] ? lock_sync+0x190/0x190
[ 77.519300][ T5017] ? ptrace_stop.part.0+0x4a3/0x8e0
[ 77.524629][ T5017] ? do_raw_spin_lock+0x124/0x2b0
[ 77.529689][ T5017] ? spin_bug+0x1c0/0x1c0
[ 77.534054][ T5017] ? _raw_spin_lock_irq+0x45/0x50
[ 77.539123][ T5017] ? __fget_light+0x20a/0x270
[ 77.543841][ T5017] __sys_sendmsg+0xf7/0x1c0
[ 77.548389][ T5017] ? __sys_sendmsg_sock+0x40/0x40
[ 77.553450][ T5017] ? lock_downgrade+0x690/0x690
[ 77.558370][ T5017] ? lockdep_hardirqs_on+0x7d/0x100
[ 77.563620][ T5017] ? _raw_spin_unlock_irq+0x2e/0x50
[ 77.568874][ T5017] ? ptrace_notify+0xfe/0x140
[ 77.573593][ T5017] do_syscall_64+0x39/0xb0
[ 77.578039][ T5017] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.583988][ T5017] RIP: 0033:0x7f40e88bba99
[ 77.588440][ T5017] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 77.608111][ T5017] RSP: 002b:00007fff2fd5ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 77.616557][ T5017] RAX: ffffffffffffffda RBX: 000000000001237e RCX: 00007f40e88bba99
[ 77.624549][ T5017] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 77.632540][ T5017] RBP: 0000000000000000 R08: 00007fff2fd5bc08 R09: 00007fff2fd5bc08
[ 77.640531][ T5017] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2fd5ba7c
[ 77.648523][ T5017] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 77.656536][ T5017]
[ 77.659776][ T5017] Kernel Offset: disabled
[ 77.664209][ T5017] Rebooting in 86400 seconds..