./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor848005275
<...>
Warning: Permanently added '10.128.0.17' (ECDSA) to the list of known hosts.
execve("./syz-executor848005275", ["./syz-executor848005275"], 0x7fff599dcff0 /* 10 vars */) = 0
brk(NULL) = 0x555555f3e000
brk(0x555555f3ec40) = 0x555555f3ec40
arch_prctl(ARCH_SET_FS, 0x555555f3e300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor848005275", 4096) = 27
brk(0x555555f5fc40) = 0x555555f5fc40
brk(0x555555f60000) = 0x555555f60000
mprotect(0x7f1f12d7e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f3e5d0) = 5002
./strace-static-x86_64: Process 5002 attached
[pid 5002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5002] setpgid(0, 0) = 0
[pid 5002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5002] write(3, "1000", 4) = 4
[pid 5002] close(3) = 0
[pid 5002] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
[ 57.244623][ T5002] netlink: 'syz-executor848': attribute type 27 has an invalid length.
[ 57.253165][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor848'.
[ 57.446389][ T5009] netlink: 'syz-executor848': attribute type 27 has an invalid length.
[ 57.454848][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor848'.
[ 57.474311][ T5009] ------------[ cut here ]------------
[ 57.479981][ T5009] wlan0: Failed check-sdata-in-driver check, flags: 0x0
[ 57.489139][ T5009] WARNING: CPU: 1 PID: 5009 at net/mac80211/main.c:236 ieee80211_bss_info_change_notify+0x787/0x8d0
[ 57.500080][ T5009] Modules linked in:
[ 57.504088][ T5009] CPU: 1 PID: 5009 Comm: syz-executor848 Not tainted 6.3.0-syzkaller-12964-g89b7fd5d7f3c #0
[ 57.514228][ T5009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 57.524356][ T5009] RIP: 0010:ieee80211_bss_info_change_notify+0x787/0x8d0
[ 57.531433][ T5009] Code: 00 00 48 8b ab f8 08 00 00 48 85 ed 74 79 e8 20 6f 00 f8 e8 1b 6f 00 f8 44 89 fa 48 89 ee 48 c7 c7 a0 dc 7e 8b e8 29 24 c8 f7 <0f> 0b e9 90 f9 ff ff e8 fd 6e 00 f8 e8 a8 9a e9 f7 31 ff 41 89 c7
[ 57.551449][ T5009] RSP: 0018:ffffc900039af358 EFLAGS: 00010282
[ 57.557596][ T5009] RAX: 0000000000000000 RBX: ffff888020944c80 RCX: 0000000000000000
[ 57.565655][ T5009] RDX: ffff8880286e9dc0 RSI: ffffffff814c1447 RDI: 0000000000000001
[ 57.573702][ T5009] RBP: ffff888020944000 R08: 0000000000000001 R09: 0000000000000000
[ 57.581743][ T5009] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400000
[ 57.589743][ T5009] R13: ffff888020946918 R14: 0000000000000000 R15: 0000000000000000
[ 57.597788][ T5009] FS: 0000555555f3e300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 57.606894][ T5009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.613561][ T5009] CR2: 0000000020000340 CR3: 000000007259c000 CR4: 00000000003506e0
[ 57.621569][ T5009] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.629620][ T5009] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.637682][ T5009] Call Trace:
[ 57.640989][ T5009]
[ 57.644019][ T5009] ieee80211_ocb_leave+0x24d/0x3c0
[ 57.649193][ T5009] __cfg80211_leave_ocb+0x1eb/0x640
[ 57.654520][ T5009] cfg80211_leave_ocb+0x52/0x70
[ 57.659423][ T5009] cfg80211_change_iface+0x86c/0xe00
[ 57.664816][ T5009] nl80211_set_interface+0x695/0x960
[ 57.670163][ T5009] ? nl80211_notify_iface+0x190/0x190
[ 57.675656][ T5009] ? nl80211_pre_doit+0x120/0xab0
[ 57.680735][ T5009] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 57.686991][ T5009] ? genl_start+0x660/0x660
[ 57.691538][ T5009] ? ns_capable+0xe0/0x110
[ 57.696062][ T5009] genl_rcv_msg+0x4ff/0x7e0
[ 57.700608][ T5009] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 57.707042][ T5009] ? validate_beacon_tx_rate+0x790/0x790
[ 57.712745][ T5009] ? nl80211_notify_iface+0x190/0x190
[ 57.718189][ T5009] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0
[ 57.724088][ T5009] netlink_rcv_skb+0x165/0x440
[ 57.728887][ T5009] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 57.735301][ T5009] ? netlink_ack+0x1360/0x1360
[ 57.740136][ T5009] genl_rcv+0x28/0x40
[ 57.744213][ T5009] netlink_unicast+0x547/0x7f0
[ 57.749018][ T5009] ? netlink_attachskb+0x890/0x890
[ 57.754236][ T5009] ? __virt_addr_valid+0x61/0x2e0
[ 57.759295][ T5009] ? __phys_addr_symbol+0x30/0x70
[ 57.764396][ T5009] ? __check_object_size+0x323/0x730
[ 57.769711][ T5009] netlink_sendmsg+0x925/0xe30
[ 57.774550][ T5009] ? netlink_unicast+0x7f0/0x7f0
[ 57.779510][ T5009] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 57.784930][ T5009] ? netlink_unicast+0x7f0/0x7f0
[ 57.789904][ T5009] sock_sendmsg+0xde/0x190
[ 57.794390][ T5009] ____sys_sendmsg+0x71c/0x900
[ 57.799181][ T5009] ? copy_msghdr_from_user+0xfc/0x150
[ 57.804616][ T5009] ? kernel_sendmsg+0x50/0x50
[ 57.809339][ T5009] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 57.815407][ T5009] ___sys_sendmsg+0x110/0x1b0
[ 57.820121][ T5009] ? do_recvmmsg+0x6e0/0x6e0
[ 57.824810][ T5009] ? lock_sync+0x190/0x190
[ 57.829261][ T5009] ? ptrace_stop.part.0+0x4a3/0x8e0
[ 57.834533][ T5009] ? do_raw_spin_lock+0x124/0x2b0
[ 57.839595][ T5009] ? spin_bug+0x1c0/0x1c0
[ 57.844035][ T5009] ? _raw_spin_lock_irq+0x45/0x50
[ 57.849099][ T5009] ? __fget_light+0x20a/0x270
[ 57.853869][ T5009] __sys_sendmsg+0xf7/0x1c0
[ 57.858428][ T5009] ? __sys_sendmsg_sock+0x40/0x40
[ 57.863517][ T5009] ? lock_downgrade+0x690/0x690
[ 57.868497][ T5009] ? lockdep_hardirqs_on+0x7d/0x100
[ 57.873762][ T5009] ? _raw_spin_unlock_irq+0x2e/0x50
[ 57.878987][ T5009] ? ptrace_notify+0xfe/0x140
[ 57.883755][ T5009] do_syscall_64+0x39/0xb0
[ 57.888204][ T5009] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.894265][ T5009] RIP: 0033:0x7f1f12d11a99
[ 57.898694][ T5009] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 57.918901][ T5009] RSP: 002b:00007fff78728238 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 57.927483][ T5009] RAX: ffffffffffffffda RBX: 000000000000df78 RCX: 00007f1f12d11a99
[ 57.935698][ T5009] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 57.943739][ T5009] RBP: 0000000000000000 R08: 00007fff787283d8 R09: 00007fff787283d8
[ 57.951778][ T5009] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7872824c
[ 57.959762][ T5009] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 57.967815][ T5009]
[ 57.970851][ T5009] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 57.978315][ T5009] CPU: 1 PID: 5009 Comm: syz-executor848 Not tainted 6.3.0-syzkaller-12964-g89b7fd5d7f3c #0
[ 57.988386][ T5009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 57.998913][ T5009] Call Trace:
[ 58.002209][ T5009]
[ 58.005154][ T5009] dump_stack_lvl+0xd9/0x150
[ 58.009792][ T5009] panic+0x686/0x730
[ 58.013719][ T5009] ? panic_smp_self_stop+0xa0/0xa0
[ 58.018865][ T5009] ? show_trace_log_lvl+0x285/0x390
[ 58.024114][ T5009] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 58.030647][ T5009] check_panic_on_warn+0xb1/0xc0
[ 58.035615][ T5009] __warn+0xf2/0x390
[ 58.039538][ T5009] ? preempt_schedule_notrace+0x5f/0xd0
[ 58.045105][ T5009] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 58.051559][ T5009] report_bug+0x2da/0x500
[ 58.055918][ T5009] handle_bug+0x3c/0x70
[ 58.060119][ T5009] exc_invalid_op+0x18/0x50
[ 58.064647][ T5009] asm_exc_invalid_op+0x1a/0x20
[ 58.069524][ T5009] RIP: 0010:ieee80211_bss_info_change_notify+0x787/0x8d0
[ 58.076578][ T5009] Code: 00 00 48 8b ab f8 08 00 00 48 85 ed 74 79 e8 20 6f 00 f8 e8 1b 6f 00 f8 44 89 fa 48 89 ee 48 c7 c7 a0 dc 7e 8b e8 29 24 c8 f7 <0f> 0b e9 90 f9 ff ff e8 fd 6e 00 f8 e8 a8 9a e9 f7 31 ff 41 89 c7
[ 58.096277][ T5009] RSP: 0018:ffffc900039af358 EFLAGS: 00010282
[ 58.102373][ T5009] RAX: 0000000000000000 RBX: ffff888020944c80 RCX: 0000000000000000
[ 58.110348][ T5009] RDX: ffff8880286e9dc0 RSI: ffffffff814c1447 RDI: 0000000000000001
[ 58.118328][ T5009] RBP: ffff888020944000 R08: 0000000000000001 R09: 0000000000000000
[ 58.126324][ T5009] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400000
[ 58.134300][ T5009] R13: ffff888020946918 R14: 0000000000000000 R15: 0000000000000000
[ 58.142285][ T5009] ? __warn_printk+0x187/0x310
[ 58.147075][ T5009] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 58.153516][ T5009] ieee80211_ocb_leave+0x24d/0x3c0
[ 58.158661][ T5009] __cfg80211_leave_ocb+0x1eb/0x640
[ 58.163883][ T5009] cfg80211_leave_ocb+0x52/0x70
[ 58.168759][ T5009] cfg80211_change_iface+0x86c/0xe00
[ 58.174068][ T5009] nl80211_set_interface+0x695/0x960
[ 58.179381][ T5009] ? nl80211_notify_iface+0x190/0x190
[ 58.184782][ T5009] ? nl80211_pre_doit+0x120/0xab0
[ 58.189822][ T5009] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 58.195994][ T5009] ? genl_start+0x660/0x660
[ 58.200522][ T5009] ? ns_capable+0xe0/0x110
[ 58.204985][ T5009] genl_rcv_msg+0x4ff/0x7e0
[ 58.209505][ T5009] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 58.215854][ T5009] ? validate_beacon_tx_rate+0x790/0x790
[ 58.226099][ T5009] ? nl80211_notify_iface+0x190/0x190
[ 58.231491][ T5009] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0
[ 58.237324][ T5009] netlink_rcv_skb+0x165/0x440
[ 58.242100][ T5009] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 58.248442][ T5009] ? netlink_ack+0x1360/0x1360
[ 58.253267][ T5009] genl_rcv+0x28/0x40
[ 58.257297][ T5009] netlink_unicast+0x547/0x7f0
[ 58.262624][ T5009] ? netlink_attachskb+0x890/0x890
[ 58.267759][ T5009] ? __virt_addr_valid+0x61/0x2e0
[ 58.272818][ T5009] ? __phys_addr_symbol+0x30/0x70
[ 58.277863][ T5009] ? __check_object_size+0x323/0x730
[ 58.283168][ T5009] netlink_sendmsg+0x925/0xe30
[ 58.288047][ T5009] ? netlink_unicast+0x7f0/0x7f0
[ 58.293009][ T5009] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 58.298311][ T5009] ? netlink_unicast+0x7f0/0x7f0
[ 58.303278][ T5009] sock_sendmsg+0xde/0x190
[ 58.307710][ T5009] ____sys_sendmsg+0x71c/0x900
[ 58.312486][ T5009] ? copy_msghdr_from_user+0xfc/0x150
[ 58.317983][ T5009] ? kernel_sendmsg+0x50/0x50
[ 58.322682][ T5009] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 58.328685][ T5009] ___sys_sendmsg+0x110/0x1b0
[ 58.333377][ T5009] ? do_recvmmsg+0x6e0/0x6e0
[ 58.337992][ T5009] ? lock_sync+0x190/0x190
[ 58.342424][ T5009] ? ptrace_stop.part.0+0x4a3/0x8e0
[ 58.347640][ T5009] ? do_raw_spin_lock+0x124/0x2b0
[ 58.352683][ T5009] ? spin_bug+0x1c0/0x1c0
[ 58.357031][ T5009] ? _raw_spin_lock_irq+0x45/0x50
[ 58.362078][ T5009] ? __fget_light+0x20a/0x270
[ 58.366783][ T5009] __sys_sendmsg+0xf7/0x1c0
[ 58.371301][ T5009] ? __sys_sendmsg_sock+0x40/0x40
[ 58.376343][ T5009] ? lock_downgrade+0x690/0x690
[ 58.381220][ T5009] ? lockdep_hardirqs_on+0x7d/0x100
[ 58.386444][ T5009] ? _raw_spin_unlock_irq+0x2e/0x50
[ 58.391658][ T5009] ? ptrace_notify+0xfe/0x140
[ 58.396352][ T5009] do_syscall_64+0x39/0xb0
[ 58.400790][ T5009] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.406704][ T5009] RIP: 0033:0x7f1f12d11a99
[ 58.411124][ T5009] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.430827][ T5009] RSP: 002b:00007fff78728238 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 58.439336][ T5009] RAX: ffffffffffffffda RBX: 000000000000df78 RCX: 00007f1f12d11a99
[ 58.447311][ T5009] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 58.455288][ T5009] RBP: 0000000000000000 R08: 00007fff787283d8 R09: 00007fff787283d8
[ 58.463265][ T5009] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7872824c
[ 58.471242][ T5009] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 58.479234][ T5009]
[ 58.482399][ T5009] Kernel Offset: disabled
[ 58.486799][ T5009] Rebooting in 86400 seconds..