./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2735914072 <...> Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. execve("./syz-executor2735914072", ["./syz-executor2735914072"], 0x7fff050308a0 /* 10 vars */) = 0 brk(NULL) = 0x55557a8cb000 brk(0x55557a8cbd00) = 0x55557a8cbd00 arch_prctl(ARCH_SET_FS, 0x55557a8cb380) = 0 set_tid_address(0x55557a8cb650) = 5834 set_robust_list(0x55557a8cb660, 24) = 0 rseq(0x55557a8cbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2735914072", 4096) = 28 getrandom("\x6a\xd7\x2b\x54\xe2\xb7\x83\xa3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557a8cbd00 brk(0x55557a8ecd00) = 0x55557a8ecd00 brk(0x55557a8ed000) = 0x55557a8ed000 mprotect(0x7f6202113000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5835 attached [pid 5835] set_robust_list(0x55557a8cb660, 24 [pid 5834] <... clone resumed>, child_tidptr=0x55557a8cb650) = 5835 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5835] getppid() = 0 [pid 5835] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5835] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5835] unshare(CLONE_NEWNS) = 0 [pid 5835] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5835] unshare(CLONE_NEWIPC) = 0 [pid 5835] unshare(CLONE_NEWCGROUP) = 0 [pid 5835] unshare(CLONE_NEWUTS) = 0 [pid 5835] unshare(CLONE_SYSVSEM) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "16777216", 8) = 8 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "536870912", 9) = 9 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1024", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "8192", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1024", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1024", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5835] close(3) = 0 [pid 5835] getpid() = 1 [pid 5835] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5840 attached , child_tidptr=0x55557a8cb650) = 3 [pid 5840] set_robust_list(0x55557a8cb660, 24) = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5840] setpgid(0, 0) = 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5840] write(3, "1000", 4) = 4 [pid 5840] close(3) = 0 executing program [pid 5840] write(1, "executing program\n", 18) = 18 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5840] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5840] recvfrom(4, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5840] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5840] close(4) = 0 [pid 5840] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5840] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x30\x00\x00\x00\x24\x00\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x39\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x14\x00\x5a\x80\x10\x00\x00\x80\x04\x00\x01\x00\x05\x00\x02\x00\x08\x00\x00\x00", iov_len=48}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0x9000000 /* MSG_??? */) = 48 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5840] sendto(5, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5840] recvfrom(5, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-411000581}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5840] recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-411000581}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5840] close(5) = 0 [pid 5840] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5840] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5840] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x00\x00\x00\x08\x00\x35\x00\x00\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x10\x00\xb0\x00\x00\x00\x00\x20\x02\x00\x1f\x00\x04\x00\x01\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_OOB|MSG_PROBE|MSG_FASTOPEN}, 0) = 84 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5840] sendto(5, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 5840] recvfrom(5, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1853340242}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2c\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1d\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5840] recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1853340242}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5840] sendto(5, [{nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00"], 20, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 20 [pid 5840] recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1853340242}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5840] sendto(5, [{nlmsg_len=108, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00\x08\x00\x06\x00\x00\x00\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00\x39\x00\x03\x00\x50\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x01\x00\x00\x06\x02\x02\x02\x02\x02\x02\x01\x07\x02\x84\x80\x0c\x12\x00\x00\x00\x00\x00"], 108, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 108 [pid 5840] recvfrom(5, [{nlmsg_len=128, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1853340242}, {error=-EINVAL, msg=[{nlmsg_len=108, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00\x08\x00\x06\x00\x00\x00\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00\x39\x00\x03\x00\x50\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x01\x00\x00\x06\x02\x02\x02\x02\x02\x02\x01\x07\x02\x84\x80\x0c\x12\x00\x00\x00\x00\x00"]}], 4096, 0, NULL, NULL) = 128 [pid 5840] close(5) = 0 [pid 5840] close(3) = 0 [pid 5840] close(4) = 0 [pid 5840] close(5) = -1 EBADF (Bad file descriptor) [pid 5840] close(6) = -1 EBADF (Bad file descriptor) [ 86.561008][ T5840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [pid 5840] close(7) = -1 EBADF (Bad file descriptor) [pid 5840] close(8) = -1 EBADF (Bad file descriptor) [pid 5840] close(9) = -1 EBADF (Bad file descriptor) [pid 5840] close(10) = -1 EBADF (Bad file descriptor) [pid 5840] close(11) = -1 EBADF (Bad file descriptor) [pid 5840] close(12) = -1 EBADF (Bad file descriptor) [pid 5840] close(13) = -1 EBADF (Bad file descriptor) [pid 5840] close(14) = -1 EBADF (Bad file descriptor) [pid 5840] close(15) = -1 EBADF (Bad file descriptor) [pid 5840] close(16) = -1 EBADF (Bad file descriptor) [pid 5840] close(17) = -1 EBADF (Bad file descriptor) [pid 5840] close(18) = -1 EBADF (Bad file descriptor) [pid 5840] close(19) = -1 EBADF (Bad file descriptor) [pid 5840] close(20) = -1 EBADF (Bad file descriptor) [pid 5840] close(21) = -1 EBADF (Bad file descriptor) [pid 5840] close(22) = -1 EBADF (Bad file descriptor) [pid 5840] close(23) = -1 EBADF (Bad file descriptor) [pid 5840] close(24) = -1 EBADF (Bad file descriptor) [pid 5840] close(25) = -1 EBADF (Bad file descriptor) [pid 5840] close(26) = -1 EBADF (Bad file descriptor) [pid 5840] close(27) = -1 EBADF (Bad file descriptor) [pid 5840] close(28) = -1 EBADF (Bad file descriptor) [pid 5840] close(29) = -1 EBADF (Bad file descriptor) [pid 5840] exit_group(0) = ? [pid 5840] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5835] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5841 attached , child_tidptr=0x55557a8cb650) = 4 [pid 5841] set_robust_list(0x55557a8cb660, 24) = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5841] setpgid(0, 0) = 0 [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "1000", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] write(1, "executing program\n", 18executing program ) = 18 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5841] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5841] recvfrom(4, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5841] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5841] close(4) = 0 [pid 5841] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5841] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x30\x00\x00\x00\x24\x00\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x39\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x14\x00\x5a\x80\x10\x00\x00\x80\x04\x00\x01\x00\x05\x00\x02\x00\x08\x00\x00\x00", iov_len=48}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0x9000000 /* MSG_??? */) = 48 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5841] sendto(5, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5841] recvfrom(5, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-682207244}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5841] recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-682207244}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5841] close(5) = 0 [pid 5841] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5841] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5841] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x00\x00\x00\x08\x00\x35\x00\x00\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x10\x00\xb0\x00\x00\x00\x00\x20\x02\x00\x1f\x00\x04\x00\x01\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_OOB|MSG_PROBE|MSG_FASTOPEN}, 0) = 84 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5841] sendto(5, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 5841] recvfrom(5, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-2130157008}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2c\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1d\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5841] recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-2130157008}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5841] sendto(5, [{nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00"], 20, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 20 [pid 5841] recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-2130157008}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5841] sendto(5, [{nlmsg_len=108, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00\x08\x00\x06\x00\x00\x00\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00\x39\x00\x03\x00\x50\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x01\x00\x00\x06\x02\x02\x02\x02\x02\x02\x01\x07\x02\x84\x80\x0c\x12\x00\x00\x00\x00\x00"], 108, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 108 [pid 5841] recvfrom(5, [{nlmsg_len=44, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=0}, "\x08\x01\x00\x00\x0a\x00\x02\x00\x08\x02\x11\x00\x00\x01\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 4096, 0, NULL, NULL) = 44 [pid 5841] close(5) = 0 [pid 5841] close(3) = 0 [pid 5841] close(4) = 0 [pid 5841] close(5) = -1 EBADF (Bad file descriptor) [pid 5841] close(6) = -1 EBADF (Bad file descriptor) [ 87.121741][ T5841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [pid 5841] close(7) = -1 EBADF (Bad file descriptor) [pid 5841] close(8) = -1 EBADF (Bad file descriptor) [pid 5841] close(9) = -1 EBADF (Bad file descriptor) [pid 5841] close(10) = -1 EBADF (Bad file descriptor) [pid 5841] close(11) = -1 EBADF (Bad file descriptor) [pid 5841] close(12) = -1 EBADF (Bad file descriptor) [pid 5841] close(13) = -1 EBADF (Bad file descriptor) [pid 5841] close(14) = -1 EBADF (Bad file descriptor) [pid 5841] close(15) = -1 EBADF (Bad file descriptor) [pid 5841] close(16) = -1 EBADF (Bad file descriptor) [pid 5841] close(17) = -1 EBADF (Bad file descriptor) [pid 5841] close(18) = -1 EBADF (Bad file descriptor) [pid 5841] close(19) = -1 EBADF (Bad file descriptor) [pid 5841] close(20) = -1 EBADF (Bad file descriptor) [pid 5841] close(21) = -1 EBADF (Bad file descriptor) [pid 5841] close(22) = -1 EBADF (Bad file descriptor) [pid 5841] close(23) = -1 EBADF (Bad file descriptor) [pid 5841] close(24) = -1 EBADF (Bad file descriptor) [pid 5841] close(25) = -1 EBADF (Bad file descriptor) [pid 5841] close(26) = -1 EBADF (Bad file descriptor) [pid 5841] close(27) = -1 EBADF (Bad file descriptor) [pid 5841] close(28) = -1 EBADF (Bad file descriptor) [pid 5841] close(29) = -1 EBADF (Bad file descriptor) [pid 5841] exit_group(0) = ? [pid 5841] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5835] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5842 attached , child_tidptr=0x55557a8cb650) = 5 [pid 5842] set_robust_list(0x55557a8cb660, 24) = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 [pid 5842] write(1, "executing program\n", 18executing program ) = 18 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5842] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5842] recvfrom(4, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5842] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] close(4) = 0 [pid 5842] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5842] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x30\x00\x00\x00\x24\x00\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x39\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x14\x00\x5a\x80\x10\x00\x00\x80\x04\x00\x01\x00\x05\x00\x02\x00\x08\x00\x00\x00", iov_len=48}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0x9000000 /* MSG_??? */) = 48 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5842] sendto(5, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5842] recvfrom(5, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-378085158}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5842] recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-378085158}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] close(5) = 0 [pid 5842] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5842] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5842] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x54\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x0a\x00\x06\x00\x08\x02\x11\x00\x00\x00\x00\x00\x08\x00\x35\x00\x00\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x10\x00\xb0\x00\x00\x00\x00\x20\x02\x00\x1f\x00\x04\x00\x01\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_OOB|MSG_PROBE|MSG_FASTOPEN}, 0) = 84 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5842] sendto(5, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 5842] recvfrom(5, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-392298072}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2c\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1d\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5842] recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-392298072}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] sendto(5, [{nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00"], 20, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 20 [pid 5842] recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-392298072}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] sendto(5, [{nlmsg_len=108, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00\x08\x00\x06\x00\x00\x00\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00\x39\x00\x03\x00\x50\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x01\x00\x00\x06\x02\x02\x02\x02\x02\x02\x01\x07\x02\x84\x80\x0c\x12\x00\x00\x00\x00\x00"], 108, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 108 [pid 5842] recvfrom(5, [{nlmsg_len=44, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=0}, "\x08\x01\x00\x00\x0a\x00\x02\x00\x08\x02\x11\x00\x00\x01\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 4096, 0, NULL, NULL) = 44 [pid 5842] close(5) = 0 [pid 5842] close(3) = 0 [pid 5842] close(4) = 0 [pid 5842] close(5) = -1 EBADF (Bad file descriptor) [pid 5842] close(6) = -1 EBADF (Bad file descriptor) [pid 5842] close(7) = -1 EBADF (Bad file descriptor) [pid 5842] close(8) = -1 EBADF (Bad file descriptor) [pid 5842] close(9) = -1 EBADF (Bad file descriptor) [ 87.593298][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 87.605897][ T5842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.617129][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 87.629906][ T9] ------------[ cut here ]------------ [pid 5842] close(10) = -1 EBADF (Bad file descriptor) [ 87.635570][ T9] no supported rates for sta 08:02:11:00:00:00 (0x33, band 0) in rate_mask 0x0 with flags 0x0 [ 87.647610][ T9] WARNING: CPU: 0 PID: 9 at net/mac80211/rate.c:404 __rate_control_send_low+0x659/0x890 [ 87.657514][ T9] Modules linked in: [ 87.661569][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 87.672181][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.682337][ T9] Workqueue: events cfg80211_conn_work [pid 5842] close(11) = -1 EBADF (Bad file descriptor) [ 87.687914][ T9] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 87.694226][ T9] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 80 96 27 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 b8 c8 25 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 87.713959][ T9] RSP: 0018:ffffc900000e68e0 EFLAGS: 00010246 [ 87.720130][ T9] RAX: ac757643f829a100 RBX: ffff888022384f44 RCX: ffff88801bef8000 [ 87.728195][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [pid 5842] close(12) = -1 EBADF (Bad file descriptor) [pid 5842] close(13) = -1 EBADF (Bad file descriptor) [pid 5842] close(14) = -1 EBADF (Bad file descriptor) [pid 5842] close(15) = -1 EBADF (Bad file descriptor) [pid 5842] close(16) = -1 EBADF (Bad file descriptor) [pid 5842] close(17) = -1 EBADF (Bad file descriptor) [pid 5842] close(18) = -1 EBADF (Bad file descriptor) [pid 5842] close(19) = -1 EBADF (Bad file descriptor) [pid 5842] close(20) = -1 EBADF (Bad file descriptor) [pid 5842] close(21) = -1 EBADF (Bad file descriptor) [pid 5842] close(22) = -1 EBADF (Bad file descriptor) [pid 5842] close(23) = -1 EBADF (Bad file descriptor) [pid 5842] close(24) = -1 EBADF (Bad file descriptor) [pid 5842] close(25) = -1 EBADF (Bad file descriptor) [pid 5842] close(26) = -1 EBADF (Bad file descriptor) [pid 5842] close(27) = -1 EBADF (Bad file descriptor) [pid 5842] close(28) = -1 EBADF (Bad file descriptor) [pid 5842] close(29) = -1 EBADF (Bad file descriptor) [pid 5842] exit_group(0) = ? [pid 5842] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5835] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a8cb650) = 6 [ 87.736216][ T9] RBP: ffff888024aab168 R08: ffffffff81602a82 R09: fffffbfff1cfa210 [ 87.744373][ T9] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000800 [ 87.752464][ T9] R13: 000000000000000c R14: 0000000000000033 R15: dffffc0000000000 [ 87.760572][ T9] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 87.769600][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.776245][ T9] CR2: 00007ffe0677fff8 CR3: 00000000798ae000 CR4: 00000000003526f0 [ 87.784330][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 ./strace-static-x86_64: Process 5843 attached [ 87.792379][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.800455][ T9] Call Trace: [ 87.803779][ T9] [ 87.806750][ T9] ? __warn+0x165/0x4d0 [ 87.810995][ T9] ? __rate_control_send_low+0x659/0x890 [ 87.816717][ T9] ? report_bug+0x2b3/0x500 [ 87.821319][ T9] ? __rate_control_send_low+0x659/0x890 [ 87.827026][ T9] ? handle_bug+0x60/0x90 [ 87.831496][ T9] ? exc_invalid_op+0x1a/0x50 [ 87.836215][ T9] ? asm_exc_invalid_op+0x1a/0x20 [pid 5843] set_robust_list(0x55557a8cb660, 24) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [ 87.841346][ T9] ? __warn_printk+0x292/0x360 [ 87.846170][ T9] ? __rate_control_send_low+0x659/0x890 [ 87.851916][ T9] rate_control_send_low+0xf9/0x770 [ 87.857224][ T9] rate_control_get_rate+0x20e/0x5e0 [ 87.862610][ T9] ieee80211_tx_h_rate_ctrl+0xc88/0x1a10 [ 87.868344][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 87.874485][ T9] invoke_tx_handlers_late+0xb3/0x18e0 [ 87.880069][ T9] ? sta_info_get+0x253/0x2b0 [ 87.884897][ T9] ? sta_info_get+0x50/0x2b0 [pid 5843] close(3) = 0 [pid 5843] write(1, "executing program\n", 18executing program ) = 18 [pid 5843] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5843] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5843] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [ 87.889603][ T9] ? invoke_tx_handlers_early+0xa0d/0x1f40 [ 87.895464][ T9] ieee80211_tx+0x2e3/0x470 [ 87.900082][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 87.905175][ T9] ? ieee80211_xmit+0x30f/0x3f0 [ 87.910113][ T9] ? __ieee80211_tx_skb_tid_band+0x4bc/0x640 [ 87.916178][ T9] __ieee80211_tx_skb_tid_band+0x502/0x640 [ 87.922161][ T9] ? ieee80211_tx_skb_tid+0x30/0x420 [ 87.927495][ T9] ieee80211_tx_skb_tid+0x264/0x420 [ 87.932785][ T9] ? ieee80211_tx_skb_tid+0x30/0x420 [ 87.938280][ T9] ieee80211_send_auth+0x41d/0x5a0 [pid 5843] recvfrom(4, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=6}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5843] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=6}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5843] close(4) = 0 [pid 5843] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [ 87.943457][ T9] ? __pfx_ieee80211_send_auth+0x10/0x10 [ 87.949245][ T9] ? __pfx__printk+0x10/0x10 [ 87.953936][ T9] ? rcu_is_watching+0x15/0xb0 [ 87.958789][ T9] ieee80211_auth+0x4a5/0x950 [ 87.963742][ T9] ? __pfx_ieee80211_auth+0x10/0x10 [ 87.969062][ T9] ieee80211_mgd_auth+0xede/0x14c0 [ 87.974255][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 87.979554][ T9] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 87.985194][ T9] ? rcu_is_watching+0x15/0xb0 [ 87.990087][ T9] cfg80211_mlme_auth+0x59f/0x970 [ 87.995180][ T9] cfg80211_conn_do_work+0x5ed/0xe60 [ 88.000559][ T9] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 88.006394][ T9] ? __lock_acquire+0x1397/0x2100 [ 88.011593][ T9] ? __pfx_validate_chain+0x10/0x10 [ 88.016850][ T9] ? mark_lock+0x9a/0x360 [ 88.021540][ T9] ? cfg80211_conn_work+0x230/0x4d0 [ 88.026790][ T9] cfg80211_conn_work+0x27c/0x4d0 [ 88.031905][ T9] ? __pfx_cfg80211_conn_work+0x10/0x10 [ 88.037495][ T9] ? register_lock_class+0x102/0x980 [ 88.042909][ T9] ? __pfx_register_lock_class+0x10/0x10 [ 88.048630][ T9] ? mark_lock+0x9a/0x360 [ 88.053027][ T9] ? debug_object_deactivate+0x2d5/0x390 [ 88.058772][ T9] ? __lock_acquire+0x1397/0x2100 [ 88.063852][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.069169][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 88.074252][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.080318][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.086723][ T9] ? process_scheduled_works+0x976/0x1840 [ 88.092518][ T9] process_scheduled_works+0xa66/0x1840 [ 88.098181][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.104452][ T9] ? assign_work+0x364/0x3d0 [ 88.109126][ T9] worker_thread+0x870/0xd30 [ 88.113812][ T9] ? __kthread_parkme+0x169/0x1d0 [ 88.118951][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.124124][ T9] kthread+0x2f0/0x390 [ 88.128291][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.133461][ T9] ? __pfx_kthread+0x10/0x10 [ 88.138137][ T9] ret_from_fork+0x4b/0x80 [ 88.142605][ T9] ? __pfx_kthread+0x10/0x10 [ 88.147229][ T9] ret_from_fork_asm+0x1a/0x30 [ 88.152140][ T9] [ 88.155224][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.162553][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 88.173205][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.183282][ T9] Workqueue: events cfg80211_conn_work [ 88.188791][ T9] Call Trace: [ 88.192108][ T9] [ 88.195075][ T9] dump_stack_lvl+0x241/0x360 [ 88.199828][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.205064][ T9] ? __pfx__printk+0x10/0x10 [ 88.209711][ T9] ? _printk+0xd5/0x120 [ 88.213892][ T9] ? __init_begin+0x41000/0x41000 [ 88.218938][ T9] ? vscnprintf+0x5d/0x90 [ 88.223385][ T9] panic+0x349/0x880 [ 88.227306][ T9] ? __warn+0x174/0x4d0 [ 88.231514][ T9] ? __pfx_panic+0x10/0x10 [ 88.235966][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 88.240921][ T9] __warn+0x344/0x4d0 [ 88.244928][ T9] ? __rate_control_send_low+0x659/0x890 [ 88.250577][ T9] report_bug+0x2b3/0x500 [ 88.254919][ T9] ? __rate_control_send_low+0x659/0x890 [ 88.260593][ T9] handle_bug+0x60/0x90 [ 88.264776][ T9] exc_invalid_op+0x1a/0x50 [ 88.269285][ T9] asm_exc_invalid_op+0x1a/0x20 [ 88.274147][ T9] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 88.280408][ T9] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 80 96 27 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 b8 c8 25 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 88.300037][ T9] RSP: 0018:ffffc900000e68e0 EFLAGS: 00010246 [ 88.306114][ T9] RAX: ac757643f829a100 RBX: ffff888022384f44 RCX: ffff88801bef8000 [ 88.314099][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.322081][ T9] RBP: ffff888024aab168 R08: ffffffff81602a82 R09: fffffbfff1cfa210 [ 88.330060][ T9] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000800 [ 88.338055][ T9] R13: 000000000000000c R14: 0000000000000033 R15: dffffc0000000000 [ 88.346044][ T9] ? __warn_printk+0x292/0x360 [ 88.350859][ T9] rate_control_send_low+0xf9/0x770 [ 88.356116][ T9] rate_control_get_rate+0x20e/0x5e0 [ 88.361450][ T9] ieee80211_tx_h_rate_ctrl+0xc88/0x1a10 [ 88.367169][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 88.373307][ T9] invoke_tx_handlers_late+0xb3/0x18e0 [ 88.378848][ T9] ? sta_info_get+0x253/0x2b0 [ 88.383592][ T9] ? sta_info_get+0x50/0x2b0 [ 88.388216][ T9] ? invoke_tx_handlers_early+0xa0d/0x1f40 [ 88.394316][ T9] ieee80211_tx+0x2e3/0x470 [ 88.398953][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 88.404149][ T9] ? ieee80211_xmit+0x30f/0x3f0 [ 88.409018][ T9] ? __ieee80211_tx_skb_tid_band+0x4bc/0x640 [ 88.415012][ T9] __ieee80211_tx_skb_tid_band+0x502/0x640 [ 88.420839][ T9] ? ieee80211_tx_skb_tid+0x30/0x420 [ 88.426132][ T9] ieee80211_tx_skb_tid+0x264/0x420 [ 88.431354][ T9] ? ieee80211_tx_skb_tid+0x30/0x420 [ 88.436702][ T9] ieee80211_send_auth+0x41d/0x5a0 [ 88.441880][ T9] ? __pfx_ieee80211_send_auth+0x10/0x10 [ 88.447567][ T9] ? __pfx__printk+0x10/0x10 [ 88.452204][ T9] ? rcu_is_watching+0x15/0xb0 [ 88.457010][ T9] ieee80211_auth+0x4a5/0x950 [ 88.461730][ T9] ? __pfx_ieee80211_auth+0x10/0x10 [ 88.466954][ T9] ieee80211_mgd_auth+0xede/0x14c0 [ 88.472109][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 88.477329][ T9] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 88.482914][ T9] ? rcu_is_watching+0x15/0xb0 [ 88.487725][ T9] cfg80211_mlme_auth+0x59f/0x970 [ 88.492801][ T9] cfg80211_conn_do_work+0x5ed/0xe60 [ 88.498377][ T9] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 88.504245][ T9] ? __lock_acquire+0x1397/0x2100 [ 88.509408][ T9] ? __pfx_validate_chain+0x10/0x10 [ 88.514853][ T9] ? mark_lock+0x9a/0x360 [ 88.519771][ T9] ? cfg80211_conn_work+0x230/0x4d0 [ 88.525041][ T9] cfg80211_conn_work+0x27c/0x4d0 [ 88.530144][ T9] ? __pfx_cfg80211_conn_work+0x10/0x10 [ 88.535755][ T9] ? register_lock_class+0x102/0x980 [ 88.541135][ T9] ? __pfx_register_lock_class+0x10/0x10 [ 88.546828][ T9] ? mark_lock+0x9a/0x360 [ 88.551205][ T9] ? debug_object_deactivate+0x2d5/0x390 [ 88.556883][ T9] ? __lock_acquire+0x1397/0x2100 [ 88.561957][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.567187][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 88.572226][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.578226][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.584660][ T9] ? process_scheduled_works+0x976/0x1840 [ 88.590492][ T9] process_scheduled_works+0xa66/0x1840 [ 88.596146][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.602199][ T9] ? assign_work+0x364/0x3d0 [ 88.606839][ T9] worker_thread+0x870/0xd30 [ 88.611491][ T9] ? __kthread_parkme+0x169/0x1d0 [ 88.616605][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.621796][ T9] kthread+0x2f0/0x390 [ 88.625917][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.631249][ T9] ? __pfx_kthread+0x10/0x10 [ 88.635888][ T9] ret_from_fork+0x4b/0x80 [ 88.640319][ T9] ? __pfx_kthread+0x10/0x10 [ 88.645020][ T9] ret_from_fork_asm+0x1a/0x30 [ 88.649831][ T9] [ 88.653206][ T9] Kernel Offset: disabled [ 88.657629][ T9] Rebooting in 86400 seconds..