./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor874104495
<...>
Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts.
execve("./syz-executor874104495", ["./syz-executor874104495"], 0x7ffd6fc98730 /* 10 vars */) = 0
brk(NULL) = 0x5555559b7000
brk(0x5555559b7c40) = 0x5555559b7c40
arch_prctl(ARCH_SET_FS, 0x5555559b7300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor874104495", 4096) = 27
brk(0x5555559d8c40) = 0x5555559d8c40
brk(0x5555559d9000) = 0x5555559d9000
mprotect(0x7f4e77871000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
syzkaller login: [ 76.958342][ T5006] netlink: 'syz-executor874': attribute type 27 has an invalid length.
[ 77.225761][ T5006] ------------[ cut here ]------------
[ 77.231475][ T5006] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[ 77.240739][ T5006] WARNING: CPU: 0 PID: 5006 at net/mac80211/main.c:236 ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.251691][ T5006] Modules linked in:
[ 77.255709][ T5006] CPU: 0 PID: 5006 Comm: syz-executor874 Not tainted 6.4.0-rc5-syzkaller-00002-gf8dba31b0a82 #0
[ 77.266321][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 77.276493][ T5006] RIP: 0010:ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.283576][ T5006] Code: 00 00 48 8b ab f8 08 00 00 48 85 ed 74 79 e8 60 dd ff f7 e8 5b dd ff f7 44 89 fa 48 89 ee 48 c7 c7 20 f4 7e 8b e8 29 99 c7 f7 <0f> 0b e9 90 f9 ff ff e8 3d dd ff f7 e8 48 0d e9 f7 31 ff 41 89 c7
[ 77.303552][ T5006] RSP: 0018:ffffc9000389f530 EFLAGS: 00010282
[ 77.309724][ T5006] RAX: 0000000000000000 RBX: ffff8880212b0c80 RCX: 0000000000000000
[ 77.317851][ T5006] RDX: ffff8880274e3b80 RSI: ffffffff814c03a7 RDI: 0000000000000001
[ 77.326323][ T5006] RBP: ffff8880212b0000 R08: 0000000000000001 R09: 0000000000000000
[ 77.334341][ T5006] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400000
[ 77.342421][ T5006] R13: ffff8880212b2918 R14: 0000000000000000 R15: 0000000000000000
[ 77.350567][ T5006] FS: 00005555559b7300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 77.359699][ T5006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.366367][ T5006] CR2: 0000000001e845d8 CR3: 00000000234ed000 CR4: 00000000003506f0
[ 77.374398][ T5006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 77.382482][ T5006] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 77.390564][ T5006] Call Trace:
[ 77.393969][ T5006]
[ 77.396988][ T5006] ? __warn+0xe6/0x390
[ 77.401125][ T5006] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.407689][ T5006] ? report_bug+0x2da/0x500
[ 77.412271][ T5006] ? handle_bug+0x3c/0x70
[ 77.416705][ T5006] ? exc_invalid_op+0x18/0x50
[ 77.421434][ T5006] ? asm_exc_invalid_op+0x1a/0x20
[ 77.426596][ T5006] ? __warn_printk+0x187/0x310
[ 77.431441][ T5006] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.437982][ T5006] ieee80211_ocb_leave+0x24d/0x3c0
[ 77.443175][ T5006] __cfg80211_leave_ocb+0x1eb/0x640
[ 77.448490][ T5006] cfg80211_leave_ocb+0x52/0x70
[ 77.453488][ T5006] cfg80211_change_iface+0x86c/0xe00
[ 77.458864][ T5006] nl80211_set_interface+0x695/0x960
[ 77.464216][ T5006] ? nl80211_notify_iface+0x190/0x190
[ 77.469678][ T5006] ? nl80211_pre_doit+0x120/0xab0
[ 77.474747][ T5006] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 77.481005][ T5006] ? genl_start+0x660/0x660
[ 77.485590][ T5006] ? ns_capable+0xe0/0x110
[ 77.490060][ T5006] genl_rcv_msg+0x4ff/0x7e0
[ 77.494589][ T5006] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 77.501042][ T5006] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.507145][ T5006] ? validate_beacon_tx_rate+0x790/0x790
[ 77.512841][ T5006] ? nl80211_notify_iface+0x190/0x190
[ 77.518310][ T5006] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0
[ 77.524163][ T5006] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.530237][ T5006] netlink_rcv_skb+0x165/0x440
[ 77.535069][ T5006] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 77.541433][ T5006] ? netlink_ack+0x1360/0x1360
[ 77.546300][ T5006] ? down_write_killable+0x250/0x250
[ 77.551632][ T5006] ? netlink_deliver_tap+0x1b1/0xcf0
[ 77.557081][ T5006] genl_rcv+0x28/0x40
[ 77.561098][ T5006] netlink_unicast+0x547/0x7f0
[ 77.565931][ T5006] ? netlink_attachskb+0x890/0x890
[ 77.571080][ T5006] ? __virt_addr_valid+0x61/0x2e0
[ 77.576182][ T5006] ? __phys_addr_symbol+0x30/0x70
[ 77.581261][ T5006] ? __check_object_size+0x323/0x730
[ 77.586622][ T5006] netlink_sendmsg+0x925/0xe30
[ 77.591432][ T5006] ? netlink_unicast+0x7f0/0x7f0
[ 77.596452][ T5006] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 77.601807][ T5006] ? netlink_unicast+0x7f0/0x7f0
[ 77.606817][ T5006] sock_sendmsg+0xde/0x190
[ 77.611274][ T5006] __sys_sendto+0x23a/0x340
[ 77.615869][ T5006] ? __ia32_sys_getpeername+0xb0/0xb0
[ 77.621298][ T5006] ? do_raw_spin_lock+0x124/0x2b0
[ 77.626441][ T5006] ? _raw_spin_lock_irq+0x45/0x50
[ 77.631561][ T5006] ? ptrace_notify+0xfe/0x140
[ 77.636330][ T5006] ? lock_downgrade+0x690/0x690
[ 77.641237][ T5006] ? _raw_spin_unlock_irq+0x23/0x50
[ 77.646510][ T5006] ? lockdep_hardirqs_on+0x7d/0x100
[ 77.651758][ T5006] __x64_sys_sendto+0xe1/0x1b0
[ 77.656594][ T5006] ? syscall_trace_enter.constprop.0+0xb0/0x1e0
[ 77.662988][ T5006] do_syscall_64+0x39/0xb0
[ 77.667491][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.673438][ T5006] RIP: 0033:0x7f4e777c1a06
[ 77.677926][ T5006] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89
[ 77.697590][ T5006] RSP: 002b:00007ffc9823c858 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 77.706060][ T5006] RAX: ffffffffffffffda RBX: 00007ffc9823c930 RCX: 00007f4e777c1a06
[ 77.714058][ T5006] RDX: 0000000000000024 RSI: 00007ffc9823c980 RDI: 0000000000000006
[ 77.722093][ T5006] RBP: 0000000000000001 R08: 00007ffc9823c874 R09: 000000000000000c
[ 77.730113][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 77.738149][ T5006] R13: 00007ffc9823c980 R14: 0000000000000006 R15: 0000000000000000
[ 77.746207][ T5006]
[ 77.749263][ T5006] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.756988][ T5006] CPU: 0 PID: 5006 Comm: syz-executor874 Not tainted 6.4.0-rc5-syzkaller-00002-gf8dba31b0a82 #0
[ 77.767410][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 77.777486][ T5006] Call Trace:
[ 77.780769][ T5006]
[ 77.783702][ T5006] dump_stack_lvl+0xd9/0x150
[ 77.788306][ T5006] panic+0x686/0x730
[ 77.792225][ T5006] ? panic_smp_self_stop+0xa0/0xa0
[ 77.797360][ T5006] ? show_trace_log_lvl+0x284/0x390
[ 77.802591][ T5006] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.809032][ T5006] check_panic_on_warn+0xb1/0xc0
[ 77.813993][ T5006] __warn+0xf2/0x390
[ 77.817908][ T5006] ? ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.824340][ T5006] report_bug+0x2da/0x500
[ 77.828803][ T5006] handle_bug+0x3c/0x70
[ 77.832966][ T5006] exc_invalid_op+0x18/0x50
[ 77.837480][ T5006] asm_exc_invalid_op+0x1a/0x20
[ 77.842352][ T5006] RIP: 0010:ieee80211_bss_info_change_notify+0x787/0x8d0
[ 77.849406][ T5006] Code: 00 00 48 8b ab f8 08 00 00 48 85 ed 74 79 e8 60 dd ff f7 e8 5b dd ff f7 44 89 fa 48 89 ee 48 c7 c7 20 f4 7e 8b e8 29 99 c7 f7 <0f> 0b e9 90 f9 ff ff e8 3d dd ff f7 e8 48 0d e9 f7 31 ff 41 89 c7
[ 77.869031][ T5006] RSP: 0018:ffffc9000389f530 EFLAGS: 00010282
[ 77.875223][ T5006] RAX: 0000000000000000 RBX: ffff8880212b0c80 RCX: 0000000000000000
[ 77.883296][ T5006] RDX: ffff8880274e3b80 RSI: ffffffff814c03a7 RDI: 0000000000000001
[ 77.891287][ T5006] RBP: ffff8880212b0000 R08: 0000000000000001 R09: 0000000000000000
[ 77.899278][ T5006] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400000
[ 77.907266][ T5006] R13: ffff8880212b2918 R14: 0000000000000000 R15: 0000000000000000
[ 77.915267][ T5006] ? __warn_printk+0x187/0x310
[ 77.920165][ T5006] ieee80211_ocb_leave+0x24d/0x3c0
[ 77.925319][ T5006] __cfg80211_leave_ocb+0x1eb/0x640
[ 77.930569][ T5006] cfg80211_leave_ocb+0x52/0x70
[ 77.935461][ T5006] cfg80211_change_iface+0x86c/0xe00
[ 77.941915][ T5006] nl80211_set_interface+0x695/0x960
[ 77.947250][ T5006] ? nl80211_notify_iface+0x190/0x190
[ 77.952669][ T5006] ? nl80211_pre_doit+0x120/0xab0
[ 77.957740][ T5006] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 77.963931][ T5006] ? genl_start+0x660/0x660
[ 77.968560][ T5006] ? ns_capable+0xe0/0x110
[ 77.973016][ T5006] genl_rcv_msg+0x4ff/0x7e0
[ 77.977553][ T5006] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 77.983914][ T5006] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 77.989926][ T5006] ? validate_beacon_tx_rate+0x790/0x790
[ 77.995584][ T5006] ? nl80211_notify_iface+0x190/0x190
[ 78.001001][ T5006] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0
[ 78.006832][ T5006] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 78.012848][ T5006] netlink_rcv_skb+0x165/0x440
[ 78.017637][ T5006] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 78.023998][ T5006] ? netlink_ack+0x1360/0x1360
[ 78.028804][ T5006] ? down_write_killable+0x250/0x250
[ 78.034132][ T5006] ? netlink_deliver_tap+0x1b1/0xcf0
[ 78.039465][ T5006] genl_rcv+0x28/0x40
[ 78.043472][ T5006] netlink_unicast+0x547/0x7f0
[ 78.048270][ T5006] ? netlink_attachskb+0x890/0x890
[ 78.053405][ T5006] ? __virt_addr_valid+0x61/0x2e0
[ 78.058472][ T5006] ? __phys_addr_symbol+0x30/0x70
[ 78.063530][ T5006] ? __check_object_size+0x323/0x730
[ 78.068848][ T5006] netlink_sendmsg+0x925/0xe30
[ 78.073640][ T5006] ? netlink_unicast+0x7f0/0x7f0
[ 78.078736][ T5006] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 78.084052][ T5006] ? netlink_unicast+0x7f0/0x7f0
[ 78.089014][ T5006] sock_sendmsg+0xde/0x190
[ 78.093484][ T5006] __sys_sendto+0x23a/0x340
[ 78.098015][ T5006] ? __ia32_sys_getpeername+0xb0/0xb0
[ 78.103418][ T5006] ? do_raw_spin_lock+0x124/0x2b0
[ 78.108570][ T5006] ? _raw_spin_lock_irq+0x45/0x50
[ 78.113640][ T5006] ? ptrace_notify+0xfe/0x140
[ 78.118346][ T5006] ? lock_downgrade+0x690/0x690
[ 78.123241][ T5006] ? _raw_spin_unlock_irq+0x23/0x50
[ 78.128474][ T5006] ? lockdep_hardirqs_on+0x7d/0x100
[ 78.133700][ T5006] __x64_sys_sendto+0xe1/0x1b0
[ 78.138511][ T5006] ? syscall_trace_enter.constprop.0+0xb0/0x1e0
[ 78.144801][ T5006] do_syscall_64+0x39/0xb0
[ 78.149260][ T5006] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.155213][ T5006] RIP: 0033:0x7f4e777c1a06
[ 78.159657][ T5006] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89
[ 78.179287][ T5006] RSP: 002b:00007ffc9823c858 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 78.187723][ T5006] RAX: ffffffffffffffda RBX: 00007ffc9823c930 RCX: 00007f4e777c1a06
[ 78.195734][ T5006] RDX: 0000000000000024 RSI: 00007ffc9823c980 RDI: 0000000000000006
[ 78.203721][ T5006] RBP: 0000000000000001 R08: 00007ffc9823c874 R09: 000000000000000c
[ 78.211720][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 78.219722][ T5006] R13: 00007ffc9823c980 R14: 0000000000000006 R15: 0000000000000000
[ 78.227729][ T5006]
[ 78.230939][ T5006] Kernel Offset: disabled
[ 78.235461][ T5006] Rebooting in 86400 seconds..