./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor798822421 <...> Warning: Permanently added '10.128.0.179' (ED25519) to the list of known hosts. execve("./syz-executor798822421", ["./syz-executor798822421"], 0x7ffc95390bd0 /* 10 vars */) = 0 brk(NULL) = 0x5555563fb000 brk(0x5555563fbd00) = 0x5555563fbd00 arch_prctl(ARCH_SET_FS, 0x5555563fb380) = 0 set_tid_address(0x5555563fb650) = 4985 set_robust_list(0x5555563fb660, 24) = 0 rseq(0x5555563fbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor798822421", 4096) = 27 getrandom("\x43\xb0\x38\x6b\xe7\x27\x16\x64", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555563fbd00 brk(0x55555641cd00) = 0x55555641cd00 brk(0x55555641d000) = 0x55555641d000 mprotect(0x7f50530a9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563fb650) = 4986 ./strace-static-x86_64: Process 4986 attached [pid 4986] set_robust_list(0x5555563fb660, 24) = 0 [pid 4986] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 4986] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4986] setsid() = 1 [pid 4986] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 4986] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 4986] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 4986] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 4986] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 4986] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 4986] unshare(CLONE_NEWNS) = 0 [pid 4986] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 4986] unshare(CLONE_NEWIPC) = 0 [pid 4986] unshare(CLONE_NEWCGROUP) = 0 [pid 4986] unshare(CLONE_NEWUTS) = 0 [pid 4986] unshare(CLONE_SYSVSEM) = 0 [pid 4986] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4986] write(3, "16777216", 8) = 8 [pid 4986] close(3) = 0 [pid 4986] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 4986] write(3, "536870912", 9) = 9 [pid 4986] close(3) = 0 [pid 4986] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4986] write(3, "1024", 4) = 4 [pid 4986] close(3) = 0 [pid 4986] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4986] write(3, "8192", 4) = 4 [pid 4986] close(3) = 0 [pid 4986] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4986] write(3, "1024", 4) = 4 [pid 4986] close(3) = 0 [pid 4986] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 4986] write(3, "1024", 4) = 4 [pid 4986] close(3) = 0 [pid 4986] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 4986] write(3, "1024 1048576 500 1024", 21) = 21 [pid 4986] close(3) = 0 [pid 4986] getpid() = 1 [pid 4986] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 4986] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4990 attached , child_tidptr=0x5555563fb650) = 3 [pid 4990] set_robust_list(0x5555563fb660, 24) = 0 [pid 4990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4990] setpgid(0, 0) = 0 [pid 4990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4990] write(3, "1000", 4) = 4 [pid 4990] close(3) = 0 [pid 4990] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 3 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 6 [pid 4990] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 7 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 9 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 10 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 11 [pid 4990] openat(AT_FDCWD, "/proc/thread-self/net/snmp6", O_RDWR) = 12 [pid 4990] epoll_create1(0) = 13 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 14 [pid 4990] socket(AF_UNIX, SOCK_RAW|SOCK_NONBLOCK, 0) = 15 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 16 [pid 4990] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 17 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 18 [pid 4990] socket(AF_UNIX, SOCK_RAW|SOCK_NONBLOCK, 0) = 19 [pid 4990] pipe([20, 21]) = 0 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 22 [pid 4990] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 23 [pid 4990] sendto(23, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 4990] recvfrom(23, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 4990] recvfrom(23, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 4990] close(23) = 0 [pid 4990] ioctl(22, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 4990] sendmsg(22, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x40\x00\x00\x00\x23\x00\x1f\xe8\xff\xff\x00\x00\x00\x00\x00\x00\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x21\x00\x33\x00\xd0\x80\x00\x00\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x01\x50\x50\x50\x50\x50\x50\x00\x00\x00\x00\x00\x00\x16\x00\x00\x00", iov_len=64}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 64 [pid 4990] close(3) = 0 [pid 4990] close(4) = 0 [pid 4990] close(5) = 0 [pid 4990] close(6) = 0 [pid 4990] close(7) = 0 [pid 4990] close(8) = 0 [pid 4990] close(9) = 0 [pid 4990] close(10) = 0 [pid 4990] close(11) = 0 [pid 4990] close(12) = 0 [pid 4990] close(13) = 0 [pid 4990] close(14) = 0 [pid 4990] close(15) = 0 [pid 4990] close(16) = 0 [pid 4990] close(17) = 0 [pid 4990] close(18) = 0 [pid 4990] close(19) = 0 [pid 4990] close(20) = 0 [pid 4990] close(21) = 0 [pid 4990] close(22) = 0 [pid 4990] close(23) = -1 EBADF (Bad file descriptor) [pid 4990] close(24) = -1 EBADF (Bad file descriptor) [pid 4990] close(25) = -1 EBADF (Bad file descriptor) [pid 4990] close(26) = -1 EBADF (Bad file descriptor) [pid 4990] close(27) = -1 EBADF (Bad file descriptor) [pid 4990] close(28) = -1 EBADF (Bad file descriptor) [pid 4990] close(29) = -1 EBADF (Bad file descriptor) [pid 4990] exit_group(0) = ? [pid 4990] +++ exited with 0 +++ [pid 4986] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4986] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4986] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4991 attached , child_tidptr=0x5555563fb650) = 4 [pid 4991] set_robust_list(0x5555563fb660, 24) = 0 [pid 4991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4991] setpgid(0, 0) = 0 [pid 4991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4991] write(3, "1000", 4) = 4 [pid 4991] close(3) = 0 [pid 4991] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 3 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 6 [pid 4991] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 7 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 9 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 10 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 11 [pid 4991] openat(AT_FDCWD, "/proc/thread-self/net/snmp6", O_RDWR) = 12 [pid 4991] epoll_create1(0) = 13 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 14 [pid 4991] socket(AF_UNIX, SOCK_RAW|SOCK_NONBLOCK, 0) = 15 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 16 [pid 4991] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 17 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 18 [pid 4991] socket(AF_UNIX, SOCK_RAW|SOCK_NONBLOCK, 0) = 19 [pid 4991] pipe([20, 21]) = 0 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 22 [pid 4991] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 23 [pid 4991] sendto(23, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 4991] recvfrom(23, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 4991] recvfrom(23, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 4991] close(23) = 0 [pid 4991] ioctl(22, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 4991] sendmsg(22, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x40\x00\x00\x00\x23\x00\x1f\xe8\xff\xff\x00\x00\x00\x00\x00\x00\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x21\x00\x33\x00\xd0\x80\x00\x00\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x01\x50\x50\x50\x50\x50\x50\x00\x00\x00\x00\x00\x00\x16\x00\x00\x00", iov_len=64}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 64 [pid 4991] close(3) = 0 [pid 4991] close(4) = 0 [pid 4991] close(5) = 0 [pid 4991] close(6) = 0 [pid 4991] close(7) = 0 [pid 4991] close(8) = 0 [pid 4991] close(9) = 0 [pid 4991] close(10) = 0 [pid 4991] close(11) = 0 [pid 4991] close(12) = 0 [pid 4991] close(13) = 0 [pid 4991] close(14) = 0 [pid 4991] close(15) = 0 [pid 4991] close(16) = 0 [pid 4991] close(17) = 0 [pid 4991] close(18) = 0 [pid 4991] close(19) = 0 [pid 4991] close(20) = 0 [pid 4991] close(21) = 0 [pid 4991] close(22) = 0 [pid 4991] close(23) = -1 EBADF (Bad file descriptor) [pid 4991] close(24) = -1 EBADF (Bad file descriptor) [pid 4991] close(25) = -1 EBADF (Bad file descriptor) [pid 4991] close(26) = -1 EBADF (Bad file descriptor) [pid 4991] close(27) = -1 EBADF (Bad file descriptor) [pid 4991] close(28) = -1 EBADF (Bad file descriptor) [pid 4991] close(29) = -1 EBADF (Bad file descriptor) [pid 4991] exit_group(0) = ? [pid 4991] +++ exited with 0 +++ [pid 4986] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 4986] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4986] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563fb650) = 5 ./strace-static-x86_64: Process 4992 attached [pid 4992] set_robust_list(0x5555563fb660, 24) = 0 [pid 4992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4992] setpgid(0, 0) = 0 [pid 4992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "1000", 4) = 4 [pid 4992] close(3) = 0 [pid 4992] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 3 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 6 [pid 4992] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 7 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 9 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 10 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 11 [pid 4992] openat(AT_FDCWD, "/proc/thread-self/net/snmp6", O_RDWR) = 12 [pid 4992] epoll_create1(0) = 13 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 14 [pid 4992] socket(AF_UNIX, SOCK_RAW|SOCK_NONBLOCK, 0) = 15 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 16 [pid 4992] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 17 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 18 [pid 4992] socket(AF_UNIX, SOCK_RAW|SOCK_NONBLOCK, 0) = 19 [pid 4992] pipe([20, 21]) = 0 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 22 [pid 4992] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 23 [pid 4992] sendto(23, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 4992] recvfrom(23, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 4992] recvfrom(23, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 4992] close(23) = 0 [pid 4992] ioctl(22, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 4992] sendmsg(22, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x40\x00\x00\x00\x23\x00\x1f\xe8\xff\xff\x00\x00\x00\x00\x00\x00\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x21\x00\x33\x00\xd0\x80\x00\x00\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x01\x50\x50\x50\x50\x50\x50\x00\x00\x00\x00\x00\x00\x16\x00\x00\x00", iov_len=64}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 64 [pid 4992] close(3) = 0 [pid 4992] close(4) = 0 [pid 4992] close(5) = 0 [pid 4992] close(6) = 0 [pid 4992] close(7) = 0 [pid 4992] close(8) = 0 [pid 4992] close(9) = 0 [pid 4992] close(10) = 0 [pid 4992] close(11) = 0 [pid 4992] close(12) = 0 [pid 4992] close(13) = 0 [pid 4992] close(14) = 0 [pid 4992] close(15) = 0 [pid 4992] close(16) = 0 [pid 4992] close(17) = 0 [pid 4992] close(18) = 0 [pid 4992] close(19) = 0 [pid 4992] close(20) = 0 [pid 4992] close(21) = 0 [pid 4992] close(22) = 0 [pid 4992] close(23) = -1 EBADF (Bad file descriptor) [pid 4992] close(24) = -1 EBADF (Bad file descriptor) [pid 4992] close(25) = -1 EBADF (Bad file descriptor) [pid 4992] close(26) = -1 EBADF (Bad file descriptor) [pid 4992] close(27) = -1 EBADF (Bad file descriptor) [pid 4992] close(28) = -1 EBADF (Bad file descriptor) [pid 4992] close(29) = -1 EBADF (Bad file descriptor) [pid 4992] exit_group(0) = ? [pid 4992] +++ exited with 0 +++ [pid 4986] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 4986] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4993 attached , child_tidptr=0x5555563fb650) = 6 [pid 4993] set_robust_list(0x5555563fb660, 24) = 0 [pid 4993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4993] setpgid(0, 0) = 0 [pid 4993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4993] write(3, "1000", 4) = 4 [pid 4993] close(3) = 0 [pid 4993] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 3 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 6 [pid 4993] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 7 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 9 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 10 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 11 [pid 4993] openat(AT_FDCWD, "/proc/thread-self/net/snmp6", O_RDWR) = 12 [pid 4993] epoll_create1(0) = 13 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 14 [pid 4993] socket(AF_UNIX, SOCK_RAW|SOCK_NONBLOCK, 0) = 15 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 16 [pid 4993] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 17 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 18 [pid 4993] socket(AF_UNIX, SOCK_RAW|SOCK_NONBLOCK, 0) = 19 [pid 4993] pipe([20, 21]) = 0 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 22 [pid 4993] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 23 [pid 4993] sendto(23, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 4993] recvfrom(23, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=6}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496 [pid 4993] recvfrom(23, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=6}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 4993] close(23) = 0 [pid 4993] ioctl(22, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [ 160.424326][ C1] ===================================================== [ 160.431565][ C1] BUG: KMSAN: uninit-value in ieee80211_rx_handlers+0xc12c/0x10c00 [ 160.439754][ C1] ieee80211_rx_handlers+0xc12c/0x10c00 [ 160.445545][ C1] ieee80211_prepare_and_rx_handle+0x563e/0x9640 [ 160.452112][ C1] ieee80211_rx_for_interface+0x88d/0x990 [ 160.458184][ C1] ieee80211_rx_list+0x5753/0x6580 [ 160.463654][ C1] ieee80211_rx_napi+0x87/0x350 [ 160.468667][ C1] ieee80211_tasklet_handler+0x1a0/0x310 [ 160.474567][ C1] tasklet_action_common+0x391/0xd30 [ 160.480337][ C1] tasklet_action+0x26/0x30 [ 160.485157][ C1] __do_softirq+0x1b7/0x78f [ 160.489846][ C1] do_softirq+0x9a/0xf0 [ 160.494396][ C1] __local_bh_enable_ip+0x99/0xa0 [ 160.499618][ C1] local_bh_enable+0x28/0x30 [ 160.504486][ C1] __ieee80211_tx_skb_tid_band+0x276/0x560 [ 160.510504][ C1] ieee80211_tx_skb_tid+0x203/0x290 [ 160.516053][ C1] ieee80211_mgmt_tx+0x1cff/0x2070 [ 160.521418][ C1] cfg80211_mlme_mgmt_tx+0x133b/0x1ba0 [ 160.527115][ C1] nl80211_tx_mgmt+0x1297/0x1840 [ 160.532252][ C1] genl_rcv_msg+0x1328/0x13c0 [ 160.537170][ C1] netlink_rcv_skb+0x371/0x650 [ 160.542116][ C1] genl_rcv+0x40/0x60 [ 160.546366][ C1] netlink_unicast+0xf28/0x1230 [ 160.551376][ C1] netlink_sendmsg+0x122f/0x13d0 [ 160.556550][ C1] ____sys_sendmsg+0x9c2/0xd60 [ 160.561493][ C1] ___sys_sendmsg+0x28d/0x3c0 [ 160.566438][ C1] __x64_sys_sendmsg+0x307/0x490 [ 160.571542][ C1] do_syscall_64+0x41/0xc0 [ 160.576196][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.582283][ C1] [ 160.584761][ C1] Uninit was stored to memory at: [ 160.590054][ C1] skb_copy_bits+0x149/0xd30 [ 160.595122][ C1] skb_copy+0x47f/0xa00 [ 160.599459][ C1] mac80211_hwsim_tx_frame_no_nl+0x18db/0x2130 [ 160.605816][ C1] mac80211_hwsim_tx+0x1baa/0x2ce0 [ 160.611122][ C1] ieee80211_tx_frags+0x5e7/0xd90 [ 160.616432][ C1] __ieee80211_tx+0x46e/0x630 [ 160.621301][ C1] ieee80211_tx+0x52e/0x570 [ 160.626049][ C1] ieee80211_xmit+0x54a/0x5b0 [ 160.631278][ C1] __ieee80211_tx_skb_tid_band+0x271/0x560 [ 160.637381][ C1] ieee80211_tx_skb_tid+0x203/0x290 [ 160.642791][ C1] ieee80211_mgmt_tx+0x1cff/0x2070 [ 160.648195][ C1] cfg80211_mlme_mgmt_tx+0x133b/0x1ba0 [ 160.653887][ C1] nl80211_tx_mgmt+0x1297/0x1840 [ 160.659041][ C1] genl_rcv_msg+0x1328/0x13c0 [ 160.663954][ C1] netlink_rcv_skb+0x371/0x650 [ 160.668894][ C1] genl_rcv+0x40/0x60 [ 160.673116][ C1] netlink_unicast+0xf28/0x1230 [ 160.678140][ C1] netlink_sendmsg+0x122f/0x13d0 [ 160.683321][ C1] ____sys_sendmsg+0x9c2/0xd60 [ 160.688272][ C1] ___sys_sendmsg+0x28d/0x3c0 [ 160.693258][ C1] __x64_sys_sendmsg+0x307/0x490 [ 160.698369][ C1] do_syscall_64+0x41/0xc0 [ 160.702914][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.709122][ C1] [ 160.711506][ C1] Uninit was created at: [ 160.716033][ C1] slab_post_alloc_hook+0x12f/0xb70 [ 160.721374][ C1] kmem_cache_alloc_node+0x577/0xa80 [ 160.726847][ C1] kmalloc_reserve+0x148/0x470 [ 160.731767][ C1] __alloc_skb+0x318/0x740 [ 160.736371][ C1] __netdev_alloc_skb+0x11a/0x6f0 [ 160.741560][ C1] ieee80211_mgmt_tx+0x1316/0x2070 [ 160.746889][ C1] cfg80211_mlme_mgmt_tx+0x133b/0x1ba0 [ 160.752517][ C1] nl80211_tx_mgmt+0x1297/0x1840 [ 160.757743][ C1] genl_rcv_msg+0x1328/0x13c0 [ 160.762602][ C1] netlink_rcv_skb+0x371/0x650 [ 160.767629][ C1] genl_rcv+0x40/0x60 [ 160.771768][ C1] netlink_unicast+0xf28/0x1230 [ 160.776811][ C1] netlink_sendmsg+0x122f/0x13d0 [ 160.781927][ C1] ____sys_sendmsg+0x9c2/0xd60 [ 160.786970][ C1] ___sys_sendmsg+0x28d/0x3c0 [ 160.791830][ C1] __x64_sys_sendmsg+0x307/0x490 [ 160.797031][ C1] do_syscall_64+0x41/0xc0 [ 160.801629][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.807727][ C1] [ 160.810118][ C1] CPU: 1 PID: 4993 Comm: syz-executor798 Not tainted 6.5.0-rc3-syzkaller-00283-g12214540ad87 #0 [ 160.820716][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 160.830977][ C1] ===================================================== [ 160.838080][ C1] Disabling lock debugging due to kernel taint [ 160.844404][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 160.850881][ C1] CPU: 1 PID: 4993 Comm: syz-executor798 Tainted: G B 6.5.0-rc3-syzkaller-00283-g12214540ad87 #0 [ 160.862961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 160.873148][ C1] Call Trace: [ 160.876510][ C1] [ 160.879455][ C1] dump_stack_lvl+0x1bf/0x240 [ 160.884319][ C1] dump_stack+0x1e/0x20 [ 160.888605][ C1] panic+0x4d5/0xc70 [ 160.892598][ C1] ? add_taint+0x108/0x1a0 [ 160.897119][ C1] kmsan_report+0x2d0/0x2d0 [ 160.901959][ C1] ? ieee80211_rx_h_michael_mic_verify+0x40/0xf20 [ 160.908548][ C1] ? __msan_warning+0x96/0x110 [ 160.913451][ C1] ? ieee80211_rx_handlers+0xc12c/0x10c00 [ 160.919368][ C1] ? ieee80211_prepare_and_rx_handle+0x563e/0x9640 [ 160.926084][ C1] ? ieee80211_rx_for_interface+0x88d/0x990 [ 160.932215][ C1] ? ieee80211_rx_list+0x5753/0x6580 [ 160.937690][ C1] ? ieee80211_rx_napi+0x87/0x350 [ 160.942882][ C1] ? ieee80211_tasklet_handler+0x1a0/0x310 [ 160.948826][ C1] ? tasklet_action_common+0x391/0xd30 [ 160.954431][ C1] ? tasklet_action+0x26/0x30 [ 160.959284][ C1] ? __do_softirq+0x1b7/0x78f [ 160.964086][ C1] ? do_softirq+0x9a/0xf0 [ 160.968609][ C1] ? __local_bh_enable_ip+0x99/0xa0 [ 160.973990][ C1] ? local_bh_enable+0x28/0x30 [ 160.978951][ C1] ? __ieee80211_tx_skb_tid_band+0x276/0x560 [ 160.985060][ C1] ? ieee80211_tx_skb_tid+0x203/0x290 [ 160.990580][ C1] ? ieee80211_mgmt_tx+0x1cff/0x2070 [ 160.996219][ C1] ? cfg80211_mlme_mgmt_tx+0x133b/0x1ba0 [ 161.002023][ C1] ? nl80211_tx_mgmt+0x1297/0x1840 [ 161.007329][ C1] ? genl_rcv_msg+0x1328/0x13c0 [ 161.012316][ C1] ? netlink_rcv_skb+0x371/0x650 [ 161.017437][ C1] ? genl_rcv+0x40/0x60 [ 161.021697][ C1] ? netlink_unicast+0xf28/0x1230 [ 161.026846][ C1] ? netlink_sendmsg+0x122f/0x13d0 [ 161.032148][ C1] ? ____sys_sendmsg+0x9c2/0xd60 [ 161.037292][ C1] ? ___sys_sendmsg+0x28d/0x3c0 [ 161.042314][ C1] ? __x64_sys_sendmsg+0x307/0x490 [ 161.047601][ C1] ? do_syscall_64+0x41/0xc0 [ 161.052309][ C1] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 161.059040][ C1] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 161.065519][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 161.071550][ C1] ? ieee80211_rx_h_michael_mic_verify+0x619/0xf20 [ 161.078261][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 161.084308][ C1] __msan_warning+0x96/0x110 [ 161.089107][ C1] ieee80211_rx_handlers+0xc12c/0x10c00 [ 161.094827][ C1] ? filter_irq_stacks+0x60/0x1a0 [ 161.100108][ C1] ieee80211_prepare_and_rx_handle+0x563e/0x9640 [ 161.106732][ C1] ieee80211_rx_for_interface+0x88d/0x990 [ 161.112697][ C1] ieee80211_rx_list+0x5753/0x6580 [ 161.118026][ C1] ? ieee80211_rx_napi+0x47/0x350 [ 161.123259][ C1] ieee80211_rx_napi+0x87/0x350 [ 161.128286][ C1] ? skb_dequeue+0x1c7/0x2a0 [ 161.133016][ C1] ieee80211_tasklet_handler+0x1a0/0x310 [ 161.138834][ C1] ? ieee80211_reconfig_filter+0x30/0x30 [ 161.144586][ C1] tasklet_action_common+0x391/0xd30 [ 161.150141][ C1] ? ieee80211_reconfig_filter+0x30/0x30 [ 161.155998][ C1] ? tasklet_unlock+0x40/0x40 [ 161.160897][ C1] tasklet_action+0x26/0x30 [ 161.165558][ C1] __do_softirq+0x1b7/0x78f [ 161.170194][ C1] do_softirq+0x9a/0xf0 [ 161.174527][ C1] [ 161.177527][ C1] [ 161.180534][ C1] __local_bh_enable_ip+0x99/0xa0 [ 161.185727][ C1] local_bh_enable+0x28/0x30 [ 161.190511][ C1] __ieee80211_tx_skb_tid_band+0x276/0x560 [ 161.196461][ C1] ieee80211_tx_skb_tid+0x203/0x290 [ 161.201819][ C1] ieee80211_mgmt_tx+0x1cff/0x2070 [ 161.207108][ C1] ? ieee80211_mgmt_tx+0x3e0/0x2070 [ 161.212456][ C1] ? ieee80211_cancel_roc+0x960/0x960 [ 161.218013][ C1] cfg80211_mlme_mgmt_tx+0x133b/0x1ba0 [ 161.223668][ C1] nl80211_tx_mgmt+0x1297/0x1840 [ 161.228824][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 161.235027][ C1] ? nl80211_pre_doit+0xd54/0x1130 [ 161.240317][ C1] ? nl80211_register_mgmt+0x7b0/0x7b0 [ 161.245996][ C1] genl_rcv_msg+0x1328/0x13c0 [ 161.250884][ C1] ? filter_irq_stacks+0x60/0x1a0 [ 161.256114][ C1] ? rdev_mod_link_station+0x480/0x480 [ 161.261762][ C1] ? nl80211_register_mgmt+0x7b0/0x7b0 [ 161.267385][ C1] ? nl80211_pre_doit+0x1130/0x1130 [ 161.272948][ C1] netlink_rcv_skb+0x371/0x650 [ 161.277976][ C1] ? genl_bind+0x450/0x450 [ 161.282646][ C1] ? genl_pernet_exit+0x60/0x60 [ 161.287640][ C1] genl_rcv+0x40/0x60 [ 161.291819][ C1] netlink_unicast+0xf28/0x1230 [ 161.296866][ C1] netlink_sendmsg+0x122f/0x13d0 [ 161.301990][ C1] ? netlink_getsockopt+0x990/0x990 [ 161.307374][ C1] ____sys_sendmsg+0x9c2/0xd60 [ 161.312302][ C1] ___sys_sendmsg+0x28d/0x3c0 [ 161.317171][ C1] ? filter_irq_stacks+0x60/0x1a0 [ 161.322451][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 161.328489][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 161.334525][ C1] __x64_sys_sendmsg+0x307/0x490 [ 161.339666][ C1] do_syscall_64+0x41/0xc0 [ 161.344224][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 161.350308][ C1] RIP: 0033:0x7f5053031429 [ 161.354860][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 161.374642][ C1] RSP: 002b:00007ffe367d9578 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.383184][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5053031429 [ 161.391309][ C1] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000016 [ 161.399424][ C1] RBP: 00007ffe367d95f0 R08: 0000000000027209 R09: 0000000000027209 [ 161.407546][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000f4240 [ 161.415662][ C1] R13: 00007ffe367d959c R14: 00007ffe367d95e0 R15: 00007ffe367d95d0 [ 161.423808][ C1] [ 161.427033][ C1] Kernel Offset: disabled [ 161.431419][ C1] Rebooting in 86400 seconds..