./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor460768777
<...>
forked to background, child pid 3183
no interfaces have a carrier
[ 21.745885][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.756242][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.251' (ECDSA) to the list of known hosts.
execve("./syz-executor460768777", ["./syz-executor460768777"], 0x7fff8bc4cef0 /* 10 vars */) = 0
brk(NULL) = 0x55555738a000
brk(0x55555738ac40) = 0x55555738ac40
arch_prctl(ARCH_SET_FS, 0x55555738a300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor460768777", 4096) = 27
brk(0x5555573abc40) = 0x5555573abc40
brk(0x5555573ac000) = 0x5555573ac000
mprotect(0x7fcfd3e39000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
recvfrom(4, [{nlmsg_len=2476, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3604}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x40\x01\x00\x00\xd8\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2476
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3604}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(4) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=9}) = 0
sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x22\x00\x05\x00\x00\x13\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x09\x00\x00\x00\x08\x00\x05\x00\x09\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5
sendto(5, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
recvfrom(5, [{nlmsg_len=2476, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1687024324}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x40\x01\x00\x00\xd8\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2476
recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1687024324}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(5) = 0
ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=9}) = 0
syzkaller login: [ 42.240874][ T3604] ------------[ cut here ]------------
[ 42.246506][ T3604] WARNING: CPU: 1 PID: 3604 at net/mac80211/cfg.c:3900 ieee80211_probe_client+0x706/0x800
[ 42.256431][ T3604] Modules linked in:
[ 42.261057][ T3604] CPU: 1 PID: 3604 Comm: syz-executor460 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 42.271246][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 42.281346][ T3604] RIP: 0010:ieee80211_probe_client+0x706/0x800
[ 42.287537][ T3604] Code: e9 fa 04 01 e8 5b 88 6b 00 e9 4e fe ff ff e8 71 74 ad f8 be 01 00 00 00 4c 89 ff e8 a4 73 80 fe e9 1a fe ff ff e8 5a 74 ad f8 <0f> 0b 41 bc ea ff ff ff e9 08 fe ff ff 48 89 ef e8 e5 cb f9 f8 e9
[ 42.307337][ T3604] RSP: 0018:ffffc9000383f4d8 EFLAGS: 00010293
[ 42.313439][ T3604] RAX: 0000000000000000 RBX: ffff88801ff24000 RCX: 0000000000000000
[ 42.321453][ T3604] RDX: ffff888025f88000 RSI: ffffffff88ce92b6 RDI: 0000000000000005
[ 42.329472][ T3604] RBP: ffff888079f73020 R08: 0000000000000005 R09: 0000000000000000
[ 42.337587][ T3604] R10: 0000000000000001 R11: 0000000000000008 R12: ffff888020070de0
[ 42.345569][ T3604] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc9000383f65c
[ 42.353721][ T3604] FS: 000055555738a300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 42.362685][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.369326][ T3604] CR2: 0000000000640180 CR3: 0000000071749000 CR4: 0000000000350ee0
[ 42.377344][ T3604] Call Trace:
[ 42.380607][ T3604]
[ 42.383531][ T3604] nl80211_probe_client+0x3a4/0xb90
[ 42.388790][ T3604] ? nl80211_connect+0x2320/0x2320
[ 42.393939][ T3604] ? nl80211_pre_doit+0x11c/0xab0
[ 42.399049][ T3604] genl_family_rcv_msg_doit+0x228/0x320
[ 42.404623][ T3604] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 42.412072][ T3604] ? ns_capable+0xd9/0x100
[ 42.416554][ T3604] genl_rcv_msg+0x328/0x580
[ 42.421060][ T3604] ? genl_get_cmd+0x480/0x480
[ 42.425732][ T3604] ? nl80211_connect+0x2320/0x2320
[ 42.430872][ T3604] ? lock_release+0x780/0x780
[ 42.435555][ T3604] netlink_rcv_skb+0x153/0x420
[ 42.440341][ T3604] ? genl_get_cmd+0x480/0x480
[ 42.445026][ T3604] ? netlink_ack+0xa80/0xa80
[ 42.449708][ T3604] ? netlink_deliver_tap+0x1b1/0xc40
[ 42.455029][ T3604] genl_rcv+0x24/0x40
[ 42.459090][ T3604] netlink_unicast+0x543/0x7f0
[ 42.463903][ T3604] ? netlink_attachskb+0x880/0x880
[ 42.469106][ T3604] ? __phys_addr+0xc4/0x140
[ 42.473642][ T3604] ? __phys_addr_symbol+0x2c/0x70
[ 42.478727][ T3604] ? __check_object_size+0x2de/0x700
[ 42.484048][ T3604] netlink_sendmsg+0x917/0xe10
[ 42.488871][ T3604] ? netlink_unicast+0x7f0/0x7f0
[ 42.493846][ T3604] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 42.499178][ T3604] ? netlink_unicast+0x7f0/0x7f0
[ 42.504164][ T3604] sock_sendmsg+0xcf/0x120
[ 42.508623][ T3604] ____sys_sendmsg+0x6eb/0x810
[ 42.513411][ T3604] ? copy_msghdr_from_user+0xfc/0x150
[ 42.518806][ T3604] ? kernel_sendmsg+0x50/0x50
[ 42.523496][ T3604] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 42.529503][ T3604] ___sys_sendmsg+0x110/0x1b0
[ 42.534189][ T3604] ? do_recvmmsg+0x6e0/0x6e0
[ 42.538815][ T3604] ? lock_release+0x780/0x780
[ 42.543499][ T3604] ? ptrace_stop.part.0+0x5ec/0xa80
[ 42.548756][ T3604] ? do_raw_spin_lock+0x120/0x2a0
[ 42.553804][ T3604] ? rwlock_bug.part.0+0x90/0x90
[ 42.558813][ T3604] ? _raw_spin_lock_irq+0x41/0x50
[ 42.563899][ T3604] ? __fget_light+0x20a/0x270
[ 42.568638][ T3604] __sys_sendmsg+0xf3/0x1c0
[ 42.573178][ T3604] ? __sys_sendmsg_sock+0x30/0x30
[ 42.578316][ T3604] ? lock_downgrade+0x6e0/0x6e0
[ 42.583212][ T3604] ? lockdep_hardirqs_on+0x79/0x100
[ 42.588475][ T3604] ? _raw_spin_unlock_irq+0x2a/0x40
[ 42.593718][ T3604] ? ptrace_notify+0xfa/0x140
[ 42.598480][ T3604] do_syscall_64+0x35/0xb0
[ 42.602941][ T3604] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 42.608931][ T3604] RIP: 0033:0x7fcfd3dccd19
[ 42.613362][ T3604] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.633261][ T3604] RSP: 002b:00007fff422dcfb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 42.641702][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcfd3dccd19
[ 42.649704][ T3604] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 42.657712][ T3604] RBP: 00007fcfd3d906e0 R08: 0000000000000000 R09: 0000000000000000
[ 42.665755][ T3604] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fcfd3d90770
[ 42.673806][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.681903][ T3604]
[ 42.684914][ T3604] Kernel panic - not syncing: panic_on_warn set ...
[ 42.691493][ T3604] CPU: 1 PID: 3604 Comm: syz-executor460 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 42.701629][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 42.711667][ T3604] Call Trace:
[ 42.715098][ T3604]
[ 42.718007][ T3604] dump_stack_lvl+0xcd/0x134
[ 42.722586][ T3604] panic+0x2c8/0x627
[ 42.726464][ T3604] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 42.732437][ T3604] ? __warn.cold+0x248/0x2c4
[ 42.737019][ T3604] ? ieee80211_probe_client+0x706/0x800
[ 42.742559][ T3604] __warn.cold+0x259/0x2c4
[ 42.746969][ T3604] ? ieee80211_probe_client+0x706/0x800
[ 42.752511][ T3604] report_bug+0x1bc/0x210
[ 42.756855][ T3604] handle_bug+0x3c/0x60
[ 42.761017][ T3604] exc_invalid_op+0x14/0x40
[ 42.765526][ T3604] asm_exc_invalid_op+0x16/0x20
[ 42.770372][ T3604] RIP: 0010:ieee80211_probe_client+0x706/0x800
[ 42.776531][ T3604] Code: e9 fa 04 01 e8 5b 88 6b 00 e9 4e fe ff ff e8 71 74 ad f8 be 01 00 00 00 4c 89 ff e8 a4 73 80 fe e9 1a fe ff ff e8 5a 74 ad f8 <0f> 0b 41 bc ea ff ff ff e9 08 fe ff ff 48 89 ef e8 e5 cb f9 f8 e9
[ 42.796224][ T3604] RSP: 0018:ffffc9000383f4d8 EFLAGS: 00010293
[ 42.802292][ T3604] RAX: 0000000000000000 RBX: ffff88801ff24000 RCX: 0000000000000000
[ 42.810263][ T3604] RDX: ffff888025f88000 RSI: ffffffff88ce92b6 RDI: 0000000000000005
[ 42.818231][ T3604] RBP: ffff888079f73020 R08: 0000000000000005 R09: 0000000000000000
[ 42.826229][ T3604] R10: 0000000000000001 R11: 0000000000000008 R12: ffff888020070de0
[ 42.834199][ T3604] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc9000383f65c
[ 42.842177][ T3604] ? ieee80211_probe_client+0x706/0x800
[ 42.847728][ T3604] ? ieee80211_probe_client+0x706/0x800
[ 42.853281][ T3604] nl80211_probe_client+0x3a4/0xb90
[ 42.858580][ T3604] ? nl80211_connect+0x2320/0x2320
[ 42.863706][ T3604] ? nl80211_pre_doit+0x11c/0xab0
[ 42.868740][ T3604] genl_family_rcv_msg_doit+0x228/0x320
[ 42.874287][ T3604] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 42.881666][ T3604] ? ns_capable+0xd9/0x100
[ 42.886089][ T3604] genl_rcv_msg+0x328/0x580
[ 42.890594][ T3604] ? genl_get_cmd+0x480/0x480
[ 42.895272][ T3604] ? nl80211_connect+0x2320/0x2320
[ 42.900387][ T3604] ? lock_release+0x780/0x780
[ 42.905066][ T3604] netlink_rcv_skb+0x153/0x420
[ 42.909846][ T3604] ? genl_get_cmd+0x480/0x480
[ 42.914527][ T3604] ? netlink_ack+0xa80/0xa80
[ 42.919119][ T3604] ? netlink_deliver_tap+0x1b1/0xc40
[ 42.924400][ T3604] genl_rcv+0x24/0x40
[ 42.928459][ T3604] netlink_unicast+0x543/0x7f0
[ 42.933216][ T3604] ? netlink_attachskb+0x880/0x880
[ 42.938318][ T3604] ? __phys_addr+0xc4/0x140
[ 42.942813][ T3604] ? __phys_addr_symbol+0x2c/0x70
[ 42.947923][ T3604] ? __check_object_size+0x2de/0x700
[ 42.953211][ T3604] netlink_sendmsg+0x917/0xe10
[ 42.957987][ T3604] ? netlink_unicast+0x7f0/0x7f0
[ 42.963025][ T3604] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 42.968314][ T3604] ? netlink_unicast+0x7f0/0x7f0
[ 42.973253][ T3604] sock_sendmsg+0xcf/0x120
[ 42.977667][ T3604] ____sys_sendmsg+0x6eb/0x810
[ 42.982426][ T3604] ? copy_msghdr_from_user+0xfc/0x150
[ 42.987796][ T3604] ? kernel_sendmsg+0x50/0x50
[ 42.992481][ T3604] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 42.998469][ T3604] ___sys_sendmsg+0x110/0x1b0
[ 43.003147][ T3604] ? do_recvmmsg+0x6e0/0x6e0
[ 43.007756][ T3604] ? lock_release+0x780/0x780
[ 43.012432][ T3604] ? ptrace_stop.part.0+0x5ec/0xa80
[ 43.017631][ T3604] ? do_raw_spin_lock+0x120/0x2a0
[ 43.022647][ T3604] ? rwlock_bug.part.0+0x90/0x90
[ 43.027573][ T3604] ? _raw_spin_lock_irq+0x41/0x50
[ 43.032591][ T3604] ? __fget_light+0x20a/0x270
[ 43.037261][ T3604] __sys_sendmsg+0xf3/0x1c0
[ 43.041754][ T3604] ? __sys_sendmsg_sock+0x30/0x30
[ 43.046771][ T3604] ? lock_downgrade+0x6e0/0x6e0
[ 43.051629][ T3604] ? lockdep_hardirqs_on+0x79/0x100
[ 43.056826][ T3604] ? _raw_spin_unlock_irq+0x2a/0x40
[ 43.062199][ T3604] ? ptrace_notify+0xfa/0x140
[ 43.066965][ T3604] do_syscall_64+0x35/0xb0
[ 43.071376][ T3604] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 43.077271][ T3604] RIP: 0033:0x7fcfd3dccd19
[ 43.081769][ T3604] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.101636][ T3604] RSP: 002b:00007fff422dcfb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 43.110309][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcfd3dccd19
[ 43.118275][ T3604] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 43.126234][ T3604] RBP: 00007fcfd3d906e0 R08: 0000000000000000 R09: 0000000000000000
[ 43.134190][ T3604] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fcfd3d90770
[ 43.142146][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 43.150125][ T3604]
[ 43.153777][ T3604] Kernel Offset: disabled
[ 43.158151][ T3604] Rebooting in 86400 seconds..