./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor868164150 <...> [ 97.417111][ T925] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. execve("./syz-executor868164150", ["./syz-executor868164150"], 0x7ffcd9d521c0 /* 10 vars */) = 0 brk(NULL) = 0x555555d1d000 brk(0x555555d1dd00) = 0x555555d1dd00 arch_prctl(ARCH_SET_FS, 0x555555d1d380) = 0 set_tid_address(0x555555d1d650) = 5073 set_robust_list(0x555555d1d660, 24) = 0 rseq(0x555555d1dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor868164150", 4096) = 27 getrandom("\x08\x61\xa1\x4b\x78\xb3\xdf\x41", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555d1dd00 brk(0x555555d3ed00) = 0x555555d3ed00 brk(0x555555d3f000) = 0x555555d3f000 mprotect(0x7f1b87b69000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5074 attached , child_tidptr=0x555555d1d650) = 5074 [pid 5074] set_robust_list(0x555555d1d660, 24) = 0 [pid 5074] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] setsid() = 1 [pid 5074] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5074] unshare(CLONE_NEWNS) = 0 [pid 5074] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5074] unshare(CLONE_NEWIPC) = 0 [pid 5074] unshare(CLONE_NEWCGROUP) = 0 [pid 5074] unshare(CLONE_NEWUTS) = 0 [pid 5074] unshare(CLONE_SYSVSEM) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "16777216", 8) = 8 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "536870912", 9) = 9 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1024", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "8192", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1024", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1024", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5074] close(3) = 0 [pid 5074] getpid() = 1 [pid 5074] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 90 90 e8 18 4e 98 f7 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 100.060821][ T5074] RSP: 0018:ffffc900038df330 EFLAGS: 00010282 [ 100.067060][ T5074] RAX: 0000000000000000 RBX: ffff8880761b8c80 RCX: ffffffff814db209 [ 100.075110][ T5074] RDX: ffff88801ebd5940 RSI: ffffffff814db216 RDI: 0000000000000001 [ 100.083343][ T5074] RBP: 0000000000000a00 R08: 0000000000000001 R09: 0000000000000000 [ 100.091436][ T5074] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888075800e20 [ 100.099497][ T5074] R13: ffff8880761ba6e8 R14: ffff8880761b94d0 R15: 0000000000000000 [ 100.107560][ T5074] FS: 0000555555d1d380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 100.116567][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.123279][ T5074] CR2: 00007ffcd83fbff8 CR3: 000000007af32000 CR4: 00000000003506f0 [ 100.131443][ T5074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.139618][ T5074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.147718][ T5074] Call Trace: [ 100.151110][ T5074] [ 100.154243][ T5074] ? show_regs+0x8f/0xa0 [ 100.158543][ T5074] ? __warn+0xe6/0x390 [ 100.162639][ T5074] ? __wake_up_klogd.part.0+0x99/0xf0 [ 100.168122][ T5074] ? ieee80211_bss_info_change_notify+0x2cf/0x830 [ 100.174620][ T5074] ? report_bug+0x3bc/0x580 [ 100.179160][ T5074] ? handle_bug+0x3d/0x70 [ 100.183531][ T5074] ? exc_invalid_op+0x17/0x40 [ 100.188321][ T5074] ? asm_exc_invalid_op+0x1a/0x20 [ 100.193504][ T5074] ? __warn_printk+0x199/0x350 [ 100.198378][ T5074] ? __warn_printk+0x1a6/0x350 [ 100.203240][ T5074] ? ieee80211_bss_info_change_notify+0x2cf/0x830 [ 100.209782][ T5074] ieee80211_ibss_disconnect+0x45b/0x8e0 [ 100.215605][ T5074] ieee80211_ibss_leave+0x16/0x160 [ 100.220761][ T5074] cfg80211_leave_ibss+0x1a4/0x440 [ 100.225960][ T5074] cfg80211_change_iface+0x41c/0xd50 [ 100.231314][ T5074] nl80211_set_interface+0x6fa/0x9a0 [ 100.236706][ T5074] ? nl80211_notify_iface+0x190/0x190 [ 100.242153][ T5074] ? nl80211_pre_doit+0x71a/0xb10 [ 100.247268][ T5074] ? nl80211_pre_doit+0x1b0/0xb10 [ 100.252358][ T5074] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 100.257993][ T5074] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 100.265529][ T5074] ? ns_capable+0xd5/0x110 [ 100.270018][ T5074] genl_rcv_msg+0x561/0x800 [ 100.274662][ T5074] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 100.280623][ T5074] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 100.286741][ T5074] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 100.292978][ T5074] ? nl80211_notify_iface+0x190/0x190 [ 100.298828][ T5074] ? nl80211_get_power_save+0x480/0x480 [ 100.304476][ T5074] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 100.310570][ T5074] netlink_rcv_skb+0x16b/0x440 [ 100.315447][ T5074] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 100.321424][ T5074] ? netlink_ack+0x1380/0x1380 [ 100.326465][ T5074] ? down_read+0xc9/0x330 [ 100.330857][ T5074] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 100.336790][ T5074] ? netlink_deliver_tap+0x1a0/0xd00 [ 100.342163][ T5074] ? _copy_from_iter+0x2c1/0x10f0 [ 100.347515][ T5074] genl_rcv+0x28/0x40 [ 100.351563][ T5074] netlink_unicast+0x53b/0x810 [ 100.356621][ T5074] ? netlink_attachskb+0x880/0x880 [ 100.361819][ T5074] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.367898][ T5074] ? __phys_addr_symbol+0x30/0x70 [ 100.372982][ T5074] ? __check_object_size+0x323/0x730 [ 100.378368][ T5074] netlink_sendmsg+0x8b7/0xd70 [ 100.383251][ T5074] ? netlink_unicast+0x810/0x810 [ 100.388355][ T5074] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 100.393702][ T5074] ? netlink_unicast+0x810/0x810 [ 100.398796][ T5074] __sock_sendmsg+0xd5/0x180 [ 100.403549][ T5074] ____sys_sendmsg+0x6ac/0x940 [ 100.408543][ T5074] ? copy_msghdr_from_user+0x10b/0x160 [ 100.414590][ T5074] ? kernel_sendmsg+0x50/0x50 [ 100.419516][ T5074] ? hlock_class+0x4e/0x130 [ 100.424408][ T5074] ___sys_sendmsg+0x135/0x1d0 [ 100.429286][ T5074] ? do_recvmmsg+0x740/0x740 [ 100.433985][ T5074] ? recalc_sigpending_tsk+0x187/0x1d0 [ 100.439824][ T5074] ? __fget_light+0x1fc/0x260 [ 100.444765][ T5074] __sys_sendmsg+0x117/0x1e0 [ 100.449893][ T5074] ? __sys_sendmsg_sock+0x30/0x30 [ 100.455089][ T5074] ? ptrace_notify+0xf4/0x130 [ 100.459892][ T5074] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 100.466244][ T5074] do_syscall_64+0x40/0x110 [ 100.470816][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 100.476845][ T5074] RIP: 0033:0x7f1b87af0db9 [ 100.481305][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 100.501014][ T5074] RSP: 002b:00007ffcd83fd068 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.509577][ T5074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b87af0db9 [ 100.517659][ T5074] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000005 [ 100.525713][ T5074] RBP: 0000000000000000 R08: 0000555500000000 R09: 0000555500000000 [ 100.533761][ T5074] R10: 0000555500000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.541929][ T5074] R13: 0000000000000003 R14: 0000000000050012 R15: 00007ffcd83fd0aa [ 100.549991][ T5074] [ 100.553028][ T5074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.560576][ T5074] CPU: 1 PID: 5074 Comm: syz-executor868 Not tainted 6.7.0-rc1-syzkaller-00428-g750011e239a5 #0 [ 100.571124][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 100.581206][ T5074] Call Trace: [ 100.584522][ T5074] [ 100.587470][ T5074] dump_stack_lvl+0xd9/0x1b0 [ 100.592174][ T5074] panic+0x6dc/0x790 [ 100.596097][ T5074] ? panic_smp_self_stop+0xa0/0xa0 [ 100.601258][ T5074] ? show_trace_log_lvl+0x363/0x4f0 [ 100.606501][ T5074] ? check_panic_on_warn+0x1f/0xb0 [ 100.611639][ T5074] ? ieee80211_bss_info_change_notify+0x2cf/0x830 [ 100.618102][ T5074] check_panic_on_warn+0xab/0xb0 [ 100.623253][ T5074] __warn+0xf2/0x390 [ 100.627200][ T5074] ? __wake_up_klogd.part.0+0x99/0xf0 [ 100.632695][ T5074] ? ieee80211_bss_info_change_notify+0x2cf/0x830 [ 100.639140][ T5074] report_bug+0x3bc/0x580 [ 100.643514][ T5074] handle_bug+0x3d/0x70 [ 100.647708][ T5074] exc_invalid_op+0x17/0x40 [ 100.652422][ T5074] asm_exc_invalid_op+0x1a/0x20 [ 100.657573][ T5074] RIP: 0010:ieee80211_bss_info_change_notify+0x2cf/0x830 [ 100.664746][ T5074] Code: 00 e8 45 4e 98 f7 48 8b 74 24 08 48 89 74 24 08 e8 36 4e 98 f7 8b 14 24 48 c7 c7 e0 dc 0b 8c 48 8b 74 24 08 e8 92 65 5e f7 90 <0f> 0b 90 90 e8 18 4e 98 f7 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 100.684481][ T5074] RSP: 0018:ffffc900038df330 EFLAGS: 00010282 [ 100.690616][ T5074] RAX: 0000000000000000 RBX: ffff8880761b8c80 RCX: ffffffff814db209 [ 100.699406][ T5074] RDX: ffff88801ebd5940 RSI: ffffffff814db216 RDI: 0000000000000001 [ 100.707419][ T5074] RBP: 0000000000000a00 R08: 0000000000000001 R09: 0000000000000000 [ 100.715606][ T5074] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888075800e20 [ 100.723653][ T5074] R13: ffff8880761ba6e8 R14: ffff8880761b94d0 R15: 0000000000000000 [ 100.731686][ T5074] ? __warn_printk+0x199/0x350 [ 100.736495][ T5074] ? __warn_printk+0x1a6/0x350 [ 100.741310][ T5074] ieee80211_ibss_disconnect+0x45b/0x8e0 [ 100.746983][ T5074] ieee80211_ibss_leave+0x16/0x160 [ 100.752235][ T5074] cfg80211_leave_ibss+0x1a4/0x440 [ 100.757738][ T5074] cfg80211_change_iface+0x41c/0xd50 [ 100.763111][ T5074] nl80211_set_interface+0x6fa/0x9a0 [ 100.768637][ T5074] ? nl80211_notify_iface+0x190/0x190 [ 100.774147][ T5074] ? nl80211_pre_doit+0x71a/0xb10 [ 100.779225][ T5074] ? nl80211_pre_doit+0x1b0/0xb10 [ 100.784344][ T5074] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 100.790037][ T5074] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 100.797463][ T5074] ? ns_capable+0xd5/0x110 [ 100.801967][ T5074] genl_rcv_msg+0x561/0x800 [ 100.806620][ T5074] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 100.812571][ T5074] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 100.818607][ T5074] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 100.824793][ T5074] ? nl80211_notify_iface+0x190/0x190 [ 100.830642][ T5074] ? nl80211_get_power_save+0x480/0x480 [ 100.836223][ T5074] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 100.842262][ T5074] netlink_rcv_skb+0x16b/0x440 [ 100.847078][ T5074] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 100.853004][ T5074] ? netlink_ack+0x1380/0x1380 [ 100.857824][ T5074] ? down_read+0xc9/0x330 [ 100.862176][ T5074] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 100.867924][ T5074] ? netlink_deliver_tap+0x1a0/0xd00 [ 100.873288][ T5074] ? _copy_from_iter+0x2c1/0x10f0 [ 100.878372][ T5074] genl_rcv+0x28/0x40 [ 100.882379][ T5074] netlink_unicast+0x53b/0x810 [ 100.887204][ T5074] ? netlink_attachskb+0x880/0x880 [ 100.892355][ T5074] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.898285][ T5074] ? __phys_addr_symbol+0x30/0x70 [ 100.903367][ T5074] ? __check_object_size+0x323/0x730 [ 100.908692][ T5074] netlink_sendmsg+0x8b7/0xd70 [ 100.913510][ T5074] ? netlink_unicast+0x810/0x810 [ 100.918496][ T5074] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 100.923849][ T5074] ? netlink_unicast+0x810/0x810 [ 100.928831][ T5074] __sock_sendmsg+0xd5/0x180 [ 100.933455][ T5074] ____sys_sendmsg+0x6ac/0x940 [ 100.938256][ T5074] ? copy_msghdr_from_user+0x10b/0x160 [ 100.943761][ T5074] ? kernel_sendmsg+0x50/0x50 [ 100.948466][ T5074] ? hlock_class+0x4e/0x130 [ 100.953026][ T5074] ___sys_sendmsg+0x135/0x1d0 [ 100.957790][ T5074] ? do_recvmmsg+0x740/0x740 [ 100.963088][ T5074] ? recalc_sigpending_tsk+0x187/0x1d0 [ 100.968596][ T5074] ? __fget_light+0x1fc/0x260 [ 100.973309][ T5074] __sys_sendmsg+0x117/0x1e0 [ 100.977945][ T5074] ? __sys_sendmsg_sock+0x30/0x30 [ 100.983034][ T5074] ? ptrace_notify+0xf4/0x130 [ 100.987915][ T5074] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 100.994337][ T5074] do_syscall_64+0x40/0x110 [ 100.998905][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 101.004944][ T5074] RIP: 0033:0x7f1b87af0db9 [ 101.009444][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 101.029354][ T5074] RSP: 002b:00007ffcd83fd068 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.037801][ T5074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b87af0db9 [ 101.045809][ T5074] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000005 [ 101.053800][ T5074] RBP: 0000000000000000 R08: 0000555500000000 R09: 0000555500000000 [ 101.061790][ T5074] R10: 0000555500000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.069783][ T5074] R13: 0000000000000003 R14: 0000000000050012 R15: 00007ffcd83fd0aa [ 101.077886][ T5074] [ 101.081116][ T5074] Kernel Offset: disabled [ 101.085570][ T5074] Rebooting in 86400 seconds..