./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1780037304
<...>
Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts.
execve("./syz-executor1780037304", ["./syz-executor1780037304"], 0x7ffc58316240 /* 10 vars */) = 0
brk(NULL) = 0x555555df6000
brk(0x555555df6c40) = 0x555555df6c40
arch_prctl(ARCH_SET_FS, 0x555555df6300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1780037304", 4096) = 28
brk(0x555555e17c40) = 0x555555e17c40
brk(0x555555e18000) = 0x555555e18000
mprotect(0x7f170db85000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
recvfrom(4, [{nlmsg_len=2376, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3608}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x37\x01\x00\x00\x74\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2376
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3608}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(4) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=8}) = 0
sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x22\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x08\x00\x00\x00\x08\x00\x05\x00\x03\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
recvfrom(4, [{nlmsg_len=2376, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-80862559}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x37\x01\x00\x00\x74\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2376
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-80862559}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(4) = 0
syzkaller login: [ 36.286011][ T3608] ------------[ cut here ]------------
[ 36.286021][ T3608] WARNING: CPU: 0 PID: 3608 at net/mac80211/cfg.c:3844 ieee80211_probe_client+0x706/0x800
[ 36.301917][ T3608] Modules linked in:
[ 36.305796][ T3608] CPU: 0 PID: 3608 Comm: syz-executor178 Not tainted 5.19.0-rc1-syzkaller-00024-g6bfb56e93bce #0
[ 36.316866][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 36.327361][ T3608] RIP: 0010:ieee80211_probe_client+0x706/0x800
[ 36.333753][ T3608] Code: a3 de 04 01 e8 47 6f 6a 00 e9 4e fe ff ff e8 c1 7e b2 f8 be 01 00 00 00 4c 89 ff e8 44 e5 84 fe e9 1a fe ff ff e8 aa 7e b2 f8 <0f> 0b 41 bc ea ff ff ff e9 08 fe ff ff 48 89 ef e8 85 42 ff f8 e9
[ 36.353590][ T3608] RSP: 0018:ffffc9000330f4f8 EFLAGS: 00010293
[ 36.359657][ T3608] RAX: 0000000000000000 RBX: ffff88801f86c000 RCX: 0000000000000000
[ 36.367725][ T3608] RDX: ffff888021181d80 RSI: ffffffff88c7f7c6 RDI: 0000000000000005
[ 36.375809][ T3608] RBP: ffff888079351c5c R08: 0000000000000005 R09: 0000000000000000
[ 36.383980][ T3608] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801fbf0de0
[ 36.392054][ T3608] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc9000330f67c
[ 36.400044][ T3608] FS: 0000555555df6300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 36.409053][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.415770][ T3608] CR2: 00007fc7857f6268 CR3: 000000007b7a7000 CR4: 0000000000350ef0
[ 36.423833][ T3608] Call Trace:
[ 36.427118][ T3608]
[ 36.430040][ T3608] nl80211_probe_client+0x3a9/0xba0
[ 36.435345][ T3608] ? nl80211_probe_mesh_link+0xa30/0xa30
[ 36.441012][ T3608] ? nl80211_pre_doit+0x100/0x600
[ 36.446121][ T3608] genl_family_rcv_msg_doit+0x228/0x320
[ 36.451809][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 36.459186][ T3608] ? ns_capable+0xd9/0x100
[ 36.463946][ T3608] genl_rcv_msg+0x328/0x580
[ 36.468466][ T3608] ? genl_get_cmd+0x480/0x480
[ 36.473234][ T3608] ? nl80211_probe_mesh_link+0xa30/0xa30
[ 36.478938][ T3608] ? lock_release+0x780/0x780
[ 36.483739][ T3608] netlink_rcv_skb+0x153/0x420
[ 36.488517][ T3608] ? genl_get_cmd+0x480/0x480
[ 36.493302][ T3608] ? netlink_ack+0xa80/0xa80
[ 36.497928][ T3608] ? netlink_deliver_tap+0x1b1/0xc40
[ 36.503307][ T3608] genl_rcv+0x24/0x40
[ 36.507315][ T3608] netlink_unicast+0x543/0x7f0
[ 36.512185][ T3608] ? netlink_attachskb+0x880/0x880
[ 36.517333][ T3608] ? __phys_addr+0xc4/0x140
[ 36.521906][ T3608] ? __phys_addr_symbol+0x2c/0x70
[ 36.526959][ T3608] ? __check_object_size+0x353/0x7a0
[ 36.532409][ T3608] netlink_sendmsg+0x917/0xe10
[ 36.537225][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 36.542266][ T3608] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 36.547594][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 36.552634][ T3608] sock_sendmsg+0xcf/0x120
[ 36.557095][ T3608] ____sys_sendmsg+0x6eb/0x810
[ 36.561981][ T3608] ? kernel_sendmsg+0x50/0x50
[ 36.566693][ T3608] ? do_recvmmsg+0x6d0/0x6d0
[ 36.571321][ T3608] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 36.577431][ T3608] ? lockdep_hardirqs_on+0x79/0x100
[ 36.582673][ T3608] ___sys_sendmsg+0xf3/0x170
[ 36.587252][ T3608] ? sendmsg_copy_msghdr+0x160/0x160
[ 36.592648][ T3608] ? lock_release+0x780/0x780
[ 36.597362][ T3608] ? ptrace_stop.part.0+0x5ec/0xa80
[ 36.602680][ T3608] ? do_raw_spin_lock+0x120/0x2a0
[ 36.607745][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 36.612799][ T3608] ? _raw_spin_lock_irq+0x41/0x50
[ 36.617868][ T3608] ? __fget_light+0x20a/0x270
[ 36.622649][ T3608] __x64_sys_sendmsg+0x132/0x220
[ 36.627619][ T3608] ? __sys_sendmsg+0x1b0/0x1b0
[ 36.632501][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 36.637762][ T3608] ? ptrace_notify+0xfa/0x140
[ 36.642547][ T3608] do_syscall_64+0x35/0xb0
[ 36.646995][ T3608] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 36.652970][ T3608] RIP: 0033:0x7f170db18e59
[ 36.657403][ T3608] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 36.677123][ T3608] RSP: 002b:00007fffc2f1acf8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 36.685657][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f170db18e59
[ 36.693743][ T3608] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[ 36.701857][ T3608] RBP: 00007f170dadc820 R08: 000000000000000a R09: 0000000000000000
[ 36.709843][ T3608] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f170dadc8b0
[ 36.717902][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 36.726008][ T3608]
[ 36.729015][ T3608] Kernel panic - not syncing: panic_on_warn set ...
[ 36.735588][ T3608] CPU: 0 PID: 3608 Comm: syz-executor178 Not tainted 5.19.0-rc1-syzkaller-00024-g6bfb56e93bce #0
[ 36.746080][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 36.756130][ T3608] Call Trace:
[ 36.759402][ T3608]
[ 36.762330][ T3608] dump_stack_lvl+0xcd/0x134
[ 36.766926][ T3608] panic+0x2d7/0x636
[ 36.770816][ T3608] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 36.776802][ T3608] ? __warn.cold+0x1d9/0x2cd
[ 36.781401][ T3608] ? ieee80211_probe_client+0x706/0x800
[ 36.786959][ T3608] __warn.cold+0x1ea/0x2cd
[ 36.791378][ T3608] ? ieee80211_probe_client+0x706/0x800
[ 36.796930][ T3608] report_bug+0x1bc/0x210
[ 36.801287][ T3608] handle_bug+0x3c/0x60
[ 36.805449][ T3608] exc_invalid_op+0x14/0x40
[ 36.809955][ T3608] asm_exc_invalid_op+0x1b/0x20
[ 36.814803][ T3608] RIP: 0010:ieee80211_probe_client+0x706/0x800
[ 36.820960][ T3608] Code: a3 de 04 01 e8 47 6f 6a 00 e9 4e fe ff ff e8 c1 7e b2 f8 be 01 00 00 00 4c 89 ff e8 44 e5 84 fe e9 1a fe ff ff e8 aa 7e b2 f8 <0f> 0b 41 bc ea ff ff ff e9 08 fe ff ff 48 89 ef e8 85 42 ff f8 e9
[ 36.840572][ T3608] RSP: 0018:ffffc9000330f4f8 EFLAGS: 00010293
[ 36.846637][ T3608] RAX: 0000000000000000 RBX: ffff88801f86c000 RCX: 0000000000000000
[ 36.854606][ T3608] RDX: ffff888021181d80 RSI: ffffffff88c7f7c6 RDI: 0000000000000005
[ 36.862570][ T3608] RBP: ffff888079351c5c R08: 0000000000000005 R09: 0000000000000000
[ 36.870533][ T3608] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801fbf0de0
[ 36.878500][ T3608] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc9000330f67c
[ 36.886479][ T3608] ? ieee80211_probe_client+0x706/0x800
[ 36.892038][ T3608] ? ieee80211_probe_client+0x706/0x800
[ 36.897587][ T3608] nl80211_probe_client+0x3a9/0xba0
[ 36.902789][ T3608] ? nl80211_probe_mesh_link+0xa30/0xa30
[ 36.908426][ T3608] ? nl80211_pre_doit+0x100/0x600
[ 36.913453][ T3608] genl_family_rcv_msg_doit+0x228/0x320
[ 36.919003][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 36.926383][ T3608] ? ns_capable+0xd9/0x100
[ 36.930806][ T3608] genl_rcv_msg+0x328/0x580
[ 36.935308][ T3608] ? genl_get_cmd+0x480/0x480
[ 36.939983][ T3608] ? nl80211_probe_mesh_link+0xa30/0xa30
[ 36.945614][ T3608] ? lock_release+0x780/0x780
[ 36.950298][ T3608] netlink_rcv_skb+0x153/0x420
[ 36.955057][ T3608] ? genl_get_cmd+0x480/0x480
[ 36.959735][ T3608] ? netlink_ack+0xa80/0xa80
[ 36.964330][ T3608] ? netlink_deliver_tap+0x1b1/0xc40
[ 36.969618][ T3608] genl_rcv+0x24/0x40
[ 36.973595][ T3608] netlink_unicast+0x543/0x7f0
[ 36.978360][ T3608] ? netlink_attachskb+0x880/0x880
[ 36.983464][ T3608] ? __phys_addr+0xc4/0x140
[ 36.987969][ T3608] ? __phys_addr_symbol+0x2c/0x70
[ 36.992996][ T3608] ? __check_object_size+0x353/0x7a0
[ 36.998286][ T3608] netlink_sendmsg+0x917/0xe10
[ 37.003058][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 37.008001][ T3608] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 37.013294][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 37.018232][ T3608] sock_sendmsg+0xcf/0x120
[ 37.022653][ T3608] ____sys_sendmsg+0x6eb/0x810
[ 37.027420][ T3608] ? kernel_sendmsg+0x50/0x50
[ 37.032094][ T3608] ? do_recvmmsg+0x6d0/0x6d0
[ 37.036684][ T3608] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 37.042667][ T3608] ? lockdep_hardirqs_on+0x79/0x100
[ 37.047866][ T3608] ___sys_sendmsg+0xf3/0x170
[ 37.052455][ T3608] ? sendmsg_copy_msghdr+0x160/0x160
[ 37.057755][ T3608] ? lock_release+0x780/0x780
[ 37.062437][ T3608] ? ptrace_stop.part.0+0x5ec/0xa80
[ 37.067635][ T3608] ? do_raw_spin_lock+0x120/0x2a0
[ 37.072657][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 37.077596][ T3608] ? _raw_spin_lock_irq+0x41/0x50
[ 37.082631][ T3608] ? __fget_light+0x20a/0x270
[ 37.087315][ T3608] __x64_sys_sendmsg+0x132/0x220
[ 37.092251][ T3608] ? __sys_sendmsg+0x1b0/0x1b0
[ 37.097031][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 37.102228][ T3608] ? ptrace_notify+0xfa/0x140
[ 37.106915][ T3608] do_syscall_64+0x35/0xb0
[ 37.111337][ T3608] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 37.117236][ T3608] RIP: 0033:0x7f170db18e59
[ 37.121655][ T3608] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 37.141266][ T3608] RSP: 002b:00007fffc2f1acf8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 37.149682][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f170db18e59
[ 37.157649][ T3608] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[ 37.165615][ T3608] RBP: 00007f170dadc820 R08: 000000000000000a R09: 0000000000000000
[ 37.173582][ T3608] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f170dadc8b0
[ 37.181548][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 37.189540][ T3608]
[ 37.193164][ T3608] Kernel Offset: disabled
[ 37.197512][ T3608] Rebooting in 86400 seconds..