./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2757776866 <...> forked to background, child pid 3182 no interfaces have a carrier [ 28.771516][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.782699][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.62' (ECDSA) to the list of known hosts. execve("./syz-executor2757776866", ["./syz-executor2757776866"], 0x7fff28753a90 /* 10 vars */) = 0 brk(NULL) = 0x5555556e0000 brk(0x5555556e0c40) = 0x5555556e0c40 arch_prctl(ARCH_SET_FS, 0x5555556e0300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2757776866", 4096) = 28 brk(0x555555701c40) = 0x555555701c40 brk(0x555555702000) = 0x555555702000 mprotect(0x7f98d74a0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3611 attached , child_tidptr=0x5555556e05d0) = 3611 [pid 3611] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3611] setsid() = 1 [pid 3611] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3611] unshare(CLONE_NEWNS) = 0 [pid 3611] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3611] unshare(CLONE_NEWIPC) = 0 [pid 3611] unshare(CLONE_NEWCGROUP) = 0 [pid 3611] unshare(CLONE_NEWUTS) = 0 [pid 3611] unshare(CLONE_SYSVSEM) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "16777216", 8) = 8 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "536870912", 9) = 9 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "8192", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3611] close(3) = 0 [pid 3611] getpid() = 1 [pid 3611] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 30 fb ff ff e8 0a ac b8 f8 e8 c5 e3 b9 00 31 ff 41 89 c6 [ 50.987459][ T3613] RSP: 0018:ffffc90002f2f520 EFLAGS: 00010286 [ 50.993831][ T3613] RAX: 0000000000000000 RBX: ffff88807cc94c80 RCX: 0000000000000000 [ 51.001970][ T3613] RDX: ffff88801e921d40 RSI: ffffffff81610778 RDI: fffff520005e5e96 [ 51.010097][ T3613] RBP: ffff88807cc94000 R08: 0000000000000005 R09: 0000000000000000 [ 51.018137][ T3613] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000002000000 [ 51.026122][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807c4e0de0 [ 51.034167][ T3613] FS: 00005555556e0300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 51.043172][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.049859][ T3613] CR2: 0000000000640940 CR3: 000000007c22d000 CR4: 00000000003506e0 [ 51.057917][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.065899][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.073955][ T3613] Call Trace: [ 51.077263][ T3613] [ 51.080193][ T3613] ieee80211_set_mcast_rate+0x39/0x40 [ 51.085564][ T3613] ? ieee80211_copy_mbssid_beacon+0x270/0x270 [ 51.091728][ T3613] nl80211_set_mcast_rate+0x317/0x610 [ 51.097209][ T3613] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 51.103845][ T3613] ? nl80211_pre_doit+0x11c/0xaa0 [ 51.108989][ T3613] genl_family_rcv_msg_doit+0x228/0x320 [ 51.114581][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 51.122031][ T3613] ? ns_capable+0xd9/0x100 [ 51.126491][ T3613] genl_rcv_msg+0x328/0x580 [ 51.131155][ T3613] ? genl_get_cmd+0x480/0x480 [ 51.135864][ T3613] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 51.142540][ T3613] ? lock_release+0x780/0x780 [ 51.147398][ T3613] netlink_rcv_skb+0x153/0x420 [ 51.152183][ T3613] ? genl_get_cmd+0x480/0x480 [ 51.156871][ T3613] ? netlink_ack+0xa80/0xa80 [ 51.161573][ T3613] ? netlink_deliver_tap+0x1b1/0xc40 [ 51.166953][ T3613] genl_rcv+0x24/0x40 [ 51.170990][ T3613] netlink_unicast+0x543/0x7f0 [ 51.175804][ T3613] ? netlink_attachskb+0x880/0x880 [ 51.181028][ T3613] ? __virt_addr_valid+0x5d/0x2d0 [ 51.186087][ T3613] ? __phys_addr_symbol+0x2c/0x70 [ 51.191211][ T3613] ? __check_object_size+0x2de/0x700 [ 51.196523][ T3613] netlink_sendmsg+0x917/0xe10 [ 51.201388][ T3613] ? netlink_unicast+0x7f0/0x7f0 [ 51.206389][ T3613] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 51.211775][ T3613] ? netlink_unicast+0x7f0/0x7f0 [ 51.216854][ T3613] sock_sendmsg+0xcf/0x120 [ 51.221428][ T3613] ____sys_sendmsg+0x6eb/0x810 [ 51.226234][ T3613] ? kernel_sendmsg+0x50/0x50 [ 51.231033][ T3613] ? do_recvmmsg+0x6d0/0x6d0 [ 51.235675][ T3613] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.241767][ T3613] ? lockdep_hardirqs_on+0x79/0x100 [ 51.247093][ T3613] ___sys_sendmsg+0xf3/0x170 [ 51.251716][ T3613] ? sendmsg_copy_msghdr+0x160/0x160 [ 51.257114][ T3613] ? lock_release+0x780/0x780 [ 51.261805][ T3613] ? ptrace_stop.part.0+0x5ec/0xa80 [ 51.267093][ T3613] ? do_raw_spin_lock+0x120/0x2a0 [ 51.272152][ T3613] ? rwlock_bug.part.0+0x90/0x90 [ 51.277173][ T3613] ? _raw_spin_lock_irq+0x41/0x50 [ 51.282243][ T3613] ? __fget_light+0x20a/0x270 [ 51.287103][ T3613] __x64_sys_sendmsg+0x132/0x220 [ 51.292079][ T3613] ? __sys_sendmsg+0x1b0/0x1b0 [ 51.296951][ T3613] ? _raw_spin_unlock_irq+0x2a/0x40 [ 51.302215][ T3613] ? ptrace_notify+0xfa/0x140 [ 51.307025][ T3613] do_syscall_64+0x35/0xb0 [ 51.311484][ T3613] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 51.317494][ T3613] RIP: 0033:0x7f98d742d269 [ 51.321930][ T3613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.341826][ T3613] RSP: 002b:00007fff75c2ca58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.350313][ T3613] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f98d742d269 [ 51.358435][ T3613] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 51.366434][ T3613] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 51.374496][ T3613] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000000031 [ 51.382603][ T3613] R13: 00007fff75c2cac0 R14: 00007fff75c2cab0 R15: 00007f98d74a6410 [ 51.390799][ T3613] [ 51.393851][ T3613] Kernel panic - not syncing: panic_on_warn set ... [ 51.400445][ T3613] CPU: 1 PID: 3613 Comm: syz-executor275 Not tainted 5.19.0-rc3-next-20220622-syzkaller #0 [ 51.410415][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.420472][ T3613] Call Trace: [ 51.423743][ T3613] [ 51.426667][ T3613] dump_stack_lvl+0xcd/0x134 [ 51.431256][ T3613] panic+0x2d7/0x64a [ 51.435172][ T3613] ? panic_print_sys_info.part.0+0x10b/0x10b [ 51.441168][ T3613] ? __warn.cold+0x1d9/0x2cd [ 51.445793][ T3613] ? ieee80211_link_info_change_notify+0x63a/0x730 [ 51.452297][ T3613] __warn.cold+0x1ea/0x2cd [ 51.456736][ T3613] ? ieee80211_link_info_change_notify+0x63a/0x730 [ 51.463287][ T3613] report_bug+0x1bc/0x210 [ 51.467627][ T3613] handle_bug+0x3c/0x60 [ 51.471785][ T3613] exc_invalid_op+0x14/0x40 [ 51.476295][ T3613] asm_exc_invalid_op+0x1b/0x20 [ 51.481177][ T3613] RIP: 0010:ieee80211_link_info_change_notify+0x63a/0x730 [ 51.488486][ T3613] Code: ab e8 08 00 00 48 85 ed 0f 84 a3 00 00 00 e8 2d ac b8 f8 e8 28 ac b8 f8 8b 14 24 48 89 ee 48 c7 c7 60 e8 f3 8a e8 2a db 74 00 <0f> 0b e9 30 fb ff ff e8 0a ac b8 f8 e8 c5 e3 b9 00 31 ff 41 89 c6 [ 51.508097][ T3613] RSP: 0018:ffffc90002f2f520 EFLAGS: 00010286 [ 51.514170][ T3613] RAX: 0000000000000000 RBX: ffff88807cc94c80 RCX: 0000000000000000 [ 51.522144][ T3613] RDX: ffff88801e921d40 RSI: ffffffff81610778 RDI: fffff520005e5e96 [ 51.530121][ T3613] RBP: ffff88807cc94000 R08: 0000000000000005 R09: 0000000000000000 [ 51.538094][ T3613] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000002000000 [ 51.546067][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807c4e0de0 [ 51.554055][ T3613] ? vprintk+0x88/0x90 [ 51.558145][ T3613] ieee80211_set_mcast_rate+0x39/0x40 [ 51.563530][ T3613] ? ieee80211_copy_mbssid_beacon+0x270/0x270 [ 51.569610][ T3613] nl80211_set_mcast_rate+0x317/0x610 [ 51.575081][ T3613] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 51.581691][ T3613] ? nl80211_pre_doit+0x11c/0xaa0 [ 51.586748][ T3613] genl_family_rcv_msg_doit+0x228/0x320 [ 51.592319][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 51.599718][ T3613] ? ns_capable+0xd9/0x100 [ 51.604151][ T3613] genl_rcv_msg+0x328/0x580 [ 51.608681][ T3613] ? genl_get_cmd+0x480/0x480 [ 51.613378][ T3613] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 51.619989][ T3613] ? lock_release+0x780/0x780 [ 51.624690][ T3613] netlink_rcv_skb+0x153/0x420 [ 51.629483][ T3613] ? genl_get_cmd+0x480/0x480 [ 51.634177][ T3613] ? netlink_ack+0xa80/0xa80 [ 51.638804][ T3613] ? netlink_deliver_tap+0x1b1/0xc40 [ 51.644112][ T3613] genl_rcv+0x24/0x40 [ 51.648111][ T3613] netlink_unicast+0x543/0x7f0 [ 51.652922][ T3613] ? netlink_attachskb+0x880/0x880 [ 51.658156][ T3613] ? __virt_addr_valid+0x5d/0x2d0 [ 51.663223][ T3613] ? __phys_addr_symbol+0x2c/0x70 [ 51.668280][ T3613] ? __check_object_size+0x2de/0x700 [ 51.673854][ T3613] netlink_sendmsg+0x917/0xe10 [ 51.678664][ T3613] ? netlink_unicast+0x7f0/0x7f0 [ 51.683643][ T3613] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 51.688940][ T3613] ? netlink_unicast+0x7f0/0x7f0 [ 51.693895][ T3613] sock_sendmsg+0xcf/0x120 [ 51.698327][ T3613] ____sys_sendmsg+0x6eb/0x810 [ 51.703118][ T3613] ? kernel_sendmsg+0x50/0x50 [ 51.707807][ T3613] ? do_recvmmsg+0x6d0/0x6d0 [ 51.712423][ T3613] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.718415][ T3613] ? lockdep_hardirqs_on+0x79/0x100 [ 51.723659][ T3613] ___sys_sendmsg+0xf3/0x170 [ 51.728271][ T3613] ? sendmsg_copy_msghdr+0x160/0x160 [ 51.733600][ T3613] ? lock_release+0x780/0x780 [ 51.738288][ T3613] ? ptrace_stop.part.0+0x5ec/0xa80 [ 51.743502][ T3613] ? do_raw_spin_lock+0x120/0x2a0 [ 51.748624][ T3613] ? rwlock_bug.part.0+0x90/0x90 [ 51.753583][ T3613] ? _raw_spin_lock_irq+0x41/0x50 [ 51.758628][ T3613] ? __fget_light+0x20a/0x270 [ 51.763337][ T3613] __x64_sys_sendmsg+0x132/0x220 [ 51.768297][ T3613] ? __sys_sendmsg+0x1b0/0x1b0 [ 51.773097][ T3613] ? _raw_spin_unlock_irq+0x2a/0x40 [ 51.778305][ T3613] ? ptrace_notify+0xfa/0x140 [ 51.783003][ T3613] do_syscall_64+0x35/0xb0 [ 51.787435][ T3613] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 51.793347][ T3613] RIP: 0033:0x7f98d742d269 [ 51.797773][ T3613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.817414][ T3613] RSP: 002b:00007fff75c2ca58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.826010][ T3613] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f98d742d269 [ 51.834003][ T3613] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 51.841979][ T3613] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 51.849954][ T3613] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000000031 [ 51.857930][ T3613] R13: 00007fff75c2cac0 R14: 00007fff75c2cab0 R15: 00007f98d74a6410 [ 51.865922][ T3613] [ 51.869275][ T3613] Kernel Offset: disabled [ 51.873702][ T3613] Rebooting in 86400 seconds..