./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3057824311
<...>
Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts.
execve("./syz-executor3057824311", ["./syz-executor3057824311"], 0x7ffc2ecb5400 /* 10 vars */) = 0
brk(NULL) = 0x5555564c2000
brk(0x5555564c2c40) = 0x5555564c2c40
arch_prctl(ARCH_SET_FS, 0x5555564c2300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3057824311", 4096) = 28
brk(0x5555564e3c40) = 0x5555564e3c40
brk(0x5555564e4000) = 0x5555564e4000
mprotect(0x7f0fcac08000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
recvfrom(4, [{nlmsg_len=2476, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3610}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x40\x01\x00\x00\xd8\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2476
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3610}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(4) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=9}) = 0
sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x22\x00\x05\x00\x00\x13\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x09\x00\x00\x00\x08\x00\x05\x00\x09\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5
sendto(5, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
recvfrom(5, [{nlmsg_len=2476, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1389872696}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x40\x01\x00\x00\xd8\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2476
recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1389872696}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(5) = 0
ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=9}) = 0
[ 43.315416][ T3610] ------------[ cut here ]------------
[ 43.321323][ T3610] WARNING: CPU: 0 PID: 3610 at net/mac80211/cfg.c:3987 ieee80211_probe_client+0x560/0x6e0
[ 43.331481][ T3610] Modules linked in:
[ 43.335373][ T3610] CPU: 0 PID: 3610 Comm: syz-executor305 Not tainted 6.1.0-rc1-syzkaller-00427-gd47136c28015 #0
[ 43.346108][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 43.356318][ T3610] RIP: 0010:ieee80211_probe_client+0x560/0x6e0
[ 43.362585][ T3610] Code: f7 c6 05 8e 53 4a 04 01 48 c7 c7 f8 25 d9 8b be 92 0f 00 00 48 c7 c2 80 1f d9 8b e8 fa 8c a0 f7 e9 ba fb ff ff e8 60 dd c0 f7 <0f> 0b bb ea ff ff ff e9 33 ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1
[ 43.382373][ T3610] RSP: 0018:ffffc90003a6f390 EFLAGS: 00010293
[ 43.388445][ T3610] RAX: ffffffff89c8c7a0 RBX: 0000000000000001 RCX: ffff888026f11d40
[ 43.396593][ T3610] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 43.404722][ T3610] RBP: 0000000000000000 R08: ffffffff89c8c348 R09: fffffbfff1c4f036
[ 43.412813][ T3610] R10: fffffbfff1c4f036 R11: 1ffffffff1c4f035 R12: dffffc0000000000
[ 43.420935][ T3610] R13: ffffc90003a6f4a0 R14: ffff888027997c20 R15: ffff8880216baa20
[ 43.428910][ T3610] FS: 00005555564c2300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 43.437973][ T3610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 43.444703][ T3610] CR2: 00000000005decc0 CR3: 0000000028008000 CR4: 00000000003506e0
[ 43.452791][ T3610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 43.461033][ T3610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 43.469008][ T3610] Call Trace:
[ 43.472510][ T3610]
[ 43.475442][ T3610] ? trace_rdev_probe_client+0x104/0x300
[ 43.481367][ T3610] nl80211_probe_client+0x31f/0x660
[ 43.486579][ T3610] ? nl80211_register_unexpected_frame+0x170/0x170
[ 43.493291][ T3610] genl_rcv_msg+0x11ca/0x1670
[ 43.497983][ T3610] ? stack_trace_save+0x1f0/0x1f0
[ 43.503181][ T3610] ? genl_bind+0x370/0x370
[ 43.507612][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 43.513410][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 43.519398][ T3610] ? stack_trace_snprint+0xf0/0xf0
[ 43.524669][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 43.530413][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 43.536394][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 43.542177][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 43.547815][ T3610] ? nl80211_register_unexpected_frame+0x170/0x170
[ 43.554464][ T3610] ? trace_lock_acquire+0x98/0x260
[ 43.559643][ T3610] ? lock_acquire+0xa5/0x400
[ 43.564238][ T3610] netlink_rcv_skb+0x1f0/0x460
[ 43.568994][ T3610] ? genl_bind+0x370/0x370
[ 43.573431][ T3610] ? netlink_ack+0xef0/0xef0
[ 43.578023][ T3610] ? __down_read_common+0x156/0x2a0
[ 43.583242][ T3610] genl_rcv+0x24/0x40
[ 43.587233][ T3610] netlink_unicast+0x7e7/0x9c0
[ 43.592076][ T3610] ? netlink_detachskb+0xa0/0xa0
[ 43.597039][ T3610] ? __phys_addr_symbol+0x2b/0x70
[ 43.602097][ T3610] ? 0xffffffff81000000
[ 43.606254][ T3610] ? __check_object_size+0x15a/0x210
[ 43.611566][ T3610] ? bpf_lsm_netlink_send+0x5/0x10
[ 43.616710][ T3610] netlink_sendmsg+0x9b3/0xcd0
[ 43.621536][ T3610] ? netlink_getsockopt+0x9c0/0x9c0
[ 43.626746][ T3610] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 43.632058][ T3610] ? security_socket_sendmsg+0x9d/0xb0
[ 43.637527][ T3610] ? netlink_getsockopt+0x9c0/0x9c0
[ 43.642757][ T3610] ____sys_sendmsg+0x597/0x8e0
[ 43.647534][ T3610] ? __sys_sendmsg_sock+0x30/0x30
[ 43.652580][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 43.658219][ T3610] ? __rwlock_init+0x140/0x140
[ 43.663010][ T3610] __sys_sendmsg+0x28e/0x390
[ 43.667609][ T3610] ? ____sys_sendmsg+0x8e0/0x8e0
[ 43.672579][ T3610] ? do_notify_parent+0xeb0/0xeb0
[ 43.677603][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 43.683271][ T3610] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 43.689252][ T3610] do_syscall_64+0x2b/0x70
[ 43.693685][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 43.699609][ T3610] RIP: 0033:0x7f0fcab9bd19
[ 43.704024][ T3610] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.723657][ T3610] RSP: 002b:00007fff66c7b378 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 43.732128][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0fcab9bd19
[ 43.740137][ T3610] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 43.748107][ T3610] RBP: 00007f0fcab5f6e0 R08: 0000000000000000 R09: 0000000000000000
[ 43.756104][ T3610] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f0fcab5f770
[ 43.764092][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 43.772094][ T3610]
[ 43.775118][ T3610] Kernel panic - not syncing: panic_on_warn set ...
[ 43.781683][ T3610] CPU: 1 PID: 3610 Comm: syz-executor305 Not tainted 6.1.0-rc1-syzkaller-00427-gd47136c28015 #0
[ 43.792072][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 43.802108][ T3610] Call Trace:
[ 43.805371][ T3610]
[ 43.808286][ T3610] dump_stack_lvl+0x1e3/0x2cb
[ 43.812948][ T3610] ? nf_tcp_handle_invalid+0x62e/0x62e
[ 43.818389][ T3610] ? panic+0x766/0x766
[ 43.822455][ T3610] ? vscnprintf+0x59/0x80
[ 43.826781][ T3610] ? ieee80211_probe_client+0x4c0/0x6e0
[ 43.832308][ T3610] panic+0x316/0x766
[ 43.836188][ T3610] ? __warn+0x131/0x220
[ 43.840350][ T3610] ? memcpy_page_flushcache+0xfc/0xfc
[ 43.845726][ T3610] ? ieee80211_probe_client+0x560/0x6e0
[ 43.851269][ T3610] __warn+0x1fa/0x220
[ 43.855249][ T3610] ? ieee80211_probe_client+0x560/0x6e0
[ 43.860787][ T3610] report_bug+0x1b3/0x2d0
[ 43.865125][ T3610] handle_bug+0x3d/0x70
[ 43.869277][ T3610] exc_invalid_op+0x16/0x40
[ 43.873771][ T3610] asm_exc_invalid_op+0x16/0x20
[ 43.878703][ T3610] RIP: 0010:ieee80211_probe_client+0x560/0x6e0
[ 43.884847][ T3610] Code: f7 c6 05 8e 53 4a 04 01 48 c7 c7 f8 25 d9 8b be 92 0f 00 00 48 c7 c2 80 1f d9 8b e8 fa 8c a0 f7 e9 ba fb ff ff e8 60 dd c0 f7 <0f> 0b bb ea ff ff ff e9 33 ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1
[ 43.904458][ T3610] RSP: 0018:ffffc90003a6f390 EFLAGS: 00010293
[ 43.910524][ T3610] RAX: ffffffff89c8c7a0 RBX: 0000000000000001 RCX: ffff888026f11d40
[ 43.918486][ T3610] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 43.926444][ T3610] RBP: 0000000000000000 R08: ffffffff89c8c348 R09: fffffbfff1c4f036
[ 43.934405][ T3610] R10: fffffbfff1c4f036 R11: 1ffffffff1c4f035 R12: dffffc0000000000
[ 43.942369][ T3610] R13: ffffc90003a6f4a0 R14: ffff888027997c20 R15: ffff8880216baa20
[ 43.950339][ T3610] ? ieee80211_probe_client+0x108/0x6e0
[ 43.955880][ T3610] ? ieee80211_probe_client+0x560/0x6e0
[ 43.961422][ T3610] ? trace_rdev_probe_client+0x104/0x300
[ 43.967063][ T3610] nl80211_probe_client+0x31f/0x660
[ 43.972343][ T3610] ? nl80211_register_unexpected_frame+0x170/0x170
[ 43.978880][ T3610] genl_rcv_msg+0x11ca/0x1670
[ 43.983575][ T3610] ? stack_trace_save+0x1f0/0x1f0
[ 43.988604][ T3610] ? genl_bind+0x370/0x370
[ 43.993017][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 43.998643][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 44.004617][ T3610] ? stack_trace_snprint+0xf0/0xf0
[ 44.009720][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 44.015344][ T3610] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 44.021314][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 44.026942][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 44.032567][ T3610] ? nl80211_register_unexpected_frame+0x170/0x170
[ 44.039063][ T3610] ? trace_lock_acquire+0x98/0x260
[ 44.044175][ T3610] ? lock_acquire+0xa5/0x400
[ 44.048844][ T3610] netlink_rcv_skb+0x1f0/0x460
[ 44.053601][ T3610] ? genl_bind+0x370/0x370
[ 44.058016][ T3610] ? netlink_ack+0xef0/0xef0
[ 44.062609][ T3610] ? __down_read_common+0x156/0x2a0
[ 44.068152][ T3610] genl_rcv+0x24/0x40
[ 44.072135][ T3610] netlink_unicast+0x7e7/0x9c0
[ 44.076899][ T3610] ? netlink_detachskb+0xa0/0xa0
[ 44.081829][ T3610] ? __phys_addr_symbol+0x2b/0x70
[ 44.086842][ T3610] ? 0xffffffff81000000
[ 44.090982][ T3610] ? __check_object_size+0x15a/0x210
[ 44.096256][ T3610] ? bpf_lsm_netlink_send+0x5/0x10
[ 44.101369][ T3610] netlink_sendmsg+0x9b3/0xcd0
[ 44.106138][ T3610] ? netlink_getsockopt+0x9c0/0x9c0
[ 44.111330][ T3610] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 44.116609][ T3610] ? security_socket_sendmsg+0x9d/0xb0
[ 44.122063][ T3610] ? netlink_getsockopt+0x9c0/0x9c0
[ 44.127255][ T3610] ____sys_sendmsg+0x597/0x8e0
[ 44.132099][ T3610] ? __sys_sendmsg_sock+0x30/0x30
[ 44.137119][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 44.142772][ T3610] ? __rwlock_init+0x140/0x140
[ 44.147553][ T3610] __sys_sendmsg+0x28e/0x390
[ 44.152139][ T3610] ? ____sys_sendmsg+0x8e0/0x8e0
[ 44.157076][ T3610] ? do_notify_parent+0xeb0/0xeb0
[ 44.162093][ T3610] ? rcu_read_lock_sched_held+0x5f/0x130
[ 44.167727][ T3610] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 44.173702][ T3610] do_syscall_64+0x2b/0x70
[ 44.178113][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 44.183998][ T3610] RIP: 0033:0x7f0fcab9bd19
[ 44.188406][ T3610] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 44.208002][ T3610] RSP: 002b:00007fff66c7b378 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 44.216407][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0fcab9bd19
[ 44.224367][ T3610] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004
[ 44.232332][ T3610] RBP: 00007f0fcab5f6e0 R08: 0000000000000000 R09: 0000000000000000
[ 44.240303][ T3610] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f0fcab5f770
[ 44.248266][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 44.256232][ T3610]
[ 44.259395][ T3610] Kernel Offset: disabled
[ 44.263717][ T3610] Rebooting in 86400 seconds..