./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor921371880 <...> [ 97.327967][ T974] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.10.58' (ED25519) to the list of known hosts. execve("./syz-executor921371880", ["./syz-executor921371880"], 0x7ffcfcf5ee80 /* 10 vars */) = 0 brk(NULL) = 0x5555574cd000 brk(0x5555574cdd00) = 0x5555574cdd00 arch_prctl(ARCH_SET_FS, 0x5555574cd380) = 0 set_tid_address(0x5555574cd650) = 5836 set_robust_list(0x5555574cd660, 24) = 0 rseq(0x5555574cdca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor921371880", 4096) = 27 getrandom("\x73\x68\xdb\xae\x91\x7a\x70\xa6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555574cdd00 brk(0x5555574eed00) = 0x5555574eed00 brk(0x5555574ef000) = 0x5555574ef000 mprotect(0x7fba55bc0000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5837 attached , child_tidptr=0x5555574cd650) = 5837 [pid 5837] set_robust_list(0x5555574cd660, 24) = 0 [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5837] getppid() = 0 [pid 5837] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5837] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5837] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5837] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5837] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5837] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5837] unshare(CLONE_NEWNS) = 0 [pid 5837] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5837] unshare(CLONE_NEWIPC) = 0 [pid 5837] unshare(CLONE_NEWCGROUP) = 0 [pid 5837] unshare(CLONE_NEWUTS) = 0 [pid 5837] unshare(CLONE_SYSVSEM) = 0 [pid 5837] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "16777216", 8) = 8 [pid 5837] close(3) = 0 [pid 5837] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "536870912", 9) = 9 [pid 5837] close(3) = 0 [pid 5837] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "1024", 4) = 4 [pid 5837] close(3) = 0 [pid 5837] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "8192", 4) = 4 [pid 5837] close(3) = 0 [pid 5837] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "1024", 4) = 4 [pid 5837] close(3) = 0 [pid 5837] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "1024", 4) = 4 [pid 5837] close(3) = 0 [pid 5837] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5837] close(3) = 0 [pid 5837] getpid() = 1 [pid 5837] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5840] set_robust_list(0x5555574cd660, 24 [pid 5837] <... clone resumed>, child_tidptr=0x5555574cd650) = 2 [pid 5840] <... set_robust_list resumed>) = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5840] setpgid(0, 0) = 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5840] write(3, "1000", 4) = 4 [pid 5840] close(3) = 0 [pid 5840] write(1, "executing program\n", 18executing program ) = 18 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5840] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5840] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5840] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5840] close(4) = 0 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5840] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5840] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x98\x03\x00\x00\x24\x00\x01\x00\x28\x05\x70\x00\xfc\xdb\xdf\x25\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x04\x00\x8e\x00\x08\x00\x57\x00\x1b\x0a\x00\x00\x04\x00\x6c\x00\x05\x00\x19\x01\x07\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x56\x03\x33\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=920}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE}, 0) = 920 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5840] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5840] recvfrom(6, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1340275900}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5840] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1340275900}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5840] close(6) = 0 [ 102.556272][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [pid 5840] ioctl(5, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5840] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5840] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x24\x00\x05\x00\x29\xbd\x70\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x04\x00\xd0\x00", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 44 [pid 5840] close(3) = 0 [pid 5840] close(4) = 0 [pid 5840] close(5) = 0 [pid 5840] close(6) = -1 EBADF (Bad file descriptor) [pid 5840] close(7) = -1 EBADF (Bad file descriptor) [pid 5840] close(8) = -1 EBADF (Bad file descriptor) [pid 5840] close(9) = -1 EBADF (Bad file descriptor) [pid 5840] close(10) = -1 EBADF (Bad file descriptor) [pid 5840] close(11) = -1 EBADF (Bad file descriptor) [pid 5840] close(12) = -1 EBADF (Bad file descriptor) [pid 5840] close(13) = -1 EBADF (Bad file descriptor) [pid 5840] close(14) = -1 EBADF (Bad file descriptor) [pid 5840] close(15) = -1 EBADF (Bad file descriptor) [pid 5840] close(16) = -1 EBADF (Bad file descriptor) [pid 5840] close(17) = -1 EBADF (Bad file descriptor) [pid 5840] close(18) = -1 EBADF (Bad file descriptor) [pid 5840] close(19) = -1 EBADF (Bad file descriptor) [pid 5840] close(20) = -1 EBADF (Bad file descriptor) [pid 5840] close(21) = -1 EBADF (Bad file descriptor) [pid 5840] close(22) = -1 EBADF (Bad file descriptor) [pid 5840] close(23) = -1 EBADF (Bad file descriptor) [pid 5840] close(24) = -1 EBADF (Bad file descriptor) [pid 5840] close(25) = -1 EBADF (Bad file descriptor) [pid 5840] close(26) = -1 EBADF (Bad file descriptor) [pid 5840] close(27) = -1 EBADF (Bad file descriptor) [pid 5840] close(28) = -1 EBADF (Bad file descriptor) [pid 5840] close(29) = -1 EBADF (Bad file descriptor) [pid 5840] exit_group(0) = ? [pid 5840] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5837] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5841 attached , child_tidptr=0x5555574cd650) = 3 [pid 5841] set_robust_list(0x5555574cd660, 24) = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5841] setpgid(0, 0) = 0 [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5841] write(3, "1000", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] write(1, "executing program\n", 18executing program ) = 18 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5841] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5841] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5841] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5841] close(4) = 0 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5841] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5841] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x98\x03\x00\x00\x24\x00\x01\x00\x28\x05\x70\x00\xfc\xdb\xdf\x25\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x04\x00\x8e\x00\x08\x00\x57\x00\x1b\x0a\x00\x00\x04\x00\x6c\x00\x05\x00\x19\x01\x07\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x56\x03\x33\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=920}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE}, 0) = 920 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5841] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5841] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5841] recvfrom(6, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1008102588}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5841] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1008102588}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5841] close(6) = 0 [ 103.027760][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [pid 5841] ioctl(5, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5841] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5841] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x24\x00\x05\x00\x29\xbd\x70\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x04\x00\xd0\x00", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 44 [pid 5841] close(3) = 0 [pid 5841] close(4) = 0 [pid 5841] close(5) = 0 [pid 5841] close(6) = -1 EBADF (Bad file descriptor) [pid 5841] close(7) = -1 EBADF (Bad file descriptor) [pid 5841] close(8) = -1 EBADF (Bad file descriptor) [pid 5841] close(9) = -1 EBADF (Bad file descriptor) [pid 5841] close(10) = -1 EBADF (Bad file descriptor) [pid 5841] close(11) = -1 EBADF (Bad file descriptor) [pid 5841] close(12) = -1 EBADF (Bad file descriptor) [pid 5841] close(13) = -1 EBADF (Bad file descriptor) [pid 5841] close(14) = -1 EBADF (Bad file descriptor) [pid 5841] close(15) = -1 EBADF (Bad file descriptor) [pid 5841] close(16) = -1 EBADF (Bad file descriptor) [pid 5841] close(17) = -1 EBADF (Bad file descriptor) [pid 5841] close(18) = -1 EBADF (Bad file descriptor) [pid 5841] close(19) = -1 EBADF (Bad file descriptor) [pid 5841] close(20) = -1 EBADF (Bad file descriptor) [pid 5841] close(21) = -1 EBADF (Bad file descriptor) [pid 5841] close(22) = -1 EBADF (Bad file descriptor) [pid 5841] close(23) = -1 EBADF (Bad file descriptor) [pid 5841] close(24) = -1 EBADF (Bad file descriptor) [pid 5841] close(25) = -1 EBADF (Bad file descriptor) [pid 5841] close(26) = -1 EBADF (Bad file descriptor) [pid 5841] close(27) = -1 EBADF (Bad file descriptor) [pid 5841] close(28) = -1 EBADF (Bad file descriptor) [pid 5841] close(29) = -1 EBADF (Bad file descriptor) [pid 5841] exit_group(0) = ? [pid 5841] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5837] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5842 attached , child_tidptr=0x5555574cd650) = 4 [pid 5842] set_robust_list(0x5555574cd660, 24) = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 [pid 5842] write(1, "executing program\n", 18executing program ) = 18 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5842] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5842] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5842] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] close(4) = 0 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5842] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5842] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x98\x03\x00\x00\x24\x00\x01\x00\x28\x05\x70\x00\xfc\xdb\xdf\x25\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x04\x00\x8e\x00\x08\x00\x57\x00\x1b\x0a\x00\x00\x04\x00\x6c\x00\x05\x00\x19\x01\x07\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x56\x03\x33\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=920}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE}, 0) = 920 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5842] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5842] recvfrom(6, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-107374738}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [ 103.525111][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [pid 5842] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-107374738}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] close(6) = 0 [pid 5842] ioctl(5, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5842] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5842] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x24\x00\x05\x00\x29\xbd\x70\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x04\x00\xd0\x00", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 44 [pid 5842] close(3) = 0 [pid 5842] close(4) = 0 [pid 5842] close(5) = 0 [pid 5842] close(6) = -1 EBADF (Bad file descriptor) [pid 5842] close(7) = -1 EBADF (Bad file descriptor) [pid 5842] close(8) = -1 EBADF (Bad file descriptor) [pid 5842] close(9) = -1 EBADF (Bad file descriptor) [pid 5842] close(10) = -1 EBADF (Bad file descriptor) [pid 5842] close(11) = -1 EBADF (Bad file descriptor) [pid 5842] close(12) = -1 EBADF (Bad file descriptor) [pid 5842] close(13) = -1 EBADF (Bad file descriptor) [pid 5842] close(14) = -1 EBADF (Bad file descriptor) [pid 5842] close(15) = -1 EBADF (Bad file descriptor) [pid 5842] close(16) = -1 EBADF (Bad file descriptor) [pid 5842] close(17) = -1 EBADF (Bad file descriptor) [pid 5842] close(18) = -1 EBADF (Bad file descriptor) [pid 5842] close(19) = -1 EBADF (Bad file descriptor) [pid 5842] close(20) = -1 EBADF (Bad file descriptor) [pid 5842] close(21) = -1 EBADF (Bad file descriptor) [pid 5842] close(22) = -1 EBADF (Bad file descriptor) [pid 5842] close(23) = -1 EBADF (Bad file descriptor) [pid 5842] close(24) = -1 EBADF (Bad file descriptor) [pid 5842] close(25) = -1 EBADF (Bad file descriptor) [pid 5842] close(26) = -1 EBADF (Bad file descriptor) [pid 5842] close(27) = -1 EBADF (Bad file descriptor) [pid 5842] close(28) = -1 EBADF (Bad file descriptor) [pid 5842] close(29) = -1 EBADF (Bad file descriptor) [pid 5842] exit_group(0) = ? [pid 5842] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached , child_tidptr=0x5555574cd650) = 5 [pid 5843] set_robust_list(0x5555574cd660, 24) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] write(1, "executing program\n", 18executing program ) = 18 [pid 5843] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5843] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5843] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5843] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5843] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5843] close(4) = 0 [pid 5843] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5843] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5843] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x98\x03\x00\x00\x24\x00\x01\x00\x28\x05\x70\x00\xfc\xdb\xdf\x25\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x04\x00\x8e\x00\x08\x00\x57\x00\x1b\x0a\x00\x00\x04\x00\x6c\x00\x05\x00\x19\x01\x07\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x56\x03\x33\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=920}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE}, 0) = 920 [pid 5843] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5843] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5843] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5843] recvfrom(6, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1760588804}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [ 104.041873][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [pid 5843] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1760588804}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5843] close(6) = 0 [pid 5843] ioctl(5, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5843] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5843] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x24\x00\x05\x00\x29\xbd\x70\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x04\x00\xd0\x00", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 44 [pid 5843] close(3) = 0 [pid 5843] close(4) = 0 [pid 5843] close(5) = 0 [pid 5843] close(6) = -1 EBADF (Bad file descriptor) [pid 5843] close(7) = -1 EBADF (Bad file descriptor) [pid 5843] close(8) = -1 EBADF (Bad file descriptor) [pid 5843] close(9) = -1 EBADF (Bad file descriptor) [pid 5843] close(10) = -1 EBADF (Bad file descriptor) [pid 5843] close(11) = -1 EBADF (Bad file descriptor) [pid 5843] close(12) = -1 EBADF (Bad file descriptor) [pid 5843] close(13) = -1 EBADF (Bad file descriptor) [pid 5843] close(14) = -1 EBADF (Bad file descriptor) [pid 5843] close(15) = -1 EBADF (Bad file descriptor) [pid 5843] close(16) = -1 EBADF (Bad file descriptor) [pid 5843] close(17) = -1 EBADF (Bad file descriptor) [pid 5843] close(18) = -1 EBADF (Bad file descriptor) [pid 5843] close(19) = -1 EBADF (Bad file descriptor) [pid 5843] close(20) = -1 EBADF (Bad file descriptor) [pid 5843] close(21) = -1 EBADF (Bad file descriptor) [pid 5843] close(22) = -1 EBADF (Bad file descriptor) [pid 5843] close(23) = -1 EBADF (Bad file descriptor) [pid 5843] close(24) = -1 EBADF (Bad file descriptor) [pid 5843] close(25) = -1 EBADF (Bad file descriptor) [pid 5843] close(26) = -1 EBADF (Bad file descriptor) [pid 5843] close(27) = -1 EBADF (Bad file descriptor) [pid 5843] close(28) = -1 EBADF (Bad file descriptor) [pid 5843] close(29) = -1 EBADF (Bad file descriptor) [pid 5843] exit_group(0) = ? [pid 5843] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5844 attached , child_tidptr=0x5555574cd650) = 6 [pid 5844] set_robust_list(0x5555574cd660, 24) = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5844] setpgid(0, 0) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5844] write(3, "1000", 4) = 4 [pid 5844] close(3) = 0 [pid 5844] write(1, "executing program\n", 18executing program ) = 18 [pid 5844] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5844] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5844] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5844] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=6}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5844] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=6}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5844] close(4) = 0 [pid 5844] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5844] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5844] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x98\x03\x00\x00\x24\x00\x01\x00\x28\x05\x70\x00\xfc\xdb\xdf\x25\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x04\x00\x8e\x00\x08\x00\x57\x00\x1b\x0a\x00\x00\x04\x00\x6c\x00\x05\x00\x19\x01\x07\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x56\x03\x33\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=920}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE}, 0) = 920 [pid 5844] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5844] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5844] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5844] recvfrom(6, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1727440811}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5844] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1727440811}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [ 104.558634][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [pid 5844] close(6) = 0 [pid 5844] ioctl(5, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5844] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5844] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x24\x00\x05\x00\x29\xbd\x70\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x04\x00\xd0\x00", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 44 [pid 5844] close(3) = 0 [pid 5844] close(4) = 0 [pid 5844] close(5) = 0 [pid 5844] close(6) = -1 EBADF (Bad file descriptor) [pid 5844] close(7) = -1 EBADF (Bad file descriptor) [pid 5844] close(8) = -1 EBADF (Bad file descriptor) [pid 5844] close(9) = -1 EBADF (Bad file descriptor) [pid 5844] close(10) = -1 EBADF (Bad file descriptor) [pid 5844] close(11) = -1 EBADF (Bad file descriptor) [pid 5844] close(12) = -1 EBADF (Bad file descriptor) [pid 5844] close(13) = -1 EBADF (Bad file descriptor) [pid 5844] close(14) = -1 EBADF (Bad file descriptor) [pid 5844] close(15) = -1 EBADF (Bad file descriptor) [pid 5844] close(16) = -1 EBADF (Bad file descriptor) [pid 5844] close(17) = -1 EBADF (Bad file descriptor) [pid 5844] close(18) = -1 EBADF (Bad file descriptor) [pid 5844] close(19) = -1 EBADF (Bad file descriptor) [pid 5844] close(20) = -1 EBADF (Bad file descriptor) [pid 5844] close(21) = -1 EBADF (Bad file descriptor) [pid 5844] close(22) = -1 EBADF (Bad file descriptor) [pid 5844] close(23) = -1 EBADF (Bad file descriptor) [pid 5844] close(24) = -1 EBADF (Bad file descriptor) [pid 5844] close(25) = -1 EBADF (Bad file descriptor) [pid 5844] close(26) = -1 EBADF (Bad file descriptor) [pid 5844] close(27) = -1 EBADF (Bad file descriptor) [pid 5844] close(28) = -1 EBADF (Bad file descriptor) [pid 5844] close(29) = -1 EBADF (Bad file descriptor) [pid 5844] exit_group(0) = ? [pid 5844] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached , child_tidptr=0x5555574cd650) = 7 [pid 5845] set_robust_list(0x5555574cd660, 24) = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5845] setpgid(0, 0) = 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1000", 4) = 4 [pid 5845] close(3) = 0 [pid 5845] write(1, "executing program\n", 18executing program ) = 18 [pid 5845] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5845] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5845] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5845] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=7}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5845] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=7}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5845] close(4) = 0 [pid 5845] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5845] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5845] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x98\x03\x00\x00\x24\x00\x01\x00\x28\x05\x70\x00\xfc\xdb\xdf\x25\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x04\x00\x8e\x00\x08\x00\x57\x00\x1b\x0a\x00\x00\x04\x00\x6c\x00\x05\x00\x19\x01\x07\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x56\x03\x33\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=920}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE}, 0) = 920 [pid 5845] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5845] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5845] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [ 105.045207][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [pid 5845] recvfrom(6, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1662429402}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5845] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1662429402}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5845] close(6) = 0 [pid 5845] ioctl(5, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5845] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5845] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x24\x00\x05\x00\x29\xbd\x70\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x04\x00\xd0\x00", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 44 [pid 5845] close(3) = 0 [pid 5845] close(4) = 0 [pid 5845] close(5) = 0 [pid 5845] close(6) = -1 EBADF (Bad file descriptor) [pid 5845] close(7) = -1 EBADF (Bad file descriptor) [pid 5845] close(8) = -1 EBADF (Bad file descriptor) [pid 5845] close(9) = -1 EBADF (Bad file descriptor) [pid 5845] close(10) = -1 EBADF (Bad file descriptor) [pid 5845] close(11) = -1 EBADF (Bad file descriptor) [pid 5845] close(12) = -1 EBADF (Bad file descriptor) [pid 5845] close(13) = -1 EBADF (Bad file descriptor) [pid 5845] close(14) = -1 EBADF (Bad file descriptor) [pid 5845] close(15) = -1 EBADF (Bad file descriptor) [pid 5845] close(16) = -1 EBADF (Bad file descriptor) [pid 5845] close(17) = -1 EBADF (Bad file descriptor) [pid 5845] close(18) = -1 EBADF (Bad file descriptor) [pid 5845] close(19) = -1 EBADF (Bad file descriptor) [pid 5845] close(20) = -1 EBADF (Bad file descriptor) [pid 5845] close(21) = -1 EBADF (Bad file descriptor) [pid 5845] close(22) = -1 EBADF (Bad file descriptor) [pid 5845] close(23) = -1 EBADF (Bad file descriptor) [pid 5845] close(24) = -1 EBADF (Bad file descriptor) [pid 5845] close(25) = -1 EBADF (Bad file descriptor) [pid 5845] close(26) = -1 EBADF (Bad file descriptor) [pid 5845] close(27) = -1 EBADF (Bad file descriptor) [pid 5845] close(28) = -1 EBADF (Bad file descriptor) [pid 5845] close(29) = -1 EBADF (Bad file descriptor) [pid 5845] exit_group(0) = ? [pid 5845] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5846 attached , child_tidptr=0x5555574cd650) = 8 [pid 5846] set_robust_list(0x5555574cd660, 24) = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] write(1, "executing program\n", 18executing program ) = 18 [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5846] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5846] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=8}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5846] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=8}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] close(4) = 0 [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5846] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5846] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x98\x03\x00\x00\x24\x00\x01\x00\x28\x05\x70\x00\xfc\xdb\xdf\x25\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x04\x00\x8e\x00\x08\x00\x57\x00\x1b\x0a\x00\x00\x04\x00\x6c\x00\x05\x00\x19\x01\x07\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x56\x03\x33\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=920}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE}, 0) = 920 [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5846] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5846] recvfrom(6, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-264848650}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [ 105.571409][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [pid 5846] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-264848650}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] close(6) = 0 [pid 5846] ioctl(5, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5846] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5846] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x24\x00\x05\x00\x29\xbd\x70\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x04\x00\xd0\x00", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 44 [pid 5846] close(3) = 0 [pid 5846] close(4) = 0 [pid 5846] close(5) = 0 [pid 5846] close(6) = -1 EBADF (Bad file descriptor) [pid 5846] close(7) = -1 EBADF (Bad file descriptor) [pid 5846] close(8) = -1 EBADF (Bad file descriptor) [pid 5846] close(9) = -1 EBADF (Bad file descriptor) [pid 5846] close(10) = -1 EBADF (Bad file descriptor) [pid 5846] close(11) = -1 EBADF (Bad file descriptor) [pid 5846] close(12) = -1 EBADF (Bad file descriptor) [pid 5846] close(13) = -1 EBADF (Bad file descriptor) [pid 5846] close(14) = -1 EBADF (Bad file descriptor) [pid 5846] close(15) = -1 EBADF (Bad file descriptor) [pid 5846] close(16) = -1 EBADF (Bad file descriptor) [pid 5846] close(17) = -1 EBADF (Bad file descriptor) [pid 5846] close(18) = -1 EBADF (Bad file descriptor) [pid 5846] close(19) = -1 EBADF (Bad file descriptor) [pid 5846] close(20) = -1 EBADF (Bad file descriptor) [pid 5846] close(21) = -1 EBADF (Bad file descriptor) [pid 5846] close(22) = -1 EBADF (Bad file descriptor) [pid 5846] close(23) = -1 EBADF (Bad file descriptor) [pid 5846] close(24) = -1 EBADF (Bad file descriptor) [pid 5846] close(25) = -1 EBADF (Bad file descriptor) [pid 5846] close(26) = -1 EBADF (Bad file descriptor) [pid 5846] close(27) = -1 EBADF (Bad file descriptor) [pid 5846] close(28) = -1 EBADF (Bad file descriptor) [pid 5846] close(29) = -1 EBADF (Bad file descriptor) [pid 5846] exit_group(0) = ? [pid 5846] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5837] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached , child_tidptr=0x5555574cd650) = 9 [pid 5847] set_robust_list(0x5555574cd660, 24) = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] setpgid(0, 0) = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1000", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] write(1, "executing program\n", 18executing program ) = 18 [pid 5847] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5847] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5847] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5847] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=9}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5847] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=9}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5847] close(4) = 0 [pid 5847] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5847] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5847] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x98\x03\x00\x00\x24\x00\x01\x00\x28\x05\x70\x00\xfc\xdb\xdf\x25\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x04\x00\x8e\x00\x08\x00\x57\x00\x1b\x0a\x00\x00\x04\x00\x6c\x00\x05\x00\x19\x01\x07\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x56\x03\x33\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=920}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE}, 0) = 920 [pid 5847] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5847] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5847] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5847] recvfrom(6, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1127983068}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5847] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1127983068}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5847] close(6) = 0 [ 106.091485][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [pid 5847] ioctl(5, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5847] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5847] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x24\x00\x05\x00\x29\xbd\x70\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x04\x00\xd0\x00", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 44 [pid 5847] close(3) = 0 [pid 5847] close(4) = 0 [pid 5847] close(5) = 0 [pid 5847] close(6) = -1 EBADF (Bad file descriptor) [pid 5847] close(7) = -1 EBADF (Bad file descriptor) [pid 5847] close(8) = -1 EBADF (Bad file descriptor) [pid 5847] close(9) = -1 EBADF (Bad file descriptor) [pid 5847] close(10) = -1 EBADF (Bad file descriptor) [pid 5847] close(11) = -1 EBADF (Bad file descriptor) [pid 5847] close(12) = -1 EBADF (Bad file descriptor) [pid 5847] close(13) = -1 EBADF (Bad file descriptor) [pid 5847] close(14) = -1 EBADF (Bad file descriptor) [pid 5847] close(15) = -1 EBADF (Bad file descriptor) [pid 5847] close(16) = -1 EBADF (Bad file descriptor) [pid 5847] close(17) = -1 EBADF (Bad file descriptor) [pid 5847] close(18) = -1 EBADF (Bad file descriptor) [pid 5847] close(19) = -1 EBADF (Bad file descriptor) [pid 5847] close(20) = -1 EBADF (Bad file descriptor) [pid 5847] close(21) = -1 EBADF (Bad file descriptor) [pid 5847] close(22) = -1 EBADF (Bad file descriptor) [pid 5847] close(23) = -1 EBADF (Bad file descriptor) [pid 5847] close(24) = -1 EBADF (Bad file descriptor) [pid 5847] close(25) = -1 EBADF (Bad file descriptor) [pid 5847] close(26) = -1 EBADF (Bad file descriptor) [pid 5847] close(27) = -1 EBADF (Bad file descriptor) [pid 5847] close(28) = -1 EBADF (Bad file descriptor) [pid 5847] close(29) = -1 EBADF (Bad file descriptor) [pid 5847] exit_group(0) = ? [pid 5847] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5837] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached , child_tidptr=0x5555574cd650) = 10 [pid 5848] set_robust_list(0x5555574cd660, 24) = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] setpgid(0, 0) = 0 [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] write(3, "1000", 4) = 4 [pid 5848] close(3) = 0 [pid 5848] write(1, "executing program\n", 18executing program ) = 18 [pid 5848] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5848] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5848] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5848] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=10}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [pid 5848] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=10}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5848] close(4) = 0 [pid 5848] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5848] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5848] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x98\x03\x00\x00\x24\x00\x01\x00\x28\x05\x70\x00\xfc\xdb\xdf\x25\x3b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x04\x00\x8e\x00\x08\x00\x57\x00\x1b\x0a\x00\x00\x04\x00\x6c\x00\x05\x00\x19\x01\x07\x00\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x56\x03\x33\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=920}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_MORE}, 0) = 920 [pid 5848] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5 [pid 5848] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5848] sendto(6, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5848] recvfrom(6, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-687795650}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [ 106.571112][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [pid 5848] recvfrom(6, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-687795650}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5848] close(6) = 0 [pid 5848] ioctl(5, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5848] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5848] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x2c\x00\x00\x00\x24\x00\x05\x00\x29\xbd\x70\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x04\x00\xd0\x00", iov_len=44}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 44 [pid 5848] close(3) = 0 [pid 5848] close(4) = 0 [pid 5848] close(5) = 0 [pid 5848] close(6) = -1 EBADF (Bad file descriptor) [pid 5848] close(7) = -1 EBADF (Bad file descriptor) [pid 5848] close(8) = -1 EBADF (Bad file descriptor) [pid 5848] close(9) = -1 EBADF (Bad file descriptor) [pid 5848] close(10) = -1 EBADF (Bad file descriptor) [pid 5848] close(11) = -1 EBADF (Bad file descriptor) [pid 5848] close(12) = -1 EBADF (Bad file descriptor) [pid 5848] close(13) = -1 EBADF (Bad file descriptor) [pid 5848] close(14) = -1 EBADF (Bad file descriptor) [pid 5848] close(15) = -1 EBADF (Bad file descriptor) [pid 5848] close(16) = -1 EBADF (Bad file descriptor) [pid 5848] close(17) = -1 EBADF (Bad file descriptor) [pid 5848] close(18) = -1 EBADF (Bad file descriptor) [pid 5848] close(19) = -1 EBADF (Bad file descriptor) [pid 5848] close(20) = -1 EBADF (Bad file descriptor) [pid 5848] close(21) = -1 EBADF (Bad file descriptor) [pid 5848] close(22) = -1 EBADF (Bad file descriptor) [pid 5848] close(23) = -1 EBADF (Bad file descriptor) [pid 5848] close(24) = -1 EBADF (Bad file descriptor) [pid 5848] close(25) = -1 EBADF (Bad file descriptor) [pid 5848] close(26) = -1 EBADF (Bad file descriptor) [pid 5848] close(27) = -1 EBADF (Bad file descriptor) [pid 5848] close(28) = -1 EBADF (Bad file descriptor) [pid 5848] close(29) = -1 EBADF (Bad file descriptor) [pid 5848] exit_group(0) = ? [pid 5848] +++ exited with 0 +++ [pid 5837] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5849 attached , child_tidptr=0x5555574cd650) = 11 [pid 5849] set_robust_list(0x5555574cd660, 24) = 0 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5849] setpgid(0, 0) = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 106.857752][ T2972] ------------[ cut here ]------------ [ 106.863279][ T2972] WARNING: CPU: 1 PID: 2972 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x1e3/0x250 [ 106.874039][ T2972] Modules linked in: [ 106.878208][ T2972] CPU: 1 UID: 0 PID: 2972 Comm: kworker/u8:9 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 106.889580][ T2972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.900033][ T2972] Workqueue: events_unbound cfg80211_wiphy_work [pid 5849] write(3, "1000", 4) = 4 [pid 5849] close(3) = 0 [pid 5849] write(1, "executing program\n", 18executing program ) = 18 [pid 5849] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5849] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5849] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5849] recvfrom(4, [{nlmsg_len=2556, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=11}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x50\x01\x00\x00\x28\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2556 [ 106.906629][ T2972] RIP: 0010:ieee80211_start_next_roc+0x1e3/0x250 [ 106.913444][ T2972] Code: f6 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f e9 91 c0 da ff e8 3c 3a 4a f6 90 0f 0b 90 e9 b5 fe ff ff e8 2e 3a 4a f6 90 <0f> 0b 90 e9 fc fe ff ff 48 c7 c1 30 d7 3d 90 80 e1 07 80 c1 03 38 [ 106.933283][ T2972] RSP: 0018:ffffc9000b7478f8 EFLAGS: 00010293 [ 106.940230][ T2972] RAX: ffffffff8b77c4b2 RBX: 0000000000000001 RCX: ffff888030325a00 [ 106.948922][ T2972] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [pid 5849] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=11}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5849] close(4) = 0 [pid 5849] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 5849] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [ 106.956983][ T2972] RBP: ffffc9000b747ac0 R08: ffffffff8b77c3fc R09: 1ffffffff28ad60f [ 106.965290][ T2972] R10: dffffc0000000000 R11: fffffbfff28ad610 R12: dffffc0000000000 [ 106.973965][ T2972] R13: dffffc0000000000 R14: ffff8880341d0e40 R15: ffff888142e912a0 [ 106.975127][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor921'. [ 106.982064][ T2972] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 106.982107][ T2972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.982125][ T2972] CR2: 00005555574cd650 CR3: 0000000034e30000 CR4: 00000000003526f0 [ 107.016014][ T2972] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.024007][ T2972] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.032055][ T2972] Call Trace: [ 107.035377][ T2972] [ 107.038386][ T2972] ? __warn+0x165/0x4d0 [ 107.042685][ T2972] ? ieee80211_start_next_roc+0x1e3/0x250 [ 107.048530][ T2972] ? report_bug+0x2b3/0x500 [ 107.053084][ T2972] ? ieee80211_start_next_roc+0x1e3/0x250 [ 107.058923][ T2972] ? ieee80211_start_next_roc+0x1e3/0x250 [ 107.064699][ T2972] ? ieee80211_start_next_roc+0x1e5/0x250 [ 107.070506][ T2972] ? handle_bug+0xde/0x120 [ 107.074986][ T2972] ? exc_invalid_op+0x1a/0x50 [ 107.079766][ T2972] ? asm_exc_invalid_op+0x1a/0x20 [ 107.084882][ T2972] ? ieee80211_start_next_roc+0x12c/0x250 [ 107.090690][ T2972] ? ieee80211_start_next_roc+0x1e2/0x250 [ 107.096507][ T2972] ? ieee80211_start_next_roc+0x1e3/0x250 [ 107.102464][ T2972] ? ieee80211_start_next_roc+0x1e2/0x250 [ 107.108515][ T2972] ieee80211_scan_work+0x1cc/0x1d30 [ 107.113798][ T2972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.119887][ T2972] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 107.125564][ T2972] ? rcu_is_watching+0x15/0xb0 [ 107.130414][ T2972] cfg80211_wiphy_work+0x2f0/0x490 [ 107.135601][ T2972] ? process_scheduled_works+0x9c6/0x18e0 [ 107.141405][ T2972] process_scheduled_works+0xabe/0x18e0 [ 107.147071][ T2972] ? __pfx_process_scheduled_works+0x10/0x10 [ 107.153103][ T2972] ? assign_work+0x364/0x3d0 [ 107.157865][ T2972] worker_thread+0x870/0xd30 [ 107.162521][ T2972] ? __kthread_parkme+0x169/0x1d0 [ 107.167645][ T2972] ? __pfx_worker_thread+0x10/0x10 [ 107.172800][ T2972] kthread+0x7a9/0x920 [ 107.176948][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.181597][ T2972] ? __pfx_worker_thread+0x10/0x10 [ 107.186838][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.191469][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.196139][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.200764][ T2972] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.206299][ T2972] ? lockdep_hardirqs_on+0x99/0x150 [ 107.211584][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.216478][ T2972] ret_from_fork+0x4b/0x80 [ 107.221283][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.225983][ T2972] ret_from_fork_asm+0x1a/0x30 [ 107.230804][ T2972] [ 107.233836][ T2972] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.241123][ T2972] CPU: 1 UID: 0 PID: 2972 Comm: kworker/u8:9 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 107.251474][ T2972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.261559][ T2972] Workqueue: events_unbound cfg80211_wiphy_work [ 107.267841][ T2972] Call Trace: [ 107.271127][ T2972] [ 107.274060][ T2972] dump_stack_lvl+0x241/0x360 [ 107.278764][ T2972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.283973][ T2972] ? __pfx__printk+0x10/0x10 [ 107.288571][ T2972] ? _printk+0xd5/0x120 [ 107.292743][ T2972] ? __init_begin+0x41000/0x41000 [ 107.297785][ T2972] ? vscnprintf+0x5d/0x90 [ 107.302124][ T2972] panic+0x349/0x880 [ 107.306030][ T2972] ? __warn+0x174/0x4d0 [ 107.310193][ T2972] ? __pfx_panic+0x10/0x10 [ 107.314647][ T2972] ? ret_from_fork_asm+0x1a/0x30 [ 107.319613][ T2972] __warn+0x344/0x4d0 [ 107.323609][ T2972] ? ieee80211_start_next_roc+0x1e3/0x250 [ 107.329351][ T2972] report_bug+0x2b3/0x500 [ 107.333716][ T2972] ? ieee80211_start_next_roc+0x1e3/0x250 [ 107.339461][ T2972] ? ieee80211_start_next_roc+0x1e3/0x250 [ 107.345206][ T2972] ? ieee80211_start_next_roc+0x1e5/0x250 [ 107.350947][ T2972] handle_bug+0xde/0x120 [ 107.355214][ T2972] exc_invalid_op+0x1a/0x50 [ 107.359737][ T2972] asm_exc_invalid_op+0x1a/0x20 [ 107.364606][ T2972] RIP: 0010:ieee80211_start_next_roc+0x1e3/0x250 [ 107.370955][ T2972] Code: f6 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f e9 91 c0 da ff e8 3c 3a 4a f6 90 0f 0b 90 e9 b5 fe ff ff e8 2e 3a 4a f6 90 <0f> 0b 90 e9 fc fe ff ff 48 c7 c1 30 d7 3d 90 80 e1 07 80 c1 03 38 [ 107.390573][ T2972] RSP: 0018:ffffc9000b7478f8 EFLAGS: 00010293 [ 107.396657][ T2972] RAX: ffffffff8b77c4b2 RBX: 0000000000000001 RCX: ffff888030325a00 [ 107.404638][ T2972] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 107.412624][ T2972] RBP: ffffc9000b747ac0 R08: ffffffff8b77c3fc R09: 1ffffffff28ad60f [ 107.420606][ T2972] R10: dffffc0000000000 R11: fffffbfff28ad610 R12: dffffc0000000000 [ 107.428588][ T2972] R13: dffffc0000000000 R14: ffff8880341d0e40 R15: ffff888142e912a0 [ 107.436585][ T2972] ? ieee80211_start_next_roc+0x12c/0x250 [ 107.442333][ T2972] ? ieee80211_start_next_roc+0x1e2/0x250 [ 107.448082][ T2972] ? ieee80211_start_next_roc+0x1e2/0x250 [ 107.453820][ T2972] ieee80211_scan_work+0x1cc/0x1d30 [ 107.459060][ T2972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.465064][ T2972] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 107.470722][ T2972] ? rcu_is_watching+0x15/0xb0 [ 107.475507][ T2972] cfg80211_wiphy_work+0x2f0/0x490 [ 107.480664][ T2972] ? process_scheduled_works+0x9c6/0x18e0 [ 107.486400][ T2972] process_scheduled_works+0xabe/0x18e0 [ 107.491997][ T2972] ? __pfx_process_scheduled_works+0x10/0x10 [ 107.498006][ T2972] ? assign_work+0x364/0x3d0 [ 107.502622][ T2972] worker_thread+0x870/0xd30 [ 107.507252][ T2972] ? __kthread_parkme+0x169/0x1d0 [ 107.512298][ T2972] ? __pfx_worker_thread+0x10/0x10 [ 107.517434][ T2972] kthread+0x7a9/0x920 [ 107.521541][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.526166][ T2972] ? __pfx_worker_thread+0x10/0x10 [ 107.531296][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.535891][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.541108][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.545708][ T2972] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.550919][ T2972] ? lockdep_hardirqs_on+0x99/0x150 [ 107.556132][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.560734][ T2972] ret_from_fork+0x4b/0x80 [ 107.565163][ T2972] ? __pfx_kthread+0x10/0x10 [ 107.569764][ T2972] ret_from_fork_asm+0x1a/0x30 [ 107.574564][ T2972] [ 107.577847][ T2972] Kernel Offset: disabled [ 107.582183][ T2972] Rebooting in 86400 seconds..