./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor388063735
<...>
Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts.
execve("./syz-executor388063735", ["./syz-executor388063735"], 0x7ffc5fd15060 /* 10 vars */) = 0
brk(NULL) = 0x555556644000
brk(0x555556644c40) = 0x555556644c40
arch_prctl(ARCH_SET_FS, 0x555556644300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor388063735", 4096) = 27
brk(0x555556665c40) = 0x555556665c40
brk(0x555556666000) = 0x555556666000
mprotect(0x7f976a19b000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
recvfrom(4, [{nlmsg_len=2476, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5078}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x41\x01\x00\x00\xd8\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2476
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5078}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(4) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=8}) = 0
sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x22\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x08\x00\x00\x00\x08\x00\x05\x00\x03\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36
sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x74\x00\x00\x00\x22\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x08\x00\x03\x00\x08\x00\x00\x00\x28\x00\x0e\x00\x80\x00\x00\x00\xff\xff\xff\xff\xff\xff\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x01\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x08\x00\x0c\x00\x64\x00\x00\x00\x08\x00\x0d\x00\x00\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02"..., iov_len=116}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 116
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5
sendto(5, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
recvfrom(5, [{nlmsg_len=2476, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-647649524}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x41\x01\x00\x00\xd8\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2476
recvfrom(5, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-647649524}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(5) = 0
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=8}) = 0
[ 74.714544][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 74.738284][ T5078] ------------[ cut here ]------------
[ 74.743988][ T5078] WARNING: CPU: 1 PID: 5078 at net/mac80211/rate.c:290 ieee80211_check_rate_mask+0x2f8/0x3d0
[ 74.754349][ T5078] Modules linked in:
[ 74.758385][ T5078] CPU: 1 PID: 5078 Comm: syz-executor388 Not tainted 6.2.0-syzkaller-02299-g4a7d37e824f5 #0
[ 74.768641][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 74.778828][ T5078] RIP: 0010:ieee80211_check_rate_mask+0x2f8/0x3d0
[ 74.785312][ T5078] Code: 00 41 89 9c ac b0 0c 00 00 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 36 fc 35 f8 e8 31 fc 35 f8 0f 0b eb e4 e8 28 fc 35 f8 <0f> 0b eb db e8 cf 6e 86 f8 e9 d3 fd ff ff 48 89 df e8 c2 6e 86 f8
[ 74.805053][ T5078] RSP: 0018:ffffc90003c7f3f8 EFLAGS: 00010293
[ 74.811216][ T5078] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 74.819314][ T5078] RDX: ffff888075d50000 RSI: ffffffff894be058 RDI: 0000000000000005
[ 74.827336][ T5078] RBP: ffff88802033a248 R08: 0000000000000005 R09: 0000000000000000
[ 74.835377][ T5078] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802033a728
[ 74.843418][ T5078] R13: 0000000000000000 R14: ffff8880296d1820 R15: 0000000000000000
[ 74.851463][ T5078] FS: 0000555556644300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 74.860464][ T5078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.867174][ T5078] CR2: 0000565343a44158 CR3: 0000000026cde000 CR4: 00000000003506e0
[ 74.875215][ T5078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 74.883342][ T5078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 74.891374][ T5078] Call Trace:
[ 74.894675][ T5078]
[ 74.897773][ T5078] ieee80211_change_bss+0x6ec/0x1010
[ 74.903131][ T5078] nl80211_set_bss+0x842/0xd90
[ 74.908024][ T5078] ? nl80211_add_link+0xa10/0xa10
[ 74.913111][ T5078] ? nl80211_pre_doit+0x120/0xab0
[ 74.918231][ T5078] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 74.924447][ T5078] ? genl_start+0x660/0x660
[ 74.929044][ T5078] ? apparmor_capable+0x1dc/0x460
[ 74.934133][ T5078] ? ns_capable+0xe2/0x100
[ 74.938690][ T5078] genl_rcv_msg+0x4ff/0x7e0
[ 74.943299][ T5078] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 74.949737][ T5078] ? validate_beacon_tx_rate+0x790/0x790
[ 74.955428][ T5078] ? nl80211_add_link+0xa10/0xa10
[ 74.961064][ T5078] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0
[ 74.967027][ T5078] ? kasan_save_stack+0x35/0x40
[ 74.971980][ T5078] ? kasan_save_stack+0x22/0x40
[ 74.976889][ T5078] netlink_rcv_skb+0x165/0x440
[ 74.981739][ T5078] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 74.988176][ T5078] ? netlink_ack+0x1370/0x1370
[ 74.993011][ T5078] genl_rcv+0x28/0x40
[ 74.997026][ T5078] netlink_unicast+0x547/0x7f0
[ 75.001903][ T5078] ? netlink_attachskb+0x890/0x890
[ 75.007065][ T5078] ? __virt_addr_valid+0x61/0x2e0
[ 75.012176][ T5078] ? __phys_addr_symbol+0x30/0x70
[ 75.017267][ T5078] ? __check_object_size+0x2e2/0x5a0
[ 75.022672][ T5078] netlink_sendmsg+0x925/0xe20
[ 75.027582][ T5078] ? netlink_unicast+0x7f0/0x7f0
[ 75.032644][ T5078] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 75.038018][ T5078] ? netlink_unicast+0x7f0/0x7f0
[ 75.043007][ T5078] sock_sendmsg+0xd3/0x120
[ 75.047459][ T5078] ____sys_sendmsg+0x712/0x8c0
[ 75.052342][ T5078] ? copy_msghdr_from_user+0xfc/0x150
[ 75.057812][ T5078] ? kernel_sendmsg+0x50/0x50
[ 75.062584][ T5078] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 75.068659][ T5078] ___sys_sendmsg+0x110/0x1b0
[ 75.073385][ T5078] ? do_recvmmsg+0x6e0/0x6e0
[ 75.078070][ T5078] ? lock_release+0x830/0x830
[ 75.082802][ T5078] ? ptrace_stop.part.0+0x4a3/0x8e0
[ 75.088099][ T5078] ? do_raw_spin_lock+0x124/0x2b0
[ 75.093174][ T5078] ? rwlock_bug.part.0+0x90/0x90
[ 75.098280][ T5078] ? __fget_light+0x20a/0x270
[ 75.103022][ T5078] __sys_sendmsg+0xf7/0x1c0
[ 75.107552][ T5078] ? __sys_sendmsg_sock+0x40/0x40
[ 75.112686][ T5078] ? lockdep_hardirqs_on+0x7d/0x100
[ 75.117966][ T5078] ? _raw_spin_unlock_irq+0x2e/0x50
[ 75.123209][ T5078] ? ptrace_notify+0xfe/0x140
[ 75.127994][ T5078] do_syscall_64+0x39/0xb0
[ 75.132477][ T5078] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 75.138449][ T5078] RIP: 0033:0x7f976a12f039
[ 75.142901][ T5078] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 75.162700][ T5078] RSP: 002b:00007ffd6607e8b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 75.171415][ T5078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f976a12f039
[ 75.179503][ T5078] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004
[ 75.187984][ T5078] RBP: 00007f976a0f2a00 R08: 0000000000000000 R09: 0000000000000000
[ 75.195987][ T5078] R10: 0000000000000024 R11: 0000000000000246 R12: 00007f976a0f2a90
[ 75.204050][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 75.212119][ T5078]
[ 75.215178][ T5078] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 75.222553][ T5078] CPU: 1 PID: 5078 Comm: syz-executor388 Not tainted 6.2.0-syzkaller-02299-g4a7d37e824f5 #0
[ 75.232631][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 75.242699][ T5078] Call Trace:
[ 75.246004][ T5078]
[ 75.248944][ T5078] dump_stack_lvl+0xd1/0x138
[ 75.253586][ T5078] panic+0x2cc/0x626
[ 75.257505][ T5078] ? panic_print_sys_info.part.0+0x110/0x110
[ 75.263541][ T5078] ? ieee80211_check_rate_mask+0x2f8/0x3d0
[ 75.269382][ T5078] check_panic_on_warn.cold+0x19/0x35
[ 75.274787][ T5078] __warn+0xf2/0x1a0
[ 75.278702][ T5078] ? ieee80211_check_rate_mask+0x2f8/0x3d0
[ 75.284527][ T5078] report_bug+0x289/0x440
[ 75.288878][ T5078] handle_bug+0x3c/0x70
[ 75.293063][ T5078] exc_invalid_op+0x18/0x50
[ 75.297595][ T5078] asm_exc_invalid_op+0x1a/0x20
[ 75.302481][ T5078] RIP: 0010:ieee80211_check_rate_mask+0x2f8/0x3d0
[ 75.308927][ T5078] Code: 00 41 89 9c ac b0 0c 00 00 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 36 fc 35 f8 e8 31 fc 35 f8 0f 0b eb e4 e8 28 fc 35 f8 <0f> 0b eb db e8 cf 6e 86 f8 e9 d3 fd ff ff 48 89 df e8 c2 6e 86 f8
[ 75.328647][ T5078] RSP: 0018:ffffc90003c7f3f8 EFLAGS: 00010293
[ 75.334759][ T5078] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 75.342752][ T5078] RDX: ffff888075d50000 RSI: ffffffff894be058 RDI: 0000000000000005
[ 75.350747][ T5078] RBP: ffff88802033a248 R08: 0000000000000005 R09: 0000000000000000
[ 75.358738][ T5078] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802033a728
[ 75.366728][ T5078] R13: 0000000000000000 R14: ffff8880296d1820 R15: 0000000000000000
[ 75.374735][ T5078] ? ieee80211_check_rate_mask+0x2f8/0x3d0
[ 75.380592][ T5078] ? ieee80211_check_rate_mask+0x2f8/0x3d0
[ 75.386432][ T5078] ieee80211_change_bss+0x6ec/0x1010
[ 75.391767][ T5078] nl80211_set_bss+0x842/0xd90
[ 75.396565][ T5078] ? nl80211_add_link+0xa10/0xa10
[ 75.401634][ T5078] ? nl80211_pre_doit+0x120/0xab0
[ 75.406706][ T5078] genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 75.412898][ T5078] ? genl_start+0x660/0x660
[ 75.417435][ T5078] ? apparmor_capable+0x1dc/0x460
[ 75.422503][ T5078] ? ns_capable+0xe2/0x100
[ 75.426963][ T5078] genl_rcv_msg+0x4ff/0x7e0
[ 75.431518][ T5078] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 75.437920][ T5078] ? validate_beacon_tx_rate+0x790/0x790
[ 75.443620][ T5078] ? nl80211_add_link+0xa10/0xa10
[ 75.448690][ T5078] ? cfg80211_vendor_cmd_reply+0x2f0/0x2f0
[ 75.454558][ T5078] ? kasan_save_stack+0x35/0x40
[ 75.459448][ T5078] ? kasan_save_stack+0x22/0x40
[ 75.464345][ T5078] netlink_rcv_skb+0x165/0x440
[ 75.469160][ T5078] ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 75.475530][ T5078] ? netlink_ack+0x1370/0x1370
[ 75.480366][ T5078] genl_rcv+0x28/0x40
[ 75.484381][ T5078] netlink_unicast+0x547/0x7f0
[ 75.489198][ T5078] ? netlink_attachskb+0x890/0x890
[ 75.494341][ T5078] ? __virt_addr_valid+0x61/0x2e0
[ 75.499402][ T5078] ? __phys_addr_symbol+0x30/0x70
[ 75.504549][ T5078] ? __check_object_size+0x2e2/0x5a0
[ 75.509882][ T5078] netlink_sendmsg+0x925/0xe20
[ 75.514698][ T5078] ? netlink_unicast+0x7f0/0x7f0
[ 75.519695][ T5078] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 75.525031][ T5078] ? netlink_unicast+0x7f0/0x7f0
[ 75.529999][ T5078] sock_sendmsg+0xd3/0x120
[ 75.534457][ T5078] ____sys_sendmsg+0x712/0x8c0
[ 75.539260][ T5078] ? copy_msghdr_from_user+0xfc/0x150
[ 75.544656][ T5078] ? kernel_sendmsg+0x50/0x50
[ 75.549419][ T5078] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 75.555436][ T5078] ___sys_sendmsg+0x110/0x1b0
[ 75.560164][ T5078] ? do_recvmmsg+0x6e0/0x6e0
[ 75.565233][ T5078] ? lock_release+0x830/0x830
[ 75.569931][ T5078] ? ptrace_stop.part.0+0x4a3/0x8e0
[ 75.575158][ T5078] ? do_raw_spin_lock+0x124/0x2b0
[ 75.580212][ T5078] ? rwlock_bug.part.0+0x90/0x90
[ 75.585191][ T5078] ? __fget_light+0x20a/0x270
[ 75.589910][ T5078] __sys_sendmsg+0xf7/0x1c0
[ 75.594439][ T5078] ? __sys_sendmsg_sock+0x40/0x40
[ 75.599499][ T5078] ? lockdep_hardirqs_on+0x7d/0x100
[ 75.604721][ T5078] ? _raw_spin_unlock_irq+0x2e/0x50
[ 75.609967][ T5078] ? ptrace_notify+0xfe/0x140
[ 75.614677][ T5078] do_syscall_64+0x39/0xb0
[ 75.619133][ T5078] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 75.625066][ T5078] RIP: 0033:0x7f976a12f039
[ 75.629511][ T5078] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 75.649182][ T5078] RSP: 002b:00007ffd6607e8b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 75.657630][ T5078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f976a12f039
[ 75.665650][ T5078] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004
[ 75.673649][ T5078] RBP: 00007f976a0f2a00 R08: 0000000000000000 R09: 0000000000000000
[ 75.681672][ T5078] R10: 0000000000000024 R11: 0000000000000246 R12: 00007f976a0f2a90
[ 75.689710][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 75.697772][ T5078]
[ 75.701140][ T5078] Kernel Offset: disabled
[ 75.705568][ T5078] Rebooting in 86400 seconds..