./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor691683854

<...>
Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts.
execve("./syz-executor691683854", ["./syz-executor691683854"], 0x7ffe6d6117b0 /* 10 vars */) = 0
brk(NULL)                               = 0x55555665e000
brk(0x55555665ed00)                     = 0x55555665ed00
arch_prctl(ARCH_SET_FS, 0x55555665e380) = 0
set_tid_address(0x55555665e650)         = 5023
set_robust_list(0x55555665e660, 24)     = 0
rseq(0x55555665eca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor691683854", 4096) = 27
getrandom("\x42\xbf\x5a\xa2\x40\x20\x75\x1f", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55555665ed00
brk(0x55555667fd00)                     = 0x55555667fd00
brk(0x555556680000)                     = 0x555556680000
mprotect(0x7fe7bbd6b000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5024 attached
, child_tidptr=0x55555665e650) = 5024
[pid  5024] set_robust_list(0x55555665e660, 24) = 0
[pid  5024] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5024] setsid()                    = 1
[pid  5024] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5024] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5024] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5024] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5024] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5024] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5024] unshare(CLONE_NEWNS)        = 0
[pid  5024] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5024] unshare(CLONE_NEWIPC)       = 0
[pid  5024] unshare(CLONE_NEWCGROUP)    = 0
[pid  5024] unshare(CLONE_NEWUTS)       = 0
[pid  5024] unshare(CLONE_SYSVSEM)      = 0
[pid  5024] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5024] write(3, "16777216", 8)     = 8
[pid  5024] close(3)                    = 0
[pid  5024] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5024] write(3, "536870912", 9)    = 9
[pid  5024] close(3)                    = 0
[pid  5024] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5024] write(3, "1024", 4)         = 4
[pid  5024] close(3)                    = 0
[pid  5024] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5024] write(3, "8192", 4)         = 4
[pid  5024] close(3)                    = 0
[pid  5024] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5024] write(3, "1024", 4)         = 4
[pid  5024] close(3)                    = 0
[pid  5024] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5024] write(3, "1024", 4)         = 4
[pid  5024] close(3)                    = 0
[pid  5024] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5024] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5024] close(3)                    = 0
[pid  5024] getpid()                    = 1
[pid  5024] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5024] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5024] unshare(CLONE_NEWNET)       = 0
[pid  5024] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5024] write(3, "0 65535", 7)      = 7
[pid  5024] close(3)                    = 0
[pid  5024] openat(AT_FDCWD, "/dev/rfkill", O_RDWR) = 3
[pid  5024] write(3, "\x00\x00\x00\x00\x00\x03\x00\x00", 8) = 8
[pid  5024] close(3)                    = 0
[pid  5024] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid  5024] sendto(3, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40
[pid  5024] recvfrom(3, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x29\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1c\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244
[pid  5024] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5024] sendto(3, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
[pid  5024] recvfrom(3, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496
[pid  5024] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5024] sendto(3, [{nlmsg_len=36, nlmsg_type=0x29 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
[pid  5024] recvfrom(3, [{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=2, msg=[{nlmsg_len=36, nlmsg_type=0x29 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x00\x00\x00"]}], 4096, 0, NULL, NULL) = 56
[pid  5024] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5024] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0
[pid  5024] close(4)                    = 0
[pid  5024] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
[pid  5024] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5024] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
[pid  5024] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0
[pid  5024] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan0", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST}) = 0
[pid  5024] close(4)                    = 0
[pid  5024] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 64
[pid  5024] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5024] sendto(3, [{nlmsg_len=36, nlmsg_type=0x29 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
[pid  5024] recvfrom(3, [{nlmsg_len=56, nlmsg_type=NLMSG_ERROR, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, {error=3, msg=[{nlmsg_len=36, nlmsg_type=0x29 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x04\x00\x00\x00\x04\x00\x0e\x00\x0a\x00\x16\x00\x08\x02\x11\x00\x00\x01\x00\x00"]}], 4096, 0, NULL, NULL) = 56
[pid  5024] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5024] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0
[pid  5024] close(4)                    = 0
[pid  5024] sendto(3, [{nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
[pid  5024] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=36, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5024] socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
[pid  5024] ioctl(4, SIOCGIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_BROADCAST|IFF_MULTICAST}) = 0
[pid  5024] ioctl(4, SIOCSIFFLAGS, {ifr_name="wlan1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_MULTICAST}) = 0
[pid  5024] close(4)                    = 0
[   66.336726][  T917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.345044][  T917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[pid  5024] sendto(3, [{nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x2b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x10\x10\x10\x10\x10\x10\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00\x0a\x00\x06\x00\x50\x50\x50\x50\x50\x50\x00\x00\x04\x00\x3c\x00"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 64
[pid  5024] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x23 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5024] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5024] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0
[pid  5024] close(4)                    = 0
[pid  5024] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4
[pid  5024] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
[pid  5024] recvfrom(4, [{nlmsg_len=1444, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0b\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x30\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1444
[pid  5024] close(4)                    = 0
[pid  5024] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5024] ioctl(4, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0
[pid  5024] close(4)                    = 0
[pid  5024] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4
[pid  5024] sendto(4, [{nlmsg_len=32, nlmsg_type=0x12 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
[pid  5024] recvfrom(4, [{nlmsg_len=1444, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=1}, "\x00\x00\x01\x00\x0c\x00\x00\x00\x43\x10\x01\x00\x00\x00\x00\x00\x0a\x00\x03\x00\x77\x6c\x61\x6e\x31\x00\x00\x00\x08\x00\x0d\x00\xe8\x03\x00\x00\x05\x00\x10\x00\x06\x00\x00\x00\x05\x00\x11\x00\x00\x00\x00\x00\x08\x00\x04\x00\xdc\x05\x00\x00\x08\x00\x32\x00\x00\x01\x00\x00\x08\x00\x33\x00\x00\x09\x00\x00\x08\x00\x1b\x00\x00\x00\x00\x00\x08\x00\x1e\x00\x00\x00\x00\x00\x08\x00\x3d\x00\x00\x00\x00\x00"...], 4096, 0, NULL, NULL) = 1444
[pid  5024] close(4)                    = 0
[pid  5024] close(3)                    = 0
[pid  5024] mkdir("/dev/binderfs", 0777) = 0
[pid  5024] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5024] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5024] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5027 attached
, child_tidptr=0x55555665e650) = 2
[pid  5027] set_robust_list(0x55555665e660, 24) = 0
[pid  5027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5027] setpgid(0, 0)               = 0
[pid  5027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5027] write(3, "1000", 4)         = 4
[pid  5027] close(3)                    = 0
[pid  5027] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid  5027] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
[pid  5027] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
[pid  5027] recvfrom(4, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496
[pid  5027] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5027] close(4)                    = 0
[pid  5027] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0
[pid  5027] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x30\x00\x00\x00\x23\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x08\x00\x05\x00\x07\x00\x00\x00\x0a\x00\x18\x00\x03\x03\x03\x03\x03\x03\x00\x00", iov_len=48}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 48
[   66.393643][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.406530][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[pid  5027] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4
[pid  5027] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x14\x00\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x01", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 52
[pid  5027] close(3)                    = 0
[pid  5027] close(4)                    = 0
[pid  5027] close(5)                    = -1 EBADF (Bad file descriptor)
[pid  5027] close(6)                    = -1 EBADF (Bad file descriptor)
[pid  5027] close(7)                    = -1 EBADF (Bad file descriptor)
[pid  5027] close(8)                    = -1 EBADF (Bad file descriptor)
[pid  5027] close(9)                    = -1 EBADF (Bad file descriptor)
[pid  5027] close(10)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(11)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(12)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(13)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(14)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(15)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(16)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(17)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(18)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(19)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(20)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(21)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(22)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(23)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(24)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(25)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(26)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(27)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(28)                   = -1 EBADF (Bad file descriptor)
[pid  5027] close(29)                   = -1 EBADF (Bad file descriptor)
[   66.456547][ T5027] netlink: 'syz-executor691': attribute type 27 has an invalid length.
[pid  5027] exit_group(0)               = ?
[pid  5027] +++ exited with 0 +++
[pid  5024] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[pid  5024] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5024] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555665e650) = 3
./strace-static-x86_64: Process 5028 attached
[pid  5028] set_robust_list(0x55555665e660, 24) = 0
[pid  5028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5028] setpgid(0, 0)               = 0
[pid  5028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5028] write(3, "1000", 4)         = 4
[pid  5028] close(3)                    = 0
[pid  5028] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid  5028] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
[pid  5028] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32
[pid  5028] recvfrom(4, [{nlmsg_len=2496, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x23\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x46\x01\x00\x00\xec\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2496
[pid  5028] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5028] close(4)                    = 0
[pid  5028] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan0", ifr_ifindex=11}) = 0
[   66.511615][ T5027] syz-executor691 (5027) used greatest stack depth: 19944 bytes left
[   66.530148][ T5028] ------------[ cut here ]------------
[   66.535877][ T5028] wlan0: Failed check-sdata-in-driver check, flags: 0x0
[   66.543756][ T5028] WARNING: CPU: 1 PID: 5028 at net/mac80211/main.c:236 ieee80211_bss_info_change_notify+0x59c/0x780
[   66.554827][ T5028] Modules linked in:
[   66.558769][ T5028] CPU: 1 PID: 5028 Comm: syz-executor691 Not tainted 6.5.0-rc7-syzkaller-00024-g93f5de5f648d #0
[   66.569333][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[   66.580609][ T5028] RIP: 0010:ieee80211_bss_info_change_notify+0x59c/0x780
[   66.587769][ T5028] Code: 74 05 e8 37 31 b4 f7 49 8b 86 f8 08 00 00 49 8d b6 18 09 00 00 48 85 c0 48 0f 45 f0 48 c7 c7 80 5c 10 8c 89 da e8 a4 78 22 f7 <0f> 0b e9 c4 fc ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e0 fa
[   66.607672][ T5028] RSP: 0018:ffffc90003a2f190 EFLAGS: 00010246
[   66.613765][ T5028] RAX: b5f5c3fdcebc2a00 RBX: 0000000000000000 RCX: ffff8880143b5940
[   66.621825][ T5028] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[   66.629869][ T5028] RBP: 1ffff1100fc25ab0 R08: ffffffff8152d442 R09: 1ffff11017325162
[   66.638394][ T5028] R10: dffffc0000000000 R11: ffffed1017325163 R12: ffff88807e12e898
[   66.646873][ T5028] R13: 0000000000000a00 R14: ffff88807e12cc80 R15: ffff88807e12d580
[   66.655225][ T5028] FS:  000055555665e380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[   66.665011][ T5028] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   66.672223][ T5028] CR2: 0000000020000200 CR3: 000000007ee9d000 CR4: 00000000003506e0
[   66.680742][ T5028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   66.689241][ T5028] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   66.697393][ T5028] Call Trace:
[   66.700738][ T5028]  <TASK>
[   66.703708][ T5028]  ? __warn+0x162/0x4a0
[   66.707974][ T5028]  ? ieee80211_bss_info_change_notify+0x59c/0x780
[   66.714542][ T5028]  ? report_bug+0x2b3/0x500
[   66.719103][ T5028]  ? ieee80211_bss_info_change_notify+0x59c/0x780
[   66.726045][ T5028]  ? handle_bug+0x3d/0x70
[   66.730848][ T5028]  ? exc_invalid_op+0x1a/0x50
[   66.735660][ T5028]  ? asm_exc_invalid_op+0x1a/0x20
[   66.740785][ T5028]  ? __warn_printk+0x292/0x360
[   66.745746][ T5028]  ? ieee80211_bss_info_change_notify+0x59c/0x780
[   66.752376][ T5028]  ieee80211_ibss_disconnect+0x562/0x6f0
[   66.758253][ T5028]  ieee80211_ibss_leave+0x25/0x130
[   66.763516][ T5028]  __cfg80211_leave_ibss+0x1d9/0x400
[   66.768985][ T5028]  cfg80211_leave_ibss+0x5f/0x80
[   66.774203][ T5028]  cfg80211_change_iface+0x529/0xf80
[   66.779558][ T5028]  nl80211_set_interface+0x5fe/0x880
[   66.784974][ T5028]  ? nl80211_dump_interface+0x6a0/0x6a0
[   66.790599][ T5028]  ? mutex_lock_nested+0x1b/0x20
[   66.795643][ T5028]  genl_rcv_msg+0xc85/0xf20
[   66.800234][ T5028]  ? genl_bind+0x360/0x360
[   66.804772][ T5028]  ? verify_lock_unused+0x140/0x140
[   66.810820][ T5028]  ? verify_lock_unused+0x140/0x140
[   66.816212][ T5028]  ? kasan_set_track+0x61/0x70
[   66.821026][ T5028]  ? kasan_set_track+0x4f/0x70
[   66.825915][ T5028]  ? __kasan_slab_alloc+0x66/0x70
[   66.831005][ T5028]  ? slab_post_alloc_hook+0x6c/0x3b0
[   66.836401][ T5028]  ? kmem_cache_alloc_node+0x149/0x330
[   66.842062][ T5028]  ? kmalloc_reserve+0x8a/0x240
[   66.847105][ T5028]  ? __alloc_skb+0x1b1/0x420
[   66.851835][ T5028]  ? netlink_sendmsg+0x6fc/0xd60
[   66.856874][ T5028]  ? ____sys_sendmsg+0x592/0x890
[   66.861859][ T5028]  ? __sys_sendmsg+0x2b0/0x3a0
[   66.866763][ T5028]  ? do_syscall_64+0x41/0xc0
[   66.871424][ T5028]  ? rdev_mod_link_station+0x2e0/0x2e0
[   66.877009][ T5028]  ? nl80211_dump_interface+0x6a0/0x6a0
[   66.882837][ T5028]  ? nl80211_pre_doit+0x8a0/0x8a0
[   66.888003][ T5028]  netlink_rcv_skb+0x1df/0x430
[   66.892835][ T5028]  ? genl_bind+0x360/0x360
[   66.897928][ T5028]  ? netlink_ack+0x12a0/0x12a0
[   66.902788][ T5028]  ? __lock_acquire+0x7f70/0x7f70
[   66.908015][ T5028]  ? down_read+0x1b5/0x2f0
[   66.912631][ T5028]  ? genl_rcv+0xd/0x40
[   66.916810][ T5028]  genl_rcv+0x28/0x40
[   66.920855][ T5028]  netlink_unicast+0x7c3/0x990
[   66.925864][ T5028]  ? netlink_detachskb+0x90/0x90
[   66.930851][ T5028]  ? __virt_addr_valid+0x22f/0x2e0
[   66.936088][ T5028]  ? __phys_addr_symbol+0x2f/0x70
[   66.941188][ T5028]  ? __check_object_size+0x4e1/0xa40
[   66.946670][ T5028]  ? bpf_lsm_netlink_send+0x9/0x10
[   66.952133][ T5028]  netlink_sendmsg+0xa2a/0xd60
[   66.957300][ T5028]  ? netlink_getsockopt+0x5f0/0x5f0
[   66.962545][ T5028]  ? finish_task_switch+0x1ed/0x650
[   66.968016][ T5028]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[   66.973359][ T5028]  ? security_socket_sendmsg+0x81/0xa0
[   66.979024][ T5028]  ? netlink_getsockopt+0x5f0/0x5f0
[   66.984408][ T5028]  ____sys_sendmsg+0x592/0x890
[   66.989228][ T5028]  ? __sys_sendmsg_sock+0x30/0x30
[   66.994406][ T5028]  __sys_sendmsg+0x2b0/0x3a0
[   66.999067][ T5028]  ? ____sys_sendmsg+0x890/0x890
[   67.004242][ T5028]  ? print_irqtrace_events+0x220/0x220
[   67.009775][ T5028]  ? ptrace_stop+0x75a/0x970
[   67.014544][ T5028]  ? _raw_spin_unlock_irq+0x2e/0x50
[   67.019801][ T5028]  ? ptrace_notify+0x278/0x380
[   67.024691][ T5028]  ? syscall_enter_from_user_mode+0x32/0x230
[   67.030741][ T5028]  ? syscall_enter_from_user_mode+0x8c/0x230
[   67.036829][ T5028]  do_syscall_64+0x41/0xc0
[   67.041331][ T5028]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   67.047513][ T5028] RIP: 0033:0x7fe7bbcf3469
[   67.051974][ T5028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   67.071671][ T5028] RSP: 002b:00007ffede588bc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   67.080348][ T5028] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7bbcf3469
[   67.088517][ T5028] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[   67.096603][ T5028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   67.104895][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.112951][ T5028] R13: 0000000000000000 R14: 00007ffede588c40 R15: 00007ffede588c30
[   67.121320][ T5028]  </TASK>
[   67.124424][ T5028] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   67.132078][ T5028] CPU: 1 PID: 5028 Comm: syz-executor691 Not tainted 6.5.0-rc7-syzkaller-00024-g93f5de5f648d #0
[   67.142904][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[   67.153119][ T5028] Call Trace:
[   67.156575][ T5028]  <TASK>
[   67.159593][ T5028]  dump_stack_lvl+0x1e7/0x2d0
[   67.164326][ T5028]  ? nf_tcp_handle_invalid+0x650/0x650
[   67.169928][ T5028]  ? panic+0x770/0x770
[   67.174058][ T5028]  ? vscnprintf+0x5d/0x80
[   67.178514][ T5028]  panic+0x30f/0x770
[   67.183645][ T5028]  ? __warn+0x171/0x4a0
[   67.187856][ T5028]  ? __memcpy_flushcache+0x2b0/0x2b0
[   67.193291][ T5028]  __warn+0x314/0x4a0
[   67.197306][ T5028]  ? ieee80211_bss_info_change_notify+0x59c/0x780
[   67.203927][ T5028]  report_bug+0x2b3/0x500
[   67.208274][ T5028]  ? ieee80211_bss_info_change_notify+0x59c/0x780
[   67.214721][ T5028]  handle_bug+0x3d/0x70
[   67.218904][ T5028]  exc_invalid_op+0x1a/0x50
[   67.223454][ T5028]  asm_exc_invalid_op+0x1a/0x20
[   67.228341][ T5028] RIP: 0010:ieee80211_bss_info_change_notify+0x59c/0x780
[   67.235402][ T5028] Code: 74 05 e8 37 31 b4 f7 49 8b 86 f8 08 00 00 49 8d b6 18 09 00 00 48 85 c0 48 0f 45 f0 48 c7 c7 80 5c 10 8c 89 da e8 a4 78 22 f7 <0f> 0b e9 c4 fc ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e0 fa
[   67.255328][ T5028] RSP: 0018:ffffc90003a2f190 EFLAGS: 00010246
[   67.261437][ T5028] RAX: b5f5c3fdcebc2a00 RBX: 0000000000000000 RCX: ffff8880143b5940
[   67.269702][ T5028] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[   67.277697][ T5028] RBP: 1ffff1100fc25ab0 R08: ffffffff8152d442 R09: 1ffff11017325162
[   67.285776][ T5028] R10: dffffc0000000000 R11: ffffed1017325163 R12: ffff88807e12e898
[   67.293763][ T5028] R13: 0000000000000a00 R14: ffff88807e12cc80 R15: ffff88807e12d580
[   67.301872][ T5028]  ? __warn_printk+0x292/0x360
[   67.306761][ T5028]  ieee80211_ibss_disconnect+0x562/0x6f0
[   67.312510][ T5028]  ieee80211_ibss_leave+0x25/0x130
[   67.317651][ T5028]  __cfg80211_leave_ibss+0x1d9/0x400
[   67.322997][ T5028]  cfg80211_leave_ibss+0x5f/0x80
[   67.328051][ T5028]  cfg80211_change_iface+0x529/0xf80
[   67.333362][ T5028]  nl80211_set_interface+0x5fe/0x880
[   67.338678][ T5028]  ? nl80211_dump_interface+0x6a0/0x6a0
[   67.344339][ T5028]  ? mutex_lock_nested+0x1b/0x20
[   67.349306][ T5028]  genl_rcv_msg+0xc85/0xf20
[   67.353878][ T5028]  ? genl_bind+0x360/0x360
[   67.358432][ T5028]  ? verify_lock_unused+0x140/0x140
[   67.363771][ T5028]  ? verify_lock_unused+0x140/0x140
[   67.368992][ T5028]  ? kasan_set_track+0x61/0x70
[   67.373795][ T5028]  ? kasan_set_track+0x4f/0x70
[   67.378790][ T5028]  ? __kasan_slab_alloc+0x66/0x70
[   67.383843][ T5028]  ? slab_post_alloc_hook+0x6c/0x3b0
[   67.389255][ T5028]  ? kmem_cache_alloc_node+0x149/0x330
[   67.394780][ T5028]  ? kmalloc_reserve+0x8a/0x240
[   67.399662][ T5028]  ? __alloc_skb+0x1b1/0x420
[   67.404287][ T5028]  ? netlink_sendmsg+0x6fc/0xd60
[   67.409239][ T5028]  ? ____sys_sendmsg+0x592/0x890
[   67.414283][ T5028]  ? __sys_sendmsg+0x2b0/0x3a0
[   67.419062][ T5028]  ? do_syscall_64+0x41/0xc0
[   67.423880][ T5028]  ? rdev_mod_link_station+0x2e0/0x2e0
[   67.429371][ T5028]  ? nl80211_dump_interface+0x6a0/0x6a0
[   67.434968][ T5028]  ? nl80211_pre_doit+0x8a0/0x8a0
[   67.440051][ T5028]  netlink_rcv_skb+0x1df/0x430
[   67.444950][ T5028]  ? genl_bind+0x360/0x360
[   67.449402][ T5028]  ? netlink_ack+0x12a0/0x12a0
[   67.454201][ T5028]  ? __lock_acquire+0x7f70/0x7f70
[   67.459286][ T5028]  ? down_read+0x1b5/0x2f0
[   67.463763][ T5028]  ? genl_rcv+0xd/0x40
[   67.468034][ T5028]  genl_rcv+0x28/0x40
[   67.472091][ T5028]  netlink_unicast+0x7c3/0x990
[   67.476903][ T5028]  ? netlink_detachskb+0x90/0x90
[   67.481874][ T5028]  ? __virt_addr_valid+0x22f/0x2e0
[   67.487018][ T5028]  ? __phys_addr_symbol+0x2f/0x70
[   67.492065][ T5028]  ? __check_object_size+0x4e1/0xa40
[   67.497367][ T5028]  ? bpf_lsm_netlink_send+0x9/0x10
[   67.502522][ T5028]  netlink_sendmsg+0xa2a/0xd60
[   67.507346][ T5028]  ? netlink_getsockopt+0x5f0/0x5f0
[   67.512659][ T5028]  ? finish_task_switch+0x1ed/0x650
[   67.518152][ T5028]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[   67.523463][ T5028]  ? security_socket_sendmsg+0x81/0xa0
[   67.528954][ T5028]  ? netlink_getsockopt+0x5f0/0x5f0
[   67.534175][ T5028]  ____sys_sendmsg+0x592/0x890
[   67.538960][ T5028]  ? __sys_sendmsg_sock+0x30/0x30
[   67.544210][ T5028]  __sys_sendmsg+0x2b0/0x3a0
[   67.548937][ T5028]  ? ____sys_sendmsg+0x890/0x890
[   67.553926][ T5028]  ? print_irqtrace_events+0x220/0x220
[   67.559435][ T5028]  ? ptrace_stop+0x75a/0x970
[   67.564095][ T5028]  ? _raw_spin_unlock_irq+0x2e/0x50
[   67.569419][ T5028]  ? ptrace_notify+0x278/0x380
[   67.574308][ T5028]  ? syscall_enter_from_user_mode+0x32/0x230
[   67.580319][ T5028]  ? syscall_enter_from_user_mode+0x8c/0x230
[   67.586333][ T5028]  do_syscall_64+0x41/0xc0
[   67.590768][ T5028]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   67.596835][ T5028] RIP: 0033:0x7fe7bbcf3469
[   67.601319][ T5028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   67.621230][ T5028] RSP: 002b:00007ffede588bc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   67.629678][ T5028] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7bbcf3469
[   67.637851][ T5028] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[   67.645923][ T5028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   67.653932][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.662002][ T5028] R13: 0000000000000000 R14: 00007ffede588c40 R15: 00007ffede588c30
[   67.670031][ T5028]  </TASK>
[   67.673440][ T5028] Kernel Offset: disabled
[   67.677967][ T5028] Rebooting in 86400 seconds..