./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3120373993 <...> Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. execve("./syz-executor3120373993", ["./syz-executor3120373993"], 0x7ffd113a75f0 /* 10 vars */) = 0 brk(NULL) = 0x55559337e000 brk(0x55559337ed00) = 0x55559337ed00 arch_prctl(ARCH_SET_FS, 0x55559337e380) = 0 set_tid_address(0x55559337e650) = 5829 set_robust_list(0x55559337e660, 24) = 0 rseq(0x55559337eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3120373993", 4096) = 28 getrandom("\x9a\x72\x00\xac\x88\xa2\xf7\xb4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55559337ed00 brk(0x55559339fd00) = 0x55559339fd00 brk(0x5555933a0000) = 0x5555933a0000 mprotect(0x7f5d2d39c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5830 attached [pid 5830] set_robust_list(0x55559337e660, 24 [pid 5829] <... clone resumed>, child_tidptr=0x55559337e650) = 5830 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5830] getppid() = 0 [pid 5830] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5830] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5830] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5830] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5830] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5830] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5830] unshare(CLONE_NEWNS) = 0 [pid 5830] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5830] unshare(CLONE_NEWIPC) = 0 [pid 5830] unshare(CLONE_NEWCGROUP) = 0 [pid 5830] unshare(CLONE_NEWUTS) = 0 [pid 5830] unshare(CLONE_SYSVSEM) = 0 [pid 5830] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "16777216", 8) = 8 [pid 5830] close(3) = 0 [pid 5830] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "536870912", 9) = 9 [pid 5830] close(3) = 0 [pid 5830] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "1024", 4) = 4 [pid 5830] close(3) = 0 [pid 5830] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "8192", 4) = 4 [pid 5830] close(3) = 0 [pid 5830] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "1024", 4) = 4 [pid 5830] close(3) = 0 [pid 5830] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "1024", 4) = 4 [pid 5830] close(3) = 0 [pid 5830] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5830] close(3) = 0 [pid 5830] getpid() = 1 [pid 5830] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5834] set_robust_list(0x55559337e660, 24 [pid 5830] <... clone resumed>, child_tidptr=0x55559337e650) = 2 [pid 5834] <... set_robust_list resumed>) = 0 [pid 5834] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5834] setpgid(0, 0) = 0 [pid 5834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5834] write(3, "1000", 4) = 4 [pid 5834] close(3) = 0 executing program [pid 5834] write(1, "executing program\n", 18) = 18 [pid 5834] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5834] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5834] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5834] recvfrom(4, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5834] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5834] close(4) = 0 [pid 5834] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5834] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5834] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x30\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00", iov_len=48}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 48 [pid 5834] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5834] sendto(4, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 5834] recvfrom(4, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1072819129}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2c\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1d\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5834] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1072819129}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5834] sendto(4, [{nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00"], 20, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 20 [pid 5834] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1072819129}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5834] sendto(4, [{nlmsg_len=100, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00\x08\x00\x06\x00\x00\x00\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00\x33\x00\x03\x00\x50\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x01\x00\x00\x06\x02\x02\x02\x02\x02\x02\x01\x01\x02\x00"], 100, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 100 [pid 5834] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1072819129}, {error=0, msg={nlmsg_len=100, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5834] close(4) = 0 [pid 5834] bpf(BPF_PROG_LOAD, NULL, 0) = -1 E2BIG (Argument list too long) [pid 5834] socket(AF_QIPCRTR, SOCK_DGRAM, 0) = 4 [pid 5834] ioctl(4, SIOCSIFHWADDR, {ifr_name="wlan1", ifr_hwaddr={sa_family=ARPHRD_ETHER, sa_data=00:00:00:00:00:00}}) = -1 EADDRNOTAVAIL (Cannot assign requested address) [pid 5834] close(3) = 0 [pid 5834] close(4) = 0 [pid 5834] close(5) = -1 EBADF (Bad file descriptor) [pid 5834] close(6) = -1 EBADF (Bad file descriptor) [pid 5834] close(7) = -1 EBADF (Bad file descriptor) [pid 5834] close(8) = -1 EBADF (Bad file descriptor) [pid 5834] close(9) = -1 EBADF (Bad file descriptor) [pid 5834] close(10) = -1 EBADF (Bad file descriptor) [pid 5834] close(11) = -1 EBADF (Bad file descriptor) [pid 5834] close(12) = -1 EBADF (Bad file descriptor) [pid 5834] close(13) = -1 EBADF (Bad file descriptor) [pid 5834] close(14) = -1 EBADF (Bad file descriptor) [pid 5834] close(15) = -1 EBADF (Bad file descriptor) [pid 5834] close(16) = -1 EBADF (Bad file descriptor) [pid 5834] close(17) = -1 EBADF (Bad file descriptor) [pid 5834] close(18) = -1 EBADF (Bad file descriptor) [ 66.014332][ T5834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.027929][ T46] wlan1: No basic rates, using min rate instead [ 66.037580][ T46] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 66.046751][ T46] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [pid 5834] close(19) = -1 EBADF (Bad file descriptor) [pid 5834] close(20) = -1 EBADF (Bad file descriptor) [pid 5834] close(21) = -1 EBADF (Bad file descriptor) [pid 5834] close(22) = -1 EBADF (Bad file descriptor) [pid 5834] close(23) = -1 EBADF (Bad file descriptor) [pid 5834] close(24) = -1 EBADF (Bad file descriptor) [pid 5834] close(25) = -1 EBADF (Bad file descriptor) [pid 5834] close(26) = -1 EBADF (Bad file descriptor) [pid 5834] close(27) = -1 EBADF (Bad file descriptor) [pid 5834] close(28) = -1 EBADF (Bad file descriptor) [pid 5834] close(29) = -1 EBADF (Bad file descriptor) [pid 5834] exit_group(0) = ? [pid 5834] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5835 attached , child_tidptr=0x55559337e650) = 3 [pid 5835] set_robust_list(0x55559337e660, 24) = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 66.165816][ T1088] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [pid 5835] setpgid(0, 0) = 0 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1000", 4) = 4 [pid 5835] close(3) = 0 executing program [pid 5835] write(1, "executing program\n", 18) = 18 [pid 5835] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5835] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5835] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5835] recvfrom(4, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5835] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5835] close(4) = 0 [pid 5835] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5835] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5835] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x30\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00", iov_len=48}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 48 [pid 5835] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5835] sendto(4, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 5835] recvfrom(4, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-161867082}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2c\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1d\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5835] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-161867082}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5835] sendto(4, [{nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00"], 20, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 20 [pid 5835] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-161867082}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5835] sendto(4, [{nlmsg_len=100, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00\x08\x00\x06\x00\x00\x00\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00\x33\x00\x03\x00\x50\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x01\x00\x00\x06\x02\x02\x02\x02\x02\x02\x01\x01\x02\x00"], 100, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 100 [pid 5835] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-161867082}, {error=0, msg={nlmsg_len=100, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5835] close(4) = 0 [pid 5835] bpf(BPF_PROG_LOAD, NULL, 0) = -1 E2BIG (Argument list too long) [pid 5835] socket(AF_QIPCRTR, SOCK_DGRAM, 0) = 4 [pid 5835] ioctl(4, SIOCSIFHWADDR, {ifr_name="wlan1", ifr_hwaddr={sa_family=ARPHRD_ETHER, sa_data=00:00:00:00:00:00}}) = -1 EADDRNOTAVAIL (Cannot assign requested address) [pid 5835] close(3) = 0 [pid 5835] close(4) = 0 [pid 5835] close(5) = -1 EBADF (Bad file descriptor) [pid 5835] close(6) = -1 EBADF (Bad file descriptor) [pid 5835] close(7) = -1 EBADF (Bad file descriptor) [pid 5835] close(8) = -1 EBADF (Bad file descriptor) [pid 5835] close(9) = -1 EBADF (Bad file descriptor) [pid 5835] close(10) = -1 EBADF (Bad file descriptor) [pid 5835] close(11) = -1 EBADF (Bad file descriptor) [pid 5835] close(12) = -1 EBADF (Bad file descriptor) [pid 5835] close(13) = -1 EBADF (Bad file descriptor) [pid 5835] close(14) = -1 EBADF (Bad file descriptor) [pid 5835] close(15) = -1 EBADF (Bad file descriptor) [pid 5835] close(16) = -1 EBADF (Bad file descriptor) [pid 5835] close(17) = -1 EBADF (Bad file descriptor) [pid 5835] close(18) = -1 EBADF (Bad file descriptor) [pid 5835] close(19) = -1 EBADF (Bad file descriptor) [pid 5835] close(20) = -1 EBADF (Bad file descriptor) [pid 5835] close(21) = -1 EBADF (Bad file descriptor) [pid 5835] close(22) = -1 EBADF (Bad file descriptor) [pid 5835] close(23) = -1 EBADF (Bad file descriptor) [pid 5835] close(24) = -1 EBADF (Bad file descriptor) [pid 5835] close(25) = -1 EBADF (Bad file descriptor) [pid 5835] close(26) = -1 EBADF (Bad file descriptor) [pid 5835] close(27) = -1 EBADF (Bad file descriptor) [pid 5835] close(28) = -1 EBADF (Bad file descriptor) [pid 5835] close(29) = -1 EBADF (Bad file descriptor) [pid 5835] exit_group(0) = ? [pid 5835] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5836 attached [pid 5836] set_robust_list(0x55559337e660, 24 [pid 5830] <... clone resumed>, child_tidptr=0x55559337e650) = 4 [pid 5836] <... set_robust_list resumed>) = 0 [ 66.267525][ T5835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.277456][ T1171] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5836] setpgid(0, 0) = 0 [pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5836] write(3, "1000", 4) = 4 [pid 5836] close(3) = 0 [pid 5836] write(1, "executing program\n", 18executing program ) = 18 [pid 5836] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5836] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5836] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5836] recvfrom(4, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5836] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5836] close(4) = 0 [pid 5836] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5836] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5836] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x30\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00", iov_len=48}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 48 [pid 5836] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5836] sendto(4, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 5836] recvfrom(4, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-283822334}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2c\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1d\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5836] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-283822334}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5836] sendto(4, [{nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00"], 20, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 20 [pid 5836] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-283822334}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5836] sendto(4, [{nlmsg_len=100, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00\x08\x00\x06\x00\x00\x00\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00\x33\x00\x03\x00\x50\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x01\x00\x00\x06\x02\x02\x02\x02\x02\x02\x01\x01\x02\x00"], 100, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 100 [pid 5836] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-283822334}, {error=0, msg={nlmsg_len=100, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5836] close(4) = 0 [pid 5836] bpf(BPF_PROG_LOAD, NULL, 0) = -1 E2BIG (Argument list too long) [pid 5836] socket(AF_QIPCRTR, SOCK_DGRAM, 0) = 4 [pid 5836] ioctl(4, SIOCSIFHWADDR, {ifr_name="wlan1", ifr_hwaddr={sa_family=ARPHRD_ETHER, sa_data=00:00:00:00:00:00}}) = -1 EADDRNOTAVAIL (Cannot assign requested address) [pid 5836] close(3) = 0 [pid 5836] close(4) = 0 [pid 5836] close(5) = -1 EBADF (Bad file descriptor) [pid 5836] close(6) = -1 EBADF (Bad file descriptor) [ 66.526079][ T5836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [pid 5836] close(7) = -1 EBADF (Bad file descriptor) [pid 5836] close(8) = -1 EBADF (Bad file descriptor) [pid 5836] close(9) = -1 EBADF (Bad file descriptor) [pid 5836] close(10) = -1 EBADF (Bad file descriptor) [pid 5836] close(11) = -1 EBADF (Bad file descriptor) [pid 5836] close(12) = -1 EBADF (Bad file descriptor) [pid 5836] close(13) = -1 EBADF (Bad file descriptor) [pid 5836] close(14) = -1 EBADF (Bad file descriptor) [pid 5836] close(15) = -1 EBADF (Bad file descriptor) [pid 5836] close(16) = -1 EBADF (Bad file descriptor) [pid 5836] close(17) = -1 EBADF (Bad file descriptor) [pid 5836] close(18) = -1 EBADF (Bad file descriptor) [pid 5836] close(19) = -1 EBADF (Bad file descriptor) [pid 5836] close(20) = -1 EBADF (Bad file descriptor) [pid 5836] close(21) = -1 EBADF (Bad file descriptor) [pid 5836] close(22) = -1 EBADF (Bad file descriptor) [pid 5836] close(23) = -1 EBADF (Bad file descriptor) [pid 5836] close(24) = -1 EBADF (Bad file descriptor) [pid 5836] close(25) = -1 EBADF (Bad file descriptor) [pid 5836] close(26) = -1 EBADF (Bad file descriptor) [pid 5836] close(27) = -1 EBADF (Bad file descriptor) [pid 5836] close(28) = -1 EBADF (Bad file descriptor) [pid 5836] close(29) = -1 EBADF (Bad file descriptor) [pid 5836] exit_group(0) = ? [pid 5836] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5830] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559337e650) = 5 ./strace-static-x86_64: Process 5837 attached [pid 5837] set_robust_list(0x55559337e660, 24) = 0 [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5837] setpgid(0, 0) = 0 [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] write(3, "1000", 4) = 4 [pid 5837] close(3) = 0 [pid 5837] write(1, "executing program\n", 18executing program ) = 18 [pid 5837] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5837] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5837] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 5837] recvfrom(4, [{nlmsg_len=2516, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x24\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x4d\x01\x00\x00\x00\x09\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2516 [pid 5837] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5837] close(4) = 0 [pid 5837] ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=12}) = 0 [pid 5837] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 5837] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x30\x00\x00\x00\x24\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x0a\x00\x34\x00\x02\x02\x02\x02\x02\x02\x00\x00\x08\x00\x26\x00\x6c\x09\x00\x00", iov_len=48}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 48 [pid 5837] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 5837] sendto(4, [{nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 5837] recvfrom(4, [{nlmsg_len=244, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=-1122194897}, "\x01\x02\x00\x00\x13\x00\x02\x00\x4d\x41\x43\x38\x30\x32\x31\x31\x5f\x48\x57\x53\x49\x4d\x00\x00\x06\x00\x01\x00\x2c\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1d\x00\x00\x00\x90\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00"...], 4096, 0, NULL, NULL) = 244 [pid 5837] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1122194897}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5837] sendto(4, [{nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00"], 20, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 20 [pid 5837] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=-1122194897}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5837] sendto(4, [{nlmsg_len=100, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x08\x00\x05\x00\x01\x00\x00\x00\x08\x00\x06\x00\x00\x00\x00\x00\x0a\x00\x01\x00\x08\x02\x11\x00\x00\x01\x00\x00\x33\x00\x03\x00\x50\x00\x00\x00\x08\x02\x11\x00\x00\x01\x08\x02\x11\x00\x00\x00\x08\x02\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x01\x00\x00\x06\x02\x02\x02\x02\x02\x02\x01\x01\x02\x00"], 100, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 100 [pid 5837] recvfrom(4, [{nlmsg_len=168, nlmsg_type=0x2c /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x01\x00\x00\x0a\x00\x02\x00\x08\x02\x11\x00\x00\x00\x00\x00\x50\x00\x03\x00\x80\x00\x00\x00\xff\xff\xff\xff\xff\xff\x08\x02\x11\x00\x00\x00\x50\x50\x50\x50\x50\x50\x00\x00\xa0\xc2\xdf\xb7\x0f\x29\x06\x00\x64\x00\x02\x00\x00\x06\x10\x10\x10\x10\x10\x10\x01\x08\x82\x84\x8b\x96\x0c\x12\x18\x24\x03\x01\x01\x06\x02\x00\x00\x32\x04\x30\x48\x60\x6c\xdd\x07\x00\x50\xf2\x02\x00\x01\x00\x08\x00\x04\x00"...], 4096, 0, NULL, NULL) = 168 [pid 5837] close(4) = 0 [pid 5837] bpf(BPF_PROG_LOAD, NULL, 0) = -1 E2BIG (Argument list too long) [pid 5837] socket(AF_QIPCRTR, SOCK_DGRAM, 0) = 4 [pid 5837] ioctl(4, SIOCSIFHWADDR, {ifr_name="wlan1", ifr_hwaddr={sa_family=ARPHRD_ETHER, sa_data=00:00:00:00:00:00}}) = -1 EADDRNOTAVAIL (Cannot assign requested address) [pid 5837] close(3) = 0 [ 67.023348][ T5837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [pid 5837] close(4) = 0 [pid 5837] close(5) = -1 EBADF (Bad file descriptor) [pid 5837] close(6) = -1 EBADF (Bad file descriptor) [pid 5837] close(7) = -1 EBADF (Bad file descriptor) [pid 5837] close(8) = -1 EBADF (Bad file descriptor) [pid 5837] close(9) = -1 EBADF (Bad file descriptor) [pid 5837] close(10) = -1 EBADF (Bad file descriptor) [pid 5837] close(11) = -1 EBADF (Bad file descriptor) [pid 5837] close(12) = -1 EBADF (Bad file descriptor) [pid 5837] close(13) = -1 EBADF (Bad file descriptor) [pid 5837] close(14) = -1 EBADF (Bad file descriptor) [pid 5837] close(15) = -1 EBADF (Bad file descriptor) [pid 5837] close(16) = -1 EBADF (Bad file descriptor) [pid 5837] close(17) = -1 EBADF (Bad file descriptor) [pid 5837] close(18) = -1 EBADF (Bad file descriptor) [pid 5837] close(19) = -1 EBADF (Bad file descriptor) [pid 5837] close(20) = -1 EBADF (Bad file descriptor) [pid 5837] close(21) = -1 EBADF (Bad file descriptor) [pid 5837] close(22) = -1 EBADF (Bad file descriptor) [pid 5837] close(23) = -1 EBADF (Bad file descriptor) [ 67.094908][ T1171] wlan1: authentication with 08:02:11:00:00:00 timed out [ 67.102787][ T1171] ================================================================== [ 67.111051][ T1171] BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 [ 67.118725][ T1171] Read of size 8 at addr ffff88807bfb76d8 by task kworker/u8:7/1171 [ 67.126715][ T1171] [ 67.129138][ T1171] CPU: 1 UID: 0 PID: 1171 Comm: kworker/u8:7 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [pid 5837] close(24) = -1 EBADF (Bad file descriptor) [pid 5837] close(25) = -1 EBADF (Bad file descriptor) [pid 5837] close(26) = -1 EBADF (Bad file descriptor) [pid 5837] close(27) = -1 EBADF (Bad file descriptor) [pid 5837] close(28) = -1 EBADF (Bad file descriptor) [pid 5837] close(29) = -1 EBADF (Bad file descriptor) [pid 5837] exit_group(0) = ? [pid 5837] +++ exited with 0 +++ [pid 5830] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5830] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 67.140025][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 67.150094][ T1171] Workqueue: events_unbound cfg80211_wiphy_work [ 67.156378][ T1171] Call Trace: [ 67.159673][ T1171] [ 67.162597][ T1171] dump_stack_lvl+0x241/0x360 [ 67.167273][ T1171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.172489][ T1171] ? __pfx__printk+0x10/0x10 [ 67.177164][ T1171] ? _printk+0xd5/0x120 [ 67.181319][ T1171] ? __virt_addr_valid+0x183/0x530 [ 67.186437][ T1171] ? __virt_addr_valid+0x183/0x530 [ 67.191574][ T1171] print_report+0x169/0x550 [ 67.196082][ T1171] ? __virt_addr_valid+0x183/0x530 [ 67.201188][ T1171] ? __virt_addr_valid+0x183/0x530 [ 67.206296][ T1171] ? __virt_addr_valid+0x45f/0x530 [ 67.211401][ T1171] ? __phys_addr+0xba/0x170 [ 67.215898][ T1171] ? __lock_acquire+0x78/0x2100 [ 67.220746][ T1171] kasan_report+0x143/0x180 [ 67.225256][ T1171] ? __lock_acquire+0x78/0x2100 [ 67.230104][ T1171] __lock_acquire+0x78/0x2100 [ 67.234780][ T1171] ? mark_lock+0x9a/0x360 [ 67.239105][ T1171] ? __lock_acquire+0x1397/0x2100 [ 67.244123][ T1171] lock_acquire+0x1ed/0x550 [ 67.248621][ T1171] ? lockref_get+0x15/0x60 [ 67.253048][ T1171] ? __pfx_lock_acquire+0x10/0x10 [ 67.258070][ T1171] ? simple_pin_fs+0x91/0x160 [ 67.262741][ T1171] ? do_raw_spin_lock+0x14f/0x370 [ 67.267758][ T1171] ? __pfx_lock_release+0x10/0x10 [ 67.272778][ T1171] _raw_spin_lock+0x2e/0x40 [ 67.277731][ T1171] ? lockref_get+0x15/0x60 [ 67.282143][ T1171] lockref_get+0x15/0x60 [ 67.286384][ T1171] simple_recursive_removal+0x35/0x8f0 [ 67.291840][ T1171] ? mntput+0x65/0xc0 [ 67.295825][ T1171] ? __pfx_remove_one+0x10/0x10 [ 67.300696][ T1171] debugfs_remove+0x49/0x70 [ 67.305245][ T1171] ieee80211_sta_debugfs_remove+0x40/0x60 [ 67.310965][ T1171] __sta_info_destroy_part2+0x35e/0x450 [ 67.316509][ T1171] sta_info_destroy_addr+0xf4/0x140 [ 67.321703][ T1171] ieee80211_destroy_auth_data+0x139/0x270 [ 67.327504][ T1171] ieee80211_sta_work+0x1256/0x3890 [ 67.332706][ T1171] ? mark_lock+0x9a/0x360 [ 67.337030][ T1171] ? __pfx_ieee80211_sta_work+0x10/0x10 [ 67.342572][ T1171] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.348896][ T1171] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 67.354785][ T1171] ? lockdep_hardirqs_on+0x99/0x150 [ 67.359986][ T1171] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 67.365873][ T1171] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 67.372204][ T1171] ? skb_dequeue+0x113/0x150 [ 67.376788][ T1171] ? ieee80211_iface_work+0xc0d/0xf20 [ 67.382155][ T1171] ? ieee80211_iface_work+0xe29/0xf20 [ 67.387520][ T1171] ? rcu_is_watching+0x15/0xb0 [ 67.392330][ T1171] cfg80211_wiphy_work+0x2db/0x480 [ 67.397449][ T1171] ? process_scheduled_works+0x976/0x1840 [ 67.403162][ T1171] process_scheduled_works+0xa66/0x1840 [ 67.408706][ T1171] ? __pfx_process_scheduled_works+0x10/0x10 [ 67.414681][ T1171] ? assign_work+0x364/0x3d0 [ 67.419354][ T1171] worker_thread+0x870/0xd30 [ 67.423942][ T1171] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 67.429840][ T1171] ? __kthread_parkme+0x169/0x1d0 [ 67.434859][ T1171] ? __pfx_worker_thread+0x10/0x10 [ 67.439965][ T1171] kthread+0x2f0/0x390 [ 67.444030][ T1171] ? __pfx_worker_thread+0x10/0x10 [ 67.449129][ T1171] ? __pfx_kthread+0x10/0x10 [ 67.453711][ T1171] ret_from_fork+0x4b/0x80 [ 67.458119][ T1171] ? __pfx_kthread+0x10/0x10 [ 67.462863][ T1171] ret_from_fork_asm+0x1a/0x30 [ 67.467645][ T1171] [ 67.470662][ T1171] [ 67.472981][ T1171] Allocated by task 46: [ 67.477122][ T1171] kasan_save_track+0x3f/0x80 [ 67.481802][ T1171] __kasan_slab_alloc+0x66/0x80 [ 67.486647][ T1171] kmem_cache_alloc_lru_noprof+0x1dd/0x390 [ 67.492450][ T1171] __d_alloc+0x31/0x700 [ 67.496596][ T1171] d_alloc_parallel+0xdf/0x1600 [ 67.501436][ T1171] __lookup_slow+0x117/0x3f0 [ 67.506023][ T1171] lookup_one_len+0x18b/0x2d0 [ 67.510707][ T1171] start_creating+0x187/0x310 [ 67.515382][ T1171] debugfs_create_dir+0x25/0x430 [ 67.520313][ T1171] ieee80211_sta_debugfs_add+0x132/0x820 [ 67.525960][ T1171] sta_info_insert_rcu+0xecf/0x1900 [ 67.531275][ T1171] sta_info_insert+0x16/0xc0 [ 67.535917][ T1171] ieee80211_prep_connection+0xecd/0x12d0 [ 67.541807][ T1171] ieee80211_mgd_auth+0xd42/0x14c0 [ 67.546914][ T1171] cfg80211_mlme_auth+0x59f/0x970 [ 67.551932][ T1171] cfg80211_conn_do_work+0x5ed/0xe60 [ 67.557219][ T1171] cfg80211_conn_work+0x27c/0x4d0 [ 67.562240][ T1171] process_scheduled_works+0xa66/0x1840 [ 67.567786][ T1171] worker_thread+0x870/0xd30 [ 67.572369][ T1171] kthread+0x2f0/0x390 [ 67.576459][ T1171] ret_from_fork+0x4b/0x80 [ 67.580866][ T1171] ret_from_fork_asm+0x1a/0x30 [ 67.585623][ T1171] [ 67.587946][ T1171] Freed by task 0: [ 67.591657][ T1171] kasan_save_track+0x3f/0x80 [ 67.596330][ T1171] kasan_save_free_info+0x40/0x50 [ 67.601419][ T1171] __kasan_slab_free+0x59/0x70 [ 67.606202][ T1171] kmem_cache_free+0x195/0x410 [ 67.611063][ T1171] rcu_core+0xaaa/0x17a0 [ 67.615300][ T1171] handle_softirqs+0x2d4/0x9b0 [ 67.620080][ T1171] __irq_exit_rcu+0xf7/0x220 [ 67.624755][ T1171] irq_exit_rcu+0x9/0x30 [ 67.628992][ T1171] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 67.634706][ T1171] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 67.640865][ T1171] [ 67.643177][ T1171] Last potentially related work creation: [ 67.648886][ T1171] kasan_save_stack+0x3f/0x60 [ 67.653590][ T1171] __kasan_record_aux_stack+0xac/0xc0 [ 67.658975][ T1171] call_rcu+0x167/0xa70 [ 67.663135][ T1171] __dentry_kill+0x497/0x630 [ 67.667809][ T1171] dput+0x19f/0x2b0 [ 67.671609][ T1171] simple_recursive_removal+0x2bd/0x8f0 [ 67.677148][ T1171] debugfs_remove+0x49/0x70 [ 67.681645][ T1171] ieee80211_debugfs_recreate_netdev+0xc4/0x1400 [ 67.687971][ T1171] drv_remove_interface+0x1e1/0x590 [ 67.693162][ T1171] ieee80211_change_mac+0xaf5/0x11e0 [ 67.698463][ T1171] dev_set_mac_address+0x327/0x510 [ 67.703579][ T1171] dev_set_mac_address_user+0x31/0x50 [ 67.708942][ T1171] dev_ifsioc+0xbd9/0xe70 [ 67.713278][ T1171] dev_ioctl+0x719/0x1340 [ 67.717602][ T1171] sock_do_ioctl+0x240/0x460 [ 67.722185][ T1171] sock_ioctl+0x626/0x8e0 [ 67.726532][ T1171] __se_sys_ioctl+0xf5/0x170 [ 67.731133][ T1171] do_syscall_64+0xf3/0x230 [ 67.735827][ T1171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.741731][ T1171] [ 67.744046][ T1171] The buggy address belongs to the object at ffff88807bfb7608 [ 67.744046][ T1171] which belongs to the cache dentry of size 312 [ 67.757680][ T1171] The buggy address is located 208 bytes inside of [ 67.757680][ T1171] freed 312-byte region [ffff88807bfb7608, ffff88807bfb7740) [ 67.771471][ T1171] [ 67.773791][ T1171] The buggy address belongs to the physical page: [ 67.780219][ T1171] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bfb6 [ 67.788984][ T1171] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 67.797503][ T1171] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 67.805056][ T1171] page_type: f5(slab) [ 67.809144][ T1171] raw: 00fff00000000040 ffff88801baff8c0 ffffea0001ef8100 dead000000000002 [ 67.817727][ T1171] raw: 0000000000000000 0000000000150015 00000001f5000000 0000000000000000 [ 67.826302][ T1171] head: 00fff00000000040 ffff88801baff8c0 ffffea0001ef8100 dead000000000002 [ 67.834963][ T1171] head: 0000000000000000 0000000000150015 00000001f5000000 0000000000000000 [ 67.843625][ T1171] head: 00fff00000000001 ffffea0001efed81 ffffffffffffffff 0000000000000000 [ 67.852287][ T1171] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 67.861218][ T1171] page dumped because: kasan: bad access detected [ 67.867836][ T1171] page_owner tracks the page as allocated [ 67.873544][ T1171] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5214, tgid 5214 (udevd), ts 35293024299, free_ts 18333902605 [ 67.896043][ T1171] post_alloc_hook+0x1f3/0x230 [ 67.900841][ T1171] get_page_from_freelist+0x365c/0x37a0 [ 67.906383][ T1171] __alloc_pages_noprof+0x292/0x710 [ 67.911571][ T1171] alloc_pages_mpol_noprof+0x3e8/0x680 [ 67.917063][ T1171] alloc_slab_page+0x6a/0x140 [ 67.922201][ T1171] allocate_slab+0x5a/0x2f0 [ 67.926698][ T1171] ___slab_alloc+0xcd1/0x14b0 [ 67.931394][ T1171] __slab_alloc+0x58/0xa0 [ 67.935730][ T1171] kmem_cache_alloc_lru_noprof+0x26c/0x390 [ 67.941625][ T1171] __d_alloc+0x31/0x700 [ 67.945797][ T1171] d_alloc+0x4b/0x190 [ 67.949769][ T1171] lookup_one_qstr_excl+0xce/0x260 [ 67.954871][ T1171] do_renameat2+0x706/0x13f0 [ 67.959547][ T1171] __x64_sys_rename+0x82/0x90 [ 67.964218][ T1171] do_syscall_64+0xf3/0x230 [ 67.968724][ T1171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.975230][ T1171] page last free pid 1 tgid 1 stack trace: [ 67.981021][ T1171] free_unref_page+0xdef/0x1130 [ 67.985865][ T1171] free_contig_range+0x152/0x550 [ 67.990795][ T1171] destroy_args+0x92/0x910 [ 67.995215][ T1171] debug_vm_pgtable+0x4be/0x550 [ 68.000066][ T1171] do_one_initcall+0x248/0x870 [ 68.004915][ T1171] do_initcall_level+0x157/0x210 [ 68.009849][ T1171] do_initcalls+0x3f/0x80 [ 68.014188][ T1171] kernel_init_freeable+0x435/0x5d0 [ 68.019470][ T1171] kernel_init+0x1d/0x2b0 [ 68.023799][ T1171] ret_from_fork+0x4b/0x80 [ 68.028210][ T1171] ret_from_fork_asm+0x1a/0x30 [ 68.032965][ T1171] [ 68.035286][ T1171] Memory state around the buggy address: [ 68.040905][ T1171] ffff88807bfb7580: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 68.048969][ T1171] ffff88807bfb7600: fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.057046][ T1171] >ffff88807bfb7680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.065095][ T1171] ^ [ 68.072017][ T1171] ffff88807bfb7700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 68.080154][ T1171] ffff88807bfb7780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.088204][ T1171] ================================================================== [ 68.096264][ T1171] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.103558][ T1171] CPU: 1 UID: 0 PID: 1171 Comm: kworker/u8:7 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [ 68.114399][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 68.124884][ T1171] Workqueue: events_unbound cfg80211_wiphy_work [ 68.131140][ T1171] Call Trace: [ 68.134431][ T1171] [ 68.137461][ T1171] dump_stack_lvl+0x241/0x360 [ 68.142171][ T1171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.147364][ T1171] ? __pfx__printk+0x10/0x10 [ 68.151946][ T1171] ? rcu_is_watching+0x15/0xb0 [ 68.156713][ T1171] ? lock_release+0xbf/0xa30 [ 68.161296][ T1171] ? vscnprintf+0x5d/0x90 [ 68.165620][ T1171] panic+0x349/0x880 [ 68.169518][ T1171] ? check_panic_on_warn+0x21/0xb0 [ 68.174625][ T1171] ? __pfx_panic+0x10/0x10 [ 68.179079][ T1171] ? do_raw_spin_unlock+0x13c/0x8b0 [ 68.184279][ T1171] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.190220][ T1171] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.196542][ T1171] ? print_report+0x502/0x550 [ 68.201215][ T1171] check_panic_on_warn+0x86/0xb0 [ 68.206149][ T1171] ? __lock_acquire+0x78/0x2100 [ 68.210996][ T1171] end_report+0x77/0x160 [ 68.215240][ T1171] kasan_report+0x154/0x180 [ 68.220187][ T1171] ? __lock_acquire+0x78/0x2100 [ 68.225035][ T1171] __lock_acquire+0x78/0x2100 [ 68.229712][ T1171] ? mark_lock+0x9a/0x360 [ 68.234037][ T1171] ? __lock_acquire+0x1397/0x2100 [ 68.239053][ T1171] lock_acquire+0x1ed/0x550 [ 68.243552][ T1171] ? lockref_get+0x15/0x60 [ 68.247982][ T1171] ? __pfx_lock_acquire+0x10/0x10 [ 68.253001][ T1171] ? simple_pin_fs+0x91/0x160 [ 68.257671][ T1171] ? do_raw_spin_lock+0x14f/0x370 [ 68.262696][ T1171] ? __pfx_lock_release+0x10/0x10 [ 68.267716][ T1171] _raw_spin_lock+0x2e/0x40 [ 68.272216][ T1171] ? lockref_get+0x15/0x60 [ 68.276628][ T1171] lockref_get+0x15/0x60 [ 68.280875][ T1171] simple_recursive_removal+0x35/0x8f0 [ 68.286362][ T1171] ? mntput+0x65/0xc0 [ 68.290336][ T1171] ? __pfx_remove_one+0x10/0x10 [ 68.295202][ T1171] debugfs_remove+0x49/0x70 [ 68.299943][ T1171] ieee80211_sta_debugfs_remove+0x40/0x60 [ 68.305669][ T1171] __sta_info_destroy_part2+0x35e/0x450 [ 68.311223][ T1171] sta_info_destroy_addr+0xf4/0x140 [ 68.316561][ T1171] ieee80211_destroy_auth_data+0x139/0x270 [ 68.322376][ T1171] ieee80211_sta_work+0x1256/0x3890 [ 68.327600][ T1171] ? mark_lock+0x9a/0x360 [ 68.331927][ T1171] ? __pfx_ieee80211_sta_work+0x10/0x10 [ 68.337564][ T1171] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.343888][ T1171] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 68.349776][ T1171] ? lockdep_hardirqs_on+0x99/0x150 [ 68.354968][ T1171] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.360855][ T1171] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.367276][ T1171] ? skb_dequeue+0x113/0x150 [ 68.371862][ T1171] ? ieee80211_iface_work+0xc0d/0xf20 [ 68.377321][ T1171] ? ieee80211_iface_work+0xe29/0xf20 [ 68.382698][ T1171] ? rcu_is_watching+0x15/0xb0 [ 68.388098][ T1171] cfg80211_wiphy_work+0x2db/0x480 [ 68.393217][ T1171] ? process_scheduled_works+0x976/0x1840 [ 68.398939][ T1171] process_scheduled_works+0xa66/0x1840 [ 68.404487][ T1171] ? __pfx_process_scheduled_works+0x10/0x10 [ 68.410472][ T1171] ? assign_work+0x364/0x3d0 [ 68.415057][ T1171] worker_thread+0x870/0xd30 [ 68.419730][ T1171] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.425618][ T1171] ? __kthread_parkme+0x169/0x1d0 [ 68.430645][ T1171] ? __pfx_worker_thread+0x10/0x10 [ 68.435751][ T1171] kthread+0x2f0/0x390 [ 68.439818][ T1171] ? __pfx_worker_thread+0x10/0x10 [ 68.444921][ T1171] ? __pfx_kthread+0x10/0x10 [ 68.449512][ T1171] ret_from_fork+0x4b/0x80 [ 68.453922][ T1171] ? __pfx_kthread+0x10/0x10 [ 68.458506][ T1171] ret_from_fork_asm+0x1a/0x30 [ 68.463294][ T1171] [ 68.466630][ T1171] Kernel Offset: disabled [ 68.470948][ T1171] Rebooting in 86400 seconds..