./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2580170817 <...> Warning: Permanently added '10.128.1.115' (ECDSA) to the list of known hosts. execve("./syz-executor2580170817", ["./syz-executor2580170817"], 0x7fff2a78b220 /* 10 vars */) = 0 brk(NULL) = 0x555555f68000 brk(0x555555f68c40) = 0x555555f68c40 arch_prctl(ARCH_SET_FS, 0x555555f68300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2580170817", 4096) = 28 brk(0x555555f89c40) = 0x555555f89c40 brk(0x555555f8a000) = 0x555555f8a000 mprotect(0x7f0ec79c9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3609 attached , child_tidptr=0x555555f685d0) = 3609 [pid 3609] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3609] setsid() = 1 [pid 3609] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3609] unshare(CLONE_NEWNS) = 0 [pid 3609] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3609] unshare(CLONE_NEWIPC) = 0 [pid 3609] unshare(CLONE_NEWCGROUP) = 0 [pid 3609] unshare(CLONE_NEWUTS) = 0 [pid 3609] unshare(CLONE_SYSVSEM) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "16777216", 8) = 8 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "536870912", 9) = 9 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "8192", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3609] close(3) = 0 [pid 3609] getpid() = 1 [pid 3609] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 53.145981][ T3609] dump_stack_lvl+0x1e3/0x2cb [ 53.150671][ T3609] ? bfq_pos_tree_add_move+0x436/0x436 [ 53.156113][ T3609] ? panic+0x76e/0x76e [ 53.160163][ T3609] ? __is_module_percpu_address+0x3fc/0x4a0 [ 53.166035][ T3609] ? __module_address+0x2e/0x2b0 [ 53.171041][ T3609] assign_lock_key+0x22a/0x240 [ 53.175786][ T3609] ? SOFTIRQ_verbose+0x10/0x10 [ 53.180528][ T3609] ? print_irqtrace_events+0x220/0x220 [ 53.186056][ T3609] register_lock_class+0x287/0x9d0 [ 53.191149][ T3609] ? is_dynamic_key+0x1f0/0x1f0 [ 53.196013][ T3609] __lock_acquire+0xe9/0x1f80 [ 53.200727][ T3609] lock_acquire+0x1a7/0x400 [ 53.205210][ T3609] ? ieee80211_do_stop+0x115/0x1cf0 [ 53.210403][ T3609] ? read_lock_is_recursive+0x10/0x10 [ 53.215754][ T3609] ? __local_bh_disable_ip+0x183/0x210 [ 53.221281][ T3609] ? ieee80211_do_stop+0x115/0x1cf0 [ 53.226458][ T3609] ? __bpf_trace_softirq+0x10/0x10 [ 53.231549][ T3609] ? rcu_blocking_is_gp+0x70/0x70 [ 53.236550][ T3609] ? print_irqtrace_events+0x220/0x220 [ 53.242016][ T3609] ? do_raw_spin_unlock+0x134/0x8a0 [ 53.247369][ T3609] ? ieee80211_do_stop+0x115/0x1cf0 [ 53.252554][ T3609] _raw_spin_lock_bh+0x31/0x40 [ 53.257299][ T3609] ? ieee80211_do_stop+0x115/0x1cf0 [ 53.262479][ T3609] ieee80211_do_stop+0x115/0x1cf0 [ 53.267487][ T3609] ? ieee80211_sdata_stop+0x70/0x70 [ 53.272667][ T3609] ? ieee80211_get_vif_queues+0x222/0x390 [ 53.278364][ T3609] ieee80211_if_change_type+0x448/0x9f0 [ 53.283894][ T3609] ieee80211_change_iface+0x58/0x430 [ 53.289158][ T3609] cfg80211_change_iface+0x677/0xaf0 [ 53.294606][ T3609] nl80211_set_interface+0x5ed/0x870 [ 53.299873][ T3609] ? nl80211_dump_interface+0x6b0/0x6b0 [ 53.305397][ T3609] ? nl80211_pre_doit+0x469/0x510 [ 53.310401][ T3609] genl_rcv_msg+0xfbc/0x1490 [ 53.315000][ T3609] ? genl_bind+0x380/0x380 [ 53.319421][ T3609] ? mark_lock+0x98/0x350 [ 53.323748][ T3609] ? __lock_acquire+0x129a/0x1f80 [ 53.328781][ T3609] ? nl80211_dump_interface+0x6b0/0x6b0 [ 53.334326][ T3609] netlink_rcv_skb+0x1f0/0x460 [ 53.339084][ T3609] ? genl_bind+0x380/0x380 [ 53.343492][ T3609] ? netlink_ack+0xb40/0xb40 [ 53.348069][ T3609] ? __down_read_common+0x156/0x2a0 [ 53.353248][ T3609] genl_rcv+0x24/0x40 [ 53.357236][ T3609] netlink_unicast+0x7e7/0x9c0 [ 53.361980][ T3609] ? netlink_detachskb+0xa0/0xa0 [ 53.366896][ T3609] ? __phys_addr_symbol+0x2b/0x70 [ 53.371897][ T3609] ? 0xffffffff81000000 [ 53.376030][ T3609] ? __check_object_size+0x15a/0x210 [ 53.381293][ T3609] ? bpf_lsm_netlink_send+0x5/0x10 [ 53.386384][ T3609] netlink_sendmsg+0x9b3/0xcd0 [ 53.391135][ T3609] ? netlink_getsockopt+0x9c0/0x9c0 [ 53.396490][ T3609] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 53.401753][ T3609] ? security_socket_sendmsg+0x9d/0xb0 [ 53.407189][ T3609] ? netlink_getsockopt+0x9c0/0x9c0 [ 53.412366][ T3609] ____sys_sendmsg+0x597/0x8e0 [ 53.417110][ T3609] ? iovec_from_user+0x335/0x390 [ 53.422030][ T3609] ? __import_iovec+0x340/0x4e0 [ 53.426866][ T3609] ? __sys_sendmsg_sock+0x30/0x30 [ 53.431959][ T3609] __sys_sendmsg+0x301/0x8a0 [ 53.436530][ T3609] ? ____sys_sendmsg+0x8e0/0x8e0 [ 53.441450][ T3609] ? do_raw_spin_unlock+0x134/0x8a0 [ 53.446640][ T3609] ? do_notify_parent+0xeb0/0xeb0 [ 53.451664][ T3609] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 53.457640][ T3609] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 53.463626][ T3609] ? syscall_enter_from_user_mode+0x86/0x1a0 [ 53.469601][ T3609] do_syscall_64+0x2b/0x70 [ 53.474025][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.479915][ T3609] RIP: 0033:0x7f0ec79559d9 [ 53.484323][ T3609] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.503924][ T3609] RSP: 002b:00007ffd7fa79b78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.512320][ T3609] RAX: ffffffffffffffda RBX: 00007ffd7fa79bd0 RCX: 00007f0ec79559d9 [ 53.520287][ T3609] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 53.528252][ T3609] RBP: 0000000000000031 R08: 0000000000000000 R09: 0000000000000000 [ 53.536214][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0ec79d04a0 [pid 3609] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x22\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x46\x00\x00\x00\x08\x00\x05\x00\x02\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 [pid 3609] exit_group(1) = ? [pid 3609] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3609, si_uid=0, si_status=1, si_utime=0, si_stime=134} --- exit_group(0) = ? +++ exited with 0 +++ [ 53.544194]