./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2216677599 <...> DUID 00:04:f8:bf:f0:9c:61:e1:97:95:98:d7:6e:33:ae:fb:a4:bd forked to background, child pid 3186 [ 25.786891][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.797229][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.231' (ECDSA) to the list of known hosts. execve("./syz-executor2216677599", ["./syz-executor2216677599"], 0x7ffd020b3210 /* 10 vars */) = 0 brk(NULL) = 0x555555b9d000 brk(0x555555b9dc40) = 0x555555b9dc40 arch_prctl(ARCH_SET_FS, 0x555555b9d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2216677599", 4096) = 28 brk(0x555555bbec40) = 0x555555bbec40 brk(0x555555bbf000) = 0x555555bbf000 mprotect(0x7f8c7f548000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 recvfrom(4, [{nlmsg_len=2416, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3614}, "\x01\x02\x00\x00\x0c\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x31\x00\x06\x00\x01\x00\x22\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x3c\x01\x00\x00\x9c\x08\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x1a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 2416 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3614}, {error=0, msg={nlmsg_len=32, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(4) = 0 ioctl(3, SIOCGIFINDEX, {ifr_name="wlan1", ifr_ifindex=9}) = 0 syzkaller login: [ 49.653878][ T3614] INFO: trying to register non-static key. [ 49.659713][ T3614] The code is fine but needs lockdep annotation, or maybe [ 49.666797][ T3614] you didn't initialize this object before use? [ 49.673016][ T3614] turning off the locking correctness validator. [ 49.679328][ T3614] CPU: 1 PID: 3614 Comm: syz-executor221 Not tainted 5.19.0-rc7-syzkaller-01445-g3c47fb2f4c4d #0 [ 49.689810][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 49.699848][ T3614] Call Trace: [ 49.703129][ T3614] [ 49.706043][ T3614] dump_stack_lvl+0xcd/0x134 [ 49.710639][ T3614] register_lock_class+0xf30/0x1130 [ 49.715821][ T3614] ? __lock_acquire+0x2581/0x5660 [ 49.720841][ T3614] ? is_dynamic_key.part.0+0x130/0x130 [ 49.726285][ T3614] ? mark_held_locks+0x9f/0xe0 [ 49.731033][ T3614] __lock_acquire+0x10a/0x5660 [ 49.735780][ T3614] ? lockdep_hardirqs_on+0x79/0x100 [ 49.740971][ T3614] ? find_held_lock+0x2d/0x110 [ 49.745731][ T3614] ? debug_stats_show+0x230/0x230 [ 49.750740][ T3614] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 49.756703][ T3614] ? debug_object_free+0x1c0/0x350 [ 49.761802][ T3614] lock_acquire+0x1ab/0x570 [ 49.766290][ T3614] ? ieee80211_do_stop+0xc3/0x20a0 [ 49.771390][ T3614] ? lock_release+0x780/0x780 [ 49.776051][ T3614] ? synchronize_rcu_expedited+0x4df/0x610 [ 49.781843][ T3614] ? wait_rcu_exp_gp+0x40/0x40 [ 49.786599][ T3614] ? find_held_lock+0x2d/0x110 [ 49.791348][ T3614] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 49.797138][ T3614] _raw_spin_lock_bh+0x2f/0x40 [ 49.801892][ T3614] ? ieee80211_do_stop+0xc3/0x20a0 [ 49.807001][ T3614] ieee80211_do_stop+0xc3/0x20a0 [ 49.811931][ T3614] ? nl802154_dump_llsec_devkey+0xf0/0xb30 [ 49.817727][ T3614] ? lockdep_hardirqs_on+0x79/0x100 [ 49.822914][ T3614] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 49.828705][ T3614] ? ieee80211_adjust_monitor_flags+0x230/0x230 [ 49.834939][ T3614] ieee80211_if_change_type+0x3c4/0x870 [ 49.840475][ T3614] ieee80211_change_iface+0x57/0x3f0 [ 49.845748][ T3614] cfg80211_change_iface+0x610/0xf50 [ 49.851020][ T3614] nl80211_set_interface+0x64f/0x8c0 [ 49.856310][ T3614] ? nl80211_notify_iface+0x180/0x180 [ 49.861670][ T3614] ? nl80211_pre_doit+0x11c/0xaa0 [ 49.866682][ T3614] genl_family_rcv_msg_doit+0x228/0x320 [ 49.872220][ T3614] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 49.879582][ T3614] ? ns_capable+0xd9/0x100 [ 49.883990][ T3614] genl_rcv_msg+0x328/0x580 [ 49.888481][ T3614] ? genl_get_cmd+0x480/0x480 [ 49.893144][ T3614] ? nl80211_notify_iface+0x180/0x180 [ 49.898505][ T3614] ? lock_release+0x780/0x780 [ 49.903169][ T3614] netlink_rcv_skb+0x153/0x420 [ 49.907921][ T3614] ? genl_get_cmd+0x480/0x480 [ 49.912584][ T3614] ? netlink_ack+0xa80/0xa80 [ 49.917158][ T3614] ? netlink_deliver_tap+0x1b1/0xc40 [ 49.922430][ T3614] genl_rcv+0x24/0x40 [ 49.926395][ T3614] netlink_unicast+0x543/0x7f0 [ 49.931148][ T3614] ? netlink_attachskb+0x880/0x880 [ 49.936242][ T3614] ? __virt_addr_valid+0x5d/0x2d0 [ 49.941257][ T3614] ? __phys_addr_symbol+0x2c/0x70 [ 49.946267][ T3614] ? __check_object_size+0x2de/0x700 [ 49.951539][ T3614] netlink_sendmsg+0x917/0xe10 [ 49.956291][ T3614] ? netlink_unicast+0x7f0/0x7f0 [ 49.961236][ T3614] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 49.966515][ T3614] ? netlink_unicast+0x7f0/0x7f0 [ 49.971437][ T3614] sock_sendmsg+0xcf/0x120 [ 49.975838][ T3614] ____sys_sendmsg+0x6eb/0x810 [ 49.980587][ T3614] ? kernel_sendmsg+0x50/0x50 [ 49.985246][ T3614] ? do_recvmmsg+0x6e0/0x6e0 [ 49.989821][ T3614] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 49.995805][ T3614] ___sys_sendmsg+0xf3/0x170 [ 50.000400][ T3614] ? sendmsg_copy_msghdr+0x160/0x160 [ 50.005689][ T3614] ? lock_release+0x780/0x780 [ 50.010384][ T3614] ? ptrace_stop.part.0+0x5ec/0xa80 [ 50.015578][ T3614] ? do_raw_spin_lock+0x120/0x2a0 [ 50.020592][ T3614] ? rwlock_bug.part.0+0x90/0x90 [ 50.025535][ T3614] ? _raw_spin_lock_irq+0x41/0x50 [ 50.030551][ T3614] ? __fget_light+0x20a/0x270 [ 50.035216][ T3614] __sys_sendmsg+0xf3/0x1c0 [ 50.039734][ T3614] ? __sys_sendmsg_sock+0x30/0x30 [ 50.044744][ T3614] ? lock_downgrade+0x6e0/0x6e0 [ 50.049579][ T3614] ? lockdep_hardirqs_on+0x79/0x100 [ 50.054765][ T3614] ? _raw_spin_unlock_irq+0x2a/0x40 [ 50.059949][ T3614] ? ptrace_notify+0xfa/0x140 [ 50.064625][ T3614] do_syscall_64+0x35/0xb0 [ 50.069029][ T3614] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.074917][ T3614] RIP: 0033:0x7f8c7f4dbb39 [ 50.079329][ T3614] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x22\x00\x05\x00\x00\x13\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x08\x00\x03\x00\x09\x00\x00\x00\x08\x00\x05\x00\x09\x00\x00\x00", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 36 exit_group(0) = ? +++ exited with 0 +++ [ 50.098919][ T3614] RSP: 002b:00007fff7bca1c18 EFLAGS: 00000246 ORIG_RAX: 000000