./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2924806334 <...> Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. execve("./syz-executor2924806334", ["./syz-executor2924806334"], 0x7ffe83541c20 /* 10 vars */) = 0 brk(NULL) = 0x555556159000 brk(0x555556159d00) = 0x555556159d00 arch_prctl(ARCH_SET_FS, 0x555556159380) = 0 set_tid_address(0x555556159650) = 5054 set_robust_list(0x555556159660, 24) = 0 rseq(0x555556159ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2924806334", 4096) = 28 getrandom("\xa1\x9b\x2c\xf1\x9f\x2e\x91\xc9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556159d00 brk(0x55555617ad00) = 0x55555617ad00 brk(0x55555617b000) = 0x55555617b000 mprotect(0x7ff2891fa000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556159650) = 5055 ./strace-static-x86_64: Process 5055 attached [pid 5055] set_robust_list(0x555556159660, 24) = 0 [pid 5055] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5055] setsid() = 1 [pid 5055] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5055] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5055] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5055] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5055] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5055] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5055] unshare(CLONE_NEWNS) = 0 [pid 5055] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5055] unshare(CLONE_NEWIPC) = 0 [pid 5055] unshare(CLONE_NEWCGROUP) = 0 [pid 5055] unshare(CLONE_NEWUTS) = 0 [pid 5055] unshare(CLONE_SYSVSEM) = 0 [pid 5055] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "16777216", 8) = 8 [pid 5055] close(3) = 0 [pid 5055] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "536870912", 9) = 9 [pid 5055] close(3) = 0 [pid 5055] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "1024", 4) = 4 [pid 5055] close(3) = 0 [pid 5055] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "8192", 4) = 4 [pid 5055] close(3) = 0 [pid 5055] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "1024", 4) = 4 [pid 5055] close(3) = 0 [pid 5055] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "1024", 4) = 4 [pid 5055] close(3) = 0 [pid 5055] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5055] close(3) = 0 [pid 5055] getpid() = 1 [pid 5055] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 90 90 e8 d1 a3 8c f7 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 54.522896][ T5055] RSP: 0018:ffffc9000422f320 EFLAGS: 00010286 [ 54.529027][ T5055] RAX: 0000000000000000 RBX: ffff888021060c80 RCX: ffffffff814e18f9 [ 54.537094][ T5055] RDX: ffff888027d8d940 RSI: ffffffff814e1906 RDI: 0000000000000001 [ 54.545130][ T5055] RBP: 0000000000000a00 R08: 0000000000000001 R09: 0000000000000000 [ 54.553092][ T5055] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807ee40e20 [ 54.561137][ T5055] R13: ffff8880210626e8 R14: ffff8880210614d0 R15: 0000000000000000 [ 54.569253][ T5055] FS: 0000555556159380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 54.579204][ T5055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.585913][ T5055] CR2: 0000000020001104 CR3: 000000001e0d1000 CR4: 0000000000350ef0 [ 54.593962][ T5055] Call Trace: [ 54.597293][ T5055] [ 54.600228][ T5055] ? show_regs+0x8f/0xa0 [ 54.604460][ T5055] ? __warn+0xe6/0x390 [ 54.608596][ T5055] ? __wake_up_klogd.part.0+0x99/0xf0 [ 54.613994][ T5055] ? ieee80211_bss_info_change_notify+0x2d6/0x840 [ 54.620524][ T5055] ? report_bug+0x3bc/0x580 [ 54.625085][ T5055] ? handle_bug+0x3d/0x70 [ 54.629428][ T5055] ? exc_invalid_op+0x17/0x40 [ 54.634091][ T5055] ? asm_exc_invalid_op+0x1a/0x20 [ 54.639200][ T5055] ? __warn_printk+0x199/0x350 [ 54.643986][ T5055] ? __warn_printk+0x1a6/0x350 [ 54.648835][ T5055] ? ieee80211_bss_info_change_notify+0x2d6/0x840 [ 54.655350][ T5055] ieee80211_ibss_disconnect+0x45b/0x8f0 [ 54.660984][ T5055] ieee80211_ibss_leave+0x16/0x160 [ 54.666190][ T5055] cfg80211_leave_ibss+0x1a4/0x440 [ 54.671322][ T5055] cfg80211_change_iface+0x412/0xd40 [ 54.676673][ T5055] nl80211_set_interface+0x6f4/0x9a0 [ 54.681991][ T5055] ? nl80211_notify_iface+0x1a0/0x1a0 [ 54.687403][ T5055] ? nl80211_pre_doit+0x71a/0xb10 [ 54.692461][ T5055] ? nl80211_pre_doit+0x1b0/0xb10 [ 54.697546][ T5055] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 54.703124][ T5055] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 54.710624][ T5055] ? ns_capable+0xd5/0x110 [ 54.715113][ T5055] genl_rcv_msg+0x561/0x800 [ 54.719611][ T5055] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 54.725540][ T5055] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 54.731533][ T5055] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 54.737587][ T5055] ? nl80211_notify_iface+0x1a0/0x1a0 [ 54.742994][ T5055] ? nl80211_get_power_save+0x480/0x480 [ 54.748584][ T5055] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 54.754624][ T5055] netlink_rcv_skb+0x16b/0x440 [ 54.759393][ T5055] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 54.765333][ T5055] ? netlink_ack+0x1380/0x1380 [ 54.770115][ T5055] ? down_read+0xc9/0x330 [ 54.774426][ T5055] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 54.780196][ T5055] ? netlink_deliver_tap+0x1a0/0xd00 [ 54.785524][ T5055] ? _copy_from_iter+0x2c1/0x10f0 [ 54.790805][ T5055] genl_rcv+0x28/0x40 [ 54.794840][ T5055] netlink_unicast+0x53b/0x810 [ 54.799622][ T5055] ? netlink_attachskb+0x880/0x880 [ 54.804770][ T5055] ? __phys_addr_symbol+0x30/0x70 [ 54.809820][ T5055] ? __check_object_size+0x323/0x730 [ 54.815187][ T5055] netlink_sendmsg+0x8b7/0xd70 [ 54.819970][ T5055] ? netlink_unicast+0x810/0x810 [ 54.824948][ T5055] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 54.830265][ T5055] ? netlink_unicast+0x810/0x810 [ 54.835261][ T5055] __sock_sendmsg+0xd5/0x180 [ 54.839881][ T5055] ____sys_sendmsg+0x6ac/0x940 [ 54.844675][ T5055] ? copy_msghdr_from_user+0x10b/0x160 [ 54.850141][ T5055] ? kernel_sendmsg+0x50/0x50 [ 54.854884][ T5055] ___sys_sendmsg+0x135/0x1d0 [ 54.859582][ T5055] ? do_recvmmsg+0x740/0x740 [ 54.864165][ T5055] ? lock_sync+0x190/0x190 [ 54.868612][ T5055] ? ptrace_stop.part.0+0x457/0x950 [ 54.873827][ T5055] ? __fget_light+0x173/0x200 [ 54.878586][ T5055] __sys_sendmsg+0x117/0x1e0 [ 54.883382][ T5055] ? __sys_sendmsg_sock+0x30/0x30 [ 54.888462][ T5055] ? ptrace_notify+0xf4/0x130 [ 54.893192][ T5055] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.898469][ T5055] ? _raw_spin_unlock_irq+0x2e/0x50 [ 54.903698][ T5055] ? ptrace_notify+0xf4/0x130 [ 54.908416][ T5055] do_syscall_64+0xd3/0x250 [ 54.912944][ T5055] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 54.918987][ T5055] RIP: 0033:0x7ff289181db9 [ 54.923421][ T5055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.943261][ T5055] RSP: 002b:00007ffcdc4612a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.951713][ T5055] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff289181db9 [ 54.959748][ T5055] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 54.967862][ T5055] RBP: 0000000000000000 R08: 0000555500000000 R09: 0000555500000000 [ 54.975976][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.983977][ T5055] R13: 0000000000000003 R14: 0000000000050012 R15: 00007ffcdc4612ea [ 54.992175][ T5055] [ 54.995272][ T5055] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 55.002542][ T5055] CPU: 0 PID: 5055 Comm: syz-executor292 Not tainted 6.8.0-rc1-syzkaller-00037-g443b349019f2 #0 [ 55.012944][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 55.022996][ T5055] Call Trace: [ 55.026279][ T5055] [ 55.029208][ T5055] dump_stack_lvl+0xd9/0x1b0 [ 55.033803][ T5055] panic+0x6dc/0x790 [ 55.037708][ T5055] ? panic_smp_self_stop+0xa0/0xa0 [ 55.042820][ T5055] ? show_trace_log_lvl+0x363/0x4f0 [ 55.048026][ T5055] ? check_panic_on_warn+0x1f/0xb0 [ 55.053140][ T5055] ? ieee80211_bss_info_change_notify+0x2d6/0x840 [ 55.059561][ T5055] check_panic_on_warn+0xab/0xb0 [ 55.064520][ T5055] __warn+0xf2/0x390 [ 55.068417][ T5055] ? __wake_up_klogd.part.0+0x99/0xf0 [ 55.073779][ T5055] ? ieee80211_bss_info_change_notify+0x2d6/0x840 [ 55.080198][ T5055] report_bug+0x3bc/0x580 [ 55.084535][ T5055] handle_bug+0x3d/0x70 [ 55.088689][ T5055] exc_invalid_op+0x17/0x40 [ 55.093189][ T5055] asm_exc_invalid_op+0x1a/0x20 [ 55.098063][ T5055] RIP: 0010:ieee80211_bss_info_change_notify+0x2d6/0x840 [ 55.105124][ T5055] Code: 8b 74 24 08 48 81 c6 20 01 00 00 48 89 74 24 08 e8 ef a3 8c f7 8b 14 24 48 c7 c7 80 2b 0d 8c 48 8b 74 24 08 e8 db 98 52 f7 90 <0f> 0b 90 90 e8 d1 a3 8c f7 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 55.124742][ T5055] RSP: 0018:ffffc9000422f320 EFLAGS: 00010286 [ 55.130815][ T5055] RAX: 0000000000000000 RBX: ffff888021060c80 RCX: ffffffff814e18f9 [ 55.138784][ T5055] RDX: ffff888027d8d940 RSI: ffffffff814e1906 RDI: 0000000000000001 [ 55.146760][ T5055] RBP: 0000000000000a00 R08: 0000000000000001 R09: 0000000000000000 [ 55.154731][ T5055] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807ee40e20 [ 55.162697][ T5055] R13: ffff8880210626e8 R14: ffff8880210614d0 R15: 0000000000000000 [ 55.170683][ T5055] ? __warn_printk+0x199/0x350 [ 55.175453][ T5055] ? __warn_printk+0x1a6/0x350 [ 55.180226][ T5055] ieee80211_ibss_disconnect+0x45b/0x8f0 [ 55.185870][ T5055] ieee80211_ibss_leave+0x16/0x160 [ 55.190990][ T5055] cfg80211_leave_ibss+0x1a4/0x440 [ 55.196198][ T5055] cfg80211_change_iface+0x412/0xd40 [ 55.201487][ T5055] nl80211_set_interface+0x6f4/0x9a0 [ 55.206805][ T5055] ? nl80211_notify_iface+0x1a0/0x1a0 [ 55.212203][ T5055] ? nl80211_pre_doit+0x71a/0xb10 [ 55.217234][ T5055] ? nl80211_pre_doit+0x1b0/0xb10 [ 55.222267][ T5055] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 55.227823][ T5055] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 55.235207][ T5055] ? ns_capable+0xd5/0x110 [ 55.239626][ T5055] genl_rcv_msg+0x561/0x800 [ 55.244126][ T5055] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 55.250016][ T5055] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 55.255991][ T5055] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 55.261978][ T5055] ? nl80211_notify_iface+0x1a0/0x1a0 [ 55.267352][ T5055] ? nl80211_get_power_save+0x480/0x480 [ 55.272897][ T5055] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 55.278876][ T5055] netlink_rcv_skb+0x16b/0x440 [ 55.283639][ T5055] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 55.289532][ T5055] ? netlink_ack+0x1380/0x1380 [ 55.294302][ T5055] ? down_read+0xc9/0x330 [ 55.298627][ T5055] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 55.304370][ T5055] ? netlink_deliver_tap+0x1a0/0xd00 [ 55.309673][ T5055] ? _copy_from_iter+0x2c1/0x10f0 [ 55.314697][ T5055] genl_rcv+0x28/0x40 [ 55.318677][ T5055] netlink_unicast+0x53b/0x810 [ 55.323445][ T5055] ? netlink_attachskb+0x880/0x880 [ 55.328557][ T5055] ? __phys_addr_symbol+0x30/0x70 [ 55.333578][ T5055] ? __check_object_size+0x323/0x730 [ 55.338868][ T5055] netlink_sendmsg+0x8b7/0xd70 [ 55.343638][ T5055] ? netlink_unicast+0x810/0x810 [ 55.348581][ T5055] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 55.353871][ T5055] ? netlink_unicast+0x810/0x810 [ 55.358811][ T5055] __sock_sendmsg+0xd5/0x180 [ 55.363408][ T5055] ____sys_sendmsg+0x6ac/0x940 [ 55.368181][ T5055] ? copy_msghdr_from_user+0x10b/0x160 [ 55.373675][ T5055] ? kernel_sendmsg+0x50/0x50 [ 55.378363][ T5055] ___sys_sendmsg+0x135/0x1d0 [ 55.383036][ T5055] ? do_recvmmsg+0x740/0x740 [ 55.387630][ T5055] ? lock_sync+0x190/0x190 [ 55.392041][ T5055] ? ptrace_stop.part.0+0x457/0x950 [ 55.397248][ T5055] ? __fget_light+0x173/0x200 [ 55.401925][ T5055] __sys_sendmsg+0x117/0x1e0 [ 55.406517][ T5055] ? __sys_sendmsg_sock+0x30/0x30 [ 55.411536][ T5055] ? ptrace_notify+0xf4/0x130 [ 55.416217][ T5055] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.421408][ T5055] ? _raw_spin_unlock_irq+0x2e/0x50 [ 55.426629][ T5055] ? ptrace_notify+0xf4/0x130 [ 55.431309][ T5055] do_syscall_64+0xd3/0x250 [ 55.435816][ T5055] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 55.441705][ T5055] RIP: 0033:0x7ff289181db9 [ 55.446113][ T5055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.465717][ T5055] RSP: 002b:00007ffcdc4612a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.474120][ T5055] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff289181db9 [ 55.482083][ T5055] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 55.490051][ T5055] RBP: 0000000000000000 R08: 0000555500000000 R09: 0000555500000000 [ 55.498014][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.505977][ T5055] R13: 0000000000000003 R14: 0000000000050012 R15: 00007ffcdc4612ea [ 55.513955][ T5055] [ 55.517184][ T5055] Kernel Offset: disabled [ 55.521669][ T5055] Rebooting in 86400 seconds..