DUID 00:04:fd:d1:b1:d5:68:a0:3a:5f:50:0a:64:49:ea:42:3f:75
forked to background, child pid 3172
[ 22.153949][ T3173] 8021q: adding VLAN 0 to HW filter on device bond0
[ 22.167200][ T3173] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.55' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 42.874281][ T3498] netlink: 'syz-executor144': attribute type 27 has an invalid length.
[ 42.882711][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor144'.
[ 43.024612][ T3509] netlink: 'syz-executor144': attribute type 27 has an invalid length.
[ 43.033574][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor144'.
[ 43.044475][ T3509] ------------[ cut here ]------------
[ 43.050208][ T3509] wlan0: Failed check-sdata-in-driver check, flags: 0x0
[ 43.059720][ T3509] WARNING: CPU: 1 PID: 3509 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x36d/0x540
[ 43.071637][ T3509] Modules linked in:
[ 43.075833][ T3509] CPU: 1 PID: 3509 Comm: syz-executor144 Not tainted 5.15.113-syzkaller #0
[ 43.084701][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 43.094934][ T3509] RIP: 0010:ieee80211_bss_info_change_notify+0x36d/0x540
[ 43.101976][ T3509] Code: 37 26 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 f7 92 8b 4c 89 e6 89 ea e8 73 af a8 f7 <0f> 0b e9 21 fd ff ff e8 f7 db dc f7 0f 0b e9 b0 fe ff ff e8 eb db
[ 43.121894][ T3509] RSP: 0018:ffffc90002ccf160 EFLAGS: 00010246
[ 43.128206][ T3509] RAX: 65ab3b11ce5c5600 RBX: ffff88801d659290 RCX: ffff8880131fd940
[ 43.136317][ T3509] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 43.144402][ T3509] RBP: 0000000000000000 R08: ffffffff8166391c R09: ffffed10173667a0
[ 43.152362][ T3509] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801d658000
[ 43.160439][ T3509] R13: 0000000000400000 R14: dffffc0000000000 R15: ffff88801d65a298
[ 43.168437][ T3509] FS: 00005555557a8300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 43.178175][ T3509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 43.184776][ T3509] CR2: 000055eb95e19131 CR3: 0000000074315000 CR4: 00000000003506f0
[ 43.193221][ T3509] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 43.201191][ T3509] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 43.209191][ T3509] Call Trace:
[ 43.212472][ T3509]
[ 43.215431][ T3509] ieee80211_ocb_leave+0x26a/0x310
[ 43.220559][ T3509] __cfg80211_leave_ocb+0x21c/0x410
[ 43.225812][ T3509] cfg80211_leave_ocb+0x54/0x70
[ 43.230661][ T3509] cfg80211_change_iface+0x508/0xf20
[ 43.236013][ T3509] nl80211_set_interface+0x5f8/0x890
[ 43.241301][ T3509] ? nl80211_dump_interface+0x690/0x690
[ 43.246876][ T3509] ? mutex_lock_nested+0x17/0x20
[ 43.251824][ T3509] genl_rcv_msg+0xfbd/0x14a0
[ 43.256453][ T3509] ? genl_bind+0x370/0x370
[ 43.260872][ T3509] ? arch_stack_walk+0xf3/0x140
[ 43.265757][ T3509] ? mark_lock+0x98/0x340
[ 43.270088][ T3509] ? __lock_acquire+0x1295/0x1ff0
[ 43.275175][ T3509] ? nl80211_dump_interface+0x690/0x690
[ 43.280728][ T3509] netlink_rcv_skb+0x1cf/0x410
[ 43.285528][ T3509] ? genl_bind+0x370/0x370
[ 43.289942][ T3509] ? netlink_ack+0xb10/0xb10
[ 43.294567][ T3509] ? down_read+0x1b3/0x2e0
[ 43.298977][ T3509] ? genl_rcv+0x9/0x40
[ 43.303089][ T3509] genl_rcv+0x24/0x40
[ 43.307073][ T3509] netlink_unicast+0x7b6/0x980
[ 43.311848][ T3509] ? netlink_detachskb+0x90/0x90
[ 43.316814][ T3509] ? 0xffffffff81000000
[ 43.320963][ T3509] ? __check_object_size+0x300/0x410
[ 43.326280][ T3509] ? bpf_lsm_netlink_send+0x5/0x10
[ 43.331394][ T3509] netlink_sendmsg+0xa30/0xd60
[ 43.336196][ T3509] ? netlink_getsockopt+0x5a0/0x5a0
[ 43.341394][ T3509] ? aa_sock_msg_perm+0x91/0x150
[ 43.346366][ T3509] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 43.351664][ T3509] ? security_socket_sendmsg+0x7d/0xa0
[ 43.357146][ T3509] ? netlink_getsockopt+0x5a0/0x5a0
[ 43.362348][ T3509] ____sys_sendmsg+0x59e/0x8f0
[ 43.367144][ T3509] ? iovec_from_user+0x300/0x390
[ 43.372087][ T3509] ? __sys_sendmsg_sock+0x30/0x30
[ 43.377154][ T3509] ___sys_sendmsg+0x252/0x2e0
[ 43.381831][ T3509] ? __might_fault+0xb8/0x110
[ 43.386546][ T3509] ? __sys_sendmsg+0x260/0x260
[ 43.391402][ T3509] ? __lock_acquire+0x1295/0x1ff0
[ 43.396480][ T3509] ? read_lock_is_recursive+0x10/0x10
[ 43.401852][ T3509] ? __context_tracking_exit+0x4c/0x80
[ 43.407430][ T3509] ? __fdget+0x158/0x220
[ 43.411673][ T3509] __se_sys_sendmsg+0x19a/0x260
[ 43.416565][ T3509] ? __x64_sys_sendmsg+0x80/0x80
[ 43.421527][ T3509] ? syscall_enter_from_user_mode+0x2e/0x230
[ 43.428175][ T3509] ? lockdep_hardirqs_on+0x94/0x130
[ 43.437634][ T3509] ? syscall_enter_from_user_mode+0x2e/0x230
[ 43.444047][ T3509] do_syscall_64+0x3d/0xb0
[ 43.448478][ T3509] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 43.454422][ T3509] RIP: 0033:0x7f9595ce1aa9
[ 43.459191][ T3509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.479559][ T3509] RSP: 002b:00007fff3be08b78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 43.488009][ T3509] RAX: ffffffffffffffda RBX: 000000000000a757 RCX: 00007f9595ce1aa9
[ 43.496004][ T3509] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 43.503999][ T3509] RBP: 0000000000000000 R08: 00007fff3be08d18 R09: 00007fff3be08d18
[ 43.512393][ T3509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3be08b8c
[ 43.520960][ T3509] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 43.529793][ T3509]
[ 43.533103][ T3509] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 43.540791][ T3509] CPU: 0 PID: 3509 Comm: syz-executor144 Not tainted 5.15.113-syzkaller #0
[ 43.549371][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 43.559411][ T3509] Call Trace:
[ 43.562680][ T3509]
[ 43.565598][ T3509] dump_stack_lvl+0x1e3/0x2cb
[ 43.570269][ T3509] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 43.575890][ T3509] ? panic+0x84d/0x84d
[ 43.579961][ T3509] ? ieee80211_bss_info_change_notify+0x320/0x540
[ 43.586356][ T3509] ? ieee80211_bss_info_change_notify+0x320/0x540
[ 43.592837][ T3509] panic+0x318/0x84d
[ 43.596724][ T3509] ? __warn+0x16a/0x300
[ 43.600866][ T3509] ? fb_is_primary_device+0xcc/0xcc
[ 43.606048][ T3509] ? ieee80211_bss_info_change_notify+0x36d/0x540
[ 43.612527][ T3509] __warn+0x2b2/0x300
[ 43.616492][ T3509] ? ieee80211_bss_info_change_notify+0x36d/0x540
[ 43.623165][ T3509] report_bug+0x1b7/0x2e0
[ 43.627506][ T3509] handle_bug+0x3d/0x70
[ 43.631666][ T3509] exc_invalid_op+0x16/0x40
[ 43.636151][ T3509] asm_exc_invalid_op+0x16/0x20
[ 43.640981][ T3509] RIP: 0010:ieee80211_bss_info_change_notify+0x36d/0x540
[ 43.647987][ T3509] Code: 37 26 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 f7 92 8b 4c 89 e6 89 ea e8 73 af a8 f7 <0f> 0b e9 21 fd ff ff e8 f7 db dc f7 0f 0b e9 b0 fe ff ff e8 eb db
[ 43.667582][ T3509] RSP: 0018:ffffc90002ccf160 EFLAGS: 00010246
[ 43.673642][ T3509] RAX: 65ab3b11ce5c5600 RBX: ffff88801d659290 RCX: ffff8880131fd940
[ 43.681598][ T3509] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 43.689639][ T3509] RBP: 0000000000000000 R08: ffffffff8166391c R09: ffffed10173667a0
[ 43.697592][ T3509] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801d658000
[ 43.705559][ T3509] R13: 0000000000400000 R14: dffffc0000000000 R15: ffff88801d65a298
[ 43.713539][ T3509] ? __wake_up_klogd+0xcc/0x100
[ 43.718531][ T3509] ieee80211_ocb_leave+0x26a/0x310
[ 43.723655][ T3509] __cfg80211_leave_ocb+0x21c/0x410
[ 43.729459][ T3509] cfg80211_leave_ocb+0x54/0x70
[ 43.734304][ T3509] cfg80211_change_iface+0x508/0xf20
[ 43.739578][ T3509] nl80211_set_interface+0x5f8/0x890
[ 43.744852][ T3509] ? nl80211_dump_interface+0x690/0x690
[ 43.750381][ T3509] ? mutex_lock_nested+0x17/0x20
[ 43.755310][ T3509] genl_rcv_msg+0xfbd/0x14a0
[ 43.759895][ T3509] ? genl_bind+0x370/0x370
[ 43.764293][ T3509] ? arch_stack_walk+0xf3/0x140
[ 43.769135][ T3509] ? mark_lock+0x98/0x340
[ 43.773464][ T3509] ? __lock_acquire+0x1295/0x1ff0
[ 43.778505][ T3509] ? nl80211_dump_interface+0x690/0x690
[ 43.784164][ T3509] netlink_rcv_skb+0x1cf/0x410
[ 43.788922][ T3509] ? genl_bind+0x370/0x370
[ 43.793324][ T3509] ? netlink_ack+0xb10/0xb10
[ 43.797900][ T3509] ? down_read+0x1b3/0x2e0
[ 43.802295][ T3509] ? genl_rcv+0x9/0x40
[ 43.806373][ T3509] genl_rcv+0x24/0x40
[ 43.810334][ T3509] netlink_unicast+0x7b6/0x980
[ 43.815080][ T3509] ? netlink_detachskb+0x90/0x90
[ 43.819998][ T3509] ? 0xffffffff81000000
[ 43.824140][ T3509] ? __check_object_size+0x300/0x410
[ 43.829404][ T3509] ? bpf_lsm_netlink_send+0x5/0x10
[ 43.834495][ T3509] netlink_sendmsg+0xa30/0xd60
[ 43.839242][ T3509] ? netlink_getsockopt+0x5a0/0x5a0
[ 43.844421][ T3509] ? aa_sock_msg_perm+0x91/0x150
[ 43.849346][ T3509] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 43.855254][ T3509] ? security_socket_sendmsg+0x7d/0xa0
[ 43.861052][ T3509] ? netlink_getsockopt+0x5a0/0x5a0
[ 43.866931][ T3509] ____sys_sendmsg+0x59e/0x8f0
[ 43.872781][ T3509] ? iovec_from_user+0x300/0x390
[ 43.877812][ T3509] ? __sys_sendmsg_sock+0x30/0x30
[ 43.883303][ T3509] ___sys_sendmsg+0x252/0x2e0
[ 43.888733][ T3509] ? __might_fault+0xb8/0x110
[ 43.893407][ T3509] ? __sys_sendmsg+0x260/0x260
[ 43.898428][ T3509] ? __lock_acquire+0x1295/0x1ff0
[ 43.903470][ T3509] ? read_lock_is_recursive+0x10/0x10
[ 43.908942][ T3509] ? __context_tracking_exit+0x4c/0x80
[ 43.914396][ T3509] ? __fdget+0x158/0x220
[ 43.918627][ T3509] __se_sys_sendmsg+0x19a/0x260
[ 43.923472][ T3509] ? __x64_sys_sendmsg+0x80/0x80
[ 43.928412][ T3509] ? syscall_enter_from_user_mode+0x2e/0x230
[ 43.934386][ T3509] ? lockdep_hardirqs_on+0x94/0x130
[ 43.939564][ T3509] ? syscall_enter_from_user_mode+0x2e/0x230
[ 43.945526][ T3509] do_syscall_64+0x3d/0xb0
[ 43.949923][ T3509] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 43.955796][ T3509] RIP: 0033:0x7f9595ce1aa9
[ 43.960192][ T3509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.979773][ T3509] RSP: 002b:00007fff3be08b78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 43.988165][ T3509] RAX: ffffffffffffffda RBX: 000000000000a757 RCX: 00007f9595ce1aa9
[ 43.996116][ T3509] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 44.004064][ T3509] RBP: 0000000000000000 R08: 00007fff3be08d18 R09: 00007fff3be08d18
[ 44.012014][ T3509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3be08b8c
[ 44.019965][ T3509] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 44.027928][ T3509]
[ 44.031101][ T3509] Kernel Offset: disabled
[ 44.035484][ T3509] Rebooting in 86400 seconds..