DUID 00:04:64:fe:60:40:6b:21:45:e2:2b:76:87:02:d2:43:fb:60
forked to background, child pid 3175
[ 26.922442][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.933554][ T3176] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.174' (ECDSA) to the list of known hosts.
syzkaller login: [ 48.042155][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 48.050961][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 48.061797][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 48.078600][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
executing program
executing program
[ 48.086513][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 48.095186][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 48.126803][ T3594] syz-executor229 (3594) used greatest stack depth: 21832 bytes left
[ 48.130766][ T3595] ------------[ cut here ]------------
[ 48.140619][ T3595] wlan1: Failed check-sdata-in-driver check, flags: 0x4
[ 48.147952][ T3595] WARNING: CPU: 1 PID: 3595 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4dd/0x5f0
[ 48.158553][ T3595] Modules linked in:
[ 48.162455][ T3595] CPU: 1 PID: 3595 Comm: syz-executor229 Not tainted 5.17.0-rc7-syzkaller-02443-gd96657dc9238 #0
[ 48.172983][ T3595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 48.183118][ T3595] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0
[ 48.189170][ T3595] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 3b 96 df f8 e8 36 96 df f8 8b 54 24 04 48 89 ee 48 c7 c7 00 6a cf 8a e8 c5 f3 73 00 <0f> 0b e9 f6 fd ff ff e8 17 96 df f8 e8 92 3c b8 00 31 ff 89 c3 89
[ 48.208939][ T3595] RSP: 0018:ffffc9000382f500 EFLAGS: 00010282
[ 48.215022][ T3595] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 48.223148][ T3595] RDX: ffff888021ff8000 RSI: ffffffff815ff5e8 RDI: fffff52000705e92
[ 48.231533][ T3595] RBP: ffff88807a280000 R08: 0000000000000000 R09: 0000000000000000
[ 48.239623][ T3595] R10: ffffffff815f9c7e R11: 0000000000000000 R12: ffff88807a280d00
[ 48.247654][ T3595] R13: 0000000002000000 R14: ffff88807a282350 R15: ffff88807a282348
[ 48.255732][ T3595] FS: 0000555556f70300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 48.264775][ T3595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.271507][ T3595] CR2: 00007f6834abf350 CR3: 000000001a58e000 CR4: 00000000003506f0
[ 48.279550][ T3595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 48.287560][ T3595] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 48.295632][ T3595] Call Trace:
[ 48.299048][ T3595]
[ 48.302025][ T3595] ieee80211_bss_info_change_notify+0x9a/0xc0
[ 48.308197][ T3595] ieee80211_set_mcast_rate+0x37/0x40
[ 48.313637][ T3595] ? ieee80211_get_mesh_config+0x30/0x30
[ 48.319375][ T3595] nl80211_set_mcast_rate+0x317/0x610
[ 48.324817][ T3595] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0
[ 48.331682][ T3595] ? nl80211_pre_doit+0xa6/0x640
[ 48.336645][ T3595] genl_family_rcv_msg_doit+0x228/0x320
[ 48.342792][ T3595] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 48.350339][ T3595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 48.356664][ T3595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 48.363019][ T3595] ? ns_capable+0xd9/0x100
[ 48.367515][ T3595] genl_rcv_msg+0x328/0x580
[ 48.372135][ T3595] ? genl_get_cmd+0x480/0x480
[ 48.376960][ T3595] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0
[ 48.383665][ T3595] ? lock_release+0x720/0x720
[ 48.388449][ T3595] netlink_rcv_skb+0x153/0x420
[ 48.393234][ T3595] ? genl_get_cmd+0x480/0x480
[ 48.397900][ T3595] ? netlink_ack+0xa60/0xa60
[ 48.402835][ T3595] ? netlink_deliver_tap+0x1b1/0xc40
[ 48.408341][ T3595] genl_rcv+0x24/0x40
[ 48.412319][ T3595] netlink_unicast+0x543/0x7f0
[ 48.417081][ T3595] ? netlink_attachskb+0x880/0x880
[ 48.422466][ T3595] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 48.428873][ T3595] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 48.435116][ T3595] ? __phys_addr_symbol+0x2c/0x70
[ 48.440398][ T3595] ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 48.446115][ T3595] ? __check_object_size+0x16e/0x310
[ 48.451757][ T3595] netlink_sendmsg+0x904/0xe00
[ 48.456609][ T3595] ? netlink_unicast+0x7f0/0x7f0
[ 48.461652][ T3595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 48.467992][ T3595] ? netlink_unicast+0x7f0/0x7f0
[ 48.473046][ T3595] sock_sendmsg+0xcf/0x120
[ 48.477623][ T3595] ____sys_sendmsg+0x6e8/0x810
[ 48.482500][ T3595] ? kernel_sendmsg+0x50/0x50
[ 48.487237][ T3595] ? do_recvmmsg+0x6d0/0x6d0
[ 48.491923][ T3595] ? find_held_lock+0x2d/0x110
[ 48.496846][ T3595] ? __might_fault+0xd1/0x170
[ 48.501615][ T3595] ? lock_downgrade+0x6e0/0x6e0
[ 48.506530][ T3595] ___sys_sendmsg+0xf3/0x170
[ 48.511211][ T3595] ? sendmsg_copy_msghdr+0x160/0x160
[ 48.516576][ T3595] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 48.522654][ T3595] ? get_user_ifreq+0x250/0x250
[ 48.527570][ T3595] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 48.533664][ T3595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 48.540116][ T3595] ? __fget_light+0x215/0x280
[ 48.544807][ T3595] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 48.551104][ T3595] __sys_sendmsg+0xe5/0x1b0
[ 48.555621][ T3595] ? __sys_sendmsg_sock+0x30/0x30
[ 48.560912][ T3595] ? restore_fpregs_from_fpstate+0xcc/0x1e0
[ 48.566894][ T3595] ? syscall_enter_from_user_mode+0x21/0x70
[ 48.572973][ T3595] do_syscall_64+0x35/0xb0
[ 48.577665][ T3595] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 48.583673][ T3595] RIP: 0033:0x7f6834a43bd9
[ 48.588178][ T3595] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 48.607897][ T3595] RSP: 002b:00007ffc4104dc98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 48.616394][ T3595] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007f6834a43bd9
[ 48.624453][ T3595] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[ 48.632496][ T3595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 48.640550][ T3595] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000bbd7
[ 48.648656][ T3595] R13: 00007ffc4104dd00 R14: 00007ffc4104dcf0 R15: 00007ffc4104dcbc
[ 48.656674][ T3595]
[ 48.659785][ T3595] Kernel panic - not syncing: panic_on_warn set ...
[ 48.666367][ T3595] CPU: 0 PID: 3595 Comm: syz-executor229 Not tainted 5.17.0-rc7-syzkaller-02443-gd96657dc9238 #0
[ 48.676861][ T3595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 48.686898][ T3595] Call Trace:
[ 48.690175][ T3595]
[ 48.693089][ T3595] dump_stack_lvl+0xcd/0x134
[ 48.697667][ T3595] panic+0x2b0/0x6dd
[ 48.701551][ T3595] ? __warn_printk+0xf3/0xf3
[ 48.706132][ T3595] ? __warn.cold+0x1d1/0x2cf
[ 48.710710][ T3595] ? drv_bss_info_changed+0x4dd/0x5f0
[ 48.716070][ T3595] __warn.cold+0x1ec/0x2cf
[ 48.720470][ T3595] ? wake_up_klogd.part.0+0x8e/0xd0
[ 48.725653][ T3595] ? drv_bss_info_changed+0x4dd/0x5f0
[ 48.731010][ T3595] report_bug+0x1bd/0x210
[ 48.735326][ T3595] handle_bug+0x3c/0x60
[ 48.739468][ T3595] exc_invalid_op+0x14/0x40
[ 48.743956][ T3595] asm_exc_invalid_op+0x12/0x20
[ 48.748793][ T3595] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0
[ 48.754780][ T3595] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 3b 96 df f8 e8 36 96 df f8 8b 54 24 04 48 89 ee 48 c7 c7 00 6a cf 8a e8 c5 f3 73 00 <0f> 0b e9 f6 fd ff ff e8 17 96 df f8 e8 92 3c b8 00 31 ff 89 c3 89
[ 48.774389][ T3595] RSP: 0018:ffffc9000382f500 EFLAGS: 00010282
[ 48.780437][ T3595] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 48.788390][ T3595] RDX: ffff888021ff8000 RSI: ffffffff815ff5e8 RDI: fffff52000705e92
[ 48.796347][ T3595] RBP: ffff88807a280000 R08: 0000000000000000 R09: 0000000000000000
[ 48.804301][ T3595] R10: ffffffff815f9c7e R11: 0000000000000000 R12: ffff88807a280d00
[ 48.812341][ T3595] R13: 0000000002000000 R14: ffff88807a282350 R15: ffff88807a282348
[ 48.820306][ T3595] ? wake_up_klogd.part.0+0x8e/0xd0
[ 48.825494][ T3595] ? vprintk+0x88/0x90
[ 48.829553][ T3595] ieee80211_bss_info_change_notify+0x9a/0xc0
[ 48.835610][ T3595] ieee80211_set_mcast_rate+0x37/0x40
[ 48.840964][ T3595] ? ieee80211_get_mesh_config+0x30/0x30
[ 48.846580][ T3595] nl80211_set_mcast_rate+0x317/0x610
[ 48.851939][ T3595] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0
[ 48.858513][ T3595] ? nl80211_pre_doit+0xa6/0x640
[ 48.863437][ T3595] genl_family_rcv_msg_doit+0x228/0x320
[ 48.868983][ T3595] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 48.876434][ T3595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 48.882667][ T3595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 48.888893][ T3595] ? ns_capable+0xd9/0x100
[ 48.893296][ T3595] genl_rcv_msg+0x328/0x580
[ 48.897786][ T3595] ? genl_get_cmd+0x480/0x480
[ 48.902449][ T3595] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0
[ 48.909048][ T3595] ? lock_release+0x720/0x720
[ 48.913712][ T3595] netlink_rcv_skb+0x153/0x420
[ 48.918462][ T3595] ? genl_get_cmd+0x480/0x480
[ 48.923136][ T3595] ? netlink_ack+0xa60/0xa60
[ 48.927723][ T3595] ? netlink_deliver_tap+0x1b1/0xc40
[ 48.933016][ T3595] genl_rcv+0x24/0x40
[ 48.936982][ T3595] netlink_unicast+0x543/0x7f0
[ 48.941735][ T3595] ? netlink_attachskb+0x880/0x880
[ 48.946828][ T3595] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 48.953073][ T3595] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 48.959298][ T3595] ? __phys_addr_symbol+0x2c/0x70
[ 48.964304][ T3595] ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 48.970006][ T3595] ? __check_object_size+0x16e/0x310
[ 48.975281][ T3595] netlink_sendmsg+0x904/0xe00
[ 48.980035][ T3595] ? netlink_unicast+0x7f0/0x7f0
[ 48.984961][ T3595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 48.991195][ T3595] ? netlink_unicast+0x7f0/0x7f0
[ 48.996148][ T3595] sock_sendmsg+0xcf/0x120
[ 49.000554][ T3595] ____sys_sendmsg+0x6e8/0x810
[ 49.005305][ T3595] ? kernel_sendmsg+0x50/0x50
[ 49.009966][ T3595] ? do_recvmmsg+0x6d0/0x6d0
[ 49.014563][ T3595] ? find_held_lock+0x2d/0x110
[ 49.019318][ T3595] ? __might_fault+0xd1/0x170
[ 49.023994][ T3595] ? lock_downgrade+0x6e0/0x6e0
[ 49.028835][ T3595] ___sys_sendmsg+0xf3/0x170
[ 49.033419][ T3595] ? sendmsg_copy_msghdr+0x160/0x160
[ 49.038704][ T3595] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 49.044669][ T3595] ? get_user_ifreq+0x250/0x250
[ 49.049501][ T3595] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 49.055472][ T3595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 49.061699][ T3595] ? __fget_light+0x215/0x280
[ 49.066360][ T3595] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 49.072590][ T3595] __sys_sendmsg+0xe5/0x1b0
[ 49.077080][ T3595] ? __sys_sendmsg_sock+0x30/0x30
[ 49.082087][ T3595] ? restore_fpregs_from_fpstate+0xcc/0x1e0
[ 49.087969][ T3595] ? syscall_enter_from_user_mode+0x21/0x70
[ 49.093860][ T3595] do_syscall_64+0x35/0xb0
[ 49.098263][ T3595] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 49.104144][ T3595] RIP: 0033:0x7f6834a43bd9
[ 49.108543][ T3595] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.128130][ T3595] RSP: 002b:00007ffc4104dc98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 49.136522][ T3595] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007f6834a43bd9
[ 49.144489][ T3595] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[ 49.152440][ T3595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 49.160390][ T3595] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000bbd7
[ 49.168340][ T3595] R13: 00007ffc4104dd00 R14: 00007ffc4104dcf0 R15: 00007ffc4104dcbc
[ 49.176301][ T3595]
[ 49.179630][ T3595] Kernel Offset: disabled
[ 49.184057][ T3595] Rebooting in 86400 seconds..