Warning: Permanently added '10.128.1.42' (ECDSA) to the list of known hosts. syzkaller login: [ 52.437278][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.451344][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.461292][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.472259][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program executing program [ 52.480532][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.489277][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.505250][ T3632] netlink: 'syz-executor318': attribute type 27 has an invalid length. [ 52.524425][ T3632] syz-executor318 (3632) used greatest stack depth: 20024 bytes left [ 52.535263][ T3633] ------------[ cut here ]------------ [ 52.540980][ T3633] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 52.548888][ T3633] WARNING: CPU: 1 PID: 3633 at net/mac80211/main.c:235 ieee80211_bss_info_change_notify+0x589/0x7b0 [ 52.559698][ T3633] Modules linked in: [ 52.563582][ T3633] CPU: 1 PID: 3633 Comm: syz-executor318 Not tainted 6.1.16-syzkaller #0 [ 52.572025][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 52.582130][ T3633] RIP: 0010:ieee80211_bss_info_change_notify+0x589/0x7b0 [ 52.589198][ T3633] Code: ed 81 e0 f7 49 8b 86 08 09 00 00 49 81 c6 28 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 60 bd fb 8b 4c 89 f6 89 ea e8 67 66 52 f7 <0f> 0b e9 16 fb ff ff e8 db 1d 8a f7 0f 0b e9 65 fd ff ff e8 cf 1d [ 52.608889][ T3633] RSP: 0018:ffffc90003b7f230 EFLAGS: 00010246 [ 52.615024][ T3633] RAX: 840e9bc40fd77600 RBX: 0000000000000a00 RCX: ffff888018b40000 [ 52.623059][ T3633] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 52.631075][ T3633] RBP: 0000000000000000 R08: ffffffff8152ac2e R09: ffffed1017324f1c [ 52.639111][ T3633] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801fac2780 [ 52.647180][ T3633] R13: ffff8880775a0de0 R14: ffff88801fac0000 R15: dffffc0000000000 [ 52.655216][ T3633] FS: 0000555556e04300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 52.664267][ T3633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.670890][ T3633] CR2: 0000000020000200 CR3: 0000000026240000 CR4: 00000000003506e0 [ 52.678904][ T3633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.686957][ T3633] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.695074][ T3633] Call Trace: [ 52.698389][ T3633] [ 52.701318][ T3633] ieee80211_ibss_disconnect+0x567/0x700 [ 52.706952][ T3633] ieee80211_ibss_leave+0x21/0x130 [ 52.712106][ T3633] __cfg80211_leave_ibss+0x261/0x540 [ 52.717432][ T3633] cfg80211_leave_ibss+0x5b/0x70 [ 52.722414][ T3633] cfg80211_change_iface+0x597/0x1220 [ 52.727806][ T3633] nl80211_set_interface+0x5fa/0x870 [ 52.733143][ T3633] ? nl80211_dump_interface+0x690/0x690 [ 52.738752][ T3633] ? mutex_lock_nested+0x17/0x20 [ 52.743704][ T3633] genl_rcv_msg+0xc1a/0xf70 [ 52.748281][ T3633] ? kernel_text_address+0x9f/0xd0 [ 52.753467][ T3633] ? genl_bind+0x360/0x360 [ 52.757903][ T3633] ? mark_lock+0x9a/0x340 [ 52.762333][ T3633] ? mark_lock+0x9a/0x340 [ 52.766709][ T3633] ? nl80211_dump_interface+0x690/0x690 [ 52.772338][ T3633] netlink_rcv_skb+0x1cd/0x410 [ 52.777118][ T3633] ? genl_bind+0x360/0x360 [ 52.781581][ T3633] ? netlink_ack+0xe60/0xe60 [ 52.786187][ T3633] ? __down_read_common+0x184/0x2c0 [ 52.791427][ T3633] genl_rcv+0x24/0x40 [ 52.795423][ T3633] netlink_unicast+0x7bf/0x990 [ 52.800257][ T3633] ? netlink_detachskb+0x90/0x90 [ 52.805205][ T3633] ? __phys_addr_symbol+0x2b/0x70 [ 52.810274][ T3633] ? bpf_lsm_netlink_send+0x5/0x10 [ 52.815396][ T3633] netlink_sendmsg+0xa26/0xd60 [ 52.820228][ T3633] ? netlink_getsockopt+0x9d0/0x9d0 [ 52.825467][ T3633] ? aa_sock_msg_perm+0x91/0x150 [ 52.830466][ T3633] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 52.835762][ T3633] ? security_socket_sendmsg+0x7d/0xa0 [ 52.841263][ T3633] ? netlink_getsockopt+0x9d0/0x9d0 [ 52.846475][ T3633] ____sys_sendmsg+0x59e/0x8f0 [ 52.851293][ T3633] ? __sys_sendmsg_sock+0x30/0x30 [ 52.856370][ T3633] __sys_sendmsg+0x2a9/0x390 [ 52.861002][ T3633] ? ____sys_sendmsg+0x8f0/0x8f0 [ 52.865969][ T3633] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 52.872004][ T3633] ? syscall_enter_from_user_mode+0x2e/0x2b0 [ 52.878014][ T3633] ? lockdep_hardirqs_on+0x94/0x130 [ 52.883285][ T3633] ? syscall_enter_from_user_mode+0x2e/0x2b0 [ 52.889314][ T3633] do_syscall_64+0x3d/0xb0 [ 52.893751][ T3633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.899715][ T3633] RIP: 0033:0x7f2a91d4d369 [ 52.904147][ T3633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.923844][ T3633] RSP: 002b:00007ffdc7d13608 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.932293][ T3633] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007f2a91d4d369 [ 52.940312][ T3633] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 52.948434][ T3633] RBP: 0000000000000000 R08: 00007ffdc7d13637 R09: 00007ffdc7d13637 [ 52.956398][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000ccf7 [ 52.964404][ T3633] R13: 00007ffdc7d13680 R14: 00007ffdc7d13670 R15: 00007ffdc7d1363c [ 52.972421][ T3633] [ 52.975434][ T3633] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 52.982727][ T3633] CPU: 1 PID: 3633 Comm: syz-executor318 Not tainted 6.1.16-syzkaller #0 [ 52.991302][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 53.001356][ T3633] Call Trace: [ 53.004623][ T3633] [ 53.007543][ T3633] dump_stack_lvl+0x1e3/0x2cb [ 53.012218][ T3633] ? nf_tcp_handle_invalid+0x642/0x642 [ 53.017697][ T3633] ? panic+0x75d/0x75d [ 53.021775][ T3633] ? vscnprintf+0x59/0x80 [ 53.026103][ T3633] panic+0x318/0x75d [ 53.029998][ T3633] ? __warn+0x168/0x600 [ 53.034153][ T3633] ? memcpy_page_flushcache+0xfc/0xfc [ 53.039561][ T3633] __warn+0x430/0x600 [ 53.043536][ T3633] ? ieee80211_bss_info_change_notify+0x589/0x7b0 [ 53.049951][ T3633] report_bug+0x2af/0x500 [ 53.054277][ T3633] ? ieee80211_bss_info_change_notify+0x589/0x7b0 [ 53.060715][ T3633] handle_bug+0x3d/0x70 [ 53.064863][ T3633] exc_invalid_op+0x16/0x40 [ 53.069368][ T3633] asm_exc_invalid_op+0x16/0x20 [ 53.074235][ T3633] RIP: 0010:ieee80211_bss_info_change_notify+0x589/0x7b0 [ 53.081257][ T3633] Code: ed 81 e0 f7 49 8b 86 08 09 00 00 49 81 c6 28 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 60 bd fb 8b 4c 89 f6 89 ea e8 67 66 52 f7 <0f> 0b e9 16 fb ff ff e8 db 1d 8a f7 0f 0b e9 65 fd ff ff e8 cf 1d [ 53.100947][ T3633] RSP: 0018:ffffc90003b7f230 EFLAGS: 00010246 [ 53.107010][ T3633] RAX: 840e9bc40fd77600 RBX: 0000000000000a00 RCX: ffff888018b40000 [ 53.115008][ T3633] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 53.122975][ T3633] RBP: 0000000000000000 R08: ffffffff8152ac2e R09: ffffed1017324f1c [ 53.130939][ T3633] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801fac2780 [ 53.138904][ T3633] R13: ffff8880775a0de0 R14: ffff88801fac0000 R15: dffffc0000000000 [ 53.146875][ T3633] ? __warn_printk+0x28e/0x350 [ 53.151655][ T3633] ieee80211_ibss_disconnect+0x567/0x700 [ 53.157293][ T3633] ieee80211_ibss_leave+0x21/0x130 [ 53.162409][ T3633] __cfg80211_leave_ibss+0x261/0x540 [ 53.167712][ T3633] cfg80211_leave_ibss+0x5b/0x70 [ 53.172651][ T3633] cfg80211_change_iface+0x597/0x1220 [ 53.178377][ T3633] nl80211_set_interface+0x5fa/0x870 [ 53.183670][ T3633] ? nl80211_dump_interface+0x690/0x690 [ 53.189212][ T3633] ? mutex_lock_nested+0x17/0x20 [ 53.194169][ T3633] genl_rcv_msg+0xc1a/0xf70 [ 53.198676][ T3633] ? kernel_text_address+0x9f/0xd0 [ 53.203793][ T3633] ? genl_bind+0x360/0x360 [ 53.208209][ T3633] ? mark_lock+0x9a/0x340 [ 53.212541][ T3633] ? mark_lock+0x9a/0x340 [ 53.216881][ T3633] ? nl80211_dump_interface+0x690/0x690 [ 53.222436][ T3633] netlink_rcv_skb+0x1cd/0x410 [ 53.227201][ T3633] ? genl_bind+0x360/0x360 [ 53.231614][ T3633] ? netlink_ack+0xe60/0xe60 [ 53.236216][ T3633] ? __down_read_common+0x184/0x2c0 [ 53.241435][ T3633] genl_rcv+0x24/0x40 [ 53.245414][ T3633] netlink_unicast+0x7bf/0x990 [ 53.250181][ T3633] ? netlink_detachskb+0x90/0x90 [ 53.255114][ T3633] ? __phys_addr_symbol+0x2b/0x70 [ 53.260136][ T3633] ? bpf_lsm_netlink_send+0x5/0x10 [ 53.265243][ T3633] netlink_sendmsg+0xa26/0xd60 [ 53.270013][ T3633] ? netlink_getsockopt+0x9d0/0x9d0 [ 53.275209][ T3633] ? aa_sock_msg_perm+0x91/0x150 [ 53.280145][ T3633] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 53.285441][ T3633] ? security_socket_sendmsg+0x7d/0xa0 [ 53.290892][ T3633] ? netlink_getsockopt+0x9d0/0x9d0 [ 53.296088][ T3633] ____sys_sendmsg+0x59e/0x8f0 [ 53.300859][ T3633] ? __sys_sendmsg_sock+0x30/0x30 [ 53.305910][ T3633] __sys_sendmsg+0x2a9/0x390 [ 53.310508][ T3633] ? ____sys_sendmsg+0x8f0/0x8f0 [ 53.315481][ T3633] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 53.321577][ T3633] ? syscall_enter_from_user_mode+0x2e/0x2b0 [ 53.327569][ T3633] ? lockdep_hardirqs_on+0x94/0x130 [ 53.332770][ T3633] ? syscall_enter_from_user_mode+0x2e/0x2b0 [ 53.338751][ T3633] do_syscall_64+0x3d/0xb0 [ 53.343167][ T3633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.349061][ T3633] RIP: 0033:0x7f2a91d4d369 [ 53.353474][ T3633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.373088][ T3633] RSP: 002b:00007ffdc7d13608 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.381503][ T3633] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007f2a91d4d369 [ 53.389468][ T3633] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 53.397448][ T3633] RBP: 0000000000000000 R08: 00007ffdc7d13637 R09: 00007ffdc7d13637 [ 53.405410][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000ccf7 [ 53.413372][ T3633] R13: 00007ffdc7d13680 R14: 00007ffdc7d13670 R15: 00007ffdc7d1363c [ 53.421354][ T3633] [ 53.424417][ T3633] Kernel Offset: disabled [ 53.428811][ T3633] Rebooting in 86400 seconds..