Warning: Permanently added '10.128.1.85' (ECDSA) to the list of known hosts. executing program [ 35.919472][ T4223] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 35.921467][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 36.146406][ T4238] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 36.148384][ T4238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 36.152392][ T4238] ------------[ cut here ]------------ [ 36.153701][ T4238] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 36.155929][ T4238] WARNING: CPU: 0 PID: 4238 at net/mac80211/main.c:235 ieee80211_bss_info_change_notify+0x478/0x740 [ 36.158278][ T4238] Modules linked in: [ 36.159146][ T4238] CPU: 0 PID: 4238 Comm: syz-executor204 Not tainted 6.1.27-syzkaller #0 [ 36.161059][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 36.163247][ T4238] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 36.164948][ T4238] pc : ieee80211_bss_info_change_notify+0x478/0x740 [ 36.166363][ T4238] lr : ieee80211_bss_info_change_notify+0x478/0x740 [ 36.167761][ T4238] sp : ffff80001d9b6fc0 [ 36.168644][ T4238] x29: ffff80001d9b6fc0 x28: 1fffe0001a122b55 x27: dfff800000000000 [ 36.170366][ T4238] x26: 1fffe0001a122ab2 x25: ffff0000d0915590 x24: 0000000000000000 [ 36.172161][ T4238] x23: 0000000000000000 x22: ffff0000d0916780 x21: ffff0000d0a00e00 [ 36.173896][ T4238] x20: ffff800017ea4000 x19: ffff0000d0914c80 x18: 1fffe000368b6776 [ 36.175687][ T4238] x17: ffff80001558d000 x16: ffff8000083042f0 x15: ffff0001b45b3bbc [ 36.177456][ T4238] x14: 1ffff00002ab20b0 x13: dfff800000000000 x12: 0000000000000003 [ 36.179125][ T4238] x11: ff8080000aabdaa8 x10: 0000000000000003 x9 : 83078edd6834a600 [ 36.180888][ T4238] x8 : 83078edd6834a600 x7 : ffff80000827b588 x6 : 0000000000000000 [ 36.182552][ T4238] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 36.184340][ T4238] x2 : 0000000000000006 x1 : ffff80001223c340 x0 : ffff80019f0d2000 [ 36.186114][ T4238] Call trace: [ 36.186812][ T4238] ieee80211_bss_info_change_notify+0x478/0x740 [ 36.188106][ T4238] ieee80211_ocb_leave+0x21c/0x2dc [ 36.189192][ T4238] ieee80211_leave_ocb+0x20/0x30 [ 36.190312][ T4238] __cfg80211_leave_ocb+0x23c/0x550 [ 36.191489][ T4238] cfg80211_leave_ocb+0x5c/0x80 [ 36.192527][ T4238] cfg80211_change_iface+0x4ac/0x100c [ 36.193662][ T4238] nl80211_set_interface+0x3f8/0x6f0 [ 36.194802][ T4238] genl_rcv_msg+0x948/0xc2c [ 36.195802][ T4238] netlink_rcv_skb+0x20c/0x3b8 [ 36.196863][ T4238] genl_rcv+0x38/0x50 [ 36.197691][ T4238] netlink_unicast+0x660/0x8d4 [ 36.198706][ T4238] netlink_sendmsg+0x834/0xb18 [ 36.199790][ T4238] ____sys_sendmsg+0x558/0x844 [ 36.200905][ T4238] __sys_sendmsg+0x26c/0x33c [ 36.201881][ T4238] __arm64_sys_sendmsg+0x80/0x94 [ 36.202928][ T4238] invoke_syscall+0x98/0x2c0 [ 36.203913][ T4238] el0_svc_common+0x138/0x258 [ 36.205047][ T4238] do_el0_svc+0x64/0x218 [ 36.205985][ T4238] el0_svc+0x58/0x168 [ 36.206835][ T4238] el0t_64_sync_handler+0x84/0xf0 [ 36.207944][ T4238] el0t_64_sync+0x18c/0x190 [ 36.208943][ T4238] irq event stamp: 1216 [ 36.209837][ T4238] hardirqs last enabled at (1215): [] finish_lock_switch+0xbc/0x1e8 [ 36.211905][ T4238] hardirqs last disabled at (1216): [] el1_dbg+0x24/0x80 [ 36.213818][ T4238] softirqs last enabled at (1190): [] ieee80211_ocb_leave+0x1d0/0x2dc [ 36.215913][ T4238] softirqs last disabled at (1188): [] ieee80211_ocb_leave+0x7c/0x2dc [ 36.217985][ T4238] ---[ end trace 0000000000000000 ]--- [ 36.231889][ T4240] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 36.233755][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 36.245582][ T4241] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 36.247537][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 36.259582][ T4243] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 36.261571][ T4243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 36.272948][ T4246] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 36.275053][ T4246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 36.285811][ T4247] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 36.287784][ T4247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 36.302700][ T4250] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 36.304525][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 36.316724][ T4251] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 36.318638][ T4251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 36.330366][ T4255] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 36.332579][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 40.931523][ T4983] validate_nla: 454 callbacks suppressed [ 40.931538][ T4983] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 40.934736][ T4983] __nla_validate_parse: 454 callbacks suppressed [ 40.934746][ T4983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 40.948104][ T4985] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 40.950296][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 40.962433][ T4987] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 40.964357][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 40.978304][ T4989] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 40.980660][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 40.992722][ T4990] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 40.994625][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 41.006454][ T4992] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 41.008432][ T4992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 41.020952][ T4993] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 41.022866][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 41.038454][ T4995] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 41.042329][ T4995] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 41.054067][ T4996] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 41.056105][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 41.067660][ T4998] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 41.070985][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 45.944504][ T5550] validate_nla: 528 callbacks suppressed [ 45.944518][ T5550] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 45.947717][ T5550] __nla_validate_parse: 528 callbacks suppressed [ 45.947726][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 45.960185][ T5551] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 45.962066][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 45.973292][ T5552] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 45.975248][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 45.990069][ T5553] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 45.991911][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 46.002978][ T5554] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 46.004916][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 46.016979][ T5555] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 46.018814][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 46.029312][ T5556] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 46.031268][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 46.042047][ T5557] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 46.043963][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 46.054994][ T5558] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 46.056865][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'. [ 46.066961][ T5559] netlink: 'syz-executor204': attribute type 27 has an invalid length. [ 46.068872][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor204'.