Warning: Permanently added '10.128.0.146' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 45.046129][ T3963] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.048264][ T3963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 45.196712][ T3978] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.198581][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 45.201603][ T3978] ------------[ cut here ]------------ [ 45.202847][ T3978] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 45.205317][ T3978] WARNING: CPU: 0 PID: 3978 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x400/0x8a4 [ 45.207745][ T3978] Modules linked in: [ 45.208676][ T3978] CPU: 0 PID: 3978 Comm: syz-executor314 Not tainted 5.15.110-syzkaller #0 [ 45.210487][ T3978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 45.212716][ T3978] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.214458][ T3978] pc : ieee80211_bss_info_change_notify+0x400/0x8a4 [ 45.215931][ T3978] lr : ieee80211_bss_info_change_notify+0x400/0x8a4 [ 45.217368][ T3978] sp : ffff80001c976ef0 [ 45.218224][ T3978] x29: ffff80001c976ef0 x28: 1fffe00019bae35a x27: dfff800000000000 [ 45.219975][ T3978] x26: 1fffe00019bae453 x25: dfff800000000000 x24: 0000000000000000 [ 45.221724][ T3978] x23: 0000000000000000 x22: ffff0000cdd70c80 x21: ffff0000cdd72298 [ 45.223449][ T3978] x20: 0000000000400000 x19: ffff800016cce000 x18: ffff80001c976520 [ 45.225279][ T3978] x17: 1fffe000368ffd8e x16: ffff800011941a9c x15: 000000000000b9e3 [ 45.227008][ T3978] x14: 1ffff0000291a06a x13: ffffffffffffffff x12: 0000000000000000 [ 45.228816][ T3978] x11: ff8080000832d28c x10: 0000000000000000 x9 : 751769a1d87bb400 [ 45.230660][ T3978] x8 : 751769a1d87bb400 x7 : 0000000000000000 x6 : 0000000000000000 [ 45.232405][ T3978] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000a951560 [ 45.234167][ T3978] x2 : ffff0001b47fed10 x1 : 0000000100000000 x0 : 0000000000000035 [ 45.235961][ T3978] Call trace: [ 45.236678][ T3978] ieee80211_bss_info_change_notify+0x400/0x8a4 [ 45.238046][ T3978] ieee80211_ocb_leave+0x220/0x2e8 [ 45.239152][ T3978] ieee80211_leave_ocb+0x20/0x30 [ 45.240256][ T3978] __cfg80211_leave_ocb+0x218/0x730 [ 45.241366][ T3978] cfg80211_leave_ocb+0x5c/0xa0 [ 45.242465][ T3978] cfg80211_change_iface+0x52c/0x143c [ 45.243731][ T3978] nl80211_set_interface+0x3f8/0x704 [ 45.244818][ T3978] genl_rcv_msg+0xc18/0x1018 [ 45.245632][ T3978] netlink_rcv_skb+0x20c/0x3b8 [ 45.246462][ T3978] genl_rcv+0x38/0x50 [ 45.247164][ T3978] netlink_unicast+0x664/0x938 [ 45.248002][ T3978] netlink_sendmsg+0x844/0xb38 [ 45.248841][ T3978] ____sys_sendmsg+0x584/0x870 [ 45.249707][ T3978] ___sys_sendmsg+0x214/0x294 [ 45.250718][ T3978] __arm64_sys_sendmsg+0x1ac/0x25c [ 45.251843][ T3978] invoke_syscall+0x98/0x2b8 [ 45.252882][ T3978] el0_svc_common+0x138/0x258 [ 45.253927][ T3978] do_el0_svc+0x58/0x14c [ 45.254859][ T3978] el0_svc+0x7c/0x1f0 [ 45.255705][ T3978] el0t_64_sync_handler+0x84/0xe4 [ 45.256825][ T3978] el0t_64_sync+0x1a0/0x1a4 [ 45.257796][ T3978] irq event stamp: 922 [ 45.258677][ T3978] hardirqs last enabled at (921): [] finish_lock_switch+0xbc/0x1e8 [ 45.260823][ T3978] hardirqs last disabled at (922): [] el1_dbg+0x24/0x80 [ 45.262645][ T3978] softirqs last enabled at (916): [] __do_softirq+0xb5c/0xe20 [ 45.264543][ T3978] softirqs last disabled at (901): [] __irq_exit_rcu+0x28c/0x534 [ 45.266520][ T3978] ---[ end trace 92216ecc26565f6f ]--- [ 45.282888][ T3981] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.285230][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 45.298645][ T3982] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.300610][ T3982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 45.319052][ T3986] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.320970][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 45.337086][ T3987] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.338802][ T3987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 45.351428][ T3990] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.353196][ T3990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 45.367022][ T3991] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.368872][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 45.381355][ T3994] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.383163][ T3994] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 45.400229][ T3996] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 45.402042][ T3996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.061714][ T4682] validate_nla: 386 callbacks suppressed [ 50.061729][ T4682] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.067424][ T4682] __nla_validate_parse: 386 callbacks suppressed [ 50.067435][ T4682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.082727][ T4684] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.084752][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.099697][ T4686] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.101675][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.119171][ T4688] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.121093][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.134482][ T4689] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.136438][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.150439][ T4690] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.152148][ T4690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.168477][ T4691] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.170324][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.181784][ T4692] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.185556][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.197210][ T4693] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.199022][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 50.209765][ T4694] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 50.211480][ T4694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 55.064902][ T5154] validate_nla: 459 callbacks suppressed [ 55.064918][ T5154] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.077700][ T5155] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.079482][ T5155] __nla_validate_parse: 460 callbacks suppressed [ 55.079493][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 55.095744][ T5156] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.097505][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 55.111549][ T5157] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.113429][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 55.126678][ T5158] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.128509][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 55.139494][ T5159] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.141310][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 55.155931][ T5160] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.157848][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 55.169918][ T5161] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.171718][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 55.182650][ T5162] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.185381][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'. [ 55.196850][ T5163] netlink: 'syz-executor314': attribute type 27 has an invalid length. [ 55.198648][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor314'.