[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. syzkaller login: [ 88.890121][ T910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.913194][ T910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.938416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 88.960954][ T910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.970083][ T910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.987870][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.016598][ T8420] ------------[ cut here ]------------ [ 89.022166][ T8420] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 89.030276][ T8420] WARNING: CPU: 0 PID: 8420 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4df/0x5f0 [ 89.041084][ T8420] Modules linked in: [ 89.045508][ T8420] CPU: 1 PID: 8420 Comm: syz-executor514 Not tainted 5.12.0-rc7-next-20210415-syzkaller #0 [ 89.056006][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.066475][ T8420] RIP: 0010:drv_bss_info_changed+0x4df/0x5f0 [ 89.072502][ T8420] Code: 40 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 a9 eb 11 f9 e8 a4 eb 11 f9 8b 54 24 04 48 89 ee 48 c7 c7 80 e4 86 8a e8 6e b0 6d 00 <0f> 0b e9 f6 fd ff ff e8 85 eb 11 f9 e8 b0 c3 ae 00 31 ff 89 c3 89 [ 89.092195][ T8420] RSP: 0018:ffffc9000162f500 EFLAGS: 00010282 [ 89.098355][ T8420] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 89.106414][ T8420] RDX: ffff888018b95580 RSI: ffffffff815c7435 RDI: fffff520002c5e92 [ 89.114518][ T8420] RBP: ffff88801ed48000 R08: 0000000000000000 R09: 0000000000000000 [ 89.122522][ T8420] R10: ffffffff815c127e R11: 0000000000000000 R12: ffff88801ed48c00 [ 89.131227][ T8420] R13: 0000000002000000 R14: ffff88801ed49e20 R15: ffff88801ed49e18 [ 89.139297][ T8420] FS: 0000000002230300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 89.148388][ T8420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.155053][ T8420] CR2: 00007ffe421b8ce8 CR3: 000000001eb13000 CR4: 00000000001506f0 [ 89.163037][ T8420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.171074][ T8420] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.179184][ T8420] Call Trace: [ 89.182526][ T8420] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 89.189093][ T8420] ieee80211_set_mcast_rate+0x37/0x40 [ 89.194624][ T8420] ? ieee80211_get_mesh_config+0x30/0x30 [ 89.200289][ T8420] nl80211_set_mcast_rate+0x317/0x610 [ 89.205727][ T8420] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 89.212338][ T8420] ? nl80211_pre_doit+0xa6/0x620 [ 89.217338][ T8420] genl_family_rcv_msg_doit+0x228/0x320 [ 89.222980][ T8420] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 89.230425][ T8420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 89.236818][ T8420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 89.243103][ T8420] ? ns_capable+0xd9/0x100 [ 89.247688][ T8420] genl_rcv_msg+0x328/0x580 [ 89.252244][ T8420] ? genl_get_cmd+0x480/0x480 [ 89.257008][ T8420] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 89.263734][ T8420] ? lock_release+0x720/0x720 [ 89.268455][ T8420] netlink_rcv_skb+0x153/0x420 [ 89.273241][ T8420] ? genl_get_cmd+0x480/0x480 [ 89.278455][ T8420] ? netlink_ack+0xaa0/0xaa0 [ 89.283085][ T8420] genl_rcv+0x24/0x40 [ 89.287160][ T8420] netlink_unicast+0x533/0x7d0 [ 89.291957][ T8420] ? netlink_attachskb+0x870/0x870 [ 89.297129][ T8420] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 89.303580][ T8420] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 89.309848][ T8420] ? __phys_addr_symbol+0x2c/0x70 [ 89.315337][ T8420] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 89.321083][ T8420] ? __check_object_size+0x171/0x3f0 [ 89.326546][ T8420] netlink_sendmsg+0x84c/0xd90 [ 89.331361][ T8420] ? netlink_unicast+0x7d0/0x7d0 [ 89.336358][ T8420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 89.342621][ T8420] ? netlink_unicast+0x7d0/0x7d0 [ 89.347682][ T8420] sock_sendmsg+0xcf/0x120 [ 89.352115][ T8420] ____sys_sendmsg+0x6e8/0x810 [ 89.356955][ T8420] ? kernel_sendmsg+0x50/0x50 [ 89.361657][ T8420] ? do_recvmmsg+0x6d0/0x6d0 [ 89.366299][ T8420] ? lock_chain_count+0x20/0x20 [ 89.371168][ T8420] ? find_held_lock+0x2d/0x110 [ 89.376236][ T8420] ___sys_sendmsg+0xf3/0x170 [ 89.380850][ T8420] ? sendmsg_copy_msghdr+0x160/0x160 [ 89.386224][ T8420] ? __lock_acquire+0x16a7/0x5230 [ 89.391289][ T8420] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 89.397533][ T8420] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 89.403648][ T8420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 89.409924][ T8420] ? __fget_light+0x215/0x280 [ 89.414666][ T8420] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 89.420942][ T8420] __sys_sendmsg+0xe5/0x1b0 [ 89.425634][ T8420] ? __sys_sendmsg_sock+0x30/0x30 [ 89.430706][ T8420] ? syscall_enter_from_user_mode+0x27/0x70 [ 89.437488][ T8420] do_syscall_64+0x3a/0xb0 [ 89.441936][ T8420] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 89.448279][ T8420] RIP: 0033:0x440879 [ 89.452195][ T8420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 89.471915][ T8420] RSP: 002b:00007ffe421b9d58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.480707][ T8420] RAX: ffffffffffffffda RBX: 00000000004b73a0 RCX: 0000000000440879 [ 89.488754][ T8420] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000004 [ 89.496796][ T8420] RBP: 0000000000000003 R08: 0000000c00000001 R09: 0000000c00000001 [ 89.505059][ T8420] R10: 0000000c00000001 R11: 0000000000000246 R12: 0000000000000031 [ 89.513202][ T8420] R13: 00007ffe421b9da0 R14: 00007ffe421b9d8a R15: 00000000004b7410 [ 89.521290][ T8420] Kernel panic - not syncing: panic_on_warn set ... [ 89.527923][ T8420] CPU: 0 PID: 8420 Comm: syz-executor514 Not tainted 5.12.0-rc7-next-20210415-syzkaller #0 [ 89.537883][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.547935][ T8420] Call Trace: [ 89.551210][ T8420] dump_stack+0x141/0x1d7 [ 89.555534][ T8420] panic+0x306/0x73d [ 89.559422][ T8420] ? __warn_printk+0xf3/0xf3 [ 89.564021][ T8420] ? __warn.cold+0x1a/0x44 [ 89.568428][ T8420] ? drv_bss_info_changed+0x4df/0x5f0 [ 89.573794][ T8420] __warn.cold+0x35/0x44 [ 89.578046][ T8420] ? drv_bss_info_changed+0x4df/0x5f0 [ 89.583412][ T8420] report_bug+0x1bd/0x210 [ 89.587751][ T8420] handle_bug+0x3c/0x60 [ 89.591909][ T8420] exc_invalid_op+0x14/0x40 [ 89.596417][ T8420] asm_exc_invalid_op+0x12/0x20 [ 89.601268][ T8420] RIP: 0010:drv_bss_info_changed+0x4df/0x5f0 [ 89.607240][ T8420] Code: 40 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 a9 eb 11 f9 e8 a4 eb 11 f9 8b 54 24 04 48 89 ee 48 c7 c7 80 e4 86 8a e8 6e b0 6d 00 <0f> 0b e9 f6 fd ff ff e8 85 eb 11 f9 e8 b0 c3 ae 00 31 ff 89 c3 89 [ 89.626844][ T8420] RSP: 0018:ffffc9000162f500 EFLAGS: 00010282 [ 89.632905][ T8420] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 89.640868][ T8420] RDX: ffff888018b95580 RSI: ffffffff815c7435 RDI: fffff520002c5e92 [ 89.648839][ T8420] RBP: ffff88801ed48000 R08: 0000000000000000 R09: 0000000000000000 [ 89.656803][ T8420] R10: ffffffff815c127e R11: 0000000000000000 R12: ffff88801ed48c00 [ 89.664877][ T8420] R13: 0000000002000000 R14: ffff88801ed49e20 R15: ffff88801ed49e18 [ 89.672847][ T8420] ? wake_up_klogd.part.0+0x8e/0xd0 [ 89.678059][ T8420] ? vprintk+0x95/0x260 [ 89.682210][ T8420] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 89.688265][ T8420] ieee80211_set_mcast_rate+0x37/0x40 [ 89.693645][ T8420] ? ieee80211_get_mesh_config+0x30/0x30 [ 89.699265][ T8420] nl80211_set_mcast_rate+0x317/0x610 [ 89.704626][ T8420] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 89.711231][ T8420] ? nl80211_pre_doit+0xa6/0x620 [ 89.716164][ T8420] genl_family_rcv_msg_doit+0x228/0x320 [ 89.721716][ T8420] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 89.729079][ T8420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 89.735328][ T8420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 89.741575][ T8420] ? ns_capable+0xd9/0x100 [ 89.746005][ T8420] genl_rcv_msg+0x328/0x580 [ 89.750530][ T8420] ? genl_get_cmd+0x480/0x480 [ 89.755207][ T8420] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 89.761795][ T8420] ? lock_release+0x720/0x720 [ 89.766465][ T8420] netlink_rcv_skb+0x153/0x420 [ 89.771241][ T8420] ? genl_get_cmd+0x480/0x480 [ 89.775920][ T8420] ? netlink_ack+0xaa0/0xaa0 [ 89.780592][ T8420] genl_rcv+0x24/0x40 [ 89.784574][ T8420] netlink_unicast+0x533/0x7d0 [ 89.789339][ T8420] ? netlink_attachskb+0x870/0x870 [ 89.794445][ T8420] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 89.800678][ T8420] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 89.806906][ T8420] ? __phys_addr_symbol+0x2c/0x70 [ 89.811912][ T8420] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 89.817632][ T8420] ? __check_object_size+0x171/0x3f0 [ 89.822911][ T8420] netlink_sendmsg+0x84c/0xd90 [ 89.827665][ T8420] ? netlink_unicast+0x7d0/0x7d0 [ 89.832601][ T8420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 89.838837][ T8420] ? netlink_unicast+0x7d0/0x7d0 [ 89.843783][ T8420] sock_sendmsg+0xcf/0x120 [ 89.848189][ T8420] ____sys_sendmsg+0x6e8/0x810 [ 89.852950][ T8420] ? kernel_sendmsg+0x50/0x50 [ 89.857626][ T8420] ? do_recvmmsg+0x6d0/0x6d0 [ 89.862219][ T8420] ? lock_chain_count+0x20/0x20 [ 89.867056][ T8420] ? find_held_lock+0x2d/0x110 [ 89.871808][ T8420] ___sys_sendmsg+0xf3/0x170 [ 89.876386][ T8420] ? sendmsg_copy_msghdr+0x160/0x160 [ 89.881659][ T8420] ? __lock_acquire+0x16a7/0x5230 [ 89.886678][ T8420] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 89.892646][ T8420] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 89.898630][ T8420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 89.904875][ T8420] ? __fget_light+0x215/0x280 [ 89.909542][ T8420] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 89.915786][ T8420] __sys_sendmsg+0xe5/0x1b0 [ 89.920278][ T8420] ? __sys_sendmsg_sock+0x30/0x30 [ 89.925300][ T8420] ? syscall_enter_from_user_mode+0x27/0x70 [ 89.931198][ T8420] do_syscall_64+0x3a/0xb0 [ 89.935621][ T8420] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 89.941514][ T8420] RIP: 0033:0x440879 [ 89.945393][ T8420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 89.965175][ T8420] RSP: 002b:00007ffe421b9d58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.973573][ T8420] RAX: ffffffffffffffda RBX: 00000000004b73a0 RCX: 0000000000440879 [ 89.981533][ T8420] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000004 [ 89.989488][ T8420] RBP: 0000000000000003 R08: 0000000c00000001 R09: 0000000c00000001 [ 89.997461][ T8420] R10: 0000000c00000001 R11: 0000000000000246 R12: 0000000000000031 [ 90.005429][ T8420] R13: 00007ffe421b9da0 R14: 00007ffe421b9d8a R15: 00000000004b7410 [ 90.014114][ T8420] Kernel Offset: disabled [ 90.018539][ T8420] Rebooting in 86400 seconds..