Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. executing program [ 53.187507][ T3507] netlink: 'syz-executor313': attribute type 27 has an invalid length. [ 53.309180][ T3507] ------------[ cut here ]------------ [ 53.315179][ T3507] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 53.328209][ T3507] WARNING: CPU: 1 PID: 3507 at net/mac80211/main.c:235 ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.339124][ T3507] Modules linked in: [ 53.343101][ T3507] CPU: 1 PID: 3507 Comm: syz-executor313 Not tainted 6.1.44-syzkaller #0 [ 53.351534][ T3507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 53.361947][ T3507] RIP: 0010:ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.369049][ T3507] Code: 9c 57 e4 f7 49 8b 86 08 09 00 00 49 81 c6 28 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 c0 1d fc 8b 4c 89 f6 89 ea e8 b6 25 56 f7 <0f> 0b e9 f5 fb ff ff e8 3a c8 8d f7 0f 0b e9 44 fe ff ff e8 2e c8 [ 53.388726][ T3507] RSP: 0018:ffffc90003acf3d8 EFLAGS: 00010246 [ 53.394891][ T3507] RAX: 6f06b1abb855f700 RBX: 0000000000400000 RCX: ffff888015f8d940 [ 53.402920][ T3507] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 53.410917][ T3507] RBP: 0000000000000000 R08: ffffffff81525dfe R09: fffff52000759df5 [ 53.419346][ T3507] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888021986780 [ 53.427392][ T3507] R13: ffff888021fc0de0 R14: ffff888021984000 R15: dffffc0000000000 [ 53.435449][ T3507] FS: 0000555557309380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 53.444456][ T3507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.451064][ T3507] CR2: 00007ffdf66e5778 CR3: 00000000795d2000 CR4: 00000000003506e0 [ 53.459110][ T3507] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.467150][ T3507] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.475181][ T3507] Call Trace: [ 53.478478][ T3507] [ 53.481429][ T3507] ? __warn+0x15a/0x520 [ 53.485645][ T3507] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.492137][ T3507] ? report_bug+0x2af/0x500 [ 53.496665][ T3507] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.503146][ T3507] ? handle_bug+0x3d/0x70 [ 53.507514][ T3507] ? exc_invalid_op+0x16/0x40 [ 53.512236][ T3507] ? asm_exc_invalid_op+0x16/0x20 [ 53.517295][ T3507] ? __warn_printk+0x28e/0x350 [ 53.522081][ T3507] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.528564][ T3507] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.535019][ T3507] ieee80211_ocb_leave+0x26a/0x310 [ 53.540125][ T3507] __cfg80211_leave_ocb+0x238/0x490 [ 53.545354][ T3507] cfg80211_leave_ocb+0x54/0x70 [ 53.550212][ T3507] cfg80211_change_iface+0x52a/0x1030 [ 53.555661][ T3507] nl80211_set_interface+0x5fa/0x870 [ 53.561061][ T3507] ? nl80211_dump_interface+0x690/0x690 [ 53.566661][ T3507] ? mutex_lock_nested+0x17/0x20 [ 53.571614][ T3507] genl_rcv_msg+0xc1a/0xf70 [ 53.576160][ T3507] ? kernel_text_address+0x9f/0xd0 [ 53.581288][ T3507] ? genl_bind+0x360/0x360 [ 53.585761][ T3507] ? mark_lock+0x9a/0x340 [ 53.590121][ T3507] ? mark_lock+0x9a/0x340 [ 53.594507][ T3507] ? __lock_acquire+0x125b/0x1f80 [ 53.599543][ T3507] ? nl80211_dump_interface+0x690/0x690 [ 53.605135][ T3507] netlink_rcv_skb+0x1cd/0x410 [ 53.609907][ T3507] ? genl_bind+0x360/0x360 [ 53.614354][ T3507] ? netlink_ack+0xe60/0xe60 [ 53.618959][ T3507] ? down_read+0x1b1/0x2e0 [ 53.623405][ T3507] ? genl_rcv+0x9/0x40 [ 53.627487][ T3507] genl_rcv+0x24/0x40 [ 53.631455][ T3507] netlink_unicast+0x7bf/0x990 [ 53.636257][ T3507] ? netlink_detachskb+0x90/0x90 [ 53.641196][ T3507] ? __virt_addr_valid+0x22b/0x2e0 [ 53.646345][ T3507] ? __phys_addr_symbol+0x2b/0x70 [ 53.651376][ T3507] ? __check_object_size+0x4dd/0xa30 [ 53.656695][ T3507] ? bpf_lsm_netlink_send+0x5/0x10 [ 53.661812][ T3507] netlink_sendmsg+0xa26/0xd60 [ 53.666624][ T3507] ? netlink_getsockopt+0x5b0/0x5b0 [ 53.671830][ T3507] ? aa_sock_msg_perm+0x91/0x150 [ 53.676806][ T3507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 53.682132][ T3507] ? security_socket_sendmsg+0x7d/0xa0 [ 53.687600][ T3507] ? netlink_getsockopt+0x5b0/0x5b0 [ 53.692850][ T3507] __sys_sendto+0x471/0x5f0 [ 53.697380][ T3507] ? __ia32_sys_getpeername+0x80/0x80 [ 53.702840][ T3507] ? print_irqtrace_events+0x210/0x210 [ 53.708307][ T3507] __x64_sys_sendto+0xda/0xf0 [ 53.713025][ T3507] do_syscall_64+0x3d/0xb0 [ 53.717452][ T3507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.723374][ T3507] RIP: 0033:0x7f8a7635b153 [ 53.727794][ T3507] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d 71 9f 07 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 53.747435][ T3507] RSP: 002b:00007ffdc0265d08 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 53.755879][ T3507] RAX: ffffffffffffffda RBX: 00007ffdc0265de0 RCX: 00007f8a7635b153 [ 53.763881][ T3507] RDX: 0000000000000024 RSI: 00007ffdc0265e30 RDI: 0000000000000006 [ 53.771860][ T3507] RBP: 0000000000000006 R08: 00007ffdc0265d24 R09: 000000000000000c [ 53.779868][ T3507] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 53.787868][ T3507] R13: 0000000000000000 R14: 00007ffdc0265e30 R15: 0000000000000000 [ 53.795891][ T3507] [ 53.798917][ T3507] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 53.806183][ T3507] CPU: 1 PID: 3507 Comm: syz-executor313 Not tainted 6.1.44-syzkaller #0 [ 53.814936][ T3507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 53.824988][ T3507] Call Trace: [ 53.828262][ T3507] [ 53.831187][ T3507] dump_stack_lvl+0x1e3/0x2cb [ 53.835872][ T3507] ? nf_tcp_handle_invalid+0x642/0x642 [ 53.841329][ T3507] ? panic+0x75d/0x75d [ 53.845404][ T3507] ? vscnprintf+0x59/0x80 [ 53.849731][ T3507] panic+0x318/0x75d [ 53.853629][ T3507] ? __warn+0x169/0x520 [ 53.857784][ T3507] ? memcpy_page_flushcache+0xfc/0xfc [ 53.863163][ T3507] __warn+0x348/0x520 [ 53.867139][ T3507] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.873553][ T3507] report_bug+0x2af/0x500 [ 53.877873][ T3507] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.884283][ T3507] handle_bug+0x3d/0x70 [ 53.888431][ T3507] exc_invalid_op+0x16/0x40 [ 53.892928][ T3507] asm_exc_invalid_op+0x16/0x20 [ 53.897779][ T3507] RIP: 0010:ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.904800][ T3507] Code: 9c 57 e4 f7 49 8b 86 08 09 00 00 49 81 c6 28 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 c0 1d fc 8b 4c 89 f6 89 ea e8 b6 25 56 f7 <0f> 0b e9 f5 fb ff ff e8 3a c8 8d f7 0f 0b e9 44 fe ff ff e8 2e c8 [ 53.924491][ T3507] RSP: 0018:ffffc90003acf3d8 EFLAGS: 00010246 [ 53.930556][ T3507] RAX: 6f06b1abb855f700 RBX: 0000000000400000 RCX: ffff888015f8d940 [ 53.938522][ T3507] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 53.946489][ T3507] RBP: 0000000000000000 R08: ffffffff81525dfe R09: fffff52000759df5 [ 53.954465][ T3507] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888021986780 [ 53.962431][ T3507] R13: ffff888021fc0de0 R14: ffff888021984000 R15: dffffc0000000000 [ 53.970402][ T3507] ? __warn_printk+0x28e/0x350 [ 53.975172][ T3507] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 53.981584][ T3507] ieee80211_ocb_leave+0x26a/0x310 [ 53.986700][ T3507] __cfg80211_leave_ocb+0x238/0x490 [ 53.991902][ T3507] cfg80211_leave_ocb+0x54/0x70 [ 53.996755][ T3507] cfg80211_change_iface+0x52a/0x1030 [ 54.002137][ T3507] nl80211_set_interface+0x5fa/0x870 [ 54.007425][ T3507] ? nl80211_dump_interface+0x690/0x690 [ 54.012966][ T3507] ? mutex_lock_nested+0x17/0x20 [ 54.017903][ T3507] genl_rcv_msg+0xc1a/0xf70 [ 54.022402][ T3507] ? kernel_text_address+0x9f/0xd0 [ 54.027521][ T3507] ? genl_bind+0x360/0x360 [ 54.031934][ T3507] ? mark_lock+0x9a/0x340 [ 54.036258][ T3507] ? mark_lock+0x9a/0x340 [ 54.040584][ T3507] ? __lock_acquire+0x125b/0x1f80 [ 54.045619][ T3507] ? nl80211_dump_interface+0x690/0x690 [ 54.051168][ T3507] netlink_rcv_skb+0x1cd/0x410 [ 54.055930][ T3507] ? genl_bind+0x360/0x360 [ 54.060343][ T3507] ? netlink_ack+0xe60/0xe60 [ 54.064938][ T3507] ? down_read+0x1b1/0x2e0 [ 54.069351][ T3507] ? genl_rcv+0x9/0x40 [ 54.073420][ T3507] genl_rcv+0x24/0x40 [ 54.077399][ T3507] netlink_unicast+0x7bf/0x990 [ 54.082163][ T3507] ? netlink_detachskb+0x90/0x90 [ 54.087090][ T3507] ? __virt_addr_valid+0x22b/0x2e0 [ 54.092201][ T3507] ? __phys_addr_symbol+0x2b/0x70 [ 54.097219][ T3507] ? __check_object_size+0x4dd/0xa30 [ 54.102503][ T3507] ? bpf_lsm_netlink_send+0x5/0x10 [ 54.107611][ T3507] netlink_sendmsg+0xa26/0xd60 [ 54.112388][ T3507] ? netlink_getsockopt+0x5b0/0x5b0 [ 54.117586][ T3507] ? aa_sock_msg_perm+0x91/0x150 [ 54.122522][ T3507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 54.127808][ T3507] ? security_socket_sendmsg+0x7d/0xa0 [ 54.133265][ T3507] ? netlink_getsockopt+0x5b0/0x5b0 [ 54.138460][ T3507] __sys_sendto+0x471/0x5f0 [ 54.142977][ T3507] ? __ia32_sys_getpeername+0x80/0x80 [ 54.148366][ T3507] ? print_irqtrace_events+0x210/0x210 [ 54.153824][ T3507] __x64_sys_sendto+0xda/0xf0 [ 54.158527][ T3507] do_syscall_64+0x3d/0xb0 [ 54.162967][ T3507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.168871][ T3507] RIP: 0033:0x7f8a7635b153 [ 54.173283][ T3507] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d 71 9f 07 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 54.192882][ T3507] RSP: 002b:00007ffdc0265d08 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 54.201297][ T3507] RAX: ffffffffffffffda RBX: 00007ffdc0265de0 RCX: 00007f8a7635b153 [ 54.209283][ T3507] RDX: 0000000000000024 RSI: 00007ffdc0265e30 RDI: 0000000000000006 [ 54.217266][ T3507] RBP: 0000000000000006 R08: 00007ffdc0265d24 R09: 000000000000000c [ 54.225235][ T3507] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 54.233201][ T3507] R13: 0000000000000000 R14: 00007ffdc0265e30 R15: 0000000000000000 [ 54.241180][ T3507] [ 54.244388][ T3507] Kernel Offset: disabled [ 54.248770][ T3507] Rebooting in 86400 seconds..