Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts. syzkaller login: [ 77.946922][ T8417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.954903][ T8417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.969658][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.994470][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 78.018757][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.037772][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.156625][ T8457] ------------[ cut here ]------------ [ 78.162281][ T8457] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 78.195198][ T8457] WARNING: CPU: 1 PID: 8457 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4f8/0x5f0 [ 78.208860][ T8457] Modules linked in: [ 78.212791][ T8457] CPU: 1 PID: 8457 Comm: syz-executor874 Not tainted 5.12.0-next-20210507-syzkaller #0 [ 78.223443][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.233956][ T8457] RIP: 0010:drv_bss_info_changed+0x4f8/0x5f0 [ 78.240060][ T8457] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 80 44 0e f9 e8 7b 44 0e f9 8b 54 24 04 48 89 ee 48 c7 c7 00 bb 87 8a e8 fb 0d 6e 00 <0f> 0b e9 dd fd ff ff e8 5c 44 0e f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 78.259807][ T8457] RSP: 0018:ffffc9000167f500 EFLAGS: 00010282 [ 78.265944][ T8457] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 78.274068][ T8457] RDX: ffff888025013900 RSI: ffffffff815ccd25 RDI: fffff520002cfe92 [ 78.282176][ T8457] RBP: ffff8880275d4000 R08: 0000000000000000 R09: 0000000000000000 [ 78.290247][ T8457] R10: ffffffff815c6b8e R11: 0000000000000000 R12: ffff8880275d4c00 [ 78.298318][ T8457] R13: 0000000002000000 R14: ffff8880275d5e20 R15: ffff8880275d5e18 [ 78.306315][ T8457] FS: 0000000001c3b300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 78.315367][ T8457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.322019][ T8457] CR2: 0000561338a53180 CR3: 0000000017572000 CR4: 00000000001506e0 [ 78.330073][ T8457] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.338116][ T8457] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.346110][ T8457] Call Trace: [ 78.349481][ T8457] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 78.355570][ T8457] ieee80211_set_mcast_rate+0x37/0x40 [ 78.361004][ T8457] ? ieee80211_get_mesh_config+0x30/0x30 [ 78.366714][ T8457] nl80211_set_mcast_rate+0x317/0x610 [ 78.372105][ T8457] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 78.378786][ T8457] ? nl80211_pre_doit+0xa6/0x620 [ 78.383753][ T8457] genl_family_rcv_msg_doit+0x228/0x320 [ 78.389415][ T8457] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 78.396912][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 78.403200][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 78.409543][ T8457] ? ns_capable+0xde/0x100 [ 78.414014][ T8457] genl_rcv_msg+0x328/0x580 [ 78.418615][ T8457] ? genl_get_cmd+0x480/0x480 [ 78.423321][ T8457] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 78.429992][ T8457] ? lock_release+0x720/0x720 [ 78.434713][ T8457] netlink_rcv_skb+0x153/0x420 [ 78.439560][ T8457] ? genl_get_cmd+0x480/0x480 [ 78.444265][ T8457] ? netlink_ack+0xaa0/0xaa0 [ 78.449007][ T8457] genl_rcv+0x24/0x40 [ 78.453028][ T8457] netlink_unicast+0x533/0x7d0 [ 78.457874][ T8457] ? netlink_attachskb+0x870/0x870 [ 78.463002][ T8457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 78.469418][ T8457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 78.475691][ T8457] ? __phys_addr_symbol+0x2c/0x70 [ 78.480769][ T8457] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 78.486571][ T8457] ? __check_object_size+0x171/0x3f0 [ 78.491883][ T8457] netlink_sendmsg+0x856/0xd90 [ 78.496721][ T8457] ? netlink_unicast+0x7d0/0x7d0 [ 78.501682][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 78.508030][ T8457] ? netlink_unicast+0x7d0/0x7d0 [ 78.513002][ T8457] sock_sendmsg+0xcf/0x120 [ 78.517530][ T8457] ____sys_sendmsg+0x6e8/0x810 [ 78.522354][ T8457] ? kernel_sendmsg+0x50/0x50 [ 78.527125][ T8457] ? do_recvmmsg+0x6d0/0x6d0 [ 78.531737][ T8457] ? lock_chain_count+0x20/0x20 [ 78.536682][ T8457] ? find_held_lock+0x2d/0x110 [ 78.541472][ T8457] ___sys_sendmsg+0xf3/0x170 [ 78.546063][ T8457] ? sendmsg_copy_msghdr+0x160/0x160 [ 78.551421][ T8457] ? __lock_acquire+0x16a7/0x5230 [ 78.556555][ T8457] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 78.562555][ T8457] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 78.568637][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 78.574897][ T8457] ? __fget_light+0x215/0x280 [ 78.579646][ T8457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 78.585910][ T8457] __sys_sendmsg+0xe5/0x1b0 [ 78.590485][ T8457] ? __sys_sendmsg_sock+0x30/0x30 [ 78.595549][ T8457] ? syscall_enter_from_user_mode+0x27/0x70 [ 78.601529][ T8457] do_syscall_64+0x3a/0xb0 [ 78.605989][ T8457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.611934][ T8457] RIP: 0033:0x440869 [ 78.615859][ T8457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.635659][ T8457] RSP: 002b:00007fff8fcf31d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.644202][ T8457] RAX: ffffffffffffffda RBX: 00000000004b73a0 RCX: 0000000000440869 [ 78.652280][ T8457] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000004 [ 78.660339][ T8457] RBP: 0000000000000003 R08: 0000000c00000001 R09: 0000000c00000001 [ 78.668404][ T8457] R10: 0000000c00000001 R11: 0000000000000246 R12: 0000000000000031 [ 78.676464][ T8457] R13: 00007fff8fcf3220 R14: 00007fff8fcf320a R15: 00000000004b7410 [ 78.684476][ T8457] Kernel panic - not syncing: panic_on_warn set ... [ 78.691054][ T8457] CPU: 1 PID: 8457 Comm: syz-executor874 Not tainted 5.12.0-next-20210507-syzkaller #0 [ 78.700684][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.710728][ T8457] Call Trace: [ 78.713996][ T8457] dump_stack+0x141/0x1d7 [ 78.718335][ T8457] panic+0x306/0x73d [ 78.722221][ T8457] ? __warn_printk+0xf3/0xf3 [ 78.726814][ T8457] ? __warn.cold+0x1a/0x44 [ 78.731217][ T8457] ? drv_bss_info_changed+0x4f8/0x5f0 [ 78.736597][ T8457] __warn.cold+0x35/0x44 [ 78.740860][ T8457] ? drv_bss_info_changed+0x4f8/0x5f0 [ 78.746220][ T8457] report_bug+0x1bd/0x210 [ 78.750541][ T8457] handle_bug+0x3c/0x60 [ 78.754683][ T8457] exc_invalid_op+0x14/0x40 [ 78.759174][ T8457] asm_exc_invalid_op+0x12/0x20 [ 78.764014][ T8457] RIP: 0010:drv_bss_info_changed+0x4f8/0x5f0 [ 78.769985][ T8457] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 80 44 0e f9 e8 7b 44 0e f9 8b 54 24 04 48 89 ee 48 c7 c7 00 bb 87 8a e8 fb 0d 6e 00 <0f> 0b e9 dd fd ff ff e8 5c 44 0e f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 78.789695][ T8457] RSP: 0018:ffffc9000167f500 EFLAGS: 00010282 [ 78.795767][ T8457] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 78.803758][ T8457] RDX: ffff888025013900 RSI: ffffffff815ccd25 RDI: fffff520002cfe92 [ 78.811730][ T8457] RBP: ffff8880275d4000 R08: 0000000000000000 R09: 0000000000000000 [ 78.819717][ T8457] R10: ffffffff815c6b8e R11: 0000000000000000 R12: ffff8880275d4c00 [ 78.827704][ T8457] R13: 0000000002000000 R14: ffff8880275d5e20 R15: ffff8880275d5e18 [ 78.835687][ T8457] ? wake_up_klogd.part.0+0x8e/0xd0 [ 78.840906][ T8457] ? vprintk+0x95/0x260 [ 78.845084][ T8457] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 78.851166][ T8457] ieee80211_set_mcast_rate+0x37/0x40 [ 78.856569][ T8457] ? ieee80211_get_mesh_config+0x30/0x30 [ 78.862219][ T8457] nl80211_set_mcast_rate+0x317/0x610 [ 78.867602][ T8457] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 78.874219][ T8457] ? nl80211_pre_doit+0xa6/0x620 [ 78.879168][ T8457] genl_family_rcv_msg_doit+0x228/0x320 [ 78.884748][ T8457] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 78.892134][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 78.898407][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 78.904672][ T8457] ? ns_capable+0xde/0x100 [ 78.909106][ T8457] genl_rcv_msg+0x328/0x580 [ 78.913647][ T8457] ? genl_get_cmd+0x480/0x480 [ 78.918334][ T8457] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 78.924954][ T8457] ? lock_release+0x720/0x720 [ 78.929650][ T8457] netlink_rcv_skb+0x153/0x420 [ 78.934430][ T8457] ? genl_get_cmd+0x480/0x480 [ 78.939119][ T8457] ? netlink_ack+0xaa0/0xaa0 [ 78.943740][ T8457] genl_rcv+0x24/0x40 [ 78.947732][ T8457] netlink_unicast+0x533/0x7d0 [ 78.952511][ T8457] ? netlink_attachskb+0x870/0x870 [ 78.957648][ T8457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 78.963905][ T8457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 78.970170][ T8457] ? __phys_addr_symbol+0x2c/0x70 [ 78.975205][ T8457] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 78.981058][ T8457] ? __check_object_size+0x171/0x3f0 [ 78.986373][ T8457] netlink_sendmsg+0x856/0xd90 [ 78.991162][ T8457] ? netlink_unicast+0x7d0/0x7d0 [ 78.996120][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 79.002382][ T8457] ? netlink_unicast+0x7d0/0x7d0 [ 79.007353][ T8457] sock_sendmsg+0xcf/0x120 [ 79.011795][ T8457] ____sys_sendmsg+0x6e8/0x810 [ 79.016597][ T8457] ? kernel_sendmsg+0x50/0x50 [ 79.021291][ T8457] ? do_recvmmsg+0x6d0/0x6d0 [ 79.025908][ T8457] ? lock_chain_count+0x20/0x20 [ 79.030793][ T8457] ? find_held_lock+0x2d/0x110 [ 79.035591][ T8457] ___sys_sendmsg+0xf3/0x170 [ 79.040206][ T8457] ? sendmsg_copy_msghdr+0x160/0x160 [ 79.045512][ T8457] ? __lock_acquire+0x16a7/0x5230 [ 79.050573][ T8457] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 79.056575][ T8457] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 79.062600][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 79.068875][ T8457] ? __fget_light+0x215/0x280 [ 79.073580][ T8457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 79.079845][ T8457] __sys_sendmsg+0xe5/0x1b0 [ 79.084365][ T8457] ? __sys_sendmsg_sock+0x30/0x30 [ 79.089417][ T8457] ? syscall_enter_from_user_mode+0x27/0x70 [ 79.095344][ T8457] do_syscall_64+0x3a/0xb0 [ 79.099773][ T8457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 79.105680][ T8457] RIP: 0033:0x440869 [ 79.109579][ T8457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.129195][ T8457] RSP: 002b:00007fff8fcf31d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.137625][ T8457] RAX: ffffffffffffffda RBX: 00000000004b73a0 RCX: 0000000000440869 [ 79.145608][ T8457] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000004 [ 79.153592][ T8457] RBP: 0000000000000003 R08: 0000000c00000001 R09: 0000000c00000001 [ 79.161584][ T8457] R10: 0000000c00000001 R11: 0000000000000246 R12: 0000000000000031 [ 79.169560][ T8457] R13: 00007fff8fcf3220 R14: 00007fff8fcf320a R15: 00000000004b7410 [ 79.178101][ T8457] Kernel Offset: disabled [ 79.182519][ T8457] Rebooting in 86400 seconds..