DUID 00:04:c5:78:79:07:21:f0:b3:e0:09:b6:1a:d6:4d:97:86:4f forked to background, child pid 3181 [ 32.149683][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.183921][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. syzkaller login: [ 66.526809][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.541571][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.554086][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.555001][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.562177][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 66.577734][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.666822][ T3601] ------------[ cut here ]------------ [ 66.673240][ T3601] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 66.681885][ T3601] WARNING: CPU: 0 PID: 3601 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4dd/0x5f0 [ 66.692533][ T3601] Modules linked in: [ 66.696442][ T3601] CPU: 0 PID: 3601 Comm: syz-executor948 Not tainted 5.16.0-rc7-syzkaller #0 [ 66.705678][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.716375][ T3601] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0 [ 66.722748][ T3601] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 3b 8b e9 f8 e8 36 8b e9 f8 8b 54 24 04 48 89 ee 48 c7 c7 c0 13 cd 8a e8 6f 59 72 00 <0f> 0b e9 f6 fd ff ff e8 17 8b e9 f8 e8 32 ea b5 00 31 ff 89 c3 89 [ 66.742787][ T3601] RSP: 0018:ffffc90002b2f500 EFLAGS: 00010282 [ 66.748883][ T3601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 66.757273][ T3601] RDX: ffff888021b33a00 RSI: ffffffff815f0948 RDI: fffff52000565e92 [ 66.765681][ T3601] RBP: ffff88801f3d4000 R08: 0000000000000000 R09: 0000000000000000 [ 66.774000][ T3601] R10: ffffffff815ea6ee R11: 0000000000000000 R12: ffff88801f3d4c80 [ 66.782604][ T3601] R13: 0000000002000000 R14: ffff88801f3d6078 R15: ffff88801f3d6070 [ 66.790914][ T3601] FS: 00005555572b2300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 66.800277][ T3601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.806879][ T3601] CR2: 000055eac66ea950 CR3: 00000000221af000 CR4: 00000000003506f0 [ 66.815502][ T3601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.823868][ T3601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.832305][ T3601] Call Trace: [ 66.835599][ T3601] [ 66.838544][ T3601] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 66.845143][ T3601] ieee80211_set_mcast_rate+0x37/0x40 [ 66.850897][ T3601] ? ieee80211_get_mesh_config+0x30/0x30 [ 66.856563][ T3601] nl80211_set_mcast_rate+0x317/0x610 [ 66.862444][ T3601] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 66.869075][ T3601] ? nl80211_pre_doit+0xa6/0x620 [ 66.874507][ T3601] genl_family_rcv_msg_doit+0x228/0x320 [ 66.880443][ T3601] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 66.887855][ T3601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 66.894567][ T3601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 66.901196][ T3601] ? ns_capable+0xd9/0x100 [ 66.905647][ T3601] genl_rcv_msg+0x328/0x580 [ 66.910718][ T3601] ? genl_get_cmd+0x480/0x480 [ 66.915429][ T3601] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 66.922283][ T3601] ? lock_release+0x720/0x720 [ 66.926996][ T3601] netlink_rcv_skb+0x153/0x420 [ 66.932073][ T3601] ? genl_get_cmd+0x480/0x480 [ 66.936784][ T3601] ? netlink_ack+0xa60/0xa60 [ 66.941467][ T3601] ? netlink_deliver_tap+0x1b1/0xc30 [ 66.946769][ T3601] ? _copy_from_iter+0x12b/0x1320 [ 66.951904][ T3601] genl_rcv+0x24/0x40 [ 66.955902][ T3601] netlink_unicast+0x533/0x7d0 [ 66.960747][ T3601] ? netlink_attachskb+0x880/0x880 [ 66.965874][ T3601] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 66.972220][ T3601] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 66.978482][ T3601] ? __phys_addr_symbol+0x2c/0x70 [ 66.983592][ T3601] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 66.989337][ T3601] ? __check_object_size+0x16e/0x3f0 [ 66.994755][ T3601] netlink_sendmsg+0x904/0xdf0 [ 66.999548][ T3601] ? netlink_unicast+0x7d0/0x7d0 [ 67.004649][ T3601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.010998][ T3601] ? netlink_unicast+0x7d0/0x7d0 [ 67.015955][ T3601] sock_sendmsg+0xcf/0x120 [ 67.020467][ T3601] ____sys_sendmsg+0x6e8/0x810 [ 67.025264][ T3601] ? kernel_sendmsg+0x50/0x50 [ 67.030493][ T3601] ? do_recvmmsg+0x6d0/0x6d0 [ 67.035111][ T3601] ? lock_chain_count+0x20/0x20 [ 67.040101][ T3601] ? lock_chain_count+0x20/0x20 [ 67.044984][ T3601] ___sys_sendmsg+0xf3/0x170 [ 67.049688][ T3601] ? sendmsg_copy_msghdr+0x160/0x160 [ 67.055084][ T3601] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 67.061152][ T3601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.067420][ T3601] ? __fget_light+0x215/0x280 [ 67.072286][ T3601] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 67.078564][ T3601] __sys_sendmsg+0xe5/0x1b0 [ 67.083250][ T3601] ? __sys_sendmsg_sock+0x30/0x30 [ 67.088317][ T3601] ? syscall_enter_from_user_mode+0x21/0x70 [ 67.094399][ T3601] do_syscall_64+0x35/0xb0 [ 67.098842][ T3601] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.104845][ T3601] RIP: 0033:0x7fd7e35fbaa9 [ 67.109280][ T3601] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.129123][ T3601] RSP: 002b:00007ffe44d10ac8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.137716][ T3601] RAX: ffffffffffffffda RBX: 00007fd7e36753a0 RCX: 00007fd7e35fbaa9 [ 67.146193][ T3601] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 67.154269][ T3601] RBP: 0000000000000003 R08: 0000000c00000001 R09: 0000000c00000001 [ 67.162525][ T3601] R10: 0000000c00000001 R11: 0000000000000246 R12: 0000000000000031 [ 67.170591][ T3601] R13: 00007ffe44d10b10 R14: 00007ffe44d10afa R15: 00007fd7e3675410 [ 67.178630][ T3601] [ 67.182080][ T3601] Kernel panic - not syncing: panic_on_warn set ... [ 67.188676][ T3601] CPU: 1 PID: 3601 Comm: syz-executor948 Not tainted 5.16.0-rc7-syzkaller #0 [ 67.197447][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.207515][ T3601] Call Trace: [ 67.210810][ T3601] [ 67.213750][ T3601] dump_stack_lvl+0xcd/0x134 [ 67.218361][ T3601] panic+0x2b0/0x6dd [ 67.222277][ T3601] ? __warn_printk+0xf3/0xf3 [ 67.226899][ T3601] ? __warn.cold+0x1a/0x44 [ 67.231354][ T3601] ? drv_bss_info_changed+0x4dd/0x5f0 [ 67.236744][ T3601] __warn.cold+0x35/0x44 [ 67.240999][ T3601] ? wake_up_klogd.part.0+0x8e/0xd0 [ 67.246211][ T3601] ? drv_bss_info_changed+0x4dd/0x5f0 [ 67.251606][ T3601] report_bug+0x1bd/0x210 [ 67.255966][ T3601] handle_bug+0x3c/0x60 [ 67.260140][ T3601] exc_invalid_op+0x14/0x40 [ 67.264663][ T3601] asm_exc_invalid_op+0x12/0x20 [ 67.269531][ T3601] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0 [ 67.275528][ T3601] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 3b 8b e9 f8 e8 36 8b e9 f8 8b 54 24 04 48 89 ee 48 c7 c7 c0 13 cd 8a e8 6f 59 72 00 <0f> 0b e9 f6 fd ff ff e8 17 8b e9 f8 e8 32 ea b5 00 31 ff 89 c3 89 [ 67.295150][ T3601] RSP: 0018:ffffc90002b2f500 EFLAGS: 00010282 [ 67.301233][ T3601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 67.309306][ T3601] RDX: ffff888021b33a00 RSI: ffffffff815f0948 RDI: fffff52000565e92 [ 67.317289][ T3601] RBP: ffff88801f3d4000 R08: 0000000000000000 R09: 0000000000000000 [ 67.325272][ T3601] R10: ffffffff815ea6ee R11: 0000000000000000 R12: ffff88801f3d4c80 [ 67.333257][ T3601] R13: 0000000002000000 R14: ffff88801f3d6078 R15: ffff88801f3d6070 [ 67.341251][ T3601] ? wake_up_klogd.part.0+0x8e/0xd0 [ 67.346476][ T3601] ? vprintk+0x88/0x90 [ 67.350578][ T3601] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 67.356677][ T3601] ieee80211_set_mcast_rate+0x37/0x40 [ 67.362082][ T3601] ? ieee80211_get_mesh_config+0x30/0x30 [ 67.367740][ T3601] nl80211_set_mcast_rate+0x317/0x610 [ 67.373137][ T3601] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 67.379757][ T3601] ? nl80211_pre_doit+0xa6/0x620 [ 67.384724][ T3601] genl_family_rcv_msg_doit+0x228/0x320 [ 67.390294][ T3601] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 67.397693][ T3601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.403986][ T3601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.410248][ T3601] ? ns_capable+0xd9/0x100 [ 67.414691][ T3601] genl_rcv_msg+0x328/0x580 [ 67.419234][ T3601] ? genl_get_cmd+0x480/0x480 [ 67.423932][ T3601] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 67.430547][ T3601] ? lock_release+0x720/0x720 [ 67.435246][ T3601] netlink_rcv_skb+0x153/0x420 [ 67.440027][ T3601] ? genl_get_cmd+0x480/0x480 [ 67.444726][ T3601] ? netlink_ack+0xa60/0xa60 [ 67.449341][ T3601] ? netlink_deliver_tap+0x1b1/0xc30 [ 67.454642][ T3601] ? _copy_from_iter+0x12b/0x1320 [ 67.459691][ T3601] genl_rcv+0x24/0x40 [ 67.463700][ T3601] netlink_unicast+0x533/0x7d0 [ 67.468486][ T3601] ? netlink_attachskb+0x880/0x880 [ 67.473609][ T3601] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 67.479866][ T3601] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 67.486123][ T3601] ? __phys_addr_symbol+0x2c/0x70 [ 67.491166][ T3601] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 67.496902][ T3601] ? __check_object_size+0x16e/0x3f0 [ 67.502210][ T3601] netlink_sendmsg+0x904/0xdf0 [ 67.507004][ T3601] ? netlink_unicast+0x7d0/0x7d0 [ 67.512318][ T3601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.518584][ T3601] ? netlink_unicast+0x7d0/0x7d0 [ 67.523555][ T3601] sock_sendmsg+0xcf/0x120 [ 67.527998][ T3601] ____sys_sendmsg+0x6e8/0x810 [ 67.532787][ T3601] ? kernel_sendmsg+0x50/0x50 [ 67.537480][ T3601] ? do_recvmmsg+0x6d0/0x6d0 [ 67.542084][ T3601] ? lock_chain_count+0x20/0x20 [ 67.546954][ T3601] ? lock_chain_count+0x20/0x20 [ 67.551838][ T3601] ___sys_sendmsg+0xf3/0x170 [ 67.556465][ T3601] ? sendmsg_copy_msghdr+0x160/0x160 [ 67.561788][ T3601] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 67.567801][ T3601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.574071][ T3601] ? __fget_light+0x215/0x280 [ 67.578774][ T3601] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 67.585040][ T3601] __sys_sendmsg+0xe5/0x1b0 [ 67.589562][ T3601] ? __sys_sendmsg_sock+0x30/0x30 [ 67.594614][ T3601] ? syscall_enter_from_user_mode+0x21/0x70 [ 67.600540][ T3601] do_syscall_64+0x35/0xb0 [ 67.604972][ T3601] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.610885][ T3601] RIP: 0033:0x7fd7e35fbaa9 [ 67.615311][ T3601] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.635017][ T3601] RSP: 002b:00007ffe44d10ac8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.643450][ T3601] RAX: ffffffffffffffda RBX: 00007fd7e36753a0 RCX: 00007fd7e35fbaa9 [ 67.651438][ T3601] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 67.659422][ T3601] RBP: 0000000000000003 R08: 0000000c00000001 R09: 0000000c00000001 [ 67.667405][ T3601] R10: 0000000c00000001 R11: 0000000000000246 R12: 0000000000000031 [ 67.675561][ T3601] R13: 00007ffe44d10b10 R14: 00007ffe44d10afa R15: 00007fd7e3675410 [ 67.683567][ T3601] [ 67.686796][ T3601] Kernel Offset: disabled [ 67.691217][ T3601] Rebooting in 86400 seconds..