[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts. syzkaller login: [ 63.756625][ T8495] IPVS: ftp: loaded support on port[0] = 21 [ 63.841277][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.849294][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.883287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.903718][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.917662][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 63.928868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.962965][ T8495] ------------[ cut here ]------------ [ 63.968496][ T8495] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 63.976415][ T8495] WARNING: CPU: 1 PID: 8495 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4f3/0x5f0 [ 63.987263][ T8495] Modules linked in: [ 63.991633][ T8495] CPU: 1 PID: 8495 Comm: syz-executor366 Not tainted 5.10.0-rc6-syzkaller #0 [ 64.000846][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.011011][ T8495] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 64.017024][ T8495] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 a5 3c 2d f9 e8 a0 3c 2d f9 8b 54 24 04 48 89 ee 48 c7 c7 c0 87 61 8a e8 39 9b 69 00 <0f> 0b e9 dd fd ff ff e8 81 3c 2d f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 64.036722][ T8495] RSP: 0018:ffffc9000169f508 EFLAGS: 00010286 [ 64.042879][ T8495] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.050955][ T8495] RDX: ffff888016060000 RSI: ffffffff8158c855 RDI: fffff520002d3e93 [ 64.058973][ T8495] RBP: ffff888028ca8000 R08: 0000000000000001 R09: ffff8880b9f30627 [ 64.067004][ T8495] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028ca8c00 [ 64.075694][ T8495] R13: 0000000002000000 R14: ffff888028ca9e20 R15: ffff888028ca9e18 [ 64.083745][ T8495] FS: 000000000167b880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 64.092766][ T8495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.099409][ T8495] CR2: 0000000020000180 CR3: 0000000012970000 CR4: 00000000001506e0 [ 64.107384][ T8495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.115946][ T8495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.124105][ T8495] Call Trace: [ 64.127401][ T8495] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 64.133542][ T8495] ieee80211_set_mcast_rate+0x37/0x40 [ 64.138925][ T8495] ? ieee80211_set_wds_peer+0x30/0x30 [ 64.144359][ T8495] nl80211_set_mcast_rate+0x317/0x610 [ 64.149821][ T8495] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 64.156409][ T8495] ? nl80211_pre_doit+0xa2/0x630 [ 64.161433][ T8495] genl_family_rcv_msg_doit+0x228/0x320 [ 64.167021][ T8495] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 64.174467][ T8495] ? ns_capable+0xde/0x100 [ 64.178917][ T8495] genl_rcv_msg+0x328/0x580 [ 64.183508][ T8495] ? genl_get_cmd+0x480/0x480 [ 64.188190][ T8495] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 64.194837][ T8495] ? lock_release+0x710/0x710 [ 64.200246][ T8495] netlink_rcv_skb+0x153/0x420 [ 64.205000][ T8495] ? genl_get_cmd+0x480/0x480 [ 64.209782][ T8495] ? netlink_ack+0xaa0/0xaa0 [ 64.214385][ T8495] genl_rcv+0x24/0x40 [ 64.218354][ T8495] netlink_unicast+0x533/0x7d0 [ 64.223261][ T8495] ? netlink_attachskb+0x810/0x810 [ 64.228395][ T8495] ? __phys_addr_symbol+0x2c/0x70 [ 64.233499][ T8495] ? __check_object_size+0x171/0x3f0 [ 64.238947][ T8495] netlink_sendmsg+0x856/0xd90 [ 64.243800][ T8495] ? netlink_unicast+0x7d0/0x7d0 [ 64.248755][ T8495] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.254108][ T8495] ? netlink_unicast+0x7d0/0x7d0 [ 64.259060][ T8495] sock_sendmsg+0xcf/0x120 [ 64.263539][ T8495] ____sys_sendmsg+0x6e8/0x810 [ 64.268333][ T8495] ? kernel_sendmsg+0x50/0x50 [ 64.273105][ T8495] ? do_recvmmsg+0x6c0/0x6c0 [ 64.277701][ T8495] ? find_held_lock+0x2d/0x110 [ 64.282545][ T8495] ___sys_sendmsg+0xf3/0x170 [ 64.287155][ T8495] ? sendmsg_copy_msghdr+0x160/0x160 [ 64.292513][ T8495] ? _copy_to_user+0xdc/0x150 [ 64.297197][ T8495] ? sock_do_ioctl+0x168/0x2d0 [ 64.302039][ T8495] ? compat_ifr_data_ioctl+0x150/0x150 [ 64.307571][ T8495] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 64.313573][ T8495] ? __fget_light+0x215/0x280 [ 64.318287][ T8495] __sys_sendmsg+0xe5/0x1b0 [ 64.322852][ T8495] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.327891][ T8495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 64.334625][ T8495] do_syscall_64+0x2d/0x70 [ 64.339066][ T8495] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.345382][ T8495] RIP: 0033:0x4417f9 [ 64.349400][ T8495] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.369102][ T8495] RSP: 002b:00007ffe65be46d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.377569][ T8495] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004417f9 [ 64.385633][ T8495] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000004 [ 64.393666][ T8495] RBP: 000000316e616c77 R08: 0000002100000000 R09: 0000002100000000 [ 64.401705][ T8495] R10: 0000002100000000 R11: 0000000000000246 R12: 0000000000000032 [ 64.409739][ T8495] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 64.417726][ T8495] Kernel panic - not syncing: panic_on_warn set ... [ 64.424298][ T8495] CPU: 1 PID: 8495 Comm: syz-executor366 Not tainted 5.10.0-rc6-syzkaller #0 [ 64.433036][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.443069][ T8495] Call Trace: [ 64.446350][ T8495] dump_stack+0x107/0x163 [ 64.450663][ T8495] panic+0x306/0x73d [ 64.454535][ T8495] ? __warn_printk+0xf3/0xf3 [ 64.459114][ T8495] ? __warn.cold+0x1a/0x44 [ 64.463519][ T8495] ? __warn+0xf1/0x210 [ 64.467579][ T8495] ? drv_bss_info_changed+0x4f3/0x5f0 [ 64.472929][ T8495] __warn.cold+0x35/0x44 [ 64.477159][ T8495] ? wake_up_klogd.part.0+0x8e/0xd0 [ 64.482337][ T8495] ? drv_bss_info_changed+0x4f3/0x5f0 [ 64.487785][ T8495] report_bug+0x1bd/0x210 [ 64.492098][ T8495] handle_bug+0x3c/0x60 [ 64.496229][ T8495] exc_invalid_op+0x14/0x40 [ 64.500720][ T8495] asm_exc_invalid_op+0x12/0x20 [ 64.505560][ T8495] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 64.511528][ T8495] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 a5 3c 2d f9 e8 a0 3c 2d f9 8b 54 24 04 48 89 ee 48 c7 c7 c0 87 61 8a e8 39 9b 69 00 <0f> 0b e9 dd fd ff ff e8 81 3c 2d f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 64.531112][ T8495] RSP: 0018:ffffc9000169f508 EFLAGS: 00010286 [ 64.537157][ T8495] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.545122][ T8495] RDX: ffff888016060000 RSI: ffffffff8158c855 RDI: fffff520002d3e93 [ 64.553074][ T8495] RBP: ffff888028ca8000 R08: 0000000000000001 R09: ffff8880b9f30627 [ 64.561109][ T8495] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028ca8c00 [ 64.569069][ T8495] R13: 0000000002000000 R14: ffff888028ca9e20 R15: ffff888028ca9e18 [ 64.577031][ T8495] ? vprintk_func+0x95/0x1e0 [ 64.581617][ T8495] ? drv_bss_info_changed+0x4f3/0x5f0 [ 64.586985][ T8495] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 64.593034][ T8495] ieee80211_set_mcast_rate+0x37/0x40 [ 64.598380][ T8495] ? ieee80211_set_wds_peer+0x30/0x30 [ 64.603742][ T8495] nl80211_set_mcast_rate+0x317/0x610 [ 64.609093][ T8495] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 64.615763][ T8495] ? nl80211_pre_doit+0xa2/0x630 [ 64.620685][ T8495] genl_family_rcv_msg_doit+0x228/0x320 [ 64.626227][ T8495] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 64.633600][ T8495] ? ns_capable+0xde/0x100 [ 64.638005][ T8495] genl_rcv_msg+0x328/0x580 [ 64.642509][ T8495] ? genl_get_cmd+0x480/0x480 [ 64.647181][ T8495] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 64.653752][ T8495] ? lock_release+0x710/0x710 [ 64.658434][ T8495] netlink_rcv_skb+0x153/0x420 [ 64.663447][ T8495] ? genl_get_cmd+0x480/0x480 [ 64.668222][ T8495] ? netlink_ack+0xaa0/0xaa0 [ 64.672827][ T8495] genl_rcv+0x24/0x40 [ 64.677334][ T8495] netlink_unicast+0x533/0x7d0 [ 64.682230][ T8495] ? netlink_attachskb+0x810/0x810 [ 64.687621][ T8495] ? __phys_addr_symbol+0x2c/0x70 [ 64.692823][ T8495] ? __check_object_size+0x171/0x3f0 [ 64.698133][ T8495] netlink_sendmsg+0x856/0xd90 [ 64.703331][ T8495] ? netlink_unicast+0x7d0/0x7d0 [ 64.708797][ T8495] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.714066][ T8495] ? netlink_unicast+0x7d0/0x7d0 [ 64.718984][ T8495] sock_sendmsg+0xcf/0x120 [ 64.723383][ T8495] ____sys_sendmsg+0x6e8/0x810 [ 64.728127][ T8495] ? kernel_sendmsg+0x50/0x50 [ 64.732780][ T8495] ? do_recvmmsg+0x6c0/0x6c0 [ 64.737352][ T8495] ? find_held_lock+0x2d/0x110 [ 64.742100][ T8495] ___sys_sendmsg+0xf3/0x170 [ 64.746669][ T8495] ? sendmsg_copy_msghdr+0x160/0x160 [ 64.751940][ T8495] ? _copy_to_user+0xdc/0x150 [ 64.756605][ T8495] ? sock_do_ioctl+0x168/0x2d0 [ 64.761349][ T8495] ? compat_ifr_data_ioctl+0x150/0x150 [ 64.766804][ T8495] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 64.772677][ T8495] ? __fget_light+0x215/0x280 [ 64.777338][ T8495] __sys_sendmsg+0xe5/0x1b0 [ 64.781820][ T8495] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.786851][ T8495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 64.792723][ T8495] do_syscall_64+0x2d/0x70 [ 64.797118][ T8495] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.802985][ T8495] RIP: 0033:0x4417f9 [ 64.806859][ T8495] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.826442][ T8495] RSP: 002b:00007ffe65be46d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.834836][ T8495] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004417f9 [ 64.842884][ T8495] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000004 [ 64.850835][ T8495] RBP: 000000316e616c77 R08: 0000002100000000 R09: 0000002100000000 [ 64.858794][ T8495] R10: 0000002100000000 R11: 0000000000000246 R12: 0000000000000032 [ 64.866759][ T8495] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 64.875462][ T8495] Kernel Offset: disabled [ 64.879860][ T8495] Rebooting in 86400 seconds..