Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts. syzkaller login: [ 62.858487][ T6894] IPVS: ftp: loaded support on port[0] = 21 [ 62.933703][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.964601][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 62.986812][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.996407][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.014442][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.024055][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.134810][ T6894] syz-executor231 uses obsolete (PF_INET,SOCK_PACKET) [ 63.145405][ T6894] ------------[ cut here ]------------ [ 63.151016][ T6894] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 63.179440][ T6894] WARNING: CPU: 1 PID: 6894 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x560/0x660 [ 63.190947][ T6894] Kernel panic - not syncing: panic_on_warn set ... [ 63.197554][ T6894] CPU: 1 PID: 6894 Comm: syz-executor231 Not tainted 5.9.0-rc7-syzkaller #0 [ 63.206222][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.216259][ T6894] Call Trace: [ 63.219668][ T6894] dump_stack+0x198/0x1fd [ 63.223979][ T6894] panic+0x382/0x7fb [ 63.227850][ T6894] ? __warn_printk+0xf3/0xf3 [ 63.232424][ T6894] ? __warn.cold+0x5/0x4b [ 63.236766][ T6894] ? __warn+0xd6/0x1f2 [ 63.240813][ T6894] ? drv_bss_info_changed+0x560/0x660 [ 63.246164][ T6894] __warn.cold+0x20/0x4b [ 63.250386][ T6894] ? drv_bss_info_changed+0x560/0x660 [ 63.255848][ T6894] report_bug+0x1bd/0x210 [ 63.260178][ T6894] handle_bug+0x38/0x90 [ 63.264321][ T6894] ? __warn_printk+0xc6/0xf3 [ 63.268890][ T6894] exc_invalid_op+0x14/0x40 [ 63.273372][ T6894] asm_exc_invalid_op+0x12/0x20 [ 63.278208][ T6894] RIP: 0010:drv_bss_info_changed+0x560/0x660 [ 63.284178][ T6894] Code: ab 40 06 00 00 48 85 ed 0f 84 99 00 00 00 e8 a7 3e b8 f9 e8 a2 3e b8 f9 44 89 fa 48 89 ee 48 c7 c7 40 dd 5e 89 e8 12 7c 88 f9 <0f> 0b e9 6b fd ff ff e8 84 3e b8 f9 0f 0b e9 ac fc ff ff e8 38 14 [ 63.303761][ T6894] RSP: 0018:ffffc900056f75a0 EFLAGS: 00010282 [ 63.309804][ T6894] RAX: 0000000000000000 RBX: ffff8880924e4c00 RCX: 0000000000000000 [ 63.317776][ T6894] RDX: ffff888090dae180 RSI: ffffffff815f59d5 RDI: fffff52000adeea6 [ 63.325725][ T6894] RBP: ffff8880924e4000 R08: 0000000000000001 R09: ffff8880ae5318e7 [ 63.333687][ T6894] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000002000000 [ 63.341635][ T6894] R13: ffff8880924e5e10 R14: 0000000000000000 R15: 0000000000000004 [ 63.349613][ T6894] ? vprintk_func+0x95/0x1d4 [ 63.354210][ T6894] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 63.360252][ T6894] ieee80211_set_mcast_rate+0x37/0x40 [ 63.365603][ T6894] ? ieee80211_set_wds_peer+0x30/0x30 [ 63.370951][ T6894] nl80211_set_mcast_rate+0x387/0x6c0 [ 63.376301][ T6894] ? nl80211_tdls_cancel_channel_switch+0x630/0x630 [ 63.382885][ T6894] ? nl80211_pre_doit+0xa2/0x630 [ 63.387799][ T6894] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 63.394540][ T6894] genl_rcv_msg+0x61d/0x980 [ 63.399023][ T6894] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.405948][ T6894] ? lock_release+0x8f0/0x8f0 [ 63.410604][ T6894] netlink_rcv_skb+0x15a/0x430 [ 63.415370][ T6894] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.422300][ T6894] ? netlink_ack+0xa10/0xa10 [ 63.426875][ T6894] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.432672][ T6894] genl_rcv+0x24/0x40 [ 63.436630][ T6894] netlink_unicast+0x533/0x7d0 [ 63.441372][ T6894] ? netlink_attachskb+0x810/0x810 [ 63.446475][ T6894] ? __phys_addr_symbol+0x2c/0x70 [ 63.451478][ T6894] ? __check_object_size+0x171/0x3e4 [ 63.456742][ T6894] netlink_sendmsg+0x856/0xd90 [ 63.461504][ T6894] ? netlink_unicast+0x7d0/0x7d0 [ 63.466425][ T6894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.471687][ T6894] ? netlink_unicast+0x7d0/0x7d0 [ 63.476602][ T6894] sock_sendmsg+0xcf/0x120 [ 63.480994][ T6894] ____sys_sendmsg+0x6e8/0x810 [ 63.485744][ T6894] ? kernel_sendmsg+0x50/0x50 [ 63.490398][ T6894] ? do_recvmmsg+0x6d0/0x6d0 [ 63.494979][ T6894] ? lock_downgrade+0x830/0x830 [ 63.499806][ T6894] ? lock_downgrade+0x830/0x830 [ 63.504643][ T6894] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 63.510602][ T6894] ___sys_sendmsg+0xf3/0x170 [ 63.515171][ T6894] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.520438][ T6894] ? lock_downgrade+0x830/0x830 [ 63.525278][ T6894] ? __might_fault+0x190/0x1d0 [ 63.530217][ T6894] ? compat_sock_ioctl+0x17c/0x2140 [ 63.536089][ T6894] ? __fget_light+0x215/0x280 [ 63.540745][ T6894] __sys_sendmsg+0xe5/0x1b0 [ 63.545226][ T6894] ? __sys_sendmsg_sock+0xb0/0xb0 [ 63.550253][ T6894] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 63.556848][ T6894] ? check_preemption_disabled+0x50/0x130 [ 63.562662][ T6894] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 63.569244][ T6894] __do_fast_syscall_32+0x60/0x90 [ 63.574268][ T6894] do_fast_syscall_32+0x2f/0x70 [ 63.580279][ T6894] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 63.586592][ T6894] RIP: 0023:0xf7f4f549 [ 63.590640][ T6894] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 63.610222][ T6894] RSP: 002b:00000000ffff02ac EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 63.618610][ T6894] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000180 [ 63.626648][ T6894] RDX: 0000000000000000 RSI: 00000000f7f4f28c RDI: 0000000000000004 [ 63.634610][ T6894] RBP: 000000000894d018 R08: 0000000000000000 R09: 0000000000000000 [ 63.642570][ T6894] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 63.650517][ T6894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.659850][ T6894] Kernel Offset: disabled [ 63.664236][ T6894] Rebooting in 86400 seconds..