forked to background, child pid 3176 [ 26.687877][ T3177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.699112][ T3177] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 27.068324][ T3265] sshd (3265) used greatest stack depth: 22792 bytes left OK syzkaller Warning: Permanently added '10.128.0.131' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 50.691396][ T3592] ------------[ cut here ]------------ [ 50.697129][ T3592] WARNING: CPU: 0 PID: 3592 at net/mac80211/cfg.c:3743 ieee80211_probe_client+0x6fe/0x800 [ 50.707404][ T3592] Modules linked in: [ 50.711287][ T3592] CPU: 0 PID: 3592 Comm: syz-executor256 Not tainted 5.17.0-rc7-syzkaller-02443-gd96657dc9238 #0 [ 50.722045][ T3592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.732288][ T3592] RIP: 0010:ieee80211_probe_client+0x6fe/0x800 [ 50.738612][ T3592] Code: 4b dc 04 01 e8 0c a3 69 00 e9 4e fe ff ff e8 a9 ec d4 f8 be 01 00 00 00 4c 89 ff e8 ec 38 88 fe e9 1a fe ff ff e8 92 ec d4 f8 <0f> 0b 41 bc ea ff ff ff e9 08 fe ff ff 48 89 ef e8 5d c4 1c f9 e9 [ 50.758398][ T3592] RSP: 0018:ffffc900037af4f8 EFLAGS: 00010293 [ 50.764617][ T3592] RAX: 0000000000000000 RBX: ffff88801c698000 RCX: 0000000000000000 [ 50.772577][ T3592] RDX: ffff88807d498000 RSI: ffffffff88a3d40e RDI: 0000000000000003 [ 50.780793][ T3592] RBP: ffff88807a35745c R08: 0000000000000000 R09: 0000000000000001 [ 50.788904][ T3592] R10: ffffffff88a3cdfe R11: 0000000000000000 R12: ffff888147ac0e60 [ 50.797006][ T3592] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc900037af67c [ 50.805024][ T3592] FS: 0000555556777300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 50.814032][ T3592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.820619][ T3592] CR2: 00005648b0f11da0 CR3: 0000000023073000 CR4: 00000000003506e0 [ 50.828625][ T3592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.836627][ T3592] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.844623][ T3592] Call Trace: [ 50.847896][ T3592] [ 50.850815][ T3592] nl80211_probe_client+0x3a9/0xba0 [ 50.856066][ T3592] ? nl80211_probe_mesh_link+0xa30/0xa30 [ 50.861725][ T3592] ? nl80211_pre_doit+0xa6/0x640 [ 50.866704][ T3592] genl_family_rcv_msg_doit+0x228/0x320 [ 50.872257][ T3592] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 50.879779][ T3592] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 50.886105][ T3592] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 50.892360][ T3592] ? ns_capable+0xd9/0x100 [ 50.896830][ T3592] genl_rcv_msg+0x328/0x580 [ 50.901341][ T3592] ? genl_get_cmd+0x480/0x480 [ 50.906065][ T3592] ? nl80211_probe_mesh_link+0xa30/0xa30 [ 50.911722][ T3592] ? lock_release+0x720/0x720 [ 50.916486][ T3592] netlink_rcv_skb+0x153/0x420 [ 50.921270][ T3592] ? genl_get_cmd+0x480/0x480 [ 50.926002][ T3592] ? netlink_ack+0xa60/0xa60 [ 50.930606][ T3592] ? netlink_deliver_tap+0x1b1/0xc40 [ 50.935952][ T3592] genl_rcv+0x24/0x40 [ 50.939936][ T3592] netlink_unicast+0x543/0x7f0 [ 50.944733][ T3592] ? netlink_attachskb+0x880/0x880 [ 50.949852][ T3592] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 50.956154][ T3592] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 50.962411][ T3592] ? __phys_addr_symbol+0x2c/0x70 [ 50.967459][ T3592] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 50.973188][ T3592] ? __check_object_size+0x16e/0x310 [ 50.978535][ T3592] netlink_sendmsg+0x904/0xe00 [ 50.983338][ T3592] ? netlink_unicast+0x7f0/0x7f0 [ 50.988267][ T3592] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 50.994563][ T3592] ? netlink_unicast+0x7f0/0x7f0 [ 50.999509][ T3592] sock_sendmsg+0xcf/0x120 [ 51.003954][ T3592] ____sys_sendmsg+0x6e8/0x810 [ 51.008721][ T3592] ? kernel_sendmsg+0x50/0x50 [ 51.013436][ T3592] ? do_recvmmsg+0x6d0/0x6d0 [ 51.018031][ T3592] ? __stack_depot_save+0x35/0x500 [ 51.023130][ T3592] ? lock_downgrade+0x6e0/0x6e0 [ 51.028037][ T3592] ___sys_sendmsg+0xf3/0x170 [ 51.032643][ T3592] ? sendmsg_copy_msghdr+0x160/0x160 [ 51.038122][ T3592] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.044204][ T3592] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 51.050028][ T3592] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.056066][ T3592] ? lockdep_hardirqs_on+0x79/0x100 [ 51.061290][ T3592] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.067555][ T3592] ? __fget_light+0x215/0x280 [ 51.072236][ T3592] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 51.078527][ T3592] __sys_sendmsg+0xe5/0x1b0 [ 51.083041][ T3592] ? __sys_sendmsg_sock+0x30/0x30 [ 51.088226][ T3592] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.094204][ T3592] do_syscall_64+0x35/0xb0 [ 51.098627][ T3592] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.104571][ T3592] RIP: 0033:0x7fbd553b3e69 [ 51.108987][ T3592] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.128637][ T3592] RSP: 002b:00007ffef498c518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.137075][ T3592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd553b3e69 [ 51.145087][ T3592] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 51.153062][ T3592] RBP: 00007fbd553778d0 R08: 000000000000000a R09: 0000000000000000 [ 51.161092][ T3592] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fbd55377960 [ 51.169128][ T3592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.177183][ T3592] [ 51.180205][ T3592] Kernel panic - not syncing: panic_on_warn set ... [ 51.186776][ T3592] CPU: 1 PID: 3592 Comm: syz-executor256 Not tainted 5.17.0-rc7-syzkaller-02443-gd96657dc9238 #0 [ 51.197253][ T3592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.207287][ T3592] Call Trace: [ 51.210545][ T3592] [ 51.213460][ T3592] dump_stack_lvl+0xcd/0x134 [ 51.218036][ T3592] panic+0x2b0/0x6dd [ 51.221918][ T3592] ? __warn_printk+0xf3/0xf3 [ 51.226495][ T3592] ? __warn.cold+0x1d1/0x2cf [ 51.231069][ T3592] ? ieee80211_probe_client+0x6fe/0x800 [ 51.236601][ T3592] __warn.cold+0x1ec/0x2cf [ 51.241001][ T3592] ? ieee80211_probe_client+0x6fe/0x800 [ 51.246529][ T3592] report_bug+0x1bd/0x210 [ 51.250847][ T3592] handle_bug+0x3c/0x60 [ 51.254985][ T3592] exc_invalid_op+0x14/0x40 [ 51.259468][ T3592] asm_exc_invalid_op+0x12/0x20 [ 51.264302][ T3592] RIP: 0010:ieee80211_probe_client+0x6fe/0x800 [ 51.270444][ T3592] Code: 4b dc 04 01 e8 0c a3 69 00 e9 4e fe ff ff e8 a9 ec d4 f8 be 01 00 00 00 4c 89 ff e8 ec 38 88 fe e9 1a fe ff ff e8 92 ec d4 f8 <0f> 0b 41 bc ea ff ff ff e9 08 fe ff ff 48 89 ef e8 5d c4 1c f9 e9 [ 51.290033][ T3592] RSP: 0018:ffffc900037af4f8 EFLAGS: 00010293 [ 51.296112][ T3592] RAX: 0000000000000000 RBX: ffff88801c698000 RCX: 0000000000000000 [ 51.304086][ T3592] RDX: ffff88807d498000 RSI: ffffffff88a3d40e RDI: 0000000000000003 [ 51.312063][ T3592] RBP: ffff88807a35745c R08: 0000000000000000 R09: 0000000000000001 [ 51.320032][ T3592] R10: ffffffff88a3cdfe R11: 0000000000000000 R12: ffff888147ac0e60 [ 51.328001][ T3592] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc900037af67c [ 51.335978][ T3592] ? ieee80211_probe_client+0xee/0x800 [ 51.341445][ T3592] ? ieee80211_probe_client+0x6fe/0x800 [ 51.347003][ T3592] ? ieee80211_probe_client+0x6fe/0x800 [ 51.352556][ T3592] nl80211_probe_client+0x3a9/0xba0 [ 51.357760][ T3592] ? nl80211_probe_mesh_link+0xa30/0xa30 [ 51.363400][ T3592] ? nl80211_pre_doit+0xa6/0x640 [ 51.368340][ T3592] genl_family_rcv_msg_doit+0x228/0x320 [ 51.373885][ T3592] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 51.381255][ T3592] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.387506][ T3592] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.393748][ T3592] ? ns_capable+0xd9/0x100 [ 51.398170][ T3592] genl_rcv_msg+0x328/0x580 [ 51.402673][ T3592] ? genl_get_cmd+0x480/0x480 [ 51.407347][ T3592] ? nl80211_probe_mesh_link+0xa30/0xa30 [ 51.412985][ T3592] ? lock_release+0x720/0x720 [ 51.417671][ T3592] netlink_rcv_skb+0x153/0x420 [ 51.422447][ T3592] ? genl_get_cmd+0x480/0x480 [ 51.427135][ T3592] ? netlink_ack+0xa60/0xa60 [ 51.431745][ T3592] ? netlink_deliver_tap+0x1b1/0xc40 [ 51.437041][ T3592] genl_rcv+0x24/0x40 [ 51.441020][ T3592] netlink_unicast+0x543/0x7f0 [ 51.445790][ T3592] ? netlink_attachskb+0x880/0x880 [ 51.450912][ T3592] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 51.457165][ T3592] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 51.463410][ T3592] ? __phys_addr_symbol+0x2c/0x70 [ 51.468439][ T3592] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 51.474163][ T3592] ? __check_object_size+0x16e/0x310 [ 51.479465][ T3592] netlink_sendmsg+0x904/0xe00 [ 51.484252][ T3592] ? netlink_unicast+0x7f0/0x7f0 [ 51.489204][ T3592] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.495453][ T3592] ? netlink_unicast+0x7f0/0x7f0 [ 51.500394][ T3592] sock_sendmsg+0xcf/0x120 [ 51.504809][ T3592] ____sys_sendmsg+0x6e8/0x810 [ 51.509569][ T3592] ? kernel_sendmsg+0x50/0x50 [ 51.514243][ T3592] ? do_recvmmsg+0x6d0/0x6d0 [ 51.518943][ T3592] ? __stack_depot_save+0x35/0x500 [ 51.524056][ T3592] ? lock_downgrade+0x6e0/0x6e0 [ 51.528915][ T3592] ___sys_sendmsg+0xf3/0x170 [ 51.533504][ T3592] ? sendmsg_copy_msghdr+0x160/0x160 [ 51.538799][ T3592] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.544779][ T3592] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 51.550587][ T3592] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.556563][ T3592] ? lockdep_hardirqs_on+0x79/0x100 [ 51.561771][ T3592] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.568011][ T3592] ? __fget_light+0x215/0x280 [ 51.572685][ T3592] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 51.578930][ T3592] __sys_sendmsg+0xe5/0x1b0 [ 51.583432][ T3592] ? __sys_sendmsg_sock+0x30/0x30 [ 51.588470][ T3592] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.594373][ T3592] do_syscall_64+0x35/0xb0 [ 51.598785][ T3592] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.604682][ T3592] RIP: 0033:0x7fbd553b3e69 [ 51.609095][ T3592] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.628782][ T3592] RSP: 002b:00007ffef498c518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.637189][ T3592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd553b3e69 [ 51.645150][ T3592] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 51.653111][ T3592] RBP: 00007fbd553778d0 R08: 000000000000000a R09: 0000000000000000 [ 51.661080][ T3592] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fbd55377960 [ 51.669042][ T3592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.677024][ T3592] [ 51.680315][ T3592] Kernel Offset: disabled [ 51.684695][ T3592] Rebooting in 86400 seconds..