Warning: Permanently added '10.128.0.158' (ECDSA) to the list of known hosts. syzkaller login: [ 595.111906][ T35] audit: type=1400 audit(1612606139.738:8): avc: denied { execmem } for pid=8451 comm="syz-executor074" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 595.131571][ T8452] IPVS: ftp: loaded support on port[0] = 21 [ 595.239035][ T8461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.247174][ T8461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.282471][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 595.307116][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 595.338665][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.347400][ T8478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 595.383926][ T8495] ------------[ cut here ]------------ [ 595.389870][ T8495] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 595.397257][ T8495] WARNING: CPU: 1 PID: 8495 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4f3/0x5f0 [ 595.407727][ T8495] Modules linked in: [ 595.411707][ T8495] CPU: 1 PID: 8495 Comm: syz-executor074 Not tainted 5.11.0-rc6-syzkaller #0 [ 595.420520][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.430645][ T8495] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 595.436681][ T8495] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 e5 4a 25 f9 e8 e0 4a 25 f9 8b 54 24 04 48 89 ee 48 c7 c7 00 66 62 8a e8 47 13 6d 00 <0f> 0b e9 dd fd ff ff e8 c1 4a 25 f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 595.456402][ T8495] RSP: 0018:ffffc90001a17508 EFLAGS: 00010286 [ 595.462563][ T8495] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 595.470599][ T8495] RDX: ffff888027f8e200 RSI: ffffffff815b7455 RDI: fffff52000342e93 [ 595.478656][ T8495] RBP: ffff888026d28000 R08: 0000000000000000 R09: 0000000000000000 [ 595.486634][ T8495] R10: ffffffff815b05fe R11: 0000000000000000 R12: ffff888026d28bc0 [ 595.494722][ T8495] R13: 0000000002000000 R14: ffff888026d29de0 R15: ffff888026d29dd8 [ 595.502953][ T8495] FS: 0000000000ad1300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 595.512654][ T8495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.519357][ T8495] CR2: 00007fff1c6e6000 CR3: 000000001d708000 CR4: 00000000001506e0 [ 595.527335][ T8495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.535379][ T8495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 595.543491][ T8495] Call Trace: [ 595.546817][ T8495] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 595.553544][ T8495] ieee80211_set_mcast_rate+0x37/0x40 [ 595.559596][ T8495] ? ieee80211_get_mesh_config+0x30/0x30 [ 595.565320][ T8495] nl80211_set_mcast_rate+0x317/0x610 [ 595.571070][ T8495] ? nl80211_nan_add_func+0x1940/0x1940 [ 595.576642][ T8495] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 595.583138][ T8495] ? nl80211_pre_doit+0xa2/0x630 [ 595.588146][ T8495] genl_family_rcv_msg_doit+0x228/0x320 [ 595.593804][ T8495] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 595.601259][ T8495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.607513][ T8495] ? cap_capable+0x1f1/0x280 [ 595.612210][ T8495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.618468][ T8495] ? ns_capable+0xde/0x100 [ 595.623036][ T8495] genl_rcv_msg+0x328/0x580 [ 595.627601][ T8495] ? genl_get_cmd+0x480/0x480 [ 595.632341][ T8495] ? nl80211_nan_add_func+0x1940/0x1940 [ 595.637906][ T8495] ? lock_release+0x710/0x710 [ 595.642712][ T8495] netlink_rcv_skb+0x153/0x420 [ 595.647502][ T8495] ? genl_get_cmd+0x480/0x480 [ 595.652364][ T8495] ? netlink_ack+0xaa0/0xaa0 [ 595.656985][ T8495] genl_rcv+0x24/0x40 [ 595.661053][ T8495] netlink_unicast+0x533/0x7d0 [ 595.665836][ T8495] ? netlink_attachskb+0x870/0x870 [ 595.671010][ T8495] ? _copy_from_iter_full+0x275/0x850 [ 595.676491][ T8495] netlink_sendmsg+0x856/0xd90 [ 595.681373][ T8495] ? netlink_unicast+0x7d0/0x7d0 [ 595.686328][ T8495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.692657][ T8495] ? netlink_unicast+0x7d0/0x7d0 [ 595.697695][ T8495] sock_sendmsg+0xcf/0x120 [ 595.702267][ T8495] ____sys_sendmsg+0x6e8/0x810 [ 595.707046][ T8495] ? kernel_sendmsg+0x50/0x50 [ 595.711777][ T8495] ? do_recvmmsg+0x6c0/0x6c0 [ 595.716383][ T8495] ? find_held_lock+0x2d/0x110 [ 595.721231][ T8495] ___sys_sendmsg+0xf3/0x170 [ 595.725839][ T8495] ? sendmsg_copy_msghdr+0x160/0x160 [ 595.731196][ T8495] ? _copy_to_user+0xdc/0x150 [ 595.735888][ T8495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 595.742190][ T8495] ? sock_do_ioctl+0x168/0x2d0 [ 595.746968][ T8495] ? compat_ifr_data_ioctl+0x150/0x150 [ 595.752485][ T8495] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 595.758405][ T8495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.764724][ T8495] ? __fget_light+0x215/0x280 [ 595.769677][ T8495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 595.775942][ T8495] __sys_sendmsg+0xe5/0x1b0 [ 595.780699][ T8495] ? __sys_sendmsg_sock+0xb0/0xb0 [ 595.785753][ T8495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 595.791806][ T8495] do_syscall_64+0x2d/0x70 [ 595.796235][ T8495] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 595.802228][ T8495] RIP: 0033:0x440e49 [ 595.806136][ T8495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 595.825811][ T8495] RSP: 002b:00007fff6f7b9478 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.834313][ T8495] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000440e49 [ 595.842520][ T8495] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000005 [ 595.850557][ T8495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 595.858602][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6f7b94e0 [ 595.866599][ T8495] R13: 00007fff6f7b94d0 R14: 00007fff6f7b94c0 R15: 000000000000000c [ 595.874647][ T8495] Kernel panic - not syncing: panic_on_warn set ... [ 595.881228][ T8495] CPU: 1 PID: 8495 Comm: syz-executor074 Not tainted 5.11.0-rc6-syzkaller #0 [ 595.889983][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.900040][ T8495] Call Trace: [ 595.903326][ T8495] dump_stack+0x107/0x163 [ 595.907694][ T8495] panic+0x306/0x73d [ 595.911625][ T8495] ? __warn_printk+0xf3/0xf3 [ 595.916229][ T8495] ? __warn.cold+0x1a/0x44 [ 595.920748][ T8495] ? drv_bss_info_changed+0x4f3/0x5f0 [ 595.926129][ T8495] __warn.cold+0x35/0x44 [ 595.930359][ T8495] ? wake_up_klogd.part.0+0x8e/0xd0 [ 595.935552][ T8495] ? drv_bss_info_changed+0x4f3/0x5f0 [ 595.940914][ T8495] report_bug+0x1bd/0x210 [ 595.945313][ T8495] handle_bug+0x3c/0x60 [ 595.949460][ T8495] exc_invalid_op+0x14/0x40 [ 595.953952][ T8495] asm_exc_invalid_op+0x12/0x20 [ 595.958790][ T8495] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 595.964767][ T8495] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 e5 4a 25 f9 e8 e0 4a 25 f9 8b 54 24 04 48 89 ee 48 c7 c7 00 66 62 8a e8 47 13 6d 00 <0f> 0b e9 dd fd ff ff e8 c1 4a 25 f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 595.984397][ T8495] RSP: 0018:ffffc90001a17508 EFLAGS: 00010286 [ 595.990457][ T8495] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 595.998435][ T8495] RDX: ffff888027f8e200 RSI: ffffffff815b7455 RDI: fffff52000342e93 [ 596.006393][ T8495] RBP: ffff888026d28000 R08: 0000000000000000 R09: 0000000000000000 [ 596.014349][ T8495] R10: ffffffff815b05fe R11: 0000000000000000 R12: ffff888026d28bc0 [ 596.022307][ T8495] R13: 0000000002000000 R14: ffff888026d29de0 R15: ffff888026d29dd8 [ 596.030303][ T8495] ? wake_up_klogd.part.0+0x8e/0xd0 [ 596.035503][ T8495] ? vprintk_func+0x95/0x1e0 [ 596.040143][ T8495] ? drv_bss_info_changed+0x4f3/0x5f0 [ 596.045507][ T8495] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 596.051566][ T8495] ieee80211_set_mcast_rate+0x37/0x40 [ 596.056956][ T8495] ? ieee80211_get_mesh_config+0x30/0x30 [ 596.062599][ T8495] nl80211_set_mcast_rate+0x317/0x610 [ 596.067962][ T8495] ? nl80211_nan_add_func+0x1940/0x1940 [ 596.073499][ T8495] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 596.079730][ T8495] ? nl80211_pre_doit+0xa2/0x630 [ 596.084659][ T8495] genl_family_rcv_msg_doit+0x228/0x320 [ 596.090228][ T8495] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 596.097591][ T8495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.103821][ T8495] ? cap_capable+0x1f1/0x280 [ 596.108405][ T8495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.114633][ T8495] ? ns_capable+0xde/0x100 [ 596.119050][ T8495] genl_rcv_msg+0x328/0x580 [ 596.123545][ T8495] ? genl_get_cmd+0x480/0x480 [ 596.128212][ T8495] ? nl80211_nan_add_func+0x1940/0x1940 [ 596.133747][ T8495] ? lock_release+0x710/0x710 [ 596.138418][ T8495] netlink_rcv_skb+0x153/0x420 [ 596.143172][ T8495] ? genl_get_cmd+0x480/0x480 [ 596.147841][ T8495] ? netlink_ack+0xaa0/0xaa0 [ 596.152449][ T8495] genl_rcv+0x24/0x40 [ 596.156526][ T8495] netlink_unicast+0x533/0x7d0 [ 596.161282][ T8495] ? netlink_attachskb+0x870/0x870 [ 596.166400][ T8495] ? _copy_from_iter_full+0x275/0x850 [ 596.171769][ T8495] netlink_sendmsg+0x856/0xd90 [ 596.176524][ T8495] ? netlink_unicast+0x7d0/0x7d0 [ 596.181457][ T8495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.187691][ T8495] ? netlink_unicast+0x7d0/0x7d0 [ 596.192619][ T8495] sock_sendmsg+0xcf/0x120 [ 596.197026][ T8495] ____sys_sendmsg+0x6e8/0x810 [ 596.201799][ T8495] ? kernel_sendmsg+0x50/0x50 [ 596.206516][ T8495] ? do_recvmmsg+0x6c0/0x6c0 [ 596.211099][ T8495] ? find_held_lock+0x2d/0x110 [ 596.215856][ T8495] ___sys_sendmsg+0xf3/0x170 [ 596.220436][ T8495] ? sendmsg_copy_msghdr+0x160/0x160 [ 596.225718][ T8495] ? _copy_to_user+0xdc/0x150 [ 596.230384][ T8495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 596.236616][ T8495] ? sock_do_ioctl+0x168/0x2d0 [ 596.241369][ T8495] ? compat_ifr_data_ioctl+0x150/0x150 [ 596.246814][ T8495] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 596.252700][ T8495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.258929][ T8495] ? __fget_light+0x215/0x280 [ 596.263621][ T8495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 596.269854][ T8495] __sys_sendmsg+0xe5/0x1b0 [ 596.274347][ T8495] ? __sys_sendmsg_sock+0xb0/0xb0 [ 596.279372][ T8495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.285262][ T8495] do_syscall_64+0x2d/0x70 [ 596.289667][ T8495] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 596.295549][ T8495] RIP: 0033:0x440e49 [ 596.299432][ T8495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 596.319024][ T8495] RSP: 002b:00007fff6f7b9478 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.327445][ T8495] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000440e49 [ 596.335402][ T8495] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000005 [ 596.343361][ T8495] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.351422][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6f7b94e0 [ 596.359379][ T8495] R13: 00007fff6f7b94d0 R14: 00007fff6f7b94c0 R15: 000000000000000c [ 596.368153][ T8495] Kernel Offset: disabled [ 596.372584][ T8495] Rebooting in 86400 seconds..