Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. syzkaller login: [ 625.707823][ T35] audit: type=1400 audit(1612758153.693:8): avc: denied { execmem } for pid=8457 comm="syz-executor290" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 625.733231][ T8458] IPVS: ftp: loaded support on port[0] = 21 [ 625.837342][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.845395][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.872501][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 625.872621][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 625.915760][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.925013][ T3195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 626.053559][ T8501] ------------[ cut here ]------------ [ 626.086491][ T8501] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 626.094049][ T8501] WARNING: CPU: 1 PID: 8501 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4f3/0x5f0 [ 626.136635][ T8501] Modules linked in: [ 626.153401][ T8501] CPU: 1 PID: 8501 Comm: syz-executor290 Not tainted 5.11.0-rc6-syzkaller #0 [ 626.165128][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.178336][ T8501] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 626.184422][ T8501] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 b5 41 25 f9 e8 b0 41 25 f9 8b 54 24 04 48 89 ee 48 c7 c7 00 66 62 8a e8 d7 06 6d 00 <0f> 0b e9 dd fd ff ff e8 91 41 25 f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 626.207670][ T8501] RSP: 0018:ffffc90001a0f508 EFLAGS: 00010286 [ 626.213777][ T8501] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 626.222237][ T8501] RDX: ffff8880275c82c0 RSI: ffffffff815b7455 RDI: fffff52000341e93 [ 626.230632][ T8501] RBP: ffff888035bb8000 R08: 0000000000000000 R09: 0000000000000000 [ 626.239489][ T8501] R10: ffffffff815b05fe R11: 0000000000000000 R12: ffff888035bb8bc0 [ 626.248023][ T8501] R13: 0000000002000000 R14: ffff888035bb9de0 R15: ffff888035bb9dd8 [ 626.256429][ T8501] FS: 00000000009ad300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 626.265428][ T8501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.272707][ T8501] CR2: 00007fa2fcd5b000 CR3: 0000000013669000 CR4: 00000000001506f0 [ 626.280877][ T8501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 626.288945][ T8501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 626.297095][ T8501] Call Trace: [ 626.300399][ T8501] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 626.307708][ T8501] ieee80211_set_mcast_rate+0x37/0x40 [ 626.313207][ T8501] ? ieee80211_get_mesh_config+0x30/0x30 [ 626.319119][ T8501] nl80211_set_mcast_rate+0x317/0x610 [ 626.324664][ T8501] ? nl80211_nan_add_func+0x1940/0x1940 [ 626.330322][ T8501] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 626.336894][ T8501] ? nl80211_pre_doit+0xa2/0x630 [ 626.341911][ T8501] genl_family_rcv_msg_doit+0x228/0x320 [ 626.347598][ T8501] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 626.354989][ T8501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 626.361346][ T8501] ? cap_capable+0x1f1/0x280 [ 626.366093][ T8501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 626.372370][ T8501] ? ns_capable+0xde/0x100 [ 626.377038][ T8501] genl_rcv_msg+0x328/0x580 [ 626.381575][ T8501] ? genl_get_cmd+0x480/0x480 [ 626.386391][ T8501] ? nl80211_nan_add_func+0x1940/0x1940 [ 626.391974][ T8501] ? lock_release+0x710/0x710 [ 626.399654][ T8501] netlink_rcv_skb+0x153/0x420 [ 626.404458][ T8501] ? genl_get_cmd+0x480/0x480 [ 626.409210][ T8501] ? netlink_ack+0xaa0/0xaa0 [ 626.413918][ T8501] genl_rcv+0x24/0x40 [ 626.417962][ T8501] netlink_unicast+0x533/0x7d0 [ 626.422766][ T8501] ? netlink_attachskb+0x870/0x870 [ 626.427999][ T8501] ? _copy_from_iter_full+0x275/0x850 [ 626.433510][ T8501] netlink_sendmsg+0x856/0xd90 [ 626.438352][ T8501] ? netlink_unicast+0x7d0/0x7d0 [ 626.443372][ T8501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 626.449694][ T8501] ? netlink_unicast+0x7d0/0x7d0 [ 626.454654][ T8501] sock_sendmsg+0xcf/0x120 [ 626.459217][ T8501] ____sys_sendmsg+0x6e8/0x810 [ 626.464067][ T8501] ? kernel_sendmsg+0x50/0x50 [ 626.468857][ T8501] ? do_recvmmsg+0x6c0/0x6c0 [ 626.473658][ T8501] ? find_held_lock+0x2d/0x110 [ 626.478885][ T8501] ___sys_sendmsg+0xf3/0x170 [ 626.483508][ T8501] ? sendmsg_copy_msghdr+0x160/0x160 [ 626.488899][ T8501] ? _copy_to_user+0xdc/0x150 [ 626.493616][ T8501] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 626.499979][ T8501] ? sock_do_ioctl+0x168/0x2d0 [ 626.504776][ T8501] ? compat_ifr_data_ioctl+0x150/0x150 [ 626.510325][ T8501] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 626.516578][ T8501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 626.522889][ T8501] ? __fget_light+0x215/0x280 [ 626.527927][ T8501] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 626.534211][ T8501] __sys_sendmsg+0xe5/0x1b0 [ 626.538824][ T8501] ? __sys_sendmsg_sock+0xb0/0xb0 [ 626.543897][ T8501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 626.550007][ T8501] do_syscall_64+0x2d/0x70 [ 626.554641][ T8501] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 626.560661][ T8501] RIP: 0033:0x440e79 [ 626.564581][ T8501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 626.584392][ T8501] RSP: 002b:00007fff14086548 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.592925][ T8501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000440e79 [ 626.600991][ T8501] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 626.609078][ T8501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.617232][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff140865b0 [ 626.625224][ T8501] R13: 00007fff140865a0 R14: 00007fff14086590 R15: 000000000000000c [ 626.633291][ T8501] Kernel panic - not syncing: panic_on_warn set ... [ 626.639908][ T8501] CPU: 0 PID: 8501 Comm: syz-executor290 Not tainted 5.11.0-rc6-syzkaller #0 [ 626.648711][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.658943][ T8501] Call Trace: [ 626.662229][ T8501] dump_stack+0x107/0x163 [ 626.666673][ T8501] panic+0x306/0x73d [ 626.670622][ T8501] ? __warn_printk+0xf3/0xf3 [ 626.675231][ T8501] ? __warn.cold+0x1a/0x44 [ 626.679817][ T8501] ? drv_bss_info_changed+0x4f3/0x5f0 [ 626.685222][ T8501] __warn.cold+0x35/0x44 [ 626.689494][ T8501] ? wake_up_klogd.part.0+0x8e/0xd0 [ 626.694719][ T8501] ? drv_bss_info_changed+0x4f3/0x5f0 [ 626.700107][ T8501] report_bug+0x1bd/0x210 [ 626.704536][ T8501] handle_bug+0x3c/0x60 [ 626.708693][ T8501] exc_invalid_op+0x14/0x40 [ 626.713207][ T8501] asm_exc_invalid_op+0x12/0x20 [ 626.718052][ T8501] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 626.724063][ T8501] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 b5 41 25 f9 e8 b0 41 25 f9 8b 54 24 04 48 89 ee 48 c7 c7 00 66 62 8a e8 d7 06 6d 00 <0f> 0b e9 dd fd ff ff e8 91 41 25 f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 626.743669][ T8501] RSP: 0018:ffffc90001a0f508 EFLAGS: 00010286 [ 626.749735][ T8501] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 626.757699][ T8501] RDX: ffff8880275c82c0 RSI: ffffffff815b7455 RDI: fffff52000341e93 [ 626.765702][ T8501] RBP: ffff888035bb8000 R08: 0000000000000000 R09: 0000000000000000 [ 626.774223][ T8501] R10: ffffffff815b05fe R11: 0000000000000000 R12: ffff888035bb8bc0 [ 626.782986][ T8501] R13: 0000000002000000 R14: ffff888035bb9de0 R15: ffff888035bb9dd8 [ 626.793997][ T8501] ? wake_up_klogd.part.0+0x8e/0xd0 [ 626.799555][ T8501] ? vprintk_func+0x95/0x1e0 [ 626.804425][ T8501] ? drv_bss_info_changed+0x4f3/0x5f0 [ 626.809957][ T8501] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 626.816412][ T8501] ieee80211_set_mcast_rate+0x37/0x40 [ 626.822082][ T8501] ? ieee80211_get_mesh_config+0x30/0x30 [ 626.828061][ T8501] nl80211_set_mcast_rate+0x317/0x610 [ 626.833549][ T8501] ? nl80211_nan_add_func+0x1940/0x1940 [ 626.839308][ T8501] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 626.845810][ T8501] ? nl80211_pre_doit+0xa2/0x630 [ 626.850851][ T8501] genl_family_rcv_msg_doit+0x228/0x320 [ 626.879955][ T8501] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 626.887563][ T8501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 626.894293][ T8501] ? cap_capable+0x1f1/0x280 [ 626.899282][ T8501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 626.906085][ T8501] ? ns_capable+0xde/0x100 [ 626.910966][ T8501] genl_rcv_msg+0x328/0x580 [ 626.949180][ T8501] ? genl_get_cmd+0x480/0x480 [ 626.953868][ T8501] ? nl80211_nan_add_func+0x1940/0x1940 [ 626.959765][ T8501] ? lock_release+0x710/0x710 [ 626.964558][ T8501] netlink_rcv_skb+0x153/0x420 [ 626.969823][ T8501] ? genl_get_cmd+0x480/0x480 [ 626.975057][ T8501] ? netlink_ack+0xaa0/0xaa0 [ 626.979688][ T8501] genl_rcv+0x24/0x40 [ 626.983671][ T8501] netlink_unicast+0x533/0x7d0 [ 626.988441][ T8501] ? netlink_attachskb+0x870/0x870 [ 626.993749][ T8501] ? _copy_from_iter_full+0x275/0x850 [ 627.000231][ T8501] netlink_sendmsg+0x856/0xd90 [ 627.005549][ T8501] ? netlink_unicast+0x7d0/0x7d0 [ 627.010768][ T8501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 627.017609][ T8501] ? netlink_unicast+0x7d0/0x7d0 [ 627.022562][ T8501] sock_sendmsg+0xcf/0x120 [ 627.027456][ T8501] ____sys_sendmsg+0x6e8/0x810 [ 627.032426][ T8501] ? kernel_sendmsg+0x50/0x50 [ 627.037105][ T8501] ? do_recvmmsg+0x6c0/0x6c0 [ 627.041696][ T8501] ? find_held_lock+0x2d/0x110 [ 627.046693][ T8501] ___sys_sendmsg+0xf3/0x170 [ 627.051286][ T8501] ? sendmsg_copy_msghdr+0x160/0x160 [ 627.056595][ T8501] ? _copy_to_user+0xdc/0x150 [ 627.061894][ T8501] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 627.068677][ T8501] ? sock_do_ioctl+0x168/0x2d0 [ 627.075323][ T8501] ? compat_ifr_data_ioctl+0x150/0x150 [ 627.174813][ T8501] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 627.180926][ T8501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 627.187709][ T8501] ? __fget_light+0x215/0x280 [ 627.192503][ T8501] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 627.198768][ T8501] __sys_sendmsg+0xe5/0x1b0 [ 627.203275][ T8501] ? __sys_sendmsg_sock+0xb0/0xb0 [ 627.208304][ T8501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 627.214198][ T8501] do_syscall_64+0x2d/0x70 [ 627.218625][ T8501] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 627.224552][ T8501] RIP: 0033:0x440e79 [ 627.228436][ T8501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 627.248055][ T8501] RSP: 002b:00007fff14086548 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.256506][ T8501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000440e79 [ 627.264478][ T8501] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 627.272462][ T8501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 627.280753][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff140865b0 [ 627.288725][ T8501] R13: 00007fff140865a0 R14: 00007fff14086590 R15: 000000000000000c [ 627.297530][ T8501] Kernel Offset: disabled [ 627.302085][ T8501] Rebooting in 86400 seconds..