forked to background, child pid 3171 no interfaces have a carrier [ 21.597985][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.607273][ T3172] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.86' (ECDSA) to the list of known hosts. syzkaller login: [ 59.283334][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.295371][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.305146][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.314110][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.322300][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 59.331416][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.396945][ T3594] ------------[ cut here ]------------ [ 59.403586][ T3594] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 59.411091][ T3594] WARNING: CPU: 0 PID: 3594 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4dd/0x5f0 [ 59.422751][ T3594] Modules linked in: [ 59.426647][ T3594] CPU: 0 PID: 3594 Comm: syz-executor207 Not tainted 5.18.0-rc3-syzkaller #0 [ 59.435969][ T3594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.446232][ T3594] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0 [ 59.452380][ T3594] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 2b b5 d1 f8 e8 26 b5 d1 f8 8b 54 24 04 48 89 ee 48 c7 c7 60 e3 ef 8a e8 52 0b 74 00 <0f> 0b e9 f6 fd ff ff e8 07 b5 d1 f8 e8 82 73 b8 00 31 ff 89 c3 89 [ 59.472347][ T3594] RSP: 0018:ffffc90003cef500 EFLAGS: 00010282 [ 59.478420][ T3594] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 59.486807][ T3594] RDX: ffff88801dea5700 RSI: ffffffff81600b68 RDI: fffff5200079de92 [ 59.495259][ T3594] RBP: ffff888020f28000 R08: 0000000000000000 R09: 0000000000000000 [ 59.503451][ T3594] R10: ffffffff815fb53e R11: 0000000000000000 R12: ffff888020f28d00 [ 59.511829][ T3594] R13: 0000000002000000 R14: ffff888020f2a350 R15: ffff888020f2a348 [ 59.519831][ T3594] FS: 000055555605f300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 59.529152][ T3594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.535961][ T3594] CR2: 00007ffe7c8e3e50 CR3: 0000000072968000 CR4: 0000000000350ef0 [ 59.544815][ T3594] Call Trace: [ 59.548094][ T3594] [ 59.551027][ T3594] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 59.557388][ T3594] ieee80211_set_mcast_rate+0x37/0x40 [ 59.563175][ T3594] ? ieee80211_copy_mbssid_beacon+0x270/0x270 [ 59.569258][ T3594] nl80211_set_mcast_rate+0x317/0x610 [ 59.574964][ T3594] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 59.581979][ T3594] ? nl80211_pre_doit+0xa6/0x640 [ 59.587017][ T3594] genl_family_rcv_msg_doit+0x228/0x320 [ 59.592780][ T3594] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 59.600250][ T3594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.606738][ T3594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.613129][ T3594] ? ns_capable+0xd9/0x100 [ 59.617558][ T3594] genl_rcv_msg+0x328/0x580 [ 59.622313][ T3594] ? genl_get_cmd+0x480/0x480 [ 59.626999][ T3594] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 59.633760][ T3594] ? lock_release+0x720/0x720 [ 59.638452][ T3594] netlink_rcv_skb+0x153/0x420 [ 59.643456][ T3594] ? genl_get_cmd+0x480/0x480 [ 59.648883][ T3594] ? netlink_ack+0xa80/0xa80 [ 59.653997][ T3594] ? netlink_deliver_tap+0x1b1/0xc40 [ 59.659323][ T3594] genl_rcv+0x24/0x40 [ 59.663725][ T3594] netlink_unicast+0x543/0x7f0 [ 59.668511][ T3594] ? netlink_attachskb+0x880/0x880 [ 59.673865][ T3594] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 59.680159][ T3594] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 59.686668][ T3594] ? __phys_addr_symbol+0x2c/0x70 [ 59.692057][ T3594] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 59.697784][ T3594] ? __check_object_size+0x16c/0x4f0 [ 59.703318][ T3594] netlink_sendmsg+0x904/0xe00 [ 59.708097][ T3594] ? netlink_unicast+0x7f0/0x7f0 [ 59.713838][ T3594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.720090][ T3594] ? netlink_unicast+0x7f0/0x7f0 [ 59.725249][ T3594] sock_sendmsg+0xcf/0x120 [ 59.729872][ T3594] ____sys_sendmsg+0x6e2/0x800 [ 59.734881][ T3594] ? kernel_sendmsg+0x50/0x50 [ 59.739565][ T3594] ? do_recvmmsg+0x6d0/0x6d0 [ 59.744337][ T3594] ? find_held_lock+0x2d/0x110 [ 59.749116][ T3594] ? __might_fault+0xd1/0x170 [ 59.754055][ T3594] ? lock_downgrade+0x6e0/0x6e0 [ 59.758916][ T3594] ___sys_sendmsg+0xf3/0x170 [ 59.763847][ T3594] ? sendmsg_copy_msghdr+0x160/0x160 [ 59.769175][ T3594] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.775389][ T3594] ? get_user_ifreq+0x250/0x250 [ 59.780248][ T3594] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.786519][ T3594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.792985][ T3594] ? __fget_light+0x20f/0x270 [ 59.797675][ T3594] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 59.804137][ T3594] __sys_sendmsg+0xe5/0x1b0 [ 59.808743][ T3594] ? __sys_sendmsg_sock+0x30/0x30 [ 59.814038][ T3594] ? syscall_enter_from_user_mode+0x21/0x70 [ 59.819946][ T3594] do_syscall_64+0x35/0xb0 [ 59.824624][ T3594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.830707][ T3594] RIP: 0033:0x7f13f3bfeaa9 [ 59.835516][ T3594] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.855728][ T3594] RSP: 002b:00007ffeaaaa6888 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.864507][ T3594] RAX: ffffffffffffffda RBX: 00007f13f3c783a0 RCX: 00007f13f3bfeaa9 [ 59.872741][ T3594] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 59.880720][ T3594] RBP: 0000000000000003 R08: 0000000c00000000 R09: 0000000c00000000 [ 59.888929][ T3594] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000000031 [ 59.897165][ T3594] R13: 00007ffeaaaa68d0 R14: 00007ffeaaaa68ba R15: 00007f13f3c78410 [ 59.905297][ T3594] [ 59.908317][ T3594] Kernel panic - not syncing: panic_on_warn set ... [ 59.914974][ T3594] CPU: 0 PID: 3594 Comm: syz-executor207 Not tainted 5.18.0-rc3-syzkaller #0 [ 59.923734][ T3594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.933795][ T3594] Call Trace: [ 59.937074][ T3594] [ 59.940002][ T3594] dump_stack_lvl+0xcd/0x134 [ 59.944613][ T3594] panic+0x2d7/0x636 [ 59.948515][ T3594] ? panic_print_sys_info.part.0+0x10b/0x10b [ 59.954688][ T3594] ? __warn.cold+0x1d1/0x2c5 [ 59.959618][ T3594] ? drv_bss_info_changed+0x4dd/0x5f0 [ 59.965026][ T3594] __warn.cold+0x1e2/0x2c5 [ 59.969460][ T3594] ? wake_up_klogd.part.0+0x8e/0xd0 [ 59.974775][ T3594] ? drv_bss_info_changed+0x4dd/0x5f0 [ 59.980272][ T3594] report_bug+0x1bd/0x210 [ 59.984725][ T3594] handle_bug+0x3c/0x60 [ 59.989092][ T3594] exc_invalid_op+0x14/0x40 [ 59.993690][ T3594] asm_exc_invalid_op+0x12/0x20 [ 59.998734][ T3594] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0 [ 60.004739][ T3594] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 2b b5 d1 f8 e8 26 b5 d1 f8 8b 54 24 04 48 89 ee 48 c7 c7 60 e3 ef 8a e8 52 0b 74 00 <0f> 0b e9 f6 fd ff ff e8 07 b5 d1 f8 e8 82 73 b8 00 31 ff 89 c3 89 [ 60.024350][ T3594] RSP: 0018:ffffc90003cef500 EFLAGS: 00010282 [ 60.030406][ T3594] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 60.038363][ T3594] RDX: ffff88801dea5700 RSI: ffffffff81600b68 RDI: fffff5200079de92 [ 60.046351][ T3594] RBP: ffff888020f28000 R08: 0000000000000000 R09: 0000000000000000 [ 60.054307][ T3594] R10: ffffffff815fb53e R11: 0000000000000000 R12: ffff888020f28d00 [ 60.062261][ T3594] R13: 0000000002000000 R14: ffff888020f2a350 R15: ffff888020f2a348 [ 60.070226][ T3594] ? wake_up_klogd.part.0+0x8e/0xd0 [ 60.075507][ T3594] ? vprintk+0x88/0x90 [ 60.079586][ T3594] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 60.085649][ T3594] ieee80211_set_mcast_rate+0x37/0x40 [ 60.091005][ T3594] ? ieee80211_copy_mbssid_beacon+0x270/0x270 [ 60.097181][ T3594] nl80211_set_mcast_rate+0x317/0x610 [ 60.102548][ T3594] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 60.109132][ T3594] ? nl80211_pre_doit+0xa6/0x640 [ 60.114159][ T3594] genl_family_rcv_msg_doit+0x228/0x320 [ 60.119733][ T3594] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 60.127114][ T3594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 60.133351][ T3594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 60.139578][ T3594] ? ns_capable+0xd9/0x100 [ 60.143986][ T3594] genl_rcv_msg+0x328/0x580 [ 60.148489][ T3594] ? genl_get_cmd+0x480/0x480 [ 60.153156][ T3594] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 60.159747][ T3594] ? lock_release+0x720/0x720 [ 60.164529][ T3594] netlink_rcv_skb+0x153/0x420 [ 60.169284][ T3594] ? genl_get_cmd+0x480/0x480 [ 60.173952][ T3594] ? netlink_ack+0xa80/0xa80 [ 60.178534][ T3594] ? netlink_deliver_tap+0x1b1/0xc40 [ 60.183900][ T3594] genl_rcv+0x24/0x40 [ 60.187956][ T3594] netlink_unicast+0x543/0x7f0 [ 60.192712][ T3594] ? netlink_attachskb+0x880/0x880 [ 60.197808][ T3594] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 60.204211][ T3594] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 60.210443][ T3594] ? __phys_addr_symbol+0x2c/0x70 [ 60.215460][ T3594] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 60.221443][ T3594] ? __check_object_size+0x16c/0x4f0 [ 60.226721][ T3594] netlink_sendmsg+0x904/0xe00 [ 60.231477][ T3594] ? netlink_unicast+0x7f0/0x7f0 [ 60.236425][ T3594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 60.242654][ T3594] ? netlink_unicast+0x7f0/0x7f0 [ 60.247666][ T3594] sock_sendmsg+0xcf/0x120 [ 60.252071][ T3594] ____sys_sendmsg+0x6e2/0x800 [ 60.257004][ T3594] ? kernel_sendmsg+0x50/0x50 [ 60.261845][ T3594] ? do_recvmmsg+0x6d0/0x6d0 [ 60.266424][ T3594] ? find_held_lock+0x2d/0x110 [ 60.271182][ T3594] ? __might_fault+0xd1/0x170 [ 60.275854][ T3594] ? lock_downgrade+0x6e0/0x6e0 [ 60.280698][ T3594] ___sys_sendmsg+0xf3/0x170 [ 60.285282][ T3594] ? sendmsg_copy_msghdr+0x160/0x160 [ 60.290758][ T3594] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 60.296731][ T3594] ? get_user_ifreq+0x250/0x250 [ 60.301573][ T3594] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 60.307555][ T3594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 60.313784][ T3594] ? __fget_light+0x20f/0x270 [ 60.318452][ T3594] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 60.324679][ T3594] __sys_sendmsg+0xe5/0x1b0 [ 60.329176][ T3594] ? __sys_sendmsg_sock+0x30/0x30 [ 60.334197][ T3594] ? syscall_enter_from_user_mode+0x21/0x70 [ 60.340081][ T3594] do_syscall_64+0x35/0xb0 [ 60.344516][ T3594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.351544][ T3594] RIP: 0033:0x7f13f3bfeaa9 [ 60.356001][ T3594] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.377414][ T3594] RSP: 002b:00007ffeaaaa6888 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.386349][ T3594] RAX: ffffffffffffffda RBX: 00007f13f3c783a0 RCX: 00007f13f3bfeaa9 [ 60.394567][ T3594] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 60.402610][ T3594] RBP: 0000000000000003 R08: 0000000c00000000 R09: 0000000c00000000 [ 60.410667][ T3594] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000000031 [ 60.418811][ T3594] R13: 00007ffeaaaa68d0 R14: 00007ffeaaaa68ba R15: 00007f13f3c78410 [ 60.426797][ T3594] [ 60.429979][ T3594] Kernel Offset: disabled [ 60.434590][ T3594] Rebooting in 86400 seconds..