Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts. syzkaller login: [ 79.281522][ T8448] IPVS: ftp: loaded support on port[0] = 21 [ 79.355233][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.392658][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 79.402363][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.411519][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.423158][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.442139][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.477873][ T8448] ------------[ cut here ]------------ [ 79.483528][ T8448] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 79.492653][ T8448] WARNING: CPU: 1 PID: 8448 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4f3/0x5f0 [ 79.503623][ T8448] Modules linked in: [ 79.509365][ T8448] CPU: 1 PID: 8448 Comm: syz-executor058 Not tainted 5.11.0-rc1-syzkaller #0 [ 79.518565][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.528740][ T8448] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 79.534762][ T8448] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 65 f4 2b f9 e8 60 f4 2b f9 8b 54 24 04 48 89 ee 48 c7 c7 c0 e3 61 8a e8 64 79 6c 00 <0f> 0b e9 dd fd ff ff e8 41 f4 2b f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 79.554658][ T8448] RSP: 0018:ffffc9000175f508 EFLAGS: 00010286 [ 79.560922][ T8448] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 79.569024][ T8448] RDX: ffff888011643780 RSI: ffffffff815b2b45 RDI: fffff520002ebe93 [ 79.577130][ T8448] RBP: ffff888011f48000 R08: 0000000000000000 R09: 0000000000000000 [ 79.585117][ T8448] R10: ffffffff815abd1e R11: 0000000000000000 R12: ffff888011f48bc0 [ 79.593608][ T8448] R13: 0000000002000000 R14: ffff888011f49de0 R15: ffff888011f49dd8 [ 79.601661][ T8448] FS: 0000000000aed880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 79.610779][ T8448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.617510][ T8448] CR2: 0000000020000340 CR3: 000000001a309000 CR4: 0000000000350ee0 [ 79.625630][ T8448] Call Trace: [ 79.629905][ T8448] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 79.636178][ T8448] ieee80211_set_mcast_rate+0x37/0x40 [ 79.641700][ T8448] ? ieee80211_get_mesh_config+0x30/0x30 [ 79.647413][ T8448] nl80211_set_mcast_rate+0x317/0x610 [ 79.652978][ T8448] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 79.659630][ T8448] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 79.666018][ T8448] ? nl80211_pre_doit+0xa2/0x630 [ 79.670954][ T8448] genl_family_rcv_msg_doit+0x228/0x320 [ 79.676575][ T8448] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 79.683988][ T8448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 79.690681][ T8448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 79.697202][ T8448] ? ns_capable+0xde/0x100 [ 79.701743][ T8448] genl_rcv_msg+0x328/0x580 [ 79.706403][ T8448] ? genl_get_cmd+0x480/0x480 [ 79.711118][ T8448] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 79.718219][ T8448] ? lock_release+0x710/0x710 [ 79.722950][ T8448] netlink_rcv_skb+0x153/0x420 [ 79.727858][ T8448] ? genl_get_cmd+0x480/0x480 [ 79.732567][ T8448] ? netlink_ack+0xaa0/0xaa0 [ 79.737306][ T8448] genl_rcv+0x24/0x40 [ 79.741434][ T8448] netlink_unicast+0x533/0x7d0 [ 79.746343][ T8448] ? netlink_attachskb+0x870/0x870 [ 79.751510][ T8448] ? _copy_from_iter_full+0x275/0x850 [ 79.757143][ T8448] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 79.763609][ T8448] ? __phys_addr_symbol+0x2c/0x70 [ 79.768811][ T8448] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 79.774585][ T8448] ? __check_object_size+0x171/0x3f0 [ 79.780028][ T8448] netlink_sendmsg+0x856/0xd90 [ 79.784860][ T8448] ? netlink_unicast+0x7d0/0x7d0 [ 79.789968][ T8448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 79.796301][ T8448] ? netlink_unicast+0x7d0/0x7d0 [ 79.801265][ T8448] sock_sendmsg+0xcf/0x120 [ 79.805820][ T8448] ____sys_sendmsg+0x6e8/0x810 [ 79.810619][ T8448] ? kernel_sendmsg+0x50/0x50 [ 79.815373][ T8448] ? do_recvmmsg+0x6c0/0x6c0 [ 79.820100][ T8448] ? find_held_lock+0x2d/0x110 [ 79.824859][ T8448] ___sys_sendmsg+0xf3/0x170 [ 79.829558][ T8448] ? sendmsg_copy_msghdr+0x160/0x160 [ 79.834891][ T8448] ? _copy_to_user+0xdc/0x150 [ 79.839650][ T8448] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 79.846010][ T8448] ? sock_do_ioctl+0x168/0x2d0 [ 79.850806][ T8448] ? compat_ifr_data_ioctl+0x150/0x150 [ 79.856345][ T8448] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 79.862278][ T8448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 79.868641][ T8448] ? __fget_light+0x215/0x280 [ 79.873543][ T8448] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 79.879926][ T8448] __sys_sendmsg+0xe5/0x1b0 [ 79.884459][ T8448] ? __sys_sendmsg_sock+0xb0/0xb0 [ 79.889633][ T8448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 79.895711][ T8448] do_syscall_64+0x2d/0x70 [ 79.900140][ T8448] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 79.906153][ T8448] RIP: 0033:0x441789 [ 79.910052][ T8448] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 79.930069][ T8448] RSP: 002b:00007ffd4741b308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.938690][ T8448] RAX: ffffffffffffffda RBX: 00007ffd4741b330 RCX: 0000000000441789 [ 79.946796][ T8448] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 79.954872][ T8448] RBP: 0000000000000003 R08: 0000002100000000 R09: 0000002100000000 [ 79.962953][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 79.971094][ T8448] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 79.979224][ T8448] Kernel panic - not syncing: panic_on_warn set ... [ 79.985832][ T8448] CPU: 1 PID: 8448 Comm: syz-executor058 Not tainted 5.11.0-rc1-syzkaller #0 [ 79.994588][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.004666][ T8448] Call Trace: [ 80.007969][ T8448] dump_stack+0x107/0x163 [ 80.012333][ T8448] panic+0x306/0x73d [ 80.016518][ T8448] ? __warn_printk+0xf3/0xf3 [ 80.021106][ T8448] ? __warn.cold+0x1a/0x44 [ 80.025520][ T8448] ? drv_bss_info_changed+0x4f3/0x5f0 [ 80.030890][ T8448] __warn.cold+0x35/0x44 [ 80.035135][ T8448] ? wake_up_klogd.part.0+0x8e/0xd0 [ 80.040371][ T8448] ? drv_bss_info_changed+0x4f3/0x5f0 [ 80.045743][ T8448] report_bug+0x1bd/0x210 [ 80.050120][ T8448] handle_bug+0x3c/0x60 [ 80.054262][ T8448] exc_invalid_op+0x14/0x40 [ 80.058762][ T8448] asm_exc_invalid_op+0x12/0x20 [ 80.063607][ T8448] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 80.069572][ T8448] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 65 f4 2b f9 e8 60 f4 2b f9 8b 54 24 04 48 89 ee 48 c7 c7 c0 e3 61 8a e8 64 79 6c 00 <0f> 0b e9 dd fd ff ff e8 41 f4 2b f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 80.089350][ T8448] RSP: 0018:ffffc9000175f508 EFLAGS: 00010286 [ 80.095413][ T8448] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 80.103369][ T8448] RDX: ffff888011643780 RSI: ffffffff815b2b45 RDI: fffff520002ebe93 [ 80.111355][ T8448] RBP: ffff888011f48000 R08: 0000000000000000 R09: 0000000000000000 [ 80.119339][ T8448] R10: ffffffff815abd1e R11: 0000000000000000 R12: ffff888011f48bc0 [ 80.127304][ T8448] R13: 0000000002000000 R14: ffff888011f49de0 R15: ffff888011f49dd8 [ 80.135289][ T8448] ? wake_up_klogd.part.0+0x8e/0xd0 [ 80.140492][ T8448] ? vprintk_func+0x95/0x1e0 [ 80.145814][ T8448] ? drv_bss_info_changed+0x4f3/0x5f0 [ 80.151917][ T8448] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 80.157992][ T8448] ieee80211_set_mcast_rate+0x37/0x40 [ 80.163397][ T8448] ? ieee80211_get_mesh_config+0x30/0x30 [ 80.169034][ T8448] nl80211_set_mcast_rate+0x317/0x610 [ 80.174413][ T8448] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 80.181006][ T8448] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 80.187271][ T8448] ? nl80211_pre_doit+0xa2/0x630 [ 80.192204][ T8448] genl_family_rcv_msg_doit+0x228/0x320 [ 80.197748][ T8448] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 80.205117][ T8448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.211373][ T8448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.217625][ T8448] ? ns_capable+0xde/0x100 [ 80.222048][ T8448] genl_rcv_msg+0x328/0x580 [ 80.226579][ T8448] ? genl_get_cmd+0x480/0x480 [ 80.231253][ T8448] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 80.237854][ T8448] ? lock_release+0x710/0x710 [ 80.242533][ T8448] netlink_rcv_skb+0x153/0x420 [ 80.247322][ T8448] ? genl_get_cmd+0x480/0x480 [ 80.252022][ T8448] ? netlink_ack+0xaa0/0xaa0 [ 80.256628][ T8448] genl_rcv+0x24/0x40 [ 80.260627][ T8448] netlink_unicast+0x533/0x7d0 [ 80.265393][ T8448] ? netlink_attachskb+0x870/0x870 [ 80.270500][ T8448] ? _copy_from_iter_full+0x275/0x850 [ 80.275957][ T8448] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 80.282210][ T8448] ? __phys_addr_symbol+0x2c/0x70 [ 80.287234][ T8448] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 80.293062][ T8448] ? __check_object_size+0x171/0x3f0 [ 80.298541][ T8448] netlink_sendmsg+0x856/0xd90 [ 80.303312][ T8448] ? netlink_unicast+0x7d0/0x7d0 [ 80.308271][ T8448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.315176][ T8448] ? netlink_unicast+0x7d0/0x7d0 [ 80.320123][ T8448] sock_sendmsg+0xcf/0x120 [ 80.324535][ T8448] ____sys_sendmsg+0x6e8/0x810 [ 80.329290][ T8448] ? kernel_sendmsg+0x50/0x50 [ 80.333955][ T8448] ? do_recvmmsg+0x6c0/0x6c0 [ 80.338545][ T8448] ? find_held_lock+0x2d/0x110 [ 80.343326][ T8448] ___sys_sendmsg+0xf3/0x170 [ 80.347934][ T8448] ? sendmsg_copy_msghdr+0x160/0x160 [ 80.353224][ T8448] ? _copy_to_user+0xdc/0x150 [ 80.358002][ T8448] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 80.364285][ T8448] ? sock_do_ioctl+0x168/0x2d0 [ 80.369048][ T8448] ? compat_ifr_data_ioctl+0x150/0x150 [ 80.374515][ T8448] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 80.380502][ T8448] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.386760][ T8448] ? __fget_light+0x215/0x280 [ 80.391439][ T8448] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 80.397680][ T8448] __sys_sendmsg+0xe5/0x1b0 [ 80.402186][ T8448] ? __sys_sendmsg_sock+0xb0/0xb0 [ 80.407212][ T8448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 80.413109][ T8448] do_syscall_64+0x2d/0x70 [ 80.417535][ T8448] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 80.423427][ T8448] RIP: 0033:0x441789 [ 80.427330][ T8448] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 80.447075][ T8448] RSP: 002b:00007ffd4741b308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.455515][ T8448] RAX: ffffffffffffffda RBX: 00007ffd4741b330 RCX: 0000000000441789 [ 80.463752][ T8448] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 80.471739][ T8448] RBP: 0000000000000003 R08: 0000002100000000 R09: 0000002100000000 [ 80.479710][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 80.487697][ T8448] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 80.499646][ T8448] Kernel Offset: disabled [ 80.504106][ T8448] Rebooting in 86400 seconds..