Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. syzkaller login: [ 53.720334][ T8484] IPVS: ftp: loaded support on port[0] = 21 [ 53.794180][ T3344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.811223][ T3344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 53.839980][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.857319][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.870517][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.881293][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.893471][ T8484] syz-executor187 uses obsolete (PF_INET,SOCK_PACKET) [ 53.910460][ T8484] ------------[ cut here ]------------ [ 53.916536][ T8484] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 53.924159][ T8484] WARNING: CPU: 1 PID: 8484 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4f3/0x5f0 [ 53.935892][ T8484] Modules linked in: [ 53.939898][ T8484] CPU: 0 PID: 8484 Comm: syz-executor187 Not tainted 5.11.0-rc4-syzkaller #0 [ 53.949658][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.960386][ T8484] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 53.966592][ T8484] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 65 e7 26 f9 e8 60 e7 26 f9 8b 54 24 04 48 89 ee 48 c7 c7 c0 c1 62 8a e8 61 fb 6c 00 <0f> 0b e9 dd fd ff ff e8 41 e7 26 f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 53.987271][ T8484] RSP: 0018:ffffc9000188f508 EFLAGS: 00010286 [ 53.993335][ T8484] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 54.001394][ T8484] RDX: ffff888020c4b780 RSI: ffffffff815b6bc5 RDI: fffff52000311e93 [ 54.009520][ T8484] RBP: ffff8880231f0000 R08: 0000000000000000 R09: 0000000000000000 [ 54.017563][ T8484] R10: ffffffff815afd9e R11: 0000000000000000 R12: ffff8880231f0bc0 [ 54.025607][ T8484] R13: 0000000002000000 R14: ffff8880231f1de0 R15: ffff8880231f1dd8 [ 54.033609][ T8484] FS: 0000000000cde880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 54.042590][ T8484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.049424][ T8484] CR2: 0000000020001000 CR3: 0000000013ef6000 CR4: 0000000000350ef0 [ 54.057651][ T8484] Call Trace: [ 54.060950][ T8484] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 54.067094][ T8484] ieee80211_set_mcast_rate+0x37/0x40 [ 54.072514][ T8484] ? ieee80211_get_mesh_config+0x30/0x30 [ 54.078485][ T8484] nl80211_set_mcast_rate+0x317/0x610 [ 54.085341][ T8484] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 54.092225][ T8484] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 54.098997][ T8484] ? nl80211_pre_doit+0xa2/0x630 [ 54.104307][ T8484] genl_family_rcv_msg_doit+0x228/0x320 [ 54.110422][ T8484] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 54.118014][ T8484] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.125180][ T8484] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.131453][ T8484] ? ns_capable+0xde/0x100 [ 54.136627][ T8484] genl_rcv_msg+0x328/0x580 [ 54.141313][ T8484] ? genl_get_cmd+0x480/0x480 [ 54.146068][ T8484] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 54.153033][ T8484] ? lock_release+0x710/0x710 [ 54.158156][ T8484] netlink_rcv_skb+0x153/0x420 [ 54.163032][ T8484] ? genl_get_cmd+0x480/0x480 [ 54.167785][ T8484] ? netlink_ack+0xaa0/0xaa0 [ 54.172387][ T8484] genl_rcv+0x24/0x40 [ 54.176512][ T8484] netlink_unicast+0x533/0x7d0 [ 54.181300][ T8484] ? netlink_attachskb+0x870/0x870 [ 54.186458][ T8484] ? _copy_from_iter_full+0x275/0x850 [ 54.192290][ T8484] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.198972][ T8484] ? __phys_addr_symbol+0x2c/0x70 [ 54.204439][ T8484] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 54.211224][ T8484] ? __check_object_size+0x171/0x3f0 [ 54.216586][ T8484] netlink_sendmsg+0x856/0xd90 [ 54.221359][ T8484] ? netlink_unicast+0x7d0/0x7d0 [ 54.226351][ T8484] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.232604][ T8484] ? netlink_unicast+0x7d0/0x7d0 [ 54.237596][ T8484] sock_sendmsg+0xcf/0x120 [ 54.242029][ T8484] ____sys_sendmsg+0x6e8/0x810 [ 54.247668][ T8484] ? kernel_sendmsg+0x50/0x50 [ 54.252532][ T8484] ? do_recvmmsg+0x6c0/0x6c0 [ 54.258003][ T8484] ? find_held_lock+0x2d/0x110 [ 54.263790][ T8484] ___sys_sendmsg+0xf3/0x170 [ 54.268654][ T8484] ? sendmsg_copy_msghdr+0x160/0x160 [ 54.274339][ T8484] ? _copy_to_user+0xdc/0x150 [ 54.279878][ T8484] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.286991][ T8484] ? sock_do_ioctl+0x168/0x2d0 [ 54.292163][ T8484] ? compat_ifr_data_ioctl+0x150/0x150 [ 54.298500][ T8484] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 54.304414][ T8484] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.310896][ T8484] ? __fget_light+0x215/0x280 [ 54.315635][ T8484] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.322435][ T8484] __sys_sendmsg+0xe5/0x1b0 [ 54.327023][ T8484] ? __sys_sendmsg_sock+0xb0/0xb0 [ 54.332082][ T8484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 54.338100][ T8484] do_syscall_64+0x2d/0x70 [ 54.342622][ T8484] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.348613][ T8484] RIP: 0033:0x4417b9 [ 54.352605][ T8484] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.373006][ T8484] RSP: 002b:00007ffe5727e1e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.381979][ T8484] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004417b9 [ 54.390656][ T8484] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 54.398728][ T8484] RBP: 000000306e616c77 R08: 0000002100000000 R09: 0000002100000000 [ 54.407140][ T8484] R10: 0000002100000000 R11: 0000000000000246 R12: 0000000000000032 [ 54.415369][ T8484] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 54.423380][ T8484] Kernel panic - not syncing: panic_on_warn set ... [ 54.430492][ T8484] CPU: 0 PID: 8484 Comm: syz-executor187 Not tainted 5.11.0-rc4-syzkaller #0 [ 54.440235][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.451692][ T8484] Call Trace: [ 54.454968][ T8484] dump_stack+0x107/0x163 [ 54.459286][ T8484] panic+0x306/0x73d [ 54.463160][ T8484] ? __warn_printk+0xf3/0xf3 [ 54.467748][ T8484] ? __warn.cold+0x1a/0x44 [ 54.472149][ T8484] ? drv_bss_info_changed+0x4f3/0x5f0 [ 54.477504][ T8484] __warn.cold+0x35/0x44 [ 54.481742][ T8484] ? wake_up_klogd.part.0+0x8e/0xd0 [ 54.486940][ T8484] ? drv_bss_info_changed+0x4f3/0x5f0 [ 54.492295][ T8484] report_bug+0x1bd/0x210 [ 54.496623][ T8484] handle_bug+0x3c/0x60 [ 54.500776][ T8484] exc_invalid_op+0x14/0x40 [ 54.505276][ T8484] asm_exc_invalid_op+0x12/0x20 [ 54.510315][ T8484] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 54.516759][ T8484] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 65 e7 26 f9 e8 60 e7 26 f9 8b 54 24 04 48 89 ee 48 c7 c7 c0 c1 62 8a e8 61 fb 6c 00 <0f> 0b e9 dd fd ff ff e8 41 e7 26 f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 54.536381][ T8484] RSP: 0018:ffffc9000188f508 EFLAGS: 00010286 [ 54.542457][ T8484] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 54.550415][ T8484] RDX: ffff888020c4b780 RSI: ffffffff815b6bc5 RDI: fffff52000311e93 [ 54.558376][ T8484] RBP: ffff8880231f0000 R08: 0000000000000000 R09: 0000000000000000 [ 54.566885][ T8484] R10: ffffffff815afd9e R11: 0000000000000000 R12: ffff8880231f0bc0 [ 54.575302][ T8484] R13: 0000000002000000 R14: ffff8880231f1de0 R15: ffff8880231f1dd8 [ 54.583270][ T8484] ? wake_up_klogd.part.0+0x8e/0xd0 [ 54.588485][ T8484] ? vprintk_func+0x95/0x1e0 [ 54.593751][ T8484] ? drv_bss_info_changed+0x4f3/0x5f0 [ 54.599585][ T8484] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 54.605635][ T8484] ieee80211_set_mcast_rate+0x37/0x40 [ 54.611005][ T8484] ? ieee80211_get_mesh_config+0x30/0x30 [ 54.616632][ T8484] nl80211_set_mcast_rate+0x317/0x610 [ 54.622082][ T8484] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 54.628668][ T8484] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 54.635084][ T8484] ? nl80211_pre_doit+0xa2/0x630 [ 54.640278][ T8484] genl_family_rcv_msg_doit+0x228/0x320 [ 54.646026][ T8484] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 54.653377][ T8484] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.659605][ T8484] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.665841][ T8484] ? ns_capable+0xde/0x100 [ 54.670244][ T8484] genl_rcv_msg+0x328/0x580 [ 54.674730][ T8484] ? genl_get_cmd+0x480/0x480 [ 54.679402][ T8484] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 54.686164][ T8484] ? lock_release+0x710/0x710 [ 54.690837][ T8484] netlink_rcv_skb+0x153/0x420 [ 54.695595][ T8484] ? genl_get_cmd+0x480/0x480 [ 54.700268][ T8484] ? netlink_ack+0xaa0/0xaa0 [ 54.704947][ T8484] genl_rcv+0x24/0x40 [ 54.708939][ T8484] netlink_unicast+0x533/0x7d0 [ 54.713794][ T8484] ? netlink_attachskb+0x870/0x870 [ 54.719148][ T8484] ? _copy_from_iter_full+0x275/0x850 [ 54.724520][ T8484] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.730756][ T8484] ? __phys_addr_symbol+0x2c/0x70 [ 54.735862][ T8484] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 54.741574][ T8484] ? __check_object_size+0x171/0x3f0 [ 54.746864][ T8484] netlink_sendmsg+0x856/0xd90 [ 54.751611][ T8484] ? netlink_unicast+0x7d0/0x7d0 [ 54.756544][ T8484] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.762887][ T8484] ? netlink_unicast+0x7d0/0x7d0 [ 54.767991][ T8484] sock_sendmsg+0xcf/0x120 [ 54.772476][ T8484] ____sys_sendmsg+0x6e8/0x810 [ 54.777221][ T8484] ? kernel_sendmsg+0x50/0x50 [ 54.781875][ T8484] ? do_recvmmsg+0x6c0/0x6c0 [ 54.786634][ T8484] ? find_held_lock+0x2d/0x110 [ 54.791395][ T8484] ___sys_sendmsg+0xf3/0x170 [ 54.796066][ T8484] ? sendmsg_copy_msghdr+0x160/0x160 [ 54.802309][ T8484] ? _copy_to_user+0xdc/0x150 [ 54.807073][ T8484] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.813311][ T8484] ? sock_do_ioctl+0x168/0x2d0 [ 54.818407][ T8484] ? compat_ifr_data_ioctl+0x150/0x150 [ 54.823868][ T8484] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 54.829745][ T8484] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.835966][ T8484] ? __fget_light+0x215/0x280 [ 54.840634][ T8484] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.846956][ T8484] __sys_sendmsg+0xe5/0x1b0 [ 54.851440][ T8484] ? __sys_sendmsg_sock+0xb0/0xb0 [ 54.856884][ T8484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 54.862761][ T8484] do_syscall_64+0x2d/0x70 [ 54.867259][ T8484] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.873166][ T8484] RIP: 0033:0x4417b9 [ 54.877399][ T8484] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.897002][ T8484] RSP: 002b:00007ffe5727e1e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.905395][ T8484] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004417b9 [ 54.913345][ T8484] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 54.921296][ T8484] RBP: 000000306e616c77 R08: 0000002100000000 R09: 0000002100000000 [ 54.929261][ T8484] R10: 0000002100000000 R11: 0000000000000246 R12: 0000000000000032 [ 54.937311][ T8484] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 54.949010][ T8484] Kernel Offset: disabled [ 54.953397][ T8484] Rebooting in 86400 seconds..