Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. executing program [ 34.277572][ T5967] netlink: 'syz-executor254': attribute type 27 has an invalid length. [ 34.505912][ T5967] ------------[ cut here ]------------ [ 34.507381][ T5967] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 34.509704][ T5967] WARNING: CPU: 1 PID: 5967 at net/mac80211/main.c:236 ieee80211_bss_info_change_notify+0x574/0xbc0 [ 34.512496][ T5967] Modules linked in: [ 34.513457][ T5967] CPU: 1 PID: 5967 Comm: syz-executor254 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 34.516038][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 34.518556][ T5967] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 34.520589][ T5967] pc : ieee80211_bss_info_change_notify+0x574/0xbc0 [ 34.522296][ T5967] lr : ieee80211_bss_info_change_notify+0x574/0xbc0 [ 34.523944][ T5967] sp : ffff80001e5370f0 [ 34.525009][ T5967] x29: ffff80001e537100 x28: 1fffe00019609353 x27: dfff800000000000 [ 34.527073][ T5967] x26: 1fffe000196092b0 x25: ffff0000cb049580 x24: 0000000000000000 [ 34.529071][ T5967] x23: 0000000000000000 x22: ffff0000cb04a918 x21: 0000000000400000 [ 34.531078][ T5967] x20: ffff0000cb048c80 x19: ffff800018b03000 x18: ffff80001e5365e0 [ 34.533226][ T5967] x17: 0000000000000000 x16: ffff8000124340b0 x15: 0000000000000002 [ 34.535336][ T5967] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 [ 34.537309][ T5967] x11: 0000000000000000 x10: 0000000000000000 x9 : 24ca5bcfc14a3a00 [ 34.539358][ T5967] x8 : 24ca5bcfc14a3a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 34.541361][ T5967] x5 : ffff80001e5369d8 x4 : ffff800015f9e800 x3 : ffff800008596160 [ 34.543492][ T5967] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 34.545509][ T5967] Call trace: [ 34.546324][ T5967] ieee80211_bss_info_change_notify+0x574/0xbc0 [ 34.547943][ T5967] ieee80211_ocb_leave+0x21c/0x2dc [ 34.549227][ T5967] ieee80211_leave_ocb+0x20/0x30 [ 34.550468][ T5967] __cfg80211_leave_ocb+0x218/0x730 [ 34.551830][ T5967] cfg80211_leave_ocb+0x5c/0xa0 [ 34.553127][ T5967] cfg80211_change_iface+0x51c/0x1408 [ 34.554521][ T5967] nl80211_set_interface+0x3f8/0x6f0 [ 34.555836][ T5967] genl_rcv_msg+0x938/0xc1c [ 34.556979][ T5967] netlink_rcv_skb+0x214/0x3c4 [ 34.558169][ T5967] genl_rcv+0x38/0x50 [ 34.559232][ T5967] netlink_unicast+0x660/0x8d4 [ 34.560488][ T5967] netlink_sendmsg+0x834/0xb18 [ 34.561694][ T5967] __sys_sendto+0x3b4/0x538 [ 34.562845][ T5967] __arm64_sys_sendto+0xd8/0xf8 [ 34.564079][ T5967] invoke_syscall+0x98/0x2c0 [ 34.565323][ T5967] el0_svc_common+0x138/0x258 [ 34.566594][ T5967] do_el0_svc+0x64/0x198 [ 34.567692][ T5967] el0_svc+0x4c/0x15c [ 34.568735][ T5967] el0t_64_sync_handler+0x84/0xf0 [ 34.569984][ T5967] el0t_64_sync+0x190/0x194 [ 34.571172][ T5967] irq event stamp: 35266 [ 34.572252][ T5967] hardirqs last enabled at (35265): [] __up_console_sem+0x60/0xb4 [ 34.574711][ T5967] hardirqs last disabled at (35266): [] el1_dbg+0x24/0x80 [ 34.577000][ T5967] softirqs last enabled at (35244): [] ieee80211_ocb_leave+0x1d0/0x2dc [ 34.579621][ T5967] softirqs last disabled at (35242): [] ieee80211_ocb_leave+0x7c/0x2dc [ 34.582173][ T5967] ---[ end trace 0000000000000000 ]---