[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts. syzkaller login: [ 71.569310][ T6877] IPVS: ftp: loaded support on port[0] = 21 [ 71.650406][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.667398][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.679933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.690459][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 71.700355][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.728076][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.868755][ T6917] syz-executor686 uses obsolete (PF_INET,SOCK_PACKET) [ 71.879150][ T6917] ------------[ cut here ]------------ [ 71.884774][ T6917] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 71.915280][ T6917] WARNING: CPU: 0 PID: 6917 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x560/0x660 [ 71.926678][ T6917] Kernel panic - not syncing: panic_on_warn set ... [ 71.933303][ T6917] CPU: 1 PID: 6917 Comm: syz-executor686 Not tainted 5.9.0-rc7-syzkaller #0 [ 71.942009][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.952054][ T6917] Call Trace: [ 71.955334][ T6917] dump_stack+0x198/0x1fd [ 71.959652][ T6917] panic+0x382/0x7fb [ 71.963529][ T6917] ? __warn_printk+0xf3/0xf3 [ 71.968107][ T6917] ? drv_bss_info_changed+0x560/0x660 [ 71.973461][ T6917] ? tomoyo_print_entry+0xfd0/0x4620 [ 71.978727][ T6917] ? __warn.cold+0x5/0x4b [ 71.983036][ T6917] ? __warn+0xd6/0x1f2 [ 71.987088][ T6917] ? drv_bss_info_changed+0x560/0x660 [ 71.992453][ T6917] __warn.cold+0x20/0x4b [ 71.996682][ T6917] ? drv_bss_info_changed+0x560/0x660 [ 72.002033][ T6917] report_bug+0x1bd/0x210 [ 72.006370][ T6917] handle_bug+0x38/0x90 [ 72.010718][ T6917] ? __warn_printk+0xc6/0xf3 [ 72.015302][ T6917] exc_invalid_op+0x14/0x40 [ 72.019803][ T6917] asm_exc_invalid_op+0x12/0x20 [ 72.024663][ T6917] RIP: 0010:drv_bss_info_changed+0x560/0x660 [ 72.030625][ T6917] Code: ab 40 06 00 00 48 85 ed 0f 84 99 00 00 00 e8 a7 3e b8 f9 e8 a2 3e b8 f9 44 89 fa 48 89 ee 48 c7 c7 40 dd 5e 89 e8 12 7c 88 f9 <0f> 0b e9 6b fd ff ff e8 84 3e b8 f9 0f 0b e9 ac fc ff ff e8 38 14 [ 72.050225][ T6917] RSP: 0018:ffffc900054875c0 EFLAGS: 00010286 [ 72.056270][ T6917] RAX: 0000000000000000 RBX: ffff888088990c00 RCX: 0000000000000000 [ 72.064220][ T6917] RDX: ffff8880918184c0 RSI: ffffffff815f59d5 RDI: fffff52000a90eaa [ 72.072174][ T6917] RBP: ffff888088990000 R08: 0000000000000001 R09: ffff8880ae4318e7 [ 72.080148][ T6917] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000002000000 [ 72.088100][ T6917] R13: ffff888088991e10 R14: 0000000000000000 R15: 0000000000000004 [ 72.096080][ T6917] ? vprintk_func+0x95/0x1d4 [ 72.100681][ T6917] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 72.106727][ T6917] ieee80211_set_mcast_rate+0x37/0x40 [ 72.112074][ T6917] ? ieee80211_set_wds_peer+0x30/0x30 [ 72.117422][ T6917] nl80211_set_mcast_rate+0x387/0x6c0 [ 72.122788][ T6917] ? nl80211_tdls_cancel_channel_switch+0x630/0x630 [ 72.129359][ T6917] ? nl80211_pre_doit+0xa2/0x630 [ 72.134277][ T6917] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 72.141033][ T6917] genl_rcv_msg+0x61d/0x980 [ 72.145521][ T6917] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 72.152461][ T6917] ? lock_release+0x8f0/0x8f0 [ 72.157120][ T6917] netlink_rcv_skb+0x15a/0x430 [ 72.161864][ T6917] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 72.168785][ T6917] ? netlink_ack+0xa10/0xa10 [ 72.173363][ T6917] ? __kmalloc_node_track_caller+0x38/0x60 [ 72.179517][ T6917] genl_rcv+0x24/0x40 [ 72.183507][ T6917] netlink_unicast+0x533/0x7d0 [ 72.188299][ T6917] ? netlink_attachskb+0x810/0x810 [ 72.193412][ T6917] ? __phys_addr_symbol+0x2c/0x70 [ 72.198417][ T6917] ? __check_object_size+0x171/0x3e4 [ 72.203705][ T6917] netlink_sendmsg+0x856/0xd90 [ 72.208470][ T6917] ? netlink_unicast+0x7d0/0x7d0 [ 72.213400][ T6917] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 72.218663][ T6917] ? netlink_unicast+0x7d0/0x7d0 [ 72.223578][ T6917] sock_sendmsg+0xcf/0x120 [ 72.227975][ T6917] ____sys_sendmsg+0x6e8/0x810 [ 72.232735][ T6917] ? kernel_sendmsg+0x50/0x50 [ 72.237407][ T6917] ? do_recvmmsg+0x6d0/0x6d0 [ 72.241994][ T6917] ? lock_is_held_type+0xbb/0xf0 [ 72.246913][ T6917] ? find_held_lock+0x2d/0x110 [ 72.251656][ T6917] ? __might_fault+0x11f/0x1d0 [ 72.256400][ T6917] ___sys_sendmsg+0xf3/0x170 [ 72.260983][ T6917] ? sendmsg_copy_msghdr+0x160/0x160 [ 72.266263][ T6917] ? __might_fault+0x190/0x1d0 [ 72.271007][ T6917] ? _copy_to_user+0x126/0x160 [ 72.275765][ T6917] ? sock_do_ioctl+0x168/0x2d0 [ 72.280527][ T6917] ? compat_ifr_data_ioctl+0x150/0x150 [ 72.285980][ T6917] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 72.291861][ T6917] ? __fget_light+0x215/0x280 [ 72.296521][ T6917] __sys_sendmsg+0xe5/0x1b0 [ 72.301003][ T6917] ? __sys_sendmsg_sock+0xb0/0xb0 [ 72.306008][ T6917] ? lock_is_held_type+0xbb/0xf0 [ 72.310932][ T6917] ? check_preemption_disabled+0x50/0x130 [ 72.316652][ T6917] ? syscall_enter_from_user_mode+0x1d/0x60 [ 72.322527][ T6917] do_syscall_64+0x2d/0x70 [ 72.326924][ T6917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.332791][ T6917] RIP: 0033:0x442039 [ 72.336665][ T6917] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 72.356248][ T6917] RSP: 002b:00007ffff85406a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.364637][ T6917] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000442039 [ 72.372587][ T6917] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 72.380537][ T6917] RBP: 0000000000000000 R08: 0000002000000000 R09: 0000002000000000 [ 72.388486][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 72.396450][ T6917] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 72.405927][ T6917] Kernel Offset: disabled [ 72.410445][ T6917] Rebooting in 86400 seconds..