Warning: Permanently added '10.128.0.79' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.262422][ T5931] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.264302][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 35.541788][ T5946] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.543955][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 35.547306][ T5946] ------------[ cut here ]------------ [ 35.548678][ T5946] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 35.550895][ T5946] WARNING: CPU: 0 PID: 5946 at net/mac80211/main.c:235 ieee80211_bss_info_change_notify+0x574/0xbc0 [ 35.553299][ T5946] Modules linked in: [ 35.554095][ T5946] CPU: 0 PID: 5946 Comm: syz-executor331 Not tainted 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0 [ 35.556222][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 35.558469][ T5946] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 35.560202][ T5946] pc : ieee80211_bss_info_change_notify+0x574/0xbc0 [ 35.561632][ T5946] lr : ieee80211_bss_info_change_notify+0x574/0xbc0 [ 35.563139][ T5946] sp : ffff80001e546f30 [ 35.563984][ T5946] x29: ffff80001e546f40 x28: 1fffe00019d87b53 x27: dfff800000000000 [ 35.565734][ T5946] x26: 1fffe00019d87ab0 x25: ffff0000cec3d580 x24: 0000000000000000 [ 35.567482][ T5946] x23: 0000000000000000 x22: ffff0000cec3e768 x21: 0000000000400000 [ 35.569168][ T5946] x20: ffff0000cec3cc80 x19: ffff800018986000 x18: 1fffe0003684a5b6 [ 35.570913][ T5946] x17: ffff800015d6d000 x16: ffff8000083030dc x15: 0000000000000002 [ 35.572628][ T5946] x14: 1ffff00002bae0b0 x13: dfff800000000000 x12: 0000000000000003 [ 35.574331][ T5946] x11: 0000000000000001 x10: 0000000000000003 x9 : a0a59a5177c59100 [ 35.576145][ T5946] x8 : a0a59a5177c59100 x7 : ffff80000827ece4 x6 : 0000000000000000 [ 35.577959][ T5946] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 35.579676][ T5946] x2 : 0000000000000006 x1 : ffff8000124cbac0 x0 : ffff80019e594000 [ 35.581443][ T5946] Call trace: [ 35.582159][ T5946] ieee80211_bss_info_change_notify+0x574/0xbc0 [ 35.583474][ T5946] ieee80211_ocb_leave+0x21c/0x2dc [ 35.584592][ T5946] ieee80211_leave_ocb+0x20/0x30 [ 35.585714][ T5946] __cfg80211_leave_ocb+0x218/0x730 [ 35.586834][ T5946] cfg80211_leave_ocb+0x5c/0xa0 [ 35.587861][ T5946] cfg80211_change_iface+0x51c/0x1408 [ 35.589001][ T5946] nl80211_set_interface+0x3f8/0x6f0 [ 35.590127][ T5946] genl_rcv_msg+0x938/0xc1c [ 35.591056][ T5946] netlink_rcv_skb+0x214/0x3c4 [ 35.592145][ T5946] genl_rcv+0x38/0x50 [ 35.592989][ T5946] netlink_unicast+0x660/0x8d4 [ 35.594092][ T5946] netlink_sendmsg+0x834/0xb18 [ 35.595146][ T5946] ____sys_sendmsg+0x568/0x81c [ 35.596261][ T5946] __sys_sendmsg+0x26c/0x33c [ 35.597285][ T5946] __arm64_sys_sendmsg+0x80/0x94 [ 35.598357][ T5946] invoke_syscall+0x98/0x2c0 [ 35.599404][ T5946] el0_svc_common+0x138/0x258 [ 35.600402][ T5946] do_el0_svc+0x64/0x198 [ 35.601299][ T5946] el0_svc+0x4c/0x15c [ 35.602134][ T5946] el0t_64_sync_handler+0x84/0xf0 [ 35.603237][ T5946] el0t_64_sync+0x190/0x194 [ 35.604275][ T5946] irq event stamp: 998 [ 35.605112][ T5946] hardirqs last enabled at (997): [] finish_lock_switch+0xbc/0x1e4 [ 35.607174][ T5946] hardirqs last disabled at (998): [] el1_dbg+0x24/0x80 [ 35.609013][ T5946] softirqs last enabled at (972): [] ieee80211_ocb_leave+0x1d0/0x2dc [ 35.611155][ T5946] softirqs last disabled at (970): [] ieee80211_ocb_leave+0x7c/0x2dc [ 35.613199][ T5946] ---[ end trace 0000000000000000 ]--- [ 35.625470][ T5955] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.627299][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 35.637770][ T5956] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.639646][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 35.649950][ T5959] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.651755][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 35.665306][ T5960] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.667125][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 35.679661][ T5962] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.681523][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 35.692032][ T5964] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.693969][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 35.706375][ T5965] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.708140][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 35.721414][ T5967] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 35.723139][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.268755][ T6796] validate_nla: 531 callbacks suppressed [ 40.268768][ T6796] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.271739][ T6796] __nla_validate_parse: 531 callbacks suppressed [ 40.271748][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.282325][ T6797] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.284147][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.296079][ T6798] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.297889][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.306651][ T6799] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.308356][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.316851][ T6800] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.318772][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.327895][ T6801] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.329789][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.338846][ T6802] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.340631][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.349740][ T6803] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.351454][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.360315][ T6804] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.362116][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 40.374493][ T6805] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 40.376621][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.276278][ T7455] validate_nla: 649 callbacks suppressed [ 45.276292][ T7455] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.279426][ T7455] __nla_validate_parse: 649 callbacks suppressed [ 45.279435][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.289486][ T7456] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.291331][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.301417][ T7457] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.303205][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.312509][ T7458] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.314346][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.323662][ T7459] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.325580][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.334319][ T7460] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.338206][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.347357][ T7461] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.349162][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.358374][ T7462] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.360169][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.369616][ T7463] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.371419][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'. [ 45.380229][ T7464] netlink: 'syz-executor331': attribute type 27 has an invalid length. [ 45.382059][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor331'.