Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts. executing program [ 42.061754][ T3498] netlink: 'syz-executor125': attribute type 27 has an invalid length. [ 42.187266][ T3498] ------------[ cut here ]------------ [ 42.193215][ T3498] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 42.201022][ T3498] WARNING: CPU: 0 PID: 3498 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x36d/0x540 [ 42.212613][ T3498] Modules linked in: [ 42.216516][ T3498] CPU: 0 PID: 3498 Comm: syz-executor125 Not tainted 5.15.118-syzkaller #0 [ 42.225479][ T3498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 42.236658][ T3498] RIP: 0010:ieee80211_bss_info_change_notify+0x36d/0x540 [ 42.244430][ T3498] Code: ef 25 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 60 0a 93 8b 4c 89 e6 89 ea e8 93 65 a8 f7 <0f> 0b e9 21 fd ff ff e8 17 93 dc f7 0f 0b e9 b0 fe ff ff e8 0b 93 [ 42.264217][ T3498] RSP: 0018:ffffc900020af400 EFLAGS: 00010246 [ 42.271011][ T3498] RAX: b470fd7d3d8f9600 RBX: ffff88801dcdd290 RCX: ffff88807a18bb80 [ 42.278967][ T3498] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 42.287049][ T3498] RBP: 0000000000000000 R08: ffffffff8166491c R09: ffffed10173467a0 [ 42.295492][ T3498] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801dcdc000 [ 42.303514][ T3498] R13: 0000000000400000 R14: dffffc0000000000 R15: ffff88801dcde298 [ 42.311507][ T3498] FS: 0000555557058300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 42.320578][ T3498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.327164][ T3498] CR2: 00005634c81f9131 CR3: 000000007d6f3000 CR4: 00000000003506e0 [ 42.335171][ T3498] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.343301][ T3498] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.351328][ T3498] Call Trace: [ 42.354602][ T3498] [ 42.357517][ T3498] ? __warn+0x15b/0x300 [ 42.361841][ T3498] ? ieee80211_bss_info_change_notify+0x36d/0x540 [ 42.368260][ T3498] ? report_bug+0x1b7/0x2e0 [ 42.372788][ T3498] ? handle_bug+0x3d/0x70 [ 42.377156][ T3498] ? exc_invalid_op+0x16/0x40 [ 42.381893][ T3498] ? asm_exc_invalid_op+0x16/0x20 [ 42.386930][ T3498] ? __wake_up_klogd+0xcc/0x100 [ 42.391807][ T3498] ? ieee80211_bss_info_change_notify+0x36d/0x540 [ 42.398225][ T3498] ieee80211_ocb_leave+0x26a/0x310 [ 42.403388][ T3498] __cfg80211_leave_ocb+0x21c/0x410 [ 42.408592][ T3498] cfg80211_leave_ocb+0x54/0x70 [ 42.413476][ T3498] cfg80211_change_iface+0x508/0xf20 [ 42.418767][ T3498] nl80211_set_interface+0x5f8/0x890 [ 42.424097][ T3498] ? nl80211_dump_interface+0x690/0x690 [ 42.429646][ T3498] ? mutex_lock_nested+0x17/0x20 [ 42.434617][ T3498] genl_rcv_msg+0xfbd/0x14a0 [ 42.439216][ T3498] ? genl_bind+0x370/0x370 [ 42.443730][ T3498] ? arch_stack_walk+0xf3/0x140 [ 42.448589][ T3498] ? mark_lock+0x98/0x340 [ 42.452972][ T3498] ? __lock_acquire+0x1295/0x1ff0 [ 42.458003][ T3498] ? nl80211_dump_interface+0x690/0x690 [ 42.463725][ T3498] netlink_rcv_skb+0x1cf/0x410 [ 42.468494][ T3498] ? genl_bind+0x370/0x370 [ 42.472942][ T3498] ? netlink_ack+0xb10/0xb10 [ 42.477540][ T3498] ? down_read+0x1b3/0x2e0 [ 42.481991][ T3498] ? genl_rcv+0x9/0x40 [ 42.486063][ T3498] genl_rcv+0x24/0x40 [ 42.490027][ T3498] netlink_unicast+0x7b6/0x980 [ 42.494897][ T3498] ? netlink_detachskb+0x90/0x90 [ 42.499832][ T3498] ? 0xffffffff81000000 [ 42.504048][ T3498] ? __check_object_size+0x300/0x410 [ 42.509440][ T3498] ? bpf_lsm_netlink_send+0x5/0x10 [ 42.514595][ T3498] netlink_sendmsg+0xa30/0xd60 [ 42.519369][ T3498] ? netlink_getsockopt+0x5b0/0x5b0 [ 42.524605][ T3498] ? aa_sock_msg_perm+0x91/0x150 [ 42.529544][ T3498] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 42.534857][ T3498] ? security_socket_sendmsg+0x7d/0xa0 [ 42.540347][ T3498] ? netlink_getsockopt+0x5b0/0x5b0 [ 42.545530][ T3498] __sys_sendto+0x564/0x720 [ 42.550020][ T3498] ? __ia32_sys_getpeername+0x80/0x80 [ 42.555421][ T3498] ? __fput+0x683/0x890 [ 42.559588][ T3498] ? print_irqtrace_events+0x210/0x210 [ 42.565086][ T3498] ? vtime_user_exit+0x2d1/0x400 [ 42.570036][ T3498] __x64_sys_sendto+0xda/0xf0 [ 42.574799][ T3498] do_syscall_64+0x3d/0xb0 [ 42.579221][ T3498] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.585249][ T3498] RIP: 0033:0x7fad32708ac6 [ 42.589665][ T3498] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 42.609341][ T3498] RSP: 002b:00007fffc66f1818 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 42.617781][ T3498] RAX: ffffffffffffffda RBX: 00007fffc66f18f0 RCX: 00007fad32708ac6 [ 42.625794][ T3498] RDX: 0000000000000024 RSI: 00007fffc66f1940 RDI: 0000000000000006 [ 42.633790][ T3498] RBP: 0000000000000001 R08: 00007fffc66f1834 R09: 000000000000000c [ 42.641794][ T3498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.649763][ T3498] R13: 00007fffc66f1940 R14: 0000000000000006 R15: 0000000000000000 [ 42.657786][ T3498] [ 42.660850][ T3498] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 42.668194][ T3498] CPU: 1 PID: 3498 Comm: syz-executor125 Not tainted 5.15.118-syzkaller #0 [ 42.676756][ T3498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 42.686790][ T3498] Call Trace: [ 42.690053][ T3498] [ 42.692967][ T3498] dump_stack_lvl+0x1e3/0x2cb [ 42.697629][ T3498] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 42.703237][ T3498] ? panic+0x84d/0x84d [ 42.707285][ T3498] ? ieee80211_bss_info_change_notify+0x340/0x540 [ 42.713678][ T3498] ? ieee80211_bss_info_change_notify+0x340/0x540 [ 42.720067][ T3498] panic+0x318/0x84d [ 42.723940][ T3498] ? __warn+0x16a/0x300 [ 42.728073][ T3498] ? fb_is_primary_device+0xcc/0xcc [ 42.733251][ T3498] ? ieee80211_bss_info_change_notify+0x36d/0x540 [ 42.739816][ T3498] __warn+0x2b2/0x300 [ 42.743774][ T3498] ? ieee80211_bss_info_change_notify+0x36d/0x540 [ 42.750160][ T3498] report_bug+0x1b7/0x2e0 [ 42.754467][ T3498] handle_bug+0x3d/0x70 [ 42.758599][ T3498] exc_invalid_op+0x16/0x40 [ 42.763082][ T3498] asm_exc_invalid_op+0x16/0x20 [ 42.767907][ T3498] RIP: 0010:ieee80211_bss_info_change_notify+0x36d/0x540 [ 42.774993][ T3498] Code: ef 25 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 60 0a 93 8b 4c 89 e6 89 ea e8 93 65 a8 f7 <0f> 0b e9 21 fd ff ff e8 17 93 dc f7 0f 0b e9 b0 fe ff ff e8 0b 93 [ 42.794573][ T3498] RSP: 0018:ffffc900020af400 EFLAGS: 00010246 [ 42.800615][ T3498] RAX: b470fd7d3d8f9600 RBX: ffff88801dcdd290 RCX: ffff88807a18bb80 [ 42.808562][ T3498] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 42.816584][ T3498] RBP: 0000000000000000 R08: ffffffff8166491c R09: ffffed10173467a0 [ 42.824531][ T3498] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801dcdc000 [ 42.832477][ T3498] R13: 0000000000400000 R14: dffffc0000000000 R15: ffff88801dcde298 [ 42.840430][ T3498] ? __wake_up_klogd+0xcc/0x100 [ 42.845272][ T3498] ieee80211_ocb_leave+0x26a/0x310 [ 42.850368][ T3498] __cfg80211_leave_ocb+0x21c/0x410 [ 42.855543][ T3498] cfg80211_leave_ocb+0x54/0x70 [ 42.860373][ T3498] cfg80211_change_iface+0x508/0xf20 [ 42.865637][ T3498] nl80211_set_interface+0x5f8/0x890 [ 42.870900][ T3498] ? nl80211_dump_interface+0x690/0x690 [ 42.876421][ T3498] ? mutex_lock_nested+0x17/0x20 [ 42.881434][ T3498] genl_rcv_msg+0xfbd/0x14a0 [ 42.886006][ T3498] ? genl_bind+0x370/0x370 [ 42.890397][ T3498] ? arch_stack_walk+0xf3/0x140 [ 42.895233][ T3498] ? mark_lock+0x98/0x340 [ 42.899540][ T3498] ? __lock_acquire+0x1295/0x1ff0 [ 42.904546][ T3498] ? nl80211_dump_interface+0x690/0x690 [ 42.910087][ T3498] netlink_rcv_skb+0x1cf/0x410 [ 42.914844][ T3498] ? genl_bind+0x370/0x370 [ 42.919235][ T3498] ? netlink_ack+0xb10/0xb10 [ 42.923806][ T3498] ? down_read+0x1b3/0x2e0 [ 42.928196][ T3498] ? genl_rcv+0x9/0x40 [ 42.932240][ T3498] genl_rcv+0x24/0x40 [ 42.936197][ T3498] netlink_unicast+0x7b6/0x980 [ 42.940942][ T3498] ? netlink_detachskb+0x90/0x90 [ 42.945857][ T3498] ? 0xffffffff81000000 [ 42.949989][ T3498] ? __check_object_size+0x300/0x410 [ 42.955253][ T3498] ? bpf_lsm_netlink_send+0x5/0x10 [ 42.960348][ T3498] netlink_sendmsg+0xa30/0xd60 [ 42.965100][ T3498] ? netlink_getsockopt+0x5b0/0x5b0 [ 42.970275][ T3498] ? aa_sock_msg_perm+0x91/0x150 [ 42.975196][ T3498] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 42.980457][ T3498] ? security_socket_sendmsg+0x7d/0xa0 [ 42.985895][ T3498] ? netlink_getsockopt+0x5b0/0x5b0 [ 42.991070][ T3498] __sys_sendto+0x564/0x720 [ 42.995555][ T3498] ? __ia32_sys_getpeername+0x80/0x80 [ 43.000908][ T3498] ? __fput+0x683/0x890 [ 43.005045][ T3498] ? print_irqtrace_events+0x210/0x210 [ 43.010483][ T3498] ? vtime_user_exit+0x2d1/0x400 [ 43.015400][ T3498] __x64_sys_sendto+0xda/0xf0 [ 43.020053][ T3498] do_syscall_64+0x3d/0xb0 [ 43.024449][ T3498] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.030320][ T3498] RIP: 0033:0x7fad32708ac6 [ 43.034711][ T3498] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 43.054296][ T3498] RSP: 002b:00007fffc66f1818 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 43.062772][ T3498] RAX: ffffffffffffffda RBX: 00007fffc66f18f0 RCX: 00007fad32708ac6 [ 43.070724][ T3498] RDX: 0000000000000024 RSI: 00007fffc66f1940 RDI: 0000000000000006 [ 43.078670][ T3498] RBP: 0000000000000001 R08: 00007fffc66f1834 R09: 000000000000000c [ 43.086624][ T3498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.094572][ T3498] R13: 00007fffc66f1940 R14: 0000000000000006 R15: 0000000000000000 [ 43.102531][ T3498] [ 43.105691][ T3498] Kernel Offset: disabled [ 43.110077][ T3498] Rebooting in 86400 seconds..