Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. syzkaller login: [ 52.873306][ T8455] IPVS: ftp: loaded support on port[0] = 21 [ 52.936693][ T635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.956720][ T635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.978277][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 52.991025][ T22] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.000146][ T22] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.010733][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.049404][ T8455] syz-executor685 uses obsolete (PF_INET,SOCK_PACKET) [ 53.059063][ T8455] ------------[ cut here ]------------ [ 53.064619][ T8455] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 53.117848][ T8455] WARNING: CPU: 1 PID: 8455 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4f3/0x5f0 [ 53.135460][ T8455] Modules linked in: [ 53.149569][ T8455] CPU: 1 PID: 8455 Comm: syz-executor685 Not tainted 5.11.0-rc1-syzkaller #0 [ 53.158714][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.170107][ T8455] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 53.176424][ T8455] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 65 f4 2b f9 e8 60 f4 2b f9 8b 54 24 04 48 89 ee 48 c7 c7 c0 e3 61 8a e8 64 79 6c 00 <0f> 0b e9 dd fd ff ff e8 41 f4 2b f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 53.196300][ T8455] RSP: 0018:ffffc9000326f508 EFLAGS: 00010286 [ 53.202415][ T8455] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 53.210437][ T8455] RDX: ffff88801fbb5340 RSI: ffffffff815b2b45 RDI: fffff5200064de93 [ 53.218455][ T8455] RBP: ffff888026c04000 R08: 0000000000000000 R09: 0000000000000000 [ 53.226430][ T8455] R10: ffffffff815abd1e R11: 0000000000000000 R12: ffff888026c04bc0 [ 53.234524][ T8455] R13: 0000000002000000 R14: ffff888026c05de0 R15: ffff888026c05dd8 [ 53.242552][ T8455] FS: 0000000000c4e880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 53.251537][ T8455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.258156][ T8455] CR2: 000055d79a9da160 CR3: 000000001c854000 CR4: 0000000000350ee0 [ 53.266294][ T8455] Call Trace: [ 53.269775][ T8455] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 53.275863][ T8455] ieee80211_set_mcast_rate+0x37/0x40 [ 53.281291][ T8455] ? ieee80211_get_mesh_config+0x30/0x30 [ 53.286924][ T8455] nl80211_set_mcast_rate+0x317/0x610 [ 53.292582][ T8455] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 53.299224][ T8455] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 53.305463][ T8455] ? nl80211_pre_doit+0xa2/0x630 [ 53.310435][ T8455] genl_family_rcv_msg_doit+0x228/0x320 [ 53.315981][ T8455] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 53.323381][ T8455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.329675][ T8455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.335908][ T8455] ? ns_capable+0xde/0x100 [ 53.340362][ T8455] genl_rcv_msg+0x328/0x580 [ 53.344954][ T8455] ? genl_get_cmd+0x480/0x480 [ 53.349660][ T8455] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 53.356246][ T8455] ? lock_release+0x710/0x710 [ 53.361391][ T8455] netlink_rcv_skb+0x153/0x420 [ 53.366251][ T8455] ? genl_get_cmd+0x480/0x480 [ 53.370959][ T8455] ? netlink_ack+0xaa0/0xaa0 [ 53.375556][ T8455] genl_rcv+0x24/0x40 [ 53.379563][ T8455] netlink_unicast+0x533/0x7d0 [ 53.384591][ T8455] ? netlink_attachskb+0x870/0x870 [ 53.389744][ T8455] ? _copy_from_iter_full+0x275/0x850 [ 53.395124][ T8455] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 53.401399][ T8455] ? __phys_addr_symbol+0x2c/0x70 [ 53.406512][ T8455] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 53.412274][ T8455] ? __check_object_size+0x171/0x3f0 [ 53.417728][ T8455] netlink_sendmsg+0x856/0xd90 [ 53.422485][ T8455] ? netlink_unicast+0x7d0/0x7d0 [ 53.427463][ T8455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.433705][ T8455] ? netlink_unicast+0x7d0/0x7d0 [ 53.438672][ T8455] sock_sendmsg+0xcf/0x120 [ 53.443091][ T8455] ____sys_sendmsg+0x6e8/0x810 [ 53.447883][ T8455] ? kernel_sendmsg+0x50/0x50 [ 53.452558][ T8455] ? do_recvmmsg+0x6c0/0x6c0 [ 53.457134][ T8455] ? find_held_lock+0x2d/0x110 [ 53.462035][ T8455] ___sys_sendmsg+0xf3/0x170 [ 53.466623][ T8455] ? sendmsg_copy_msghdr+0x160/0x160 [ 53.471945][ T8455] ? _copy_to_user+0xdc/0x150 [ 53.476617][ T8455] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 53.483051][ T8455] ? sock_do_ioctl+0x168/0x2d0 [ 53.487896][ T8455] ? compat_ifr_data_ioctl+0x150/0x150 [ 53.493534][ T8455] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 53.499499][ T8455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.505756][ T8455] ? __fget_light+0x215/0x280 [ 53.510462][ T8455] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 53.516704][ T8455] __sys_sendmsg+0xe5/0x1b0 [ 53.521253][ T8455] ? __sys_sendmsg_sock+0xb0/0xb0 [ 53.526282][ T8455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 53.532225][ T8455] do_syscall_64+0x2d/0x70 [ 53.536645][ T8455] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 53.542579][ T8455] RIP: 0033:0x4417f9 [ 53.546465][ T8455] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.566099][ T8455] RSP: 002b:00007ffc1dfea268 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.574560][ T8455] RAX: ffffffffffffffda RBX: 00007ffc1dfea290 RCX: 00000000004417f9 [ 53.582593][ T8455] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 53.590708][ T8455] RBP: 0000000000000003 R08: 0000002100000000 R09: 0000002100000000 [ 53.598728][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 53.606698][ T8455] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 53.614733][ T8455] Kernel panic - not syncing: panic_on_warn set ... [ 53.621309][ T8455] CPU: 1 PID: 8455 Comm: syz-executor685 Not tainted 5.11.0-rc1-syzkaller #0 [ 53.630058][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.640100][ T8455] Call Trace: [ 53.643355][ T8455] dump_stack+0x107/0x163 [ 53.647683][ T8455] panic+0x306/0x73d [ 53.651569][ T8455] ? __warn_printk+0xf3/0xf3 [ 53.656139][ T8455] ? __warn.cold+0x1a/0x44 [ 53.660537][ T8455] ? drv_bss_info_changed+0x4f3/0x5f0 [ 53.665895][ T8455] __warn.cold+0x35/0x44 [ 53.670129][ T8455] ? wake_up_klogd.part.0+0x8e/0xd0 [ 53.675309][ T8455] ? drv_bss_info_changed+0x4f3/0x5f0 [ 53.680657][ T8455] report_bug+0x1bd/0x210 [ 53.684971][ T8455] handle_bug+0x3c/0x60 [ 53.689105][ T8455] exc_invalid_op+0x14/0x40 [ 53.693585][ T8455] asm_exc_invalid_op+0x12/0x20 [ 53.698412][ T8455] RIP: 0010:drv_bss_info_changed+0x4f3/0x5f0 [ 53.704373][ T8455] Code: 40 06 00 00 48 85 ed 0f 84 9c 00 00 00 e8 65 f4 2b f9 e8 60 f4 2b f9 8b 54 24 04 48 89 ee 48 c7 c7 c0 e3 61 8a e8 64 79 6c 00 <0f> 0b e9 dd fd ff ff e8 41 f4 2b f9 0f 0b e9 15 fd ff ff 4c 89 ff [ 53.723959][ T8455] RSP: 0018:ffffc9000326f508 EFLAGS: 00010286 [ 53.730004][ T8455] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 53.738125][ T8455] RDX: ffff88801fbb5340 RSI: ffffffff815b2b45 RDI: fffff5200064de93 [ 53.746074][ T8455] RBP: ffff888026c04000 R08: 0000000000000000 R09: 0000000000000000 [ 53.754021][ T8455] R10: ffffffff815abd1e R11: 0000000000000000 R12: ffff888026c04bc0 [ 53.761970][ T8455] R13: 0000000002000000 R14: ffff888026c05de0 R15: ffff888026c05dd8 [ 53.769923][ T8455] ? wake_up_klogd.part.0+0x8e/0xd0 [ 53.775106][ T8455] ? vprintk_func+0x95/0x1e0 [ 53.779678][ T8455] ? drv_bss_info_changed+0x4f3/0x5f0 [ 53.785117][ T8455] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 53.791164][ T8455] ieee80211_set_mcast_rate+0x37/0x40 [ 53.796519][ T8455] ? ieee80211_get_mesh_config+0x30/0x30 [ 53.802131][ T8455] nl80211_set_mcast_rate+0x317/0x610 [ 53.807483][ T8455] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 53.814052][ T8455] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 53.820275][ T8455] ? nl80211_pre_doit+0xa2/0x630 [ 53.825193][ T8455] genl_family_rcv_msg_doit+0x228/0x320 [ 53.830724][ T8455] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 53.838082][ T8455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.844322][ T8455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.850544][ T8455] ? ns_capable+0xde/0x100 [ 53.854945][ T8455] genl_rcv_msg+0x328/0x580 [ 53.859444][ T8455] ? genl_get_cmd+0x480/0x480 [ 53.864285][ T8455] ? nl80211_tdls_cancel_channel_switch+0x5b0/0x5b0 [ 53.870862][ T8455] ? lock_release+0x710/0x710 [ 53.875527][ T8455] netlink_rcv_skb+0x153/0x420 [ 53.880275][ T8455] ? genl_get_cmd+0x480/0x480 [ 53.884933][ T8455] ? netlink_ack+0xaa0/0xaa0 [ 53.889511][ T8455] genl_rcv+0x24/0x40 [ 53.893472][ T8455] netlink_unicast+0x533/0x7d0 [ 53.898217][ T8455] ? netlink_attachskb+0x870/0x870 [ 53.903306][ T8455] ? _copy_from_iter_full+0x275/0x850 [ 53.908658][ T8455] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 53.914971][ T8455] ? __phys_addr_symbol+0x2c/0x70 [ 53.919987][ T8455] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 53.925701][ T8455] ? __check_object_size+0x171/0x3f0 [ 53.930982][ T8455] netlink_sendmsg+0x856/0xd90 [ 53.935733][ T8455] ? netlink_unicast+0x7d0/0x7d0 [ 53.940670][ T8455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.946897][ T8455] ? netlink_unicast+0x7d0/0x7d0 [ 53.951816][ T8455] sock_sendmsg+0xcf/0x120 [ 53.956227][ T8455] ____sys_sendmsg+0x6e8/0x810 [ 53.960973][ T8455] ? kernel_sendmsg+0x50/0x50 [ 53.965629][ T8455] ? do_recvmmsg+0x6c0/0x6c0 [ 53.970200][ T8455] ? find_held_lock+0x2d/0x110 [ 53.974949][ T8455] ___sys_sendmsg+0xf3/0x170 [ 53.979522][ T8455] ? sendmsg_copy_msghdr+0x160/0x160 [ 53.984879][ T8455] ? _copy_to_user+0xdc/0x150 [ 53.989535][ T8455] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 53.995860][ T8455] ? sock_do_ioctl+0x168/0x2d0 [ 54.000691][ T8455] ? compat_ifr_data_ioctl+0x150/0x150 [ 54.006314][ T8455] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 54.012189][ T8455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.018411][ T8455] ? __fget_light+0x215/0x280 [ 54.023066][ T8455] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.029287][ T8455] __sys_sendmsg+0xe5/0x1b0 [ 54.033773][ T8455] ? __sys_sendmsg_sock+0xb0/0xb0 [ 54.038786][ T8455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 54.044664][ T8455] do_syscall_64+0x2d/0x70 [ 54.049271][ T8455] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.055844][ T8455] RIP: 0033:0x4417f9 [ 54.059915][ T8455] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.079501][ T8455] RSP: 002b:00007ffc1dfea268 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.087892][ T8455] RAX: ffffffffffffffda RBX: 00007ffc1dfea290 RCX: 00000000004417f9 [ 54.095840][ T8455] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 54.103787][ T8455] RBP: 0000000000000003 R08: 0000002100000000 R09: 0000002100000000 [ 54.111737][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 54.119688][ T8455] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 54.131505][ T8455] Kernel Offset: disabled [ 54.135901][ T8455] Rebooting in 86400 seconds..