Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. executing program [ 60.398283][ T3544] netlink: 'syz-executor134': attribute type 27 has an invalid length. [ 60.406848][ T3544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor134'. [ 60.628535][ T3544] syz-executor134 (3544) used greatest stack depth: 20184 bytes left [ 60.638828][ T3555] netlink: 'syz-executor134': attribute type 27 has an invalid length. [ 60.655380][ T3555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor134'. [ 60.666667][ T3555] ------------[ cut here ]------------ [ 60.672355][ T3555] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 60.681127][ T3555] WARNING: CPU: 1 PID: 3555 at net/mac80211/main.c:235 ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 60.692287][ T3555] Modules linked in: [ 60.696292][ T3555] CPU: 1 PID: 3555 Comm: syz-executor134 Not tainted 6.1.31-syzkaller #0 [ 60.704749][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 60.714893][ T3555] RIP: 0010:ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 60.722019][ T3555] Code: 0c af e5 f7 49 8b 86 08 09 00 00 49 81 c6 28 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 c0 d7 fb 8b 4c 89 f6 89 ea e8 36 dd 57 f7 <0f> 0b e9 f5 fb ff ff e8 aa 67 8f f7 0f 0b e9 44 fe ff ff e8 9e 67 [ 60.741797][ T3555] RSP: 0018:ffffc90003a6f258 EFLAGS: 00010246 [ 60.748005][ T3555] RAX: a6e8ca33bb085300 RBX: 0000000000400000 RCX: ffff88807aa70000 [ 60.756057][ T3555] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 60.764068][ T3555] RBP: 0000000000000000 R08: ffffffff81524d7e R09: fffff5200074ddc5 [ 60.772123][ T3555] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888021632780 [ 60.780176][ T3555] R13: ffff888021858de0 R14: ffff888021630000 R15: dffffc0000000000 [ 60.788226][ T3555] FS: 0000555556da1300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 60.797237][ T3555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.803863][ T3555] CR2: 00007fffd9d85c28 CR3: 0000000072958000 CR4: 00000000003506e0 [ 60.812051][ T3555] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.820100][ T3555] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.828179][ T3555] Call Trace: [ 60.831495][ T3555] [ 60.834460][ T3555] ? __warn+0x15a/0x520 [ 60.838712][ T3555] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 60.845215][ T3555] ? report_bug+0x2af/0x500 [ 60.849759][ T3555] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 60.856261][ T3555] ? handle_bug+0x3d/0x70 [ 60.860622][ T3555] ? exc_invalid_op+0x16/0x40 [ 60.865376][ T3555] ? asm_exc_invalid_op+0x16/0x20 [ 60.870606][ T3555] ? __warn_printk+0x28e/0x350 [ 60.875605][ T3555] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 60.882062][ T3555] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 60.888578][ T3555] ieee80211_ocb_leave+0x26a/0x310 [ 60.893743][ T3555] __cfg80211_leave_ocb+0x238/0x490 [ 60.899023][ T3555] cfg80211_leave_ocb+0x54/0x70 [ 60.903994][ T3555] cfg80211_change_iface+0x52a/0x1030 [ 60.909483][ T3555] nl80211_set_interface+0x5fa/0x870 [ 60.914812][ T3555] ? nl80211_dump_interface+0x690/0x690 [ 60.920429][ T3555] ? mutex_lock_nested+0x17/0x20 [ 60.925516][ T3555] genl_rcv_msg+0xc1a/0xf70 [ 60.930045][ T3555] ? kernel_text_address+0x9f/0xd0 [ 60.935250][ T3555] ? genl_bind+0x360/0x360 [ 60.939694][ T3555] ? mark_lock+0x9a/0x340 [ 60.944035][ T3555] ? mark_lock+0x9a/0x340 [ 60.948423][ T3555] ? __lock_acquire+0x125b/0x1f80 [ 60.953489][ T3555] ? nl80211_dump_interface+0x690/0x690 [ 60.959151][ T3555] netlink_rcv_skb+0x1cd/0x410 [ 60.963972][ T3555] ? genl_bind+0x360/0x360 [ 60.968471][ T3555] ? netlink_ack+0xe60/0xe60 [ 60.973130][ T3555] ? down_read+0x1b1/0x2e0 [ 60.977637][ T3555] ? genl_rcv+0x9/0x40 [ 60.981733][ T3555] genl_rcv+0x24/0x40 [ 60.985787][ T3555] netlink_unicast+0x7bf/0x990 [ 60.990596][ T3555] ? netlink_detachskb+0x90/0x90 [ 60.995607][ T3555] ? __phys_addr_symbol+0x2b/0x70 [ 61.000667][ T3555] ? bpf_lsm_netlink_send+0x5/0x10 [ 61.005843][ T3555] netlink_sendmsg+0xa26/0xd60 [ 61.010829][ T3555] ? netlink_getsockopt+0x5a0/0x5a0 [ 61.016275][ T3555] ? aa_sock_msg_perm+0x91/0x150 [ 61.021244][ T3555] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 61.026600][ T3555] ? security_socket_sendmsg+0x7d/0xa0 [ 61.032108][ T3555] ? netlink_getsockopt+0x5a0/0x5a0 [ 61.037608][ T3555] ____sys_sendmsg+0x59e/0x8f0 [ 61.042440][ T3555] ? __sys_sendmsg_sock+0x30/0x30 [ 61.047586][ T3555] __sys_sendmsg+0x2a9/0x390 [ 61.052233][ T3555] ? ____sys_sendmsg+0x8f0/0x8f0 [ 61.057283][ T3555] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 61.063305][ T3555] ? syscall_enter_from_user_mode+0x2e/0x220 [ 61.069359][ T3555] ? lockdep_hardirqs_on+0x94/0x130 [ 61.074608][ T3555] ? syscall_enter_from_user_mode+0x2e/0x220 [ 61.080693][ T3555] do_syscall_64+0x3d/0xb0 [ 61.085184][ T3555] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.091117][ T3555] RIP: 0033:0x7fab7b2a9aa9 [ 61.095618][ T3555] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 61.115312][ T3555] RSP: 002b:00007fffd9d86cc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.123773][ T3555] RAX: ffffffffffffffda RBX: 000000000000ebc9 RCX: 00007fab7b2a9aa9 [ 61.131825][ T3555] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 61.139851][ T3555] RBP: 0000000000000000 R08: 00007fffd9d86e68 R09: 00007fffd9d86e68 [ 61.147882][ T3555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd9d86cdc [ 61.155907][ T3555] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 61.164008][ T3555] [ 61.167101][ T3555] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 61.174397][ T3555] CPU: 1 PID: 3555 Comm: syz-executor134 Not tainted 6.1.31-syzkaller #0 [ 61.182814][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 61.192879][ T3555] Call Trace: [ 61.196164][ T3555] [ 61.199101][ T3555] dump_stack_lvl+0x1e3/0x2cb [ 61.203806][ T3555] ? nf_tcp_handle_invalid+0x642/0x642 [ 61.209285][ T3555] ? panic+0x75d/0x75d [ 61.213378][ T3555] ? vscnprintf+0x59/0x80 [ 61.217731][ T3555] panic+0x318/0x75d [ 61.221653][ T3555] ? __warn+0x169/0x520 [ 61.225827][ T3555] ? memcpy_page_flushcache+0xfc/0xfc [ 61.231499][ T3555] __warn+0x348/0x520 [ 61.235510][ T3555] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 61.241955][ T3555] report_bug+0x2af/0x500 [ 61.246394][ T3555] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 61.252837][ T3555] handle_bug+0x3d/0x70 [ 61.257012][ T3555] exc_invalid_op+0x16/0x40 [ 61.261536][ T3555] asm_exc_invalid_op+0x16/0x20 [ 61.266417][ T3555] RIP: 0010:ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 61.273478][ T3555] Code: 0c af e5 f7 49 8b 86 08 09 00 00 49 81 c6 28 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 c0 d7 fb 8b 4c 89 f6 89 ea e8 36 dd 57 f7 <0f> 0b e9 f5 fb ff ff e8 aa 67 8f f7 0f 0b e9 44 fe ff ff e8 9e 67 [ 61.293104][ T3555] RSP: 0018:ffffc90003a6f258 EFLAGS: 00010246 [ 61.299280][ T3555] RAX: a6e8ca33bb085300 RBX: 0000000000400000 RCX: ffff88807aa70000 [ 61.307268][ T3555] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 61.315335][ T3555] RBP: 0000000000000000 R08: ffffffff81524d7e R09: fffff5200074ddc5 [ 61.323319][ T3555] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888021632780 [ 61.331326][ T3555] R13: ffff888021858de0 R14: ffff888021630000 R15: dffffc0000000000 [ 61.339338][ T3555] ? __warn_printk+0x28e/0x350 [ 61.344131][ T3555] ? ieee80211_bss_info_change_notify+0x4aa/0x6d0 [ 61.350574][ T3555] ieee80211_ocb_leave+0x26a/0x310 [ 61.355716][ T3555] __cfg80211_leave_ocb+0x238/0x490 [ 61.360938][ T3555] cfg80211_leave_ocb+0x54/0x70 [ 61.365807][ T3555] cfg80211_change_iface+0x52a/0x1030 [ 61.371239][ T3555] nl80211_set_interface+0x5fa/0x870 [ 61.376552][ T3555] ? nl80211_dump_interface+0x690/0x690 [ 61.382123][ T3555] ? mutex_lock_nested+0x17/0x20 [ 61.387086][ T3555] genl_rcv_msg+0xc1a/0xf70 [ 61.391605][ T3555] ? kernel_text_address+0x9f/0xd0 [ 61.396748][ T3555] ? genl_bind+0x360/0x360 [ 61.401185][ T3555] ? mark_lock+0x9a/0x340 [ 61.405542][ T3555] ? mark_lock+0x9a/0x340 [ 61.409897][ T3555] ? __lock_acquire+0x125b/0x1f80 [ 61.414950][ T3555] ? nl80211_dump_interface+0x690/0x690 [ 61.420538][ T3555] netlink_rcv_skb+0x1cd/0x410 [ 61.425329][ T3555] ? genl_bind+0x360/0x360 [ 61.429762][ T3555] ? netlink_ack+0xe60/0xe60 [ 61.434382][ T3555] ? down_read+0x1b1/0x2e0 [ 61.438818][ T3555] ? genl_rcv+0x9/0x40 [ 61.442900][ T3555] genl_rcv+0x24/0x40 [ 61.446893][ T3555] netlink_unicast+0x7bf/0x990 [ 61.451696][ T3555] ? netlink_detachskb+0x90/0x90 [ 61.456656][ T3555] ? __phys_addr_symbol+0x2b/0x70 [ 61.461705][ T3555] ? bpf_lsm_netlink_send+0x5/0x10 [ 61.466924][ T3555] netlink_sendmsg+0xa26/0xd60 [ 61.471725][ T3555] ? netlink_getsockopt+0x5a0/0x5a0 [ 61.476948][ T3555] ? aa_sock_msg_perm+0x91/0x150 [ 61.481903][ T3555] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 61.487204][ T3555] ? security_socket_sendmsg+0x7d/0xa0 [ 61.492771][ T3555] ? netlink_getsockopt+0x5a0/0x5a0 [ 61.497992][ T3555] ____sys_sendmsg+0x59e/0x8f0 [ 61.502805][ T3555] ? __sys_sendmsg_sock+0x30/0x30 [ 61.507870][ T3555] __sys_sendmsg+0x2a9/0x390 [ 61.512486][ T3555] ? ____sys_sendmsg+0x8f0/0x8f0 [ 61.517474][ T3555] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 61.523481][ T3555] ? syscall_enter_from_user_mode+0x2e/0x220 [ 61.529482][ T3555] ? lockdep_hardirqs_on+0x94/0x130 [ 61.534704][ T3555] ? syscall_enter_from_user_mode+0x2e/0x220 [ 61.540718][ T3555] do_syscall_64+0x3d/0xb0 [ 61.545156][ T3555] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.551068][ T3555] RIP: 0033:0x7fab7b2a9aa9 [ 61.555498][ T3555] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 61.575121][ T3555] RSP: 002b:00007fffd9d86cc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.583550][ T3555] RAX: ffffffffffffffda RBX: 000000000000ebc9 RCX: 00007fab7b2a9aa9 [ 61.591549][ T3555] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 61.599532][ T3555] RBP: 0000000000000000 R08: 00007fffd9d86e68 R09: 00007fffd9d86e68 [ 61.607967][ T3555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd9d86cdc [ 61.615950][ T3555] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 61.624208][ T3555] [ 61.627459][ T3555] Kernel Offset: disabled [ 61.631875][ T3555] Rebooting in 86400 seconds..