forked to background, child pid 3181 no interfaces have a carrier [ 30.685690][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.695364][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.45' (ECDSA) to the list of known hosts. syzkaller login: [ 69.546217][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.554376][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.569935][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.582080][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 69.590107][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.598586][ T137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.683137][ T3598] ------------[ cut here ]------------ [ 69.689021][ T3598] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 69.696652][ T3598] WARNING: CPU: 1 PID: 3598 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4dd/0x5f0 [ 69.709641][ T3598] Modules linked in: [ 69.713557][ T3598] CPU: 1 PID: 3598 Comm: syz-executor205 Not tainted 5.16.0-rc7-syzkaller #0 [ 69.722764][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.733188][ T3598] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0 [ 69.739744][ T3598] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 3b 8b e9 f8 e8 36 8b e9 f8 8b 54 24 04 48 89 ee 48 c7 c7 c0 13 cd 8a e8 6f 59 72 00 <0f> 0b e9 f6 fd ff ff e8 17 8b e9 f8 e8 32 ea b5 00 31 ff 89 c3 89 [ 69.759778][ T3598] RSP: 0018:ffffc90001d2f500 EFLAGS: 00010282 [ 69.765871][ T3598] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.774351][ T3598] RDX: ffff88807d998000 RSI: ffffffff815f0948 RDI: fffff520003a5e92 [ 69.782655][ T3598] RBP: ffff888078120000 R08: 0000000000000000 R09: 0000000000000000 [ 69.790973][ T3598] R10: ffffffff815ea6ee R11: 0000000000000000 R12: ffff888078120c80 [ 69.799670][ T3598] R13: 0000000002000000 R14: ffff888078122078 R15: ffff888078122070 [ 69.808023][ T3598] FS: 0000555555e05300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 69.817315][ T3598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.823982][ T3598] CR2: 00007fff07128d68 CR3: 0000000078f3c000 CR4: 00000000003506e0 [ 69.832577][ T3598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.840967][ T3598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.849309][ T3598] Call Trace: [ 69.852602][ T3598] [ 69.855550][ T3598] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 69.862148][ T3598] ieee80211_set_mcast_rate+0x37/0x40 [ 69.867883][ T3598] ? ieee80211_get_mesh_config+0x30/0x30 [ 69.873542][ T3598] nl80211_set_mcast_rate+0x317/0x610 [ 69.879389][ T3598] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 69.886021][ T3598] ? nl80211_pre_doit+0xa6/0x620 [ 69.891458][ T3598] genl_family_rcv_msg_doit+0x228/0x320 [ 69.897406][ T3598] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 69.904808][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.912023][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.918670][ T3598] ? ns_capable+0xd9/0x100 [ 69.923114][ T3598] genl_rcv_msg+0x328/0x580 [ 69.928084][ T3598] ? genl_get_cmd+0x480/0x480 [ 69.932792][ T3598] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 69.939876][ T3598] ? lock_release+0x720/0x720 [ 69.944596][ T3598] netlink_rcv_skb+0x153/0x420 [ 69.949797][ T3598] ? genl_get_cmd+0x480/0x480 [ 69.954502][ T3598] ? netlink_ack+0xa60/0xa60 [ 69.959637][ T3598] ? netlink_deliver_tap+0x1b1/0xc30 [ 69.965065][ T3598] ? _copy_from_iter+0x12b/0x1320 [ 69.970642][ T3598] genl_rcv+0x24/0x40 [ 69.974664][ T3598] netlink_unicast+0x533/0x7d0 [ 69.979907][ T3598] ? netlink_attachskb+0x880/0x880 [ 69.985044][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.991803][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.998398][ T3598] ? __phys_addr_symbol+0x2c/0x70 [ 70.003448][ T3598] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 70.009689][ T3598] ? __check_object_size+0x16e/0x3f0 [ 70.015013][ T3598] netlink_sendmsg+0x904/0xdf0 [ 70.020436][ T3598] ? netlink_unicast+0x7d0/0x7d0 [ 70.025530][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.032194][ T3598] ? netlink_unicast+0x7d0/0x7d0 [ 70.037799][ T3598] sock_sendmsg+0xcf/0x120 [ 70.042247][ T3598] ____sys_sendmsg+0x6e8/0x810 [ 70.047489][ T3598] ? kernel_sendmsg+0x50/0x50 [ 70.052196][ T3598] ? do_recvmmsg+0x6d0/0x6d0 [ 70.056803][ T3598] ? lock_chain_count+0x20/0x20 [ 70.062179][ T3598] ? lock_chain_count+0x20/0x20 [ 70.067428][ T3598] ? __might_fault+0xd1/0x170 [ 70.072126][ T3598] ? lock_downgrade+0x6e0/0x6e0 [ 70.077808][ T3598] ___sys_sendmsg+0xf3/0x170 [ 70.082438][ T3598] ? sendmsg_copy_msghdr+0x160/0x160 [ 70.088180][ T3598] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.094193][ T3598] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.100667][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.107261][ T3598] ? __fget_light+0x215/0x280 [ 70.111966][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.118709][ T3598] __sys_sendmsg+0xe5/0x1b0 [ 70.123242][ T3598] ? __sys_sendmsg_sock+0x30/0x30 [ 70.128736][ T3598] ? syscall_enter_from_user_mode+0x21/0x70 [ 70.134664][ T3598] do_syscall_64+0x35/0xb0 [ 70.140049][ T3598] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.146063][ T3598] RIP: 0033:0x7f997961daa9 [ 70.150951][ T3598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.171008][ T3598] RSP: 002b:00007fff07129dd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.179805][ T3598] RAX: ffffffffffffffda RBX: 00007f99796973a0 RCX: 00007f997961daa9 [ 70.188115][ T3598] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 70.196116][ T3598] RBP: 0000000000000003 R08: 0000000c00000001 R09: 0000000c00000001 [ 70.204622][ T3598] R10: 0000000c00000001 R11: 0000000000000246 R12: 0000000000000031 [ 70.212938][ T3598] R13: 00007fff07129e20 R14: 00007fff07129e0a R15: 00007f9979697410 [ 70.221444][ T3598] [ 70.224484][ T3598] Kernel panic - not syncing: panic_on_warn set ... [ 70.231073][ T3598] CPU: 1 PID: 3598 Comm: syz-executor205 Not tainted 5.16.0-rc7-syzkaller #0 [ 70.239844][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.249907][ T3598] Call Trace: [ 70.253191][ T3598] [ 70.256125][ T3598] dump_stack_lvl+0xcd/0x134 [ 70.260733][ T3598] panic+0x2b0/0x6dd [ 70.264648][ T3598] ? __warn_printk+0xf3/0xf3 [ 70.269267][ T3598] ? __warn.cold+0x1a/0x44 [ 70.273705][ T3598] ? drv_bss_info_changed+0x4dd/0x5f0 [ 70.279094][ T3598] __warn.cold+0x35/0x44 [ 70.283353][ T3598] ? wake_up_klogd.part.0+0x8e/0xd0 [ 70.288573][ T3598] ? drv_bss_info_changed+0x4dd/0x5f0 [ 70.293964][ T3598] report_bug+0x1bd/0x210 [ 70.298318][ T3598] handle_bug+0x3c/0x60 [ 70.302488][ T3598] exc_invalid_op+0x14/0x40 [ 70.307005][ T3598] asm_exc_invalid_op+0x12/0x20 [ 70.311874][ T3598] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0 [ 70.317868][ T3598] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 3b 8b e9 f8 e8 36 8b e9 f8 8b 54 24 04 48 89 ee 48 c7 c7 c0 13 cd 8a e8 6f 59 72 00 <0f> 0b e9 f6 fd ff ff e8 17 8b e9 f8 e8 32 ea b5 00 31 ff 89 c3 89 [ 70.337581][ T3598] RSP: 0018:ffffc90001d2f500 EFLAGS: 00010282 [ 70.343663][ T3598] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.351644][ T3598] RDX: ffff88807d998000 RSI: ffffffff815f0948 RDI: fffff520003a5e92 [ 70.359719][ T3598] RBP: ffff888078120000 R08: 0000000000000000 R09: 0000000000000000 [ 70.367701][ T3598] R10: ffffffff815ea6ee R11: 0000000000000000 R12: ffff888078120c80 [ 70.375685][ T3598] R13: 0000000002000000 R14: ffff888078122078 R15: ffff888078122070 [ 70.383675][ T3598] ? wake_up_klogd.part.0+0x8e/0xd0 [ 70.388908][ T3598] ? vprintk+0x88/0x90 [ 70.393010][ T3598] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 70.399103][ T3598] ieee80211_set_mcast_rate+0x37/0x40 [ 70.404498][ T3598] ? ieee80211_get_mesh_config+0x30/0x30 [ 70.410156][ T3598] nl80211_set_mcast_rate+0x317/0x610 [ 70.415557][ T3598] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 70.422177][ T3598] ? nl80211_pre_doit+0xa6/0x620 [ 70.427136][ T3598] genl_family_rcv_msg_doit+0x228/0x320 [ 70.432707][ T3598] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 70.440103][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.446467][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.452733][ T3598] ? ns_capable+0xd9/0x100 [ 70.457172][ T3598] genl_rcv_msg+0x328/0x580 [ 70.461702][ T3598] ? genl_get_cmd+0x480/0x480 [ 70.466396][ T3598] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 70.473009][ T3598] ? lock_release+0x720/0x720 [ 70.477712][ T3598] netlink_rcv_skb+0x153/0x420 [ 70.482495][ T3598] ? genl_get_cmd+0x480/0x480 [ 70.487202][ T3598] ? netlink_ack+0xa60/0xa60 [ 70.491821][ T3598] ? netlink_deliver_tap+0x1b1/0xc30 [ 70.497118][ T3598] ? _copy_from_iter+0x12b/0x1320 [ 70.502162][ T3598] genl_rcv+0x24/0x40 [ 70.506157][ T3598] netlink_unicast+0x533/0x7d0 [ 70.510946][ T3598] ? netlink_attachskb+0x880/0x880 [ 70.516160][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.522427][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.528686][ T3598] ? __phys_addr_symbol+0x2c/0x70 [ 70.533732][ T3598] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 70.539468][ T3598] ? __check_object_size+0x16e/0x3f0 [ 70.544778][ T3598] netlink_sendmsg+0x904/0xdf0 [ 70.549564][ T3598] ? netlink_unicast+0x7d0/0x7d0 [ 70.554527][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.560793][ T3598] ? netlink_unicast+0x7d0/0x7d0 [ 70.565747][ T3598] sock_sendmsg+0xcf/0x120 [ 70.570191][ T3598] ____sys_sendmsg+0x6e8/0x810 [ 70.574986][ T3598] ? kernel_sendmsg+0x50/0x50 [ 70.579678][ T3598] ? do_recvmmsg+0x6d0/0x6d0 [ 70.584278][ T3598] ? lock_chain_count+0x20/0x20 [ 70.589158][ T3598] ? lock_chain_count+0x20/0x20 [ 70.594027][ T3598] ? __might_fault+0xd1/0x170 [ 70.598725][ T3598] ? lock_downgrade+0x6e0/0x6e0 [ 70.603605][ T3598] ___sys_sendmsg+0xf3/0x170 [ 70.608212][ T3598] ? sendmsg_copy_msghdr+0x160/0x160 [ 70.613547][ T3598] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.619561][ T3598] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.625577][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.631836][ T3598] ? __fget_light+0x215/0x280 [ 70.636554][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.642818][ T3598] __sys_sendmsg+0xe5/0x1b0 [ 70.647341][ T3598] ? __sys_sendmsg_sock+0x30/0x30 [ 70.652401][ T3598] ? syscall_enter_from_user_mode+0x21/0x70 [ 70.658316][ T3598] do_syscall_64+0x35/0xb0 [ 70.662744][ T3598] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.668655][ T3598] RIP: 0033:0x7f997961daa9 [ 70.673079][ T3598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.692706][ T3598] RSP: 002b:00007fff07129dd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.701139][ T3598] RAX: ffffffffffffffda RBX: 00007f99796973a0 RCX: 00007f997961daa9 [ 70.709125][ T3598] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 70.717107][ T3598] RBP: 0000000000000003 R08: 0000000c00000001 R09: 0000000c00000001 [ 70.725088][ T3598] R10: 0000000c00000001 R11: 0000000000000246 R12: 0000000000000031 [ 70.733069][ T3598] R13: 00007fff07129e20 R14: 00007fff07129e0a R15: 00007f9979697410 [ 70.741066][ T3598] [ 70.744277][ T3598] Kernel Offset: disabled [ 70.748674][ T3598] Rebooting in 86400 seconds..