forked to background, child pid 3171 no interfaces have a carrier [ 21.238167][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.247983][ T3172] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.129' (ECDSA) to the list of known hosts. syzkaller login: [ 58.546786][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.554805][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.567604][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.578432][ T973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.586543][ T973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 58.595150][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.668886][ T3587] ------------[ cut here ]------------ [ 58.674490][ T3587] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 58.682292][ T3587] WARNING: CPU: 1 PID: 3587 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4dd/0x5f0 [ 58.693693][ T3587] Modules linked in: [ 58.697969][ T3587] CPU: 1 PID: 3587 Comm: syz-executor394 Not tainted 5.18.0-rc3-syzkaller #0 [ 58.707827][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.719016][ T3587] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0 [ 58.725014][ T3587] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 2b b5 d1 f8 e8 26 b5 d1 f8 8b 54 24 04 48 89 ee 48 c7 c7 60 e3 ef 8a e8 52 0b 74 00 <0f> 0b e9 f6 fd ff ff e8 07 b5 d1 f8 e8 82 73 b8 00 31 ff 89 c3 89 [ 58.745078][ T3587] RSP: 0018:ffffc90003abf500 EFLAGS: 00010282 [ 58.751451][ T3587] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 58.759700][ T3587] RDX: ffff8880190c9d00 RSI: ffffffff81600b68 RDI: fffff52000757e92 [ 58.767887][ T3587] RBP: ffff88801f994000 R08: 0000000000000000 R09: 0000000000000000 [ 58.776092][ T3587] R10: ffffffff815fb53e R11: 0000000000000000 R12: ffff88801f994d00 [ 58.784068][ T3587] R13: 0000000002000000 R14: ffff88801f996350 R15: ffff88801f996348 [ 58.792287][ T3587] FS: 000055555629d300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 58.801483][ T3587] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.808461][ T3587] CR2: 00007f89b4d0df50 CR3: 000000007f6b7000 CR4: 0000000000350ee0 [ 58.816659][ T3587] Call Trace: [ 58.820025][ T3587] [ 58.822956][ T3587] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 58.829464][ T3587] ieee80211_set_mcast_rate+0x37/0x40 [ 58.834842][ T3587] ? ieee80211_copy_mbssid_beacon+0x270/0x270 [ 58.841177][ T3587] nl80211_set_mcast_rate+0x317/0x610 [ 58.846698][ T3587] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 58.853297][ T3587] ? nl80211_pre_doit+0xa6/0x640 [ 58.858534][ T3587] genl_family_rcv_msg_doit+0x228/0x320 [ 58.864097][ T3587] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 58.871906][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.878375][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.884829][ T3587] ? ns_capable+0xd9/0x100 [ 58.889492][ T3587] genl_rcv_msg+0x328/0x580 [ 58.894015][ T3587] ? genl_get_cmd+0x480/0x480 [ 58.899014][ T3587] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 58.906018][ T3587] ? lock_release+0x720/0x720 [ 58.910758][ T3587] netlink_rcv_skb+0x153/0x420 [ 58.915831][ T3587] ? genl_get_cmd+0x480/0x480 [ 58.920535][ T3587] ? netlink_ack+0xa80/0xa80 [ 58.925162][ T3587] ? netlink_deliver_tap+0x1b1/0xc40 [ 58.930680][ T3587] genl_rcv+0x24/0x40 [ 58.934674][ T3587] netlink_unicast+0x543/0x7f0 [ 58.939712][ T3587] ? netlink_attachskb+0x880/0x880 [ 58.944830][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.951299][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.957773][ T3587] ? __phys_addr_symbol+0x2c/0x70 [ 58.962807][ T3587] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 58.968733][ T3587] ? __check_object_size+0x16c/0x4f0 [ 58.974034][ T3587] netlink_sendmsg+0x904/0xe00 [ 58.979180][ T3587] ? netlink_unicast+0x7f0/0x7f0 [ 58.984158][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.990681][ T3587] ? netlink_unicast+0x7f0/0x7f0 [ 58.995859][ T3587] sock_sendmsg+0xcf/0x120 [ 59.000288][ T3587] ____sys_sendmsg+0x6e2/0x800 [ 59.005067][ T3587] ? kernel_sendmsg+0x50/0x50 [ 59.010018][ T3587] ? do_recvmmsg+0x6d0/0x6d0 [ 59.014620][ T3587] ? find_held_lock+0x2d/0x110 [ 59.019680][ T3587] ? __might_fault+0xd1/0x170 [ 59.024377][ T3587] ? lock_downgrade+0x6e0/0x6e0 [ 59.029484][ T3587] ___sys_sendmsg+0xf3/0x170 [ 59.034087][ T3587] ? sendmsg_copy_msghdr+0x160/0x160 [ 59.039665][ T3587] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.045858][ T3587] ? get_user_ifreq+0x250/0x250 [ 59.050728][ T3587] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.057486][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.063737][ T3587] ? __fget_light+0x20f/0x270 [ 59.068683][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 59.075124][ T3587] __sys_sendmsg+0xe5/0x1b0 [ 59.080009][ T3587] ? __sys_sendmsg_sock+0x30/0x30 [ 59.085502][ T3587] ? syscall_enter_from_user_mode+0x21/0x70 [ 59.091578][ T3587] do_syscall_64+0x35/0xb0 [ 59.096464][ T3587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.102376][ T3587] RIP: 0033:0x7f0fc9dc5aa9 [ 59.107072][ T3587] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.127237][ T3587] RSP: 002b:00007ffe4349d738 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.135856][ T3587] RAX: ffffffffffffffda RBX: 00007f0fc9e3f3a0 RCX: 00007f0fc9dc5aa9 [ 59.143834][ T3587] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 59.152115][ T3587] RBP: 0000000000000003 R08: 0000000c00000000 R09: 0000000c00000000 [ 59.160384][ T3587] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000000031 [ 59.168741][ T3587] R13: 00007ffe4349d780 R14: 00007ffe4349d76a R15: 00007f0fc9e3f410 [ 59.178274][ T3587] [ 59.181295][ T3587] Kernel panic - not syncing: panic_on_warn set ... [ 59.187883][ T3587] CPU: 1 PID: 3587 Comm: syz-executor394 Not tainted 5.18.0-rc3-syzkaller #0 [ 59.196646][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.206692][ T3587] Call Trace: [ 59.209962][ T3587] [ 59.212877][ T3587] dump_stack_lvl+0xcd/0x134 [ 59.217465][ T3587] panic+0x2d7/0x636 [ 59.221349][ T3587] ? panic_print_sys_info.part.0+0x10b/0x10b [ 59.227325][ T3587] ? __warn.cold+0x1d1/0x2c5 [ 59.231928][ T3587] ? drv_bss_info_changed+0x4dd/0x5f0 [ 59.237327][ T3587] __warn.cold+0x1e2/0x2c5 [ 59.241735][ T3587] ? wake_up_klogd.part.0+0x8e/0xd0 [ 59.246926][ T3587] ? drv_bss_info_changed+0x4dd/0x5f0 [ 59.252288][ T3587] report_bug+0x1bd/0x210 [ 59.256617][ T3587] handle_bug+0x3c/0x60 [ 59.260761][ T3587] exc_invalid_op+0x14/0x40 [ 59.265253][ T3587] asm_exc_invalid_op+0x12/0x20 [ 59.270090][ T3587] RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0 [ 59.276066][ T3587] Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 2b b5 d1 f8 e8 26 b5 d1 f8 8b 54 24 04 48 89 ee 48 c7 c7 60 e3 ef 8a e8 52 0b 74 00 <0f> 0b e9 f6 fd ff ff e8 07 b5 d1 f8 e8 82 73 b8 00 31 ff 89 c3 89 [ 59.295670][ T3587] RSP: 0018:ffffc90003abf500 EFLAGS: 00010282 [ 59.301926][ T3587] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 59.309879][ T3587] RDX: ffff8880190c9d00 RSI: ffffffff81600b68 RDI: fffff52000757e92 [ 59.317839][ T3587] RBP: ffff88801f994000 R08: 0000000000000000 R09: 0000000000000000 [ 59.325794][ T3587] R10: ffffffff815fb53e R11: 0000000000000000 R12: ffff88801f994d00 [ 59.333924][ T3587] R13: 0000000002000000 R14: ffff88801f996350 R15: ffff88801f996348 [ 59.341974][ T3587] ? wake_up_klogd.part.0+0x8e/0xd0 [ 59.347273][ T3587] ? vprintk+0x88/0x90 [ 59.351363][ T3587] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 59.357424][ T3587] ieee80211_set_mcast_rate+0x37/0x40 [ 59.363148][ T3587] ? ieee80211_copy_mbssid_beacon+0x270/0x270 [ 59.369231][ T3587] nl80211_set_mcast_rate+0x317/0x610 [ 59.374855][ T3587] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 59.381435][ T3587] ? nl80211_pre_doit+0xa6/0x640 [ 59.386393][ T3587] genl_family_rcv_msg_doit+0x228/0x320 [ 59.393259][ T3587] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 59.400717][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.406951][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.413172][ T3587] ? ns_capable+0xd9/0x100 [ 59.417580][ T3587] genl_rcv_msg+0x328/0x580 [ 59.422075][ T3587] ? genl_get_cmd+0x480/0x480 [ 59.426739][ T3587] ? nl80211_tdls_cancel_channel_switch+0x5a0/0x5a0 [ 59.433321][ T3587] ? lock_release+0x720/0x720 [ 59.437994][ T3587] netlink_rcv_skb+0x153/0x420 [ 59.442747][ T3587] ? genl_get_cmd+0x480/0x480 [ 59.447412][ T3587] ? netlink_ack+0xa80/0xa80 [ 59.452192][ T3587] ? netlink_deliver_tap+0x1b1/0xc40 [ 59.457484][ T3587] genl_rcv+0x24/0x40 [ 59.461454][ T3587] netlink_unicast+0x543/0x7f0 [ 59.466213][ T3587] ? netlink_attachskb+0x880/0x880 [ 59.471418][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 59.477653][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 59.483888][ T3587] ? __phys_addr_symbol+0x2c/0x70 [ 59.488909][ T3587] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 59.494699][ T3587] ? __check_object_size+0x16c/0x4f0 [ 59.499998][ T3587] netlink_sendmsg+0x904/0xe00 [ 59.504759][ T3587] ? netlink_unicast+0x7f0/0x7f0 [ 59.509686][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.515917][ T3587] ? netlink_unicast+0x7f0/0x7f0 [ 59.520845][ T3587] sock_sendmsg+0xcf/0x120 [ 59.525337][ T3587] ____sys_sendmsg+0x6e2/0x800 [ 59.530102][ T3587] ? kernel_sendmsg+0x50/0x50 [ 59.534760][ T3587] ? do_recvmmsg+0x6d0/0x6d0 [ 59.539338][ T3587] ? find_held_lock+0x2d/0x110 [ 59.544095][ T3587] ? __might_fault+0xd1/0x170 [ 59.548774][ T3587] ? lock_downgrade+0x6e0/0x6e0 [ 59.553986][ T3587] ___sys_sendmsg+0xf3/0x170 [ 59.558597][ T3587] ? sendmsg_copy_msghdr+0x160/0x160 [ 59.563922][ T3587] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.569900][ T3587] ? get_user_ifreq+0x250/0x250 [ 59.574737][ T3587] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.580801][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 59.587026][ T3587] ? __fget_light+0x20f/0x270 [ 59.591691][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 59.598030][ T3587] __sys_sendmsg+0xe5/0x1b0 [ 59.602688][ T3587] ? __sys_sendmsg_sock+0x30/0x30 [ 59.607727][ T3587] ? syscall_enter_from_user_mode+0x21/0x70 [ 59.613623][ T3587] do_syscall_64+0x35/0xb0 [ 59.618043][ T3587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.623929][ T3587] RIP: 0033:0x7f0fc9dc5aa9 [ 59.628503][ T3587] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.648129][ T3587] RSP: 002b:00007ffe4349d738 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.656714][ T3587] RAX: ffffffffffffffda RBX: 00007f0fc9e3f3a0 RCX: 00007f0fc9dc5aa9 [ 59.664674][ T3587] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 59.672630][ T3587] RBP: 0000000000000003 R08: 0000000c00000000 R09: 0000000c00000000 [ 59.680591][ T3587] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000000031 [ 59.688726][ T3587] R13: 00007ffe4349d780 R14: 00007ffe4349d76a R15: 00007f0fc9e3f410 [ 59.696700][ T3587] [ 59.700322][ T3587] Kernel Offset: disabled [ 59.704705][ T3587] Rebooting in 86400 seconds..