------------[ cut here ]------------ wlan1: Failed check-sdata-in-driver check, flags: 0x4 WARNING: CPU: 0 PID: 30626 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x4dd/0x5f0 net/mac80211/driver-ops.h:172 Modules linked in: CPU: 1 PID: 30626 Comm: syz-executor.3 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 RIP: 0010:drv_bss_info_changed+0x4dd/0x5f0 net/mac80211/driver-ops.h:172 Code: 08 06 00 00 48 85 ed 0f 84 b9 00 00 00 e8 1b b7 bc f8 e8 16 b7 bc f8 8b 54 24 04 48 89 ee 48 c7 c7 20 cc f3 8a e8 24 cc 74 00 <0f> 0b e9 f6 fd ff ff e8 f7 b6 bc f8 e8 f2 d1 b9 00 31 ff 89 c3 89 RSP: 0018:ffffc9000c137590 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000040000 RSI: ffffffff81611718 RDI: fffff52001826ea4 RBP: ffff888017730000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000001 R12: ffff888017730c80 R13: 0000000000400000 R14: ffff8880177322d0 R15: ffff8880177322c8 FS: 00007ff2ea81c700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe1450d1000 CR3: 00000000452b7000 CR4: 00000000003506e0 Call Trace: ieee80211_bss_info_change_notify+0x9a/0xc0 net/mac80211/main.c:210 ieee80211_ocb_leave+0x249/0x3c0 net/mac80211/ocb.c:228 rdev_leave_ocb net/wireless/rdev-ops.h:382 [inline] __cfg80211_leave_ocb+0x1ec/0x550 net/wireless/ocb.c:70 cfg80211_leave_ocb+0x4e/0x70 net/wireless/ocb.c:84 cfg80211_change_iface+0xc7d/0xf10 net/wireless/util.c:1068 nl80211_set_interface+0x64f/0x8c0 net/wireless/nl80211.c:4041 genl_family_rcv_msg_doit+0x228/0x320 net/netlink/genetlink.c:731 genl_family_rcv_msg net/netlink/genetlink.c:775 [inline] genl_rcv_msg+0x328/0x580 net/netlink/genetlink.c:792 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2501 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:734 __sys_sendto+0x236/0x340 net/socket.c:2120 __do_sys_sendto net/socket.c:2132 [inline] __se_sys_sendto net/socket.c:2128 [inline] __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2128 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff2e963c03c Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b RSP: 002b:00007ff2ea81af60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007ff2ea81b0d0 RCX: 00007ff2e963c03c RDX: 0000000000000024 RSI: 00007ff2ea81b120 RDI: 0000000000000006 RBP: 0000000000000000 R08: 00007ff2ea81afb4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ff2ea81b120 R14: 0000000000000006 R15: 0000000000000000