------------[ cut here ]------------
wlan1: Failed check-sdata-in-driver check, flags: 0x0
WARNING: CPU: 0 PID: 7439 at net/mac80211/main.c:236 ieee80211_bss_info_change_notify+0x305/0xab0
Modules linked in:
CPU: 0 PID: 7439 Comm: syz-executor.5 Not tainted 6.5.0-rc1-next-20230710 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:ieee80211_bss_info_change_notify+0x305/0xab0
Code: 88 06 00 00 4d 85 f6 0f 84 c0 06 00 00 e8 53 47 2e fd e8 4e 47 2e fd 8b 54 24 0c 4c 89 f6 48 c7 c7 60 5d e0 84 e8 5b 21 f9 fc <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 0f b6
RSP: 0018:ffff888043037540 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff88804040cb80 RCX: ffffc90003a04000
RDX: 0000000000040000 RSI: ffffffff81174692 RDI: 0000000000000001
RBP: ffff888019a88e20 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000400000
R13: ffff88804040e4f8 R14: ffff88804040c000 R15: 0000000000000000
FS: 00007fe66197a700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe661978ff8 CR3: 0000000016dbc000 CR4: 0000000000350ef0
Call Trace:
ieee80211_ocb_leave+0x1f1/0x350
__cfg80211_leave_ocb+0x1d5/0x5a0
cfg80211_leave_ocb+0x52/0x80
cfg80211_change_iface+0x8cb/0x1080
nl80211_set_interface+0x6b0/0x990
genl_family_rcv_msg_doit.isra.0+0x1ee/0x2e0
genl_rcv_msg+0x503/0x7e0
netlink_rcv_skb+0x15d/0x450
genl_rcv+0x28/0x40
netlink_unicast+0x552/0x800
netlink_sendmsg+0x923/0xe40
sock_sendmsg+0x1b6/0x200
__sys_sendto+0x254/0x360
__x64_sys_sendto+0xe1/0x1c0
do_syscall_64+0x3f/0x90
entry_SYSCALL_64_after_hwframe+0x6e/0xd8
RIP: 0033:0x7fe6643b78ac
Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
RSP: 002b:00007fe661978f80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe6619790f0 RCX: 00007fe6643b78ac
RDX: 0000000000000024 RSI: 00007fe661979140 RDI: 0000000000000006
RBP: 0000000000000000 R08: 00007fe661978fd4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 00007fe661979140 R14: 0000000000000006 R15: 0000000000000000
irq event stamp: 3217
hardirqs last enabled at (3235): [] __up_console_sem+0x78/0x80
hardirqs last disabled at (3246): [] __up_console_sem+0x5d/0x80
softirqs last enabled at (3264): [] irq_exit_rcu+0x93/0xc0
softirqs last disabled at (3255): [] irq_exit_rcu+0x93/0xc0
---[ end trace 0000000000000000 ]---
loop3: detected capacity change from 0 to 264192
EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
9pnet_fd: Insufficient options for proto=fd
loop3: detected capacity change from 0 to 264192
sit: non-ECT from 0.0.0.0 with TOS=0x2
sit: non-ECT from 0.0.0.0 with TOS=0x2
loop4: detected capacity change from 0 to 264192
EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
loop2: detected capacity change from 0 to 264192
EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
loop0: detected capacity change from 0 to 39
EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
loop4: detected capacity change from 0 to 264192
EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
loop2: detected capacity change from 0 to 264192
loop0: detected capacity change from 0 to 39
loop5: detected capacity change from 0 to 39
loop4: detected capacity change from 0 to 264192
EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
loop5: detected capacity change from 0 to 39
EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
loop3: detected capacity change from 0 to 39
EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
loop0: detected capacity change from 0 to 39
loop5: detected capacity change from 0 to 39
loop0: detected capacity change from 0 to 39
loop3: detected capacity change from 0 to 39
loop3: detected capacity change from 0 to 39
loop6: detected capacity change from 0 to 264192
EXT4-fs error (device loop6): __ext4_fill_super:5467: inode #2: comm syz-executor.6: iget: special inode unallocated
EXT4-fs (loop6): get root inode failed
EXT4-fs (loop6): mount failed
loop6: detected capacity change from 0 to 264192
workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
EXT4-fs: failed to create workqueue
EXT4-fs (loop6): mount failed
autofs4:pid:7578:autofs_fill_super: called with bogus options
loop6: detected capacity change from 0 to 264192
EXT4-fs error (device loop6): __ext4_fill_super:5467: inode #2: comm syz-executor.6: iget: special inode unallocated
EXT4-fs (loop6): get root inode failed
EXT4-fs (loop6): mount failed
autofs4:pid:7594:autofs_fill_super: called with bogus options
audit: type=1400 audit(1688988142.478:20): avc: denied { watch_reads } for pid=7597 comm="syz-executor.3" path="/dev/bsg" dev="devtmpfs" ino=112 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1
lo: entered promiscuous mode
lo: entered allmulticast mode
loop6: detected capacity change from 0 to 264192
EXT4-fs error (device loop6): __ext4_fill_super:5467: inode #2: comm syz-executor.6: iget: special inode unallocated
EXT4-fs (loop6): get root inode failed
EXT4-fs (loop6): mount failed
autofs4:pid:7617:autofs_fill_super: called with bogus options
autofs4:pid:7630:autofs_fill_super: called with bogus options
lo: left promiscuous mode
lo: left allmulticast mode
lo: entered promiscuous mode
lo: entered allmulticast mode
loop0: detected capacity change from 0 to 40
Process accounting resumed
Process accounting resumed
loop6: detected capacity change from 0 to 264192
lo: left promiscuous mode
lo: left allmulticast mode
EXT4-fs error (device loop6): __ext4_fill_super:5467: inode #2: comm syz-executor.6: iget: special inode unallocated
EXT4-fs (loop6): get root inode failed
EXT4-fs (loop6): mount failed
lo: entered promiscuous mode
lo: entered allmulticast mode
loop0: detected capacity change from 0 to 40
loop5: detected capacity change from 0 to 40
Process accounting resumed
Process accounting resumed
loop0: detected capacity change from 0 to 40
Process accounting resumed
lo: left promiscuous mode
lo: left allmulticast mode
lo: entered promiscuous mode
lo: entered allmulticast mode
loop5: detected capacity change from 0 to 40
loop0: detected capacity change from 0 to 40
Process accounting resumed
Process accounting resumed
EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 47925 (only 16 groups)
loop5: detected capacity change from 0 to 40
Process accounting resumed
EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 47925 (only 16 groups)
EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 47925 (only 16 groups)
netlink: 'syz-executor.3': attribute type 322 has an invalid length.
netlink: 'syz-executor.3': attribute type 322 has an invalid length.
loop1: detected capacity change from 0 to 6
loop1: detected capacity change from 0 to 6
loop1: detected capacity change from 0 to 6
syz-executor.7 (7804): /proc/7804/oom_adj is deprecated, please use /proc/7804/oom_score_adj instead.
loop1: detected capacity change from 0 to 6
loop1: detected capacity change from 0 to 6
kernel write not supported for file [eventfd] (pid: 157 comm: kworker/1:3)
audit: type=1326 audit(1688988144.443:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7826 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa46521eb19 code=0x0
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 'syz-executor.3': attribute type 3 has an invalid length.
loop3: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop3: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop3: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop5: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop5: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop3: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop5: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop1: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop3: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop1: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
loop1: detected capacity change from 0 to 264192
tmpfs: Bad value for 'nr_blocks'
EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none.
EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none.
loop0: detected capacity change from 0 to 15
loop0: detected capacity change from 0 to 15
SELinux: Context system_u:object_r:dhcpd_unit_file_t:s0 is not valid (left unmapped).
audit: type=1400 audit(1688988146.797:22): avc: denied { associate } for pid=8085 comm="syz-executor.4" name="ssh.service" dev="cgroup2" ino=1109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_unit_file_t:s0"
loop0: detected capacity change from 0 to 15
loop0: detected capacity change from 0 to 15
loop0: detected capacity change from 0 to 15
sit: Src spoofed 0.0.0.156/2002:0:400:0:9cdf:3f09:0:a2 -> 172.20.20.170/bc02::2200
sit: Src spoofed 0.0.0.156/2002:0:400:0:9cdf:3f09:0:a2 -> 172.20.20.170/bc02::2200
loop5: detected capacity change from 0 to 251
loop5: detected capacity change from 0 to 251
loop7: detected capacity change from 0 to 240