R13: 00007fffbe67973f R14: 00007fa02097d300 R15: 0000000000022000 ------------[ cut here ]------------ wlan1: Failed check-sdata-in-driver check, flags: 0x4 WARNING: CPU: 1 PID: 9338 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 net/mac80211/driver-ops.h:172 Modules linked in: CPU: 1 PID: 9338 Comm: syz-executor.3 Not tainted 5.10.235 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:drv_bss_info_changed+0x554/0x5f0 net/mac80211/driver-ops.h:172 Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 54 ab 8b fd e8 4f ab 8b fd 8b 54 24 04 48 89 ee 48 c7 c7 c0 da 95 84 e8 dc 07 25 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 7d af b7 fd e9 97 fb ff ff 4c 89 RSP: 0018:ffff8880517e73f8 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000040000 RSI: ffffffff8129e973 RDI: ffffed100a2fce71 RBP: ffff888047670000 R08: 0000000000000001 R09: ffff88806cf37b0f R10: 0000000000000000 R11: 0000000000000001 R12: ffff888047670bc0 R13: 0000000000400000 R14: ffff888047671da0 R15: ffff888047671d98 FS: 00007f8f99436700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d222000 CR3: 00000000201c4000 CR4: 0000000000350ee0 Call Trace: ieee80211_bss_info_change_notify+0x9a/0xc0 net/mac80211/main.c:212 ieee80211_ocb_leave+0x1ed/0x340 net/mac80211/ocb.c:228 rdev_leave_ocb net/wireless/rdev-ops.h:382 [inline] __cfg80211_leave_ocb+0x1d6/0x570 net/wireless/ocb.c:70 cfg80211_leave_ocb+0x4e/0x70 net/wireless/ocb.c:84 cfg80211_change_iface+0x843/0xf90 net/wireless/util.c:1064 nl80211_set_interface+0x67c/0x8f0 net/wireless/nl80211.c:3816 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline] netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:651 [inline] __sock_sendmsg+0x154/0x190 net/socket.c:663 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7f8f9bec0b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8f99436188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f8f9bfd3f60 RCX: 00007f8f9bec0b19 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 RBP: 00007f8f9bf1af6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcfb4177ff R14: 00007f8f99436300 R15: 0000000000022000 irq event stamp: 2327 hardirqs last enabled at (2337): [] console_unlock+0x92d/0xb40 kernel/printk/printk.c:2567 hardirqs last disabled at (2346): [] console_unlock+0x839/0xb40 kernel/printk/printk.c:2482 softirqs last enabled at (1450): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (1339): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace 8b290d90c9dc0044 ]--- FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 9352 Comm: syz-executor.2 Tainted: G W 5.10.235 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 should_failslab+0x5/0x20 mm/slab_common.c:1200 slab_pre_alloc_hook mm/slab.h:515 [inline] slab_alloc_node mm/slub.c:2821 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc+0x5b/0x310 mm/slub.c:2909 mem_pool_alloc mm/kmemleak.c:423 [inline] create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:578 kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline] slab_post_alloc_hook mm/slab.h:534 [inline] slab_alloc_node mm/slub.c:2896 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc+0x159/0x310 mm/slub.c:2909 kmem_cache_zalloc include/linux/slab.h:654 [inline] lsm_file_alloc security/security.c:571 [inline] security_file_alloc+0x34/0x170 security/security.c:1472 __alloc_file+0xb7/0x320 fs/file_table.c:106 alloc_empty_file+0x6d/0x170 fs/file_table.c:151 path_openat+0xe6/0x2770 fs/namei.c:3411 do_filp_open+0x190/0x3e0 fs/namei.c:3452 do_sys_openat2+0x171/0x4d0 fs/open.c:1227 do_sys_open fs/open.c:1243 [inline] __do_sys_openat fs/open.c:1259 [inline] __se_sys_openat fs/open.c:1254 [inline] __x64_sys_openat+0x13f/0x1f0 fs/open.c:1254 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7f14596ffa04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f1456cc20b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f145985ff60 RCX: 00007f14596ffa04 RDX: 0000000000000000 RSI: 00007f14597a5f82 RDI: 00000000ffffff9c RBP: 00007f14597a5f82 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007ffc9e181b9f R14: 00007f1456cc2300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 9354 Comm: syz-executor.4 Tainted: G W 5.10.235 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 should_failslab+0x5/0x20 mm/slab_common.c:1200 slab_pre_alloc_hook mm/slab.h:515 [inline] slab_alloc_node mm/slub.c:2821 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc+0x5b/0x310 mm/slub.c:2909 __d_alloc+0x2a/0x990 fs/dcache.c:1714 __ns_get_path+0x300/0x7e0 fs/nsfs.c:92 ns_get_path_cb fs/nsfs.c:118 [inline] ns_get_path+0x3d/0xa0 fs/nsfs.c:144 perf_fill_ns_link_info+0x76/0x1f0 kernel/events/core.c:7986 perf_event_namespaces.part.0+0xdb/0x180 kernel/events/core.c:8028 perf_event_namespaces kernel/events/core.c:8000 [inline] perf_event_fork+0x4a/0x60 kernel/events/core.c:7821 copy_process+0x505a/0x7800 kernel/fork.c:2338 create_io_thread+0xb6/0xf0 kernel/fork.c:2454 create_io_worker+0x23a/0x690 io_uring/io-wq.c:835 io_wqe_create_worker io_uring/io-wq.c:313 [inline] io_wqe_enqueue+0x69e/0xbe0 io_uring/io-wq.c:948 io_queue_async_work+0x26b/0x4f0 io_uring/io_uring.c:1484 __io_queue_sqe+0x5cc/0x9d0 io_uring/io_uring.c:7104 io_queue_sqe io_uring/io_uring.c:7122 [inline] io_submit_sqe io_uring/io_uring.c:7299 [inline] io_submit_sqes+0x44aa/0x8610 io_uring/io_uring.c:7405 __do_sys_io_uring_enter+0x6b2/0x1890 io_uring/io_uring.c:9943 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7f52f5325b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f52f289b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa RAX: ffffffffffffffda RBX: 00007f52f5438f60 RCX: 00007f52f5325b19 RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 RBP: 00007f52f289b1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffe1fccac8f R14: 00007f52f289b300 R15: 0000000000022000