------------[ cut here ]------------ wlan0: Failed check-sdata-in-driver check, flags: 0x4 WARNING: CPU: 0 PID: 342188 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 net/mac80211/driver-ops.h:172 Modules linked in: CPU: 0 PID: 342188 Comm: syz-executor.1 Not tainted 5.10.239 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:drv_bss_info_changed+0x554/0x5f0 net/mac80211/driver-ops.h:172 Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 84 43 8b fd e8 7f 43 8b fd 8b 54 24 04 48 89 ee 48 c7 c7 60 e5 95 84 e8 95 fe 24 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 dd 51 b7 fd e9 97 fb ff ff 4c 89 RSP: 0018:ffff88806ba8f510 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000040000 RSI: ffffffff8129f9b3 RDI: ffffed100d751e94 RBP: ffff888021dc4000 R08: 0000000000000001 R09: ffff88806ce37b0f R10: 0000000000000000 R11: 0000000000000001 R12: ffff888021dc4bc0 R13: 0000000002000000 R14: ffff888021dc5da0 R15: ffff888021dc5d98 FS: 00007f52f7fd8700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30329000 CR3: 000000005d69a000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000dddd06aa Call Trace: ieee80211_bss_info_change_notify+0x9a/0xc0 net/mac80211/main.c:212 ieee80211_set_mcast_rate+0x37/0x50 net/mac80211/cfg.c:2566 rdev_set_mcast_rate net/wireless/rdev-ops.h:1212 [inline] nl80211_set_mcast_rate+0x30b/0x650 net/wireless/nl80211.c:10222 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline] netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:651 [inline] __sock_sendmsg+0x154/0x190 net/socket.c:663 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7f52faa62b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f52f7fd8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f52fab75f60 RCX: 00007f52faa62b19 RDX: 0000000000000000 RSI: 0000000020000f00 RDI: 0000000000000003 RBP: 00007f52faabcf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd487c97df R14: 00007f52f7fd8300 R15: 0000000000022000 irq event stamp: 2983 hardirqs last enabled at (2995): [] console_unlock+0x92d/0xb40 kernel/printk/printk.c:2567 hardirqs last disabled at (3008): [] console_unlock+0x839/0xb40 kernel/printk/printk.c:2482 softirqs last enabled at (2230): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (2147): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace ed63f659c77a85e8 ]--- netlink: 248 bytes leftover after parsing attributes in process `syz-executor.7'. sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' CPU: 0 PID: 342197 Comm: syz-executor.7 Tainted: G W 5.10.239 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30 sysfs_do_create_link_sd+0x122/0x140 fs/sysfs/symlink.c:51 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline] sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92 device_add_class_symlinks drivers/base/core.c:2751 [inline] device_add+0x703/0x1c50 drivers/base/core.c:2959 wiphy_register+0x1da6/0x2850 net/wireless/core.c:915 ieee80211_register_hw+0x23c5/0x38b0 net/mac80211/main.c:1295 mac80211_hwsim_new_radio+0x1d04/0x4290 drivers/net/wireless/mac80211_hwsim.c:3300 hwsim_new_radio_nl+0x991/0x1080 drivers/net/wireless/mac80211_hwsim.c:3881 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline] netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:651 [inline] __sock_sendmsg+0x154/0x190 net/socket.c:663 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7f35708d1b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f356de47188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f35709e4f60 RCX: 00007f35708d1b19 RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 RBP: 00007f357092bf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbbc41eff R14: 00007f356de47300 R15: 0000000000022000 hpet: Lost 2 RTC interrupts netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 248 bytes leftover after parsing attributes in process `syz-executor.7'. sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' CPU: 0 PID: 342715 Comm: syz-executor.7 Tainted: G W 5.10.239 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30 sysfs_do_create_link_sd+0x122/0x140 fs/sysfs/symlink.c:51 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline] sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92 device_add_class_symlinks drivers/base/core.c:2751 [inline] device_add+0x703/0x1c50 drivers/base/core.c:2959 wiphy_register+0x1da6/0x2850 net/wireless/core.c:915 ieee80211_register_hw+0x23c5/0x38b0 net/mac80211/main.c:1295 mac80211_hwsim_new_radio+0x1d04/0x4290 drivers/net/wireless/mac80211_hwsim.c:3300 hwsim_new_radio_nl+0x991/0x1080 drivers/net/wireless/mac80211_hwsim.c:3881 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] genl_rcv_msg+0x36a/0x5a0 net/netlink/genetlink.c:800 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline] netlink_unicast+0x54e/0x800 net/netlink/af_netlink.c:1333 netlink_sendmsg+0x90f/0xe00 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:651 [inline] __sock_sendmsg+0x154/0x190 net/socket.c:663 ____sys_sendmsg+0x70d/0x870 net/socket.c:2378 ___sys_sendmsg+0xf3/0x170 net/socket.c:2432 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2461 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7f35708d1b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f356de47188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f35709e4f60 RCX: 00007f35708d1b19 RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 RBP: 00007f357092bf6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbbc41eff R14: 00007f356de47300 R15: 0000000000022000 hpet: Lost 2 RTC interrupts netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready EXT4-fs (sda): Cannot change data mode on remount wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready EXT4-fs (sda): Cannot change data mode on remount EXT4-fs (sda): Cannot change data mode on remount EXT4-fs (sda): Cannot change data mode on remount wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready blktrace: Concurrent blktraces are not allowed on loop6 __nla_validate_parse: 3 callbacks suppressed netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready audit: type=1326 audit(1752337163.998:2643): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345591 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 audit: type=1326 audit(1752337163.999:2644): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345591 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 audit: type=1326 audit(1752337163.999:2645): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345591 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 audit: type=1326 audit(1752337163.999:2646): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345591 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 netlink: 204 bytes leftover after parsing attributes in process `syz-executor.7'. audit: type=1326 audit(1752337163.999:2647): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345591 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.018:2648): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345591 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. audit: type=1326 audit(1752337164.026:2649): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345591 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready audit: type=1326 audit(1752337164.026:2650): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345591 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.026:2651): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345591 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready netlink: 204 bytes leftover after parsing attributes in process `syz-executor.7'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 204 bytes leftover after parsing attributes in process `syz-executor.3'. wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready netlink: 204 bytes leftover after parsing attributes in process `syz-executor.5'. kauditd_printk_skb: 199 callbacks suppressed audit: type=1326 audit(1752337164.655:2851): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345840 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.660:2852): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345839 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f86c09d2b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.660:2853): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345839 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c09d2b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.661:2854): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345839 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c09d2b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.664:2855): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345840 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.664:2856): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345840 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35708d1b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.665:2858): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345838 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b8342b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.665:2859): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345838 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b8342b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.666:2860): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345838 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f85b8342b19 code=0x7ffc0000 audit: type=1326 audit(1752337164.666:2861): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=345838 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b8342b19 code=0x7ffc0000 : renamed from lo EXT4-fs (sda): re-mounted. Opts: (null) EXT4-fs (sda): re-mounted. Opts: (null) : renamed from lo EXT4-fs (sda): re-mounted. Opts: (null) EXT4-fs (sda): re-mounted. Opts: (null) Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures