Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [*] Starting Bug Reproducer for WARNING in ieee80211_queue_skb... [+] Ensured /dev/etherd character device nodes exist. [+] Master link index: 7 [+] Created ipvlan0 on master index 7 successfully. [+] ipvlan0 brought UP successfully. [+] Created ipvlan1 on master index 7 successfully. [+] ipvlan1 brought UP successfully. [+] Resolved nl80211 generic netlink family id: 38 [+] Found wlan0 with ifindex: 8 [+] wlan0 brought DOWN successfully. [+] Set interface 8 to type 3 successful. [+] wlan0 brought UP successfully. [+] Interface wlan0 MAC: 02:00:00:00:00:00 [+] NL80211_CMD_START_AP successful. [+] Created AP_VLAN interface syzkaller0 with 4ADDR enabled. [+] Created syzkaller0 with ifindex: 43 [+] syzkaller0 brought UP successfully. [+] NL80211_CMD_NEW_STATION successful (vlan_idx: 43). [+] NL80211_CMD_SET_STATION successful (vlan_idx: 8). [+] NL80211_CMD_SET_STATION successful (vlan_idx: 43). [+] thr_aoe_discover started on CPU 0. [+] thr_pkt_sender started on CPU 1 (transmitting on ifindex 43). [ 130.657042][ T6060] ------------[ cut here ]------------ [ 130.657059][ T6060] syzkaller0: Failed check-sdata-in-driver check, flags: 0x0 [ 130.657077][ T6060] WARNING: net/mac80211/driver-ops.h:1380 at ieee80211_queue_skb+0x1cb4/0x22e0, CPU#1: syz-executor116/6060 [ 130.663663][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.663861][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.670087][ T1316] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 130.670206][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 130.713345][ T6060] Modules linked in: [ 130.717360][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz-executor116 Not tainted syzkaller #0 PREEMPT(full) [ 130.727625][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.738127][ T6060] RIP: 0010:ieee80211_queue_skb+0x1cfc/0x22e0 [ 130.744579][ T6060] Code: 00 00 48 85 c0 4c 0f 44 e5 48 b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 6d 04 00 00 41 8b 16 4c 89 ff 4c 89 e6 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b5 fa ff ff e8 bb [ 130.764555][ T6060] RSP: 0018:ffffc90003316f70 EFLAGS: 00010246 [ 130.770764][ T6060] RAX: 0000000000000000 RBX: ffff88805ac32d90 RCX: dffffc0000000000 [ 130.778904][ T6060] RDX: 0000000000000000 RSI: ffff88805ac30120 RDI: ffffffff91d2d970 [ 130.787037][ T6060] RBP: ffff88805ac319f0 R08: ffffffff91c0abbf R09: 1ffffffff2381577 [ 130.795080][ T6060] R10: dffffc0000000000 R11: fffffbfff2381578 R12: ffff88805ac30120 [ 130.803096][ T6060] R13: 1ffff1100b58633c R14: ffff88805ac319e0 R15: ffffffff91d2d970 [ 130.811494][ T6060] FS: 00007f837dd626c0(0000) GS:ffff88812347c000(0000) knlGS:0000000000000000 [ 130.820568][ T6060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.827504][ T6060] CR2: 00007f837e562ff8 CR3: 0000000013544000 CR4: 00000000003526f0 [ 130.835580][ T6060] Call Trace: [ 130.838890][ T6060] [ 130.841951][ T6060] __ieee80211_xmit_fast+0x8ea/0x2160 [ 130.847478][ T6060] ? lock_acquire+0x115/0x350 [ 130.852187][ T6060] ? __siphash_unaligned+0x28d/0x3e0 [ 130.857653][ T6060] ? __flow_hash_from_keys+0x431/0x6c0 [ 130.863266][ T6060] ? __skb_get_hash_net+0x13f/0x2e0 [ 130.868548][ T6060] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 130.874440][ T6060] ? __ieee80211_subif_start_xmit+0x1256/0x1840 [ 130.880894][ T6060] ? ieee80211_tx_skb_fixup+0x329/0x520 [ 130.886560][ T6060] __ieee80211_subif_start_xmit+0x1367/0x1840 [ 130.892695][ T6060] ? __lock_acquire+0x747/0x2de0 [ 130.897937][ T6060] ? __ieee80211_subif_start_xmit+0x2c5/0x1840 [ 130.904736][ T6060] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 130.911203][ T6060] ? look_up_lock_class+0x57/0x110 [ 130.916424][ T6060] ieee80211_subif_start_xmit+0xee/0x560 [ 130.922086][ T6060] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 130.928662][ T6060] ? dev_queue_xmit_nit+0x2d/0xac0 [ 130.933816][ T6060] ? dev_queue_xmit_nit+0x95c/0xac0 [ 130.939091][ T6060] ? dev_queue_xmit_nit+0x2d/0xac0 [ 130.944379][ T6060] dev_hard_start_xmit+0x2cd/0x830 [ 130.949731][ T6060] __dev_queue_xmit+0x14d1/0x3920 [ 130.954869][ T6060] ? __dev_queue_xmit+0x29b/0x3920 [ 130.960226][ T6060] ? __might_fault+0xaf/0x130 [ 130.965040][ T6060] ? _copy_from_iter+0x21b/0x1680 [ 130.970381][ T6060] ? __pfx___dev_queue_xmit+0x10/0x10 [ 130.976194][ T6060] ? __pfx__copy_from_iter+0x10/0x10 [ 130.981626][ T6060] ? packet_parse_headers+0x551/0x790 [ 130.987758][ T6060] ? __pfx_packet_parse_headers+0x10/0x10 [ 130.993630][ T6060] ? packet_xmit+0x68/0x330 [ 130.998248][ T6060] ? skb_put+0x112/0x210 [ 131.002848][ T6060] packet_sendmsg+0x3f1b/0x51b0 [ 131.007889][ T6060] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 131.013588][ T6060] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 131.019696][ T6060] ? __lock_acquire+0x747/0x2de0 [ 131.024804][ T6060] ? __pfx_packet_sendmsg+0x10/0x10 [ 131.030116][ T6060] ? aa_sk_perm+0x6ff/0x8f0 [ 131.034791][ T6060] ? rwsem_mark_wake+0x410/0x810 [ 131.039780][ T6060] ? __pfx_aa_sk_perm+0x10/0x10 [ 131.044964][ T6060] ? aa_sock_msg_perm+0x144/0x210 [ 131.050083][ T6060] ? apparmor_socket_sendmsg+0x98/0x360 [ 131.055905][ T6060] ? __pfx_packet_sendmsg+0x10/0x10 [ 131.061150][ T6060] sock_sendmsg_nosec+0x14e/0x190 [ 131.066257][ T6060] __sys_sendto+0x408/0x5a0 [ 131.070975][ T6060] ? __pfx___sys_sendto+0x10/0x10 [ 131.076231][ T6060] ? fdget+0x1ac/0x250 [ 131.080538][ T6060] ? rcu_is_watching+0x16/0xb0 [ 131.085840][ T6060] __x64_sys_sendto+0xde/0x100 [ 131.090836][ T6060] do_syscall_64+0x166/0x520 [ 131.095512][ T6060] ? trace_irq_disable+0x3b/0x140 [ 131.100599][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.107087][ T6060] ? clear_bhb_loop+0x70/0xc0 [ 131.111825][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.117885][ T6060] RIP: 0033:0x7f837e5c51de [ 131.122433][ T6060] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 131.142363][ T6060] RSP: 002b:00007f837dd620b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 131.150887][ T6060] RAX: ffffffffffffffda RBX: 00007f837dd626c0 RCX: 00007f837e5c51de [ 131.159090][ T6060] RDX: 000000000000003c RSI: 00007f837dd62140 RDI: 0000000000000004 [ 131.167128][ T6060] RBP: 00007f837dd62120 R08: 00007f837dd62120 R09: 0000000000000014 [ 131.175561][ T6060] R10: 0000000000000040 R11: 0000000000000246 R12: 00007f837dd62180 [ 131.183828][ T6060] R13: 0000000000000013 R14: 00007ffe6cb13b50 R15: 00007ffe6cb13c38 [ 131.191884][ T6060] [ 131.195015][ T6060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.202324][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz-executor116 Not tainted syzkaller #0 PREEMPT(full) [ 131.212070][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.222230][ T6060] Call Trace: [ 131.225545][ T6060] [ 131.228505][ T6060] vpanic+0x26f/0x710 [ 131.232638][ T6060] panic+0xc5/0xd0 [ 131.236675][ T6060] ? __pfx_panic+0x10/0x10 [ 131.241162][ T6060] __warn+0x315/0x4c0 [ 131.245170][ T6060] ? ieee80211_queue_skb+0x1cb4/0x22e0 [ 131.250676][ T6060] ? ieee80211_queue_skb+0x1cb4/0x22e0 [ 131.256247][ T6060] __report_bug+0x276/0x570 [ 131.260824][ T6060] ? ieee80211_queue_skb+0x1cb4/0x22e0 [ 131.266581][ T6060] ? __pfx___report_bug+0x10/0x10 [ 131.271751][ T6060] report_bug_entry+0x19b/0x290 [ 131.276630][ T6060] ? ieee80211_queue_skb+0x1cfc/0x22e0 [ 131.282119][ T6060] ? ieee80211_queue_skb+0x1d01/0x22e0 [ 131.287592][ T6060] handle_bug+0xce/0x200 [ 131.291872][ T6060] exc_invalid_op+0x1a/0x50 [ 131.296502][ T6060] asm_exc_invalid_op+0x1a/0x20 [ 131.301411][ T6060] RIP: 0010:ieee80211_queue_skb+0x1cfc/0x22e0 [ 131.307503][ T6060] Code: 00 00 48 85 c0 4c 0f 44 e5 48 b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 0f 85 6d 04 00 00 41 8b 16 4c 89 ff 4c 89 e6 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b5 fa ff ff e8 bb [ 131.327666][ T6060] RSP: 0018:ffffc90003316f70 EFLAGS: 00010246 [ 131.334025][ T6060] RAX: 0000000000000000 RBX: ffff88805ac32d90 RCX: dffffc0000000000 [ 131.342013][ T6060] RDX: 0000000000000000 RSI: ffff88805ac30120 RDI: ffffffff91d2d970 [ 131.350169][ T6060] RBP: ffff88805ac319f0 R08: ffffffff91c0abbf R09: 1ffffffff2381577 [ 131.358158][ T6060] R10: dffffc0000000000 R11: fffffbfff2381578 R12: ffff88805ac30120 [ 131.366443][ T6060] R13: 1ffff1100b58633c R14: ffff88805ac319e0 R15: ffffffff91d2d970 [ 131.374486][ T6060] __ieee80211_xmit_fast+0x8ea/0x2160 [ 131.379945][ T6060] ? lock_acquire+0x115/0x350 [ 131.384900][ T6060] ? __siphash_unaligned+0x28d/0x3e0 [ 131.390616][ T6060] ? __flow_hash_from_keys+0x431/0x6c0 [ 131.396287][ T6060] ? __skb_get_hash_net+0x13f/0x2e0 [ 131.401515][ T6060] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 131.407388][ T6060] ? __ieee80211_subif_start_xmit+0x1256/0x1840 [ 131.413747][ T6060] ? ieee80211_tx_skb_fixup+0x329/0x520 [ 131.419404][ T6060] __ieee80211_subif_start_xmit+0x1367/0x1840 [ 131.425611][ T6060] ? __lock_acquire+0x747/0x2de0 [ 131.430584][ T6060] ? __ieee80211_subif_start_xmit+0x2c5/0x1840 [ 131.436866][ T6060] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 131.443404][ T6060] ? look_up_lock_class+0x57/0x110 [ 131.448592][ T6060] ieee80211_subif_start_xmit+0xee/0x560 [ 131.454381][ T6060] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 131.460861][ T6060] ? dev_queue_xmit_nit+0x2d/0xac0 [ 131.466119][ T6060] ? dev_queue_xmit_nit+0x95c/0xac0 [ 131.471819][ T6060] ? dev_queue_xmit_nit+0x2d/0xac0 [ 131.476974][ T6060] dev_hard_start_xmit+0x2cd/0x830 [ 131.482976][ T6060] __dev_queue_xmit+0x14d1/0x3920 [ 131.488170][ T6060] ? __dev_queue_xmit+0x29b/0x3920 [ 131.493339][ T6060] ? __might_fault+0xaf/0x130 [ 131.498146][ T6060] ? _copy_from_iter+0x21b/0x1680 [ 131.503550][ T6060] ? __pfx___dev_queue_xmit+0x10/0x10 [ 131.508972][ T6060] ? __pfx__copy_from_iter+0x10/0x10 [ 131.514927][ T6060] ? packet_parse_headers+0x551/0x790 [ 131.520467][ T6060] ? __pfx_packet_parse_headers+0x10/0x10 [ 131.526360][ T6060] ? packet_xmit+0x68/0x330 [ 131.530903][ T6060] ? skb_put+0x112/0x210 [ 131.535203][ T6060] packet_sendmsg+0x3f1b/0x51b0 [ 131.540297][ T6060] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 131.545801][ T6060] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 131.551906][ T6060] ? __lock_acquire+0x747/0x2de0 [ 131.556967][ T6060] ? __pfx_packet_sendmsg+0x10/0x10 [ 131.562384][ T6060] ? aa_sk_perm+0x6ff/0x8f0 [ 131.566930][ T6060] ? rwsem_mark_wake+0x410/0x810 [ 131.571916][ T6060] ? __pfx_aa_sk_perm+0x10/0x10 [ 131.577144][ T6060] ? aa_sock_msg_perm+0x144/0x210 [ 131.582439][ T6060] ? apparmor_socket_sendmsg+0x98/0x360 [ 131.588391][ T6060] ? __pfx_packet_sendmsg+0x10/0x10 [ 131.593881][ T6060] sock_sendmsg_nosec+0x14e/0x190 [ 131.599144][ T6060] __sys_sendto+0x408/0x5a0 [ 131.603798][ T6060] ? __pfx___sys_sendto+0x10/0x10 [ 131.609070][ T6060] ? fdget+0x1ac/0x250 [ 131.613318][ T6060] ? rcu_is_watching+0x16/0xb0 [ 131.618304][ T6060] __x64_sys_sendto+0xde/0x100 [ 131.623109][ T6060] do_syscall_64+0x166/0x520 [ 131.627815][ T6060] ? trace_irq_disable+0x3b/0x140 [ 131.632887][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.639021][ T6060] ? clear_bhb_loop+0x70/0xc0 [ 131.643790][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.649809][ T6060] RIP: 0033:0x7f837e5c51de [ 131.654266][ T6060] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 [ 131.674770][ T6060] RSP: 002b:00007f837dd620b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 131.683268][ T6060] RAX: ffffffffffffffda RBX: 00007f837dd626c0 RCX: 00007f837e5c51de [ 131.691376][ T6060] RDX: 000000000000003c RSI: 00007f837dd62140 RDI: 0000000000000004 [ 131.699557][ T6060] RBP: 00007f837dd62120 R08: 00007f837dd62120 R09: 0000000000000014 [ 131.707660][ T6060] R10: 0000000000000040 R11: 0000000000000246 R12: 00007f837dd62180 [ 131.715861][ T6060] R13: 0000000000000013 R14: 00007ffe6cb13b50 R15: 00007ffe6cb13c38 [ 131.724066][ T6060] [ 131.727745][ T6060] Kernel Offset: disabled [ 131.732123][ T6060] Rebooting in 86400 seconds..