[ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. Starting Load/Save RF Kill Switch Status... [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts. syzkaller login: [ 71.576170][ T8502] IPVS: ftp: loaded support on port[0] = 21 [ 71.674590][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.701458][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 71.733699][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.746517][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.758404][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.771476][ T3205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.822447][ T8543] ------------[ cut here ]------------ [ 71.828095][ T8543] WARNING: CPU: 1 PID: 8543 at net/mac80211/ieee80211_i.h:1456 sta_info_alloc+0x191d/0x1f90 [ 71.838433][ T8543] Modules linked in: [ 71.843116][ T8543] CPU: 1 PID: 8543 Comm: syz-executor155 Not tainted 5.11.0-rc4-syzkaller #0 [ 71.851982][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.862154][ T8543] RIP: 0010:sta_info_alloc+0x191d/0x1f90 [ 71.867832][ T8543] Code: 85 8f 03 00 00 49 8b 9f 60 01 00 00 e9 04 f7 ff ff e8 97 23 25 f9 8b 5c 24 08 83 e3 01 83 c3 01 e9 ab fb ff ff e8 83 23 25 f9 <0f> 0b e8 6c 0b ac 00 31 ff 89 c3 89 c6 e8 f1 2a 25 f9 85 db 74 1d [ 71.887734][ T8543] RSP: 0018:ffffc90001a0f3e0 EFLAGS: 00010293 [ 71.894316][ T8543] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 71.902877][ T8543] RDX: ffff88801ee49bc0 RSI: ffffffff884da68d RDI: 0000000000000003 [ 71.911069][ T8543] RBP: ffff88801a4a8c80 R08: 0000000000000000 R09: 0000000000000000 [ 71.919669][ T8543] R10: ffffffff884da5ca R11: 0000000000000000 R12: 0000000000000000 [ 71.928163][ T8543] R13: 0000000000000008 R14: dffffc0000000000 R15: ffff888028392000 [ 71.936386][ T8543] FS: 00000000019ea880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 71.945693][ T8543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.952537][ T8543] CR2: 00007f7188f99018 CR3: 000000001d0b2000 CR4: 00000000001506f0 [ 71.960759][ T8543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.968761][ T8543] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.976946][ T8543] Call Trace: [ 71.980374][ T8543] ieee80211_add_station+0x28c/0x660 [ 71.985691][ T8543] nl80211_new_station+0xdd0/0x13c0 [ 71.990991][ T8543] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 71.997288][ T8543] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 72.003661][ T8543] ? nl80211_pre_doit+0xa2/0x630 [ 72.008675][ T8543] genl_family_rcv_msg_doit+0x228/0x320 [ 72.014322][ T8543] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 72.021813][ T8543] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.028096][ T8543] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.034459][ T8543] ? ns_capable+0xde/0x100 [ 72.038906][ T8543] genl_rcv_msg+0x328/0x580 [ 72.043573][ T8543] ? genl_get_cmd+0x480/0x480 [ 72.048297][ T8543] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 72.054630][ T8543] ? lock_release+0x710/0x710 [ 72.059359][ T8543] netlink_rcv_skb+0x153/0x420 [ 72.064232][ T8543] ? genl_get_cmd+0x480/0x480 [ 72.068953][ T8543] ? netlink_ack+0xaa0/0xaa0 [ 72.073703][ T8543] genl_rcv+0x24/0x40 [ 72.077805][ T8543] netlink_unicast+0x533/0x7d0 [ 72.082703][ T8543] ? netlink_attachskb+0x870/0x870 [ 72.087863][ T8543] ? _copy_from_iter_full+0x275/0x850 [ 72.093348][ T8543] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.099616][ T8543] ? __phys_addr_symbol+0x2c/0x70 [ 72.104751][ T8543] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 72.110750][ T8543] ? __check_object_size+0x171/0x3f0 [ 72.116072][ T8543] netlink_sendmsg+0x856/0xd90 [ 72.120959][ T8543] ? netlink_unicast+0x7d0/0x7d0 [ 72.125930][ T8543] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.132263][ T8543] ? netlink_unicast+0x7d0/0x7d0 [ 72.137236][ T8543] sock_sendmsg+0xcf/0x120 [ 72.141776][ T8543] ____sys_sendmsg+0x6e8/0x810 [ 72.146578][ T8543] ? kernel_sendmsg+0x50/0x50 [ 72.151349][ T8543] ? do_recvmmsg+0x6c0/0x6c0 [ 72.155969][ T8543] ? find_held_lock+0x2d/0x110 [ 72.160852][ T8543] ___sys_sendmsg+0xf3/0x170 [ 72.165498][ T8543] ? sendmsg_copy_msghdr+0x160/0x160 [ 72.170901][ T8543] ? _copy_to_user+0xdc/0x150 [ 72.175602][ T8543] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.181953][ T8543] ? sock_do_ioctl+0x168/0x2d0 [ 72.186755][ T8543] ? compat_ifr_data_ioctl+0x150/0x150 [ 72.192316][ T8543] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 72.198239][ T8543] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.204776][ T8543] ? __fget_light+0x215/0x280 [ 72.209484][ T8543] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.215848][ T8543] __sys_sendmsg+0xe5/0x1b0 [ 72.220493][ T8543] ? __sys_sendmsg_sock+0xb0/0xb0 [ 72.225542][ T8543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 72.231562][ T8543] do_syscall_64+0x2d/0x70 [ 72.236019][ T8543] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.242130][ T8543] RIP: 0033:0x4421d9 [ 72.246078][ T8543] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 72.265857][ T8543] RSP: 002b:00007fff90ce2c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.274403][ T8543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004421d9 [ 72.282490][ T8543] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 72.290615][ T8543] RBP: 000000316e616c77 R08: 0000002100000000 R09: 0000002100000000 [ 72.298614][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001186e [ 72.306724][ T8543] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 72.314846][ T8543] Kernel panic - not syncing: panic_on_warn set ... [ 72.321446][ T8543] CPU: 0 PID: 8543 Comm: syz-executor155 Not tainted 5.11.0-rc4-syzkaller #0 [ 72.330224][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.340288][ T8543] Call Trace: [ 72.343576][ T8543] dump_stack+0x107/0x163 [ 72.347941][ T8543] panic+0x306/0x73d [ 72.351836][ T8543] ? __warn_printk+0xf3/0xf3 [ 72.356607][ T8543] ? __warn.cold+0x1a/0x44 [ 72.361109][ T8543] ? sta_info_alloc+0x191d/0x1f90 [ 72.366193][ T8543] __warn.cold+0x35/0x44 [ 72.370481][ T8543] ? sta_info_alloc+0x191d/0x1f90 [ 72.375512][ T8543] report_bug+0x1bd/0x210 [ 72.379874][ T8543] handle_bug+0x3c/0x60 [ 72.384052][ T8543] exc_invalid_op+0x14/0x40 [ 72.388558][ T8543] asm_exc_invalid_op+0x12/0x20 [ 72.393432][ T8543] RIP: 0010:sta_info_alloc+0x191d/0x1f90 [ 72.399069][ T8543] Code: 85 8f 03 00 00 49 8b 9f 60 01 00 00 e9 04 f7 ff ff e8 97 23 25 f9 8b 5c 24 08 83 e3 01 83 c3 01 e9 ab fb ff ff e8 83 23 25 f9 <0f> 0b e8 6c 0b ac 00 31 ff 89 c3 89 c6 e8 f1 2a 25 f9 85 db 74 1d [ 72.418776][ T8543] RSP: 0018:ffffc90001a0f3e0 EFLAGS: 00010293 [ 72.424846][ T8543] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 72.432830][ T8543] RDX: ffff88801ee49bc0 RSI: ffffffff884da68d RDI: 0000000000000003 [ 72.440803][ T8543] RBP: ffff88801a4a8c80 R08: 0000000000000000 R09: 0000000000000000 [ 72.448777][ T8543] R10: ffffffff884da5ca R11: 0000000000000000 R12: 0000000000000000 [ 72.456838][ T8543] R13: 0000000000000008 R14: dffffc0000000000 R15: ffff888028392000 [ 72.464837][ T8543] ? sta_info_alloc+0x185a/0x1f90 [ 72.469900][ T8543] ? sta_info_alloc+0x191d/0x1f90 [ 72.474979][ T8543] ieee80211_add_station+0x28c/0x660 [ 72.480300][ T8543] nl80211_new_station+0xdd0/0x13c0 [ 72.485513][ T8543] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 72.491775][ T8543] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 72.498054][ T8543] ? nl80211_pre_doit+0xa2/0x630 [ 72.503005][ T8543] genl_family_rcv_msg_doit+0x228/0x320 [ 72.508574][ T8543] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 72.515999][ T8543] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.522305][ T8543] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.528562][ T8543] ? ns_capable+0xde/0x100 [ 72.533001][ T8543] genl_rcv_msg+0x328/0x580 [ 72.537519][ T8543] ? genl_get_cmd+0x480/0x480 [ 72.542205][ T8543] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 72.548491][ T8543] ? lock_release+0x710/0x710 [ 72.553183][ T8543] netlink_rcv_skb+0x153/0x420 [ 72.557963][ T8543] ? genl_get_cmd+0x480/0x480 [ 72.562759][ T8543] ? netlink_ack+0xaa0/0xaa0 [ 72.567383][ T8543] genl_rcv+0x24/0x40 [ 72.571385][ T8543] netlink_unicast+0x533/0x7d0 [ 72.576175][ T8543] ? netlink_attachskb+0x870/0x870 [ 72.581300][ T8543] ? _copy_from_iter_full+0x275/0x850 [ 72.586694][ T8543] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.592941][ T8543] ? __phys_addr_symbol+0x2c/0x70 [ 72.597988][ T8543] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 72.603736][ T8543] ? __check_object_size+0x171/0x3f0 [ 72.609053][ T8543] netlink_sendmsg+0x856/0xd90 [ 72.613837][ T8543] ? netlink_unicast+0x7d0/0x7d0 [ 72.618785][ T8543] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.625048][ T8543] ? netlink_unicast+0x7d0/0x7d0 [ 72.629991][ T8543] sock_sendmsg+0xcf/0x120 [ 72.634412][ T8543] ____sys_sendmsg+0x6e8/0x810 [ 72.639207][ T8543] ? kernel_sendmsg+0x50/0x50 [ 72.643894][ T8543] ? do_recvmmsg+0x6c0/0x6c0 [ 72.648499][ T8543] ? find_held_lock+0x2d/0x110 [ 72.653266][ T8543] ___sys_sendmsg+0xf3/0x170 [ 72.657858][ T8543] ? sendmsg_copy_msghdr+0x160/0x160 [ 72.663156][ T8543] ? _copy_to_user+0xdc/0x150 [ 72.667844][ T8543] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.674097][ T8543] ? sock_do_ioctl+0x168/0x2d0 [ 72.679018][ T8543] ? compat_ifr_data_ioctl+0x150/0x150 [ 72.684517][ T8543] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 72.690465][ T8543] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.696753][ T8543] ? __fget_light+0x215/0x280 [ 72.701541][ T8543] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.707827][ T8543] __sys_sendmsg+0xe5/0x1b0 [ 72.712539][ T8543] ? __sys_sendmsg_sock+0xb0/0xb0 [ 72.717583][ T8543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 72.723491][ T8543] do_syscall_64+0x2d/0x70 [ 72.727947][ T8543] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.733853][ T8543] RIP: 0033:0x4421d9 [ 72.737762][ T8543] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 72.757386][ T8543] RSP: 002b:00007fff90ce2c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.765817][ T8543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004421d9 [ 72.773804][ T8543] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 72.781811][ T8543] RBP: 000000316e616c77 R08: 0000002100000000 R09: 0000002100000000 [ 72.789803][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001186e [ 72.797886][ T8543] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 72.806450][ T8543] Kernel Offset: disabled [ 72.810941][ T8543] Rebooting in 86400 seconds..