[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.57' (ECDSA) to the list of known hosts. syzkaller login: [ 61.064621][ T6869] IPVS: ftp: loaded support on port[0] = 21 [ 61.150184][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.177791][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 61.200828][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.219475][ T442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.228441][ T442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.239922][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.265323][ T6869] ------------[ cut here ]------------ [ 61.270878][ T6869] WARNING: CPU: 1 PID: 6869 at net/mac80211/ieee80211_i.h:1460 sta_info_alloc+0x1900/0x1f90 [ 61.281576][ T6869] Kernel panic - not syncing: panic_on_warn set ... [ 61.288162][ T6869] CPU: 1 PID: 6869 Comm: syz-executor127 Not tainted 5.9.0-rc6-syzkaller #0 [ 61.296844][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.306876][ T6869] Call Trace: [ 61.310143][ T6869] dump_stack+0x198/0x1fd [ 61.314451][ T6869] panic+0x382/0x7fb [ 61.318321][ T6869] ? __warn_printk+0xf3/0xf3 [ 61.322886][ T6869] ? printk+0xba/0xed [ 61.326843][ T6869] ? log_store.cold+0x16/0x16 [ 61.331534][ T6869] ? __warn.cold+0x5/0x4b [ 61.335839][ T6869] ? __warn+0xd6/0x1f2 [ 61.339882][ T6869] ? sta_info_alloc+0x1900/0x1f90 [ 61.344878][ T6869] __warn.cold+0x20/0x4b [ 61.349150][ T6869] ? sta_info_alloc+0x1900/0x1f90 [ 61.354149][ T6869] report_bug+0x1bd/0x210 [ 61.358456][ T6869] handle_bug+0x38/0x90 [ 61.362585][ T6869] exc_invalid_op+0x14/0x40 [ 61.367062][ T6869] asm_exc_invalid_op+0x12/0x20 [ 61.371883][ T6869] RIP: 0010:sta_info_alloc+0x1900/0x1f90 [ 61.377489][ T6869] Code: 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f0 04 00 00 49 8b 9f 60 01 00 00 e9 fc f6 ff ff e8 e0 58 a7 f9 <0f> 0b e8 29 b2 67 00 31 ff 89 c3 89 c6 e8 2e 55 a7 f9 85 db 74 1d [ 61.397070][ T6869] RSP: 0018:ffffc900059c73d0 EFLAGS: 00010293 [ 61.403140][ T6869] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff87cf2e21 [ 61.411607][ T6869] RDX: ffff888093fc03c0 RSI: ffffffff87cf2ed0 RDI: 0000000000000005 [ 61.419554][ T6869] RBP: ffff8880888f0c80 R08: 0000000000000001 R09: ffffffff8d10d9e7 [ 61.427515][ T6869] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 61.435459][ T6869] R13: ffff8880888f31b0 R14: dffffc0000000000 R15: ffff88809258c000 [ 61.443412][ T6869] ? sta_info_alloc+0x1851/0x1f90 [ 61.448408][ T6869] ? sta_info_alloc+0x1900/0x1f90 [ 61.453418][ T6869] ieee80211_add_station+0x28c/0x660 [ 61.458682][ T6869] nl80211_new_station+0xdce/0x1420 [ 61.463872][ T6869] ? rdev_set_cqm_rssi_config+0x3c0/0x3c0 [ 61.469595][ T6869] ? nl80211_pre_doit+0xa2/0x630 [ 61.474515][ T6869] genl_family_rcv_msg_doit+0x228/0x320 [ 61.480035][ T6869] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 61.487388][ T6869] ? ns_capable+0xde/0x100 [ 61.491780][ T6869] genl_rcv_msg+0x328/0x580 [ 61.496262][ T6869] ? genl_get_cmd+0x480/0x480 [ 61.500916][ T6869] ? lock_acquire+0x1f3/0xaf0 [ 61.505569][ T6869] ? rdev_set_cqm_rssi_config+0x3c0/0x3c0 [ 61.511266][ T6869] ? lock_release+0x8f0/0x8f0 [ 61.515924][ T6869] netlink_rcv_skb+0x15a/0x430 [ 61.520671][ T6869] ? genl_get_cmd+0x480/0x480 [ 61.525330][ T6869] ? netlink_ack+0xa10/0xa10 [ 61.529903][ T6869] ? __kmalloc_node_track_caller+0x38/0x60 [ 61.535690][ T6869] genl_rcv+0x24/0x40 [ 61.539650][ T6869] netlink_unicast+0x533/0x7d0 [ 61.544392][ T6869] ? netlink_attachskb+0x810/0x810 [ 61.549478][ T6869] ? __phys_addr_symbol+0x2c/0x70 [ 61.554477][ T6869] ? __check_object_size+0x171/0x3e4 [ 61.559739][ T6869] netlink_sendmsg+0x856/0xd90 [ 61.564483][ T6869] ? netlink_unicast+0x7d0/0x7d0 [ 61.569401][ T6869] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 61.574662][ T6869] ? netlink_unicast+0x7d0/0x7d0 [ 61.579572][ T6869] sock_sendmsg+0xcf/0x120 [ 61.583961][ T6869] ____sys_sendmsg+0x6e8/0x810 [ 61.588703][ T6869] ? kernel_sendmsg+0x50/0x50 [ 61.593358][ T6869] ? do_recvmmsg+0x6d0/0x6d0 [ 61.597926][ T6869] ? stack_trace_consume_entry+0x160/0x160 [ 61.603876][ T6869] ___sys_sendmsg+0xf3/0x170 [ 61.608462][ T6869] ? sendmsg_copy_msghdr+0x160/0x160 [ 61.613720][ T6869] ? syscall_exit_to_user_mode+0x7e/0x2e0 [ 61.619414][ T6869] ? lock_downgrade+0x830/0x830 [ 61.624237][ T6869] ? check_preemption_disabled+0x50/0x130 [ 61.629932][ T6869] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 61.635714][ T6869] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 61.641666][ T6869] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 61.647446][ T6869] ? lockdep_hardirqs_on+0x53/0x100 [ 61.652617][ T6869] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 61.658411][ T6869] ? debug_object_active_state+0x260/0x350 [ 61.664192][ T6869] ? debug_object_init_on_stack+0x20/0x20 [ 61.669885][ T6869] ? __fget_light+0x215/0x280 [ 61.674541][ T6869] __sys_sendmsg+0xe5/0x1b0 [ 61.679031][ T6869] ? __sys_sendmsg_sock+0xb0/0xb0 [ 61.684042][ T6869] ? lock_is_held_type+0xbb/0xf0 [ 61.688963][ T6869] ? check_preemption_disabled+0x50/0x130 [ 61.694658][ T6869] ? syscall_enter_from_user_mode+0x1d/0x60 [ 61.700524][ T6869] do_syscall_64+0x2d/0x70 [ 61.704915][ T6869] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 61.710781][ T6869] RIP: 0033:0x441999 [ 61.714653][ T6869] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.734240][ T6869] RSP: 002b:00007ffd89f84138 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.742628][ T6869] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441999 [ 61.750615][ T6869] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 61.758580][ T6869] RBP: 000000306e616c77 R08: 0000000000000000 R09: 0000002000000000 [ 61.766565][ T6869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 61.774517][ T6869] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 61.783838][ T6869] Kernel Offset: disabled [ 61.788211][ T6869] Rebooting in 86400 seconds..