[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty6. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.11' (ECDSA) to the list of known hosts. syzkaller login: [ 64.913227][ T8488] IPVS: ftp: loaded support on port[0] = 21 [ 65.007342][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.015326][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.041848][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 65.061087][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.069916][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.081377][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.112574][ T8488] netlink: 'syz-executor633': attribute type 16 has an invalid length. [ 65.121649][ T8488] ------------[ cut here ]------------ [ 65.127374][ T8488] WARNING: CPU: 0 PID: 8488 at net/mac80211/ieee80211_i.h:1460 sta_info_alloc+0x18fa/0x1f90 [ 65.137858][ T8488] Modules linked in: [ 65.141759][ T8488] CPU: 0 PID: 8488 Comm: syz-executor633 Not tainted 5.10.0-rc6-syzkaller #0 [ 65.150679][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.161500][ T8488] RIP: 0010:sta_info_alloc+0x18fa/0x1f90 [ 65.167228][ T8488] Code: 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f0 04 00 00 49 8b 9f 60 01 00 00 e9 02 f7 ff ff e8 06 78 2b f9 <0f> 0b e8 5f ec a0 00 31 ff 89 c3 89 c6 e8 44 70 2b f9 85 db 74 1d [ 65.187071][ T8488] RSP: 0018:ffffc9000104f3d0 EFLAGS: 00010293 [ 65.193144][ T8488] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff88448bcb [ 65.201167][ T8488] RDX: ffff88801cb41a40 RSI: ffffffff88448c7a RDI: 0000000000000005 [ 65.209261][ T8488] RBP: ffff888018890c80 R08: 0000000000000001 R09: ffffffff8ebae667 [ 65.217291][ T8488] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 65.225359][ T8488] R13: ffff8880188931b0 R14: dffffc0000000000 R15: ffff888019ab8000 [ 65.233426][ T8488] FS: 0000000000c77880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 65.242432][ T8488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.249113][ T8488] CR2: 000055dacce6aef8 CR3: 0000000012569000 CR4: 00000000001506f0 [ 65.257150][ T8488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.265138][ T8488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.273200][ T8488] Call Trace: [ 65.276706][ T8488] ieee80211_add_station+0x28c/0x660 [ 65.281980][ T8488] nl80211_new_station+0xdd0/0x13c0 [ 65.289980][ T8488] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 65.296329][ T8488] ? nl80211_pre_doit+0xa2/0x630 [ 65.301277][ T8488] genl_family_rcv_msg_doit+0x228/0x320 [ 65.306907][ T8488] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 65.314285][ T8488] ? ns_capable+0xde/0x100 [ 65.318788][ T8488] genl_rcv_msg+0x328/0x580 [ 65.323294][ T8488] ? genl_get_cmd+0x480/0x480 [ 65.328207][ T8488] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 65.334510][ T8488] ? lock_release+0x710/0x710 [ 65.339250][ T8488] netlink_rcv_skb+0x153/0x420 [ 65.344028][ T8488] ? genl_get_cmd+0x480/0x480 [ 65.348808][ T8488] ? netlink_ack+0xaa0/0xaa0 [ 65.353403][ T8488] genl_rcv+0x24/0x40 [ 65.357438][ T8488] netlink_unicast+0x533/0x7d0 [ 65.362210][ T8488] ? netlink_attachskb+0x810/0x810 [ 65.367402][ T8488] ? __phys_addr_symbol+0x2c/0x70 [ 65.372422][ T8488] ? __check_object_size+0x171/0x3f0 [ 65.377766][ T8488] netlink_sendmsg+0x856/0xd90 [ 65.382553][ T8488] ? netlink_unicast+0x7d0/0x7d0 [ 65.387650][ T8488] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 65.392934][ T8488] ? netlink_unicast+0x7d0/0x7d0 [ 65.397933][ T8488] sock_sendmsg+0xcf/0x120 [ 65.402358][ T8488] ____sys_sendmsg+0x6e8/0x810 [ 65.407207][ T8488] ? kernel_sendmsg+0x50/0x50 [ 65.411880][ T8488] ? do_recvmmsg+0x6c0/0x6c0 [ 65.417267][ T8488] ? find_held_lock+0x2d/0x110 [ 65.422051][ T8488] ___sys_sendmsg+0xf3/0x170 [ 65.427362][ T8488] ? sendmsg_copy_msghdr+0x160/0x160 [ 65.432669][ T8488] ? _copy_to_user+0xdc/0x150 [ 65.437419][ T8488] ? sock_do_ioctl+0x168/0x2d0 [ 65.442188][ T8488] ? compat_ifr_data_ioctl+0x150/0x150 [ 65.447741][ T8488] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 65.453634][ T8488] ? __fget_light+0x215/0x280 [ 65.458383][ T8488] __sys_sendmsg+0xe5/0x1b0 [ 65.462892][ T8488] ? __sys_sendmsg_sock+0xb0/0xb0 [ 65.468012][ T8488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 65.473906][ T8488] do_syscall_64+0x2d/0x70 [ 65.478396][ T8488] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.484291][ T8488] RIP: 0033:0x4418c9 [ 65.488503][ T8488] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.508306][ T8488] RSP: 002b:00007ffc738474b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.516822][ T8488] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004418c9 [ 65.524800][ T8488] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 65.532946][ T8488] RBP: 000000306e616c77 R08: 0000002100000000 R09: 0000002100000000 [ 65.540986][ T8488] R10: 0000002100000000 R11: 0000000000000246 R12: 0000000000000032 [ 65.549387][ T8488] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 65.557785][ T8488] Kernel panic - not syncing: panic_on_warn set ... [ 65.564402][ T8488] CPU: 0 PID: 8488 Comm: syz-executor633 Not tainted 5.10.0-rc6-syzkaller #0 [ 65.573134][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.583165][ T8488] Call Trace: [ 65.586453][ T8488] dump_stack+0x107/0x163 [ 65.590764][ T8488] panic+0x306/0x73d [ 65.594638][ T8488] ? __warn_printk+0xf3/0xf3 [ 65.599215][ T8488] ? __warn.cold+0x1a/0x44 [ 65.603612][ T8488] ? __warn+0xf1/0x210 [ 65.607663][ T8488] ? sta_info_alloc+0x18fa/0x1f90 [ 65.612666][ T8488] __warn.cold+0x35/0x44 [ 65.616889][ T8488] ? sta_info_alloc+0x18fa/0x1f90 [ 65.621893][ T8488] report_bug+0x1bd/0x210 [ 65.626209][ T8488] handle_bug+0x3c/0x60 [ 65.630344][ T8488] exc_invalid_op+0x14/0x40 [ 65.634829][ T8488] asm_exc_invalid_op+0x12/0x20 [ 65.639680][ T8488] RIP: 0010:sta_info_alloc+0x18fa/0x1f90 [ 65.645290][ T8488] Code: 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f0 04 00 00 49 8b 9f 60 01 00 00 e9 02 f7 ff ff e8 06 78 2b f9 <0f> 0b e8 5f ec a0 00 31 ff 89 c3 89 c6 e8 44 70 2b f9 85 db 74 1d [ 65.664874][ T8488] RSP: 0018:ffffc9000104f3d0 EFLAGS: 00010293 [ 65.670924][ T8488] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff88448bcb [ 65.678876][ T8488] RDX: ffff88801cb41a40 RSI: ffffffff88448c7a RDI: 0000000000000005 [ 65.686825][ T8488] RBP: ffff888018890c80 R08: 0000000000000001 R09: ffffffff8ebae667 [ 65.694776][ T8488] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 65.702728][ T8488] R13: ffff8880188931b0 R14: dffffc0000000000 R15: ffff888019ab8000 [ 65.710707][ T8488] ? sta_info_alloc+0x184b/0x1f90 [ 65.715743][ T8488] ? sta_info_alloc+0x18fa/0x1f90 [ 65.720783][ T8488] ieee80211_add_station+0x28c/0x660 [ 65.726128][ T8488] nl80211_new_station+0xdd0/0x13c0 [ 65.731316][ T8488] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 65.739467][ T8488] ? nl80211_pre_doit+0xa2/0x630 [ 65.744389][ T8488] genl_family_rcv_msg_doit+0x228/0x320 [ 65.749962][ T8488] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 65.757327][ T8488] ? ns_capable+0xde/0x100 [ 65.761767][ T8488] genl_rcv_msg+0x328/0x580 [ 65.766356][ T8488] ? genl_get_cmd+0x480/0x480 [ 65.771015][ T8488] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 65.777237][ T8488] ? lock_release+0x710/0x710 [ 65.781898][ T8488] netlink_rcv_skb+0x153/0x420 [ 65.786658][ T8488] ? genl_get_cmd+0x480/0x480 [ 65.791316][ T8488] ? netlink_ack+0xaa0/0xaa0 [ 65.795906][ T8488] genl_rcv+0x24/0x40 [ 65.799865][ T8488] netlink_unicast+0x533/0x7d0 [ 65.804612][ T8488] ? netlink_attachskb+0x810/0x810 [ 65.809878][ T8488] ? __phys_addr_symbol+0x2c/0x70 [ 65.814905][ T8488] ? __check_object_size+0x171/0x3f0 [ 65.820176][ T8488] netlink_sendmsg+0x856/0xd90 [ 65.824923][ T8488] ? netlink_unicast+0x7d0/0x7d0 [ 65.829856][ T8488] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 65.835118][ T8488] ? netlink_unicast+0x7d0/0x7d0 [ 65.840034][ T8488] sock_sendmsg+0xcf/0x120 [ 65.844442][ T8488] ____sys_sendmsg+0x6e8/0x810 [ 65.849187][ T8488] ? kernel_sendmsg+0x50/0x50 [ 65.853850][ T8488] ? do_recvmmsg+0x6c0/0x6c0 [ 65.858424][ T8488] ? find_held_lock+0x2d/0x110 [ 65.863168][ T8488] ___sys_sendmsg+0xf3/0x170 [ 65.867748][ T8488] ? sendmsg_copy_msghdr+0x160/0x160 [ 65.873020][ T8488] ? _copy_to_user+0xdc/0x150 [ 65.877677][ T8488] ? sock_do_ioctl+0x168/0x2d0 [ 65.882577][ T8488] ? compat_ifr_data_ioctl+0x150/0x150 [ 65.888036][ T8488] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 65.893933][ T8488] ? __fget_light+0x215/0x280 [ 65.898614][ T8488] __sys_sendmsg+0xe5/0x1b0 [ 65.903122][ T8488] ? __sys_sendmsg_sock+0xb0/0xb0 [ 65.908151][ T8488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 65.914032][ T8488] do_syscall_64+0x2d/0x70 [ 65.918440][ T8488] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.924330][ T8488] RIP: 0033:0x4418c9 [ 65.928206][ T8488] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.947793][ T8488] RSP: 002b:00007ffc738474b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.956189][ T8488] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004418c9 [ 65.964140][ T8488] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 65.972430][ T8488] RBP: 000000306e616c77 R08: 0000002100000000 R09: 0000002100000000 [ 65.980507][ T8488] R10: 0000002100000000 R11: 0000000000000246 R12: 0000000000000032 [ 65.988639][ T8488] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 65.997508][ T8488] Kernel Offset: disabled [ 66.001929][ T8488] Rebooting in 86400 seconds..