Warning: Permanently added '10.128.0.82' (ECDSA) to the list of known hosts. syzkaller login: [ 63.199859][ T6874] IPVS: ftp: loaded support on port[0] = 21 [ 63.284891][ T4122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.304358][ T4122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 63.329992][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.337906][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.346046][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.362587][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.384076][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor422'. [ 63.396260][ T6874] ================================================================================ [ 63.406013][ T6874] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9 [ 63.414233][ T6874] index 255 is out of range for type 'ieee80211_key *[8]' [ 63.421647][ T6874] CPU: 0 PID: 6874 Comm: syz-executor422 Not tainted 5.9.0-rc8-syzkaller #0 [ 63.430312][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.440346][ T6874] Call Trace: [ 63.443713][ T6874] dump_stack+0x198/0x1fd [ 63.448027][ T6874] ubsan_epilogue+0xb/0x5a [ 63.452423][ T6874] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 63.458570][ T6874] ? lock_is_held_type+0xbb/0xf0 [ 63.463491][ T6874] ieee80211_del_key+0x428/0x440 [ 63.468420][ T6874] nl80211_del_key+0x493/0x980 [ 63.473184][ T6874] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 63.479059][ T6874] ? nl80211_pre_doit+0xa2/0x630 [ 63.483992][ T6874] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 63.490748][ T6874] genl_rcv_msg+0x61d/0x980 [ 63.495241][ T6874] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.502182][ T6874] ? lock_release+0x8f0/0x8f0 [ 63.506859][ T6874] netlink_rcv_skb+0x15a/0x430 [ 63.511604][ T6874] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.518517][ T6874] ? netlink_ack+0xa10/0xa10 [ 63.523109][ T6874] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.528910][ T6874] genl_rcv+0x24/0x40 [ 63.532885][ T6874] netlink_unicast+0x533/0x7d0 [ 63.537627][ T6874] ? netlink_attachskb+0x810/0x810 [ 63.542720][ T6874] ? __phys_addr_symbol+0x2c/0x70 [ 63.547723][ T6874] ? __check_object_size+0x171/0x3e4 [ 63.553003][ T6874] netlink_sendmsg+0x856/0xd90 [ 63.558095][ T6874] ? netlink_unicast+0x7d0/0x7d0 [ 63.563031][ T6874] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.568309][ T6874] ? netlink_unicast+0x7d0/0x7d0 [ 63.573229][ T6874] sock_sendmsg+0xcf/0x120 [ 63.577626][ T6874] ____sys_sendmsg+0x6e8/0x810 [ 63.582388][ T6874] ? kernel_sendmsg+0x50/0x50 [ 63.587042][ T6874] ? do_recvmmsg+0x6d0/0x6d0 [ 63.591740][ T6874] ? stack_trace_consume_entry+0x160/0x160 [ 63.597535][ T6874] ___sys_sendmsg+0xf3/0x170 [ 63.602107][ T6874] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.607371][ T6874] ? syscall_exit_to_user_mode+0x7e/0x2e0 [ 63.613102][ T6874] ? lock_downgrade+0x830/0x830 [ 63.617933][ T6874] ? check_preemption_disabled+0x50/0x130 [ 63.623633][ T6874] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 63.629419][ T6874] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 63.635381][ T6874] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 63.641174][ T6874] ? lockdep_hardirqs_on+0x53/0x100 [ 63.646349][ T6874] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 63.652135][ T6874] ? debug_object_active_state+0x260/0x350 [ 63.657936][ T6874] ? debug_object_init_on_stack+0x20/0x20 [ 63.663663][ T6874] ? __fget_light+0x215/0x280 [ 63.668330][ T6874] __sys_sendmsg+0xe5/0x1b0 [ 63.672812][ T6874] ? __sys_sendmsg_sock+0xb0/0xb0 [ 63.677813][ T6874] ? lock_is_held_type+0xbb/0xf0 [ 63.682753][ T6874] ? check_preemption_disabled+0x50/0x130 [ 63.688470][ T6874] ? syscall_enter_from_user_mode+0x1d/0x60 [ 63.694344][ T6874] do_syscall_64+0x2d/0x70 [ 63.698738][ T6874] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 63.704609][ T6874] RIP: 0033:0x4416f9 [ 63.708502][ T6874] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.728260][ T6874] RSP: 002b:00007ffe0a335df8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.736647][ T6874] RAX: ffffffffffffffda RBX: 00007ffe0a335e20 RCX: 00000000004416f9 [ 63.744692][ T6874] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 63.752657][ T6874] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000002000000000 [ 63.760606][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 63.768554][ T6874] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 63.778569][ T6874] ================================================================================ [ 63.787901][ T6874] Kernel panic - not syncing: panic_on_warn set ... [ 63.794500][ T6874] CPU: 0 PID: 6874 Comm: syz-executor422 Not tainted 5.9.0-rc8-syzkaller #0 [ 63.803186][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.813220][ T6874] Call Trace: [ 63.816491][ T6874] dump_stack+0x198/0x1fd [ 63.820819][ T6874] panic+0x382/0x7fb [ 63.824697][ T6874] ? __warn_printk+0xf3/0xf3 [ 63.829274][ T6874] ? ubsan_epilogue+0x3e/0x5a [ 63.833952][ T6874] ? ubsan_epilogue+0x35/0x5a [ 63.838619][ T6874] ubsan_epilogue+0x54/0x5a [ 63.843105][ T6874] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 63.849249][ T6874] ? lock_is_held_type+0xbb/0xf0 [ 63.854191][ T6874] ieee80211_del_key+0x428/0x440 [ 63.859128][ T6874] nl80211_del_key+0x493/0x980 [ 63.863884][ T6874] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 63.869768][ T6874] ? nl80211_pre_doit+0xa2/0x630 [ 63.874686][ T6874] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 63.881426][ T6874] genl_rcv_msg+0x61d/0x980 [ 63.885915][ T6874] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.892838][ T6874] ? lock_release+0x8f0/0x8f0 [ 63.897509][ T6874] netlink_rcv_skb+0x15a/0x430 [ 63.902265][ T6874] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.909190][ T6874] ? netlink_ack+0xa10/0xa10 [ 63.913769][ T6874] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.919557][ T6874] genl_rcv+0x24/0x40 [ 63.923532][ T6874] netlink_unicast+0x533/0x7d0 [ 63.928276][ T6874] ? netlink_attachskb+0x810/0x810 [ 63.933368][ T6874] ? __phys_addr_symbol+0x2c/0x70 [ 63.938369][ T6874] ? __check_object_size+0x171/0x3e4 [ 63.943634][ T6874] netlink_sendmsg+0x856/0xd90 [ 63.948390][ T6874] ? netlink_unicast+0x7d0/0x7d0 [ 63.953312][ T6874] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.958575][ T6874] ? netlink_unicast+0x7d0/0x7d0 [ 63.963509][ T6874] sock_sendmsg+0xcf/0x120 [ 63.967906][ T6874] ____sys_sendmsg+0x6e8/0x810 [ 63.972655][ T6874] ? kernel_sendmsg+0x50/0x50 [ 63.977321][ T6874] ? do_recvmmsg+0x6d0/0x6d0 [ 63.982010][ T6874] ? stack_trace_consume_entry+0x160/0x160 [ 63.987804][ T6874] ___sys_sendmsg+0xf3/0x170 [ 63.992378][ T6874] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.997654][ T6874] ? syscall_exit_to_user_mode+0x7e/0x2e0 [ 64.003376][ T6874] ? lock_downgrade+0x830/0x830 [ 64.008212][ T6874] ? check_preemption_disabled+0x50/0x130 [ 64.013980][ T6874] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.019771][ T6874] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 64.025881][ T6874] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.031677][ T6874] ? lockdep_hardirqs_on+0x53/0x100 [ 64.036853][ T6874] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 64.042648][ T6874] ? debug_object_active_state+0x260/0x350 [ 64.048438][ T6874] ? debug_object_init_on_stack+0x20/0x20 [ 64.054155][ T6874] ? __fget_light+0x215/0x280 [ 64.058823][ T6874] __sys_sendmsg+0xe5/0x1b0 [ 64.063360][ T6874] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.068379][ T6874] ? lock_is_held_type+0xbb/0xf0 [ 64.073324][ T6874] ? check_preemption_disabled+0x50/0x130 [ 64.079021][ T6874] ? syscall_enter_from_user_mode+0x1d/0x60 [ 64.084896][ T6874] do_syscall_64+0x2d/0x70 [ 64.089294][ T6874] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.095161][ T6874] RIP: 0033:0x4416f9 [ 64.099047][ T6874] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.118642][ T6874] RSP: 002b:00007ffe0a335df8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.127160][ T6874] RAX: ffffffffffffffda RBX: 00007ffe0a335e20 RCX: 00000000004416f9 [ 64.135111][ T6874] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 64.143061][ T6874] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000002000000000 [ 64.151029][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 64.158997][ T6874] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 64.168525][ T6874] Kernel Offset: disabled [ 64.172901][ T6874] Rebooting in 86400 seconds..