Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.44' (ECDSA) to the list of known hosts. syzkaller login: [ 63.475846][ T6899] IPVS: ftp: loaded support on port[0] = 21 [ 63.549742][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.568887][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.592248][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program executing program [ 63.612795][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.620721][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.630120][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.658168][ T6939] ------------[ cut here ]------------ [ 63.664606][ T6939] WARNING: CPU: 1 PID: 6939 at net/mac80211/ieee80211_i.h:1460 sta_info_alloc+0x1900/0x1f90 [ 63.675753][ T6939] Kernel panic - not syncing: panic_on_warn set ... [ 63.682395][ T6939] CPU: 0 PID: 6939 Comm: syz-executor040 Not tainted 5.9.0-rc8-syzkaller #0 [ 63.691074][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.701162][ T6939] Call Trace: [ 63.704447][ T6939] dump_stack+0x198/0x1fd [ 63.708772][ T6939] panic+0x382/0x7fb [ 63.712667][ T6939] ? __warn_printk+0xf3/0xf3 [ 63.717293][ T6939] ? printk+0xba/0xed [ 63.721269][ T6939] ? log_store.cold+0x16/0x16 [ 63.725952][ T6939] ? __warn.cold+0x5/0x4b [ 63.730294][ T6939] ? __warn+0xd6/0x1f2 [ 63.734391][ T6939] ? sta_info_alloc+0x1900/0x1f90 [ 63.739435][ T6939] __warn.cold+0x20/0x4b [ 63.743708][ T6939] ? sta_info_alloc+0x1900/0x1f90 [ 63.748731][ T6939] report_bug+0x1bd/0x210 [ 63.753057][ T6939] handle_bug+0x38/0x90 [ 63.757294][ T6939] exc_invalid_op+0x14/0x40 [ 63.761783][ T6939] asm_exc_invalid_op+0x12/0x20 [ 63.766678][ T6939] RIP: 0010:sta_info_alloc+0x1900/0x1f90 [ 63.772472][ T6939] Code: 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f0 04 00 00 49 8b 9f 60 01 00 00 e9 fc f6 ff ff e8 90 24 a6 f9 <0f> 0b e8 09 bd 67 00 31 ff 89 c3 89 c6 e8 de 20 a6 f9 85 db 74 1d [ 63.792166][ T6939] RSP: 0018:ffffc900057773d0 EFLAGS: 00010293 [ 63.798228][ T6939] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff87d06341 [ 63.806210][ T6939] RDX: ffff8880a8a6c380 RSI: ffffffff87d063f0 RDI: 0000000000000005 [ 63.814180][ T6939] RBP: ffff888089760c80 R08: 0000000000000001 R09: ffffffff8d1139e7 [ 63.822144][ T6939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 63.830118][ T6939] R13: ffff8880897631b0 R14: dffffc0000000000 R15: ffff8880a8684000 [ 63.838285][ T6939] ? sta_info_alloc+0x1851/0x1f90 [ 63.843680][ T6939] ? sta_info_alloc+0x1900/0x1f90 [ 63.848749][ T6939] ieee80211_add_station+0x28c/0x660 [ 63.854040][ T6939] nl80211_new_station+0xdce/0x1420 [ 63.859253][ T6939] ? nl80211_set_station+0x1220/0x1220 [ 63.864821][ T6939] ? nl80211_pre_doit+0xa2/0x630 [ 63.869762][ T6939] genl_family_rcv_msg_doit+0x228/0x320 [ 63.875322][ T6939] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 63.882874][ T6939] ? ns_capable+0xde/0x100 [ 63.887285][ T6939] genl_rcv_msg+0x328/0x580 [ 63.891772][ T6939] ? genl_get_cmd+0x480/0x480 [ 63.896438][ T6939] ? lock_acquire+0x1f3/0xaf0 [ 63.901099][ T6939] ? nl80211_set_station+0x1220/0x1220 [ 63.906559][ T6939] ? lock_release+0x8f0/0x8f0 [ 63.911235][ T6939] netlink_rcv_skb+0x153/0x420 [ 63.915993][ T6939] ? genl_get_cmd+0x480/0x480 [ 63.920659][ T6939] ? netlink_ack+0xaa0/0xaa0 [ 63.925269][ T6939] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.931181][ T6939] genl_rcv+0x24/0x40 [ 63.935158][ T6939] netlink_unicast+0x533/0x7d0 [ 63.939914][ T6939] ? netlink_attachskb+0x810/0x810 [ 63.945014][ T6939] ? __phys_addr_symbol+0x2c/0x70 [ 63.950040][ T6939] ? __check_object_size+0x171/0x3e4 [ 63.955338][ T6939] netlink_sendmsg+0x856/0xd90 [ 63.960096][ T6939] ? netlink_unicast+0x7d0/0x7d0 [ 63.965082][ T6939] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.970370][ T6939] ? netlink_unicast+0x7d0/0x7d0 [ 63.975301][ T6939] sock_sendmsg+0xcf/0x120 [ 63.979710][ T6939] ____sys_sendmsg+0x6e8/0x810 [ 63.984479][ T6939] ? kernel_sendmsg+0x50/0x50 [ 63.989149][ T6939] ? do_recvmmsg+0x6d0/0x6d0 [ 63.993842][ T6939] ? stack_trace_consume_entry+0x160/0x160 [ 63.999776][ T6939] ___sys_sendmsg+0xf3/0x170 [ 64.004411][ T6939] ? sendmsg_copy_msghdr+0x160/0x160 [ 64.009698][ T6939] ? syscall_exit_to_user_mode+0x7e/0x2e0 [ 64.015438][ T6939] ? lock_downgrade+0x830/0x830 [ 64.020281][ T6939] ? check_preemption_disabled+0x50/0x130 [ 64.026147][ T6939] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.031973][ T6939] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 64.038052][ T6939] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.043947][ T6939] ? lockdep_hardirqs_on+0x53/0x100 [ 64.049141][ T6939] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 64.054934][ T6939] ? debug_object_active_state+0x260/0x350 [ 64.060741][ T6939] ? debug_object_init_on_stack+0x20/0x20 [ 64.066455][ T6939] ? __fget_light+0x215/0x280 [ 64.071119][ T6939] __sys_sendmsg+0xe5/0x1b0 [ 64.075612][ T6939] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.080620][ T6939] ? lock_is_held_type+0xbb/0xf0 [ 64.085614][ T6939] ? check_preemption_disabled+0x50/0x130 [ 64.091327][ T6939] ? syscall_enter_from_user_mode+0x1d/0x60 [ 64.097216][ T6939] do_syscall_64+0x2d/0x70 [ 64.101638][ T6939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.107516][ T6939] RIP: 0033:0x4421c9 [ 64.111391][ T6939] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.130988][ T6939] RSP: 002b:00007ffc475989b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.139503][ T6939] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004421c9 [ 64.147574][ T6939] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 64.155552][ T6939] RBP: 000000306e616c77 R08: 0000000000000000 R09: 0000002000000000 [ 64.163523][ T6939] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000f896 [ 64.171495][ T6939] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 64.180946][ T6939] Kernel Offset: disabled [ 64.185335][ T6939] Rebooting in 86400 seconds..