Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts. syzkaller login: [ 126.447735] IPVS: ftp: loaded support on port[0] = 21 [ 126.452798] IPVS: ftp: loaded support on port[0] = 21 [ 126.463217] IPVS: ftp: loaded support on port[0] = 21 [ 126.467312] IPVS: ftp: loaded support on port[0] = 21 [ 126.475217] IPVS: ftp: loaded support on port[0] = 21 [ 126.478770] IPVS: ftp: loaded support on port[0] = 21 [ 126.772583] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 126.787469] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 126.795612] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 126.803668] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 126.810472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.820004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.820745] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 126.833843] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 126.843425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.851252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.858543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.862802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.867206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.886228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.894635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.908532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.917465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.925618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.949813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.961432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.971871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.991770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.009627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.011040] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 127.025854] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 127.037015] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 127.043732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.051387] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 127.059469] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 127.066515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.068363] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 127.074382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.082263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.088264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.095319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.101351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.108166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.116258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.124690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.129951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.139817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.148578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.152655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.156940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.169989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.177119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.186029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.193711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program executing program executing program executing program [ 127.250079] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'. [ 127.264440] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'. [ 127.280034] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'. [ 127.280563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.292976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.298842] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'. [ 127.311799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.317771] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'. [ 127.335350] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'. [ 127.336236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.348838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.361983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.892594] ------------[ cut here ]------------ [ 127.898024] Have pending ack frames! [ 127.902070] WARNING: CPU: 0 PID: 8341 at net/mac80211/main.c:1279 ieee80211_free_ack_frame+0x48/0x50 [ 127.911324] Kernel panic - not syncing: panic_on_warn set ... [ 127.911324] [ 127.918685] CPU: 0 PID: 8341 Comm: kworker/u4:6 Not tainted 4.19.211-syzkaller #0 [ 127.926284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 127.935623] Workqueue: netns cleanup_net [ 127.939662] Call Trace: [ 127.942235] dump_stack+0x1fc/0x2ef [ 127.945845] panic+0x26a/0x50e [ 127.949030] ? __warn_printk+0xf3/0xf3 [ 127.952917] ? ieee80211_free_ack_frame+0x48/0x50 [ 127.957751] ? __probe_kernel_read+0x130/0x1b0 [ 127.962329] ? __warn.cold+0x5/0x5a [ 127.965944] ? __warn+0xe4/0x200 [ 127.969296] ? ieee80211_free_ack_frame+0x48/0x50 [ 127.974126] __warn.cold+0x20/0x5a [ 127.977653] ? ieee80211_free_ack_frame+0x48/0x50 [ 127.982547] report_bug+0x262/0x2b0 [ 127.986162] do_error_trap+0x1d7/0x310 [ 127.990039] ? math_error+0x310/0x310 [ 127.993829] ? irq_work_claim+0xa6/0xc0 [ 127.997783] ? irq_work_queue+0x29/0x80 [ 128.001742] ? error_entry+0x72/0xd0 [ 128.005449] ? trace_hardirqs_off_caller+0x6e/0x210 [ 128.010453] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 128.015284] invalid_op+0x14/0x20 [ 128.018735] RIP: 0010:ieee80211_free_ack_frame+0x48/0x50 [ 128.024167] Code: e8 1d 4b cd f9 48 89 ef e8 05 7a db fe 31 c0 5b 5d c3 e8 0b 4b cd f9 48 c7 c7 e0 3d 67 89 c6 05 02 73 79 03 01 e8 dd 82 5d 00 <0f> 0b eb d2 0f 1f 40 00 41 57 41 56 41 55 41 54 49 bc 00 00 00 00 [ 128.043067] RSP: 0018:ffff88809573fa28 EFLAGS: 00010282 [ 128.048505] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.055751] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed1012ae7f37 [ 128.063005] RBP: ffff8880a4a345c0 R08: 0000000000000001 R09: 0000000000000000 [ 128.070257] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880b0c295b8 [ 128.077509] R13: dffffc0000000000 R14: ffffffff87953a30 R15: 0000000000000000 [ 128.084773] ? ieee80211_free_hw+0x140/0x140 [ 128.089163] ? vprintk_func+0x81/0x180 [ 128.093035] ? ieee80211_free_ack_frame+0x48/0x50 [ 128.097858] idr_for_each+0x132/0x290 [ 128.101638] ? idr_find+0x50/0x50 [ 128.105069] ? kfree+0x110/0x210 [ 128.108415] ? device_remove_bin_file+0x30/0x30 [ 128.113072] ? kfree_const+0x51/0x60 [ 128.116776] ieee80211_free_hw+0x88/0x140 [ 128.120917] hwsim_exit_net+0xbdf/0x1580 [ 128.124962] ? mac80211_hwsim_netlink_notify+0x1400/0x1400 [ 128.130567] ? nf_unregister_net_hooks+0x5d/0xe0 [ 128.135303] ? mac80211_hwsim_netlink_notify+0x1400/0x1400 [ 128.140904] ops_exit_list+0xa5/0x150 [ 128.144685] cleanup_net+0x3b4/0x8b0 [ 128.148400] ? net_drop_ns+0x90/0x90 [ 128.152095] ? check_preemption_disabled+0x10/0x280 [ 128.157094] process_one_work+0x864/0x1570 [ 128.161317] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 128.165978] worker_thread+0x64c/0x1130 [ 128.169934] ? __kthread_parkme+0x133/0x1e0 [ 128.174231] ? process_one_work+0x1570/0x1570 [ 128.178704] kthread+0x33f/0x460 [ 128.182048] ? kthread_park+0x180/0x180 [ 128.186000] ret_from_fork+0x24/0x30 [ 128.190196] Kernel Offset: disabled [ 128.193875] Rebooting in 86400 seconds..