Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. syzkaller login: [ 63.866172][ T6897] IPVS: ftp: loaded support on port[0] = 21 [ 63.957627][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.965573][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.997173][ T249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program executing program [ 64.005093][ T249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.014645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.038955][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.078843][ T6938] ------------[ cut here ]------------ [ 64.084384][ T6938] WARNING: CPU: 0 PID: 6938 at net/mac80211/ieee80211_i.h:1447 sta_info_alloc+0x1900/0x1f90 [ 64.095250][ T6938] Kernel panic - not syncing: panic_on_warn set ... [ 64.101848][ T6938] CPU: 0 PID: 6938 Comm: syz-executor162 Not tainted 5.9.0-rc8-syzkaller #0 [ 64.110501][ T6938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.120554][ T6938] Call Trace: [ 64.123842][ T6938] dump_stack+0x198/0x1fd [ 64.128160][ T6938] panic+0x382/0x7fb [ 64.132045][ T6938] ? __warn_printk+0xf3/0xf3 [ 64.136617][ T6938] ? printk+0xba/0xed [ 64.140579][ T6938] ? log_store.cold+0x16/0x16 [ 64.145241][ T6938] ? __warn.cold+0x5/0x4b [ 64.149552][ T6938] ? __warn+0xd6/0x1f2 [ 64.153604][ T6938] ? sta_info_alloc+0x1900/0x1f90 [ 64.158635][ T6938] __warn.cold+0x20/0x4b [ 64.162879][ T6938] ? sta_info_alloc+0x1900/0x1f90 [ 64.167884][ T6938] report_bug+0x1bd/0x210 [ 64.172206][ T6938] handle_bug+0x38/0x90 [ 64.176350][ T6938] exc_invalid_op+0x14/0x40 [ 64.180832][ T6938] asm_exc_invalid_op+0x12/0x20 [ 64.185664][ T6938] RIP: 0010:sta_info_alloc+0x1900/0x1f90 [ 64.191290][ T6938] Code: 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f0 04 00 00 49 8b 9f 60 01 00 00 e9 fc f6 ff ff e8 80 02 b6 f9 <0f> 0b e8 69 84 66 00 31 ff 89 c3 89 c6 e8 ce fe b5 f9 85 db 74 1d [ 64.210873][ T6938] RSP: 0018:ffffc90003837498 EFLAGS: 00010293 [ 64.216924][ T6938] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff87c03be1 [ 64.224894][ T6938] RDX: ffff8880a819e300 RSI: ffffffff87c03c90 RDI: 0000000000000005 [ 64.232854][ T6938] RBP: ffff88808a2a0c80 R08: 0000000000000001 R09: ffffffff8d0c39e7 [ 64.240805][ T6938] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 64.248774][ T6938] R13: ffff88808a2a31b0 R14: dffffc0000000000 R15: ffff8880a8a38000 [ 64.256755][ T6938] ? sta_info_alloc+0x1851/0x1f90 [ 64.261765][ T6938] ? sta_info_alloc+0x1900/0x1f90 [ 64.266774][ T6938] ? sta_info_alloc+0x1900/0x1f90 [ 64.271790][ T6938] ieee80211_add_station+0x28c/0x660 [ 64.277059][ T6938] nl80211_new_station+0xde7/0x1440 [ 64.282241][ T6938] ? rdev_set_coalesce+0x390/0x390 [ 64.287347][ T6938] ? nl80211_pre_doit+0xa2/0x630 [ 64.292276][ T6938] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 64.299033][ T6938] genl_rcv_msg+0x61d/0x980 [ 64.303524][ T6938] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 64.311141][ T6938] ? lock_release+0x8f0/0x8f0 [ 64.315800][ T6938] netlink_rcv_skb+0x15a/0x430 [ 64.320548][ T6938] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 64.327493][ T6938] ? netlink_ack+0xa10/0xa10 [ 64.332081][ T6938] ? __kmalloc_node_track_caller+0x38/0x60 [ 64.337873][ T6938] genl_rcv+0x24/0x40 [ 64.341838][ T6938] netlink_unicast+0x533/0x7d0 [ 64.346586][ T6938] ? netlink_attachskb+0x810/0x810 [ 64.351680][ T6938] ? __phys_addr_symbol+0x2c/0x70 [ 64.356698][ T6938] ? __check_object_size+0x171/0x3e4 [ 64.362660][ T6938] netlink_sendmsg+0x856/0xd90 [ 64.367410][ T6938] ? netlink_unicast+0x7d0/0x7d0 [ 64.372419][ T6938] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.377682][ T6938] ? netlink_unicast+0x7d0/0x7d0 [ 64.382602][ T6938] sock_sendmsg+0xcf/0x120 [ 64.387016][ T6938] ____sys_sendmsg+0x6e8/0x810 [ 64.391762][ T6938] ? kernel_sendmsg+0x50/0x50 [ 64.396416][ T6938] ? do_recvmmsg+0x6d0/0x6d0 [ 64.400991][ T6938] ? stack_trace_consume_entry+0x160/0x160 [ 64.406783][ T6938] ___sys_sendmsg+0xf3/0x170 [ 64.411373][ T6938] ? sendmsg_copy_msghdr+0x160/0x160 [ 64.416643][ T6938] ? syscall_exit_to_user_mode+0x7e/0x2e0 [ 64.422373][ T6938] ? lock_downgrade+0x830/0x830 [ 64.427209][ T6938] ? check_preemption_disabled+0x50/0x130 [ 64.432908][ T6938] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.438694][ T6938] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 64.444685][ T6938] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.450473][ T6938] ? lockdep_hardirqs_on+0x53/0x100 [ 64.455649][ T6938] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 64.461437][ T6938] ? debug_object_active_state+0x260/0x350 [ 64.467242][ T6938] ? debug_object_init_on_stack+0x20/0x20 [ 64.472962][ T6938] ? __fget_light+0x215/0x280 [ 64.477637][ T6938] __sys_sendmsg+0xe5/0x1b0 [ 64.482150][ T6938] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.487162][ T6938] ? lock_is_held_type+0xbb/0xf0 [ 64.492100][ T6938] ? check_preemption_disabled+0x50/0x130 [ 64.497810][ T6938] ? syscall_enter_from_user_mode+0x1d/0x60 [ 64.503688][ T6938] do_syscall_64+0x2d/0x70 [ 64.508101][ T6938] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.513972][ T6938] RIP: 0033:0x4421c9 [ 64.517872][ T6938] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.537570][ T6938] RSP: 002b:00007ffd386ad8e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.545962][ T6938] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004421c9 [ 64.553915][ T6938] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 64.561868][ T6938] RBP: 000000306e616c77 R08: 0000000000000000 R09: 0000002000000000 [ 64.569835][ T6938] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000fa34 [ 64.577799][ T6938] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 64.586981][ T6938] Kernel Offset: disabled [ 64.591357][ T6938] Rebooting in 86400 seconds..