[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.73' (ECDSA) to the list of known hosts. syzkaller login: [ 57.674414][ T8415] IPVS: ftp: loaded support on port[0] = 21 [ 57.755674][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.773021][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.781568][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 57.806669][ T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.816091][ T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.825107][ T3170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.845358][ T8415] netlink: 'syz-executor941': attribute type 16 has an invalid length. [ 57.854286][ T8415] ------------[ cut here ]------------ [ 57.859822][ T8415] WARNING: CPU: 1 PID: 8415 at net/mac80211/ieee80211_i.h:1458 sta_info_alloc+0x1924/0x1fa0 [ 57.870284][ T8415] Modules linked in: [ 57.874252][ T8415] CPU: 1 PID: 8415 Comm: syz-executor941 Not tainted 5.12.0-rc2-syzkaller #0 [ 57.883058][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.893175][ T8415] RIP: 0010:sta_info_alloc+0x1924/0x1fa0 [ 57.898824][ T8415] Code: 85 8f 03 00 00 49 8b 9f 60 01 00 00 e9 04 f7 ff ff e8 80 49 1f f9 8b 5c 24 08 83 e3 01 83 c3 01 e9 ab fb ff ff e8 6c 49 1f f9 <0f> 0b e8 85 8a ac 00 31 ff 89 c3 89 c6 e8 0a 51 1f f9 85 db 74 1d [ 57.918679][ T8415] RSP: 0018:ffffc9000bfdf3e0 EFLAGS: 00010293 [ 57.924847][ T8415] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 57.932864][ T8415] RDX: ffff88801fb91bc0 RSI: ffffffff88545684 RDI: 0000000000000003 [ 57.940835][ T8415] RBP: ffff88801bb10d00 R08: 0000000000000000 R09: 0000000000000000 [ 57.949030][ T8415] R10: ffffffff885455c1 R11: 0000000000000000 R12: 0000000000000000 [ 57.957159][ T8415] R13: 0000000000000008 R14: dffffc0000000000 R15: ffff88802d2a0000 [ 57.965188][ T8415] FS: 0000000002151300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 57.974203][ T8415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.980784][ T8415] CR2: 00007ffc8e800f08 CR3: 0000000011ede000 CR4: 0000000000350ee0 [ 57.988796][ T8415] Call Trace: [ 57.992086][ T8415] ieee80211_add_station+0x28c/0x660 [ 57.997431][ T8415] nl80211_new_station+0xdd0/0x13c0 [ 58.002841][ T8415] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 58.009155][ T8415] ? nl80211_pre_doit+0xa4/0x5a0 [ 58.014147][ T8415] genl_family_rcv_msg_doit+0x228/0x320 [ 58.019702][ T8415] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 58.027139][ T8415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.033465][ T8415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.039698][ T8415] ? ns_capable+0xde/0x100 [ 58.044169][ T8415] genl_rcv_msg+0x328/0x580 [ 58.048678][ T8415] ? genl_get_cmd+0x480/0x480 [ 58.053802][ T8415] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 58.060214][ T8415] ? lock_release+0x720/0x720 [ 58.065010][ T8415] netlink_rcv_skb+0x153/0x420 [ 58.069809][ T8415] ? genl_get_cmd+0x480/0x480 [ 58.074549][ T8415] ? netlink_ack+0xaa0/0xaa0 [ 58.079149][ T8415] genl_rcv+0x24/0x40 [ 58.083367][ T8415] netlink_unicast+0x533/0x7d0 [ 58.088155][ T8415] ? netlink_attachskb+0x870/0x870 [ 58.093314][ T8415] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.099560][ T8415] ? __phys_addr_symbol+0x2c/0x70 [ 58.104625][ T8415] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 58.110425][ T8415] ? __check_object_size+0x171/0x3f0 [ 58.115760][ T8415] netlink_sendmsg+0x856/0xd90 [ 58.120528][ T8415] ? netlink_unicast+0x7d0/0x7d0 [ 58.125527][ T8415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.131774][ T8415] ? netlink_unicast+0x7d0/0x7d0 [ 58.136784][ T8415] sock_sendmsg+0xcf/0x120 [ 58.141209][ T8415] ____sys_sendmsg+0x6e8/0x810 [ 58.146033][ T8415] ? kernel_sendmsg+0x50/0x50 [ 58.150726][ T8415] ? do_recvmmsg+0x6d0/0x6d0 [ 58.155587][ T8415] ? find_held_lock+0x2d/0x110 [ 58.160369][ T8415] ___sys_sendmsg+0xf3/0x170 [ 58.165005][ T8415] ? sendmsg_copy_msghdr+0x160/0x160 [ 58.170311][ T8415] ? _copy_to_user+0xdc/0x150 [ 58.175037][ T8415] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.181284][ T8415] ? sock_do_ioctl+0x168/0x2d0 [ 58.186124][ T8415] ? compat_ifr_data_ioctl+0x150/0x150 [ 58.191622][ T8415] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 58.197629][ T8415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.203963][ T8415] ? __fget_light+0x215/0x280 [ 58.208646][ T8415] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.215003][ T8415] __sys_sendmsg+0xe5/0x1b0 [ 58.219536][ T8415] ? __sys_sendmsg_sock+0x30/0x30 [ 58.224612][ T8415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 58.230729][ T8415] do_syscall_64+0x2d/0x70 [ 58.235380][ T8415] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.241599][ T8415] RIP: 0033:0x440959 [ 58.245743][ T8415] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.266277][ T8415] RSP: 002b:00007ffc8e801f78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.275027][ T8415] RAX: ffffffffffffffda RBX: 00000000004b73c0 RCX: 0000000000440959 [ 58.283445][ T8415] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 58.291423][ T8415] RBP: 0000000000000003 R08: 0000000c004004b8 R09: 0000000c004004b8 [ 58.299700][ T8415] R10: 0000000c004004b8 R11: 0000000000000246 R12: 0000000000000031 [ 58.308329][ T8415] R13: 00007ffc8e801fc0 R14: 00007ffc8e801faa R15: 00000000004b7430 [ 58.316767][ T8415] Kernel panic - not syncing: panic_on_warn set ... [ 58.323352][ T8415] CPU: 1 PID: 8415 Comm: syz-executor941 Not tainted 5.12.0-rc2-syzkaller #0 [ 58.332105][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.342169][ T8415] Call Trace: [ 58.345456][ T8415] dump_stack+0x141/0x1d7 [ 58.349786][ T8415] panic+0x306/0x73d [ 58.353680][ T8415] ? __warn_printk+0xf3/0xf3 [ 58.358269][ T8415] ? __warn.cold+0x1a/0x44 [ 58.362786][ T8415] ? sta_info_alloc+0x1924/0x1fa0 [ 58.367807][ T8415] __warn.cold+0x35/0x44 [ 58.372046][ T8415] ? sta_info_alloc+0x1924/0x1fa0 [ 58.377069][ T8415] report_bug+0x1bd/0x210 [ 58.381401][ T8415] handle_bug+0x3c/0x60 [ 58.385553][ T8415] exc_invalid_op+0x14/0x40 [ 58.390070][ T8415] asm_exc_invalid_op+0x12/0x20 [ 58.394918][ T8415] RIP: 0010:sta_info_alloc+0x1924/0x1fa0 [ 58.400548][ T8415] Code: 85 8f 03 00 00 49 8b 9f 60 01 00 00 e9 04 f7 ff ff e8 80 49 1f f9 8b 5c 24 08 83 e3 01 83 c3 01 e9 ab fb ff ff e8 6c 49 1f f9 <0f> 0b e8 85 8a ac 00 31 ff 89 c3 89 c6 e8 0a 51 1f f9 85 db 74 1d [ 58.420148][ T8415] RSP: 0018:ffffc9000bfdf3e0 EFLAGS: 00010293 [ 58.426412][ T8415] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 58.434374][ T8415] RDX: ffff88801fb91bc0 RSI: ffffffff88545684 RDI: 0000000000000003 [ 58.442338][ T8415] RBP: ffff88801bb10d00 R08: 0000000000000000 R09: 0000000000000000 [ 58.450322][ T8415] R10: ffffffff885455c1 R11: 0000000000000000 R12: 0000000000000000 [ 58.458285][ T8415] R13: 0000000000000008 R14: dffffc0000000000 R15: ffff88802d2a0000 [ 58.466254][ T8415] ? sta_info_alloc+0x1861/0x1fa0 [ 58.471365][ T8415] ? sta_info_alloc+0x1924/0x1fa0 [ 58.476400][ T8415] ieee80211_add_station+0x28c/0x660 [ 58.481690][ T8415] nl80211_new_station+0xdd0/0x13c0 [ 58.486884][ T8415] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 58.493137][ T8415] ? nl80211_pre_doit+0xa4/0x5a0 [ 58.498089][ T8415] genl_family_rcv_msg_doit+0x228/0x320 [ 58.503633][ T8415] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 58.511003][ T8415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.517266][ T8415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.523518][ T8415] ? ns_capable+0xde/0x100 [ 58.527955][ T8415] genl_rcv_msg+0x328/0x580 [ 58.532647][ T8415] ? genl_get_cmd+0x480/0x480 [ 58.537325][ T8415] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 58.543579][ T8415] ? lock_release+0x720/0x720 [ 58.548255][ T8415] netlink_rcv_skb+0x153/0x420 [ 58.553011][ T8415] ? genl_get_cmd+0x480/0x480 [ 58.557683][ T8415] ? netlink_ack+0xaa0/0xaa0 [ 58.562277][ T8415] genl_rcv+0x24/0x40 [ 58.566252][ T8415] netlink_unicast+0x533/0x7d0 [ 58.571010][ T8415] ? netlink_attachskb+0x870/0x870 [ 58.576132][ T8415] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.582365][ T8415] ? __phys_addr_symbol+0x2c/0x70 [ 58.587383][ T8415] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 58.593094][ T8415] ? __check_object_size+0x171/0x3f0 [ 58.598379][ T8415] netlink_sendmsg+0x856/0xd90 [ 58.603140][ T8415] ? netlink_unicast+0x7d0/0x7d0 [ 58.608073][ T8415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.614307][ T8415] ? netlink_unicast+0x7d0/0x7d0 [ 58.619239][ T8415] sock_sendmsg+0xcf/0x120 [ 58.623680][ T8415] ____sys_sendmsg+0x6e8/0x810 [ 58.628446][ T8415] ? kernel_sendmsg+0x50/0x50 [ 58.633113][ T8415] ? do_recvmmsg+0x6d0/0x6d0 [ 58.637703][ T8415] ? find_held_lock+0x2d/0x110 [ 58.642464][ T8415] ___sys_sendmsg+0xf3/0x170 [ 58.647066][ T8415] ? sendmsg_copy_msghdr+0x160/0x160 [ 58.652352][ T8415] ? _copy_to_user+0xdc/0x150 [ 58.657047][ T8415] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.663305][ T8415] ? sock_do_ioctl+0x168/0x2d0 [ 58.668072][ T8415] ? compat_ifr_data_ioctl+0x150/0x150 [ 58.673529][ T8415] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 58.679422][ T8415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.685659][ T8415] ? __fget_light+0x215/0x280 [ 58.690367][ T8415] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.696613][ T8415] __sys_sendmsg+0xe5/0x1b0 [ 58.701124][ T8415] ? __sys_sendmsg_sock+0x30/0x30 [ 58.706157][ T8415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 58.712055][ T8415] do_syscall_64+0x2d/0x70 [ 58.716469][ T8415] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.722361][ T8415] RIP: 0033:0x440959 [ 58.726256][ T8415] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.745871][ T8415] RSP: 002b:00007ffc8e801f78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.754288][ T8415] RAX: ffffffffffffffda RBX: 00000000004b73c0 RCX: 0000000000440959 [ 58.762260][ T8415] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 58.770238][ T8415] RBP: 0000000000000003 R08: 0000000c004004b8 R09: 0000000c004004b8 [ 58.778236][ T8415] R10: 0000000c004004b8 R11: 0000000000000246 R12: 0000000000000031 [ 58.786228][ T8415] R13: 00007ffc8e801fc0 R14: 00007ffc8e801faa R15: 00000000004b7430 [ 58.797538][ T8415] Kernel Offset: disabled [ 58.802005][ T8415] Rebooting in 86400 seconds..