Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. syzkaller login: [ 63.349166][ T6893] IPVS: ftp: loaded support on port[0] = 21 [ 63.440334][ T319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.453948][ T319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.473067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 63.491770][ T319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.500391][ T319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.511441][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.529497][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor758'. [ 63.552022][ T6893] ================================================================================ [ 63.562350][ T6893] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9 [ 63.570458][ T6893] index 255 is out of range for type 'ieee80211_key *[8]' [ 63.578728][ T6893] CPU: 0 PID: 6893 Comm: syz-executor758 Not tainted 5.9.0-rc3-syzkaller #0 [ 63.587384][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.597417][ T6893] Call Trace: [ 63.600697][ T6893] dump_stack+0x198/0x1fd [ 63.605012][ T6893] ubsan_epilogue+0xb/0x5a [ 63.609408][ T6893] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 63.615559][ T6893] ? lock_is_held_type+0xbb/0xf0 [ 63.620521][ T6893] ieee80211_del_key+0x428/0x440 [ 63.625453][ T6893] nl80211_del_key+0x493/0x980 [ 63.630206][ T6893] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 63.636085][ T6893] ? nl80211_pre_doit+0xa2/0x630 [ 63.641005][ T6893] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 63.647747][ T6893] genl_rcv_msg+0x61d/0x980 [ 63.652232][ T6893] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.659154][ T6893] ? lock_release+0x8f0/0x8f0 [ 63.663828][ T6893] netlink_rcv_skb+0x15a/0x430 [ 63.668585][ T6893] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.675510][ T6893] ? netlink_ack+0xa10/0xa10 [ 63.680083][ T6893] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.685868][ T6893] genl_rcv+0x24/0x40 [ 63.689830][ T6893] netlink_unicast+0x533/0x7d0 [ 63.694585][ T6893] ? netlink_attachskb+0x810/0x810 [ 63.699674][ T6893] ? __phys_addr_symbol+0x2c/0x70 [ 63.704684][ T6893] ? __check_object_size+0x171/0x3e4 [ 63.709962][ T6893] netlink_sendmsg+0x856/0xd90 [ 63.714724][ T6893] ? netlink_unicast+0x7d0/0x7d0 [ 63.719651][ T6893] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.724942][ T6893] ? netlink_unicast+0x7d0/0x7d0 [ 63.729856][ T6893] sock_sendmsg+0xcf/0x120 [ 63.734288][ T6893] ____sys_sendmsg+0x6e8/0x810 [ 63.739032][ T6893] ? kernel_sendmsg+0x50/0x50 [ 63.743682][ T6893] ? do_recvmmsg+0x6d0/0x6d0 [ 63.748256][ T6893] ? stack_trace_consume_entry+0x160/0x160 [ 63.754054][ T6893] ___sys_sendmsg+0xf3/0x170 [ 63.758628][ T6893] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.763890][ T6893] ? syscall_exit_to_user_mode+0x7e/0x2e0 [ 63.769602][ T6893] ? lock_downgrade+0x830/0x830 [ 63.774440][ T6893] ? check_preemption_disabled+0x50/0x130 [ 63.780153][ T6893] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 63.785944][ T6893] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 63.791904][ T6893] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 63.797689][ T6893] ? lockdep_hardirqs_on+0x53/0x100 [ 63.802881][ T6893] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 63.808682][ T6893] ? debug_object_active_state+0x260/0x350 [ 63.814477][ T6893] ? debug_object_init_on_stack+0x20/0x20 [ 63.820184][ T6893] ? __fget_light+0x215/0x280 [ 63.824845][ T6893] __sys_sendmsg+0xe5/0x1b0 [ 63.829329][ T6893] ? __sys_sendmsg_sock+0xb0/0xb0 [ 63.834335][ T6893] ? lock_is_held_type+0xbb/0xf0 [ 63.839274][ T6893] ? syscall_enter_from_user_mode+0x20/0x290 [ 63.845245][ T6893] ? lockdep_hardirqs_on+0x53/0x100 [ 63.850424][ T6893] do_syscall_64+0x2d/0x70 [ 63.854820][ T6893] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 63.860694][ T6893] RIP: 0033:0x441719 [ 63.864578][ T6893] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.884178][ T6893] RSP: 002b:00007ffc38401e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.892574][ T6893] RAX: ffffffffffffffda RBX: 00007ffc38401e80 RCX: 0000000000441719 [ 63.900530][ T6893] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 63.908484][ T6893] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000002000000000 [ 63.916462][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 63.924428][ T6893] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 63.935524][ T6893] ================================================================================ [ 63.944930][ T6893] Kernel panic - not syncing: panic_on_warn set ... [ 63.951534][ T6893] CPU: 0 PID: 6893 Comm: syz-executor758 Not tainted 5.9.0-rc3-syzkaller #0 [ 63.960213][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.970261][ T6893] Call Trace: [ 63.973532][ T6893] dump_stack+0x198/0x1fd [ 63.977844][ T6893] panic+0x382/0x7fb [ 63.981715][ T6893] ? __warn_printk+0xf3/0xf3 [ 63.986288][ T6893] ? ubsan_epilogue+0x3e/0x5a [ 63.990957][ T6893] ? ubsan_epilogue+0x35/0x5a [ 63.995615][ T6893] ubsan_epilogue+0x54/0x5a [ 64.000109][ T6893] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 64.006255][ T6893] ? lock_is_held_type+0xbb/0xf0 [ 64.011176][ T6893] ieee80211_del_key+0x428/0x440 [ 64.016108][ T6893] nl80211_del_key+0x493/0x980 [ 64.020855][ T6893] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 64.026746][ T6893] ? nl80211_pre_doit+0xa2/0x630 [ 64.031675][ T6893] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 64.038431][ T6893] genl_rcv_msg+0x61d/0x980 [ 64.042915][ T6893] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 64.049838][ T6893] ? lock_release+0x8f0/0x8f0 [ 64.054502][ T6893] netlink_rcv_skb+0x15a/0x430 [ 64.059262][ T6893] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 64.066172][ T6893] ? netlink_ack+0xa10/0xa10 [ 64.070757][ T6893] ? __kmalloc_node_track_caller+0x38/0x60 [ 64.076540][ T6893] genl_rcv+0x24/0x40 [ 64.080523][ T6893] netlink_unicast+0x533/0x7d0 [ 64.085269][ T6893] ? netlink_attachskb+0x810/0x810 [ 64.090375][ T6893] ? __phys_addr_symbol+0x2c/0x70 [ 64.095410][ T6893] ? __check_object_size+0x171/0x3e4 [ 64.100711][ T6893] netlink_sendmsg+0x856/0xd90 [ 64.105470][ T6893] ? netlink_unicast+0x7d0/0x7d0 [ 64.110397][ T6893] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.115663][ T6893] ? netlink_unicast+0x7d0/0x7d0 [ 64.120592][ T6893] sock_sendmsg+0xcf/0x120 [ 64.124999][ T6893] ____sys_sendmsg+0x6e8/0x810 [ 64.129745][ T6893] ? kernel_sendmsg+0x50/0x50 [ 64.134415][ T6893] ? do_recvmmsg+0x6d0/0x6d0 [ 64.138992][ T6893] ? stack_trace_consume_entry+0x160/0x160 [ 64.144780][ T6893] ___sys_sendmsg+0xf3/0x170 [ 64.149371][ T6893] ? sendmsg_copy_msghdr+0x160/0x160 [ 64.154633][ T6893] ? syscall_exit_to_user_mode+0x7e/0x2e0 [ 64.160359][ T6893] ? lock_downgrade+0x830/0x830 [ 64.165203][ T6893] ? check_preemption_disabled+0x50/0x130 [ 64.170910][ T6893] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.176712][ T6893] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 64.182671][ T6893] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.188460][ T6893] ? lockdep_hardirqs_on+0x53/0x100 [ 64.193639][ T6893] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 64.199425][ T6893] ? debug_object_active_state+0x260/0x350 [ 64.205207][ T6893] ? debug_object_init_on_stack+0x20/0x20 [ 64.210921][ T6893] ? __fget_light+0x215/0x280 [ 64.215596][ T6893] __sys_sendmsg+0xe5/0x1b0 [ 64.220085][ T6893] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.225085][ T6893] ? lock_is_held_type+0xbb/0xf0 [ 64.230009][ T6893] ? syscall_enter_from_user_mode+0x20/0x290 [ 64.235973][ T6893] ? lockdep_hardirqs_on+0x53/0x100 [ 64.241154][ T6893] do_syscall_64+0x2d/0x70 [ 64.245551][ T6893] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.251420][ T6893] RIP: 0033:0x441719 [ 64.255292][ T6893] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.274877][ T6893] RSP: 002b:00007ffc38401e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.283268][ T6893] RAX: ffffffffffffffda RBX: 00007ffc38401e80 RCX: 0000000000441719 [ 64.291231][ T6893] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 64.299193][ T6893] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000002000000000 [ 64.307144][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 64.315096][ T6893] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 64.324237][ T6893] Kernel Offset: disabled [ 64.328605][ T6893] Rebooting in 86400 seconds..