Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 38.145820] device wlan0 entered promiscuous mode [ 38.155970] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 38.170429] WARNING: CPU: 0 PID: 8119 at net/mac80211/ieee80211_i.h:1413 sta_apply_parameters+0x1481/0x1dc0 [ 38.180439] Kernel panic - not syncing: panic_on_warn set ... [ 38.180439] [ 38.187819] CPU: 0 PID: 8119 Comm: syz-executor665 Not tainted 4.19.155-syzkaller #0 [ 38.195707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.205069] Call Trace: [ 38.207671] dump_stack+0x1fc/0x2fe [ 38.211321] panic+0x26a/0x50e [ 38.214527] ? __warn_printk+0xf3/0xf3 [ 38.218434] ? sta_apply_parameters+0x1481/0x1dc0 [ 38.223293] ? __probe_kernel_read+0x130/0x1b0 [ 38.227884] ? __warn.cold+0x5/0x61 [ 38.231522] ? __warn+0xe4/0x200 [ 38.234899] ? sta_apply_parameters+0x1481/0x1dc0 [ 38.239743] __warn.cold+0x20/0x61 [ 38.243288] ? sta_apply_parameters+0x1481/0x1dc0 [ 38.248130] report_bug+0x262/0x2b0 [ 38.251745] do_error_trap+0x1d7/0x310 [ 38.255712] ? math_error+0x310/0x310 [ 38.259617] ? mark_held_locks+0xf0/0xf0 [ 38.263789] ? error_entry+0x72/0xd0 [ 38.267537] ? trace_hardirqs_off_caller+0x6e/0x210 [ 38.272652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.277485] invalid_op+0x14/0x20 [ 38.280922] RIP: 0010:sta_apply_parameters+0x1481/0x1dc0 [ 38.286354] Code: 89 fe e8 62 1d a7 f9 45 85 ff 0f 85 d3 00 00 00 e8 e4 1b a7 f9 44 89 e6 4c 89 f7 e8 09 2b 12 00 e9 cc f9 ff ff e8 cf 1b a7 f9 <0f> 0b e8 c8 db 94 f9 31 ff 89 c3 89 c6 e8 2d 1d a7 f9 85 db 74 1d [ 38.305237] RSP: 0018:ffff888094d774c0 EFLAGS: 00010293 [ 38.310582] RAX: ffff888097db2600 RBX: ffff888094d775d8 RCX: ffffffff87bd9f8f [ 38.317834] RDX: 0000000000000000 RSI: ffffffff87bdb2c1 RDI: 0000000000000007 [ 38.325086] RBP: ffff888095faa3c0 R08: 0000000000000000 R09: 0000000000000000 [ 38.332339] R10: 0000000000000007 R11: 0000000000000000 R12: ffff8880ab448ec0 [ 38.339589] R13: 0000000000000000 R14: ffff8880ab408be0 R15: ffff8880ab408be0 [ 38.346852] ? sta_apply_parameters+0x14f/0x1dc0 [ 38.351591] ? sta_apply_parameters+0x1481/0x1dc0 [ 38.356421] ? sta_info_alloc+0xa8d/0x1810 [ 38.360641] ieee80211_add_station+0x2f8/0x610 [ 38.365207] nl80211_new_station+0xd78/0x1510 [ 38.369703] ? get_vlan+0x2b0/0x2b0 [ 38.373337] ? nl80211_pre_doit+0xa2/0x620 [ 38.377570] ? __cfg80211_rdev_from_attrs+0x700/0x700 [ 38.382749] genl_family_rcv_msg+0x642/0xc40 [ 38.387145] ? genl_rcv+0x40/0x40 [ 38.390577] ? genl_rcv_msg+0x12f/0x160 [ 38.394553] ? __mutex_add_waiter+0x160/0x160 [ 38.399033] ? __radix_tree_lookup+0x216/0x370 [ 38.403602] genl_rcv_msg+0xbf/0x160 [ 38.407302] netlink_rcv_skb+0x160/0x440 [ 38.411350] ? genl_family_rcv_msg+0xc40/0xc40 [ 38.415931] ? netlink_ack+0xae0/0xae0 [ 38.419807] ? genl_rcv+0x15/0x40 [ 38.423245] genl_rcv+0x24/0x40 [ 38.426507] netlink_unicast+0x4d5/0x690 [ 38.430554] ? netlink_sendskb+0x110/0x110 [ 38.434792] ? _copy_from_iter_full+0x229/0x7c0 [ 38.439455] ? __phys_addr_symbol+0x2c/0x70 [ 38.443765] ? __check_object_size+0x17b/0x3d1 [ 38.448353] netlink_sendmsg+0x6bb/0xc40 [ 38.452401] ? aa_af_perm+0x230/0x230 [ 38.456182] ? nlmsg_notify+0x1a0/0x1a0 [ 38.460141] ? kernel_recvmsg+0x220/0x220 [ 38.464280] ? nlmsg_notify+0x1a0/0x1a0 [ 38.468240] sock_sendmsg+0xc3/0x120 [ 38.471938] ___sys_sendmsg+0x7bb/0x8e0 [ 38.475894] ? copy_msghdr_from_user+0x440/0x440 [ 38.480632] ? __fget+0x32f/0x510 [ 38.484071] ? lock_downgrade+0x720/0x720 [ 38.488201] ? check_preemption_disabled+0x41/0x280 [ 38.493226] ? check_preemption_disabled+0x41/0x280 [ 38.498227] ? __fget+0x356/0x510 [ 38.501679] ? do_dup2+0x450/0x450 [ 38.505244] ? lock_downgrade+0x720/0x720 [ 38.509376] ? check_preemption_disabled+0x41/0x280 [ 38.514379] ? __fdget+0x1d0/0x230 [ 38.517906] __x64_sys_sendmsg+0x132/0x220 [ 38.522125] ? __sys_sendmsg+0x1b0/0x1b0 [ 38.526172] ? __se_sys_futex+0x298/0x3b0 [ 38.530309] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 38.535664] ? trace_hardirqs_off_caller+0x6e/0x210 [ 38.540687] ? do_syscall_64+0x21/0x620 [ 38.544682] do_syscall_64+0xf9/0x620 [ 38.548504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 38.553709] RIP: 0033:0x447199 [ 38.556912] Code: e8 5c b1 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 05 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 38.575822] RSP: 002b:00007fdcecadfd98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.583976] RAX: ffffffffffffffda RBX: 00000000006dcc78 RCX: 0000000000447199 [ 38.591257] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 38.598541] RBP: 00000000006dcc70 R08: 0000000000000000 R09: 0000000000000000 [ 38.605812] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc7c [ 38.613067] R13: 0000000000000000 R14: 000000306e616c77 R15: 0000000000660006 [ 38.621286] Kernel Offset: disabled [ 38.624966] Rebooting in 86400 seconds..