Warning: Permanently added '10.128.0.96' (ECDSA) to the list of known hosts. syzkaller login: [ 527.319163][ T6862] IPVS: ftp: loaded support on port[0] = 21 [ 527.405343][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.413311][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.443029][ T6895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 527.451746][ T6895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.463281][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 527.485829][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 527.517259][ T6905] ================================================================================ [ 527.531810][ T6905] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9 [ 527.542582][ T6905] index 255 is out of range for type 'ieee80211_key *[8]' [ 527.549790][ T6905] CPU: 1 PID: 6905 Comm: syz-executor491 Not tainted 5.9.0-rc7-syzkaller #0 [ 527.558457][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.568495][ T6905] Call Trace: [ 527.571826][ T6905] dump_stack+0x198/0x1fd [ 527.576146][ T6905] ubsan_epilogue+0xb/0x5a [ 527.580549][ T6905] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 527.586800][ T6905] ? lock_is_held_type+0xbb/0xf0 [ 527.591767][ T6905] ieee80211_del_key+0x428/0x440 [ 527.596739][ T6905] nl80211_del_key+0x493/0x980 [ 527.601491][ T6905] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 527.607389][ T6905] ? nl80211_pre_doit+0xa2/0x630 [ 527.612310][ T6905] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 527.619122][ T6905] genl_rcv_msg+0x61d/0x980 [ 527.623637][ T6905] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 527.630574][ T6905] ? lock_release+0x8f0/0x8f0 [ 527.635246][ T6905] netlink_rcv_skb+0x15a/0x430 [ 527.639993][ T6905] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 527.646920][ T6905] ? netlink_ack+0xa10/0xa10 [ 527.651504][ T6905] ? __kmalloc_node_track_caller+0x38/0x60 [ 527.657312][ T6905] genl_rcv+0x24/0x40 [ 527.661294][ T6905] netlink_unicast+0x533/0x7d0 [ 527.666053][ T6905] ? netlink_attachskb+0x810/0x810 [ 527.671163][ T6905] ? __phys_addr_symbol+0x2c/0x70 [ 527.676170][ T6905] ? __check_object_size+0x171/0x3e4 [ 527.681442][ T6905] netlink_sendmsg+0x856/0xd90 [ 527.686193][ T6905] ? netlink_unicast+0x7d0/0x7d0 [ 527.691119][ T6905] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 527.697103][ T6905] ? netlink_unicast+0x7d0/0x7d0 [ 527.702100][ T6905] sock_sendmsg+0xcf/0x120 [ 527.706505][ T6905] ____sys_sendmsg+0x6e8/0x810 [ 527.711342][ T6905] ? kernel_sendmsg+0x50/0x50 [ 527.716016][ T6905] ? do_recvmmsg+0x6d0/0x6d0 [ 527.720594][ T6905] ? lock_is_held_type+0xbb/0xf0 [ 527.727438][ T6905] ? find_held_lock+0x2d/0x110 [ 527.732192][ T6905] ? __might_fault+0x11f/0x1d0 [ 527.736943][ T6905] ___sys_sendmsg+0xf3/0x170 [ 527.741519][ T6905] ? sendmsg_copy_msghdr+0x160/0x160 [ 527.746792][ T6905] ? __might_fault+0x190/0x1d0 [ 527.752373][ T6905] ? _copy_to_user+0x126/0x160 [ 527.757126][ T6905] ? sock_do_ioctl+0x168/0x2d0 [ 527.761879][ T6905] ? compat_ifr_data_ioctl+0x150/0x150 [ 527.767320][ T6905] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 527.773211][ T6905] ? __fget_light+0x215/0x280 [ 527.777878][ T6905] __sys_sendmsg+0xe5/0x1b0 [ 527.782899][ T6905] ? __sys_sendmsg_sock+0xb0/0xb0 [ 527.787931][ T6905] ? check_preemption_disabled+0x50/0x130 [ 527.793648][ T6905] ? syscall_enter_from_user_mode+0x1d/0x60 [ 527.799539][ T6905] do_syscall_64+0x2d/0x70 [ 527.803976][ T6905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.809853][ T6905] RIP: 0033:0x441f99 [ 527.813730][ T6905] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 527.833331][ T6905] RSP: 002b:00007ffef82ed768 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.841739][ T6905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441f99 [ 527.849707][ T6905] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 527.857662][ T6905] RBP: 0000000000000000 R08: 0000002000000000 R09: 0000002000000000 [ 527.865620][ T6905] R10: 0000002000000000 R11: 0000000000000246 R12: 0000000000000032 [ 527.874029][ T6905] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 527.884315][ T6905] ================================================================================ [ 527.893920][ T6905] Kernel panic - not syncing: panic_on_warn set ... [ 527.900514][ T6905] CPU: 1 PID: 6905 Comm: syz-executor491 Not tainted 5.9.0-rc7-syzkaller #0 [ 527.909183][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.919239][ T6905] Call Trace: [ 527.922540][ T6905] dump_stack+0x198/0x1fd [ 527.926871][ T6905] panic+0x382/0x7fb [ 527.930766][ T6905] ? __warn_printk+0xf3/0xf3 [ 527.935346][ T6905] ? ubsan_epilogue+0x3e/0x5a [ 527.940003][ T6905] ? ubsan_epilogue+0x35/0x5a [ 527.944662][ T6905] ubsan_epilogue+0x54/0x5a [ 527.949984][ T6905] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 527.956222][ T6905] ? lock_is_held_type+0xbb/0xf0 [ 527.961158][ T6905] ieee80211_del_key+0x428/0x440 [ 527.966128][ T6905] nl80211_del_key+0x493/0x980 [ 527.970880][ T6905] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 527.976778][ T6905] ? nl80211_pre_doit+0xa2/0x630 [ 527.981714][ T6905] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 527.988459][ T6905] genl_rcv_msg+0x61d/0x980 [ 527.992961][ T6905] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 527.999885][ T6905] ? lock_release+0x8f0/0x8f0 [ 528.004549][ T6905] netlink_rcv_skb+0x15a/0x430 [ 528.009303][ T6905] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 528.016247][ T6905] ? netlink_ack+0xa10/0xa10 [ 528.020828][ T6905] ? __kmalloc_node_track_caller+0x38/0x60 [ 528.026640][ T6905] genl_rcv+0x24/0x40 [ 528.030613][ T6905] netlink_unicast+0x533/0x7d0 [ 528.036148][ T6905] ? netlink_attachskb+0x810/0x810 [ 528.041257][ T6905] ? __phys_addr_symbol+0x2c/0x70 [ 528.046262][ T6905] ? __check_object_size+0x171/0x3e4 [ 528.051550][ T6905] netlink_sendmsg+0x856/0xd90 [ 528.056300][ T6905] ? netlink_unicast+0x7d0/0x7d0 [ 528.061239][ T6905] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 528.066506][ T6905] ? netlink_unicast+0x7d0/0x7d0 [ 528.071791][ T6905] sock_sendmsg+0xcf/0x120 [ 528.076194][ T6905] ____sys_sendmsg+0x6e8/0x810 [ 528.080958][ T6905] ? kernel_sendmsg+0x50/0x50 [ 528.085618][ T6905] ? do_recvmmsg+0x6d0/0x6d0 [ 528.090206][ T6905] ? lock_is_held_type+0xbb/0xf0 [ 528.095139][ T6905] ? find_held_lock+0x2d/0x110 [ 528.099915][ T6905] ? __might_fault+0x11f/0x1d0 [ 528.104664][ T6905] ___sys_sendmsg+0xf3/0x170 [ 528.109258][ T6905] ? sendmsg_copy_msghdr+0x160/0x160 [ 528.114533][ T6905] ? __might_fault+0x190/0x1d0 [ 528.119281][ T6905] ? _copy_to_user+0x126/0x160 [ 528.124052][ T6905] ? sock_do_ioctl+0x168/0x2d0 [ 528.128828][ T6905] ? compat_ifr_data_ioctl+0x150/0x150 [ 528.134297][ T6905] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 528.140183][ T6905] ? __fget_light+0x215/0x280 [ 528.144968][ T6905] __sys_sendmsg+0xe5/0x1b0 [ 528.149509][ T6905] ? __sys_sendmsg_sock+0xb0/0xb0 [ 528.154528][ T6905] ? check_preemption_disabled+0x50/0x130 [ 528.160277][ T6905] ? syscall_enter_from_user_mode+0x1d/0x60 [ 528.166184][ T6905] do_syscall_64+0x2d/0x70 [ 528.170607][ T6905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.176489][ T6905] RIP: 0033:0x441f99 [ 528.180382][ T6905] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 528.199986][ T6905] RSP: 002b:00007ffef82ed768 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.208396][ T6905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441f99 [ 528.216360][ T6905] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 528.224326][ T6905] RBP: 0000000000000000 R08: 0000002000000000 R09: 0000002000000000 [ 528.232334][ T6905] R10: 0000002000000000 R11: 0000000000000246 R12: 0000000000000032 [ 528.240292][ T6905] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 528.249575][ T6905] Kernel Offset: disabled [ 528.253970][ T6905] Rebooting in 86400 seconds..