Warning: Permanently added '10.128.0.66' (ECDSA) to the list of known hosts. syzkaller login: [ 67.192985][ T6892] IPVS: ftp: loaded support on port[0] = 21 [ 67.286143][ T516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.301139][ T516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.314346][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.323928][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 67.333802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.352948][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.365225][ T6892] ================================================================================ [ 67.385723][ T6892] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9 [ 67.394421][ T6892] index 255 is out of range for type 'ieee80211_key *[8]' [ 67.401829][ T6892] CPU: 1 PID: 6892 Comm: syz-executor827 Not tainted 5.9.0-rc6-syzkaller #0 [ 67.410499][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.420552][ T6892] Call Trace: [ 67.423887][ T6892] dump_stack+0x198/0x1fd [ 67.428199][ T6892] ubsan_epilogue+0xb/0x5a [ 67.432598][ T6892] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 67.438735][ T6892] ? lock_is_held_type+0xbb/0xf0 [ 67.443654][ T6892] ieee80211_del_key+0x428/0x440 [ 67.448609][ T6892] nl80211_del_key+0x493/0x980 [ 67.453378][ T6892] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 67.459258][ T6892] ? nl80211_pre_doit+0xa2/0x630 [ 67.464175][ T6892] genl_family_rcv_msg_doit+0x228/0x320 [ 67.469710][ T6892] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 67.477079][ T6892] ? ns_capable+0xde/0x100 [ 67.481505][ T6892] genl_rcv_msg+0x328/0x580 [ 67.486025][ T6892] ? genl_get_cmd+0x480/0x480 [ 67.490684][ T6892] ? lock_acquire+0x1f3/0xaf0 [ 67.495342][ T6892] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 67.501216][ T6892] ? lock_release+0x8f0/0x8f0 [ 67.505887][ T6892] netlink_rcv_skb+0x15a/0x430 [ 67.510627][ T6892] ? genl_get_cmd+0x480/0x480 [ 67.515283][ T6892] ? netlink_ack+0xa10/0xa10 [ 67.519856][ T6892] ? __kmalloc_node_track_caller+0x38/0x60 [ 67.525642][ T6892] genl_rcv+0x24/0x40 [ 67.529600][ T6892] netlink_unicast+0x533/0x7d0 [ 67.534345][ T6892] ? netlink_attachskb+0x810/0x810 [ 67.539453][ T6892] ? __phys_addr_symbol+0x2c/0x70 [ 67.544467][ T6892] ? __check_object_size+0x171/0x3e4 [ 67.549742][ T6892] netlink_sendmsg+0x856/0xd90 [ 67.554497][ T6892] ? netlink_unicast+0x7d0/0x7d0 [ 67.559455][ T6892] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 67.564721][ T6892] ? netlink_unicast+0x7d0/0x7d0 [ 67.569655][ T6892] sock_sendmsg+0xcf/0x120 [ 67.574055][ T6892] ____sys_sendmsg+0x6e8/0x810 [ 67.578796][ T6892] ? kernel_sendmsg+0x50/0x50 [ 67.583497][ T6892] ? do_recvmmsg+0x6d0/0x6d0 [ 67.588066][ T6892] ? lock_is_held_type+0xbb/0xf0 [ 67.592984][ T6892] ? __lock_acquire+0xb92/0x5780 [ 67.597899][ T6892] ___sys_sendmsg+0xf3/0x170 [ 67.602480][ T6892] ? sendmsg_copy_msghdr+0x160/0x160 [ 67.607743][ T6892] ? lockdep_init_map_waits+0x26a/0x8a0 [ 67.613306][ T6892] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 67.619261][ T6892] ? percpu_counter_add_batch+0x126/0x180 [ 67.624966][ T6892] ? lock_is_held_type+0xbb/0xf0 [ 67.629880][ T6892] ? find_held_lock+0x2d/0x110 [ 67.634621][ T6892] ? __fd_install+0x1b4/0x600 [ 67.639276][ T6892] ? lock_downgrade+0x830/0x830 [ 67.644103][ T6892] ? __fget_light+0x215/0x280 [ 67.648769][ T6892] __sys_sendmsg+0xe5/0x1b0 [ 67.653248][ T6892] ? __sys_sendmsg_sock+0xb0/0xb0 [ 67.658256][ T6892] ? check_preemption_disabled+0x50/0x130 [ 67.663952][ T6892] ? syscall_enter_from_user_mode+0x1d/0x60 [ 67.669831][ T6892] do_syscall_64+0x2d/0x70 [ 67.674236][ T6892] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.680119][ T6892] RIP: 0033:0x441759 [ 67.683995][ T6892] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 67.703591][ T6892] RSP: 002b:00007ffc50882668 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.711982][ T6892] RAX: ffffffffffffffda RBX: 00007ffc50882690 RCX: 0000000000441759 [ 67.719930][ T6892] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 67.727878][ T6892] RBP: 0000000000000003 R08: 0000002000000000 R09: 0000002000000000 [ 67.735825][ T6892] R10: 0000002000000000 R11: 0000000000000246 R12: 0000000000000032 [ 67.743773][ T6892] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 67.753886][ T6892] ================================================================================ [ 67.763222][ T6892] Kernel panic - not syncing: panic_on_warn set ... [ 67.769814][ T6892] CPU: 1 PID: 6892 Comm: syz-executor827 Not tainted 5.9.0-rc6-syzkaller #0 [ 67.778473][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.788503][ T6892] Call Trace: [ 67.791777][ T6892] dump_stack+0x198/0x1fd [ 67.796096][ T6892] panic+0x382/0x7fb [ 67.799967][ T6892] ? __warn_printk+0xf3/0xf3 [ 67.804539][ T6892] ? mark_lock+0x82/0x1660 [ 67.808932][ T6892] ? ubsan_epilogue+0x3e/0x5a [ 67.813597][ T6892] ? ubsan_epilogue+0x35/0x5a [ 67.818252][ T6892] ubsan_epilogue+0x54/0x5a [ 67.822748][ T6892] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 67.828880][ T6892] ? lock_is_held_type+0xbb/0xf0 [ 67.833808][ T6892] ieee80211_del_key+0x428/0x440 [ 67.838725][ T6892] nl80211_del_key+0x493/0x980 [ 67.843469][ T6892] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 67.849343][ T6892] ? nl80211_pre_doit+0xa2/0x630 [ 67.854260][ T6892] genl_family_rcv_msg_doit+0x228/0x320 [ 67.859783][ T6892] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 67.867138][ T6892] ? ns_capable+0xde/0x100 [ 67.871548][ T6892] genl_rcv_msg+0x328/0x580 [ 67.876027][ T6892] ? genl_get_cmd+0x480/0x480 [ 67.880683][ T6892] ? lock_acquire+0x1f3/0xaf0 [ 67.885353][ T6892] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 67.891237][ T6892] ? lock_release+0x8f0/0x8f0 [ 67.895915][ T6892] netlink_rcv_skb+0x15a/0x430 [ 67.900664][ T6892] ? genl_get_cmd+0x480/0x480 [ 67.905318][ T6892] ? netlink_ack+0xa10/0xa10 [ 67.909888][ T6892] ? __kmalloc_node_track_caller+0x38/0x60 [ 67.915670][ T6892] genl_rcv+0x24/0x40 [ 67.919642][ T6892] netlink_unicast+0x533/0x7d0 [ 67.924385][ T6892] ? netlink_attachskb+0x810/0x810 [ 67.929472][ T6892] ? __phys_addr_symbol+0x2c/0x70 [ 67.934473][ T6892] ? __check_object_size+0x171/0x3e4 [ 67.939737][ T6892] netlink_sendmsg+0x856/0xd90 [ 67.944482][ T6892] ? netlink_unicast+0x7d0/0x7d0 [ 67.949399][ T6892] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 67.955809][ T6892] ? netlink_unicast+0x7d0/0x7d0 [ 67.960721][ T6892] sock_sendmsg+0xcf/0x120 [ 67.965116][ T6892] ____sys_sendmsg+0x6e8/0x810 [ 67.969856][ T6892] ? kernel_sendmsg+0x50/0x50 [ 67.974529][ T6892] ? do_recvmmsg+0x6d0/0x6d0 [ 67.979105][ T6892] ? lock_is_held_type+0xbb/0xf0 [ 67.984026][ T6892] ? __lock_acquire+0xb92/0x5780 [ 67.988942][ T6892] ___sys_sendmsg+0xf3/0x170 [ 67.993510][ T6892] ? sendmsg_copy_msghdr+0x160/0x160 [ 67.998773][ T6892] ? lockdep_init_map_waits+0x26a/0x8a0 [ 68.004304][ T6892] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 68.010261][ T6892] ? percpu_counter_add_batch+0x126/0x180 [ 68.015964][ T6892] ? lock_is_held_type+0xbb/0xf0 [ 68.020882][ T6892] ? find_held_lock+0x2d/0x110 [ 68.025629][ T6892] ? __fd_install+0x1b4/0x600 [ 68.030293][ T6892] ? lock_downgrade+0x830/0x830 [ 68.035121][ T6892] ? __fget_light+0x215/0x280 [ 68.039777][ T6892] __sys_sendmsg+0xe5/0x1b0 [ 68.044258][ T6892] ? __sys_sendmsg_sock+0xb0/0xb0 [ 68.049264][ T6892] ? check_preemption_disabled+0x50/0x130 [ 68.054982][ T6892] ? syscall_enter_from_user_mode+0x1d/0x60 [ 68.060851][ T6892] do_syscall_64+0x2d/0x70 [ 68.065269][ T6892] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.071134][ T6892] RIP: 0033:0x441759 [ 68.075015][ T6892] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 68.094595][ T6892] RSP: 002b:00007ffc50882668 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.102985][ T6892] RAX: ffffffffffffffda RBX: 00007ffc50882690 RCX: 0000000000441759 [ 68.110944][ T6892] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 68.118900][ T6892] RBP: 0000000000000003 R08: 0000002000000000 R09: 0000002000000000 [ 68.126847][ T6892] R10: 0000002000000000 R11: 0000000000000246 R12: 0000000000000032 [ 68.134795][ T6892] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 68.144045][ T6892] Kernel Offset: disabled [ 68.148412][ T6892] Rebooting in 86400 seconds..