Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. syzkaller login: [ 28.952892] IPVS: ftp: loaded support on port[0] = 21 [ 29.011037] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 29.037524] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 29.044045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.051240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 29.058395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.072243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.079653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.093158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.121432] ------------[ cut here ]------------ [ 29.126291] WARNING: CPU: 0 PID: 7991 at net/mac80211/ieee80211_i.h:1408 sta_info_alloc+0x1299/0x16e0 [ 29.135640] Kernel panic - not syncing: panic_on_warn set ... [ 29.135640] [ 29.143028] CPU: 0 PID: 7991 Comm: syz-executor226 Not tainted 4.14.202-syzkaller #0 [ 29.150881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.160228] Call Trace: [ 29.162797] dump_stack+0x1b2/0x283 [ 29.166433] panic+0x1f9/0x42d [ 29.169617] ? add_taint.cold+0x16/0x16 [ 29.173610] ? sta_info_alloc+0x1299/0x16e0 [ 29.177909] ? sta_info_alloc+0x1299/0x16e0 [ 29.182212] __warn.cold+0x20/0x4b [ 29.185735] ? ist_end_non_atomic+0x10/0x10 [ 29.191259] ? sta_info_alloc+0x1299/0x16e0 [ 29.195571] report_bug+0x208/0x249 [ 29.199176] do_error_trap+0x195/0x2d0 [ 29.203038] ? math_error+0x2d0/0x2d0 [ 29.206815] ? trace_hardirqs_on+0x10/0x10 [ 29.211025] ? fs_reclaim_release+0xd0/0x110 [ 29.215409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.220240] invalid_op+0x1b/0x40 [ 29.223670] RIP: 0010:sta_info_alloc+0x1299/0x16e0 [ 29.228580] RSP: 0018:ffff888095bd75d8 EFLAGS: 00010297 [ 29.233918] RAX: ffff8880b329a580 RBX: 0000000000000000 RCX: 0000000000000000 [ 29.241172] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000282 [ 29.248416] RBP: ffff8880a2950fe0 R08: 0000000000000000 R09: 0000000000020012 [ 29.255660] R10: ffff8880b329ae80 R11: ffff8880b329a580 R12: ffff8880b0958540 [ 29.262903] R13: ffff888092b61740 R14: ffff8880b0958ac8 R15: ffff8880b0958950 [ 29.270160] ? sta_info_alloc+0x1299/0x16e0 [ 29.274473] ? nl80211_parse_sta_wme+0x268/0x380 [ 29.279207] ieee80211_add_station+0x223/0x550 [ 29.283775] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 29.289198] nl80211_new_station+0xb4e/0x1290 [ 29.293667] ? get_vlan+0x280/0x280 [ 29.297288] ? nl80211_pre_doit+0x79/0x510 [ 29.301511] genl_family_rcv_msg+0x572/0xb20 [ 29.305909] ? genl_rcv+0x40/0x40 [ 29.309336] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 29.314775] ? trace_hardirqs_on+0x10/0x10 [ 29.318993] ? netlink_sendmsg+0x435/0xb80 [ 29.323207] genl_rcv_msg+0xaf/0x140 [ 29.326906] netlink_rcv_skb+0x125/0x390 [ 29.330947] ? genl_family_rcv_msg+0xb20/0xb20 [ 29.335507] ? netlink_ack+0x9a0/0x9a0 [ 29.339393] ? lock_acquire+0x170/0x3f0 [ 29.343345] genl_rcv+0x24/0x40 [ 29.346612] netlink_unicast+0x437/0x610 [ 29.350658] ? netlink_sendskb+0xd0/0xd0 [ 29.354693] ? __check_object_size+0x179/0x22c [ 29.359249] netlink_sendmsg+0x62e/0xb80 [ 29.363299] ? nlmsg_notify+0x170/0x170 [ 29.367249] ? kernel_recvmsg+0x210/0x210 [ 29.371373] ? security_socket_sendmsg+0x83/0xb0 [ 29.377072] ? nlmsg_notify+0x170/0x170 [ 29.381033] sock_sendmsg+0xb5/0x100 [ 29.384723] ___sys_sendmsg+0x6c8/0x800 [ 29.388673] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 29.393404] ? __lock_acquire+0x5fc/0x3f20 [ 29.397630] ? __dentry_kill+0x3f7/0x550 [ 29.401675] ? trace_hardirqs_on+0x10/0x10 [ 29.405920] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 29.411349] ? dentry_free+0xc6/0x120 [ 29.415125] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 29.420134] ? kmem_cache_free+0x23a/0x2b0 [ 29.424345] ? mntput_no_expire+0xc7/0x910 [ 29.428641] ? lock_acquire+0x170/0x3f0 [ 29.432604] ? __fdget+0x167/0x1f0 [ 29.436121] ? sockfd_lookup_light+0xb2/0x160 [ 29.440591] __sys_sendmsg+0xa3/0x120 [ 29.444379] ? SyS_shutdown+0x160/0x160 [ 29.448345] SyS_sendmsg+0x27/0x40 [ 29.451860] ? __sys_sendmsg+0x120/0x120 [ 29.455898] do_syscall_64+0x1d5/0x640 [ 29.459762] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.464926] RIP: 0033:0x441909 [ 29.468090] RSP: 002b:00007ffd2e74d468 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.475772] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441909 [ 29.483029] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 29.490278] RBP: 000000306e616c77 R08: 0000000000000000 R09: 0000001300000000 [ 29.497526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 29.504799] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 29.512743] Kernel Offset: disabled [ 29.516410] Rebooting in 86400 seconds..