Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.61' (ECDSA) to the list of known hosts. syzkaller login: [ 28.924829] IPVS: ftp: loaded support on port[0] = 21 [ 28.982690] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 29.002568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 29.028627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.035691] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 29.043438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.057648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.065228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.072341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.088010] ------------[ cut here ]------------ [ 29.092873] WARNING: CPU: 0 PID: 8001 at net/mac80211/ieee80211_i.h:1408 sta_info_alloc+0x1299/0x16e0 [ 29.102221] Kernel panic - not syncing: panic_on_warn set ... [ 29.102221] [ 29.109574] CPU: 0 PID: 8001 Comm: syz-executor171 Not tainted 4.14.202-syzkaller #0 [ 29.117434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.126870] Call Trace: [ 29.129458] dump_stack+0x1b2/0x283 [ 29.133335] panic+0x1f9/0x42d [ 29.136528] ? add_taint.cold+0x16/0x16 [ 29.140497] ? sta_info_alloc+0x1299/0x16e0 [ 29.144801] ? sta_info_alloc+0x1299/0x16e0 [ 29.149116] __warn.cold+0x20/0x4b [ 29.152657] ? ist_end_non_atomic+0x10/0x10 [ 29.156960] ? sta_info_alloc+0x1299/0x16e0 [ 29.161278] report_bug+0x208/0x249 [ 29.164886] do_error_trap+0x195/0x2d0 [ 29.168752] ? math_error+0x2d0/0x2d0 [ 29.172530] ? trace_hardirqs_on+0x10/0x10 [ 29.176769] ? fs_reclaim_release+0xd0/0x110 [ 29.181156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.185992] invalid_op+0x1b/0x40 [ 29.189431] RIP: 0010:sta_info_alloc+0x1299/0x16e0 [ 29.194335] RSP: 0018:ffff888095a5f5d8 EFLAGS: 00010297 [ 29.199692] RAX: ffff8880b30ac300 RBX: 0000000000000000 RCX: 0000000000000000 [ 29.206957] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000282 [ 29.216306] RBP: ffff8880a23c1120 R08: 0000000000000000 R09: 0000000000020012 [ 29.223586] R10: ffff8880b30acc00 R11: ffff8880b30ac300 R12: ffff8880b294edc0 [ 29.230837] R13: ffff888095519700 R14: ffff8880b294f348 R15: ffff8880b294f1d0 [ 29.238102] ? sta_info_alloc+0x1299/0x16e0 [ 29.242401] ? nl80211_parse_sta_wme+0x268/0x380 [ 29.247157] ieee80211_add_station+0x223/0x550 [ 29.251716] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 29.257158] nl80211_new_station+0xb4e/0x1290 [ 29.261630] ? get_vlan+0x280/0x280 [ 29.265247] ? lock_downgrade+0x740/0x740 [ 29.269379] ? nl80211_pre_doit+0x79/0x510 [ 29.273604] genl_family_rcv_msg+0x572/0xb20 [ 29.278007] ? genl_rcv+0x40/0x40 [ 29.281436] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 29.286883] ? trace_hardirqs_on+0x10/0x10 [ 29.291111] ? sock_sendmsg+0xb5/0x100 [ 29.294994] genl_rcv_msg+0xaf/0x140 [ 29.298686] netlink_rcv_skb+0x125/0x390 [ 29.302730] ? genl_family_rcv_msg+0xb20/0xb20 [ 29.307460] ? netlink_ack+0x9a0/0x9a0 [ 29.311327] ? lock_acquire+0x170/0x3f0 [ 29.315277] genl_rcv+0x24/0x40 [ 29.318542] netlink_unicast+0x437/0x610 [ 29.322579] ? netlink_sendskb+0xd0/0xd0 [ 29.326617] ? __check_object_size+0x179/0x22c [ 29.331263] netlink_sendmsg+0x62e/0xb80 [ 29.335299] ? nlmsg_notify+0x170/0x170 [ 29.339252] ? kernel_recvmsg+0x210/0x210 [ 29.343515] ? security_socket_sendmsg+0x83/0xb0 [ 29.348256] ? nlmsg_notify+0x170/0x170 [ 29.352227] sock_sendmsg+0xb5/0x100 [ 29.355921] ___sys_sendmsg+0x6c8/0x800 [ 29.359968] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 29.364716] ? __lock_acquire+0x5fc/0x3f20 [ 29.368935] ? __dentry_kill+0x3f7/0x550 [ 29.372973] ? trace_hardirqs_on+0x10/0x10 [ 29.377297] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 29.382767] ? dentry_free+0xc6/0x120 [ 29.386547] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 29.391546] ? kmem_cache_free+0x23a/0x2b0 [ 29.395765] ? mntput_no_expire+0xc7/0x910 [ 29.399983] ? lock_acquire+0x170/0x3f0 [ 29.403935] ? __fdget+0x167/0x1f0 [ 29.407644] ? sockfd_lookup_light+0xb2/0x160 [ 29.412144] __sys_sendmsg+0xa3/0x120 [ 29.415927] ? SyS_shutdown+0x160/0x160 [ 29.419898] SyS_sendmsg+0x27/0x40 [ 29.423506] ? __sys_sendmsg+0x120/0x120 [ 29.427564] do_syscall_64+0x1d5/0x640 [ 29.431593] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.437018] RIP: 0033:0x441979 [ 29.440281] RSP: 002b:00007ffecbe45828 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.447972] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441979 [ 29.455228] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 29.462488] RBP: 000000306e616c77 R08: 0000000000000000 R09: 0000001300000000 [ 29.469907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 29.477187] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 29.484772] Kernel Offset: disabled [ 29.488476] Rebooting in 86400 seconds..