Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts.
syzkaller login: [  126.447735] IPVS: ftp: loaded support on port[0] = 21
[  126.452798] IPVS: ftp: loaded support on port[0] = 21
[  126.463217] IPVS: ftp: loaded support on port[0] = 21
[  126.467312] IPVS: ftp: loaded support on port[0] = 21
[  126.475217] IPVS: ftp: loaded support on port[0] = 21
[  126.478770] IPVS: ftp: loaded support on port[0] = 21
[  126.772583] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  126.787469] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  126.795612] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  126.803668] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  126.810472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.820004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.820745] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  126.833843] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  126.843425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.851252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.858543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.862802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.867206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.886228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.894635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.908532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.917465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.925618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.949813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.961432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.971871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.991770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.009627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.011040] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[  127.025854] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[  127.037015] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[  127.043732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  127.051387] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[  127.059469] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[  127.066515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.068363] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[  127.074382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.082263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.088264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.095319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.101351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.108166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.116258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.124690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.129951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.139817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.148578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.152655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.156940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.169989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.177119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.186029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.193711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
executing program
executing program
executing program
executing program
executing program
executing program
[  127.250079] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'.
[  127.264440] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'.
[  127.280034] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'.
[  127.280563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.292976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.298842] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'.
[  127.311799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.317771] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'.
[  127.335350] netlink: 16 bytes leftover after parsing attributes in process `syz-executor303'.
[  127.336236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.348838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.361983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.892594] ------------[ cut here ]------------
[  127.898024] Have pending ack frames!
[  127.902070] WARNING: CPU: 0 PID: 8341 at net/mac80211/main.c:1279 ieee80211_free_ack_frame+0x48/0x50
[  127.911324] Kernel panic - not syncing: panic_on_warn set ...
[  127.911324] 
[  127.918685] CPU: 0 PID: 8341 Comm: kworker/u4:6 Not tainted 4.19.211-syzkaller #0
[  127.926284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[  127.935623] Workqueue: netns cleanup_net
[  127.939662] Call Trace:
[  127.942235]  dump_stack+0x1fc/0x2ef
[  127.945845]  panic+0x26a/0x50e
[  127.949030]  ? __warn_printk+0xf3/0xf3
[  127.952917]  ? ieee80211_free_ack_frame+0x48/0x50
[  127.957751]  ? __probe_kernel_read+0x130/0x1b0
[  127.962329]  ? __warn.cold+0x5/0x5a
[  127.965944]  ? __warn+0xe4/0x200
[  127.969296]  ? ieee80211_free_ack_frame+0x48/0x50
[  127.974126]  __warn.cold+0x20/0x5a
[  127.977653]  ? ieee80211_free_ack_frame+0x48/0x50
[  127.982547]  report_bug+0x262/0x2b0
[  127.986162]  do_error_trap+0x1d7/0x310
[  127.990039]  ? math_error+0x310/0x310
[  127.993829]  ? irq_work_claim+0xa6/0xc0
[  127.997783]  ? irq_work_queue+0x29/0x80
[  128.001742]  ? error_entry+0x72/0xd0
[  128.005449]  ? trace_hardirqs_off_caller+0x6e/0x210
[  128.010453]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  128.015284]  invalid_op+0x14/0x20
[  128.018735] RIP: 0010:ieee80211_free_ack_frame+0x48/0x50
[  128.024167] Code: e8 1d 4b cd f9 48 89 ef e8 05 7a db fe 31 c0 5b 5d c3 e8 0b 4b cd f9 48 c7 c7 e0 3d 67 89 c6 05 02 73 79 03 01 e8 dd 82 5d 00 <0f> 0b eb d2 0f 1f 40 00 41 57 41 56 41 55 41 54 49 bc 00 00 00 00
[  128.043067] RSP: 0018:ffff88809573fa28 EFLAGS: 00010282
[  128.048505] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  128.055751] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed1012ae7f37
[  128.063005] RBP: ffff8880a4a345c0 R08: 0000000000000001 R09: 0000000000000000
[  128.070257] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880b0c295b8
[  128.077509] R13: dffffc0000000000 R14: ffffffff87953a30 R15: 0000000000000000
[  128.084773]  ? ieee80211_free_hw+0x140/0x140
[  128.089163]  ? vprintk_func+0x81/0x180
[  128.093035]  ? ieee80211_free_ack_frame+0x48/0x50
[  128.097858]  idr_for_each+0x132/0x290
[  128.101638]  ? idr_find+0x50/0x50
[  128.105069]  ? kfree+0x110/0x210
[  128.108415]  ? device_remove_bin_file+0x30/0x30
[  128.113072]  ? kfree_const+0x51/0x60
[  128.116776]  ieee80211_free_hw+0x88/0x140
[  128.120917]  hwsim_exit_net+0xbdf/0x1580
[  128.124962]  ? mac80211_hwsim_netlink_notify+0x1400/0x1400
[  128.130567]  ? nf_unregister_net_hooks+0x5d/0xe0
[  128.135303]  ? mac80211_hwsim_netlink_notify+0x1400/0x1400
[  128.140904]  ops_exit_list+0xa5/0x150
[  128.144685]  cleanup_net+0x3b4/0x8b0
[  128.148400]  ? net_drop_ns+0x90/0x90
[  128.152095]  ? check_preemption_disabled+0x10/0x280
[  128.157094]  process_one_work+0x864/0x1570
[  128.161317]  ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[  128.165978]  worker_thread+0x64c/0x1130
[  128.169934]  ? __kthread_parkme+0x133/0x1e0
[  128.174231]  ? process_one_work+0x1570/0x1570
[  128.178704]  kthread+0x33f/0x460
[  128.182048]  ? kthread_park+0x180/0x180
[  128.186000]  ret_from_fork+0x24/0x30
[  128.190196] Kernel Offset: disabled
[  128.193875] Rebooting in 86400 seconds..