------------[ cut here ]------------ WARNING: CPU: 0 PID: 15 at net/mac80211/ocb.c:63 ieee80211_ocb_rx_no_sta+0x511/0x5d0 net/mac80211/ocb.c:63 Modules linked in: CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:ieee80211_ocb_rx_no_sta+0x511/0x5d0 net/mac80211/ocb.c:63 Code: 48 0a 00 00 48 c7 c7 40 88 8a 8c 48 89 de 4c 89 fa 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 25 4c f6 e8 00 a7 e4 f6 90 <0f> 0b 90 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 00 00 00 RSP: 0018:ffffc9000041f470 EFLAGS: 00010246 RAX: ffffffff8adb6c60 RBX: ffff888041348d80 RCX: ffff88801ab24900 RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8adb6809 R10: 000000000000000c R11: 0000000000000100 R12: ffffffff8adb6809 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88800b59e70a FS: 0000000000000000(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000002280 CR3: 000000004243c000 CR4: 0000000000352ef0 Call Trace: ieee80211_accept_frame net/mac80211/rx.c:4432 [inline] ieee80211_prepare_and_rx_handle+0x2555/0x6770 net/mac80211/rx.c:4994 __ieee80211_rx_handle_packet net/mac80211/rx.c:5304 [inline] ieee80211_rx_list+0x2294/0x2c10 net/mac80211/rx.c:5451 ieee80211_rx_napi+0x1a8/0x3d0 net/mac80211/rx.c:5474 ieee80211_rx include/net/mac80211.h:5214 [inline] ieee80211_handle_queued_frames+0xe8/0x1f0 net/mac80211/main.c:453 tasklet_action_common+0x36c/0x580 kernel/softirq.c:925 handle_softirqs+0x286/0x870 kernel/softirq.c:622 run_ksoftirqd+0x9b/0x100 kernel/softirq.c:1063 smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245