[ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 32.350702] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 34.054461] WARNING: CPU: 1 PID: 8307 at net/mac80211/offchannel.c:419 ieee80211_start_next_roc+0x1ed/0x240 [ 34.064610] Kernel panic - not syncing: panic_on_warn set ... [ 34.064610] [ 34.072156] CPU: 1 PID: 8307 Comm: syz-executor223 Not tainted 4.19.211-syzkaller #0 [ 34.080019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.089351] Call Trace: [ 34.091936] dump_stack+0x1fc/0x2ef [ 34.095553] panic+0x26a/0x50e [ 34.098736] ? __warn_printk+0xf3/0xf3 [ 34.102612] ? ieee80211_start_next_roc+0x1ed/0x240 [ 34.107614] ? __probe_kernel_read+0x130/0x1b0 [ 34.112176] ? __warn.cold+0x5/0x5a [ 34.115783] ? __warn+0xe4/0x200 [ 34.119134] ? ieee80211_start_next_roc+0x1ed/0x240 [ 34.124130] __warn.cold+0x20/0x5a [ 34.127654] ? ieee80211_start_next_roc+0x1ed/0x240 [ 34.132656] report_bug+0x262/0x2b0 [ 34.136271] do_error_trap+0x1d7/0x310 [ 34.140164] ? math_error+0x310/0x310 [ 34.143952] ? __mutex_lock+0x368/0x1190 [ 34.147999] ? error_entry+0x72/0xd0 [ 34.151789] ? trace_hardirqs_off_caller+0x6e/0x210 [ 34.156806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.161640] invalid_op+0x14/0x20 [ 34.165086] RIP: 0010:ieee80211_start_next_roc+0x1ed/0x240 [ 34.170695] Code: 98 16 00 00 48 89 ef 48 89 c2 e8 0e ec 0a 00 5b 5d e9 17 0e c9 f9 e8 12 0e c9 f9 48 89 ef e8 7a 6c ff ff eb 94 e8 03 0e c9 f9 <0f> 0b eb 8b e8 9a e8 fe f9 e9 be fe ff ff 48 c7 c7 60 f1 45 8a e8 [ 34.189581] RSP: 0018:ffff8880a9187468 EFLAGS: 00010293 [ 34.194947] RAX: ffff88809b0c84c0 RBX: 0000000000000001 RCX: ffffffff8799768d [ 34.202314] RDX: 0000000000000000 RSI: ffffffff8799776d RDI: 0000000000000001 [ 34.209575] RBP: ffff888238000c80 R08: 0000000000000001 R09: 0000000000000000 [ 34.216834] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 34.224192] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff888238001b60 [ 34.231464] ? ieee80211_start_next_roc+0x10d/0x240 [ 34.236469] ? ieee80211_start_next_roc+0x1ed/0x240 [ 34.241472] ? ieee80211_start_next_roc+0x1ed/0x240 [ 34.246571] __ieee80211_scan_completed+0x571/0x1690 [ 34.251661] ? sync_rcu_exp_select_cpus+0x820/0x820 [ 34.256765] ieee80211_scan_cancel+0x340/0x940 [ 34.261427] ieee80211_do_stop+0x18c6/0x1ff0 [ 34.265825] ? cond_synchronize_rcu+0x20/0x20 [ 34.270306] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 34.275392] ? ieee80211_adjust_monitor_flags+0x230/0x230 [ 34.281008] ieee80211_if_change_type+0x2b5/0x7a0 [ 34.285847] ieee80211_change_iface+0x26/0x220 [ 34.290413] cfg80211_change_iface+0x2e1/0x1520 [ 34.295073] nl80211_set_interface+0x661/0x830 [ 34.299741] ? nl80211_nan_del_func+0x8b0/0x8b0 [ 34.304391] ? nl80211_dump_interface+0x6e0/0x6e0 [ 34.309240] ? nl80211_pre_doit+0xa2/0x620 [ 34.313468] ? __cfg80211_rdev_from_attrs+0x700/0x700 [ 34.318641] genl_family_rcv_msg+0x642/0xc40 [ 34.323037] ? genl_rcv+0x40/0x40 [ 34.326470] ? genl_rcv_msg+0x12f/0x160 [ 34.330430] ? mutex_trylock+0x1a0/0x1a0 [ 34.334475] ? __radix_tree_lookup+0x216/0x370 [ 34.339039] genl_rcv_msg+0xbf/0x160 [ 34.342737] netlink_rcv_skb+0x160/0x440 [ 34.346783] ? genl_family_rcv_msg+0xc40/0xc40 [ 34.351346] ? netlink_ack+0xae0/0xae0 [ 34.355219] ? genl_rcv+0x15/0x40 [ 34.358658] genl_rcv+0x24/0x40 [ 34.361921] netlink_unicast+0x4d5/0x690 [ 34.365966] ? netlink_sendskb+0x110/0x110 [ 34.370183] ? _copy_from_iter_full+0x229/0x7c0 [ 34.374843] ? __phys_addr_symbol+0x2c/0x70 [ 34.379249] ? __check_object_size+0x17b/0x3e0 [ 34.383816] netlink_sendmsg+0x6c3/0xc50 [ 34.387869] ? aa_af_perm+0x230/0x230 [ 34.391651] ? nlmsg_notify+0x1f0/0x1f0 [ 34.395621] ? nlmsg_notify+0x1f0/0x1f0 [ 34.399586] sock_sendmsg+0xc3/0x120 [ 34.403286] __sys_sendto+0x21a/0x320 [ 34.407068] ? __ia32_sys_getpeername+0xb0/0xb0 [ 34.411718] ? debug_object_active_state+0x254/0x330 [ 34.416829] ? lock_acquire+0x170/0x3c0 [ 34.420784] ? task_work_run+0x64/0x1c0 [ 34.424739] ? blkcg_schedule_throttle+0x1f0/0x1f0 [ 34.429649] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 34.434224] ? _raw_spin_unlock_irq+0x5a/0x80 [ 34.438702] ? task_work_run+0x126/0x1c0 [ 34.442754] __x64_sys_sendto+0xdd/0x1b0 [ 34.446800] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 34.451378] do_syscall_64+0xf9/0x620 [ 34.455164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.460332] RIP: 0033:0x7faa249c7016 [ 34.464027] Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 [ 34.483003] RSP: 002b:00007ffc7a3921c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 34.490702] RAX: ffffffffffffffda RBX: 00007ffc7a3922a0 RCX: 00007faa249c7016 [ 34.497966] RDX: 0000000000000024 RSI: 00007ffc7a3922f0 RDI: 0000000000000007 [ 34.505231] RBP: 0000000000000001 R08: 00007ffc7a3921e4 R09: 000000000000000c [ 34.512483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.519733] R13: 00007ffc7a3922f0 R14: 0000000000000007 R15: 0000000000000000 [ 34.527196] Kernel Offset: disabled [ 34.530863] Rebooting in 86400 seconds..