[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.88' (ECDSA) to the list of known hosts. syzkaller login: [ 72.654325][ T8376] IPVS: ftp: loaded support on port[0] = 21 [ 72.736213][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.770673][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 72.805289][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.817803][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.828320][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.839074][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.895163][ T8418] ------------[ cut here ]------------ [ 72.902172][ T8418] WARNING: CPU: 0 PID: 8418 at net/wireless/sme.c:532 cfg80211_connect+0x1409/0x2040 [ 72.914101][ T8418] Modules linked in: [ 72.918777][ T8418] CPU: 0 PID: 8418 Comm: syz-executor705 Not tainted 5.12.0-rc4-syzkaller #0 [ 72.929304][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.942468][ T8418] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 72.949241][ T8418] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 97 94 2a f9 <0f> 0b e8 90 94 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 72.972696][ T8418] RSP: 0018:ffffc900016af298 EFLAGS: 00010293 [ 72.979830][ T8418] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.989983][ T8418] RDX: ffff88801bf31c40 RSI: ffffffff88495cd9 RDI: ffffffff8a854f60 [ 72.999563][ T8418] RBP: ffff8880189bcd32 R08: 0000000000000001 R09: ffff8880189bcd37 [ 73.009726][ T8418] R10: ffffed10031379a6 R11: 0000000000000000 R12: ffffc900016af438 [ 73.020680][ T8418] R13: ffff8880189bcc10 R14: ffff8880189bcd58 R15: ffff8880189bcd60 [ 73.030492][ T8418] FS: 0000000000876300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 73.042072][ T8418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.050343][ T8418] CR2: 00007fdce4468000 CR3: 0000000018569000 CR4: 00000000001506f0 [ 73.060593][ T8418] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.072184][ T8418] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.083899][ T8418] Call Trace: [ 73.088498][ T8418] ? __cfg80211_disconnected+0x1470/0x1470 [ 73.096079][ T8418] ? memset+0x20/0x40 [ 73.101028][ T8418] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 73.109703][ T8418] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 73.117777][ T8418] nl80211_connect+0x1647/0x22a0 [ 73.123874][ T8418] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.130032][ T8418] ? __mutex_unlock_slowpath+0xe2/0x610 [ 73.137621][ T8418] ? wait_for_completion_io+0x270/0x270 [ 73.146015][ T8418] ? nl80211_pre_doit+0xa6/0x5c0 [ 73.152509][ T8418] genl_family_rcv_msg_doit+0x228/0x320 [ 73.159344][ T8418] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 73.168247][ T8418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.176092][ T8418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.183184][ T8418] ? ns_capable+0xde/0x100 [ 73.188149][ T8418] genl_rcv_msg+0x328/0x580 [ 73.193855][ T8418] ? genl_get_cmd+0x480/0x480 [ 73.198707][ T8418] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.205635][ T8418] ? lock_release+0x720/0x720 [ 73.211015][ T8418] netlink_rcv_skb+0x153/0x420 [ 73.218214][ T8418] ? genl_get_cmd+0x480/0x480 [ 73.223703][ T8418] ? netlink_ack+0xaa0/0xaa0 [ 73.228562][ T8418] genl_rcv+0x24/0x40 [ 73.233829][ T8418] netlink_unicast+0x533/0x7d0 [ 73.239160][ T8418] ? netlink_attachskb+0x870/0x870 [ 73.247969][ T8418] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.257116][ T8418] ? __phys_addr_symbol+0x2c/0x70 [ 73.266015][ T8418] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 73.277708][ T8418] ? __check_object_size+0x171/0x3f0 [ 73.285866][ T8418] netlink_sendmsg+0x856/0xd90 [ 73.293796][ T8418] ? netlink_unicast+0x7d0/0x7d0 [ 73.300404][ T8418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.309864][ T8418] ? netlink_unicast+0x7d0/0x7d0 [ 73.316534][ T8418] sock_sendmsg+0xcf/0x120 [ 73.322483][ T8418] ____sys_sendmsg+0x6e8/0x810 [ 73.328397][ T8418] ? kernel_sendmsg+0x50/0x50 [ 73.335339][ T8418] ? do_recvmmsg+0x6d0/0x6d0 [ 73.342665][ T8418] ? lock_chain_count+0x20/0x20 [ 73.347718][ T8418] ? find_held_lock+0x2d/0x110 [ 73.354212][ T8418] ___sys_sendmsg+0xf3/0x170 [ 73.359085][ T8418] ? sendmsg_copy_msghdr+0x160/0x160 [ 73.366086][ T8418] ? __lock_acquire+0x16b3/0x54c0 [ 73.372487][ T8418] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.379126][ T8418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.389428][ T8418] ? __fget_light+0x215/0x280 [ 73.395856][ T8418] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.403766][ T8418] __sys_sendmsg+0xe5/0x1b0 [ 73.408965][ T8418] ? __sys_sendmsg_sock+0x30/0x30 [ 73.417165][ T8418] ? syscall_enter_from_user_mode+0x27/0x70 [ 73.424563][ T8418] do_syscall_64+0x2d/0x70 [ 73.432029][ T8418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.442601][ T8418] RIP: 0033:0x441089 [ 73.448056][ T8418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.472006][ T8418] RSP: 002b:00007ffe3908e018 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.480847][ T8418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 73.491048][ T8418] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 73.501342][ T8418] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 73.510244][ T8418] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000011c9e [ 73.520021][ T8418] R13: 00007ffe3908e080 R14: 00007ffe3908e070 R15: 00007ffe3908e03c [ 73.530800][ T8418] Kernel panic - not syncing: panic_on_warn set ... [ 73.538188][ T8418] CPU: 0 PID: 8418 Comm: syz-executor705 Not tainted 5.12.0-rc4-syzkaller #0 [ 73.551272][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.562741][ T8418] Call Trace: [ 73.566439][ T8418] dump_stack+0x141/0x1d7 [ 73.572482][ T8418] panic+0x306/0x73d [ 73.576832][ T8418] ? __warn_printk+0xf3/0xf3 [ 73.582218][ T8418] ? __warn.cold+0x1a/0x44 [ 73.587663][ T8418] ? cfg80211_connect+0x1409/0x2040 [ 73.594158][ T8418] __warn.cold+0x35/0x44 [ 73.598937][ T8418] ? cfg80211_connect+0x1409/0x2040 [ 73.604961][ T8418] report_bug+0x1bd/0x210 [ 73.609321][ T8418] handle_bug+0x3c/0x60 [ 73.613544][ T8418] exc_invalid_op+0x14/0x40 [ 73.618354][ T8418] asm_exc_invalid_op+0x12/0x20 [ 73.623970][ T8418] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 73.631379][ T8418] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 97 94 2a f9 <0f> 0b e8 90 94 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 73.654202][ T8418] RSP: 0018:ffffc900016af298 EFLAGS: 00010293 [ 73.660490][ T8418] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 73.669094][ T8418] RDX: ffff88801bf31c40 RSI: ffffffff88495cd9 RDI: ffffffff8a854f60 [ 73.677540][ T8418] RBP: ffff8880189bcd32 R08: 0000000000000001 R09: ffff8880189bcd37 [ 73.686428][ T8418] R10: ffffed10031379a6 R11: 0000000000000000 R12: ffffc900016af438 [ 73.694683][ T8418] R13: ffff8880189bcc10 R14: ffff8880189bcd58 R15: ffff8880189bcd60 [ 73.703905][ T8418] ? cfg80211_connect+0x1409/0x2040 [ 73.709861][ T8418] ? cfg80211_connect+0x1409/0x2040 [ 73.715259][ T8418] ? __cfg80211_disconnected+0x1470/0x1470 [ 73.722243][ T8418] ? memset+0x20/0x40 [ 73.727032][ T8418] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 73.733114][ T8418] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 73.739609][ T8418] nl80211_connect+0x1647/0x22a0 [ 73.745092][ T8418] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.752028][ T8418] ? __mutex_unlock_slowpath+0xe2/0x610 [ 73.759300][ T8418] ? wait_for_completion_io+0x270/0x270 [ 73.766866][ T8418] ? nl80211_pre_doit+0xa6/0x5c0 [ 73.772626][ T8418] genl_family_rcv_msg_doit+0x228/0x320 [ 73.778511][ T8418] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 73.786622][ T8418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.793297][ T8418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.800689][ T8418] ? ns_capable+0xde/0x100 [ 73.805402][ T8418] genl_rcv_msg+0x328/0x580 [ 73.810052][ T8418] ? genl_get_cmd+0x480/0x480 [ 73.815036][ T8418] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.821139][ T8418] ? lock_release+0x720/0x720 [ 73.826293][ T8418] netlink_rcv_skb+0x153/0x420 [ 73.831546][ T8418] ? genl_get_cmd+0x480/0x480 [ 73.836456][ T8418] ? netlink_ack+0xaa0/0xaa0 [ 73.841358][ T8418] genl_rcv+0x24/0x40 [ 73.845603][ T8418] netlink_unicast+0x533/0x7d0 [ 73.850525][ T8418] ? netlink_attachskb+0x870/0x870 [ 73.855683][ T8418] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.862426][ T8418] ? __phys_addr_symbol+0x2c/0x70 [ 73.867979][ T8418] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 73.874078][ T8418] ? __check_object_size+0x171/0x3f0 [ 73.879378][ T8418] netlink_sendmsg+0x856/0xd90 [ 73.884648][ T8418] ? netlink_unicast+0x7d0/0x7d0 [ 73.890241][ T8418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.897911][ T8418] ? netlink_unicast+0x7d0/0x7d0 [ 73.903154][ T8418] sock_sendmsg+0xcf/0x120 [ 73.907896][ T8418] ____sys_sendmsg+0x6e8/0x810 [ 73.913479][ T8418] ? kernel_sendmsg+0x50/0x50 [ 73.918422][ T8418] ? do_recvmmsg+0x6d0/0x6d0 [ 73.923844][ T8418] ? lock_chain_count+0x20/0x20 [ 73.928721][ T8418] ? find_held_lock+0x2d/0x110 [ 73.933543][ T8418] ___sys_sendmsg+0xf3/0x170 [ 73.938159][ T8418] ? sendmsg_copy_msghdr+0x160/0x160 [ 73.945803][ T8418] ? __lock_acquire+0x16b3/0x54c0 [ 73.950842][ T8418] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.956932][ T8418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.963201][ T8418] ? __fget_light+0x215/0x280 [ 73.967878][ T8418] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.974383][ T8418] __sys_sendmsg+0xe5/0x1b0 [ 73.978891][ T8418] ? __sys_sendmsg_sock+0x30/0x30 [ 73.984012][ T8418] ? syscall_enter_from_user_mode+0x27/0x70 [ 73.990149][ T8418] do_syscall_64+0x2d/0x70 [ 73.994584][ T8418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.000538][ T8418] RIP: 0033:0x441089 [ 74.004487][ T8418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.024106][ T8418] RSP: 002b:00007ffe3908e018 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.032660][ T8418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 74.040663][ T8418] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 74.048658][ T8418] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 74.056747][ T8418] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000011c9e [ 74.064836][ T8418] R13: 00007ffe3908e080 R14: 00007ffe3908e070 R15: 00007ffe3908e03c [ 74.073624][ T8418] Kernel Offset: disabled [ 74.078094][ T8418] Rebooting in 86400 seconds..