[ OK ] Found device /dev/ttyS0. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. syzkaller login: [ 28.629941] IPVS: ftp: loaded support on port[0] = 21 [ 28.683263] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 28.700466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.710716] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 28.717897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 28.727335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.732366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.741972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.750250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.776440] ------------[ cut here ]------------ [ 28.781296] WARNING: CPU: 1 PID: 8003 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x657/0x751 [ 28.790477] Kernel panic - not syncing: panic_on_warn set ... [ 28.790477] [ 28.797839] CPU: 1 PID: 8003 Comm: syz-executor166 Not tainted 4.14.204-syzkaller #0 [ 28.805712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.815050] Call Trace: [ 28.817619] dump_stack+0x1b2/0x283 [ 28.821221] panic+0x1f9/0x42d [ 28.824389] ? add_taint.cold+0x16/0x16 [ 28.828341] ? ieee80211_probe_client+0x657/0x751 [ 28.833161] ? ieee80211_probe_client+0x657/0x751 [ 28.838023] __warn.cold+0x20/0x4b [ 28.841568] ? ist_end_non_atomic+0x10/0x10 [ 28.845880] ? ieee80211_probe_client+0x657/0x751 [ 28.850715] report_bug+0x208/0x249 [ 28.854323] do_error_trap+0x195/0x2d0 [ 28.858186] ? math_error+0x2d0/0x2d0 [ 28.861968] ? trace_hardirqs_on+0x10/0x10 [ 28.866186] ? ieee80211_probe_client+0x69/0x751 [ 28.870923] ? __mutex_lock+0x360/0x1310 [ 28.874972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 28.879797] invalid_op+0x1b/0x40 [ 28.883233] RIP: 0010:ieee80211_probe_client+0x657/0x751 [ 28.888654] RSP: 0018:ffff8880b2fe7670 EFLAGS: 00010297 [ 28.894018] RAX: ffff8880b4ae4600 RBX: ffff8880930c0a80 RCX: 0000000000000000 [ 28.901290] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000282 [ 28.908546] RBP: ffff888096a4dca0 R08: 0000000000000000 R09: 0000000000020012 [ 28.915840] R10: ffff8880b4ae4f28 R11: ffff8880b4ae4600 R12: ffff8880a1849120 [ 28.923086] R13: 0000000000000000 R14: ffff888096a4dc9c R15: ffff8880a1848b40 [ 28.930346] nl80211_probe_client+0x348/0xb80 [ 28.934821] ? nl80211_stop_ap+0x70/0x70 [ 28.938876] ? nl80211_pre_doit+0x79/0x510 [ 28.943101] genl_family_rcv_msg+0x572/0xb20 [ 28.947486] ? genl_rcv+0x40/0x40 [ 28.950927] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 28.956353] ? trace_hardirqs_on+0x10/0x10 [ 28.960562] ? sock_sendmsg+0xb5/0x100 [ 28.964430] genl_rcv_msg+0xaf/0x140 [ 28.968119] netlink_rcv_skb+0x125/0x390 [ 28.972312] ? genl_family_rcv_msg+0xb20/0xb20 [ 28.976869] ? netlink_ack+0x9a0/0x9a0 [ 28.980751] ? lock_acquire+0x170/0x3f0 [ 28.984702] genl_rcv+0x24/0x40 [ 28.988303] netlink_unicast+0x437/0x610 [ 28.992381] ? netlink_sendskb+0xd0/0xd0 [ 28.996416] ? __check_object_size+0x179/0x22c [ 29.000973] netlink_sendmsg+0x62e/0xb80 [ 29.005020] ? nlmsg_notify+0x170/0x170 [ 29.008969] ? kernel_recvmsg+0x210/0x210 [ 29.013095] ? security_socket_sendmsg+0x83/0xb0 [ 29.017824] ? nlmsg_notify+0x170/0x170 [ 29.021781] sock_sendmsg+0xb5/0x100 [ 29.025470] ___sys_sendmsg+0x6c8/0x800 [ 29.029507] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 29.034250] ? dev_ioctl+0xe7/0xbe0 [ 29.037860] ? dev_ifsioc+0x7d0/0x7d0 [ 29.041645] ? __dentry_kill+0x3f7/0x550 [ 29.045682] ? trace_hardirqs_on+0x10/0x10 [ 29.049890] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 29.054903] ? kmem_cache_free+0x23a/0x2b0 [ 29.059114] ? sock_ioctl+0x16c/0x4c0 [ 29.062890] ? sock_release+0x1e0/0x1e0 [ 29.066851] ? __fdget+0x167/0x1f0 [ 29.070365] ? sockfd_lookup_light+0xb2/0x160 [ 29.074856] __sys_sendmsg+0xa3/0x120 [ 29.078630] ? SyS_shutdown+0x160/0x160 [ 29.082589] ? security_file_ioctl+0x83/0xb0 [ 29.086974] SyS_sendmsg+0x27/0x40 [ 29.090487] ? __sys_sendmsg+0x120/0x120 [ 29.094523] do_syscall_64+0x1d5/0x640 [ 29.098390] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.103554] RIP: 0033:0x441939 [ 29.106729] RSP: 002b:00007fffb7410078 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.114422] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441939 [ 29.121667] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 29.128912] RBP: 000000306e616c77 R08: 0000001300000000 R09: 0000001300000000 [ 29.136156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 29.143403] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 29.151559] Kernel Offset: disabled [ 29.155225] Rebooting in 86400 seconds..