[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. syzkaller login: [ 69.499769][ T8447] IPVS: ftp: loaded support on port[0] = 21 [ 69.631468][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.658833][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.667978][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program executing program [ 69.710513][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.719634][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.728245][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.767971][ T8491] ------------[ cut here ]------------ [ 69.773882][ T8491] WARNING: CPU: 1 PID: 8491 at net/wireless/sme.c:532 cfg80211_connect+0x1409/0x2040 [ 69.784598][ T8491] Modules linked in: [ 69.791542][ T8491] CPU: 1 PID: 8491 Comm: syz-executor914 Not tainted 5.11.0-rc7-syzkaller #0 [ 69.801560][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.812218][ T8491] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 69.818198][ T8491] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 47 84 2e f9 <0f> 0b e8 40 84 2e f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 69.838460][ T8491] RSP: 0018:ffffc90001aff298 EFLAGS: 00010293 [ 69.844925][ T8491] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.853023][ T8491] RDX: ffff888011a0d340 RSI: ffffffff88446449 RDI: ffffffff8a838220 [ 69.861074][ T8491] RBP: ffff888011ed8cf2 R08: 0000000000000001 R09: ffff888011ed8cf7 [ 69.869167][ T8491] R10: ffffed10023db19e R11: 0000000000000000 R12: ffffc90001aff438 [ 69.877149][ T8491] R13: ffff888011ed8bd0 R14: ffff888011ed8d18 R15: ffff888011ed8d20 [ 69.885221][ T8491] FS: 00007f6ce4083700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 69.894714][ T8491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.901958][ T8491] CR2: 00007f6ce4082298 CR3: 000000001516f000 CR4: 00000000001506e0 [ 69.910331][ T8491] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.918355][ T8491] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.926565][ T8491] Call Trace: [ 69.930118][ T8491] ? __cfg80211_disconnected+0x1470/0x1470 [ 69.936067][ T8491] ? memset+0x20/0x40 [ 69.940295][ T8491] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 69.946090][ T8491] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 69.952031][ T8491] nl80211_connect+0x1647/0x22a0 [ 69.956999][ T8491] ? nl80211_parse_connkeys+0xa50/0xa50 [ 69.962628][ T8491] ? __mutex_unlock_slowpath+0xe2/0x610 [ 69.968211][ T8491] ? wait_for_completion_io+0x260/0x260 [ 69.973917][ T8491] ? nl80211_pre_doit+0xa4/0x5a0 [ 69.981145][ T8491] genl_family_rcv_msg_doit+0x228/0x320 [ 69.986795][ T8491] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 69.994290][ T8491] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.000630][ T8491] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.007027][ T8491] ? ns_capable+0xde/0x100 [ 70.011584][ T8491] genl_rcv_msg+0x328/0x580 [ 70.016157][ T8491] ? genl_get_cmd+0x480/0x480 [ 70.021965][ T8491] ? nl80211_parse_connkeys+0xa50/0xa50 [ 70.027855][ T8491] ? lock_release+0x710/0x710 [ 70.033628][ T8491] netlink_rcv_skb+0x153/0x420 [ 70.038801][ T8491] ? genl_get_cmd+0x480/0x480 [ 70.043501][ T8491] ? netlink_ack+0xaa0/0xaa0 [ 70.049515][ T8491] genl_rcv+0x24/0x40 [ 70.053621][ T8491] netlink_unicast+0x533/0x7d0 [ 70.058387][ T8491] ? netlink_attachskb+0x870/0x870 [ 70.063777][ T8491] ? _copy_from_iter_full+0x275/0x850 [ 70.069327][ T8491] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.075647][ T8491] ? __phys_addr_symbol+0x2c/0x70 [ 70.080773][ T8491] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 70.086566][ T8491] ? __check_object_size+0x171/0x3f0 [ 70.091975][ T8491] netlink_sendmsg+0x856/0xd90 [ 70.096763][ T8491] ? netlink_unicast+0x7d0/0x7d0 [ 70.101784][ T8491] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.108052][ T8491] ? netlink_unicast+0x7d0/0x7d0 [ 70.113169][ T8491] sock_sendmsg+0xcf/0x120 [ 70.117612][ T8491] ____sys_sendmsg+0x6e8/0x810 [ 70.122489][ T8491] ? kernel_sendmsg+0x50/0x50 [ 70.127274][ T8491] ? do_recvmmsg+0x6c0/0x6c0 [ 70.132004][ T8491] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.138001][ T8491] ? rcu_read_lock_sched_held+0x3a/0x70 [ 70.143635][ T8491] ? kfree+0x2ec/0x3b0 [ 70.147743][ T8491] ___sys_sendmsg+0xf3/0x170 [ 70.153441][ T8491] ? sendmsg_copy_msghdr+0x160/0x160 [ 70.159551][ T8491] ? __fget_files+0x266/0x3d0 [ 70.164294][ T8491] ? lock_downgrade+0x6d0/0x6d0 [ 70.169275][ T8491] ? __fget_files+0x288/0x3d0 [ 70.173969][ T8491] ? __fget_light+0xea/0x280 [ 70.178621][ T8491] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.184888][ T8491] __sys_sendmsg+0xe5/0x1b0 [ 70.189519][ T8491] ? __sys_sendmsg_sock+0xb0/0xb0 [ 70.194575][ T8491] ? __do_sys_futex+0x2a2/0x470 [ 70.199561][ T8491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 70.205488][ T8491] do_syscall_64+0x2d/0x70 [ 70.209996][ T8491] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 70.215925][ T8491] RIP: 0033:0x446c09 [ 70.219875][ T8491] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.239686][ T8491] RSP: 002b:00007f6ce4083308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.248103][ T8491] RAX: ffffffffffffffda RBX: 00000000004cb428 RCX: 0000000000446c09 [ 70.256129][ T8491] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 70.264203][ T8491] RBP: 00000000004cb420 R08: 0000000000000034 R09: 0000000000000000 [ 70.272231][ T8491] R10: 000000000000000a R11: 0000000000000246 R12: 00000000004cb42c [ 70.280951][ T8491] R13: 000000000049b164 R14: 0031313230386c6e R15: 0000000000022000 [ 70.289019][ T8491] Kernel panic - not syncing: panic_on_warn set ... [ 70.295600][ T8491] CPU: 1 PID: 8491 Comm: syz-executor914 Not tainted 5.11.0-rc7-syzkaller #0 [ 70.304373][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.314433][ T8491] Call Trace: [ 70.317706][ T8491] dump_stack+0x107/0x163 [ 70.322036][ T8491] panic+0x306/0x73d [ 70.326052][ T8491] ? __warn_printk+0xf3/0xf3 [ 70.330639][ T8491] ? __warn.cold+0x1a/0x44 [ 70.335050][ T8491] ? cfg80211_connect+0x1409/0x2040 [ 70.340243][ T8491] __warn.cold+0x35/0x44 [ 70.344479][ T8491] ? cfg80211_connect+0x1409/0x2040 [ 70.349698][ T8491] report_bug+0x1bd/0x210 [ 70.354024][ T8491] handle_bug+0x3c/0x60 [ 70.358180][ T8491] exc_invalid_op+0x14/0x40 [ 70.362670][ T8491] asm_exc_invalid_op+0x12/0x20 [ 70.367517][ T8491] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 70.373338][ T8491] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 47 84 2e f9 <0f> 0b e8 40 84 2e f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 70.392947][ T8491] RSP: 0018:ffffc90001aff298 EFLAGS: 00010293 [ 70.399022][ T8491] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.406981][ T8491] RDX: ffff888011a0d340 RSI: ffffffff88446449 RDI: ffffffff8a838220 [ 70.414943][ T8491] RBP: ffff888011ed8cf2 R08: 0000000000000001 R09: ffff888011ed8cf7 [ 70.422910][ T8491] R10: ffffed10023db19e R11: 0000000000000000 R12: ffffc90001aff438 [ 70.430882][ T8491] R13: ffff888011ed8bd0 R14: ffff888011ed8d18 R15: ffff888011ed8d20 [ 70.438861][ T8491] ? cfg80211_connect+0x1409/0x2040 [ 70.444420][ T8491] ? cfg80211_connect+0x1409/0x2040 [ 70.449616][ T8491] ? __cfg80211_disconnected+0x1470/0x1470 [ 70.455411][ T8491] ? memset+0x20/0x40 [ 70.459401][ T8491] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 70.465118][ T8491] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 70.470932][ T8491] nl80211_connect+0x1647/0x22a0 [ 70.475873][ T8491] ? nl80211_parse_connkeys+0xa50/0xa50 [ 70.481420][ T8491] ? __mutex_unlock_slowpath+0xe2/0x610 [ 70.486959][ T8491] ? wait_for_completion_io+0x260/0x260 [ 70.492534][ T8491] ? nl80211_pre_doit+0xa4/0x5a0 [ 70.497467][ T8491] genl_family_rcv_msg_doit+0x228/0x320 [ 70.503010][ T8491] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 70.510386][ T8491] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.516628][ T8491] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.522857][ T8491] ? ns_capable+0xde/0x100 [ 70.527269][ T8491] genl_rcv_msg+0x328/0x580 [ 70.531766][ T8491] ? genl_get_cmd+0x480/0x480 [ 70.536433][ T8491] ? nl80211_parse_connkeys+0xa50/0xa50 [ 70.541973][ T8491] ? lock_release+0x710/0x710 [ 70.546644][ T8491] netlink_rcv_skb+0x153/0x420 [ 70.551397][ T8491] ? genl_get_cmd+0x480/0x480 [ 70.556078][ T8491] ? netlink_ack+0xaa0/0xaa0 [ 70.560754][ T8491] genl_rcv+0x24/0x40 [ 70.564725][ T8491] netlink_unicast+0x533/0x7d0 [ 70.569493][ T8491] ? netlink_attachskb+0x870/0x870 [ 70.575224][ T8491] ? _copy_from_iter_full+0x275/0x850 [ 70.580601][ T8491] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.586872][ T8491] ? __phys_addr_symbol+0x2c/0x70 [ 70.591895][ T8491] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 70.597613][ T8491] ? __check_object_size+0x171/0x3f0 [ 70.602892][ T8491] netlink_sendmsg+0x856/0xd90 [ 70.607654][ T8491] ? netlink_unicast+0x7d0/0x7d0 [ 70.612588][ T8491] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.618841][ T8491] ? netlink_unicast+0x7d0/0x7d0 [ 70.623777][ T8491] sock_sendmsg+0xcf/0x120 [ 70.628193][ T8491] ____sys_sendmsg+0x6e8/0x810 [ 70.632965][ T8491] ? kernel_sendmsg+0x50/0x50 [ 70.637636][ T8491] ? do_recvmmsg+0x6c0/0x6c0 [ 70.642224][ T8491] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.648672][ T8491] ? rcu_read_lock_sched_held+0x3a/0x70 [ 70.656913][ T8491] ? kfree+0x2ec/0x3b0 [ 70.660981][ T8491] ___sys_sendmsg+0xf3/0x170 [ 70.665569][ T8491] ? sendmsg_copy_msghdr+0x160/0x160 [ 70.670853][ T8491] ? __fget_files+0x266/0x3d0 [ 70.675527][ T8491] ? lock_downgrade+0x6d0/0x6d0 [ 70.680380][ T8491] ? __fget_files+0x288/0x3d0 [ 70.685140][ T8491] ? __fget_light+0xea/0x280 [ 70.689731][ T8491] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.695979][ T8491] __sys_sendmsg+0xe5/0x1b0 [ 70.700510][ T8491] ? __sys_sendmsg_sock+0xb0/0xb0 [ 70.705542][ T8491] ? __do_sys_futex+0x2a2/0x470 [ 70.710395][ T8491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 70.716291][ T8491] do_syscall_64+0x2d/0x70 [ 70.720700][ T8491] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 70.726586][ T8491] RIP: 0033:0x446c09 [ 70.730467][ T8491] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.750066][ T8491] RSP: 002b:00007f6ce4083308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.758482][ T8491] RAX: ffffffffffffffda RBX: 00000000004cb428 RCX: 0000000000446c09 [ 70.766454][ T8491] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 70.774428][ T8491] RBP: 00000000004cb420 R08: 0000000000000034 R09: 0000000000000000 [ 70.782413][ T8491] R10: 000000000000000a R11: 0000000000000246 R12: 00000000004cb42c [ 70.790379][ T8491] R13: 000000000049b164 R14: 0031313230386c6e R15: 0000000000022000 [ 70.799137][ T8491] Kernel Offset: disabled [ 70.803571][ T8491] Rebooting in 86400 seconds..