Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ 49.614309][ T8389] sshd (8389) used greatest stack depth: 22728 bytes left [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.150' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 56.684485][ T8490] device wlan0 entered promiscuous mode [ 56.701426][ T8490] ------------[ cut here ]------------ [ 56.708943][ T8490] WARNING: CPU: 0 PID: 8490 at net/mac80211/ieee80211_i.h:1456 ieee80211_get_sband+0x2e3/0x3e0 [ 56.719732][ T8490] Modules linked in: [ 56.724217][ T8490] CPU: 1 PID: 8490 Comm: syz-executor333 Not tainted 5.11.0-rc5-syzkaller #0 [ 56.733937][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.744558][ T8490] RIP: 0010:ieee80211_get_sband+0x2e3/0x3e0 [ 56.750492][ T8490] Code: f9 48 c7 c2 80 29 63 8a be 89 02 00 00 48 c7 c7 e0 29 63 8a c6 05 59 6b 9a 04 01 e8 30 48 64 00 e9 b8 fd ff ff e8 0d cb 1d f9 <0f> 0b e8 46 cc a4 00 31 ff 89 c3 89 c6 e8 7b d2 1d f9 85 db 74 19 [ 56.770938][ T8490] RSP: 0018:ffffc90000edf3d8 EFLAGS: 00010293 [ 56.777502][ T8490] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 56.785992][ T8490] RDX: ffff888020645340 RSI: ffffffff8854f643 RDI: 0000000000000003 [ 56.794252][ T8490] RBP: ffff88801aec8c80 R08: 0000000000000000 R09: 0000000000000000 [ 56.802331][ T8490] R10: ffffffff8854f5c5 R11: 0000000000000000 R12: 0000000000000000 [ 56.810659][ T8490] R13: ffff88801af38bc0 R14: ffff88801aec8c80 R15: ffffc90000edf51c [ 56.818696][ T8490] FS: 00007f3eae9c2700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 56.827692][ T8490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.834357][ T8490] CR2: 00007f48364c3000 CR3: 00000000143b5000 CR4: 0000000000350ee0 [ 56.842512][ T8490] Call Trace: [ 56.845865][ T8490] sta_apply_parameters+0x4e/0x1dc0 [ 56.851082][ T8490] ieee80211_add_station+0x320/0x660 [ 56.856432][ T8490] nl80211_new_station+0xdd0/0x13c0 [ 56.861640][ T8490] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 56.868072][ T8490] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 56.874488][ T8490] ? nl80211_pre_doit+0xa2/0x630 [ 56.879450][ T8490] genl_family_rcv_msg_doit+0x228/0x320 [ 56.885102][ T8490] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 56.892583][ T8490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.899053][ T8490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.905392][ T8490] ? ns_capable+0xde/0x100 [ 56.909847][ T8490] genl_rcv_msg+0x328/0x580 [ 56.914438][ T8490] ? genl_get_cmd+0x480/0x480 [ 56.919120][ T8490] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 56.925452][ T8490] ? lock_release+0x710/0x710 [ 56.930146][ T8490] netlink_rcv_skb+0x153/0x420 [ 56.935083][ T8490] ? genl_get_cmd+0x480/0x480 [ 56.939774][ T8490] ? netlink_ack+0xaa0/0xaa0 [ 56.944461][ T8490] genl_rcv+0x24/0x40 [ 56.948449][ T8490] netlink_unicast+0x533/0x7d0 [ 56.953751][ T8490] ? netlink_attachskb+0x870/0x870 [ 56.958884][ T8490] ? _copy_from_iter_full+0x275/0x850 [ 56.964356][ T8490] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.970608][ T8490] ? __phys_addr_symbol+0x2c/0x70 [ 56.975698][ T8490] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 56.981548][ T8490] ? __check_object_size+0x171/0x3f0 [ 56.987014][ T8490] netlink_sendmsg+0x856/0xd90 [ 56.991797][ T8490] ? netlink_unicast+0x7d0/0x7d0 [ 56.996831][ T8490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.003181][ T8490] ? netlink_unicast+0x7d0/0x7d0 [ 57.008138][ T8490] sock_sendmsg+0xcf/0x120 [ 57.012552][ T8490] ____sys_sendmsg+0x6e8/0x810 [ 57.017806][ T8490] ? kernel_sendmsg+0x50/0x50 [ 57.022483][ T8490] ? do_recvmmsg+0x6c0/0x6c0 [ 57.027174][ T8490] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.033241][ T8490] ___sys_sendmsg+0xf3/0x170 [ 57.037850][ T8490] ? sendmsg_copy_msghdr+0x160/0x160 [ 57.043227][ T8490] ? __fget_files+0x266/0x3d0 [ 57.047947][ T8490] ? lock_downgrade+0x6d0/0x6d0 [ 57.052926][ T8490] ? __fget_files+0x288/0x3d0 [ 57.057616][ T8490] ? __fget_light+0xea/0x280 [ 57.062200][ T8490] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 57.068530][ T8490] __sys_sendmsg+0xe5/0x1b0 [ 57.073117][ T8490] ? __sys_sendmsg_sock+0xb0/0xb0 [ 57.078321][ T8490] ? __do_sys_futex+0x2a2/0x470 [ 57.083255][ T8490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 57.089428][ T8490] do_syscall_64+0x2d/0x70 [ 57.093933][ T8490] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 57.100003][ T8490] RIP: 0033:0x447199 [ 57.104022][ T8490] Code: e8 5c b1 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 05 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.123721][ T8490] RSP: 002b:00007f3eae9c1d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.132131][ T8490] RAX: ffffffffffffffda RBX: 00000000006dcc78 RCX: 0000000000447199 [ 57.140338][ T8490] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 57.148408][ T8490] RBP: 00000000006dcc70 R08: 0000000000000000 R09: 0000000000000000 [ 57.156440][ T8490] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc7c [ 57.164477][ T8490] R13: 0000000000000000 R14: 000000306e616c77 R15: 0000000000660006 [ 57.172481][ T8490] Kernel panic - not syncing: panic_on_warn set ... [ 57.179084][ T8490] CPU: 1 PID: 8490 Comm: syz-executor333 Not tainted 5.11.0-rc5-syzkaller #0 [ 57.187843][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.198006][ T8490] Call Trace: [ 57.201566][ T8490] dump_stack+0x107/0x163 [ 57.205905][ T8490] panic+0x306/0x73d [ 57.210083][ T8490] ? __warn_printk+0xf3/0xf3 [ 57.214685][ T8490] ? __warn.cold+0x1a/0x44 [ 57.219101][ T8490] ? ieee80211_get_sband+0x2e3/0x3e0 [ 57.224384][ T8490] __warn.cold+0x35/0x44 [ 57.228726][ T8490] ? ieee80211_get_sband+0x2e3/0x3e0 [ 57.234028][ T8490] report_bug+0x1bd/0x210 [ 57.238469][ T8490] handle_bug+0x3c/0x60 [ 57.242618][ T8490] exc_invalid_op+0x14/0x40 [ 57.247111][ T8490] asm_exc_invalid_op+0x12/0x20 [ 57.251959][ T8490] RIP: 0010:ieee80211_get_sband+0x2e3/0x3e0 [ 57.257859][ T8490] Code: f9 48 c7 c2 80 29 63 8a be 89 02 00 00 48 c7 c7 e0 29 63 8a c6 05 59 6b 9a 04 01 e8 30 48 64 00 e9 b8 fd ff ff e8 0d cb 1d f9 <0f> 0b e8 46 cc a4 00 31 ff 89 c3 89 c6 e8 7b d2 1d f9 85 db 74 19 [ 57.277468][ T8490] RSP: 0018:ffffc90000edf3d8 EFLAGS: 00010293 [ 57.283527][ T8490] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 57.291510][ T8490] RDX: ffff888020645340 RSI: ffffffff8854f643 RDI: 0000000000000003 [ 57.299499][ T8490] RBP: ffff88801aec8c80 R08: 0000000000000000 R09: 0000000000000000 [ 57.307715][ T8490] R10: ffffffff8854f5c5 R11: 0000000000000000 R12: 0000000000000000 [ 57.315687][ T8490] R13: ffff88801af38bc0 R14: ffff88801aec8c80 R15: ffffc90000edf51c [ 57.323956][ T8490] ? ieee80211_get_sband+0x265/0x3e0 [ 57.329248][ T8490] ? ieee80211_get_sband+0x2e3/0x3e0 [ 57.334547][ T8490] ? ieee80211_get_sband+0x2e3/0x3e0 [ 57.339946][ T8490] sta_apply_parameters+0x4e/0x1dc0 [ 57.345353][ T8490] ieee80211_add_station+0x320/0x660 [ 57.350660][ T8490] nl80211_new_station+0xdd0/0x13c0 [ 57.355982][ T8490] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 57.362404][ T8490] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 57.368653][ T8490] ? nl80211_pre_doit+0xa2/0x630 [ 57.373617][ T8490] genl_family_rcv_msg_doit+0x228/0x320 [ 57.379196][ T8490] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 57.386592][ T8490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.392834][ T8490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.399076][ T8490] ? ns_capable+0xde/0x100 [ 57.403485][ T8490] genl_rcv_msg+0x328/0x580 [ 57.407983][ T8490] ? genl_get_cmd+0x480/0x480 [ 57.412651][ T8490] ? rdev_set_cqm_rssi_range_config+0x330/0x330 [ 57.418899][ T8490] ? lock_release+0x710/0x710 [ 57.423569][ T8490] netlink_rcv_skb+0x153/0x420 [ 57.428322][ T8490] ? genl_get_cmd+0x480/0x480 [ 57.432987][ T8490] ? netlink_ack+0xaa0/0xaa0 [ 57.437572][ T8490] genl_rcv+0x24/0x40 [ 57.441541][ T8490] netlink_unicast+0x533/0x7d0 [ 57.446294][ T8490] ? netlink_attachskb+0x870/0x870 [ 57.451404][ T8490] ? _copy_from_iter_full+0x275/0x850 [ 57.456961][ T8490] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 57.463387][ T8490] ? __phys_addr_symbol+0x2c/0x70 [ 57.468526][ T8490] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 57.474300][ T8490] ? __check_object_size+0x171/0x3f0 [ 57.479632][ T8490] netlink_sendmsg+0x856/0xd90 [ 57.484420][ T8490] ? netlink_unicast+0x7d0/0x7d0 [ 57.489349][ T8490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.495589][ T8490] ? netlink_unicast+0x7d0/0x7d0 [ 57.500514][ T8490] sock_sendmsg+0xcf/0x120 [ 57.504917][ T8490] ____sys_sendmsg+0x6e8/0x810 [ 57.509670][ T8490] ? kernel_sendmsg+0x50/0x50 [ 57.514339][ T8490] ? do_recvmmsg+0x6c0/0x6c0 [ 57.518940][ T8490] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.525036][ T8490] ___sys_sendmsg+0xf3/0x170 [ 57.529741][ T8490] ? sendmsg_copy_msghdr+0x160/0x160 [ 57.535036][ T8490] ? __fget_files+0x266/0x3d0 [ 57.539719][ T8490] ? lock_downgrade+0x6d0/0x6d0 [ 57.544580][ T8490] ? __fget_files+0x288/0x3d0 [ 57.549345][ T8490] ? __fget_light+0xea/0x280 [ 57.553921][ T8490] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 57.560162][ T8490] __sys_sendmsg+0xe5/0x1b0 [ 57.564689][ T8490] ? __sys_sendmsg_sock+0xb0/0xb0 [ 57.569705][ T8490] ? __do_sys_futex+0x2a2/0x470 [ 57.574553][ T8490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 57.580436][ T8490] do_syscall_64+0x2d/0x70 [ 57.584840][ T8490] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 57.590726][ T8490] RIP: 0033:0x447199 [ 57.594606][ T8490] Code: e8 5c b1 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 05 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.614236][ T8490] RSP: 002b:00007f3eae9c1d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.622647][ T8490] RAX: ffffffffffffffda RBX: 00000000006dcc78 RCX: 0000000000447199 [ 57.630621][ T8490] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 57.638599][ T8490] RBP: 00000000006dcc70 R08: 0000000000000000 R09: 0000000000000000 [ 57.646574][ T8490] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc7c [ 57.654548][ T8490] R13: 0000000000000000 R14: 000000306e616c77 R15: 0000000000660006 [ 57.666494][ T8490] Kernel Offset: disabled [ 57.670943][ T8490] Rebooting in 86400 seconds..