[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. syzkaller login: [ 62.858374][ T6861] IPVS: ftp: loaded support on port[0] = 21 [ 62.923584][ T2586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.948241][ T2586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.960138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 62.999559][ T2586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.018487][ T2586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.026632][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.043678][ T6861] ================================================================================ [ 63.054174][ T6861] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9 [ 63.063292][ T6861] index 255 is out of range for type 'ieee80211_key *[8]' [ 63.070554][ T6861] CPU: 1 PID: 6861 Comm: syz-executor937 Not tainted 5.9.0-rc8-syzkaller #0 [ 63.079226][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.089280][ T6861] Call Trace: [ 63.092578][ T6861] dump_stack+0x198/0x1fd [ 63.096923][ T6861] ubsan_epilogue+0xb/0x5a [ 63.101356][ T6861] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 63.107515][ T6861] ? lock_is_held_type+0xbb/0xf0 [ 63.112455][ T6861] ieee80211_del_key+0x428/0x440 [ 63.117387][ T6861] nl80211_del_key+0x493/0x980 [ 63.122133][ T6861] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 63.128014][ T6861] ? nl80211_pre_doit+0xa2/0x630 [ 63.132943][ T6861] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 63.139712][ T6861] genl_rcv_msg+0x61d/0x980 [ 63.144227][ T6861] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.151169][ T6861] ? lock_release+0x8f0/0x8f0 [ 63.155828][ T6861] netlink_rcv_skb+0x15a/0x430 [ 63.160574][ T6861] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.167489][ T6861] ? netlink_ack+0xa10/0xa10 [ 63.172065][ T6861] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.177852][ T6861] genl_rcv+0x24/0x40 [ 63.181823][ T6861] netlink_unicast+0x533/0x7d0 [ 63.186577][ T6861] ? netlink_attachskb+0x810/0x810 [ 63.191670][ T6861] ? __phys_addr_symbol+0x2c/0x70 [ 63.196684][ T6861] ? __check_object_size+0x171/0x3e4 [ 63.201949][ T6861] netlink_sendmsg+0x856/0xd90 [ 63.206702][ T6861] ? netlink_unicast+0x7d0/0x7d0 [ 63.211639][ T6861] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.216900][ T6861] ? netlink_unicast+0x7d0/0x7d0 [ 63.221818][ T6861] sock_sendmsg+0xcf/0x120 [ 63.226215][ T6861] ____sys_sendmsg+0x6e8/0x810 [ 63.230962][ T6861] ? kernel_sendmsg+0x50/0x50 [ 63.235628][ T6861] ? do_recvmmsg+0x6d0/0x6d0 [ 63.240213][ T6861] ? lock_downgrade+0x830/0x830 [ 63.245041][ T6861] ? lock_downgrade+0x830/0x830 [ 63.249885][ T6861] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 63.255858][ T6861] ___sys_sendmsg+0xf3/0x170 [ 63.260442][ T6861] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.265711][ T6861] ? lock_downgrade+0x830/0x830 [ 63.270567][ T6861] ? __might_fault+0x190/0x1d0 [ 63.275321][ T6861] ? compat_sock_ioctl+0x17c/0x2140 [ 63.280535][ T6861] ? __fget_light+0x215/0x280 [ 63.285199][ T6861] __sys_sendmsg+0xe5/0x1b0 [ 63.289686][ T6861] ? __sys_sendmsg_sock+0xb0/0xb0 [ 63.294712][ T6861] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 63.301292][ T6861] ? check_preemption_disabled+0x50/0x130 [ 63.308746][ T6861] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 63.315412][ T6861] __do_fast_syscall_32+0x60/0x90 [ 63.320508][ T6861] do_fast_syscall_32+0x2f/0x70 [ 63.325343][ T6861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 63.331660][ T6861] RIP: 0023:0xf7fbe549 [ 63.335797][ T6861] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 63.355397][ T6861] RSP: 002b:00000000ffa4b3ec EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 63.364670][ T6861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000400 [ 63.372628][ T6861] RDX: 0000000000000000 RSI: 00000000f7fbe28c RDI: 0000000000000004 [ 63.380581][ T6861] RBP: 00000000082d5018 R08: 0000000000000000 R09: 0000000000000000 [ 63.388966][ T6861] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 63.396926][ T6861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.405435][ T6861] ================================================================================ [ 63.414923][ T6861] Kernel panic - not syncing: panic_on_warn set ... [ 63.421522][ T6861] CPU: 1 PID: 6861 Comm: syz-executor937 Not tainted 5.9.0-rc8-syzkaller #0 [ 63.430189][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.440247][ T6861] Call Trace: [ 63.443520][ T6861] dump_stack+0x198/0x1fd [ 63.448185][ T6861] panic+0x382/0x7fb [ 63.452077][ T6861] ? __warn_printk+0xf3/0xf3 [ 63.456671][ T6861] ? ubsan_epilogue+0x3e/0x5a [ 63.461343][ T6861] ? ubsan_epilogue+0x35/0x5a [ 63.466002][ T6861] ubsan_epilogue+0x54/0x5a [ 63.470491][ T6861] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 63.476640][ T6861] ? lock_is_held_type+0xbb/0xf0 [ 63.481563][ T6861] ieee80211_del_key+0x428/0x440 [ 63.486497][ T6861] nl80211_del_key+0x493/0x980 [ 63.491258][ T6861] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 63.497144][ T6861] ? nl80211_pre_doit+0xa2/0x630 [ 63.502078][ T6861] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 63.509616][ T6861] genl_rcv_msg+0x61d/0x980 [ 63.514108][ T6861] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.521035][ T6861] ? lock_release+0x8f0/0x8f0 [ 63.525795][ T6861] netlink_rcv_skb+0x15a/0x430 [ 63.530540][ T6861] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.537456][ T6861] ? netlink_ack+0xa10/0xa10 [ 63.542054][ T6861] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.547857][ T6861] genl_rcv+0x24/0x40 [ 63.551846][ T6861] netlink_unicast+0x533/0x7d0 [ 63.556605][ T6861] ? netlink_attachskb+0x810/0x810 [ 63.561716][ T6861] ? __phys_addr_symbol+0x2c/0x70 [ 63.566720][ T6861] ? __check_object_size+0x171/0x3e4 [ 63.571995][ T6861] netlink_sendmsg+0x856/0xd90 [ 63.576752][ T6861] ? netlink_unicast+0x7d0/0x7d0 [ 63.581710][ T6861] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.586985][ T6861] ? netlink_unicast+0x7d0/0x7d0 [ 63.591918][ T6861] sock_sendmsg+0xcf/0x120 [ 63.596313][ T6861] ____sys_sendmsg+0x6e8/0x810 [ 63.601058][ T6861] ? kernel_sendmsg+0x50/0x50 [ 63.605710][ T6861] ? do_recvmmsg+0x6d0/0x6d0 [ 63.610280][ T6861] ? lock_downgrade+0x830/0x830 [ 63.615109][ T6861] ? lock_downgrade+0x830/0x830 [ 63.619945][ T6861] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 63.625906][ T6861] ___sys_sendmsg+0xf3/0x170 [ 63.630479][ T6861] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.635764][ T6861] ? lock_downgrade+0x830/0x830 [ 63.640602][ T6861] ? __might_fault+0x190/0x1d0 [ 63.645348][ T6861] ? compat_sock_ioctl+0x17c/0x2140 [ 63.650877][ T6861] ? __fget_light+0x215/0x280 [ 63.655548][ T6861] __sys_sendmsg+0xe5/0x1b0 [ 63.660029][ T6861] ? __sys_sendmsg_sock+0xb0/0xb0 [ 63.665055][ T6861] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 63.671656][ T6861] ? check_preemption_disabled+0x50/0x130 [ 63.677372][ T6861] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 63.683970][ T6861] __do_fast_syscall_32+0x60/0x90 [ 63.689088][ T6861] do_fast_syscall_32+0x2f/0x70 [ 63.693919][ T6861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 63.700225][ T6861] RIP: 0023:0xf7fbe549 [ 63.704284][ T6861] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 63.723878][ T6861] RSP: 002b:00000000ffa4b3ec EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 63.732278][ T6861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000400 [ 63.740240][ T6861] RDX: 0000000000000000 RSI: 00000000f7fbe28c RDI: 0000000000000004 [ 63.748191][ T6861] RBP: 00000000082d5018 R08: 0000000000000000 R09: 0000000000000000 [ 63.756141][ T6861] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 63.765194][ T6861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.774375][ T6861] Kernel Offset: disabled [ 63.778749][ T6861] Rebooting in 86400 seconds..