[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. syzkaller login: [ 29.604034] IPVS: ftp: loaded support on port[0] = 21 [ 29.662089] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 29.669553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.676725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.697331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program executing program [ 29.719609] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 29.725862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.733092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.740885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.766919] ------------[ cut here ]------------ [ 29.771759] WARNING: CPU: 0 PID: 8025 at net/wireless/sme.c:533 cfg80211_connect+0x1856/0x2120 [ 29.780555] Kernel panic - not syncing: panic_on_warn set ... [ 29.780555] [ 29.787893] CPU: 0 PID: 8025 Comm: syz-executor105 Not tainted 4.14.203-syzkaller #0 [ 29.795755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.805124] Call Trace: [ 29.807690] dump_stack+0x1b2/0x283 [ 29.811308] panic+0x1f9/0x42d [ 29.814477] ? add_taint.cold+0x16/0x16 [ 29.818428] ? cfg80211_connect+0x1856/0x2120 [ 29.822899] ? cfg80211_connect+0x1856/0x2120 [ 29.827468] __warn.cold+0x20/0x4b [ 29.830985] ? ist_end_non_atomic+0x10/0x10 [ 29.835280] ? cfg80211_connect+0x1856/0x2120 [ 29.839750] report_bug+0x208/0x249 [ 29.843365] do_error_trap+0x195/0x2d0 [ 29.847226] ? math_error+0x2d0/0x2d0 [ 29.851005] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 29.856866] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.861686] invalid_op+0x1b/0x40 [ 29.865115] RIP: 0010:cfg80211_connect+0x1856/0x2120 [ 29.870191] RSP: 0018:ffff8880b1a9f448 EFLAGS: 00010297 [ 29.875530] RAX: ffff8880956ce380 RBX: ffff88809cf75710 RCX: 0000000000000000 [ 29.882775] RDX: 0000000000000000 RSI: ffff8880a33240e6 RDI: ffffffff886b6678 [ 29.890018] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10139eeb02 [ 29.897263] R10: ffff88809cf75815 R11: ffff8880956ce380 R12: ffff8880b1a9f5c0 [ 29.904524] R13: ffffffff886b6540 R14: ffff88809cf75838 R15: ffff88809cf75810 [ 29.911791] ? cfg80211_connect+0x1856/0x2120 [ 29.916270] ? trace_hardirqs_on+0x10/0x10 [ 29.920485] ? memset+0x20/0x40 [ 29.923759] ? __cfg80211_disconnected+0x18e0/0x18e0 [ 29.928839] ? nl80211_crypto_settings+0x3a5/0x960 [ 29.933745] ? ieee80211_get_channel+0xed/0x150 [ 29.938391] nl80211_connect+0x1379/0x1cd0 [ 29.942628] ? nl80211_update_connect_params+0x9a0/0x9a0 [ 29.948068] ? lock_acquire+0x170/0x3f0 [ 29.952016] ? nl80211_pre_doit+0x2d9/0x510 [ 29.956331] ? nl80211_pre_doit+0x79/0x510 [ 29.960545] genl_family_rcv_msg+0x572/0xb20 [ 29.964949] ? genl_rcv+0x40/0x40 [ 29.968379] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 29.973818] ? trace_hardirqs_on+0x10/0x10 [ 29.978029] ? sock_sendmsg+0xb5/0x100 [ 29.981898] genl_rcv_msg+0xaf/0x140 [ 29.985588] netlink_rcv_skb+0x125/0x390 [ 29.989634] ? genl_family_rcv_msg+0xb20/0xb20 [ 29.994192] ? netlink_ack+0x9a0/0x9a0 [ 29.998053] ? lock_acquire+0x170/0x3f0 [ 30.002007] genl_rcv+0x24/0x40 [ 30.005261] netlink_unicast+0x437/0x610 [ 30.009311] ? netlink_sendskb+0xd0/0xd0 [ 30.013363] ? __check_object_size+0x179/0x22c [ 30.017921] netlink_sendmsg+0x62e/0xb80 [ 30.021958] ? nlmsg_notify+0x170/0x170 [ 30.025906] ? kernel_recvmsg+0x210/0x210 [ 30.030033] ? security_socket_sendmsg+0x83/0xb0 [ 30.034965] ? nlmsg_notify+0x170/0x170 [ 30.038924] sock_sendmsg+0xb5/0x100 [ 30.042661] ___sys_sendmsg+0x6c8/0x800 [ 30.046659] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 30.051397] ? dev_ioctl+0xe7/0xbe0 [ 30.055001] ? dev_ifsioc+0x7d0/0x7d0 [ 30.058947] ? __dentry_kill+0x3f7/0x550 [ 30.062989] ? trace_hardirqs_on+0x10/0x10 [ 30.067201] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 30.072196] ? kmem_cache_free+0x23a/0x2b0 [ 30.076429] ? sock_ioctl+0x16c/0x4c0 [ 30.080208] ? sock_release+0x1e0/0x1e0 [ 30.084251] ? __fdget+0x167/0x1f0 [ 30.087769] ? sockfd_lookup_light+0xb2/0x160 [ 30.092241] __sys_sendmsg+0xa3/0x120 [ 30.096033] ? SyS_shutdown+0x160/0x160 [ 30.099986] ? security_file_ioctl+0x83/0xb0 [ 30.104379] SyS_sendmsg+0x27/0x40 [ 30.107893] ? __sys_sendmsg+0x120/0x120 [ 30.111928] do_syscall_64+0x1d5/0x640 [ 30.115794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.120961] RIP: 0033:0x442139 [ 30.124126] RSP: 002b:00007ffe5c5044d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.131892] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000442139 [ 30.139137] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 30.146468] RBP: 0000000000000000 R08: 0000001300000000 R09: 0000001300000000 [ 30.153725] R10: 0000001300000000 R11: 0000000000000246 R12: 0000000000007462 [ 30.160970] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 30.169015] Kernel Offset: disabled [ 30.172659] Rebooting in 86400 seconds..