[ OK ] Started System Logging Service. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts. syzkaller login: [ 70.564037][ T8390] IPVS: ftp: loaded support on port[0] = 21 [ 70.658472][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.687823][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.706854][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.728267][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.745082][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 70.760878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.803527][ T8431] ------------[ cut here ]------------ [ 70.809767][ T8431] WARNING: CPU: 0 PID: 8431 at net/wireless/sme.c:532 cfg80211_connect+0x1409/0x2040 [ 70.820664][ T8431] Modules linked in: [ 70.824589][ T8431] CPU: 0 PID: 8431 Comm: syz-executor594 Not tainted 5.12.0-rc6-syzkaller #0 [ 70.836476][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.847861][ T8431] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 70.853702][ T8431] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 17 72 2a f9 <0f> 0b e8 10 72 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 70.873690][ T8431] RSP: 0018:ffffc9000142f298 EFLAGS: 00010293 [ 70.879876][ T8431] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.888025][ T8431] RDX: ffff88801e2154c0 RSI: ffffffff88497f39 RDI: ffffffff8a854f60 [ 70.896555][ T8431] RBP: ffff88802826cd32 R08: 0000000000000001 R09: ffff88802826cd37 [ 70.904577][ T8431] R10: ffffed100504d9a6 R11: 0000000000000000 R12: ffffc9000142f438 [ 70.913160][ T8431] R13: ffff88802826cc10 R14: ffff88802826cd58 R15: ffff88802826cd60 [ 70.922211][ T8431] FS: 0000000000567300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 70.931312][ T8431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.938022][ T8431] CR2: 0000000020000080 CR3: 000000001169d000 CR4: 00000000001506f0 [ 70.947376][ T8431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.955362][ T8431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.963406][ T8431] Call Trace: [ 70.966800][ T8431] ? __cfg80211_disconnected+0x1470/0x1470 [ 70.972630][ T8431] ? memset+0x20/0x40 [ 70.976677][ T8431] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 70.982425][ T8431] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 70.988347][ T8431] nl80211_connect+0x1647/0x22a0 [ 70.993419][ T8431] ? nl80211_parse_connkeys+0xa50/0xa50 [ 70.999178][ T8431] ? __mutex_unlock_slowpath+0xe2/0x610 [ 71.004921][ T8431] ? wait_for_completion_io+0x270/0x270 [ 71.010815][ T8431] ? nl80211_pre_doit+0xa6/0x5c0 [ 71.015866][ T8431] genl_family_rcv_msg_doit+0x228/0x320 [ 71.021545][ T8431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 71.029290][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.035710][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.042358][ T8431] ? ns_capable+0xde/0x100 [ 71.048239][ T8431] genl_rcv_msg+0x328/0x580 [ 71.052774][ T8431] ? genl_get_cmd+0x480/0x480 [ 71.057586][ T8431] ? nl80211_parse_connkeys+0xa50/0xa50 [ 71.063159][ T8431] ? lock_release+0x720/0x720 [ 71.067945][ T8431] netlink_rcv_skb+0x153/0x420 [ 71.072732][ T8431] ? genl_get_cmd+0x480/0x480 [ 71.077613][ T8431] ? netlink_ack+0xaa0/0xaa0 [ 71.082234][ T8431] genl_rcv+0x24/0x40 [ 71.086425][ T8431] netlink_unicast+0x533/0x7d0 [ 71.091215][ T8431] ? netlink_attachskb+0x870/0x870 [ 71.096478][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.102779][ T8431] ? __phys_addr_symbol+0x2c/0x70 [ 71.108128][ T8431] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 71.113870][ T8431] ? __check_object_size+0x171/0x3f0 [ 71.119283][ T8431] netlink_sendmsg+0x856/0xd90 [ 71.124125][ T8431] ? netlink_unicast+0x7d0/0x7d0 [ 71.129199][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.135486][ T8431] ? netlink_unicast+0x7d0/0x7d0 [ 71.142494][ T8431] sock_sendmsg+0xcf/0x120 [ 71.147094][ T8431] ____sys_sendmsg+0x6e8/0x810 [ 71.151886][ T8431] ? kernel_sendmsg+0x50/0x50 [ 71.156857][ T8431] ? do_recvmmsg+0x6d0/0x6d0 [ 71.161498][ T8431] ? lock_chain_count+0x20/0x20 [ 71.166493][ T8431] ? find_held_lock+0x2d/0x110 [ 71.171316][ T8431] ___sys_sendmsg+0xf3/0x170 [ 71.177149][ T8431] ? sendmsg_copy_msghdr+0x160/0x160 [ 71.182531][ T8431] ? __lock_acquire+0x16b3/0x54c0 [ 71.188578][ T8431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.194593][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.201227][ T8431] ? __fget_light+0x215/0x280 [ 71.206147][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.212582][ T8431] __sys_sendmsg+0xe5/0x1b0 [ 71.217159][ T8431] ? __sys_sendmsg_sock+0x30/0x30 [ 71.222232][ T8431] ? syscall_enter_from_user_mode+0x27/0x70 [ 71.228273][ T8431] do_syscall_64+0x2d/0x70 [ 71.232725][ T8431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.238689][ T8431] RIP: 0033:0x441089 [ 71.242722][ T8431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.262476][ T8431] RSP: 002b:00007fffd7634b28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.271005][ T8431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 71.279104][ T8431] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 71.287426][ T8431] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 71.295423][ T8431] R10: 0000000c00000000 R11: 0000000000000246 R12: 000000000001147a [ 71.303749][ T8431] R13: 00007fffd7634b90 R14: 00007fffd7634b80 R15: 00007fffd7634b4c [ 71.312811][ T8431] Kernel panic - not syncing: panic_on_warn set ... [ 71.319543][ T8431] CPU: 0 PID: 8431 Comm: syz-executor594 Not tainted 5.12.0-rc6-syzkaller #0 [ 71.328300][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.338347][ T8431] Call Trace: [ 71.341653][ T8431] dump_stack+0x141/0x1d7 [ 71.346025][ T8431] panic+0x306/0x73d [ 71.349921][ T8431] ? __warn_printk+0xf3/0xf3 [ 71.354506][ T8431] ? __warn.cold+0x1a/0x44 [ 71.358918][ T8431] ? cfg80211_connect+0x1409/0x2040 [ 71.364141][ T8431] __warn.cold+0x35/0x44 [ 71.368398][ T8431] ? cfg80211_connect+0x1409/0x2040 [ 71.373593][ T8431] report_bug+0x1bd/0x210 [ 71.377919][ T8431] handle_bug+0x3c/0x60 [ 71.382070][ T8431] exc_invalid_op+0x14/0x40 [ 71.386573][ T8431] asm_exc_invalid_op+0x12/0x20 [ 71.391424][ T8431] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 71.397233][ T8431] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 17 72 2a f9 <0f> 0b e8 10 72 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 71.416983][ T8431] RSP: 0018:ffffc9000142f298 EFLAGS: 00010293 [ 71.423059][ T8431] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 71.431057][ T8431] RDX: ffff88801e2154c0 RSI: ffffffff88497f39 RDI: ffffffff8a854f60 [ 71.439044][ T8431] RBP: ffff88802826cd32 R08: 0000000000000001 R09: ffff88802826cd37 [ 71.447034][ T8431] R10: ffffed100504d9a6 R11: 0000000000000000 R12: ffffc9000142f438 [ 71.455027][ T8431] R13: ffff88802826cc10 R14: ffff88802826cd58 R15: ffff88802826cd60 [ 71.463030][ T8431] ? cfg80211_connect+0x1409/0x2040 [ 71.468245][ T8431] ? cfg80211_connect+0x1409/0x2040 [ 71.473466][ T8431] ? __cfg80211_disconnected+0x1470/0x1470 [ 71.479266][ T8431] ? memset+0x20/0x40 [ 71.483246][ T8431] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 71.488961][ T8431] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 71.494785][ T8431] nl80211_connect+0x1647/0x22a0 [ 71.499723][ T8431] ? nl80211_parse_connkeys+0xa50/0xa50 [ 71.505282][ T8431] ? __mutex_unlock_slowpath+0xe2/0x610 [ 71.510827][ T8431] ? wait_for_completion_io+0x270/0x270 [ 71.516428][ T8431] ? nl80211_pre_doit+0xa6/0x5c0 [ 71.521386][ T8431] genl_family_rcv_msg_doit+0x228/0x320 [ 71.526957][ T8431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 71.534359][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.541904][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.548138][ T8431] ? ns_capable+0xde/0x100 [ 71.552552][ T8431] genl_rcv_msg+0x328/0x580 [ 71.557049][ T8431] ? genl_get_cmd+0x480/0x480 [ 71.561739][ T8431] ? nl80211_parse_connkeys+0xa50/0xa50 [ 71.567293][ T8431] ? lock_release+0x720/0x720 [ 71.571983][ T8431] netlink_rcv_skb+0x153/0x420 [ 71.576751][ T8431] ? genl_get_cmd+0x480/0x480 [ 71.581426][ T8431] ? netlink_ack+0xaa0/0xaa0 [ 71.586020][ T8431] genl_rcv+0x24/0x40 [ 71.589992][ T8431] netlink_unicast+0x533/0x7d0 [ 71.594762][ T8431] ? netlink_attachskb+0x870/0x870 [ 71.599875][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.606130][ T8431] ? __phys_addr_symbol+0x2c/0x70 [ 71.611181][ T8431] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 71.616895][ T8431] ? __check_object_size+0x171/0x3f0 [ 71.622196][ T8431] netlink_sendmsg+0x856/0xd90 [ 71.626972][ T8431] ? netlink_unicast+0x7d0/0x7d0 [ 71.631905][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.638143][ T8431] ? netlink_unicast+0x7d0/0x7d0 [ 71.643082][ T8431] sock_sendmsg+0xcf/0x120 [ 71.647497][ T8431] ____sys_sendmsg+0x6e8/0x810 [ 71.652258][ T8431] ? kernel_sendmsg+0x50/0x50 [ 71.656934][ T8431] ? do_recvmmsg+0x6d0/0x6d0 [ 71.662201][ T8431] ? lock_chain_count+0x20/0x20 [ 71.667048][ T8431] ? find_held_lock+0x2d/0x110 [ 71.671840][ T8431] ___sys_sendmsg+0xf3/0x170 [ 71.676424][ T8431] ? sendmsg_copy_msghdr+0x160/0x160 [ 71.681821][ T8431] ? __lock_acquire+0x16b3/0x54c0 [ 71.686954][ T8431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.692931][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.699196][ T8431] ? __fget_light+0x215/0x280 [ 71.703866][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.710102][ T8431] __sys_sendmsg+0xe5/0x1b0 [ 71.714598][ T8431] ? __sys_sendmsg_sock+0x30/0x30 [ 71.719620][ T8431] ? syscall_enter_from_user_mode+0x27/0x70 [ 71.725519][ T8431] do_syscall_64+0x2d/0x70 [ 71.729933][ T8431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.735825][ T8431] RIP: 0033:0x441089 [ 71.739738][ T8431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.759706][ T8431] RSP: 002b:00007fffd7634b28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.768480][ T8431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 71.776467][ T8431] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 71.784439][ T8431] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 71.792403][ T8431] R10: 0000000c00000000 R11: 0000000000000246 R12: 000000000001147a [ 71.800454][ T8431] R13: 00007fffd7634b90 R14: 00007fffd7634b80 R15: 00007fffd7634b4c [ 71.809253][ T8431] Kernel Offset: disabled [ 71.814334][ T8431] Rebooting in 86400 seconds..