Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 62.307434][ T6876] device wlan0 entered promiscuous mode [ 62.325078][ T6876] ------------[ cut here ]------------ [ 62.330726][ T6876] WARNING: CPU: 1 PID: 6876 at net/mac80211/ieee80211_i.h:1447 ieee80211_get_sband+0x2e3/0x3e0 [ 62.347386][ T6876] Kernel panic - not syncing: panic_on_warn set ... [ 62.354158][ T6876] CPU: 1 PID: 6876 Comm: syz-executor202 Not tainted 5.9.0-rc8-syzkaller #0 [ 62.362805][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.372968][ T6876] Call Trace: [ 62.376278][ T6876] dump_stack+0x198/0x1fd [ 62.380591][ T6876] panic+0x382/0x7fb [ 62.384466][ T6876] ? __warn_printk+0xf3/0xf3 [ 62.389050][ T6876] ? printk+0xba/0xed [ 62.393019][ T6876] ? log_store.cold+0x16/0x16 [ 62.397678][ T6876] ? __warn.cold+0x5/0x4b [ 62.401986][ T6876] ? __warn+0xd6/0x1f2 [ 62.406037][ T6876] ? ieee80211_get_sband+0x2e3/0x3e0 [ 62.411310][ T6876] __warn.cold+0x20/0x4b [ 62.415564][ T6876] ? ieee80211_get_sband+0x2e3/0x3e0 [ 62.420830][ T6876] report_bug+0x1bd/0x210 [ 62.425153][ T6876] handle_bug+0x38/0x90 [ 62.429331][ T6876] exc_invalid_op+0x14/0x40 [ 62.433832][ T6876] asm_exc_invalid_op+0x12/0x20 [ 62.438665][ T6876] RIP: 0010:ieee80211_get_sband+0x2e3/0x3e0 [ 62.444550][ T6876] Code: f9 48 c7 c2 20 37 5f 89 be 7b 02 00 00 48 c7 c7 80 37 5f 89 c6 05 aa 2e 8d 03 01 e8 2c e5 94 f9 e9 b8 fd ff ff e8 fd c5 ae f9 <0f> 0b e8 e6 47 5f 00 31 ff 89 c3 89 c6 e8 4b c2 ae f9 85 db 74 19 [ 62.464136][ T6876] RSP: 0018:ffffc900057674a0 EFLAGS: 00010293 [ 62.470181][ T6876] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff87c77895 [ 62.478140][ T6876] RDX: ffff888096cb0280 RSI: ffffffff87c77913 RDI: 0000000000000005 [ 62.486103][ T6876] RBP: ffff88809f2f0c80 R08: 0000000000000001 R09: ffffffff8d0c39e7 [ 62.494061][ T6876] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 62.502015][ T6876] R13: ffff88809f35cc00 R14: ffff88809f2f0c80 R15: ffffc900057675e4 [ 62.509980][ T6876] ? ieee80211_get_sband+0x265/0x3e0 [ 62.515244][ T6876] ? ieee80211_get_sband+0x2e3/0x3e0 [ 62.520557][ T6876] sta_apply_parameters+0x4e/0x1dc0 [ 62.525745][ T6876] ieee80211_add_station+0x320/0x660 [ 62.531064][ T6876] nl80211_new_station+0xde7/0x1440 [ 62.536264][ T6876] ? rdev_set_coalesce+0x390/0x390 [ 62.541383][ T6876] ? nl80211_pre_doit+0xa2/0x630 [ 62.546313][ T6876] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 62.553068][ T6876] genl_rcv_msg+0x61d/0x980 [ 62.557557][ T6876] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 62.564478][ T6876] ? lock_release+0x8f0/0x8f0 [ 62.569229][ T6876] netlink_rcv_skb+0x15a/0x430 [ 62.573974][ T6876] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 62.580884][ T6876] ? netlink_ack+0xa10/0xa10 [ 62.585470][ T6876] ? __kmalloc_node_track_caller+0x38/0x60 [ 62.591277][ T6876] genl_rcv+0x24/0x40 [ 62.595259][ T6876] netlink_unicast+0x533/0x7d0 [ 62.600001][ T6876] ? netlink_attachskb+0x810/0x810 [ 62.605876][ T6876] ? __phys_addr_symbol+0x2c/0x70 [ 62.610895][ T6876] ? __check_object_size+0x171/0x3e4 [ 62.616179][ T6876] netlink_sendmsg+0x856/0xd90 [ 62.620971][ T6876] ? netlink_unicast+0x7d0/0x7d0 [ 62.625902][ T6876] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 62.631284][ T6876] ? netlink_unicast+0x7d0/0x7d0 [ 62.636229][ T6876] sock_sendmsg+0xcf/0x120 [ 62.640637][ T6876] ____sys_sendmsg+0x6e8/0x810 [ 62.645485][ T6876] ? kernel_sendmsg+0x50/0x50 [ 62.650137][ T6876] ? do_recvmmsg+0x6d0/0x6d0 [ 62.654725][ T6876] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 62.660747][ T6876] ? find_held_lock+0x2d/0x110 [ 62.665516][ T6876] ? __might_fault+0x11f/0x1d0 [ 62.670267][ T6876] ___sys_sendmsg+0xf3/0x170 [ 62.674841][ T6876] ? sendmsg_copy_msghdr+0x160/0x160 [ 62.680124][ T6876] ? __fget_files+0x272/0x400 [ 62.684790][ T6876] ? lock_downgrade+0x830/0x830 [ 62.689662][ T6876] ? __might_fault+0x190/0x1d0 [ 62.694413][ T6876] ? __fget_files+0x294/0x400 [ 62.699072][ T6876] ? __fget_light+0xea/0x280 [ 62.704865][ T6876] __sys_sendmsg+0xe5/0x1b0 [ 62.709723][ T6876] ? __sys_sendmsg_sock+0xb0/0xb0 [ 62.714743][ T6876] ? check_preemption_disabled+0x50/0x130 [ 62.720455][ T6876] ? syscall_enter_from_user_mode+0x1d/0x60 [ 62.726334][ T6876] do_syscall_64+0x2d/0x70 [ 62.730729][ T6876] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.736687][ T6876] RIP: 0033:0x446309 [ 62.740561][ T6876] Code: e8 bc b5 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0f fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.760156][ T6876] RSP: 002b:00007f1187c0ed98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.768564][ T6876] RAX: ffffffffffffffda RBX: 00000000006dbc78 RCX: 0000000000446309 [ 62.776527][ T6876] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 62.784489][ T6876] RBP: 00000000006dbc70 R08: 0000000000000000 R09: 0000000000000000 [ 62.792437][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc7c [ 62.800386][ T6876] R13: 0000000000000000 R14: 000000306e616c77 R15: 0000000000660006 [ 62.809944][ T6876] Kernel Offset: disabled [ 62.814341][ T6876] Rebooting in 86400 seconds..