[ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. syzkaller login: [ 68.703350][ T8495] IPVS: ftp: loaded support on port[0] = 21 [ 68.807341][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.815345][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.828317][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 68.880875][ T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.888876][ T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.897547][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.913478][ T8535] ================================================================================ [ 68.923960][ T8535] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:520:10 [ 68.932649][ T8535] index 5 is out of range for type 'ieee80211_key *[4]' [ 68.940161][ T8535] CPU: 0 PID: 8535 Comm: syz-executor933 Not tainted 5.10.0-rc5-syzkaller #0 [ 68.948913][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.958971][ T8535] Call Trace: [ 68.962261][ T8535] dump_stack+0x107/0x163 [ 68.966672][ T8535] ubsan_epilogue+0xb/0x5a [ 68.971074][ T8535] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 68.977215][ T8535] ieee80211_del_key+0x3f6/0x440 [ 68.982246][ T8535] nl80211_del_key+0x4b0/0x910 [ 68.986995][ T8535] ? rdev_set_cqm_rssi_config+0x330/0x330 [ 68.992706][ T8535] ? nl80211_pre_doit+0xa2/0x630 [ 68.997628][ T8535] genl_family_rcv_msg_doit+0x228/0x320 [ 69.003173][ T8535] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 69.010549][ T8535] ? ns_capable+0xde/0x100 [ 69.015056][ T8535] genl_rcv_msg+0x328/0x580 [ 69.019551][ T8535] ? genl_get_cmd+0x480/0x480 [ 69.024216][ T8535] ? rdev_set_cqm_rssi_config+0x330/0x330 [ 69.029924][ T8535] ? lock_release+0x710/0x710 [ 69.034592][ T8535] netlink_rcv_skb+0x153/0x420 [ 69.039341][ T8535] ? genl_get_cmd+0x480/0x480 [ 69.044003][ T8535] ? netlink_ack+0xaa0/0xaa0 [ 69.048606][ T8535] genl_rcv+0x24/0x40 [ 69.052590][ T8535] netlink_unicast+0x533/0x7d0 [ 69.059340][ T8535] ? netlink_attachskb+0x810/0x810 [ 69.064437][ T8535] ? __phys_addr_symbol+0x2c/0x70 [ 69.069445][ T8535] ? __check_object_size+0x171/0x3f0 [ 69.074718][ T8535] netlink_sendmsg+0x856/0xd90 [ 69.079468][ T8535] ? netlink_unicast+0x7d0/0x7d0 [ 69.084420][ T8535] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 69.089686][ T8535] ? netlink_unicast+0x7d0/0x7d0 [ 69.094625][ T8535] sock_sendmsg+0xcf/0x120 [ 69.099028][ T8535] ____sys_sendmsg+0x6e8/0x810 [ 69.103794][ T8535] ? kernel_sendmsg+0x50/0x50 [ 69.108451][ T8535] ? do_recvmmsg+0x6c0/0x6c0 [ 69.113031][ T8535] ? find_held_lock+0x2d/0x110 [ 69.117784][ T8535] ___sys_sendmsg+0xf3/0x170 [ 69.122407][ T8535] ? sendmsg_copy_msghdr+0x160/0x160 [ 69.127684][ T8535] ? _copy_to_user+0xdc/0x150 [ 69.132363][ T8535] ? sock_do_ioctl+0x168/0x2d0 [ 69.137129][ T8535] ? compat_ifr_data_ioctl+0x150/0x150 [ 69.142571][ T8535] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 69.148468][ T8535] ? __fget_light+0x215/0x280 [ 69.153131][ T8535] __sys_sendmsg+0xe5/0x1b0 [ 69.157634][ T8535] ? __sys_sendmsg_sock+0xb0/0xb0 [ 69.162680][ T8535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 69.168570][ T8535] do_syscall_64+0x2d/0x70 [ 69.172984][ T8535] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.178966][ T8535] RIP: 0033:0x441ff9 [ 69.182847][ T8535] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 69.202785][ T8535] RSP: 002b:00007ffdb026c968 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.211367][ T8535] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441ff9 [ 69.219323][ T8535] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 69.227298][ T8535] RBP: 0000000000000000 R08: 0000002100000000 R09: 0000002100000000 [ 69.235271][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 69.243229][ T8535] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 69.292683][ T8535] ================================================================================ [ 69.302070][ T8535] Kernel panic - not syncing: panic_on_warn set ... [ 69.308669][ T8535] CPU: 0 PID: 8535 Comm: syz-executor933 Not tainted 5.10.0-rc5-syzkaller #0 [ 69.317421][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.327527][ T8535] Call Trace: [ 69.330810][ T8535] dump_stack+0x107/0x163 [ 69.335141][ T8535] panic+0x306/0x73d [ 69.339106][ T8535] ? __warn_printk+0xf3/0xf3 [ 69.343690][ T8535] ? mark_lock+0xf7/0x1730 [ 69.348096][ T8535] ? dump_stack+0x157/0x163 [ 69.352586][ T8535] ? ubsan_epilogue+0x3e/0x5a [ 69.357251][ T8535] ? ubsan_epilogue+0x35/0x5a [ 69.361926][ T8535] ubsan_epilogue+0x54/0x5a [ 69.366415][ T8535] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 69.372635][ T8535] ieee80211_del_key+0x3f6/0x440 [ 69.377630][ T8535] nl80211_del_key+0x4b0/0x910 [ 69.382391][ T8535] ? rdev_set_cqm_rssi_config+0x330/0x330 [ 69.388100][ T8535] ? nl80211_pre_doit+0xa2/0x630 [ 69.393027][ T8535] genl_family_rcv_msg_doit+0x228/0x320 [ 69.398561][ T8535] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 69.405921][ T8535] ? ns_capable+0xde/0x100 [ 69.410323][ T8535] genl_rcv_msg+0x328/0x580 [ 69.414810][ T8535] ? genl_get_cmd+0x480/0x480 [ 69.419474][ T8535] ? rdev_set_cqm_rssi_config+0x330/0x330 [ 69.425182][ T8535] ? lock_release+0x710/0x710 [ 69.429866][ T8535] netlink_rcv_skb+0x153/0x420 [ 69.434614][ T8535] ? genl_get_cmd+0x480/0x480 [ 69.439302][ T8535] ? netlink_ack+0xaa0/0xaa0 [ 69.443890][ T8535] genl_rcv+0x24/0x40 [ 69.447865][ T8535] netlink_unicast+0x533/0x7d0 [ 69.452613][ T8535] ? netlink_attachskb+0x810/0x810 [ 69.457708][ T8535] ? __phys_addr_symbol+0x2c/0x70 [ 69.462730][ T8535] ? __check_object_size+0x171/0x3f0 [ 69.468018][ T8535] netlink_sendmsg+0x856/0xd90 [ 69.472769][ T8535] ? netlink_unicast+0x7d0/0x7d0 [ 69.477694][ T8535] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 69.483144][ T8535] ? netlink_unicast+0x7d0/0x7d0 [ 69.488073][ T8535] sock_sendmsg+0xcf/0x120 [ 69.492536][ T8535] ____sys_sendmsg+0x6e8/0x810 [ 69.497288][ T8535] ? kernel_sendmsg+0x50/0x50 [ 69.501948][ T8535] ? do_recvmmsg+0x6c0/0x6c0 [ 69.506528][ T8535] ? find_held_lock+0x2d/0x110 [ 69.511281][ T8535] ___sys_sendmsg+0xf3/0x170 [ 69.515882][ T8535] ? sendmsg_copy_msghdr+0x160/0x160 [ 69.521161][ T8535] ? _copy_to_user+0xdc/0x150 [ 69.525830][ T8535] ? sock_do_ioctl+0x168/0x2d0 [ 69.530579][ T8535] ? compat_ifr_data_ioctl+0x150/0x150 [ 69.536044][ T8535] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 69.541967][ T8535] ? __fget_light+0x215/0x280 [ 69.546662][ T8535] __sys_sendmsg+0xe5/0x1b0 [ 69.551158][ T8535] ? __sys_sendmsg_sock+0xb0/0xb0 [ 69.556184][ T8535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 69.562116][ T8535] do_syscall_64+0x2d/0x70 [ 69.566517][ T8535] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.572390][ T8535] RIP: 0033:0x441ff9 [ 69.576325][ T8535] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 69.595935][ T8535] RSP: 002b:00007ffdb026c968 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.604350][ T8535] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441ff9 [ 69.612325][ T8535] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 69.620280][ T8535] RBP: 0000000000000000 R08: 0000002100000000 R09: 0000002100000000 [ 69.628232][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 69.636208][ T8535] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 69.645128][ T8535] Kernel Offset: disabled [ 69.649527][ T8535] Rebooting in 86400 seconds..