Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. syzkaller login: [ 73.330839][ T8419] IPVS: ftp: loaded support on port[0] = 21 [ 73.420010][ T277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.428510][ T277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.452259][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.459900][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program executing program [ 73.461356][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.481110][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.514451][ T8459] ------------[ cut here ]------------ [ 73.520060][ T8459] WARNING: CPU: 0 PID: 8459 at net/wireless/sme.c:532 cfg80211_connect+0x1409/0x2040 [ 73.530723][ T8459] Modules linked in: [ 73.535166][ T8459] CPU: 1 PID: 8459 Comm: syz-executor750 Not tainted 5.12.0-rc4-syzkaller #0 [ 73.544054][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.555361][ T8459] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 73.561357][ T8459] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 f7 97 2a f9 <0f> 0b e8 f0 97 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 73.581107][ T8459] RSP: 0018:ffffc90001a2f298 EFLAGS: 00010293 [ 73.587252][ T8459] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 73.595491][ T8459] RDX: ffff88801d683880 RSI: ffffffff88495979 RDI: ffffffff8a854f60 [ 73.603467][ T8459] RBP: ffff8880130dcd32 R08: 0000000000000001 R09: ffff8880130dcd37 [ 73.611497][ T8459] R10: ffffed100261b9a6 R11: 0000000000000000 R12: ffffc90001a2f438 [ 73.619676][ T8459] R13: ffff8880130dcc10 R14: ffff8880130dcd58 R15: ffff8880130dcd60 [ 73.627755][ T8459] FS: 0000000000c48300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 73.637035][ T8459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.643624][ T8459] CR2: 0000000020000080 CR3: 0000000029627000 CR4: 00000000001506f0 [ 73.651697][ T8459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.660016][ T8459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.668101][ T8459] Call Trace: [ 73.671402][ T8459] ? __cfg80211_disconnected+0x1470/0x1470 [ 73.677349][ T8459] ? memset+0x20/0x40 [ 73.681357][ T8459] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 73.687167][ T8459] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 73.693004][ T8459] nl80211_connect+0x1647/0x22a0 [ 73.698043][ T8459] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.703621][ T8459] ? __mutex_unlock_slowpath+0xe2/0x610 [ 73.709250][ T8459] ? wait_for_completion_io+0x270/0x270 [ 73.714931][ T8459] ? nl80211_pre_doit+0xa6/0x5c0 [ 73.719996][ T8459] genl_family_rcv_msg_doit+0x228/0x320 [ 73.725608][ T8459] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 73.733011][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.739377][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.745705][ T8459] ? ns_capable+0xde/0x100 [ 73.750138][ T8459] genl_rcv_msg+0x328/0x580 [ 73.754749][ T8459] ? genl_get_cmd+0x480/0x480 [ 73.759436][ T8459] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.765311][ T8459] ? lock_release+0x720/0x720 [ 73.770014][ T8459] netlink_rcv_skb+0x153/0x420 [ 73.774887][ T8459] ? genl_get_cmd+0x480/0x480 [ 73.779587][ T8459] ? netlink_ack+0xaa0/0xaa0 [ 73.784181][ T8459] genl_rcv+0x24/0x40 [ 73.788459][ T8459] netlink_unicast+0x533/0x7d0 [ 73.793247][ T8459] ? netlink_attachskb+0x870/0x870 [ 73.798469][ T8459] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.804900][ T8459] ? __phys_addr_symbol+0x2c/0x70 [ 73.809941][ T8459] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 73.815768][ T8459] ? __check_object_size+0x171/0x3f0 [ 73.821207][ T8459] netlink_sendmsg+0x856/0xd90 [ 73.826183][ T8459] ? netlink_unicast+0x7d0/0x7d0 [ 73.831141][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.837503][ T8459] ? netlink_unicast+0x7d0/0x7d0 [ 73.842890][ T8459] sock_sendmsg+0xcf/0x120 [ 73.847393][ T8459] ____sys_sendmsg+0x6e8/0x810 [ 73.852260][ T8459] ? kernel_sendmsg+0x50/0x50 [ 73.857040][ T8459] ? do_recvmmsg+0x6d0/0x6d0 [ 73.861642][ T8459] ? lock_chain_count+0x20/0x20 [ 73.866575][ T8459] ? find_held_lock+0x2d/0x110 [ 73.871358][ T8459] ___sys_sendmsg+0xf3/0x170 [ 73.876120][ T8459] ? sendmsg_copy_msghdr+0x160/0x160 [ 73.881423][ T8459] ? __lock_acquire+0x16b3/0x54c0 [ 73.886567][ T8459] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.892583][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.899162][ T8459] ? __fget_light+0x215/0x280 [ 73.903878][ T8459] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.910502][ T8459] __sys_sendmsg+0xe5/0x1b0 [ 73.915422][ T8459] ? __sys_sendmsg_sock+0x30/0x30 [ 73.920571][ T8459] ? syscall_enter_from_user_mode+0x27/0x70 [ 73.926568][ T8459] do_syscall_64+0x2d/0x70 [ 73.931000][ T8459] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.937419][ T8459] RIP: 0033:0x441089 [ 73.941335][ T8459] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.961062][ T8459] RSP: 002b:00007ffc97bc1768 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.969582][ T8459] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 73.977644][ T8459] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 73.985804][ T8459] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 73.994641][ T8459] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000011f20 [ 74.002631][ T8459] R13: 00007ffc97bc17d0 R14: 00007ffc97bc17c0 R15: 00007ffc97bc178c [ 74.010707][ T8459] Kernel panic - not syncing: panic_on_warn set ... [ 74.017317][ T8459] CPU: 0 PID: 8459 Comm: syz-executor750 Not tainted 5.12.0-rc4-syzkaller #0 [ 74.026077][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.036145][ T8459] Call Trace: [ 74.039422][ T8459] dump_stack+0x141/0x1d7 [ 74.043774][ T8459] panic+0x306/0x73d [ 74.047843][ T8459] ? __warn_printk+0xf3/0xf3 [ 74.052443][ T8459] ? __warn.cold+0x1a/0x44 [ 74.057001][ T8459] ? cfg80211_connect+0x1409/0x2040 [ 74.062219][ T8459] __warn.cold+0x35/0x44 [ 74.066478][ T8459] ? cfg80211_connect+0x1409/0x2040 [ 74.071868][ T8459] report_bug+0x1bd/0x210 [ 74.076204][ T8459] handle_bug+0x3c/0x60 [ 74.080374][ T8459] exc_invalid_op+0x14/0x40 [ 74.084877][ T8459] asm_exc_invalid_op+0x12/0x20 [ 74.089819][ T8459] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 74.095654][ T8459] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 f7 97 2a f9 <0f> 0b e8 f0 97 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 74.115257][ T8459] RSP: 0018:ffffc90001a2f298 EFLAGS: 00010293 [ 74.121336][ T8459] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.129316][ T8459] RDX: ffff88801d683880 RSI: ffffffff88495979 RDI: ffffffff8a854f60 [ 74.137281][ T8459] RBP: ffff8880130dcd32 R08: 0000000000000001 R09: ffff8880130dcd37 [ 74.145252][ T8459] R10: ffffed100261b9a6 R11: 0000000000000000 R12: ffffc90001a2f438 [ 74.153214][ T8459] R13: ffff8880130dcc10 R14: ffff8880130dcd58 R15: ffff8880130dcd60 [ 74.161206][ T8459] ? cfg80211_connect+0x1409/0x2040 [ 74.166413][ T8459] ? cfg80211_connect+0x1409/0x2040 [ 74.171618][ T8459] ? __cfg80211_disconnected+0x1470/0x1470 [ 74.177424][ T8459] ? memset+0x20/0x40 [ 74.181421][ T8459] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 74.187135][ T8459] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 74.193117][ T8459] nl80211_connect+0x1647/0x22a0 [ 74.198057][ T8459] ? nl80211_parse_connkeys+0xa50/0xa50 [ 74.203621][ T8459] ? __mutex_unlock_slowpath+0xe2/0x610 [ 74.209167][ T8459] ? wait_for_completion_io+0x270/0x270 [ 74.214735][ T8459] ? nl80211_pre_doit+0xa6/0x5c0 [ 74.219664][ T8459] genl_family_rcv_msg_doit+0x228/0x320 [ 74.225211][ T8459] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 74.232603][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.238867][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.245111][ T8459] ? ns_capable+0xde/0x100 [ 74.249545][ T8459] genl_rcv_msg+0x328/0x580 [ 74.254046][ T8459] ? genl_get_cmd+0x480/0x480 [ 74.258733][ T8459] ? nl80211_parse_connkeys+0xa50/0xa50 [ 74.264276][ T8459] ? lock_release+0x720/0x720 [ 74.268959][ T8459] netlink_rcv_skb+0x153/0x420 [ 74.273745][ T8459] ? genl_get_cmd+0x480/0x480 [ 74.278436][ T8459] ? netlink_ack+0xaa0/0xaa0 [ 74.283030][ T8459] genl_rcv+0x24/0x40 [ 74.287455][ T8459] netlink_unicast+0x533/0x7d0 [ 74.292215][ T8459] ? netlink_attachskb+0x870/0x870 [ 74.297334][ T8459] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 74.303569][ T8459] ? __phys_addr_symbol+0x2c/0x70 [ 74.308591][ T8459] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 74.314304][ T8459] ? __check_object_size+0x171/0x3f0 [ 74.319608][ T8459] netlink_sendmsg+0x856/0xd90 [ 74.324370][ T8459] ? netlink_unicast+0x7d0/0x7d0 [ 74.329301][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.335538][ T8459] ? netlink_unicast+0x7d0/0x7d0 [ 74.340487][ T8459] sock_sendmsg+0xcf/0x120 [ 74.344903][ T8459] ____sys_sendmsg+0x6e8/0x810 [ 74.349681][ T8459] ? kernel_sendmsg+0x50/0x50 [ 74.354366][ T8459] ? do_recvmmsg+0x6d0/0x6d0 [ 74.358960][ T8459] ? lock_chain_count+0x20/0x20 [ 74.363832][ T8459] ? find_held_lock+0x2d/0x110 [ 74.368614][ T8459] ___sys_sendmsg+0xf3/0x170 [ 74.373216][ T8459] ? sendmsg_copy_msghdr+0x160/0x160 [ 74.379771][ T8459] ? __lock_acquire+0x16b3/0x54c0 [ 74.384809][ T8459] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 74.390820][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.397083][ T8459] ? __fget_light+0x215/0x280 [ 74.401760][ T8459] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 74.408034][ T8459] __sys_sendmsg+0xe5/0x1b0 [ 74.412567][ T8459] ? __sys_sendmsg_sock+0x30/0x30 [ 74.417612][ T8459] ? syscall_enter_from_user_mode+0x27/0x70 [ 74.423506][ T8459] do_syscall_64+0x2d/0x70 [ 74.427938][ T8459] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.433828][ T8459] RIP: 0033:0x441089 [ 74.437716][ T8459] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.458440][ T8459] RSP: 002b:00007ffc97bc1768 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.466847][ T8459] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 74.474827][ T8459] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 74.482810][ T8459] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 74.490773][ T8459] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000011f20 [ 74.498733][ T8459] R13: 00007ffc97bc17d0 R14: 00007ffc97bc17c0 R15: 00007ffc97bc178c [ 74.507755][ T8459] Kernel Offset: disabled [ 74.512204][ T8459] Rebooting in 86400 seconds..