Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.254' (ECDSA) to the list of known hosts. syzkaller login: [ 73.076555][ T8386] IPVS: ftp: loaded support on port[0] = 21 [ 73.157279][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.170249][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.189537][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program executing program [ 73.225307][ T4459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.233821][ T4459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.243261][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.273278][ T8427] ------------[ cut here ]------------ [ 73.279380][ T8427] WARNING: CPU: 0 PID: 8427 at net/wireless/sme.c:532 cfg80211_connect+0x1409/0x2040 [ 73.289797][ T8427] Modules linked in: [ 73.293695][ T8427] CPU: 0 PID: 8427 Comm: syz-executor481 Not tainted 5.12.0-rc5-syzkaller #0 [ 73.305335][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.316670][ T8427] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 73.323167][ T8427] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 d7 89 2a f9 <0f> 0b e8 d0 89 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 73.343503][ T8427] RSP: 0018:ffffc9000169f298 EFLAGS: 00010293 [ 73.350259][ T8427] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 73.358881][ T8427] RDX: ffff88801943b880 RSI: ffffffff88496779 RDI: ffffffff8a854b60 [ 73.367028][ T8427] RBP: ffff88802d3a0d32 R08: 0000000000000001 R09: ffff88802d3a0d37 [ 73.375901][ T8427] R10: ffffed1005a741a6 R11: 0000000000000000 R12: ffffc9000169f438 [ 73.384735][ T8427] R13: ffff88802d3a0c10 R14: ffff88802d3a0d58 R15: ffff88802d3a0d60 [ 73.393320][ T8427] FS: 0000000002178300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 73.403504][ T8427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.410999][ T8427] CR2: 00007f5e5593b000 CR3: 0000000028fc5000 CR4: 00000000001506f0 [ 73.419906][ T8427] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.428794][ T8427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.436782][ T8427] Call Trace: [ 73.440964][ T8427] ? __cfg80211_disconnected+0x1470/0x1470 [ 73.446791][ T8427] ? memset+0x20/0x40 [ 73.451637][ T8427] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 73.457476][ T8427] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 73.464260][ T8427] nl80211_connect+0x1647/0x22a0 [ 73.469770][ T8427] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.475341][ T8427] ? __mutex_unlock_slowpath+0xe2/0x610 [ 73.481899][ T8427] ? wait_for_completion_io+0x270/0x270 [ 73.488643][ T8427] ? nl80211_pre_doit+0xa6/0x5c0 [ 73.493613][ T8427] genl_family_rcv_msg_doit+0x228/0x320 [ 73.500182][ T8427] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 73.507585][ T8427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.515015][ T8427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.521876][ T8427] ? ns_capable+0xde/0x100 [ 73.526303][ T8427] genl_rcv_msg+0x328/0x580 [ 73.532801][ T8427] ? genl_get_cmd+0x480/0x480 [ 73.537502][ T8427] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.544513][ T8427] ? lock_release+0x720/0x720 [ 73.549846][ T8427] netlink_rcv_skb+0x153/0x420 [ 73.554712][ T8427] ? genl_get_cmd+0x480/0x480 [ 73.560530][ T8427] ? netlink_ack+0xaa0/0xaa0 [ 73.565146][ T8427] genl_rcv+0x24/0x40 [ 73.570194][ T8427] netlink_unicast+0x533/0x7d0 [ 73.575061][ T8427] ? netlink_attachskb+0x870/0x870 [ 73.581706][ T8427] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.588780][ T8427] ? __phys_addr_symbol+0x2c/0x70 [ 73.593824][ T8427] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 73.600651][ T8427] ? __check_object_size+0x171/0x3f0 [ 73.605965][ T8427] netlink_sendmsg+0x856/0xd90 [ 73.611686][ T8427] ? netlink_unicast+0x7d0/0x7d0 [ 73.616740][ T8427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.624067][ T8427] ? netlink_unicast+0x7d0/0x7d0 [ 73.629584][ T8427] sock_sendmsg+0xcf/0x120 [ 73.634649][ T8427] ____sys_sendmsg+0x6e8/0x810 [ 73.640533][ T8427] ? kernel_sendmsg+0x50/0x50 [ 73.645311][ T8427] ? do_recvmmsg+0x6d0/0x6d0 [ 73.651494][ T8427] ? lock_chain_count+0x20/0x20 [ 73.656456][ T8427] ? find_held_lock+0x2d/0x110 [ 73.662856][ T8427] ___sys_sendmsg+0xf3/0x170 [ 73.667477][ T8427] ? sendmsg_copy_msghdr+0x160/0x160 [ 73.674022][ T8427] ? __lock_acquire+0x16b3/0x54c0 [ 73.679775][ T8427] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.685783][ T8427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.693187][ T8427] ? __fget_light+0x215/0x280 [ 73.698600][ T8427] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.704856][ T8427] __sys_sendmsg+0xe5/0x1b0 [ 73.710373][ T8427] ? __sys_sendmsg_sock+0x30/0x30 [ 73.715413][ T8427] ? syscall_enter_from_user_mode+0x27/0x70 [ 73.722249][ T8427] do_syscall_64+0x2d/0x70 [ 73.726691][ T8427] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.733433][ T8427] RIP: 0033:0x441089 [ 73.737328][ T8427] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.757932][ T8427] RSP: 002b:00007ffe0c9a91f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.766492][ T8427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 73.774629][ T8427] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 73.782737][ T8427] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 73.791036][ T8427] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000011e28 [ 73.799254][ T8427] R13: 00007ffe0c9a9260 R14: 00007ffe0c9a9250 R15: 00007ffe0c9a921c [ 73.807289][ T8427] Kernel panic - not syncing: panic_on_warn set ... [ 73.813921][ T8427] CPU: 1 PID: 8427 Comm: syz-executor481 Not tainted 5.12.0-rc5-syzkaller #0 [ 73.822712][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.832822][ T8427] Call Trace: [ 73.836558][ T8427] dump_stack+0x141/0x1d7 [ 73.840955][ T8427] panic+0x306/0x73d [ 73.844881][ T8427] ? __warn_printk+0xf3/0xf3 [ 73.849506][ T8427] ? __warn.cold+0x1a/0x44 [ 73.853954][ T8427] ? cfg80211_connect+0x1409/0x2040 [ 73.859215][ T8427] __warn.cold+0x35/0x44 [ 73.863490][ T8427] ? cfg80211_connect+0x1409/0x2040 [ 73.868826][ T8427] report_bug+0x1bd/0x210 [ 73.873190][ T8427] handle_bug+0x3c/0x60 [ 73.877381][ T8427] exc_invalid_op+0x14/0x40 [ 73.881920][ T8427] asm_exc_invalid_op+0x12/0x20 [ 73.886805][ T8427] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 73.892644][ T8427] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 d7 89 2a f9 <0f> 0b e8 d0 89 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 73.912276][ T8427] RSP: 0018:ffffc9000169f298 EFLAGS: 00010293 [ 73.918384][ T8427] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 73.926376][ T8427] RDX: ffff88801943b880 RSI: ffffffff88496779 RDI: ffffffff8a854b60 [ 73.934376][ T8427] RBP: ffff88802d3a0d32 R08: 0000000000000001 R09: ffff88802d3a0d37 [ 73.942374][ T8427] R10: ffffed1005a741a6 R11: 0000000000000000 R12: ffffc9000169f438 [ 73.950371][ T8427] R13: ffff88802d3a0c10 R14: ffff88802d3a0d58 R15: ffff88802d3a0d60 [ 73.958379][ T8427] ? cfg80211_connect+0x1409/0x2040 [ 73.963746][ T8427] ? cfg80211_connect+0x1409/0x2040 [ 73.969016][ T8427] ? __cfg80211_disconnected+0x1470/0x1470 [ 73.974861][ T8427] ? memset+0x20/0x40 [ 73.978888][ T8427] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 73.984777][ T8427] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 73.990638][ T8427] nl80211_connect+0x1647/0x22a0 [ 73.995617][ T8427] ? nl80211_parse_connkeys+0xa50/0xa50 [ 74.001206][ T8427] ? __mutex_unlock_slowpath+0xe2/0x610 [ 74.006795][ T8427] ? wait_for_completion_io+0x270/0x270 [ 74.012423][ T8427] ? nl80211_pre_doit+0xa6/0x5c0 [ 74.017412][ T8427] genl_family_rcv_msg_doit+0x228/0x320 [ 74.023006][ T8427] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 74.030412][ T8427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.036709][ T8427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.042986][ T8427] ? ns_capable+0xde/0x100 [ 74.047438][ T8427] genl_rcv_msg+0x328/0x580 [ 74.051975][ T8427] ? genl_get_cmd+0x480/0x480 [ 74.056681][ T8427] ? nl80211_parse_connkeys+0xa50/0xa50 [ 74.062262][ T8427] ? lock_release+0x720/0x720 [ 74.066971][ T8427] netlink_rcv_skb+0x153/0x420 [ 74.071759][ T8427] ? genl_get_cmd+0x480/0x480 [ 74.076484][ T8427] ? netlink_ack+0xaa0/0xaa0 [ 74.081111][ T8427] genl_rcv+0x24/0x40 [ 74.085113][ T8427] netlink_unicast+0x533/0x7d0 [ 74.089900][ T8427] ? netlink_attachskb+0x870/0x870 [ 74.095217][ T8427] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 74.101481][ T8427] ? __phys_addr_symbol+0x2c/0x70 [ 74.106534][ T8427] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 74.112297][ T8427] ? __check_object_size+0x171/0x3f0 [ 74.117637][ T8427] netlink_sendmsg+0x856/0xd90 [ 74.122437][ T8427] ? netlink_unicast+0x7d0/0x7d0 [ 74.127404][ T8427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.133698][ T8427] ? netlink_unicast+0x7d0/0x7d0 [ 74.138662][ T8427] sock_sendmsg+0xcf/0x120 [ 74.143107][ T8427] ____sys_sendmsg+0x6e8/0x810 [ 74.147918][ T8427] ? kernel_sendmsg+0x50/0x50 [ 74.152633][ T8427] ? do_recvmmsg+0x6d0/0x6d0 [ 74.157259][ T8427] ? lock_chain_count+0x20/0x20 [ 74.162137][ T8427] ? find_held_lock+0x2d/0x110 [ 74.166937][ T8427] ___sys_sendmsg+0xf3/0x170 [ 74.171557][ T8427] ? sendmsg_copy_msghdr+0x160/0x160 [ 74.176873][ T8427] ? __lock_acquire+0x16b3/0x54c0 [ 74.181944][ T8427] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 74.187971][ T8427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.194677][ T8427] ? __fget_light+0x215/0x280 [ 74.199399][ T8427] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 74.205689][ T8427] __sys_sendmsg+0xe5/0x1b0 [ 74.210227][ T8427] ? __sys_sendmsg_sock+0x30/0x30 [ 74.215289][ T8427] ? syscall_enter_from_user_mode+0x27/0x70 [ 74.221214][ T8427] do_syscall_64+0x2d/0x70 [ 74.225659][ T8427] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.231597][ T8427] RIP: 0033:0x441089 [ 74.235508][ T8427] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.255139][ T8427] RSP: 002b:00007ffe0c9a91f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.264972][ T8427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 74.273143][ T8427] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 74.281148][ T8427] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 74.289136][ T8427] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000011e28 [ 74.297128][ T8427] R13: 00007ffe0c9a9260 R14: 00007ffe0c9a9250 R15: 00007ffe0c9a921c [ 74.305732][ T8427] Kernel Offset: disabled [ 74.310318][ T8427] Rebooting in 86400 seconds..