[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. syzkaller login: [ 70.137101][ T6898] IPVS: ftp: loaded support on port[0] = 21 [ 70.216622][ T6862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.244740][ T6862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 70.264971][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.280137][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.287665][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.307355][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.329643][ T6898] ================================================================================ [ 70.340440][ T6898] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9 [ 70.348108][ T6898] index 255 is out of range for type 'ieee80211_key *[8]' [ 70.355456][ T6898] CPU: 0 PID: 6898 Comm: syz-executor694 Not tainted 5.9.0-rc8-syzkaller #0 [ 70.364243][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.374319][ T6898] Call Trace: [ 70.377658][ T6898] dump_stack+0x198/0x1fd [ 70.382012][ T6898] ubsan_epilogue+0xb/0x5a [ 70.386448][ T6898] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 70.392624][ T6898] ? lock_is_held_type+0xbb/0xf0 [ 70.397571][ T6898] ieee80211_del_key+0x428/0x440 [ 70.402519][ T6898] nl80211_del_key+0x493/0x980 [ 70.407275][ T6898] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 70.413279][ T6898] ? nl80211_pre_doit+0xa2/0x630 [ 70.418207][ T6898] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 70.424988][ T6898] genl_rcv_msg+0x61d/0x980 [ 70.429507][ T6898] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 70.436474][ T6898] ? lock_release+0x8f0/0x8f0 [ 70.441174][ T6898] netlink_rcv_skb+0x15a/0x430 [ 70.445942][ T6898] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 70.452903][ T6898] ? netlink_ack+0xa10/0xa10 [ 70.457506][ T6898] ? __kmalloc_node_track_caller+0x38/0x60 [ 70.463324][ T6898] genl_rcv+0x24/0x40 [ 70.467310][ T6898] netlink_unicast+0x533/0x7d0 [ 70.472080][ T6898] ? netlink_attachskb+0x810/0x810 [ 70.477185][ T6898] ? __phys_addr_symbol+0x2c/0x70 [ 70.482210][ T6898] ? __check_object_size+0x171/0x3e4 [ 70.487498][ T6898] netlink_sendmsg+0x856/0xd90 [ 70.492264][ T6898] ? netlink_unicast+0x7d0/0x7d0 [ 70.497209][ T6898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 70.502484][ T6898] ? netlink_unicast+0x7d0/0x7d0 [ 70.507413][ T6898] sock_sendmsg+0xcf/0x120 [ 70.511850][ T6898] ____sys_sendmsg+0x6e8/0x810 [ 70.516643][ T6898] ? kernel_sendmsg+0x50/0x50 [ 70.521339][ T6898] ? do_recvmmsg+0x6d0/0x6d0 [ 70.526819][ T6898] ? lock_is_held_type+0xbb/0xf0 [ 70.531775][ T6898] ? find_held_lock+0x2d/0x110 [ 70.536547][ T6898] ? __might_fault+0x11f/0x1d0 [ 70.541325][ T6898] ___sys_sendmsg+0xf3/0x170 [ 70.545921][ T6898] ? sendmsg_copy_msghdr+0x160/0x160 [ 70.551237][ T6898] ? __might_fault+0x190/0x1d0 [ 70.556006][ T6898] ? _copy_to_user+0x126/0x160 [ 70.560768][ T6898] ? sock_do_ioctl+0x168/0x2d0 [ 70.565530][ T6898] ? compat_ifr_data_ioctl+0x150/0x150 [ 70.570992][ T6898] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 70.576971][ T6898] ? __fget_light+0x215/0x280 [ 70.581655][ T6898] __sys_sendmsg+0xe5/0x1b0 [ 70.586160][ T6898] ? __sys_sendmsg_sock+0xb0/0xb0 [ 70.591195][ T6898] ? check_preemption_disabled+0x50/0x130 [ 70.597288][ T6898] ? syscall_enter_from_user_mode+0x1d/0x60 [ 70.603204][ T6898] do_syscall_64+0x2d/0x70 [ 70.607614][ T6898] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 70.613504][ T6898] RIP: 0033:0x441759 [ 70.617403][ T6898] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 70.637023][ T6898] RSP: 002b:00007ffc4bf1ee78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.645453][ T6898] RAX: ffffffffffffffda RBX: 00007ffc4bf1eea0 RCX: 0000000000441759 [ 70.653432][ T6898] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 70.661406][ T6898] RBP: 0000000000000003 R08: 0000002000000000 R09: 0000002000000000 [ 70.669372][ T6898] R10: 0000002000000000 R11: 0000000000000246 R12: 0000000000000032 [ 70.677354][ T6898] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 70.687016][ T6898] ================================================================================ [ 70.697125][ T6898] Kernel panic - not syncing: panic_on_warn set ... [ 70.703736][ T6898] CPU: 0 PID: 6898 Comm: syz-executor694 Not tainted 5.9.0-rc8-syzkaller #0 [ 70.712422][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.722494][ T6898] Call Trace: [ 70.725773][ T6898] dump_stack+0x198/0x1fd [ 70.730120][ T6898] panic+0x382/0x7fb [ 70.734139][ T6898] ? __warn_printk+0xf3/0xf3 [ 70.738744][ T6898] ? ubsan_epilogue+0x3e/0x5a [ 70.743413][ T6898] ? ubsan_epilogue+0x35/0x5a [ 70.748092][ T6898] ubsan_epilogue+0x54/0x5a [ 70.752591][ T6898] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 70.758750][ T6898] ? lock_is_held_type+0xbb/0xf0 [ 70.763701][ T6898] ieee80211_del_key+0x428/0x440 [ 70.768929][ T6898] nl80211_del_key+0x493/0x980 [ 70.773694][ T6898] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 70.779604][ T6898] ? nl80211_pre_doit+0xa2/0x630 [ 70.784631][ T6898] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 70.791607][ T6898] genl_rcv_msg+0x61d/0x980 [ 70.796308][ T6898] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 70.803642][ T6898] ? lock_release+0x8f0/0x8f0 [ 70.808336][ T6898] netlink_rcv_skb+0x15a/0x430 [ 70.813114][ T6898] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 70.820059][ T6898] ? netlink_ack+0xa10/0xa10 [ 70.824645][ T6898] ? __kmalloc_node_track_caller+0x38/0x60 [ 70.830441][ T6898] genl_rcv+0x24/0x40 [ 70.834420][ T6898] netlink_unicast+0x533/0x7d0 [ 70.839318][ T6898] ? netlink_attachskb+0x810/0x810 [ 70.844865][ T6898] ? __phys_addr_symbol+0x2c/0x70 [ 70.849901][ T6898] ? __check_object_size+0x171/0x3e4 [ 70.855174][ T6898] netlink_sendmsg+0x856/0xd90 [ 70.860377][ T6898] ? netlink_unicast+0x7d0/0x7d0 [ 70.865341][ T6898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 70.870639][ T6898] ? netlink_unicast+0x7d0/0x7d0 [ 70.875582][ T6898] sock_sendmsg+0xcf/0x120 [ 70.879990][ T6898] ____sys_sendmsg+0x6e8/0x810 [ 70.884745][ T6898] ? kernel_sendmsg+0x50/0x50 [ 70.889417][ T6898] ? do_recvmmsg+0x6d0/0x6d0 [ 70.893999][ T6898] ? lock_is_held_type+0xbb/0xf0 [ 70.898921][ T6898] ? find_held_lock+0x2d/0x110 [ 70.903695][ T6898] ? __might_fault+0x11f/0x1d0 [ 70.908534][ T6898] ___sys_sendmsg+0xf3/0x170 [ 70.913110][ T6898] ? sendmsg_copy_msghdr+0x160/0x160 [ 70.918386][ T6898] ? __might_fault+0x190/0x1d0 [ 70.923591][ T6898] ? _copy_to_user+0x126/0x160 [ 70.928432][ T6898] ? sock_do_ioctl+0x168/0x2d0 [ 70.933187][ T6898] ? compat_ifr_data_ioctl+0x150/0x150 [ 70.938808][ T6898] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 70.944692][ T6898] ? __fget_light+0x215/0x280 [ 70.949379][ T6898] __sys_sendmsg+0xe5/0x1b0 [ 70.954937][ T6898] ? __sys_sendmsg_sock+0xb0/0xb0 [ 70.959978][ T6898] ? check_preemption_disabled+0x50/0x130 [ 70.965696][ T6898] ? syscall_enter_from_user_mode+0x1d/0x60 [ 70.972097][ T6898] do_syscall_64+0x2d/0x70 [ 70.976497][ T6898] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 70.982385][ T6898] RIP: 0033:0x441759 [ 70.986266][ T6898] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 71.005871][ T6898] RSP: 002b:00007ffc4bf1ee78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.014287][ T6898] RAX: ffffffffffffffda RBX: 00007ffc4bf1eea0 RCX: 0000000000441759 [ 71.022346][ T6898] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 71.030337][ T6898] RBP: 0000000000000003 R08: 0000002000000000 R09: 0000002000000000 [ 71.038304][ T6898] R10: 0000002000000000 R11: 0000000000000246 R12: 0000000000000032 [ 71.046283][ T6898] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 71.055669][ T6898] Kernel Offset: disabled [ 71.060082][ T6898] Rebooting in 86400 seconds..