Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts. syzkaller login: [ 67.196895][ T8391] IPVS: ftp: loaded support on port[0] = 21 [ 67.287284][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.299862][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.323433][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program executing program [ 67.342489][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.350817][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.359740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.395972][ T8431] ------------[ cut here ]------------ [ 67.401791][ T8431] WARNING: CPU: 0 PID: 8431 at net/wireless/sme.c:532 cfg80211_connect+0x1409/0x2040 [ 67.412512][ T8431] Modules linked in: [ 67.416451][ T8431] CPU: 1 PID: 8431 Comm: syz-executor892 Not tainted 5.11.0-syzkaller #0 [ 67.425831][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.437089][ T8431] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 67.442972][ T8431] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 c7 a0 2a f9 <0f> 0b e8 c0 a0 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 67.462705][ T8431] RSP: 0018:ffffc900019cf298 EFLAGS: 00010293 [ 67.468800][ T8431] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 67.476827][ T8431] RDX: ffff888024365340 RSI: ffffffff8848ad69 RDI: ffffffff8a847b60 [ 67.484923][ T8431] RBP: ffff88801c218d32 R08: 0000000000000001 R09: ffff88801c218d37 [ 67.492960][ T8431] R10: ffffed10038431a6 R11: 0000000000000000 R12: ffffc900019cf438 [ 67.501066][ T8431] R13: ffff88801c218c10 R14: ffff88801c218d58 R15: ffff88801c218d60 [ 67.509970][ T8431] FS: 0000000001937300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 67.519000][ T8431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.525706][ T8431] CR2: 0000000020000080 CR3: 0000000011bd9000 CR4: 00000000001506e0 [ 67.534789][ T8431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.543976][ T8431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.552553][ T8431] Call Trace: [ 67.555891][ T8431] ? __cfg80211_disconnected+0x1470/0x1470 [ 67.562211][ T8431] ? memset+0x20/0x40 [ 67.566228][ T8431] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 67.572087][ T8431] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 67.578056][ T8431] nl80211_connect+0x1647/0x22a0 [ 67.583522][ T8431] ? nl80211_parse_connkeys+0xa50/0xa50 [ 67.589095][ T8431] ? __mutex_unlock_slowpath+0xe2/0x610 [ 67.594755][ T8431] ? lock_is_held_type+0xd5/0x130 [ 67.599826][ T8431] ? wait_for_completion_io+0x270/0x270 [ 67.605518][ T8431] ? nl80211_pre_doit+0xa4/0x5a0 [ 67.610484][ T8431] genl_family_rcv_msg_doit+0x228/0x320 [ 67.616119][ T8431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 67.623625][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.629888][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.636435][ T8431] ? ns_capable+0xde/0x100 [ 67.640990][ T8431] genl_rcv_msg+0x328/0x580 [ 67.645537][ T8431] ? genl_get_cmd+0x480/0x480 [ 67.650210][ T8431] ? nl80211_parse_connkeys+0xa50/0xa50 [ 67.655824][ T8431] ? lock_release+0x710/0x710 [ 67.660535][ T8431] ? lock_acquire+0x1bb/0x730 [ 67.665827][ T8431] netlink_rcv_skb+0x153/0x420 [ 67.670695][ T8431] ? genl_get_cmd+0x480/0x480 [ 67.675395][ T8431] ? netlink_ack+0xaa0/0xaa0 [ 67.679999][ T8431] genl_rcv+0x24/0x40 [ 67.684070][ T8431] netlink_unicast+0x533/0x7d0 [ 67.688868][ T8431] ? netlink_attachskb+0x870/0x870 [ 67.694058][ T8431] ? _copy_from_iter_full+0x279/0x850 [ 67.699450][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 67.705836][ T8431] ? __phys_addr_symbol+0x2c/0x70 [ 67.710953][ T8431] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 67.716707][ T8431] ? __check_object_size+0x171/0x3f0 [ 67.722105][ T8431] netlink_sendmsg+0x856/0xd90 [ 67.726898][ T8431] ? netlink_unicast+0x7d0/0x7d0 [ 67.731967][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.738242][ T8431] ? netlink_unicast+0x7d0/0x7d0 [ 67.743324][ T8431] sock_sendmsg+0xcf/0x120 [ 67.747776][ T8431] ____sys_sendmsg+0x6e8/0x810 [ 67.752640][ T8431] ? kernel_sendmsg+0x50/0x50 [ 67.757332][ T8431] ? do_recvmmsg+0x6d0/0x6d0 [ 67.762031][ T8431] ? lock_is_held_type+0xd5/0x130 [ 67.767098][ T8431] ? rcu_read_lock_sched_held+0x3a/0x70 [ 67.772714][ T8431] ? kfree+0x2e3/0x3c0 [ 67.776815][ T8431] ___sys_sendmsg+0xf3/0x170 [ 67.781479][ T8431] ? sendmsg_copy_msghdr+0x160/0x160 [ 67.786790][ T8431] ? _copy_to_user+0xdc/0x150 [ 67.791541][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 67.797803][ T8431] ? sock_do_ioctl+0x168/0x2d0 [ 67.802811][ T8431] ? compat_ifr_data_ioctl+0x150/0x150 [ 67.808307][ T8431] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 67.814325][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 67.820674][ T8431] ? __fget_light+0x215/0x280 [ 67.825390][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 67.831722][ T8431] __sys_sendmsg+0xe5/0x1b0 [ 67.836249][ T8431] ? __sys_sendmsg_sock+0xb0/0xb0 [ 67.841599][ T8431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 67.847522][ T8431] do_syscall_64+0x2d/0x70 [ 67.852329][ T8431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.858255][ T8431] RIP: 0033:0x441019 [ 67.862245][ T8431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.882025][ T8431] RSP: 002b:00007ffccee19808 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.890461][ T8431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441019 [ 67.903452][ T8431] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 67.911593][ T8431] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 67.919586][ T8431] R10: 0000000c00000000 R11: 0000000000000246 R12: 000000000001072f [ 67.927669][ T8431] R13: 00007ffccee19860 R14: 00007ffccee19850 R15: 00007ffccee19824 [ 67.935791][ T8431] Kernel panic - not syncing: panic_on_warn set ... [ 67.942379][ T8431] CPU: 0 PID: 8431 Comm: syz-executor892 Not tainted 5.11.0-syzkaller #0 [ 67.950803][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.960847][ T8431] Call Trace: [ 67.964117][ T8431] dump_stack+0xfa/0x151 [ 67.968362][ T8431] panic+0x306/0x73d [ 67.972282][ T8431] ? __warn_printk+0xf3/0xf3 [ 67.976901][ T8431] ? __warn.cold+0x1a/0x44 [ 67.981358][ T8431] ? cfg80211_connect+0x1409/0x2040 [ 67.986555][ T8431] __warn.cold+0x35/0x44 [ 67.990843][ T8431] ? cfg80211_connect+0x1409/0x2040 [ 67.996052][ T8431] report_bug+0x1bd/0x210 [ 68.000381][ T8431] handle_bug+0x3c/0x60 [ 68.005065][ T8431] exc_invalid_op+0x14/0x40 [ 68.009576][ T8431] asm_exc_invalid_op+0x12/0x20 [ 68.014428][ T8431] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 68.020275][ T8431] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 c7 a0 2a f9 <0f> 0b e8 c0 a0 2a f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 68.040957][ T8431] RSP: 0018:ffffc900019cf298 EFLAGS: 00010293 [ 68.047031][ T8431] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 68.054989][ T8431] RDX: ffff888024365340 RSI: ffffffff8848ad69 RDI: ffffffff8a847b60 [ 68.062954][ T8431] RBP: ffff88801c218d32 R08: 0000000000000001 R09: ffff88801c218d37 [ 68.071037][ T8431] R10: ffffed10038431a6 R11: 0000000000000000 R12: ffffc900019cf438 [ 68.079008][ T8431] R13: ffff88801c218c10 R14: ffff88801c218d58 R15: ffff88801c218d60 [ 68.086996][ T8431] ? cfg80211_connect+0x1409/0x2040 [ 68.092211][ T8431] ? cfg80211_connect+0x1409/0x2040 [ 68.097420][ T8431] ? __cfg80211_disconnected+0x1470/0x1470 [ 68.103246][ T8431] ? memset+0x20/0x40 [ 68.107260][ T8431] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 68.112996][ T8431] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 68.118818][ T8431] nl80211_connect+0x1647/0x22a0 [ 68.123752][ T8431] ? nl80211_parse_connkeys+0xa50/0xa50 [ 68.129290][ T8431] ? __mutex_unlock_slowpath+0xe2/0x610 [ 68.134847][ T8431] ? lock_is_held_type+0xd5/0x130 [ 68.139863][ T8431] ? wait_for_completion_io+0x270/0x270 [ 68.145439][ T8431] ? nl80211_pre_doit+0xa4/0x5a0 [ 68.150473][ T8431] genl_family_rcv_msg_doit+0x228/0x320 [ 68.156024][ T8431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 68.163398][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.169639][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.176330][ T8431] ? ns_capable+0xde/0x100 [ 68.180757][ T8431] genl_rcv_msg+0x328/0x580 [ 68.185318][ T8431] ? genl_get_cmd+0x480/0x480 [ 68.189989][ T8431] ? nl80211_parse_connkeys+0xa50/0xa50 [ 68.195531][ T8431] ? lock_release+0x710/0x710 [ 68.200214][ T8431] ? lock_acquire+0x1bb/0x730 [ 68.204884][ T8431] netlink_rcv_skb+0x153/0x420 [ 68.209644][ T8431] ? genl_get_cmd+0x480/0x480 [ 68.214319][ T8431] ? netlink_ack+0xaa0/0xaa0 [ 68.218909][ T8431] genl_rcv+0x24/0x40 [ 68.222882][ T8431] netlink_unicast+0x533/0x7d0 [ 68.227676][ T8431] ? netlink_attachskb+0x870/0x870 [ 68.232853][ T8431] ? _copy_from_iter_full+0x279/0x850 [ 68.238226][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.244494][ T8431] ? __phys_addr_symbol+0x2c/0x70 [ 68.249512][ T8431] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 68.255221][ T8431] ? __check_object_size+0x171/0x3f0 [ 68.260543][ T8431] netlink_sendmsg+0x856/0xd90 [ 68.265334][ T8431] ? netlink_unicast+0x7d0/0x7d0 [ 68.270306][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.276657][ T8431] ? netlink_unicast+0x7d0/0x7d0 [ 68.281631][ T8431] sock_sendmsg+0xcf/0x120 [ 68.286042][ T8431] ____sys_sendmsg+0x6e8/0x810 [ 68.290845][ T8431] ? kernel_sendmsg+0x50/0x50 [ 68.295545][ T8431] ? do_recvmmsg+0x6d0/0x6d0 [ 68.300149][ T8431] ? lock_is_held_type+0xd5/0x130 [ 68.305194][ T8431] ? rcu_read_lock_sched_held+0x3a/0x70 [ 68.310740][ T8431] ? kfree+0x2e3/0x3c0 [ 68.314857][ T8431] ___sys_sendmsg+0xf3/0x170 [ 68.319626][ T8431] ? sendmsg_copy_msghdr+0x160/0x160 [ 68.324924][ T8431] ? _copy_to_user+0xdc/0x150 [ 68.329597][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.335838][ T8431] ? sock_do_ioctl+0x168/0x2d0 [ 68.340597][ T8431] ? compat_ifr_data_ioctl+0x150/0x150 [ 68.346093][ T8431] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 68.351984][ T8431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.358220][ T8431] ? __fget_light+0x215/0x280 [ 68.362893][ T8431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.369135][ T8431] __sys_sendmsg+0xe5/0x1b0 [ 68.373633][ T8431] ? __sys_sendmsg_sock+0xb0/0xb0 [ 68.378658][ T8431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 68.384549][ T8431] do_syscall_64+0x2d/0x70 [ 68.388984][ T8431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.394871][ T8431] RIP: 0033:0x441019 [ 68.398790][ T8431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.418481][ T8431] RSP: 002b:00007ffccee19808 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.427548][ T8431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441019 [ 68.435599][ T8431] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 68.443566][ T8431] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 68.451982][ T8431] R10: 0000000c00000000 R11: 0000000000000246 R12: 000000000001072f [ 68.459945][ T8431] R13: 00007ffccee19860 R14: 00007ffccee19850 R15: 00007ffccee19824 [ 68.468588][ T8431] Kernel Offset: disabled [ 68.473004][ T8431] Rebooting in 86400 seconds..