Warning: Permanently added '[localhost]:50735' (ED25519) to the list of known hosts.
syzkaller login: [ 86.701945][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.705638][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.744344][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.749751][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program
[ 86.789173][ T1097] ------------[ cut here ]------------
[ 86.791593][ T1097] UBSAN: array-index-out-of-bounds in net/mac80211/mlme.c:7224:41
[ 86.795060][ T1097] index 4 is out of range for type 'u8[0]' (aka 'unsigned char[0]')
[ 86.801812][ T5314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 86.807957][ T1097] CPU: 0 UID: 0 PID: 1097 Comm: kworker/u4:9 Not tainted 6.16.0-rc1-syzkaller-00182-g18531f4d1c8c #0 PREEMPT(full)
[ 86.807975][ T1097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.807982][ T1097] Workqueue: events_unbound cfg80211_wiphy_work
[ 86.808248][ T1097] Call Trace:
[ 86.808256][ T1097]
[ 86.808262][ T1097] dump_stack_lvl+0x189/0x250
[ 86.808364][ T1097] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.808382][ T1097] ? __pfx__printk+0x10/0x10
[ 86.808410][ T1097] ubsan_epilogue+0xa/0x40
[ 86.808424][ T1097] __ubsan_handle_out_of_bounds+0xe9/0xf0
[ 86.808483][ T1097] ? ieee80211_get_bssid+0xb8/0x200
[ 86.808493][ T1097] ieee80211_rx_mgmt_beacon+0x21fd/0x2c10
[ 86.808504][ T1097] ? __lock_acquire+0xab9/0xd20
[ 86.808551][ T1097] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 86.808561][ T1097] ? __lock_acquire+0xab9/0xd20
[ 86.808600][ T1097] ieee80211_iface_work+0x49c/0xfe0
[ 86.808625][ T1097] cfg80211_wiphy_work+0x2df/0x460
[ 86.808638][ T1097] ? process_scheduled_works+0x9ef/0x17b0
[ 86.808669][ T1097] process_scheduled_works+0xae1/0x17b0
[ 86.808698][ T1097] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.808725][ T1097] worker_thread+0x8a0/0xda0
[ 86.808736][ T1097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 86.808806][ T1097] ? __kthread_parkme+0x7b/0x200
[ 86.808823][ T1097] kthread+0x70e/0x8a0
[ 86.808836][ T1097] ? __pfx_worker_thread+0x10/0x10
[ 86.808851][ T1097] ? __pfx_kthread+0x10/0x10
[ 86.808865][ T1097] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.808879][ T1097] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.808894][ T1097] ? __pfx_kthread+0x10/0x10
[ 86.808905][ T1097] ret_from_fork+0x3fc/0x770
[ 86.808943][ T1097] ? __pfx_ret_from_fork+0x10/0x10
[ 86.808963][ T1097] ? __pfx_kthread+0x10/0x10
[ 86.808976][ T1097] ret_from_fork_asm+0x1a/0x30
[ 86.808998][ T1097]
[ 86.809003][ T1097] ---[ end trace ]---
[ 86.898773][ T1097] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 86.902001][ T1097] CPU: 0 UID: 0 PID: 1097 Comm: kworker/u4:9 Not tainted 6.16.0-rc1-syzkaller-00182-g18531f4d1c8c #0 PREEMPT(full)
[ 86.907153][ T1097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.911481][ T1097] Workqueue: events_unbound cfg80211_wiphy_work
[ 86.914425][ T1097] Call Trace:
[ 86.916131][ T1097]
[ 86.917686][ T1097] dump_stack_lvl+0x99/0x250
[ 86.919802][ T1097] ? __asan_memcpy+0x40/0x70
[ 86.921856][ T1097] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.923971][ T1097] ? __pfx__printk+0x10/0x10
[ 86.925856][ T1097] panic+0x2db/0x790
[ 86.927531][ T1097] ? __pfx_panic+0x10/0x10
[ 86.929373][ T1097] ? _printk+0xcf/0x120
[ 86.931283][ T1097] ? __pfx__printk+0x10/0x10
[ 86.933729][ T1097] check_panic_on_warn+0x89/0xb0
[ 86.936266][ T1097] __ubsan_handle_out_of_bounds+0xe9/0xf0
[ 86.938921][ T1097] ? ieee80211_get_bssid+0xb8/0x200
[ 86.941083][ T1097] ieee80211_rx_mgmt_beacon+0x21fd/0x2c10
[ 86.943414][ T1097] ? __lock_acquire+0xab9/0xd20
[ 86.945574][ T1097] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 86.948103][ T1097] ? __lock_acquire+0xab9/0xd20
[ 86.950096][ T1097] ieee80211_iface_work+0x49c/0xfe0
[ 86.952200][ T1097] cfg80211_wiphy_work+0x2df/0x460
[ 86.954338][ T1097] ? process_scheduled_works+0x9ef/0x17b0
[ 86.956818][ T1097] process_scheduled_works+0xae1/0x17b0
[ 86.960067][ T1097] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.962854][ T1097] worker_thread+0x8a0/0xda0
[ 86.964776][ T1097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 86.967469][ T1097] ? __kthread_parkme+0x7b/0x200
[ 86.969591][ T1097] kthread+0x70e/0x8a0
[ 86.971311][ T1097] ? __pfx_worker_thread+0x10/0x10
[ 86.973662][ T1097] ? __pfx_kthread+0x10/0x10
[ 86.975789][ T1097] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.978371][ T1097] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.980755][ T1097] ? __pfx_kthread+0x10/0x10
[ 86.982703][ T1097] ret_from_fork+0x3fc/0x770
[ 86.984701][ T1097] ? __pfx_ret_from_fork+0x10/0x10
[ 86.986980][ T1097] ? __pfx_kthread+0x10/0x10
[ 86.989255][ T1097] ret_from_fork_asm+0x1a/0x30
[ 86.991628][ T1097]
[ 86.993374][ T1097] Kernel Offset: disabled
[ 86.995303][ T1097] Rebooting in 86400 seconds..
VM DIAGNOSIS:
09:25:03 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900026470d0
R8 =ffff888033c28237 R9 =1ffff11006785046 R10=dffffc0000000000 R11=ffffffff854731b0
R12=dffffc0000000000 R13=ffffffff99ac38fc R14=ffffffff99dc8780 R15=0000000000000000
RIP=ffffffff8547322c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d252000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd092e9eb8 CR3=00000000428d5000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000404000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44d4c263644ba513 3532d4b1451f321e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29fef6723e58f69f 50510004de9d44d4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000c00000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f660fbcf604 00007f660fbe3260
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000