[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.44' (ECDSA) to the list of known hosts. syzkaller login: [ 57.117232][ T8392] IPVS: ftp: loaded support on port[0] = 21 [ 57.177747][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.196169][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 57.228316][ T246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.230583][ T3144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.241365][ T246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.259675][ T3144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.290553][ T8433] ------------[ cut here ]------------ [ 57.297007][ T8433] WARNING: CPU: 0 PID: 8433 at net/wireless/sme.c:532 cfg80211_connect+0x1409/0x2040 [ 57.306901][ T8433] Modules linked in: [ 57.310839][ T8433] CPU: 0 PID: 8433 Comm: syz-executor246 Not tainted 5.12.0-rc4-syzkaller #0 [ 57.320728][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.331600][ T8433] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 57.337488][ T8433] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 b7 5b 27 f9 <0f> 0b e8 b0 5b 27 f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 57.358083][ T8433] RSP: 0018:ffffc9000168f298 EFLAGS: 00010293 [ 57.364942][ T8433] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.374089][ T8433] RDX: ffff8880116254c0 RSI: ffffffff884c9279 RDI: ffffffff8a867a80 [ 57.382409][ T8433] RBP: ffff8880154d8d32 R08: 0000000000000001 R09: ffff8880154d8d37 [ 57.390816][ T8433] R10: ffffed1002a9b1a6 R11: 0000000000000000 R12: ffffc9000168f438 [ 57.399023][ T8433] R13: ffff8880154d8c10 R14: ffff8880154d8d58 R15: ffff8880154d8d60 [ 57.407428][ T8433] FS: 0000000000fcb300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 57.416558][ T8433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.423245][ T8433] CR2: 0000000020000080 CR3: 0000000016e02000 CR4: 0000000000350ef0 [ 57.431260][ T8433] Call Trace: [ 57.434624][ T8433] ? __cfg80211_disconnected+0x1470/0x1470 [ 57.440452][ T8433] ? memset+0x20/0x40 [ 57.444516][ T8433] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 57.450373][ T8433] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 57.456284][ T8433] nl80211_connect+0x1647/0x22a0 [ 57.461254][ T8433] ? nl80211_parse_connkeys+0xa50/0xa50 [ 57.466896][ T8433] ? __mutex_unlock_slowpath+0xe2/0x610 [ 57.472562][ T8433] ? wait_for_completion_io+0x270/0x270 [ 57.478256][ T8433] ? nl80211_pre_doit+0xa4/0x5a0 [ 57.483589][ T8433] genl_family_rcv_msg_doit+0x228/0x320 [ 57.489159][ T8433] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 57.496660][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.503222][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.509485][ T8433] ? ns_capable+0xde/0x100 [ 57.514050][ T8433] genl_rcv_msg+0x328/0x580 [ 57.518574][ T8433] ? genl_get_cmd+0x480/0x480 [ 57.523407][ T8433] ? nl80211_parse_connkeys+0xa50/0xa50 [ 57.528980][ T8433] ? lock_release+0x720/0x720 [ 57.533960][ T8433] netlink_rcv_skb+0x153/0x420 [ 57.538867][ T8433] ? genl_get_cmd+0x480/0x480 [ 57.543639][ T8433] ? netlink_ack+0xaa0/0xaa0 [ 57.548261][ T8433] genl_rcv+0x24/0x40 [ 57.553235][ T8433] netlink_unicast+0x533/0x7d0 [ 57.558446][ T8433] ? netlink_attachskb+0x870/0x870 [ 57.564061][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 57.570317][ T8433] ? __phys_addr_symbol+0x2c/0x70 [ 57.575422][ T8433] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 57.581189][ T8433] ? __check_object_size+0x171/0x3f0 [ 57.586549][ T8433] netlink_sendmsg+0x856/0xd90 [ 57.591324][ T8433] ? netlink_unicast+0x7d0/0x7d0 [ 57.596328][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.602575][ T8433] ? netlink_unicast+0x7d0/0x7d0 [ 57.607608][ T8433] sock_sendmsg+0xcf/0x120 [ 57.612034][ T8433] ____sys_sendmsg+0x6e8/0x810 [ 57.617080][ T8433] ? kernel_sendmsg+0x50/0x50 [ 57.621926][ T8433] ? do_recvmmsg+0x6d0/0x6d0 [ 57.626587][ T8433] ? lock_chain_count+0x20/0x20 [ 57.631445][ T8433] ? find_held_lock+0x2d/0x110 [ 57.636485][ T8433] ___sys_sendmsg+0xf3/0x170 [ 57.641095][ T8433] ? sendmsg_copy_msghdr+0x160/0x160 [ 57.646469][ T8433] ? __lock_acquire+0x16b3/0x54c0 [ 57.651509][ T8433] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.657657][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.663996][ T8433] ? __fget_light+0x215/0x280 [ 57.668693][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 57.675096][ T8433] __sys_sendmsg+0xe5/0x1b0 [ 57.679695][ T8433] ? __sys_sendmsg_sock+0x30/0x30 [ 57.684868][ T8433] ? syscall_enter_from_user_mode+0x27/0x70 [ 57.690777][ T8433] do_syscall_64+0x2d/0x70 [ 57.695562][ T8433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.701557][ T8433] RIP: 0033:0x441089 [ 57.705512][ T8433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.725184][ T8433] RSP: 002b:00007ffd6b3d82d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.733652][ T8433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 57.741644][ T8433] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 57.749999][ T8433] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 57.758143][ T8433] R10: 0000000c00000000 R11: 0000000000000246 R12: 000000000000dfb9 [ 57.766445][ T8433] R13: 00007ffd6b3d8340 R14: 00007ffd6b3d8330 R15: 00007ffd6b3d82fc [ 57.774669][ T8433] Kernel panic - not syncing: panic_on_warn set ... [ 57.781248][ T8433] CPU: 0 PID: 8433 Comm: syz-executor246 Not tainted 5.12.0-rc4-syzkaller #0 [ 57.790005][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.800217][ T8433] Call Trace: [ 57.803484][ T8433] dump_stack+0x141/0x1d7 [ 57.807817][ T8433] panic+0x306/0x73d [ 57.811718][ T8433] ? __warn_printk+0xf3/0xf3 [ 57.816321][ T8433] ? __warn.cold+0x1a/0x44 [ 57.820744][ T8433] ? cfg80211_connect+0x1409/0x2040 [ 57.825954][ T8433] __warn.cold+0x35/0x44 [ 57.830380][ T8433] ? cfg80211_connect+0x1409/0x2040 [ 57.835594][ T8433] report_bug+0x1bd/0x210 [ 57.839943][ T8433] handle_bug+0x3c/0x60 [ 57.844879][ T8433] exc_invalid_op+0x14/0x40 [ 57.849396][ T8433] asm_exc_invalid_op+0x12/0x20 [ 57.854241][ T8433] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 57.860292][ T8433] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 b7 5b 27 f9 <0f> 0b e8 b0 5b 27 f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 57.881316][ T8433] RSP: 0018:ffffc9000168f298 EFLAGS: 00010293 [ 57.887719][ T8433] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.895847][ T8433] RDX: ffff8880116254c0 RSI: ffffffff884c9279 RDI: ffffffff8a867a80 [ 57.903822][ T8433] RBP: ffff8880154d8d32 R08: 0000000000000001 R09: ffff8880154d8d37 [ 57.911820][ T8433] R10: ffffed1002a9b1a6 R11: 0000000000000000 R12: ffffc9000168f438 [ 57.919919][ T8433] R13: ffff8880154d8c10 R14: ffff8880154d8d58 R15: ffff8880154d8d60 [ 57.927909][ T8433] ? cfg80211_connect+0x1409/0x2040 [ 57.933113][ T8433] ? cfg80211_connect+0x1409/0x2040 [ 57.938390][ T8433] ? __cfg80211_disconnected+0x1470/0x1470 [ 57.944280][ T8433] ? memset+0x20/0x40 [ 57.948250][ T8433] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 57.953975][ T8433] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 57.959776][ T8433] nl80211_connect+0x1647/0x22a0 [ 57.964948][ T8433] ? nl80211_parse_connkeys+0xa50/0xa50 [ 57.970484][ T8433] ? __mutex_unlock_slowpath+0xe2/0x610 [ 57.976034][ T8433] ? wait_for_completion_io+0x270/0x270 [ 57.981588][ T8433] ? nl80211_pre_doit+0xa4/0x5a0 [ 57.986522][ T8433] genl_family_rcv_msg_doit+0x228/0x320 [ 57.992064][ T8433] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 57.999435][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.005692][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.011952][ T8433] ? ns_capable+0xde/0x100 [ 58.016367][ T8433] genl_rcv_msg+0x328/0x580 [ 58.020880][ T8433] ? genl_get_cmd+0x480/0x480 [ 58.025564][ T8433] ? nl80211_parse_connkeys+0xa50/0xa50 [ 58.031105][ T8433] ? lock_release+0x720/0x720 [ 58.035777][ T8433] netlink_rcv_skb+0x153/0x420 [ 58.040541][ T8433] ? genl_get_cmd+0x480/0x480 [ 58.045219][ T8433] ? netlink_ack+0xaa0/0xaa0 [ 58.049827][ T8433] genl_rcv+0x24/0x40 [ 58.053815][ T8433] netlink_unicast+0x533/0x7d0 [ 58.058579][ T8433] ? netlink_attachskb+0x870/0x870 [ 58.063694][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.069936][ T8433] ? __phys_addr_symbol+0x2c/0x70 [ 58.074988][ T8433] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 58.080711][ T8433] ? __check_object_size+0x171/0x3f0 [ 58.086016][ T8433] netlink_sendmsg+0x856/0xd90 [ 58.090782][ T8433] ? netlink_unicast+0x7d0/0x7d0 [ 58.095713][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.102141][ T8433] ? netlink_unicast+0x7d0/0x7d0 [ 58.107263][ T8433] sock_sendmsg+0xcf/0x120 [ 58.111687][ T8433] ____sys_sendmsg+0x6e8/0x810 [ 58.116456][ T8433] ? kernel_sendmsg+0x50/0x50 [ 58.121119][ T8433] ? do_recvmmsg+0x6d0/0x6d0 [ 58.125708][ T8433] ? lock_chain_count+0x20/0x20 [ 58.130553][ T8433] ? find_held_lock+0x2d/0x110 [ 58.135311][ T8433] ___sys_sendmsg+0xf3/0x170 [ 58.139900][ T8433] ? sendmsg_copy_msghdr+0x160/0x160 [ 58.145347][ T8433] ? __lock_acquire+0x16b3/0x54c0 [ 58.150369][ T8433] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 58.156356][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 58.162586][ T8433] ? __fget_light+0x215/0x280 [ 58.167253][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 58.173490][ T8433] __sys_sendmsg+0xe5/0x1b0 [ 58.177994][ T8433] ? __sys_sendmsg_sock+0x30/0x30 [ 58.183022][ T8433] ? syscall_enter_from_user_mode+0x27/0x70 [ 58.188917][ T8433] do_syscall_64+0x2d/0x70 [ 58.193331][ T8433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.199220][ T8433] RIP: 0033:0x441089 [ 58.203102][ T8433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.222726][ T8433] RSP: 002b:00007ffd6b3d82d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.231144][ T8433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 58.239131][ T8433] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 58.247098][ T8433] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 58.255064][ T8433] R10: 0000000c00000000 R11: 0000000000000246 R12: 000000000000dfb9 [ 58.263031][ T8433] R13: 00007ffd6b3d8340 R14: 00007ffd6b3d8330 R15: 00007ffd6b3d82fc [ 58.274730][ T8433] Kernel Offset: disabled [ 58.279248][ T8433] Rebooting in 86400 seconds..