[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.44' (ECDSA) to the list of known hosts. syzkaller login: [ 68.064315][ T8378] IPVS: ftp: loaded support on port[0] = 21 [ 68.141244][ T282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.150227][ T282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.159099][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 68.196007][ T282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.210907][ T282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.222302][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.238722][ T8378] ------------[ cut here ]------------ [ 68.246417][ T8378] WARNING: CPU: 1 PID: 8378 at net/mac80211/cfg.c:3614 ieee80211_probe_client+0x6ed/0x7f0 [ 68.257455][ T8378] Modules linked in: [ 68.261681][ T8378] CPU: 1 PID: 8378 Comm: syz-executor397 Not tainted 5.12.0-rc2-syzkaller #0 [ 68.270782][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.281148][ T8378] RIP: 0010:ieee80211_probe_client+0x6ed/0x7f0 [ 68.287790][ T8378] Code: f9 48 c7 c2 c0 52 84 8a be 91 02 00 00 48 c7 c7 20 53 84 8a c6 05 07 7c 54 05 01 e8 95 73 63 00 e9 e3 f9 ff ff e8 a3 17 17 f9 <0f> 0b 41 bc ea ff ff ff e9 51 fe ff ff e8 b1 1b 5b f9 e9 de fc ff [ 68.307636][ T8378] RSP: 0018:ffffc90000eff500 EFLAGS: 00010293 [ 68.313895][ T8378] RAX: 0000000000000000 RBX: ffff888016c5c000 RCX: 0000000000000000 [ 68.322210][ T8378] RDX: ffff88801f835340 RSI: ffffffff885c884d RDI: 0000000000000003 [ 68.330289][ T8378] RBP: ffff88801ca4f020 R08: 0000000000000000 R09: 0000000000000000 [ 68.338809][ T8378] R10: ffffffff885c8788 R11: 0000000000000000 R12: ffff888026c68d00 [ 68.347526][ T8378] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc90000eff684 [ 68.356076][ T8378] FS: 0000000000850300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 68.365335][ T8378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.372056][ T8378] CR2: 00007fff468f5e88 CR3: 0000000012a68000 CR4: 0000000000350ee0 [ 68.380118][ T8378] Call Trace: [ 68.383700][ T8378] nl80211_probe_client+0x3a9/0xb90 [ 68.388909][ T8378] ? nl80211_probe_mesh_link+0xa10/0xa10 [ 68.394638][ T8378] ? nl80211_pre_doit+0xa4/0x5a0 [ 68.399732][ T8378] genl_family_rcv_msg_doit+0x228/0x320 [ 68.405294][ T8378] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 68.412743][ T8378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.419024][ T8378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.425339][ T8378] ? ns_capable+0xde/0x100 [ 68.429835][ T8378] genl_rcv_msg+0x328/0x580 [ 68.434342][ T8378] ? genl_get_cmd+0x480/0x480 [ 68.439025][ T8378] ? nl80211_probe_mesh_link+0xa10/0xa10 [ 68.444823][ T8378] ? lock_release+0x720/0x720 [ 68.449617][ T8378] netlink_rcv_skb+0x153/0x420 [ 68.454421][ T8378] ? genl_get_cmd+0x480/0x480 [ 68.459857][ T8378] ? netlink_ack+0xaa0/0xaa0 [ 68.464694][ T8378] genl_rcv+0x24/0x40 [ 68.468990][ T8378] netlink_unicast+0x533/0x7d0 [ 68.474401][ T8378] ? netlink_attachskb+0x870/0x870 [ 68.479630][ T8378] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.486114][ T8378] ? __phys_addr_symbol+0x2c/0x70 [ 68.491538][ T8378] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 68.497854][ T8378] ? __check_object_size+0x171/0x3f0 [ 68.503339][ T8378] netlink_sendmsg+0x856/0xd90 [ 68.508134][ T8378] ? netlink_unicast+0x7d0/0x7d0 [ 68.513338][ T8378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.519914][ T8378] ? netlink_unicast+0x7d0/0x7d0 [ 68.525245][ T8378] sock_sendmsg+0xcf/0x120 [ 68.530597][ T8378] ____sys_sendmsg+0x6e8/0x810 [ 68.535407][ T8378] ? kernel_sendmsg+0x50/0x50 [ 68.540190][ T8378] ? do_recvmmsg+0x6d0/0x6d0 [ 68.544971][ T8378] ? find_held_lock+0x2d/0x110 [ 68.549991][ T8378] ___sys_sendmsg+0xf3/0x170 [ 68.554916][ T8378] ? sendmsg_copy_msghdr+0x160/0x160 [ 68.560738][ T8378] ? _copy_to_user+0xdc/0x150 [ 68.565447][ T8378] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.572062][ T8378] ? sock_do_ioctl+0x168/0x2d0 [ 68.577104][ T8378] ? compat_ifr_data_ioctl+0x150/0x150 [ 68.582772][ T8378] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 68.588973][ T8378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.595516][ T8378] ? __fget_light+0x215/0x280 [ 68.600288][ T8378] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.606561][ T8378] __sys_sendmsg+0xe5/0x1b0 [ 68.611155][ T8378] ? __sys_sendmsg_sock+0x30/0x30 [ 68.616228][ T8378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 68.622384][ T8378] do_syscall_64+0x2d/0x70 [ 68.627191][ T8378] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.633182][ T8378] RIP: 0033:0x4409b9 [ 68.637287][ T8378] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.657314][ T8378] RSP: 002b:00007fff468f6ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.665823][ T8378] RAX: ffffffffffffffda RBX: 00000000004b73c0 RCX: 00000000004409b9 [ 68.673938][ T8378] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 68.682309][ T8378] RBP: 0000000000000003 R08: 0000000c004004b8 R09: 0000000c004004b8 [ 68.690361][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 68.698356][ T8378] R13: 00007fff468f6f40 R14: 00007fff468f6f2a R15: 00000000004b7430 [ 68.706418][ T8378] Kernel panic - not syncing: panic_on_warn set ... [ 68.713004][ T8378] CPU: 1 PID: 8378 Comm: syz-executor397 Not tainted 5.12.0-rc2-syzkaller #0 [ 68.721779][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.732018][ T8378] Call Trace: [ 68.735294][ T8378] dump_stack+0x141/0x1d7 [ 68.739613][ T8378] panic+0x306/0x73d [ 68.743500][ T8378] ? __warn_printk+0xf3/0xf3 [ 68.748081][ T8378] ? __warn.cold+0x1a/0x44 [ 68.752482][ T8378] ? ieee80211_probe_client+0x6ed/0x7f0 [ 68.758145][ T8378] __warn.cold+0x35/0x44 [ 68.762386][ T8378] ? ieee80211_probe_client+0x6ed/0x7f0 [ 68.767929][ T8378] report_bug+0x1bd/0x210 [ 68.772291][ T8378] handle_bug+0x3c/0x60 [ 68.776450][ T8378] exc_invalid_op+0x14/0x40 [ 68.781215][ T8378] asm_exc_invalid_op+0x12/0x20 [ 68.786077][ T8378] RIP: 0010:ieee80211_probe_client+0x6ed/0x7f0 [ 68.792226][ T8378] Code: f9 48 c7 c2 c0 52 84 8a be 91 02 00 00 48 c7 c7 20 53 84 8a c6 05 07 7c 54 05 01 e8 95 73 63 00 e9 e3 f9 ff ff e8 a3 17 17 f9 <0f> 0b 41 bc ea ff ff ff e9 51 fe ff ff e8 b1 1b 5b f9 e9 de fc ff [ 68.812009][ T8378] RSP: 0018:ffffc90000eff500 EFLAGS: 00010293 [ 68.818073][ T8378] RAX: 0000000000000000 RBX: ffff888016c5c000 RCX: 0000000000000000 [ 68.826031][ T8378] RDX: ffff88801f835340 RSI: ffffffff885c884d RDI: 0000000000000003 [ 68.834035][ T8378] RBP: ffff88801ca4f020 R08: 0000000000000000 R09: 0000000000000000 [ 68.841990][ T8378] R10: ffffffff885c8788 R11: 0000000000000000 R12: ffff888026c68d00 [ 68.849945][ T8378] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc90000eff684 [ 68.857927][ T8378] ? ieee80211_probe_client+0x628/0x7f0 [ 68.863538][ T8378] ? ieee80211_probe_client+0x6ed/0x7f0 [ 68.869098][ T8378] nl80211_probe_client+0x3a9/0xb90 [ 68.874460][ T8378] ? nl80211_probe_mesh_link+0xa10/0xa10 [ 68.880083][ T8378] ? nl80211_pre_doit+0xa4/0x5a0 [ 68.885010][ T8378] genl_family_rcv_msg_doit+0x228/0x320 [ 68.890548][ T8378] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 68.897909][ T8378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.904266][ T8378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.910500][ T8378] ? ns_capable+0xde/0x100 [ 68.914915][ T8378] genl_rcv_msg+0x328/0x580 [ 68.919590][ T8378] ? genl_get_cmd+0x480/0x480 [ 68.924264][ T8378] ? nl80211_probe_mesh_link+0xa10/0xa10 [ 68.929914][ T8378] ? lock_release+0x720/0x720 [ 68.934709][ T8378] netlink_rcv_skb+0x153/0x420 [ 68.939492][ T8378] ? genl_get_cmd+0x480/0x480 [ 68.944252][ T8378] ? netlink_ack+0xaa0/0xaa0 [ 68.948837][ T8378] genl_rcv+0x24/0x40 [ 68.952809][ T8378] netlink_unicast+0x533/0x7d0 [ 68.957580][ T8378] ? netlink_attachskb+0x870/0x870 [ 68.962686][ T8378] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.969088][ T8378] ? __phys_addr_symbol+0x2c/0x70 [ 68.974274][ T8378] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 68.979978][ T8378] ? __check_object_size+0x171/0x3f0 [ 68.985447][ T8378] netlink_sendmsg+0x856/0xd90 [ 68.990460][ T8378] ? netlink_unicast+0x7d0/0x7d0 [ 68.995406][ T8378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.001648][ T8378] ? netlink_unicast+0x7d0/0x7d0 [ 69.006574][ T8378] sock_sendmsg+0xcf/0x120 [ 69.011170][ T8378] ____sys_sendmsg+0x6e8/0x810 [ 69.015918][ T8378] ? kernel_sendmsg+0x50/0x50 [ 69.020575][ T8378] ? do_recvmmsg+0x6d0/0x6d0 [ 69.025151][ T8378] ? find_held_lock+0x2d/0x110 [ 69.029988][ T8378] ___sys_sendmsg+0xf3/0x170 [ 69.034566][ T8378] ? sendmsg_copy_msghdr+0x160/0x160 [ 69.039843][ T8378] ? _copy_to_user+0xdc/0x150 [ 69.044513][ T8378] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.050846][ T8378] ? sock_do_ioctl+0x168/0x2d0 [ 69.055601][ T8378] ? compat_ifr_data_ioctl+0x150/0x150 [ 69.061163][ T8378] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 69.067048][ T8378] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.073275][ T8378] ? __fget_light+0x215/0x280 [ 69.077953][ T8378] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.084477][ T8378] __sys_sendmsg+0xe5/0x1b0 [ 69.088977][ T8378] ? __sys_sendmsg_sock+0x30/0x30 [ 69.094006][ T8378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 69.099899][ T8378] do_syscall_64+0x2d/0x70 [ 69.104321][ T8378] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.110201][ T8378] RIP: 0033:0x4409b9 [ 69.114101][ T8378] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 69.135063][ T8378] RSP: 002b:00007fff468f6ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.143489][ T8378] RAX: ffffffffffffffda RBX: 00000000004b73c0 RCX: 00000000004409b9 [ 69.151448][ T8378] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 69.159509][ T8378] RBP: 0000000000000003 R08: 0000000c004004b8 R09: 0000000c004004b8 [ 69.167639][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 69.175769][ T8378] R13: 00007fff468f6f40 R14: 00007fff468f6f2a R15: 00000000004b7430 [ 69.188009][ T8378] Kernel Offset: disabled [ 69.192439][ T8378] Rebooting in 86400 seconds..