[ OK ] Started Getty on tty2. Starting Load/Save RF Kill Switch Status... [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.93' (ECDSA) to the list of known hosts. syzkaller login: [ 64.456429][ T6899] IPVS: ftp: loaded support on port[0] = 21 [ 64.528718][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.540301][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 64.584014][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.603760][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.612527][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.623813][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.666379][ T6941] ------------[ cut here ]------------ [ 64.672586][ T6941] WARNING: CPU: 1 PID: 6941 at net/mac80211/cfg.c:3534 ieee80211_probe_client+0x6ed/0x7f0 [ 64.682564][ T6941] Kernel panic - not syncing: panic_on_warn set ... [ 64.689166][ T6941] CPU: 1 PID: 6941 Comm: syz-executor540 Not tainted 5.9.0-rc8-syzkaller #0 [ 64.697839][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.707875][ T6941] Call Trace: [ 64.711160][ T6941] dump_stack+0x198/0x1fd [ 64.715533][ T6941] panic+0x382/0x7fb [ 64.719416][ T6941] ? __warn_printk+0xf3/0xf3 [ 64.723991][ T6941] ? printk+0xba/0xed [ 64.727954][ T6941] ? log_store.cold+0x16/0x16 [ 64.732613][ T6941] ? __warn.cold+0x5/0x4b [ 64.736955][ T6941] ? __warn+0xd6/0x1f2 [ 64.741031][ T6941] ? ieee80211_probe_client+0x6ed/0x7f0 [ 64.746577][ T6941] __warn.cold+0x20/0x4b [ 64.750819][ T6941] ? ieee80211_probe_client+0x6ed/0x7f0 [ 64.756386][ T6941] report_bug+0x1bd/0x210 [ 64.760715][ T6941] handle_bug+0x38/0x90 [ 64.764867][ T6941] exc_invalid_op+0x14/0x40 [ 64.769354][ T6941] asm_exc_invalid_op+0x12/0x20 [ 64.774190][ T6941] RIP: 0010:ieee80211_probe_client+0x6ed/0x7f0 [ 64.780341][ T6941] Code: f9 48 c7 c2 20 37 5f 89 be 7b 02 00 00 48 c7 c7 80 37 5f 89 c6 05 70 58 8c 03 01 e8 f2 0e 94 f9 e9 e3 f9 ff ff e8 c3 ef ad f9 <0f> 0b 41 bc ea ff ff ff e9 51 fe ff ff e8 81 c8 ee f9 e9 de fc ff [ 64.799928][ T6941] RSP: 0018:ffffc900053ef5b8 EFLAGS: 00010293 [ 64.805975][ T6941] RAX: 0000000000000000 RBX: ffff8880937ac000 RCX: ffffffff87c84e88 [ 64.813931][ T6941] RDX: ffff8880a419a580 RSI: ffffffff87c84f4d RDI: 0000000000000005 [ 64.821906][ T6941] RBP: ffff8880a22cec20 R08: 0000000000000001 R09: ffffffff8d0c39e7 [ 64.829947][ T6941] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888089060c80 [ 64.837913][ T6941] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 64.845900][ T6941] ? ieee80211_probe_client+0x628/0x7f0 [ 64.851447][ T6941] ? ieee80211_probe_client+0x6ed/0x7f0 [ 64.856983][ T6941] ? ieee80211_probe_client+0x6ed/0x7f0 [ 64.862606][ T6941] nl80211_probe_client+0x3b7/0xc80 [ 64.867797][ T6941] ? nl80211_probe_mesh_link+0xa60/0xa60 [ 64.873505][ T6941] ? nl80211_pre_doit+0xa2/0x630 [ 64.878450][ T6941] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 64.885259][ T6941] genl_rcv_msg+0x61d/0x980 [ 64.889806][ T6941] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 64.896746][ T6941] ? lock_release+0x8f0/0x8f0 [ 64.901419][ T6941] netlink_rcv_skb+0x15a/0x430 [ 64.906177][ T6941] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 64.913112][ T6941] ? netlink_ack+0xa10/0xa10 [ 64.917715][ T6941] ? __kmalloc_node_track_caller+0x38/0x60 [ 64.923509][ T6941] genl_rcv+0x24/0x40 [ 64.927474][ T6941] netlink_unicast+0x533/0x7d0 [ 64.932239][ T6941] ? netlink_attachskb+0x810/0x810 [ 64.937346][ T6941] ? __phys_addr_symbol+0x2c/0x70 [ 64.942354][ T6941] ? __check_object_size+0x171/0x3e4 [ 64.947624][ T6941] netlink_sendmsg+0x856/0xd90 [ 64.952377][ T6941] ? netlink_unicast+0x7d0/0x7d0 [ 64.957304][ T6941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.962589][ T6941] ? netlink_unicast+0x7d0/0x7d0 [ 64.967510][ T6941] sock_sendmsg+0xcf/0x120 [ 64.971909][ T6941] ____sys_sendmsg+0x6e8/0x810 [ 64.976658][ T6941] ? kernel_sendmsg+0x50/0x50 [ 64.981321][ T6941] ? do_recvmmsg+0x6d0/0x6d0 [ 64.985898][ T6941] ? lock_is_held_type+0xbb/0xf0 [ 64.990858][ T6941] ? __lock_acquire+0xb92/0x5780 [ 64.995811][ T6941] ___sys_sendmsg+0xf3/0x170 [ 65.000518][ T6941] ? sendmsg_copy_msghdr+0x160/0x160 [ 65.005791][ T6941] ? lockdep_init_map_waits+0x26a/0x8a0 [ 65.011354][ T6941] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 65.017351][ T6941] ? percpu_counter_add_batch+0x126/0x180 [ 65.023085][ T6941] ? lock_is_held_type+0xbb/0xf0 [ 65.028036][ T6941] ? find_held_lock+0x2d/0x110 [ 65.032816][ T6941] ? __fd_install+0x1b4/0x600 [ 65.037486][ T6941] ? lock_downgrade+0x830/0x830 [ 65.042329][ T6941] ? __fget_light+0x215/0x280 [ 65.047099][ T6941] __sys_sendmsg+0xe5/0x1b0 [ 65.051605][ T6941] ? __sys_sendmsg_sock+0xb0/0xb0 [ 65.056628][ T6941] ? check_preemption_disabled+0x50/0x130 [ 65.062351][ T6941] ? syscall_enter_from_user_mode+0x1d/0x60 [ 65.068250][ T6941] do_syscall_64+0x2d/0x70 [ 65.072684][ T6941] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.078583][ T6941] RIP: 0033:0x442169 [ 65.082478][ T6941] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.102083][ T6941] RSP: 002b:00007ffc7f9708f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.110510][ T6941] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000442169 [ 65.118561][ T6941] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 65.126513][ T6941] RBP: 000000306e616c77 R08: 0000002000000000 R09: 0000002000000000 [ 65.134465][ T6941] R10: 0000002000000000 R11: 0000000000000246 R12: 000000000000fc89 [ 65.142428][ T6941] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 65.151734][ T6941] Kernel Offset: disabled [ 65.156141][ T6941] Rebooting in 86400 seconds..