[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts. syzkaller login: [ 78.821704][ T6870] IPVS: ftp: loaded support on port[0] = 21 [ 78.888488][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.899509][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.926816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 78.946403][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.955526][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.966125][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.991787][ T6910] ================================================================================ [ 79.001450][ T6910] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9 [ 79.010989][ T6910] index 255 is out of range for type 'ieee80211_key *[8]' [ 79.020093][ T6910] CPU: 1 PID: 6910 Comm: syz-executor016 Not tainted 5.9.0-rc6-syzkaller #0 [ 79.028872][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.038953][ T6910] Call Trace: [ 79.042267][ T6910] dump_stack+0x198/0x1fd [ 79.046637][ T6910] ubsan_epilogue+0xb/0x5a [ 79.051096][ T6910] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 79.057281][ T6910] ? lock_is_held_type+0xbb/0xf0 [ 79.062247][ T6910] ieee80211_del_key+0x428/0x440 [ 79.067205][ T6910] nl80211_del_key+0x493/0x980 [ 79.071981][ T6910] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 79.077872][ T6910] ? nl80211_pre_doit+0xa2/0x630 [ 79.082801][ T6910] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 79.089567][ T6910] genl_rcv_msg+0x61d/0x980 [ 79.094071][ T6910] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 79.101005][ T6910] ? lock_release+0x8f0/0x8f0 [ 79.105692][ T6910] netlink_rcv_skb+0x15a/0x430 [ 79.110448][ T6910] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 79.117379][ T6910] ? netlink_ack+0xa10/0xa10 [ 79.121966][ T6910] ? __kmalloc_node_track_caller+0x38/0x60 [ 79.127770][ T6910] genl_rcv+0x24/0x40 [ 79.131783][ T6910] netlink_unicast+0x533/0x7d0 [ 79.136572][ T6910] ? netlink_attachskb+0x810/0x810 [ 79.141671][ T6910] ? __phys_addr_symbol+0x2c/0x70 [ 79.146697][ T6910] ? __check_object_size+0x171/0x3e4 [ 79.151973][ T6910] netlink_sendmsg+0x856/0xd90 [ 79.156739][ T6910] ? netlink_unicast+0x7d0/0x7d0 [ 79.161678][ T6910] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 79.166966][ T6910] ? netlink_unicast+0x7d0/0x7d0 [ 79.171904][ T6910] sock_sendmsg+0xcf/0x120 [ 79.176319][ T6910] ____sys_sendmsg+0x6e8/0x810 [ 79.181087][ T6910] ? kernel_sendmsg+0x50/0x50 [ 79.185745][ T6910] ? do_recvmmsg+0x6d0/0x6d0 [ 79.190320][ T6910] ? lock_is_held_type+0xbb/0xf0 [ 79.195263][ T6910] ? find_held_lock+0x2d/0x110 [ 79.200098][ T6910] ? __might_fault+0x11f/0x1d0 [ 79.204865][ T6910] ___sys_sendmsg+0xf3/0x170 [ 79.209452][ T6910] ? sendmsg_copy_msghdr+0x160/0x160 [ 79.214728][ T6910] ? __might_fault+0x190/0x1d0 [ 79.219472][ T6910] ? _copy_to_user+0x126/0x160 [ 79.224220][ T6910] ? sock_do_ioctl+0x168/0x2d0 [ 79.228966][ T6910] ? compat_ifr_data_ioctl+0x150/0x150 [ 79.234438][ T6910] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 79.240361][ T6910] ? __fget_light+0x215/0x280 [ 79.245026][ T6910] __sys_sendmsg+0xe5/0x1b0 [ 79.249529][ T6910] ? __sys_sendmsg_sock+0xb0/0xb0 [ 79.254548][ T6910] ? lock_is_held_type+0xbb/0xf0 [ 79.259478][ T6910] ? check_preemption_disabled+0x50/0x130 [ 79.265548][ T6910] ? syscall_enter_from_user_mode+0x1d/0x60 [ 79.271435][ T6910] do_syscall_64+0x2d/0x70 [ 79.275837][ T6910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 79.281741][ T6910] RIP: 0033:0x441f19 [ 79.285653][ T6910] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 79.305285][ T6910] RSP: 002b:00007ffc90b8b518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.313703][ T6910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441f19 [ 79.321672][ T6910] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 79.329651][ T6910] RBP: 0000000000000000 R08: 0000002000000000 R09: 0000002000000000 [ 79.337642][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 79.345632][ T6910] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 79.358325][ T6910] ================================================================================ [ 79.368492][ T6910] Kernel panic - not syncing: panic_on_warn set ... [ 79.375118][ T6910] CPU: 1 PID: 6910 Comm: syz-executor016 Not tainted 5.9.0-rc6-syzkaller #0 [ 79.383823][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.393889][ T6910] Call Trace: [ 79.397267][ T6910] dump_stack+0x198/0x1fd [ 79.401604][ T6910] panic+0x382/0x7fb [ 79.405506][ T6910] ? __warn_printk+0xf3/0xf3 [ 79.410102][ T6910] ? ubsan_epilogue+0x3e/0x5a [ 79.414849][ T6910] ? ubsan_epilogue+0x35/0x5a [ 79.419539][ T6910] ubsan_epilogue+0x54/0x5a [ 79.424071][ T6910] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 79.430330][ T6910] ? lock_is_held_type+0xbb/0xf0 [ 79.435268][ T6910] ieee80211_del_key+0x428/0x440 [ 79.440210][ T6910] nl80211_del_key+0x493/0x980 [ 79.444978][ T6910] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 79.450888][ T6910] ? nl80211_pre_doit+0xa2/0x630 [ 79.455836][ T6910] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 79.462603][ T6910] genl_rcv_msg+0x61d/0x980 [ 79.467106][ T6910] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 79.474058][ T6910] ? lock_release+0x8f0/0x8f0 [ 79.478751][ T6910] netlink_rcv_skb+0x15a/0x430 [ 79.483535][ T6910] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 79.490517][ T6910] ? netlink_ack+0xa10/0xa10 [ 79.495116][ T6910] ? __kmalloc_node_track_caller+0x38/0x60 [ 79.500945][ T6910] genl_rcv+0x24/0x40 [ 79.504937][ T6910] netlink_unicast+0x533/0x7d0 [ 79.509721][ T6910] ? netlink_attachskb+0x810/0x810 [ 79.514830][ T6910] ? __phys_addr_symbol+0x2c/0x70 [ 79.519864][ T6910] ? __check_object_size+0x171/0x3e4 [ 79.525159][ T6910] netlink_sendmsg+0x856/0xd90 [ 79.529939][ T6910] ? netlink_unicast+0x7d0/0x7d0 [ 79.534896][ T6910] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 79.540217][ T6910] ? netlink_unicast+0x7d0/0x7d0 [ 79.545161][ T6910] sock_sendmsg+0xcf/0x120 [ 79.549576][ T6910] ____sys_sendmsg+0x6e8/0x810 [ 79.554338][ T6910] ? kernel_sendmsg+0x50/0x50 [ 79.559097][ T6910] ? do_recvmmsg+0x6d0/0x6d0 [ 79.563700][ T6910] ? lock_is_held_type+0xbb/0xf0 [ 79.568652][ T6910] ? find_held_lock+0x2d/0x110 [ 79.573412][ T6910] ? __might_fault+0x11f/0x1d0 [ 79.578175][ T6910] ___sys_sendmsg+0xf3/0x170 [ 79.582760][ T6910] ? sendmsg_copy_msghdr+0x160/0x160 [ 79.588047][ T6910] ? __might_fault+0x190/0x1d0 [ 79.592828][ T6910] ? _copy_to_user+0x126/0x160 [ 79.597612][ T6910] ? sock_do_ioctl+0x168/0x2d0 [ 79.602404][ T6910] ? compat_ifr_data_ioctl+0x150/0x150 [ 79.607922][ T6910] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 79.613913][ T6910] ? __fget_light+0x215/0x280 [ 79.618600][ T6910] __sys_sendmsg+0xe5/0x1b0 [ 79.623147][ T6910] ? __sys_sendmsg_sock+0xb0/0xb0 [ 79.628220][ T6910] ? lock_is_held_type+0xbb/0xf0 [ 79.633173][ T6910] ? check_preemption_disabled+0x50/0x130 [ 79.638928][ T6910] ? syscall_enter_from_user_mode+0x1d/0x60 [ 79.644831][ T6910] do_syscall_64+0x2d/0x70 [ 79.649249][ T6910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 79.655213][ T6910] RIP: 0033:0x441f19 [ 79.660180][ T6910] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 79.679805][ T6910] RSP: 002b:00007ffc90b8b518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.688213][ T6910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441f19 [ 79.696206][ T6910] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 79.704222][ T6910] RBP: 0000000000000000 R08: 0000002000000000 R09: 0000002000000000 [ 79.712193][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 79.720160][ T6910] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 79.729132][ T6910] Kernel Offset: disabled [ 79.733562][ T6910] Rebooting in 86400 seconds..