Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.87' (ECDSA) to the list of known hosts. syzkaller login: [ 72.106990][ T8412] IPVS: ftp: loaded support on port[0] = 21 [ 72.203139][ T237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.222389][ T237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 72.249945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.272267][ T237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.281004][ T237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.295363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.350453][ T8453] ------------[ cut here ]------------ [ 72.356062][ T8453] WARNING: CPU: 1 PID: 8453 at net/wireless/sme.c:532 cfg80211_connect+0x1409/0x2040 [ 72.366303][ T8453] Modules linked in: [ 72.370689][ T8453] CPU: 0 PID: 8453 Comm: syz-executor891 Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 72.381864][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.381999][ T8453] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 72.399131][ T8453] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 77 65 22 f9 <0f> 0b e8 70 65 22 f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 72.418904][ T8453] RSP: 0018:ffffc9000160f298 EFLAGS: 00010293 [ 72.425016][ T8453] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.433257][ T8453] RDX: ffff888024050000 RSI: ffffffff8851c359 RDI: ffffffff8a86c6c0 [ 72.441424][ T8453] RBP: ffff8880146d4d32 R08: 0000000000000001 R09: ffff8880146d4d37 [ 72.449594][ T8453] R10: ffffed10028da9a6 R11: 0000000000000000 R12: ffffc9000160f438 [ 72.457717][ T8453] R13: ffff8880146d4c10 R14: ffff8880146d4d58 R15: ffff8880146d4d60 [ 72.465725][ T8453] FS: 00000000008cc300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 72.474825][ T8453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.481557][ T8453] CR2: 0000000020000080 CR3: 0000000013f5e000 CR4: 00000000001506e0 [ 72.490209][ T8453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.499258][ T8453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.507857][ T8453] Call Trace: [ 72.511225][ T8453] ? nl80211_pre_doit+0x3ce/0x620 [ 72.516286][ T8453] ? __cfg80211_disconnected+0x1470/0x1470 [ 72.522256][ T8453] ? memset+0x20/0x40 [ 72.526267][ T8453] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 72.532078][ T8453] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 72.538008][ T8453] nl80211_connect+0x1647/0x22a0 [ 72.542989][ T8453] ? lock_release+0x720/0x720 [ 72.547855][ T8453] ? nl80211_parse_connkeys+0xa50/0xa50 [ 72.553458][ T8453] ? __mutex_unlock_slowpath+0xe2/0x610 [ 72.559173][ T8453] ? nl80211_pre_doit+0xa6/0x620 [ 72.564148][ T8453] genl_family_rcv_msg_doit+0x228/0x320 [ 72.570154][ T8453] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 72.577662][ T8453] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.583960][ T8453] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.590758][ T8453] ? ns_capable+0xde/0x100 [ 72.595223][ T8453] genl_rcv_msg+0x328/0x580 [ 72.599951][ T8453] ? genl_get_cmd+0x480/0x480 [ 72.604745][ T8453] ? nl80211_parse_connkeys+0xa50/0xa50 [ 72.611926][ T8453] ? lock_release+0x720/0x720 [ 72.619982][ T8453] netlink_rcv_skb+0x153/0x420 [ 72.624854][ T8453] ? genl_get_cmd+0x480/0x480 [ 72.630674][ T8453] ? netlink_ack+0xaa0/0xaa0 [ 72.635337][ T8453] genl_rcv+0x24/0x40 [ 72.639437][ T8453] netlink_unicast+0x533/0x7d0 [ 72.644355][ T8453] ? netlink_attachskb+0x870/0x870 [ 72.649659][ T8453] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.655938][ T8453] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.662655][ T8453] ? __phys_addr_symbol+0x2c/0x70 [ 72.667845][ T8453] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 72.673915][ T8453] ? __check_object_size+0x171/0x3f0 [ 72.679343][ T8453] netlink_sendmsg+0x856/0xd90 [ 72.684368][ T8453] ? netlink_unicast+0x7d0/0x7d0 [ 72.689446][ T8453] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.695733][ T8453] ? netlink_unicast+0x7d0/0x7d0 [ 72.701278][ T8453] sock_sendmsg+0xcf/0x120 [ 72.705828][ T8453] ____sys_sendmsg+0x6e8/0x810 [ 72.710763][ T8453] ? kernel_sendmsg+0x50/0x50 [ 72.715472][ T8453] ? do_recvmmsg+0x6d0/0x6d0 [ 72.721985][ T8453] ? lock_chain_count+0x20/0x20 [ 72.726890][ T8453] ? find_held_lock+0x2d/0x110 [ 72.731788][ T8453] ___sys_sendmsg+0xf3/0x170 [ 72.736411][ T8453] ? sendmsg_copy_msghdr+0x160/0x160 [ 72.743293][ T8453] ? __lock_acquire+0x16a7/0x5230 [ 72.748479][ T8453] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.754572][ T8453] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.760938][ T8453] ? __fget_light+0x215/0x280 [ 72.765644][ T8453] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.772057][ T8453] __sys_sendmsg+0xe5/0x1b0 [ 72.776780][ T8453] ? __sys_sendmsg_sock+0x30/0x30 [ 72.781913][ T8453] ? __context_tracking_enter+0xef/0x100 [ 72.787664][ T8453] ? syscall_enter_from_user_mode+0x27/0x70 [ 72.793595][ T8453] do_syscall_64+0x2d/0x70 [ 72.798352][ T8453] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.804398][ T8453] RIP: 0033:0x441089 [ 72.808421][ T8453] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.828300][ T8453] RSP: 002b:00007fff6b2cf428 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.836932][ T8453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 72.845375][ T8453] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 72.853705][ T8453] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 72.861821][ T8453] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000011a7e [ 72.870861][ T8453] R13: 00007fff6b2cf490 R14: 00007fff6b2cf480 R15: 00007fff6b2cf44c [ 72.879220][ T8453] Kernel panic - not syncing: panic_on_warn set ... [ 72.885818][ T8453] CPU: 0 PID: 8453 Comm: syz-executor891 Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 72.895880][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.905978][ T8453] Call Trace: [ 72.909670][ T8453] dump_stack+0x141/0x1d7 [ 72.914011][ T8453] panic+0x306/0x73d [ 72.917908][ T8453] ? __warn_printk+0xf3/0xf3 [ 72.922545][ T8453] ? __warn.cold+0x1a/0x44 [ 72.926966][ T8453] ? cfg80211_connect+0x1409/0x2040 [ 72.932178][ T8453] __warn.cold+0x35/0x44 [ 72.936457][ T8453] ? cfg80211_connect+0x1409/0x2040 [ 72.941698][ T8453] report_bug+0x1bd/0x210 [ 72.946247][ T8453] handle_bug+0x3c/0x60 [ 72.950471][ T8453] exc_invalid_op+0x14/0x40 [ 72.954979][ T8453] asm_exc_invalid_op+0x12/0x20 [ 72.959839][ T8453] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 72.965648][ T8453] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 77 65 22 f9 <0f> 0b e8 70 65 22 f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 72.985261][ T8453] RSP: 0018:ffffc9000160f298 EFLAGS: 00010293 [ 72.991351][ T8453] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.999334][ T8453] RDX: ffff888024050000 RSI: ffffffff8851c359 RDI: ffffffff8a86c6c0 [ 73.007319][ T8453] RBP: ffff8880146d4d32 R08: 0000000000000001 R09: ffff8880146d4d37 [ 73.015288][ T8453] R10: ffffed10028da9a6 R11: 0000000000000000 R12: ffffc9000160f438 [ 73.023888][ T8453] R13: ffff8880146d4c10 R14: ffff8880146d4d58 R15: ffff8880146d4d60 [ 73.031870][ T8453] ? cfg80211_connect+0x1409/0x2040 [ 73.037080][ T8453] ? cfg80211_connect+0x1409/0x2040 [ 73.042287][ T8453] ? nl80211_pre_doit+0x3ce/0x620 [ 73.047329][ T8453] ? __cfg80211_disconnected+0x1470/0x1470 [ 73.053244][ T8453] ? memset+0x20/0x40 [ 73.057255][ T8453] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 73.062982][ T8453] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 73.068806][ T8453] nl80211_connect+0x1647/0x22a0 [ 73.073754][ T8453] ? lock_release+0x720/0x720 [ 73.078453][ T8453] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.084001][ T8453] ? __mutex_unlock_slowpath+0xe2/0x610 [ 73.089702][ T8453] ? nl80211_pre_doit+0xa6/0x620 [ 73.094657][ T8453] genl_family_rcv_msg_doit+0x228/0x320 [ 73.100204][ T8453] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 73.107588][ T8453] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.113852][ T8453] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.120102][ T8453] ? ns_capable+0xde/0x100 [ 73.124559][ T8453] genl_rcv_msg+0x328/0x580 [ 73.129071][ T8453] ? genl_get_cmd+0x480/0x480 [ 73.133761][ T8453] ? nl80211_parse_connkeys+0xa50/0xa50 [ 73.139357][ T8453] ? lock_release+0x720/0x720 [ 73.144086][ T8453] netlink_rcv_skb+0x153/0x420 [ 73.148865][ T8453] ? genl_get_cmd+0x480/0x480 [ 73.153541][ T8453] ? netlink_ack+0xaa0/0xaa0 [ 73.158135][ T8453] genl_rcv+0x24/0x40 [ 73.162118][ T8453] netlink_unicast+0x533/0x7d0 [ 73.166881][ T8453] ? netlink_attachskb+0x870/0x870 [ 73.171995][ T8453] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.178236][ T8453] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.184572][ T8453] ? __phys_addr_symbol+0x2c/0x70 [ 73.189713][ T8453] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 73.195438][ T8453] ? __check_object_size+0x171/0x3f0 [ 73.200881][ T8453] netlink_sendmsg+0x856/0xd90 [ 73.205675][ T8453] ? netlink_unicast+0x7d0/0x7d0 [ 73.210619][ T8453] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.216866][ T8453] ? netlink_unicast+0x7d0/0x7d0 [ 73.221803][ T8453] sock_sendmsg+0xcf/0x120 [ 73.226230][ T8453] ____sys_sendmsg+0x6e8/0x810 [ 73.230994][ T8453] ? kernel_sendmsg+0x50/0x50 [ 73.235665][ T8453] ? do_recvmmsg+0x6d0/0x6d0 [ 73.240257][ T8453] ? lock_chain_count+0x20/0x20 [ 73.245143][ T8453] ? find_held_lock+0x2d/0x110 [ 73.249937][ T8453] ___sys_sendmsg+0xf3/0x170 [ 73.254543][ T8453] ? sendmsg_copy_msghdr+0x160/0x160 [ 73.259829][ T8453] ? __lock_acquire+0x16a7/0x5230 [ 73.264858][ T8453] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.270840][ T8453] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.277195][ T8453] ? __fget_light+0x215/0x280 [ 73.281878][ T8453] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 73.288120][ T8453] __sys_sendmsg+0xe5/0x1b0 [ 73.292640][ T8453] ? __sys_sendmsg_sock+0x30/0x30 [ 73.297795][ T8453] ? __context_tracking_enter+0xef/0x100 [ 73.303461][ T8453] ? syscall_enter_from_user_mode+0x27/0x70 [ 73.309478][ T8453] do_syscall_64+0x2d/0x70 [ 73.314108][ T8453] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.320038][ T8453] RIP: 0033:0x441089 [ 73.323935][ T8453] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.343542][ T8453] RSP: 002b:00007fff6b2cf428 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.351997][ T8453] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 73.359972][ T8453] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 73.367953][ T8453] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 73.375922][ T8453] R10: 0000000c00000000 R11: 0000000000000246 R12: 0000000000011a7e [ 73.383904][ T8453] R13: 00007fff6b2cf490 R14: 00007fff6b2cf480 R15: 00007fff6b2cf44c [ 73.392708][ T8453] Kernel Offset: disabled [ 73.397136][ T8453] Rebooting in 86400 seconds..