[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. syzkaller login: [ 58.901288][ T6850] IPVS: ftp: loaded support on port[0] = 21 [ 59.004062][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.012026][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.037566][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 59.062580][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.076034][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.085454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.099288][ T6850] ================================================================================ [ 59.109039][ T6850] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9 [ 59.117405][ T6850] index 255 is out of range for type 'ieee80211_key *[8]' [ 59.124607][ T6850] CPU: 0 PID: 6850 Comm: syz-executor698 Not tainted 5.9.0-rc6-syzkaller #0 [ 59.133318][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.143394][ T6850] Call Trace: [ 59.146673][ T6850] dump_stack+0x198/0x1fd [ 59.151018][ T6850] ubsan_epilogue+0xb/0x5a [ 59.155417][ T6850] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 59.161555][ T6850] ? lock_is_held_type+0xbb/0xf0 [ 59.166492][ T6850] ieee80211_del_key+0x428/0x440 [ 59.171427][ T6850] nl80211_del_key+0x493/0x980 [ 59.176190][ T6850] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 59.182084][ T6850] ? nl80211_pre_doit+0xa2/0x630 [ 59.187007][ T6850] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 59.193783][ T6850] genl_rcv_msg+0x61d/0x980 [ 59.198297][ T6850] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 59.205246][ T6850] ? lock_release+0x8f0/0x8f0 [ 59.209927][ T6850] netlink_rcv_skb+0x15a/0x430 [ 59.214682][ T6850] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 59.221616][ T6850] ? netlink_ack+0xa10/0xa10 [ 59.226203][ T6850] ? __kmalloc_node_track_caller+0x38/0x60 [ 59.232007][ T6850] genl_rcv+0x24/0x40 [ 59.236158][ T6850] netlink_unicast+0x533/0x7d0 [ 59.240909][ T6850] ? netlink_attachskb+0x810/0x810 [ 59.246005][ T6850] ? __phys_addr_symbol+0x2c/0x70 [ 59.251019][ T6850] ? __check_object_size+0x171/0x3e4 [ 59.256300][ T6850] netlink_sendmsg+0x856/0xd90 [ 59.261091][ T6850] ? netlink_unicast+0x7d0/0x7d0 [ 59.266018][ T6850] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 59.271286][ T6850] ? netlink_unicast+0x7d0/0x7d0 [ 59.276208][ T6850] sock_sendmsg+0xcf/0x120 [ 59.280612][ T6850] ____sys_sendmsg+0x6e8/0x810 [ 59.285377][ T6850] ? kernel_sendmsg+0x50/0x50 [ 59.290035][ T6850] ? do_recvmmsg+0x6d0/0x6d0 [ 59.294614][ T6850] ? lock_downgrade+0x830/0x830 [ 59.299446][ T6850] ? lock_downgrade+0x830/0x830 [ 59.304297][ T6850] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 59.310267][ T6850] ___sys_sendmsg+0xf3/0x170 [ 59.314847][ T6850] ? sendmsg_copy_msghdr+0x160/0x160 [ 59.320140][ T6850] ? lock_downgrade+0x830/0x830 [ 59.324982][ T6850] ? __might_fault+0x190/0x1d0 [ 59.329723][ T6850] ? compat_sock_ioctl+0x17c/0x2140 [ 59.334904][ T6850] ? __fget_light+0x215/0x280 [ 59.339565][ T6850] __sys_sendmsg+0xe5/0x1b0 [ 59.344059][ T6850] ? __sys_sendmsg_sock+0xb0/0xb0 [ 59.349074][ T6850] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 59.355642][ T6850] ? check_preemption_disabled+0x50/0x130 [ 59.361350][ T6850] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 59.367920][ T6850] __do_fast_syscall_32+0x60/0x90 [ 59.372932][ T6850] do_fast_syscall_32+0x2f/0x70 [ 59.377774][ T6850] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 59.384082][ T6850] RIP: 0023:0xf7ff9549 [ 59.388155][ T6850] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 59.407752][ T6850] RSP: 002b:00000000fff7606c EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 59.416156][ T6850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 59.424128][ T6850] RDX: 0000000000000000 RSI: 00000000f7ff928c RDI: 0000000000000004 [ 59.432091][ T6850] RBP: 00000000094f8018 R08: 0000000000000000 R09: 0000000000000000 [ 59.440056][ T6850] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 59.448015][ T6850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.457457][ T6850] ================================================================================ [ 59.467191][ T6850] Kernel panic - not syncing: panic_on_warn set ... [ 59.473797][ T6850] CPU: 0 PID: 6850 Comm: syz-executor698 Not tainted 5.9.0-rc6-syzkaller #0 [ 59.482465][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.492533][ T6850] Call Trace: [ 59.495816][ T6850] dump_stack+0x198/0x1fd [ 59.500140][ T6850] panic+0x382/0x7fb [ 59.504040][ T6850] ? __warn_printk+0xf3/0xf3 [ 59.508629][ T6850] ? ubsan_epilogue+0x3e/0x5a [ 59.513287][ T6850] ? ubsan_epilogue+0x35/0x5a [ 59.517948][ T6850] ubsan_epilogue+0x54/0x5a [ 59.522442][ T6850] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 59.528607][ T6850] ? lock_is_held_type+0xbb/0xf0 [ 59.533532][ T6850] ieee80211_del_key+0x428/0x440 [ 59.538473][ T6850] nl80211_del_key+0x493/0x980 [ 59.543239][ T6850] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 59.549171][ T6850] ? nl80211_pre_doit+0xa2/0x630 [ 59.554138][ T6850] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 59.560896][ T6850] genl_rcv_msg+0x61d/0x980 [ 59.565412][ T6850] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 59.572351][ T6850] ? lock_release+0x8f0/0x8f0 [ 59.577018][ T6850] netlink_rcv_skb+0x15a/0x430 [ 59.581767][ T6850] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 59.588719][ T6850] ? netlink_ack+0xa10/0xa10 [ 59.593300][ T6850] ? __kmalloc_node_track_caller+0x38/0x60 [ 59.599111][ T6850] genl_rcv+0x24/0x40 [ 59.603084][ T6850] netlink_unicast+0x533/0x7d0 [ 59.607836][ T6850] ? netlink_attachskb+0x810/0x810 [ 59.612941][ T6850] ? __phys_addr_symbol+0x2c/0x70 [ 59.617968][ T6850] ? __check_object_size+0x171/0x3e4 [ 59.623240][ T6850] netlink_sendmsg+0x856/0xd90 [ 59.628010][ T6850] ? netlink_unicast+0x7d0/0x7d0 [ 59.632961][ T6850] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 59.638249][ T6850] ? netlink_unicast+0x7d0/0x7d0 [ 59.643186][ T6850] sock_sendmsg+0xcf/0x120 [ 59.647599][ T6850] ____sys_sendmsg+0x6e8/0x810 [ 59.652364][ T6850] ? kernel_sendmsg+0x50/0x50 [ 59.657027][ T6850] ? do_recvmmsg+0x6d0/0x6d0 [ 59.661630][ T6850] ? lock_downgrade+0x830/0x830 [ 59.666468][ T6850] ? lock_downgrade+0x830/0x830 [ 59.671299][ T6850] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 59.677266][ T6850] ___sys_sendmsg+0xf3/0x170 [ 59.681841][ T6850] ? sendmsg_copy_msghdr+0x160/0x160 [ 59.687121][ T6850] ? lock_downgrade+0x830/0x830 [ 59.691961][ T6850] ? __might_fault+0x190/0x1d0 [ 59.696719][ T6850] ? compat_sock_ioctl+0x17c/0x2140 [ 59.701980][ T6850] ? __fget_light+0x215/0x280 [ 59.706652][ T6850] __sys_sendmsg+0xe5/0x1b0 [ 59.711170][ T6850] ? __sys_sendmsg_sock+0xb0/0xb0 [ 59.716187][ T6850] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 59.722756][ T6850] ? check_preemption_disabled+0x50/0x130 [ 59.728463][ T6850] ? syscall_enter_from_user_mode_prepare+0x13/0x30 [ 59.735031][ T6850] __do_fast_syscall_32+0x60/0x90 [ 59.740032][ T6850] do_fast_syscall_32+0x2f/0x70 [ 59.744871][ T6850] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 59.751172][ T6850] RIP: 0023:0xf7ff9549 [ 59.755228][ T6850] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 59.774823][ T6850] RSP: 002b:00000000fff7606c EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 59.783221][ T6850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 59.791176][ T6850] RDX: 0000000000000000 RSI: 00000000f7ff928c RDI: 0000000000000004 [ 59.799131][ T6850] RBP: 00000000094f8018 R08: 0000000000000000 R09: 0000000000000000 [ 59.807084][ T6850] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 59.815038][ T6850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.824294][ T6850] Kernel Offset: disabled [ 59.828728][ T6850] Rebooting in 86400 seconds..