[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.90' (ECDSA) to the list of known hosts. syzkaller login: [ 62.811205][ T6873] IPVS: ftp: loaded support on port[0] = 21 [ 62.907036][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.921017][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.940617][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 62.962357][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.970403][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.979624][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.003838][ T6873] ================================================================================ [ 63.014695][ T6873] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9 [ 63.023820][ T6873] index 255 is out of range for type 'ieee80211_key *[8]' [ 63.030947][ T6873] CPU: 1 PID: 6873 Comm: syz-executor483 Not tainted 5.9.0-rc3-syzkaller #0 [ 63.039641][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.049782][ T6873] Call Trace: [ 63.053111][ T6873] dump_stack+0x198/0x1fd [ 63.057431][ T6873] ubsan_epilogue+0xb/0x5a [ 63.061832][ T6873] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 63.067976][ T6873] ? lock_is_held_type+0xbb/0xf0 [ 63.072916][ T6873] ieee80211_del_key+0x428/0x440 [ 63.077868][ T6873] nl80211_del_key+0x493/0x980 [ 63.082612][ T6873] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 63.088495][ T6873] ? nl80211_pre_doit+0xa2/0x630 [ 63.093415][ T6873] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 63.100172][ T6873] genl_rcv_msg+0x61d/0x980 [ 63.104677][ T6873] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.111618][ T6873] ? lock_release+0x8f0/0x8f0 [ 63.116289][ T6873] netlink_rcv_skb+0x15a/0x430 [ 63.121034][ T6873] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.127983][ T6873] ? netlink_ack+0xa10/0xa10 [ 63.132576][ T6873] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.138376][ T6873] genl_rcv+0x24/0x40 [ 63.142341][ T6873] netlink_unicast+0x533/0x7d0 [ 63.147120][ T6873] ? netlink_attachskb+0x810/0x810 [ 63.152223][ T6873] ? __phys_addr_symbol+0x2c/0x70 [ 63.157277][ T6873] ? __check_object_size+0x171/0x3e4 [ 63.162563][ T6873] netlink_sendmsg+0x856/0xd90 [ 63.167311][ T6873] ? netlink_unicast+0x7d0/0x7d0 [ 63.172259][ T6873] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.177537][ T6873] ? netlink_unicast+0x7d0/0x7d0 [ 63.182466][ T6873] sock_sendmsg+0xcf/0x120 [ 63.186874][ T6873] ____sys_sendmsg+0x6e8/0x810 [ 63.191662][ T6873] ? kernel_sendmsg+0x50/0x50 [ 63.196332][ T6873] ? do_recvmmsg+0x6d0/0x6d0 [ 63.200906][ T6873] ? lock_is_held_type+0xbb/0xf0 [ 63.205825][ T6873] ? find_held_lock+0x2d/0x110 [ 63.210571][ T6873] ? __might_fault+0x11f/0x1d0 [ 63.215333][ T6873] ___sys_sendmsg+0xf3/0x170 [ 63.219906][ T6873] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.225178][ T6873] ? __might_fault+0x190/0x1d0 [ 63.229920][ T6873] ? _copy_to_user+0x126/0x160 [ 63.234676][ T6873] ? sock_do_ioctl+0x168/0x2d0 [ 63.239422][ T6873] ? compat_ifr_data_ioctl+0x150/0x150 [ 63.244883][ T6873] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 63.250774][ T6873] ? __fget_light+0x215/0x280 [ 63.255436][ T6873] __sys_sendmsg+0xe5/0x1b0 [ 63.259933][ T6873] ? __sys_sendmsg_sock+0xb0/0xb0 [ 63.264939][ T6873] ? lock_is_held_type+0xbb/0xf0 [ 63.269868][ T6873] ? syscall_enter_from_user_mode+0x20/0x290 [ 63.275915][ T6873] ? lockdep_hardirqs_on+0x53/0x100 [ 63.281111][ T6873] do_syscall_64+0x2d/0x70 [ 63.285510][ T6873] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 63.291395][ T6873] RIP: 0033:0x4416f9 [ 63.295270][ T6873] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.314868][ T6873] RSP: 002b:00007ffee2ac28e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.323275][ T6873] RAX: ffffffffffffffda RBX: 00007ffee2ac2910 RCX: 00000000004416f9 [ 63.331237][ T6873] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 63.339204][ T6873] RBP: 0000000000000003 R08: 0000002000000000 R09: 0000002000000000 [ 63.347193][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 63.355154][ T6873] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 63.366100][ T6873] ================================================================================ [ 63.375918][ T6873] Kernel panic - not syncing: panic_on_warn set ... [ 63.382529][ T6873] CPU: 1 PID: 6873 Comm: syz-executor483 Not tainted 5.9.0-rc3-syzkaller #0 [ 63.391200][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.401250][ T6873] Call Trace: [ 63.404528][ T6873] dump_stack+0x198/0x1fd [ 63.408854][ T6873] panic+0x382/0x7fb [ 63.412730][ T6873] ? __warn_printk+0xf3/0xf3 [ 63.417315][ T6873] ? ubsan_epilogue+0x3e/0x5a [ 63.421968][ T6873] ? ubsan_epilogue+0x35/0x5a [ 63.426627][ T6873] ubsan_epilogue+0x54/0x5a [ 63.431120][ T6873] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 63.437255][ T6873] ? lock_is_held_type+0xbb/0xf0 [ 63.442211][ T6873] ieee80211_del_key+0x428/0x440 [ 63.447159][ T6873] nl80211_del_key+0x493/0x980 [ 63.451912][ T6873] ? cfg80211_tdls_oper_request+0x7f0/0x7f0 [ 63.457794][ T6873] ? nl80211_pre_doit+0xa2/0x630 [ 63.462716][ T6873] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580 [ 63.469465][ T6873] genl_rcv_msg+0x61d/0x980 [ 63.473979][ T6873] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.480901][ T6873] ? lock_release+0x8f0/0x8f0 [ 63.485562][ T6873] netlink_rcv_skb+0x15a/0x430 [ 63.490309][ T6873] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.497237][ T6873] ? netlink_ack+0xa10/0xa10 [ 63.501811][ T6873] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.507598][ T6873] genl_rcv+0x24/0x40 [ 63.511567][ T6873] netlink_unicast+0x533/0x7d0 [ 63.516313][ T6873] ? netlink_attachskb+0x810/0x810 [ 63.521416][ T6873] ? __phys_addr_symbol+0x2c/0x70 [ 63.526424][ T6873] ? __check_object_size+0x171/0x3e4 [ 63.531687][ T6873] netlink_sendmsg+0x856/0xd90 [ 63.536446][ T6873] ? netlink_unicast+0x7d0/0x7d0 [ 63.541381][ T6873] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.546658][ T6873] ? netlink_unicast+0x7d0/0x7d0 [ 63.551578][ T6873] sock_sendmsg+0xcf/0x120 [ 63.555978][ T6873] ____sys_sendmsg+0x6e8/0x810 [ 63.560733][ T6873] ? kernel_sendmsg+0x50/0x50 [ 63.565475][ T6873] ? do_recvmmsg+0x6d0/0x6d0 [ 63.570058][ T6873] ? lock_is_held_type+0xbb/0xf0 [ 63.574985][ T6873] ? find_held_lock+0x2d/0x110 [ 63.579732][ T6873] ? __might_fault+0x11f/0x1d0 [ 63.584483][ T6873] ___sys_sendmsg+0xf3/0x170 [ 63.589066][ T6873] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.594370][ T6873] ? __might_fault+0x190/0x1d0 [ 63.599126][ T6873] ? _copy_to_user+0x126/0x160 [ 63.603877][ T6873] ? sock_do_ioctl+0x168/0x2d0 [ 63.608621][ T6873] ? compat_ifr_data_ioctl+0x150/0x150 [ 63.614061][ T6873] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 63.619937][ T6873] ? __fget_light+0x215/0x280 [ 63.624613][ T6873] __sys_sendmsg+0xe5/0x1b0 [ 63.629103][ T6873] ? __sys_sendmsg_sock+0xb0/0xb0 [ 63.634107][ T6873] ? lock_is_held_type+0xbb/0xf0 [ 63.639034][ T6873] ? syscall_enter_from_user_mode+0x20/0x290 [ 63.645009][ T6873] ? lockdep_hardirqs_on+0x53/0x100 [ 63.650197][ T6873] do_syscall_64+0x2d/0x70 [ 63.654619][ T6873] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 63.660504][ T6873] RIP: 0033:0x4416f9 [ 63.664396][ T6873] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.683986][ T6873] RSP: 002b:00007ffee2ac28e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.692383][ T6873] RAX: ffffffffffffffda RBX: 00007ffee2ac2910 RCX: 00000000004416f9 [ 63.700337][ T6873] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 63.708294][ T6873] RBP: 0000000000000003 R08: 0000002000000000 R09: 0000002000000000 [ 63.716261][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 63.724215][ T6873] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 63.733290][ T6873] Kernel Offset: disabled [ 63.737687][ T6873] Rebooting in 86400 seconds..