Warning: Permanently added '[localhost]:56004' (ED25519) to the list of known hosts.
syzkaller login: [ 86.511623][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.515142][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.556303][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.560598][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program
[ 86.601635][ T38] ------------[ cut here ]------------
[ 86.604025][ T38] UBSAN: array-index-out-of-bounds in net/mac80211/mlme.c:7224:41
[ 86.607360][ T38] index 4 is out of range for type 'u8[0]' (aka 'unsigned char[0]')
[ 86.613032][ T5319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
executing program
[ 86.625105][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u4:3 Not tainted 6.16.0-rc1-syzkaller-00182-g18531f4d1c8c #0 PREEMPT(full)
[ 86.625127][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.625138][ T38] Workqueue: events_unbound cfg80211_wiphy_work
[ 86.625287][ T38] Call Trace:
[ 86.625293][ T38]
[ 86.625297][ T38] dump_stack_lvl+0x189/0x250
[ 86.625361][ T38] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.625381][ T38] ? __pfx__printk+0x10/0x10
[ 86.625404][ T38] ubsan_epilogue+0xa/0x40
[ 86.625420][ T38] __ubsan_handle_out_of_bounds+0xe9/0xf0
[ 86.625477][ T38] ? ieee80211_get_bssid+0xb8/0x200
[ 86.625493][ T38] ieee80211_rx_mgmt_beacon+0x21fd/0x2c10
[ 86.625514][ T38] ? __lock_acquire+0xab9/0xd20
[ 86.625538][ T38] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 86.625551][ T38] ? __lock_acquire+0xab9/0xd20
[ 86.625583][ T38] ieee80211_iface_work+0x49c/0xfe0
[ 86.625604][ T38] cfg80211_wiphy_work+0x2df/0x460
[ 86.625614][ T38] ? process_scheduled_works+0x9ef/0x17b0
[ 86.625633][ T38] process_scheduled_works+0xae1/0x17b0
[ 86.625675][ T38] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.625709][ T38] worker_thread+0x8a0/0xda0
[ 86.625720][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 86.625789][ T38] ? __kthread_parkme+0x7b/0x200
[ 86.625809][ T38] kthread+0x70e/0x8a0
[ 86.625827][ T38] ? __pfx_worker_thread+0x10/0x10
[ 86.625847][ T38] ? __pfx_kthread+0x10/0x10
[ 86.625863][ T38] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.625879][ T38] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.625895][ T38] ? __pfx_kthread+0x10/0x10
[ 86.625911][ T38] ret_from_fork+0x3fc/0x770
[ 86.625933][ T38] ? __pfx_ret_from_fork+0x10/0x10
[ 86.625957][ T38] ? __pfx_kthread+0x10/0x10
[ 86.625967][ T38] ret_from_fork_asm+0x1a/0x30
[ 86.625984][ T38]
[ 86.625988][ T38] ---[ end trace ]---
[ 86.771594][ T38] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 86.774876][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u4:3 Not tainted 6.16.0-rc1-syzkaller-00182-g18531f4d1c8c #0 PREEMPT(full)
[ 86.780374][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.785297][ T38] Workqueue: events_unbound cfg80211_wiphy_work
[ 86.787884][ T38] Call Trace:
[ 86.789275][ T38]
[ 86.790455][ T38] dump_stack_lvl+0x99/0x250
[ 86.792426][ T38] ? __asan_memcpy+0x40/0x70
[ 86.794370][ T38] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.796807][ T38] ? __pfx__printk+0x10/0x10
[ 86.799075][ T38] panic+0x2db/0x790
[ 86.801128][ T38] ? __pfx_panic+0x10/0x10
[ 86.803135][ T38] ? _printk+0xcf/0x120
[ 86.804973][ T38] ? __pfx__printk+0x10/0x10
[ 86.807171][ T38] check_panic_on_warn+0x89/0xb0
[ 86.809510][ T38] __ubsan_handle_out_of_bounds+0xe9/0xf0
[ 86.812148][ T38] ? ieee80211_get_bssid+0xb8/0x200
[ 86.814601][ T38] ieee80211_rx_mgmt_beacon+0x21fd/0x2c10
[ 86.816997][ T38] ? __lock_acquire+0xab9/0xd20
[ 86.819146][ T38] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 86.821669][ T38] ? __lock_acquire+0xab9/0xd20
[ 86.823740][ T38] ieee80211_iface_work+0x49c/0xfe0
[ 86.825850][ T38] cfg80211_wiphy_work+0x2df/0x460
[ 86.827830][ T38] ? process_scheduled_works+0x9ef/0x17b0
[ 86.830029][ T38] process_scheduled_works+0xae1/0x17b0
[ 86.832418][ T38] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.835059][ T38] worker_thread+0x8a0/0xda0
[ 86.836855][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 86.839352][ T38] ? __kthread_parkme+0x7b/0x200
[ 86.841368][ T38] kthread+0x70e/0x8a0
[ 86.843195][ T38] ? __pfx_worker_thread+0x10/0x10
[ 86.845750][ T38] ? __pfx_kthread+0x10/0x10
[ 86.848608][ T38] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.850629][ T38] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.852813][ T38] ? __pfx_kthread+0x10/0x10
[ 86.854604][ T38] ret_from_fork+0x3fc/0x770
[ 86.856527][ T38] ? __pfx_ret_from_fork+0x10/0x10
[ 86.858576][ T38] ? __pfx_kthread+0x10/0x10
[ 86.860683][ T38] ret_from_fork_asm+0x1a/0x30
[ 86.863365][ T38]
[ 86.865720][ T38] Kernel Offset: disabled
[ 86.868070][ T38] Rebooting in 86400 seconds..
VM DIAGNOSIS:
13:26:43 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900005970d0
R8 =ffff888033870237 R9 =1ffff1100670e046 R10=dffffc0000000000 R11=ffffffff854731b0
R12=dffffc0000000000 R13=ffffffff99ac3900 R14=ffffffff99dc8780 R15=0000000000000000
RIP=ffffffff8547322c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d252000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb46cf68ac0 CR3=0000000043930000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000404000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44d4c263644ba513 3532d4b1451f321e
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29fef6723e58f69f 50510004de9d44d4
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000c00000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb46cfe9604 00007fb46cffd260
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000