Warning: Permanently added '[localhost]:3928' (ED25519) to the list of known hosts.
syzkaller login: [ 88.321846][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.325650][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.361605][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.366423][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program
[ 88.423514][ T13] ------------[ cut here ]------------
[ 88.427719][ T5318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 88.432220][ T13] UBSAN: array-index-out-of-bounds in net/mac80211/mlme.c:7224:41
[ 88.437080][ T13] index 4 is out of range for type 'u8[0]' (aka 'unsigned char[0]')
[ 88.442305][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted 6.16.0-rc1-syzkaller-00182-g18531f4d1c8c #0 PREEMPT(full)
[ 88.442328][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 88.442339][ T13] Workqueue: events_unbound cfg80211_wiphy_work
[ 88.442481][ T13] Call Trace:
[ 88.442490][ T13]
[ 88.442497][ T13] dump_stack_lvl+0x189/0x250
[ 88.442703][ T13] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.442721][ T13] ? __pfx__printk+0x10/0x10
[ 88.442742][ T13] ubsan_epilogue+0xa/0x40
[ 88.442755][ T13] __ubsan_handle_out_of_bounds+0xe9/0xf0
[ 88.442809][ T13] ? ieee80211_get_bssid+0xb8/0x200
[ 88.442825][ T13] ieee80211_rx_mgmt_beacon+0x21fd/0x2c10
[ 88.442844][ T13] ? __lock_acquire+0xab9/0xd20
[ 88.442867][ T13] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 88.442878][ T13] ? __lock_acquire+0xab9/0xd20
[ 88.442920][ T13] ieee80211_iface_work+0x49c/0xfe0
[ 88.442946][ T13] cfg80211_wiphy_work+0x2df/0x460
[ 88.442960][ T13] ? process_scheduled_works+0x9ef/0x17b0
[ 88.442980][ T13] process_scheduled_works+0xae1/0x17b0
[ 88.443018][ T13] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.443048][ T13] worker_thread+0x8a0/0xda0
[ 88.443078][ T13] kthread+0x70e/0x8a0
[ 88.443094][ T13] ? __pfx_worker_thread+0x10/0x10
[ 88.443111][ T13] ? __pfx_kthread+0x10/0x10
[ 88.443126][ T13] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.443199][ T13] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.443216][ T13] ? __pfx_kthread+0x10/0x10
[ 88.443229][ T13] ret_from_fork+0x3fc/0x770
[ 88.443253][ T13] ? __pfx_ret_from_fork+0x10/0x10
[ 88.443275][ T13] ? __pfx_kthread+0x10/0x10
[ 88.443289][ T13] ret_from_fork_asm+0x1a/0x30
[ 88.443322][ T13]
[ 88.443327][ T13] ---[ end trace ]---
executing program
[ 88.534776][ T13] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 88.538485][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted 6.16.0-rc1-syzkaller-00182-g18531f4d1c8c #0 PREEMPT(full)
[ 88.543933][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 88.548833][ T13] Workqueue: events_unbound cfg80211_wiphy_work
[ 88.551876][ T13] Call Trace:
[ 88.553697][ T13]
[ 88.555575][ T13] dump_stack_lvl+0x99/0x250
[ 88.557877][ T13] ? __asan_memcpy+0x40/0x70
[ 88.559901][ T13] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.562094][ T13] ? __pfx__printk+0x10/0x10
[ 88.564185][ T13] panic+0x2db/0x790
[ 88.565963][ T13] ? __pfx_panic+0x10/0x10
[ 88.568094][ T13] ? _printk+0xcf/0x120
[ 88.570285][ T13] ? __pfx__printk+0x10/0x10
[ 88.572841][ T13] check_panic_on_warn+0x89/0xb0
[ 88.575251][ T13] __ubsan_handle_out_of_bounds+0xe9/0xf0
[ 88.577795][ T13] ? ieee80211_get_bssid+0xb8/0x200
[ 88.580037][ T13] ieee80211_rx_mgmt_beacon+0x21fd/0x2c10
[ 88.582608][ T13] ? __lock_acquire+0xab9/0xd20
[ 88.585075][ T13] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 88.588274][ T13] ? __lock_acquire+0xab9/0xd20
[ 88.590377][ T13] ieee80211_iface_work+0x49c/0xfe0
[ 88.592683][ T13] cfg80211_wiphy_work+0x2df/0x460
[ 88.594934][ T13] ? process_scheduled_works+0x9ef/0x17b0
[ 88.597754][ T13] process_scheduled_works+0xae1/0x17b0
[ 88.600844][ T13] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.603717][ T13] worker_thread+0x8a0/0xda0
[ 88.605743][ T13] kthread+0x70e/0x8a0
[ 88.607533][ T13] ? __pfx_worker_thread+0x10/0x10
[ 88.609676][ T13] ? __pfx_kthread+0x10/0x10
[ 88.611760][ T13] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.614225][ T13] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.616971][ T13] ? __pfx_kthread+0x10/0x10
[ 88.619315][ T13] ret_from_fork+0x3fc/0x770
[ 88.621431][ T13] ? __pfx_ret_from_fork+0x10/0x10
[ 88.623763][ T13] ? __pfx_kthread+0x10/0x10
[ 88.625800][ T13] ret_from_fork_asm+0x1a/0x30
[ 88.627940][ T13]
[ 88.629582][ T13] Kernel Offset: disabled
[ 88.631869][ T13] Rebooting in 86400 seconds..
VM DIAGNOSIS:
12:06:19 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001f70d0
R8 =ffff888033bd0237 R9 =1ffff1100677a046 R10=dffffc0000000000 R11=ffffffff854731b0
R12=dffffc0000000000 R13=ffffffff99ac38d2 R14=ffffffff99dc8780 R15=0000000000000000
RIP=ffffffff8547322c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d252000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000080 CR3=000000001149a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000009 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=00000000ffffffbf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9fb61adb 00007ffd9fb61adb
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9fb61fe0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9fb61fe0 0000003000000018
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6d205d31393634 54205b5d32343233 36372e3033202020 5b3e363c00323300
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6567205731333634 5420515732343233 3637243033202020 5134363600323300
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e756f622d666f 2d74756f2d786564 6e692d7961727261 203a4e4153425520
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e656e6f6e203a65 646f6d2061746f75 51202e65646f6d20 6174616420646572
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6564726f20687469 77206f7220316662 3163303261333865 372d386231392d34
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6262342d37393934 2d62643663313966 34206d6574737973 656c696620646574
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e756f6d203a2931 616473282073662d 34545845205d3154 202020205b5d3131
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68637461772e6575 6575716b726f7720 35353d6873657268 745f676f64686374
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000