Warning: Permanently added '[localhost]:15574' (ED25519) to the list of known hosts.
syzkaller login: [ 87.683886][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.688249][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.723150][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.727125][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program
[ 87.766115][ T1038] ------------[ cut here ]------------
[ 87.770021][ T5315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 87.775851][ T1038] UBSAN: array-index-out-of-bounds in net/mac80211/mlme.c:7224:41
[ 87.780024][ T1038] index 4 is out of range for type 'u8[0]' (aka 'unsigned char[0]')
[ 87.784589][ T1038] CPU: 0 UID: 0 PID: 1038 Comm: kworker/u4:6 Not tainted 6.16.0-rc1-syzkaller-00182-g18531f4d1c8c #0 PREEMPT(full)
[ 87.784608][ T1038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 87.784617][ T1038] Workqueue: events_unbound cfg80211_wiphy_work
[ 87.784842][ T1038] Call Trace:
[ 87.784857][ T1038]
[ 87.784866][ T1038] dump_stack_lvl+0x189/0x250
[ 87.784968][ T1038] ? __pfx_dump_stack_lvl+0x10/0x10
[ 87.784987][ T1038] ? __pfx__printk+0x10/0x10
[ 87.785010][ T1038] ubsan_epilogue+0xa/0x40
[ 87.785024][ T1038] __ubsan_handle_out_of_bounds+0xe9/0xf0
[ 87.785114][ T1038] ? ieee80211_get_bssid+0xb8/0x200
[ 87.785129][ T1038] ieee80211_rx_mgmt_beacon+0x21fd/0x2c10
[ 87.785253][ T1038] ? __lock_acquire+0xab9/0xd20
[ 87.785287][ T1038] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 87.785299][ T1038] ? __lock_acquire+0xab9/0xd20
[ 87.785340][ T1038] ieee80211_iface_work+0x49c/0xfe0
[ 87.785367][ T1038] cfg80211_wiphy_work+0x2df/0x460
[ 87.785382][ T1038] ? process_scheduled_works+0x9ef/0x17b0
[ 87.785403][ T1038] process_scheduled_works+0xae1/0x17b0
[ 87.785442][ T1038] ? __pfx_process_scheduled_works+0x10/0x10
[ 87.785472][ T1038] worker_thread+0x8a0/0xda0
[ 87.785500][ T1038] kthread+0x70e/0x8a0
[ 87.785517][ T1038] ? __pfx_worker_thread+0x10/0x10
[ 87.785535][ T1038] ? __pfx_kthread+0x10/0x10
[ 87.785550][ T1038] ? _raw_spin_unlock_irq+0x23/0x50
[ 87.785643][ T1038] ? lockdep_hardirqs_on+0x9c/0x150
[ 87.785662][ T1038] ? __pfx_kthread+0x10/0x10
[ 87.785677][ T1038] ret_from_fork+0x3fc/0x770
[ 87.785700][ T1038] ? __pfx_ret_from_fork+0x10/0x10
[ 87.785723][ T1038] ? __pfx_kthread+0x10/0x10
[ 87.785738][ T1038] ret_from_fork_asm+0x1a/0x30
[ 87.785763][ T1038]
[ 87.785770][ T1038] ---[ end trace ]---
executing program
[ 87.877493][ T1038] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 87.880585][ T1038] CPU: 0 UID: 0 PID: 1038 Comm: kworker/u4:6 Not tainted 6.16.0-rc1-syzkaller-00182-g18531f4d1c8c #0 PREEMPT(full)
[ 87.886440][ T1038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 87.891221][ T1038] Workqueue: events_unbound cfg80211_wiphy_work
[ 87.893938][ T1038] Call Trace:
[ 87.895659][ T1038]
[ 87.897160][ T1038] dump_stack_lvl+0x99/0x250
[ 87.899421][ T1038] ? __asan_memcpy+0x40/0x70
[ 87.901619][ T1038] ? __pfx_dump_stack_lvl+0x10/0x10
[ 87.903957][ T1038] ? __pfx__printk+0x10/0x10
[ 87.906061][ T1038] panic+0x2db/0x790
[ 87.908065][ T1038] ? __pfx_panic+0x10/0x10
[ 87.910052][ T1038] ? _printk+0xcf/0x120
[ 87.911987][ T1038] ? __pfx__printk+0x10/0x10
[ 87.914173][ T1038] check_panic_on_warn+0x89/0xb0
[ 87.916485][ T1038] __ubsan_handle_out_of_bounds+0xe9/0xf0
[ 87.919024][ T1038] ? ieee80211_get_bssid+0xb8/0x200
[ 87.921370][ T1038] ieee80211_rx_mgmt_beacon+0x21fd/0x2c10
[ 87.924273][ T1038] ? __lock_acquire+0xab9/0xd20
[ 87.926704][ T1038] ? __pfx_ieee80211_rx_mgmt_beacon+0x10/0x10
[ 87.929355][ T1038] ? __lock_acquire+0xab9/0xd20
[ 87.931550][ T1038] ieee80211_iface_work+0x49c/0xfe0
[ 87.933770][ T1038] cfg80211_wiphy_work+0x2df/0x460
[ 87.936108][ T1038] ? process_scheduled_works+0x9ef/0x17b0
[ 87.938467][ T1038] process_scheduled_works+0xae1/0x17b0
[ 87.940822][ T1038] ? __pfx_process_scheduled_works+0x10/0x10
[ 87.944223][ T1038] worker_thread+0x8a0/0xda0
[ 87.947701][ T1038] kthread+0x70e/0x8a0
[ 87.949932][ T1038] ? __pfx_worker_thread+0x10/0x10
[ 87.952218][ T1038] ? __pfx_kthread+0x10/0x10
[ 87.954123][ T1038] ? _raw_spin_unlock_irq+0x23/0x50
[ 87.956707][ T1038] ? lockdep_hardirqs_on+0x9c/0x150
[ 87.959518][ T1038] ? __pfx_kthread+0x10/0x10
[ 87.961992][ T1038] ret_from_fork+0x3fc/0x770
[ 87.964530][ T1038] ? __pfx_ret_from_fork+0x10/0x10
[ 87.967898][ T1038] ? __pfx_kthread+0x10/0x10
[ 87.970218][ T1038] ret_from_fork_asm+0x1a/0x30
[ 87.972567][ T1038]
[ 87.974148][ T1038] Kernel Offset: disabled
[ 87.975904][ T1038] Rebooting in 86400 seconds..
VM DIAGNOSIS:
10:46:33 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900025a70d0
R8 =ffff888033818237 R9 =1ffff11006703046 R10=dffffc0000000000 R11=ffffffff854731b0
R12=dffffc0000000000 R13=ffffffff99ac38e7 R14=ffffffff99dc8780 R15=0000000000000000
RIP=ffffffff8547322c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d252000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fca7322e1b0 CR3=000000000df38000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000000040000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005651c68b6c50 00005651c68b6c50
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3915a880 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e756f622d666f 2d74756f2d786564 6e692d7961727261 203a4e4153425520
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e656e6f6e203a65 646f6d2061746f75 51202e65646f6d20 6174616420646572
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6564726f20687469 77206f7220316662 3163303261333865 372d386231392d34
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6262342d37393934 2d62643663313966 34206d6574737973 656c696620646574
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e756f6d203a2931 616473282073662d 34545845205d3154 202020205b5d3839
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000