[[0;32m OK [0m] Reached target Multi-User System.
[[0;32m OK [0m] Reached target Graphical Interface.
Starting Update UTMP about System Runlevel Changes...
[[0;32m OK [0m] Started Update UTMP about System Runlevel Changes.
Starting Load/Save RF Kill Switch Status...
Debian GNU/Linux 9 syzkaller ttyS0
Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts.
syzkaller login: [ 65.006064][ T6853] IPVS: ftp: loaded support on port[0] = 21
[ 65.105129][ T374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 65.136333][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 65.136976][ T374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program
[ 65.145015][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 65.168826][ T2592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 65.187727][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 65.200293][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor484'.
[ 65.210394][ T6853] ================================================================================
[ 65.220660][ T6853] UBSAN: array-index-out-of-bounds in net/mac80211/cfg.c:524:9
[ 65.229290][ T6853] index 255 is out of range for type 'ieee80211_key *[8]'
[ 65.236418][ T6853] CPU: 0 PID: 6853 Comm: syz-executor484 Not tainted 5.9.0-rc3-syzkaller #0
[ 65.245086][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 65.255133][ T6853] Call Trace:
[ 65.258406][ T6853] dump_stack+0x198/0x1fd
[ 65.262715][ T6853] ubsan_epilogue+0xb/0x5a
[ 65.267127][ T6853] __ubsan_handle_out_of_bounds.cold+0x62/0x6c
[ 65.273303][ T6853] ? lock_is_held_type+0xbb/0xf0
[ 65.278250][ T6853] ieee80211_del_key+0x428/0x440
[ 65.283167][ T6853] nl80211_del_key+0x493/0x980
[ 65.287914][ T6853] ? cfg80211_tdls_oper_request+0x7f0/0x7f0
[ 65.293789][ T6853] ? nl80211_pre_doit+0xa2/0x630
[ 65.298708][ T6853] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580
[ 65.305462][ T6853] genl_rcv_msg+0x61d/0x980
[ 65.309968][ T6853] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250
[ 65.316905][ T6853] ? lock_release+0x8f0/0x8f0
[ 65.321571][ T6853] netlink_rcv_skb+0x15a/0x430
[ 65.326326][ T6853] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250
[ 65.333240][ T6853] ? netlink_ack+0xa10/0xa10
[ 65.337831][ T6853] ? __kmalloc_node_track_caller+0x38/0x60
[ 65.343615][ T6853] genl_rcv+0x24/0x40
[ 65.347583][ T6853] netlink_unicast+0x533/0x7d0
[ 65.352355][ T6853] ? netlink_attachskb+0x810/0x810
[ 65.357457][ T6853] ? __phys_addr_symbol+0x2c/0x70
[ 65.362457][ T6853] ? __check_object_size+0x171/0x3e4
[ 65.367739][ T6853] netlink_sendmsg+0x856/0xd90
[ 65.372492][ T6853] ? netlink_unicast+0x7d0/0x7d0
[ 65.377425][ T6853] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 65.382691][ T6853] ? netlink_unicast+0x7d0/0x7d0
[ 65.387615][ T6853] sock_sendmsg+0xcf/0x120
[ 65.392022][ T6853] ____sys_sendmsg+0x6e8/0x810
[ 65.396770][ T6853] ? kernel_sendmsg+0x50/0x50
[ 65.401448][ T6853] ? do_recvmmsg+0x6d0/0x6d0
[ 65.406112][ T6853] ? stack_trace_consume_entry+0x160/0x160
[ 65.411905][ T6853] ___sys_sendmsg+0xf3/0x170
[ 65.416485][ T6853] ? sendmsg_copy_msghdr+0x160/0x160
[ 65.421772][ T6853] ? syscall_exit_to_user_mode+0x7e/0x2e0
[ 65.427577][ T6853] ? lock_downgrade+0x830/0x830
[ 65.432420][ T6853] ? check_preemption_disabled+0x50/0x130
[ 65.438116][ T6853] ? _raw_spin_unlock_irqrestore+0x6f/0x90
[ 65.443897][ T6853] ? lockdep_hardirqs_on_prepare+0x354/0x530
[ 65.449853][ T6853] ? _raw_spin_unlock_irqrestore+0x6f/0x90
[ 65.455648][ T6853] ? lockdep_hardirqs_on+0x53/0x100
[ 65.460828][ T6853] ? _raw_spin_unlock_irqrestore+0x5c/0x90
[ 65.466611][ T6853] ? debug_object_active_state+0x260/0x350
[ 65.472433][ T6853] ? debug_object_init_on_stack+0x20/0x20
[ 65.478134][ T6853] ? __fget_light+0x215/0x280
[ 65.482793][ T6853] __sys_sendmsg+0xe5/0x1b0
[ 65.487275][ T6853] ? __sys_sendmsg_sock+0xb0/0xb0
[ 65.492288][ T6853] ? lock_is_held_type+0xbb/0xf0
[ 65.497220][ T6853] ? syscall_enter_from_user_mode+0x20/0x290
[ 65.503188][ T6853] ? lockdep_hardirqs_on+0x53/0x100
[ 65.508372][ T6853] do_syscall_64+0x2d/0x70
[ 65.512770][ T6853] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 65.518638][ T6853] RIP: 0033:0x441719
[ 65.522522][ T6853] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00
[ 65.542104][ T6853] RSP: 002b:00007ffe78bc8f88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 65.550492][ T6853] RAX: ffffffffffffffda RBX: 00007ffe78bc8fb0 RCX: 0000000000441719
[ 65.558440][ T6853] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[ 65.566390][ T6853] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000002000000000
[ 65.574342][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032
[ 65.582327][ T6853] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004
[ 65.592108][ T6853] ================================================================================
[ 65.601504][ T6853] Kernel panic - not syncing: panic_on_warn set ...
[ 65.608097][ T6853] CPU: 0 PID: 6853 Comm: syz-executor484 Not tainted 5.9.0-rc3-syzkaller #0
[ 65.616765][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 65.626809][ T6853] Call Trace:
[ 65.630105][ T6853] dump_stack+0x198/0x1fd
[ 65.634426][ T6853] panic+0x382/0x7fb
[ 65.638313][ T6853] ? __warn_printk+0xf3/0xf3
[ 65.642888][ T6853] ? ubsan_epilogue+0x3e/0x5a
[ 65.647541][ T6853] ? ubsan_epilogue+0x35/0x5a
[ 65.652195][ T6853] ubsan_epilogue+0x54/0x5a
[ 65.656677][ T6853] __ubsan_handle_out_of_bounds.cold+0x62/0x6c
[ 65.662878][ T6853] ? lock_is_held_type+0xbb/0xf0
[ 65.667816][ T6853] ieee80211_del_key+0x428/0x440
[ 65.672754][ T6853] nl80211_del_key+0x493/0x980
[ 65.677513][ T6853] ? cfg80211_tdls_oper_request+0x7f0/0x7f0
[ 65.683394][ T6853] ? nl80211_pre_doit+0xa2/0x630
[ 65.688309][ T6853] ? nl80211_dump_wiphy_parse.constprop.0+0x580/0x580
[ 65.695046][ T6853] genl_rcv_msg+0x61d/0x980
[ 65.699652][ T6853] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250
[ 65.706577][ T6853] ? lock_release+0x8f0/0x8f0
[ 65.711240][ T6853] netlink_rcv_skb+0x15a/0x430
[ 65.715996][ T6853] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250
[ 65.722922][ T6853] ? netlink_ack+0xa10/0xa10
[ 65.727503][ T6853] ? __kmalloc_node_track_caller+0x38/0x60
[ 65.733303][ T6853] genl_rcv+0x24/0x40
[ 65.737275][ T6853] netlink_unicast+0x533/0x7d0
[ 65.742031][ T6853] ? netlink_attachskb+0x810/0x810
[ 65.747132][ T6853] ? __phys_addr_symbol+0x2c/0x70
[ 65.752132][ T6853] ? __check_object_size+0x171/0x3e4
[ 65.757394][ T6853] netlink_sendmsg+0x856/0xd90
[ 65.762136][ T6853] ? netlink_unicast+0x7d0/0x7d0
[ 65.767056][ T6853] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 65.772336][ T6853] ? netlink_unicast+0x7d0/0x7d0
[ 65.777272][ T6853] sock_sendmsg+0xcf/0x120
[ 65.781667][ T6853] ____sys_sendmsg+0x6e8/0x810
[ 65.786428][ T6853] ? kernel_sendmsg+0x50/0x50
[ 65.791100][ T6853] ? do_recvmmsg+0x6d0/0x6d0
[ 65.795670][ T6853] ? stack_trace_consume_entry+0x160/0x160
[ 65.801465][ T6853] ___sys_sendmsg+0xf3/0x170
[ 65.806049][ T6853] ? sendmsg_copy_msghdr+0x160/0x160
[ 65.811315][ T6853] ? syscall_exit_to_user_mode+0x7e/0x2e0
[ 65.817014][ T6853] ? lock_downgrade+0x830/0x830
[ 65.821840][ T6853] ? check_preemption_disabled+0x50/0x130
[ 65.827538][ T6853] ? _raw_spin_unlock_irqrestore+0x6f/0x90
[ 65.833320][ T6853] ? lockdep_hardirqs_on_prepare+0x354/0x530
[ 65.839315][ T6853] ? _raw_spin_unlock_irqrestore+0x6f/0x90
[ 65.845099][ T6853] ? lockdep_hardirqs_on+0x53/0x100
[ 65.850284][ T6853] ? _raw_spin_unlock_irqrestore+0x5c/0x90
[ 65.856077][ T6853] ? debug_object_active_state+0x260/0x350
[ 65.861863][ T6853] ? debug_object_init_on_stack+0x20/0x20
[ 65.867583][ T6853] ? __fget_light+0x215/0x280
[ 65.872263][ T6853] __sys_sendmsg+0xe5/0x1b0
[ 65.876764][ T6853] ? __sys_sendmsg_sock+0xb0/0xb0
[ 65.881786][ T6853] ? lock_is_held_type+0xbb/0xf0
[ 65.886711][ T6853] ? syscall_enter_from_user_mode+0x20/0x290
[ 65.892683][ T6853] ? lockdep_hardirqs_on+0x53/0x100
[ 65.897863][ T6853] do_syscall_64+0x2d/0x70
[ 65.902259][ T6853] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 65.908127][ T6853] RIP: 0033:0x441719
[ 65.912007][ T6853] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00
[ 65.931589][ T6853] RSP: 002b:00007ffe78bc8f88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 65.939980][ T6853] RAX: ffffffffffffffda RBX: 00007ffe78bc8fb0 RCX: 0000000000441719
[ 65.947936][ T6853] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[ 65.955889][ T6853] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000002000000000
[ 65.963855][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032
[ 65.971805][ T6853] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004
[ 65.981099][ T6853] Kernel Offset: disabled
[ 65.985486][ T6853] Rebooting in 86400 seconds..