[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.222' (ECDSA) to the list of known hosts. syzkaller login: [ 45.387175] audit: type=1400 audit(1601552045.642:8): avc: denied { execmem } for pid=6499 comm="syz-executor397" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 45.402613] IPVS: ftp: loaded support on port[0] = 21 [ 45.489524] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 45.499021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.522437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.526140] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready executing program executing program [ 45.545711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.553993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.561096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.573290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.594618] ------------[ cut here ]------------ [ 45.601652] WARNING: CPU: 1 PID: 6542 at net/wireless/sme.c:533 cfg80211_connect.cold+0x29/0xb9 [ 45.612178] Kernel panic - not syncing: panic_on_warn set ... [ 45.612178] [ 45.621462] CPU: 1 PID: 6542 Comm: syz-executor397 Not tainted 4.19.148-syzkaller #0 [ 45.631054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.641488] Call Trace: [ 45.644500] dump_stack+0x22c/0x33e [ 45.649148] panic+0x2ac/0x565 [ 45.652717] ? __warn_printk+0xf3/0xf3 [ 45.656618] ? cfg80211_connect.cold+0x29/0xb9 [ 45.661670] ? __probe_kernel_read+0x130/0x1b0 [ 45.666901] ? __warn.cold+0x5/0x5a [ 45.671176] ? __warn+0xe4/0x200 [ 45.675035] ? cfg80211_connect.cold+0x29/0xb9 [ 45.680284] __warn.cold+0x20/0x5a [ 45.684375] ? cfg80211_connect.cold+0x29/0xb9 [ 45.689743] report_bug+0x262/0x2b0 [ 45.693477] do_error_trap+0x1e1/0x330 [ 45.698776] ? math_error+0x320/0x320 [ 45.703657] ? __irq_work_queue_local+0x155/0x200 [ 45.708970] ? irq_work_queue+0x29/0x80 [ 45.714056] ? wake_up_klogd+0xef/0x140 [ 45.718558] ? vprintk_emit+0x1d0/0x7c0 [ 45.723277] ? trace_hardirqs_off_caller+0x69/0x210 [ 45.728939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.734419] invalid_op+0x14/0x20 [ 45.738473] RIP: 0010:cfg80211_connect.cold+0x29/0xb9 [ 45.744100] Code: ff e8 dd 45 30 fa 48 c7 c7 c0 96 cc 88 e8 00 c1 19 fa 0f 0b e9 1e db ff ff e8 c5 45 30 fa 48 c7 c7 c0 96 cc 88 e8 e8 c0 19 fa <0f> 0b 41 bc 8d ff ff ff e9 da d5 ff ff e8 a7 45 30 fa 41 0f b6 f6 [ 45.764535] RSP: 0018:ffff8880a3f1f370 EFLAGS: 00010286 [ 45.770581] RAX: 0000000000000024 RBX: 0000000000000000 RCX: 0000000000000000 [ 45.779095] RDX: 0000000000000000 RSI: ffffffff815b523f RDI: ffffed10147e3e60 [ 45.786807] RBP: ffffffff88cdc920 R08: 0000000000000024 R09: 0000000000000000 [ 45.794826] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880a3f1f510 [ 45.802932] R13: ffff88808499ddb8 R14: ffff88808499dd90 R15: 0000000000000006 [ 45.811521] ? vprintk_func+0x7f/0x224 [ 45.815825] ? mark_held_locks+0xf0/0xf0 [ 45.821772] ? __cfg80211_disconnected+0x19e0/0x19e0 [ 45.827711] ? memset+0x20/0x40 [ 45.831318] ? nl80211_crypto_settings+0x55a/0xc30 [ 45.837557] ? ieee80211_get_channel+0x13d/0x1c0 [ 45.843522] nl80211_connect+0x1422/0x20a0 [ 45.848373] ? nl80211_join_mesh+0x1290/0x1290 [ 45.854299] ? lock_acquire+0x170/0x3f0 [ 45.858459] ? nl80211_pre_doit+0x34f/0x660 [ 45.862987] ? nl80211_pre_doit+0xa2/0x660 [ 45.867404] ? nl80211_vendor_cmd_dump+0x15e0/0x15e0 [ 45.873456] genl_family_rcv_msg+0x6bf/0xd50 [ 45.879049] ? genl_family_attrbuf+0x120/0x120 [ 45.885041] ? genl_rcv_msg+0x15d/0x1b0 [ 45.890985] ? ww_mutex_unlock+0x2f0/0x2f0 [ 45.895860] ? __lock_acquire+0x6ec/0x3ff0 [ 45.900468] ? __radix_tree_lookup+0x251/0x3f0 [ 45.905667] genl_rcv_msg+0xdf/0x1b0 [ 45.909965] netlink_rcv_skb+0x160/0x440 [ 45.915002] ? genl_family_rcv_msg+0xd50/0xd50 [ 45.920687] ? netlink_ack+0xae0/0xae0 [ 45.924725] ? genl_rcv+0x15/0x40 [ 45.928708] genl_rcv+0x24/0x40 [ 45.932356] netlink_unicast+0x4d5/0x690 [ 45.937100] ? netlink_sendskb+0x110/0x110 [ 45.941966] netlink_sendmsg+0x717/0xcc0 [ 45.946364] ? nlmsg_notify+0x1a0/0x1a0 [ 45.950926] ? __sock_recv_ts_and_drops+0x540/0x540 [ 45.958106] ? nlmsg_notify+0x1a0/0x1a0 [ 45.963129] sock_sendmsg+0xc7/0x130 [ 45.967982] ___sys_sendmsg+0x7bb/0x8f0 [ 45.973254] ? copy_msghdr_from_user+0x440/0x440 [ 45.978863] ? __lock_acquire+0x6ec/0x3ff0 [ 45.984023] ? sock_ioctl+0x30e/0x5f0 [ 45.988202] ? routing_ioctl+0x570/0x570 [ 45.992713] ? lock_downgrade+0x750/0x750 [ 45.997895] ? lock_acquire+0x170/0x3f0 [ 46.004697] ? debug_object_active_state+0x108/0x340 [ 46.011497] ? routing_ioctl+0x570/0x570 [ 46.015906] ? do_vfs_ioctl+0x110/0x12e0 [ 46.020580] ? selinux_file_ioctl+0x44f/0x5e0 [ 46.026207] ? ioctl_preallocate+0x200/0x200 [ 46.031349] ? __fget_light+0x1a2/0x230 [ 46.035696] __x64_sys_sendmsg+0x132/0x220 [ 46.040047] ? __sys_sendmsg+0x1b0/0x1b0 [ 46.045094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 46.050752] ? trace_hardirqs_off_caller+0x69/0x210 [ 46.056694] ? do_syscall_64+0x21/0x670 [ 46.061830] do_syscall_64+0xf9/0x670 [ 46.066623] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.073736] RIP: 0033:0x442139 [ 46.077189] Code: e8 ac 00 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.100007] RSP: 002b:00007ffe9c394178 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.108100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000442139 [ 46.116463] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 46.124443] RBP: 0000000000000000 R08: 0000001d00000000 R09: 0000001d00000000 [ 46.136255] R10: 0000001d00000000 R11: 0000000000000246 R12: 000000000000b213 [ 46.144259] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 46.154582] Kernel Offset: disabled [ 46.160780] Rebooting in 86400 seconds..