[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. [ 79.872100][ T37] audit: type=1400 audit(1617343497.914:8): avc: denied { execmem } for pid=8393 comm="syz-executor040" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 79.890638][ T8394] IPVS: ftp: loaded support on port[0] = 21 [ 79.986030][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.997256][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.020520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program executing program [ 80.042059][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.050387][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.059611][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready Debian GNU/Linux 9 syzkaller ttyS0 [ 80.095280][ T8434] ------------[ cut here ]------------ [ 80.101610][ T8434] WARNING: CPU: 1 PID: 8434 at net/wireless/sme.c:532 cfg80211_connect+0x1409/0x2040 [ 80.112422][ T8434] Modules linked in: [ 80.117098][ T8434] CPU: 0 PID: 8434 Comm: syz-executor040 Not tainted 5.12.0-rc5-syzkaller #0 [ 80.127826][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 syzkaller login: [ 80.139138][ T8434] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 80.145877][ T8434] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 57 cd 29 f9 <0f> 0b e8 50 cd 29 f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 80.165772][ T8434] RSP: 0018:ffffc90001817298 EFLAGS: 00010293 [ 80.171886][ T8434] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 80.180918][ T8434] RDX: ffff88802736c140 RSI: ffffffff884958a9 RDI: ffffffff8a84b4a0 [ 80.189619][ T8434] RBP: ffff88802f778d32 R08: 0000000000000001 R09: ffff88802f778d37 [ 80.197696][ T8434] R10: ffffed1005eef1a6 R11: 0000000000000000 R12: ffffc90001817438 [ 80.205813][ T8434] R13: ffff88802f778c10 R14: ffff88802f778d58 R15: ffff88802f778d60 [ 80.213864][ T8434] FS: 0000000001962300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 80.222809][ T8434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.229467][ T8434] CR2: 00007ffd80fcc808 CR3: 00000000327d4000 CR4: 00000000001506f0 [ 80.237530][ T8434] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.245592][ T8434] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.253638][ T8434] Call Trace: [ 80.256942][ T8434] ? __cfg80211_disconnected+0x1470/0x1470 [ 80.262747][ T8434] ? memset+0x20/0x40 [ 80.266797][ T8434] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 80.272555][ T8434] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 80.278420][ T8434] nl80211_connect+0x1647/0x22a0 [ 80.283693][ T8434] ? nl80211_parse_connkeys+0xa50/0xa50 [ 80.289250][ T8434] ? __mutex_unlock_slowpath+0xe2/0x610 [ 80.295005][ T8434] ? wait_for_completion_io+0x270/0x270 [ 80.300812][ T8434] ? nl80211_pre_doit+0xa6/0x5c0 [ 80.306018][ T8434] genl_family_rcv_msg_doit+0x228/0x320 [ 80.311592][ T8434] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 80.319064][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.325428][ T8434] ? cap_capable+0x1f1/0x280 [ 80.330022][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.336318][ T8434] ? ns_capable+0xde/0x100 [ 80.340756][ T8434] genl_rcv_msg+0x328/0x580 [ 80.345323][ T8434] ? genl_get_cmd+0x480/0x480 [ 80.350189][ T8434] ? nl80211_parse_connkeys+0xa50/0xa50 [ 80.355810][ T8434] ? lock_release+0x720/0x720 [ 80.360504][ T8434] netlink_rcv_skb+0x153/0x420 [ 80.365356][ T8434] ? genl_get_cmd+0x480/0x480 [ 80.370049][ T8434] ? netlink_ack+0xaa0/0xaa0 [ 80.374693][ T8434] genl_rcv+0x24/0x40 [ 80.378689][ T8434] netlink_unicast+0x533/0x7d0 [ 80.383545][ T8434] ? netlink_attachskb+0x870/0x870 [ 80.388674][ T8434] netlink_sendmsg+0x856/0xd90 [ 80.393870][ T8434] ? netlink_unicast+0x7d0/0x7d0 [ 80.398825][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.405152][ T8434] ? netlink_unicast+0x7d0/0x7d0 [ 80.410124][ T8434] sock_sendmsg+0xcf/0x120 [ 80.414806][ T8434] ____sys_sendmsg+0x6e8/0x810 [ 80.419607][ T8434] ? kernel_sendmsg+0x50/0x50 [ 80.424391][ T8434] ? do_recvmmsg+0x6d0/0x6d0 [ 80.428996][ T8434] ? lock_chain_count+0x20/0x20 [ 80.434096][ T8434] ___sys_sendmsg+0xf3/0x170 [ 80.438706][ T8434] ? sendmsg_copy_msghdr+0x160/0x160 [ 80.444084][ T8434] ? __lock_acquire+0x16b3/0x54c0 [ 80.449129][ T8434] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 80.455227][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.461509][ T8434] ? __fget_light+0x215/0x280 [ 80.466285][ T8434] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 80.472544][ T8434] __sys_sendmsg+0xe5/0x1b0 [ 80.477102][ T8434] ? __sys_sendmsg_sock+0x30/0x30 [ 80.482141][ T8434] ? syscall_enter_from_user_mode+0x27/0x70 [ 80.488092][ T8434] do_syscall_64+0x2d/0x70 [ 80.492538][ T8434] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.498615][ T8434] RIP: 0033:0x441089 [ 80.502523][ T8434] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 80.522255][ T8434] RSP: 002b:00007ffd80fcc828 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.530793][ T8434] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 80.538853][ T8434] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 80.547154][ T8434] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 80.555226][ T8434] R10: 0000000c00000000 R11: 0000000000000246 R12: 00000000000138c9 [ 80.563614][ T8434] R13: 00007ffd80fcc890 R14: 00007ffd80fcc880 R15: 00007ffd80fcc84c [ 80.563664][ T8434] Kernel panic - not syncing: panic_on_warn set ... [ 80.563676][ T8434] CPU: 0 PID: 8434 Comm: syz-executor040 Not tainted 5.12.0-rc5-syzkaller #0 [ 80.563699][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.563712][ T8434] Call Trace: [ 80.600349][ T8434] dump_stack+0x141/0x1d7 [ 80.604685][ T8434] panic+0x306/0x73d [ 80.608582][ T8434] ? __warn_printk+0xf3/0xf3 [ 80.613158][ T8434] ? __warn.cold+0x1a/0x44 [ 80.617559][ T8434] ? cfg80211_connect+0x1409/0x2040 [ 80.622752][ T8434] __warn.cold+0x35/0x44 [ 80.626985][ T8434] ? cfg80211_connect+0x1409/0x2040 [ 80.632199][ T8434] report_bug+0x1bd/0x210 [ 80.636530][ T8434] handle_bug+0x3c/0x60 [ 80.640687][ T8434] exc_invalid_op+0x14/0x40 [ 80.645190][ T8434] asm_exc_invalid_op+0x12/0x20 [ 80.650030][ T8434] RIP: 0010:cfg80211_connect+0x1409/0x2040 [ 80.655830][ T8434] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 8d 0a 00 00 49 83 bd 48 01 00 00 00 0f 84 97 f7 ff ff e8 57 cd 29 f9 <0f> 0b e8 50 cd 29 f9 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 80.675448][ T8434] RSP: 0018:ffffc90001817298 EFLAGS: 00010293 [ 80.681531][ T8434] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 80.689488][ T8434] RDX: ffff88802736c140 RSI: ffffffff884958a9 RDI: ffffffff8a84b4a0 [ 80.697523][ T8434] RBP: ffff88802f778d32 R08: 0000000000000001 R09: ffff88802f778d37 [ 80.705533][ T8434] R10: ffffed1005eef1a6 R11: 0000000000000000 R12: ffffc90001817438 [ 80.713497][ T8434] R13: ffff88802f778c10 R14: ffff88802f778d58 R15: ffff88802f778d60 [ 80.721459][ T8434] ? cfg80211_connect+0x1409/0x2040 [ 80.726658][ T8434] ? cfg80211_connect+0x1409/0x2040 [ 80.731862][ T8434] ? __cfg80211_disconnected+0x1470/0x1470 [ 80.737669][ T8434] ? memset+0x20/0x40 [ 80.741644][ T8434] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 80.747458][ T8434] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 80.753265][ T8434] nl80211_connect+0x1647/0x22a0 [ 80.758209][ T8434] ? nl80211_parse_connkeys+0xa50/0xa50 [ 80.763770][ T8434] ? __mutex_unlock_slowpath+0xe2/0x610 [ 80.769305][ T8434] ? wait_for_completion_io+0x270/0x270 [ 80.774848][ T8434] ? nl80211_pre_doit+0xa6/0x5c0 [ 80.779794][ T8434] genl_family_rcv_msg_doit+0x228/0x320 [ 80.785332][ T8434] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 80.792715][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.798947][ T8434] ? cap_capable+0x1f1/0x280 [ 80.803525][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.809764][ T8434] ? ns_capable+0xde/0x100 [ 80.814191][ T8434] genl_rcv_msg+0x328/0x580 [ 80.818701][ T8434] ? genl_get_cmd+0x480/0x480 [ 80.823383][ T8434] ? nl80211_parse_connkeys+0xa50/0xa50 [ 80.828936][ T8434] ? lock_release+0x720/0x720 [ 80.833630][ T8434] netlink_rcv_skb+0x153/0x420 [ 80.838395][ T8434] ? genl_get_cmd+0x480/0x480 [ 80.843061][ T8434] ? netlink_ack+0xaa0/0xaa0 [ 80.847639][ T8434] genl_rcv+0x24/0x40 [ 80.851616][ T8434] netlink_unicast+0x533/0x7d0 [ 80.856378][ T8434] ? netlink_attachskb+0x870/0x870 [ 80.861476][ T8434] netlink_sendmsg+0x856/0xd90 [ 80.866228][ T8434] ? netlink_unicast+0x7d0/0x7d0 [ 80.871153][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.877392][ T8434] ? netlink_unicast+0x7d0/0x7d0 [ 80.882330][ T8434] sock_sendmsg+0xcf/0x120 [ 80.886737][ T8434] ____sys_sendmsg+0x6e8/0x810 [ 80.891491][ T8434] ? kernel_sendmsg+0x50/0x50 [ 80.896158][ T8434] ? do_recvmmsg+0x6d0/0x6d0 [ 80.900735][ T8434] ? lock_chain_count+0x20/0x20 [ 80.905573][ T8434] ___sys_sendmsg+0xf3/0x170 [ 80.910149][ T8434] ? sendmsg_copy_msghdr+0x160/0x160 [ 80.915420][ T8434] ? __lock_acquire+0x16b3/0x54c0 [ 80.920450][ T8434] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 80.926420][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 80.932671][ T8434] ? __fget_light+0x215/0x280 [ 80.937332][ T8434] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 80.943559][ T8434] __sys_sendmsg+0xe5/0x1b0 [ 80.948048][ T8434] ? __sys_sendmsg_sock+0x30/0x30 [ 80.953058][ T8434] ? syscall_enter_from_user_mode+0x27/0x70 [ 80.958954][ T8434] do_syscall_64+0x2d/0x70 [ 80.963363][ T8434] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 80.969248][ T8434] RIP: 0033:0x441089 [ 80.973127][ T8434] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 80.992821][ T8434] RSP: 002b:00007ffd80fcc828 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.001221][ T8434] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089 [ 81.009180][ T8434] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 81.017148][ T8434] RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000 [ 81.025103][ T8434] R10: 0000000c00000000 R11: 0000000000000246 R12: 00000000000138c9 [ 81.033057][ T8434] R13: 00007ffd80fcc890 R14: 00007ffd80fcc880 R15: 00007ffd80fcc84c [ 81.041586][ T8434] Kernel Offset: disabled [ 81.046009][ T8434] Rebooting in 86400 seconds..