[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 97.143323][ T35] audit: type=1400 audit(1612902767.736:8): avc: denied { execmem } for pid=8455 comm="syz-executor424" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 97.166689][ T8457] device wlan0 entered promiscuous mode [ 97.187346][ T8457] ------------[ cut here ]------------ [ 97.201315][ T8457] WARNING: CPU: 1 PID: 8457 at net/mac80211/ieee80211_i.h:1457 ieee80211_get_sband+0x2e3/0x3e0 [ 97.215502][ T8457] Modules linked in: [ 97.219490][ T8457] CPU: 0 PID: 8457 Comm: syz-executor424 Not tainted 5.11.0-rc7-syzkaller #0 [ 97.229537][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.240147][ T8457] RIP: 0010:ieee80211_get_sband+0x2e3/0x3e0 [ 97.246276][ T8457] Code: f9 48 c7 c2 c0 d5 62 8a be 89 02 00 00 48 c7 c7 20 d6 62 8a c6 05 08 fa 38 05 01 e8 d9 4d 64 00 e9 b8 fd ff ff e8 fd 35 1c f9 <0f> 0b e8 36 e5 a4 00 31 ff 89 c3 89 c6 e8 0b 3c 1c f9 85 db 74 19 [ 97.266101][ T8457] RSP: 0018:ffffc900011573d8 EFLAGS: 00010293 [ 97.272293][ T8457] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 97.283197][ T8457] RDX: ffff888027792380 RSI: ffffffff8856a0d3 RDI: 0000000000000003 [ 97.291451][ T8457] RBP: ffff88801cc60c80 R08: 0000000000000000 R09: 0000000000000000 [ 97.299460][ T8457] R10: ffffffff8856a055 R11: 0000000000000000 R12: 0000000000000000 [ 97.307537][ T8457] R13: ffff88801cce0bc0 R14: ffff88801cc60c80 R15: ffffc9000115751c [ 97.315690][ T8457] FS: 00007fdbcf917700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 97.324872][ T8457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.331555][ T8457] CR2: 00007f88c258b380 CR3: 000000001a8db000 CR4: 00000000001506e0 [ 97.339874][ T8457] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.347940][ T8457] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.356039][ T8457] Call Trace: [ 97.359334][ T8457] sta_apply_parameters+0x4e/0x1dc0 [ 97.364907][ T8457] ieee80211_add_station+0x320/0x660 [ 97.370408][ T8457] nl80211_new_station+0xdd0/0x13c0 [ 97.375724][ T8457] ? rdev_set_cqm_rssi_config+0x330/0x330 [ 97.381660][ T8457] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 97.388160][ T8457] ? nl80211_pre_doit+0xa2/0x630 [ 97.393869][ T8457] genl_family_rcv_msg_doit+0x228/0x320 [ 97.399530][ T8457] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 97.407069][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 97.413475][ T8457] ? cap_capable+0x1f1/0x280 [ 97.418804][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 97.427052][ T8457] ? ns_capable+0xde/0x100 [ 97.431672][ T8457] genl_rcv_msg+0x328/0x580 [ 97.436320][ T8457] ? genl_get_cmd+0x480/0x480 [ 97.441815][ T8457] ? rdev_set_cqm_rssi_config+0x330/0x330 [ 97.447726][ T8457] ? lock_release+0x710/0x710 [ 97.452545][ T8457] netlink_rcv_skb+0x153/0x420 [ 97.457459][ T8457] ? genl_get_cmd+0x480/0x480 [ 97.462353][ T8457] ? netlink_ack+0xaa0/0xaa0 [ 97.467018][ T8457] genl_rcv+0x24/0x40 [ 97.471170][ T8457] netlink_unicast+0x533/0x7d0 [ 97.476021][ T8457] ? netlink_attachskb+0x870/0x870 [ 97.481223][ T8457] ? _copy_from_iter_full+0x275/0x850 [ 97.486667][ T8457] netlink_sendmsg+0x856/0xd90 [ 97.491754][ T8457] ? netlink_unicast+0x7d0/0x7d0 [ 97.497418][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 97.504176][ T8457] ? netlink_unicast+0x7d0/0x7d0 [ 97.509432][ T8457] sock_sendmsg+0xcf/0x120 [ 97.513976][ T8457] ____sys_sendmsg+0x6e8/0x810 [ 97.518919][ T8457] ? kernel_sendmsg+0x50/0x50 [ 97.523713][ T8457] ? do_recvmmsg+0x6c0/0x6c0 [ 97.528669][ T8457] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 97.534884][ T8457] ___sys_sendmsg+0xf3/0x170 [ 97.540541][ T8457] ? sendmsg_copy_msghdr+0x160/0x160 [ 97.545963][ T8457] ? __fget_files+0x266/0x3d0 [ 97.550729][ T8457] ? lock_downgrade+0x6d0/0x6d0 [ 97.555807][ T8457] ? __fget_files+0x288/0x3d0 [ 97.560568][ T8457] ? __fget_light+0xea/0x280 [ 97.565322][ T8457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 97.571751][ T8457] __sys_sendmsg+0xe5/0x1b0 [ 97.576410][ T8457] ? __sys_sendmsg_sock+0xb0/0xb0 [ 97.581523][ T8457] ? __do_sys_futex+0x2a2/0x470 [ 97.586478][ T8457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 97.592526][ T8457] do_syscall_64+0x2d/0x70 [ 97.597003][ T8457] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.603924][ T8457] RIP: 0033:0x4459a9 [ 97.607908][ T8457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 97.628333][ T8457] RSP: 002b:00007fdbcf9172f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.636907][ T8457] RAX: ffffffffffffffda RBX: 00000000004cb470 RCX: 00000000004459a9 [ 97.645032][ T8457] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 97.653159][ T8457] RBP: 00000000004cb47c R08: 0000000000000000 R09: 0000000000000000 [ 97.661349][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000049af88 [ 97.669368][ T8457] R13: 0031313230386c6e R14: 1102080006000a00 R15: 00000000004cb478 [ 97.677918][ T8457] Kernel panic - not syncing: panic_on_warn set ... [ 97.684847][ T8457] CPU: 1 PID: 8457 Comm: syz-executor424 Not tainted 5.11.0-rc7-syzkaller #0 [ 97.693614][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.703679][ T8457] Call Trace: [ 97.706976][ T8457] dump_stack+0x107/0x163 [ 97.711343][ T8457] panic+0x306/0x73d [ 97.715262][ T8457] ? __warn_printk+0xf3/0xf3 [ 97.719883][ T8457] ? __warn.cold+0x1a/0x44 [ 97.724346][ T8457] ? ieee80211_get_sband+0x2e3/0x3e0 [ 97.729758][ T8457] __warn.cold+0x35/0x44 [ 97.734504][ T8457] ? ieee80211_get_sband+0x2e3/0x3e0 [ 97.739831][ T8457] report_bug+0x1bd/0x210 [ 97.744183][ T8457] handle_bug+0x3c/0x60 [ 97.748364][ T8457] exc_invalid_op+0x14/0x40 [ 97.752884][ T8457] asm_exc_invalid_op+0x12/0x20 [ 97.757730][ T8457] RIP: 0010:ieee80211_get_sband+0x2e3/0x3e0 [ 97.763733][ T8457] Code: f9 48 c7 c2 c0 d5 62 8a be 89 02 00 00 48 c7 c7 20 d6 62 8a c6 05 08 fa 38 05 01 e8 d9 4d 64 00 e9 b8 fd ff ff e8 fd 35 1c f9 <0f> 0b e8 36 e5 a4 00 31 ff 89 c3 89 c6 e8 0b 3c 1c f9 85 db 74 19 [ 97.783514][ T8457] RSP: 0018:ffffc900011573d8 EFLAGS: 00010293 [ 97.789729][ T8457] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 97.797857][ T8457] RDX: ffff888027792380 RSI: ffffffff8856a0d3 RDI: 0000000000000003 [ 97.805854][ T8457] RBP: ffff88801cc60c80 R08: 0000000000000000 R09: 0000000000000000 [ 97.813843][ T8457] R10: ffffffff8856a055 R11: 0000000000000000 R12: 0000000000000000 [ 97.821848][ T8457] R13: ffff88801cce0bc0 R14: ffff88801cc60c80 R15: ffffc9000115751c [ 97.829841][ T8457] ? ieee80211_get_sband+0x265/0x3e0 [ 97.835151][ T8457] ? ieee80211_get_sband+0x2e3/0x3e0 [ 97.840656][ T8457] ? ieee80211_get_sband+0x2e3/0x3e0 [ 97.845960][ T8457] sta_apply_parameters+0x4e/0x1dc0 [ 97.851194][ T8457] ieee80211_add_station+0x320/0x660 [ 97.856496][ T8457] nl80211_new_station+0xdd0/0x13c0 [ 97.861699][ T8457] ? rdev_set_cqm_rssi_config+0x330/0x330 [ 97.867454][ T8457] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 97.873722][ T8457] ? nl80211_pre_doit+0xa2/0x630 [ 97.878678][ T8457] genl_family_rcv_msg_doit+0x228/0x320 [ 97.884246][ T8457] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 97.891628][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 97.897883][ T8457] ? cap_capable+0x1f1/0x280 [ 97.902490][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 97.908747][ T8457] ? ns_capable+0xde/0x100 [ 97.913190][ T8457] genl_rcv_msg+0x328/0x580 [ 97.917735][ T8457] ? genl_get_cmd+0x480/0x480 [ 97.922422][ T8457] ? rdev_set_cqm_rssi_config+0x330/0x330 [ 97.928302][ T8457] ? lock_release+0x710/0x710 [ 97.932996][ T8457] netlink_rcv_skb+0x153/0x420 [ 97.937783][ T8457] ? genl_get_cmd+0x480/0x480 [ 97.942468][ T8457] ? netlink_ack+0xaa0/0xaa0 [ 97.947074][ T8457] genl_rcv+0x24/0x40 [ 97.951075][ T8457] netlink_unicast+0x533/0x7d0 [ 97.955871][ T8457] ? netlink_attachskb+0x870/0x870 [ 97.961003][ T8457] ? _copy_from_iter_full+0x275/0x850 [ 97.966409][ T8457] netlink_sendmsg+0x856/0xd90 [ 97.971184][ T8457] ? netlink_unicast+0x7d0/0x7d0 [ 97.976153][ T8457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 97.982415][ T8457] ? netlink_unicast+0x7d0/0x7d0 [ 97.987527][ T8457] sock_sendmsg+0xcf/0x120 [ 97.991943][ T8457] ____sys_sendmsg+0x6e8/0x810 [ 97.996708][ T8457] ? kernel_sendmsg+0x50/0x50 [ 98.001382][ T8457] ? do_recvmmsg+0x6c0/0x6c0 [ 98.005978][ T8457] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 98.011971][ T8457] ___sys_sendmsg+0xf3/0x170 [ 98.016585][ T8457] ? sendmsg_copy_msghdr+0x160/0x160 [ 98.021876][ T8457] ? __fget_files+0x266/0x3d0 [ 98.026562][ T8457] ? lock_downgrade+0x6d0/0x6d0 [ 98.031433][ T8457] ? __fget_files+0x288/0x3d0 [ 98.036117][ T8457] ? __fget_light+0xea/0x280 [ 98.040814][ T8457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 98.047081][ T8457] __sys_sendmsg+0xe5/0x1b0 [ 98.051602][ T8457] ? __sys_sendmsg_sock+0xb0/0xb0 [ 98.056644][ T8457] ? __do_sys_futex+0x2a2/0x470 [ 98.061519][ T8457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 98.067547][ T8457] do_syscall_64+0x2d/0x70 [ 98.072127][ T8457] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 98.078037][ T8457] RIP: 0033:0x4459a9 [ 98.081940][ T8457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 98.101560][ T8457] RSP: 002b:00007fdbcf9172f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.109985][ T8457] RAX: ffffffffffffffda RBX: 00000000004cb470 RCX: 00000000004459a9 [ 98.117977][ T8457] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 98.125987][ T8457] RBP: 00000000004cb47c R08: 0000000000000000 R09: 0000000000000000 [ 98.133959][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000049af88 [ 98.141953][ T8457] R13: 0031313230386c6e R14: 1102080006000a00 R15: 00000000004cb478 [ 98.150631][ T8457] Kernel Offset: disabled [ 98.155091][ T8457] Rebooting in 86400 seconds..