[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.71' (ECDSA) to the list of known hosts. syzkaller login: [ 44.330887] audit: type=1400 audit(1603287197.692:8): avc: denied { execmem } for pid=8098 comm="syz-executor675" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 44.349096] IPVS: ftp: loaded support on port[0] = 21 executing program [ 44.433635] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 44.442062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.465668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.469023] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 44.490817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.497783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.498404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.512133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.522169] kasan: CONFIG_KASAN_INLINE enabled [ 44.528241] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 44.535924] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 44.542166] CPU: 0 PID: 8099 Comm: syz-executor675 Not tainted 4.19.152-syzkaller #0 [ 44.550038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.559400] RIP: 0010:ioctl_standard_call+0x229/0x2e0 [ 44.564574] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ba 00 00 00 48 8b 9d e8 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 44.583491] RSP: 0018:ffff8880a9befb08 EFLAGS: 00010246 [ 44.588854] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88057926 [ 44.596196] RDX: 0000000000000000 RSI: ffffffff8805792f RDI: ffff8880a909d428 [ 44.603471] RBP: ffff8880a909d240 R08: 0000000000000000 R09: 0000000000000000 [ 44.611010] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 44.618352] R13: ffff8880a9befbf0 R14: 0000000000008b04 R15: 0000000000000004 [ 44.625607] FS: 0000000001a94880(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 44.633856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.639733] CR2: 00000000006d2090 CR3: 00000000b25b5000 CR4: 00000000001406f0 [ 44.647014] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.654282] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.661538] Call Trace: [ 44.664137] ? cfg80211_wext_freq+0x1a0/0x1a0 [ 44.668741] ? cfg80211_wext_freq+0x1a0/0x1a0 [ 44.673238] ? iw_handler_get_private+0x1a0/0x1a0 [ 44.678068] wireless_process_ioctl+0x35b/0x4d0 [ 44.682729] ? ioctl_standard_iw_point+0xb50/0xb50 [ 44.687645] wext_handle_ioctl+0x26b/0x280 [ 44.691864] ? call_commit_handler+0x100/0x100 [ 44.696454] ? __lock_acquire+0x6ec/0x3ff0 [ 44.700765] ? __lock_acquire+0x6ec/0x3ff0 [ 44.705005] sock_ioctl+0x306/0x5f0 [ 44.708619] ? routing_ioctl+0x570/0x570 [ 44.712679] ? mark_held_locks+0xf0/0xf0 [ 44.716740] ? routing_ioctl+0x570/0x570 [ 44.720815] do_vfs_ioctl+0xcdb/0x12e0 [ 44.724715] ? selinux_file_ioctl+0x44f/0x5e0 [ 44.729206] ? ioctl_preallocate+0x200/0x200 [ 44.733623] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 44.739080] ? find_held_lock+0xa4/0x110 [ 44.743134] ? __fd_install+0x22a/0x6e0 [ 44.747096] ? lock_downgrade+0x750/0x750 [ 44.751247] ksys_ioctl+0x9b/0xc0 [ 44.754705] __x64_sys_ioctl+0x6f/0xb0 [ 44.758600] do_syscall_64+0xf9/0x670 [ 44.762384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.767560] RIP: 0033:0x441579 [ 44.770749] Code: e8 ec 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 44.789648] RSP: 002b:00007ffcc7666ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.797339] RAX: ffffffffffffffda RBX: 00007ffcc7666b00 RCX: 0000000000441579 [ 44.804622] RDX: 00000000200001c0 RSI: 0000000000008b04 RDI: 0000000000000005 [ 44.811879] RBP: 0000000000000003 R08: 0000001d00000000 R09: 0000001d00000000 [ 44.819156] R10: 0000001d00000000 R11: 0000000000000246 R12: 0000000000000032 [ 44.826415] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 44.833675] Modules linked in: [ 44.838054] ---[ end trace 378d58bb8f9f0166 ]--- [ 44.843046] RIP: 0010:ioctl_standard_call+0x229/0x2e0 [ 44.848615] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ba 00 00 00 48 8b 9d e8 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 44.868028] RSP: 0018:ffff8880a9befb08 EFLAGS: 00010246 [ 44.873382] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88057926 [ 44.880716] RDX: 0000000000000000 RSI: ffffffff8805792f RDI: ffff8880a909d428 [ 44.888112] RBP: ffff8880a909d240 R08: 0000000000000000 R09: 0000000000000000 [ 44.895380] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 44.902756] R13: ffff8880a9befbf0 R14: 0000000000008b04 R15: 0000000000000004 [ 44.910605] FS: 0000000001a94880(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 44.918918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.924908] CR2: 00000000006d2090 CR3: 00000000b25b5000 CR4: 00000000001406f0 [ 44.933217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.940816] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.948478] Kernel panic - not syncing: Fatal exception [ 44.954491] Kernel Offset: disabled [ 44.958114] Rebooting in 86400 seconds..