[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.194' (ECDSA) to the list of known hosts. syzkaller login: [ 28.247234] IPVS: ftp: loaded support on port[0] = 21 [ 28.303743] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 28.310920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.330295] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 28.343572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program executing program [ 28.350698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.354152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.366056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.384450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.406464] ------------[ cut here ]------------ [ 28.411319] WARNING: CPU: 1 PID: 8047 at net/wireless/sme.c:533 cfg80211_connect+0x1856/0x2120 [ 28.420052] Kernel panic - not syncing: panic_on_warn set ... [ 28.420052] [ 28.427449] CPU: 1 PID: 8047 Comm: syz-executor787 Not tainted 4.14.206-syzkaller #0 [ 28.435302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.444630] Call Trace: [ 28.447198] dump_stack+0x1b2/0x283 [ 28.450802] panic+0x1f9/0x42d [ 28.453971] ? add_taint.cold+0x16/0x16 [ 28.457922] ? cfg80211_connect+0x1856/0x2120 [ 28.462392] ? cfg80211_connect+0x1856/0x2120 [ 28.466860] __warn.cold+0x20/0x4b [ 28.470376] ? ist_end_non_atomic+0x10/0x10 [ 28.474707] ? cfg80211_connect+0x1856/0x2120 [ 28.479178] report_bug+0x208/0x249 [ 28.482783] do_error_trap+0x195/0x2d0 [ 28.486647] ? math_error+0x2d0/0x2d0 [ 28.490524] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 28.496422] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 28.501249] invalid_op+0x1b/0x40 [ 28.504680] RIP: 0010:cfg80211_connect+0x1856/0x2120 [ 28.509753] RSP: 0018:ffff8880b10c7448 EFLAGS: 00010297 [ 28.515089] RAX: ffff888096652080 RBX: ffff888096991590 RCX: 0000000000000000 [ 28.522457] RDX: 0000000000000000 RSI: ffff8880a25495e6 RDI: ffffffff886b8278 [ 28.529705] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1012d322d2 [ 28.536949] R10: ffff888096991695 R11: ffff888096652080 R12: ffff8880b10c75c0 [ 28.544191] R13: ffffffff886b8140 R14: ffff8880969916b8 R15: ffff888096991690 [ 28.551447] ? cfg80211_connect+0x1856/0x2120 [ 28.555919] ? trace_hardirqs_on+0x10/0x10 [ 28.560127] ? memset+0x20/0x40 [ 28.563383] ? __cfg80211_disconnected+0x18e0/0x18e0 [ 28.568501] ? nl80211_crypto_settings+0x3a5/0x960 [ 28.573402] ? ieee80211_get_channel+0xed/0x150 [ 28.578062] nl80211_connect+0x1379/0x1cd0 [ 28.582274] ? nl80211_update_connect_params+0x9a0/0x9a0 [ 28.587701] ? lock_acquire+0x170/0x3f0 [ 28.591650] ? nl80211_pre_doit+0x2d9/0x510 [ 28.595957] ? nl80211_pre_doit+0x79/0x510 [ 28.600165] genl_family_rcv_msg+0x572/0xb20 [ 28.604549] ? genl_rcv+0x40/0x40 [ 28.607975] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 28.613399] ? trace_hardirqs_on+0x10/0x10 [ 28.617619] ? sock_sendmsg+0xb5/0x100 [ 28.621497] genl_rcv_msg+0xaf/0x140 [ 28.625195] netlink_rcv_skb+0x125/0x390 [ 28.629227] ? genl_family_rcv_msg+0xb20/0xb20 [ 28.633782] ? netlink_ack+0x9a0/0x9a0 [ 28.637642] ? lock_acquire+0x170/0x3f0 [ 28.641590] genl_rcv+0x24/0x40 [ 28.644841] netlink_unicast+0x437/0x610 [ 28.648877] ? netlink_sendskb+0xd0/0xd0 [ 28.652910] ? __check_object_size+0x179/0x22c [ 28.657476] netlink_sendmsg+0x62e/0xb80 [ 28.661523] ? nlmsg_notify+0x170/0x170 [ 28.665483] ? kernel_recvmsg+0x210/0x210 [ 28.669605] ? security_socket_sendmsg+0x83/0xb0 [ 28.674348] ? nlmsg_notify+0x170/0x170 [ 28.678294] sock_sendmsg+0xb5/0x100 [ 28.681981] ___sys_sendmsg+0x6c8/0x800 [ 28.685940] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 28.690668] ? dev_ioctl+0xe7/0xbe0 [ 28.694270] ? dev_ifsioc+0x7d0/0x7d0 [ 28.698056] ? __dentry_kill+0x3f7/0x550 [ 28.702089] ? trace_hardirqs_on+0x10/0x10 [ 28.706297] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 28.711286] ? kmem_cache_free+0x23a/0x2b0 [ 28.715497] ? sock_ioctl+0x16c/0x4c0 [ 28.719267] ? sock_release+0x1e0/0x1e0 [ 28.723214] ? __fdget+0x167/0x1f0 [ 28.726730] ? sockfd_lookup_light+0xb2/0x160 [ 28.731198] __sys_sendmsg+0xa3/0x120 [ 28.734974] ? SyS_shutdown+0x160/0x160 [ 28.738923] ? security_file_ioctl+0x83/0xb0 [ 28.743324] SyS_sendmsg+0x27/0x40 [ 28.746839] ? __sys_sendmsg+0x120/0x120 [ 28.750872] do_syscall_64+0x1d5/0x640 [ 28.754741] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 28.759914] RIP: 0033:0x442139 [ 28.763077] RSP: 002b:00007ffe44751728 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 28.770758] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000442139 [ 28.777999] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 28.785330] RBP: 0000000000000000 R08: 0000001300000000 R09: 0000001300000000 [ 28.792573] R10: 0000001300000000 R11: 0000000000000246 R12: 0000000000006f04 [ 28.799816] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 28.807810] Kernel Offset: disabled [ 28.811463] Rebooting in 86400 seconds..