[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Load/Save RF Kill Switch Status.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts.
executing program
executing program
syzkaller login: [   35.071195] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   35.084976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.108051] kasan: CONFIG_KASAN_INLINE enabled
[   35.121545] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   35.129770] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[   35.136007] Modules linked in:
[   35.139200] CPU: 1 PID: 8023 Comm: syz-executor037 Not tainted 4.14.202-syzkaller #0
[   35.147071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   35.156419] task: ffff88809562c280 task.stack: ffff8880a2f38000
[   35.162478] RIP: 0010:ieee80211_chanctx_num_assigned+0xa5/0x120
[   35.168531] RSP: 0018:ffff8880a2f3f4a8 EFLAGS: 00010a02
[   35.173886] RAX: 1bd5a00000000020 RBX: deacfffffffff920 RCX: 1ffffffff1279ee0
[   35.181146] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: dead000000000100
[   35.188407] RBP: ffff8880b2c19220 R08: 0000000000000000 R09: 0000000000040582
[   35.195669] R10: ffff88809562cbd0 R11: ffff88809562c280 R12: 0000000000000002
[   35.202932] R13: dffffc0000000000 R14: ffff8880b2c19200 R15: 0000000000000000
[   35.210199] FS:  0000000001cd5880(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
[   35.218419] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   35.224291] CR2: 00007f0427df7520 CR3: 00000000a9913000 CR4: 00000000001406e0
[   35.231554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   35.238812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   35.246161] Call Trace:
[   35.248735]  ieee80211_assign_vif_chanctx+0x65e/0x1370
[   35.253997]  __ieee80211_vif_release_channel+0x1ef/0x3f0
[   35.259425]  ieee80211_vif_release_channel+0xef/0x1f0
[   35.264596]  ieee80211_ibss_disconnect+0x527/0xd40
[   35.269504]  ieee80211_ibss_leave+0x12/0xd8
[   35.273809]  __cfg80211_leave_ibss+0x14c/0x6d0
[   35.278368]  cfg80211_leave_ibss+0x54/0x70
[   35.282581]  cfg80211_change_iface+0x791/0x13d0
[   35.287225]  nl80211_set_interface+0x588/0x760
[   35.291781]  ? nl80211_nan_del_func+0x830/0x830
[   35.296424]  ? nl80211_dump_interface+0x640/0x640
[   35.301243]  ? nl80211_pre_doit+0x79/0x510
[   35.305453]  genl_family_rcv_msg+0x572/0xb20
[   35.309835]  ? genl_rcv+0x40/0x40
[   35.313263]  ? __ww_mutex_wakeup_for_backoff+0x210/0x210
[   35.318709]  ? trace_hardirqs_on+0x10/0x10
[   35.322921]  ? sock_sendmsg+0xb5/0x100
[   35.326785]  genl_rcv_msg+0xaf/0x140
[   35.330491]  netlink_rcv_skb+0x125/0x390
[   35.334530]  ? genl_family_rcv_msg+0xb20/0xb20
[   35.339087]  ? netlink_ack+0x9a0/0x9a0
[   35.342953]  ? lock_acquire+0x170/0x3f0
[   35.346908]  genl_rcv+0x24/0x40
[   35.350163]  netlink_unicast+0x437/0x610
[   35.354199]  ? netlink_sendskb+0xd0/0xd0
[   35.358236]  ? __check_object_size+0x179/0x22c
[   35.362813]  netlink_sendmsg+0x62e/0xb80
[   35.366850]  ? nlmsg_notify+0x170/0x170
[   35.370800]  ? kernel_recvmsg+0x210/0x210
[   35.374942]  ? security_socket_sendmsg+0x83/0xb0
[   35.379677]  ? nlmsg_notify+0x170/0x170
[   35.383632]  sock_sendmsg+0xb5/0x100
[   35.387321]  ___sys_sendmsg+0x6c8/0x800
[   35.391270]  ? copy_msghdr_from_user+0x3b0/0x3b0
[   35.396002]  ? dev_ioctl+0xe7/0xbe0
[   35.399601]  ? dev_ifsioc+0x7d0/0x7d0
[   35.403377]  ? __dentry_kill+0x3f7/0x550
[   35.407413]  ? trace_hardirqs_on+0x10/0x10
[   35.411624]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[   35.416616]  ? kmem_cache_free+0x23a/0x2b0
[   35.420826]  ? sock_ioctl+0x16c/0x4c0
[   35.424602]  ? sock_release+0x1e0/0x1e0
[   35.428563]  ? __fdget+0x167/0x1f0
[   35.432099]  ? sockfd_lookup_light+0xb2/0x160
[   35.436577]  __sys_sendmsg+0xa3/0x120
[   35.440354]  ? SyS_shutdown+0x160/0x160
[   35.444305]  ? security_file_ioctl+0x83/0xb0
[   35.448704]  SyS_sendmsg+0x27/0x40
[   35.452229]  ? __sys_sendmsg+0x120/0x120
[   35.456263]  do_syscall_64+0x1d5/0x640
[   35.460143]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[   35.465310] RIP: 0033:0x4421a9
[   35.468481] RSP: 002b:00007ffe8d1f4808 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   35.476173] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004421a9
[   35.483421] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[   35.490682] RBP: 000000306e616c77 R08: 00000000004002e0 R09: 00000000004002e0
[   35.497937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402d10
[   35.505182] R13: 0000000000402da0 R14: 0000000000000000 R15: 0000000000000000
[   35.512429] Code: 98 20 f8 ff ff 48 39 c5 74 3b 49 bd 00 00 00 00 00 fc ff df e8 cd ff 7b fa 48 8d bb e0 07 00 00 41 83 c4 01 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 75 5d 48 8b 83 e0 07 00 00 48 8d 98 20 f8 ff ff 
[   35.531502] RIP: ieee80211_chanctx_num_assigned+0xa5/0x120 RSP: ffff8880a2f3f4a8
[   35.540019] ---[ end trace e4372337d2da5309 ]---
[   35.544792] Kernel panic - not syncing: Fatal exception
[   35.550763] Kernel Offset: disabled
[   35.554380] Rebooting in 86400 seconds..