[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 51.013438][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.045261][ T8437] general protection fault, probably for non-canonical address 0xfbd59c0000000020: 0000 [#1] PREEMPT SMP KASAN [ 51.057031][ T8437] KASAN: maybe wild-memory-access in range [0xdead000000000100-0xdead000000000107] [ 51.066323][ T8437] CPU: 1 PID: 8437 Comm: syz-executor380 Not tainted 5.11.0-rc6-syzkaller #0 [ 51.075092][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.085187][ T8437] RIP: 0010:ieee80211_assign_vif_chanctx+0x6a7/0xa80 [ 51.091909][ T8437] Code: 08 00 0f 85 96 00 00 00 e9 f7 00 00 00 e8 31 d8 8a f8 49 83 c6 20 31 db 4c 89 f5 0f 1f 84 00 00 00 00 00 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 da 2c ce f8 48 8b 6d 00 4c 39 f5 [ 51.111530][ T8437] RSP: 0018:ffffc900012df670 EFLAGS: 00010a02 [ 51.117611][ T8437] RAX: 1bd5a00000000020 RBX: 0000000000000002 RCX: ffff888019191bc0 [ 51.125592][ T8437] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 51.133574][ T8437] RBP: dead000000000100 R08: ffffffff88eceea5 R09: fffffbfff1a272ce [ 51.141557][ T8437] R10: fffffbfff1a272ce R11: 0000000000000000 R12: 0000000000000000 [ 51.149541][ T8437] R13: dffffc0000000000 R14: ffff88801e308d20 R15: ffff88801b0b0bc0 [ 51.157521][ T8437] FS: 0000000002177300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 51.166461][ T8437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.173081][ T8437] CR2: 00000000004b4120 CR3: 0000000020843000 CR4: 00000000001506e0 [ 51.181064][ T8437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.189062][ T8437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.197057][ T8437] Call Trace: [ 51.200326][ T8437] __ieee80211_vif_release_channel+0x279/0x540 [ 51.206489][ T8437] ieee80211_vif_release_channel+0x13e/0x1a0 [ 51.212466][ T8437] ieee80211_ibss_disconnect+0x6ea/0x870 [ 51.218095][ T8437] ieee80211_ibss_leave+0x26/0xf0 [ 51.223216][ T8437] __cfg80211_leave_ibss+0x11c/0x200 [ 51.228506][ T8437] cfg80211_leave_ibss+0x5c/0x70 [ 51.233476][ T8437] cfg80211_change_iface+0x428/0xaa0 [ 51.238752][ T8437] nl80211_set_interface+0x497/0x7f0 [ 51.244040][ T8437] genl_rcv_msg+0xe4e/0x1280 [ 51.248634][ T8437] ? nl80211_dump_interface+0x610/0x610 [ 51.254196][ T8437] netlink_rcv_skb+0x190/0x3a0 [ 51.258945][ T8437] ? genl_rcv+0x40/0x40 [ 51.263096][ T8437] genl_rcv+0x24/0x40 [ 51.267054][ T8437] netlink_unicast+0x786/0x940 [ 51.271801][ T8437] netlink_sendmsg+0x9ae/0xd50 [ 51.276563][ T8437] ? netlink_getsockopt+0xa50/0xa50 [ 51.281741][ T8437] ____sys_sendmsg+0x519/0x800 [ 51.286497][ T8437] ? import_iovec+0xe6/0x120 [ 51.291095][ T8437] __sys_sendmsg+0x2bf/0x370 [ 51.295678][ T8437] ? __might_fault+0xb9/0x110 [ 51.300359][ T8437] ? _copy_to_user+0xef/0x130 [ 51.305081][ T8437] ? sock_do_ioctl+0x210/0x260 [ 51.309917][ T8437] ? syscall_enter_from_user_mode+0x24/0x190 [ 51.315896][ T8437] ? lockdep_hardirqs_on+0x8d/0x130 [ 51.321099][ T8437] ? syscall_enter_from_user_mode+0x24/0x190 [ 51.327078][ T8437] do_syscall_64+0x2d/0x70 [ 51.331489][ T8437] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 51.337384][ T8437] RIP: 0033:0x440dc9 [ 51.341265][ T8437] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.360884][ T8437] RSP: 002b:00007ffd04b71a38 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.369308][ T8437] RAX: ffffffffffffffda RBX: 000000000000c720 RCX: 0000000000440dc9 [ 51.377469][ T8437] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 51.385427][ T8437] RBP: 0000000000000000 R08: 00007ffd04b71bd8 R09: 00007ffd04b71bd8 [ 51.393399][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd04b71a4c [ 51.401376][ T8437] R13: 431bde82d7b634db R14: 00000000004b4018 R15: 00000000004004b8 [ 51.416319][ T8437] Modules linked in: [ 51.420703][ T8437] ---[ end trace 06bdf9f48c290e2f ]--- [ 51.426718][ T8437] RIP: 0010:ieee80211_assign_vif_chanctx+0x6a7/0xa80 [ 51.434657][ T8437] Code: 08 00 0f 85 96 00 00 00 e9 f7 00 00 00 e8 31 d8 8a f8 49 83 c6 20 31 db 4c 89 f5 0f 1f 84 00 00 00 00 00 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 da 2c ce f8 48 8b 6d 00 4c 39 f5 [ 51.454473][ T8437] RSP: 0018:ffffc900012df670 EFLAGS: 00010a02 [ 51.460631][ T8437] RAX: 1bd5a00000000020 RBX: 0000000000000002 RCX: ffff888019191bc0 [ 51.468698][ T8437] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 51.476716][ T8437] RBP: dead000000000100 R08: ffffffff88eceea5 R09: fffffbfff1a272ce [ 51.484818][ T8437] R10: fffffbfff1a272ce R11: 0000000000000000 R12: 0000000000000000 [ 51.492846][ T8437] R13: dffffc0000000000 R14: ffff88801e308d20 R15: ffff88801b0b0bc0 [ 51.500881][ T8437] FS: 0000000002177300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 51.509918][ T8437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.516528][ T8437] CR2: 00000000004b4120 CR3: 0000000020843000 CR4: 00000000001506e0 [ 51.524554][ T8437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.532629][ T8437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.540671][ T8437] Kernel panic - not syncing: Fatal exception [ 51.547195][ T8437] Kernel Offset: disabled [ 51.551516][ T8437] Rebooting in 86400 seconds..