Warning: Permanently added '10.128.0.218' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 55.872252][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.904526][ T8402] general protection fault, probably for non-canonical address 0xfbd59c0000000020: 0000 [#1] PREEMPT SMP KASAN [ 55.916858][ T8402] KASAN: maybe wild-memory-access in range [0xdead000000000100-0xdead000000000107] [ 55.926249][ T8402] CPU: 0 PID: 8402 Comm: syz-executor600 Not tainted 5.12.0-rc2-syzkaller #0 [ 55.935110][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.945173][ T8402] RIP: 0010:ieee80211_chanctx_num_assigned+0xb1/0x140 [ 55.952083][ T8402] Code: a8 f6 ff ff 48 39 c5 74 3b 49 bd 00 00 00 00 00 fc ff df e8 71 46 0f f9 48 8d bb 58 09 00 00 41 83 c4 01 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 75 68 48 8b 83 58 09 00 00 48 8d 98 a8 f6 ff ff 48 [ 55.972887][ T8402] RSP: 0018:ffffc9000165f330 EFLAGS: 00010212 [ 55.979150][ T8402] RAX: 1bd5a00000000020 RBX: deacfffffffff7a8 RCX: 0000000000000000 [ 55.987134][ T8402] RDX: ffff8880177f5340 RSI: ffffffff8864597f RDI: dead000000000100 [ 55.995379][ T8402] RBP: ffff88801450a020 R08: 0000000000000000 R09: 0000000000000001 [ 56.003450][ T8402] R10: ffffffff886459db R11: 0000000000000000 R12: 0000000000000002 [ 56.011432][ T8402] R13: dffffc0000000000 R14: ffff88801450a000 R15: 0000000000000000 [ 56.019660][ T8402] FS: 00000000017e9300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 56.028693][ T8402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.035859][ T8402] CR2: 00007ffd0b349c78 CR3: 0000000012d60000 CR4: 0000000000350ef0 [ 56.044093][ T8402] Call Trace: [ 56.047354][ T8402] ieee80211_assign_vif_chanctx+0x7bd/0x1240 [ 56.053323][ T8402] __ieee80211_vif_release_channel+0x236/0x430 [ 56.059459][ T8402] ieee80211_vif_release_channel+0x117/0x220 [ 56.065580][ T8402] ieee80211_ibss_disconnect+0x44e/0x7b0 [ 56.071197][ T8402] ieee80211_ibss_leave+0x12/0xe0 [ 56.076201][ T8402] __cfg80211_leave_ibss+0x1a2/0x4d0 [ 56.081470][ T8402] cfg80211_leave_ibss+0x57/0x80 [ 56.086389][ T8402] cfg80211_change_iface+0x820/0xf30 [ 56.091656][ T8402] nl80211_set_interface+0x65c/0x8d0 [ 56.096928][ T8402] ? nl80211_notify_iface+0x180/0x180 [ 56.102286][ T8402] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 56.108596][ T8402] ? nl80211_pre_doit+0xa4/0x5a0 [ 56.113535][ T8402] genl_family_rcv_msg_doit+0x228/0x320 [ 56.119079][ T8402] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 56.126431][ T8402] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.132657][ T8402] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.138897][ T8402] ? ns_capable+0xde/0x100 [ 56.143300][ T8402] genl_rcv_msg+0x328/0x580 [ 56.147804][ T8402] ? genl_get_cmd+0x480/0x480 [ 56.152462][ T8402] ? nl80211_notify_iface+0x180/0x180 [ 56.157833][ T8402] ? lock_release+0x720/0x720 [ 56.162490][ T8402] netlink_rcv_skb+0x153/0x420 [ 56.167260][ T8402] ? genl_get_cmd+0x480/0x480 [ 56.172020][ T8402] ? netlink_ack+0xaa0/0xaa0 [ 56.176598][ T8402] genl_rcv+0x24/0x40 [ 56.180561][ T8402] netlink_unicast+0x533/0x7d0 [ 56.185306][ T8402] ? netlink_attachskb+0x870/0x870 [ 56.190397][ T8402] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.196619][ T8402] ? __phys_addr_symbol+0x2c/0x70 [ 56.201629][ T8402] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 56.207327][ T8402] ? __check_object_size+0x171/0x3f0 [ 56.212594][ T8402] netlink_sendmsg+0x856/0xd90 [ 56.217340][ T8402] ? netlink_unicast+0x7d0/0x7d0 [ 56.222520][ T8402] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.228739][ T8402] ? netlink_unicast+0x7d0/0x7d0 [ 56.233657][ T8402] sock_sendmsg+0xcf/0x120 [ 56.238086][ T8402] ____sys_sendmsg+0x6e8/0x810 [ 56.242830][ T8402] ? kernel_sendmsg+0x50/0x50 [ 56.247592][ T8402] ? do_recvmmsg+0x6d0/0x6d0 [ 56.252166][ T8402] ? find_held_lock+0x2d/0x110 [ 56.256912][ T8402] ___sys_sendmsg+0xf3/0x170 [ 56.261484][ T8402] ? sendmsg_copy_msghdr+0x160/0x160 [ 56.266747][ T8402] ? _copy_to_user+0xdc/0x150 [ 56.271494][ T8402] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.277713][ T8402] ? sock_do_ioctl+0x168/0x2d0 [ 56.282459][ T8402] ? compat_ifr_data_ioctl+0x150/0x150 [ 56.287913][ T8402] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 56.293787][ T8402] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.300010][ T8402] ? __fget_light+0x215/0x280 [ 56.304665][ T8402] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.310891][ T8402] __sys_sendmsg+0xe5/0x1b0 [ 56.315373][ T8402] ? __sys_sendmsg_sock+0x30/0x30 [ 56.320378][ T8402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 56.326264][ T8402] do_syscall_64+0x2d/0x70 [ 56.330662][ T8402] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.336777][ T8402] RIP: 0033:0x440bf9 [ 56.340893][ T8402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.360768][ T8402] RSP: 002b:00007ffd0b34ace8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.369424][ T8402] RAX: ffffffffffffffda RBX: 000000000000da32 RCX: 0000000000440bf9 [ 56.377381][ T8402] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 56.385338][ T8402] RBP: 0000000000000000 R08: 00007ffd0b34ae88 R09: 00007ffd0b34ae88 [ 56.393297][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0b34acfc [ 56.401284][ T8402] R13: 431bde82d7b634db R14: 00000000004b5018 R15: 00000000004004b8 [ 56.409256][ T8402] Modules linked in: [ 56.415645][ T8402] ---[ end trace 79ad893887dfd2e9 ]--- [ 56.421170][ T8402] RIP: 0010:ieee80211_chanctx_num_assigned+0xb1/0x140 [ 56.428925][ T8402] Code: a8 f6 ff ff 48 39 c5 74 3b 49 bd 00 00 00 00 00 fc ff df e8 71 46 0f f9 48 8d bb 58 09 00 00 41 83 c4 01 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 75 68 48 8b 83 58 09 00 00 48 8d 98 a8 f6 ff ff 48 [ 56.449186][ T8402] RSP: 0018:ffffc9000165f330 EFLAGS: 00010212 [ 56.456667][ T8402] RAX: 1bd5a00000000020 RBX: deacfffffffff7a8 RCX: 0000000000000000 [ 56.465177][ T8402] RDX: ffff8880177f5340 RSI: ffffffff8864597f RDI: dead000000000100 [ 56.473155][ T8402] RBP: ffff88801450a020 R08: 0000000000000000 R09: 0000000000000001 [ 56.482170][ T8402] R10: ffffffff886459db R11: 0000000000000000 R12: 0000000000000002 [ 56.490445][ T8402] R13: dffffc0000000000 R14: ffff88801450a000 R15: 0000000000000000 [ 56.498683][ T8402] FS: 00000000017e9300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 56.507872][ T8402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.514696][ T8402] CR2: 00007f5a9ce380a0 CR3: 0000000012d60000 CR4: 0000000000350ef0 [ 56.522832][ T8402] Kernel panic - not syncing: Fatal exception [ 56.532908][ T8402] Kernel Offset: disabled [ 56.537308][ T8402] Rebooting in 86400 seconds..