[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Update UTMP about System Runlevel Changes.
[  OK  ] Started Load/Save RF Kill Switch Status.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.214' (ECDSA) to the list of known hosts.
executing program
executing program
executing program
syzkaller login: [   28.924414] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   28.962467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   28.996904] kasan: CONFIG_KASAN_INLINE enabled
[   29.009530] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   29.029316] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[   29.035577] Modules linked in:
[   29.038763] CPU: 0 PID: 8022 Comm: syz-executor026 Not tainted 4.14.204-syzkaller #0
[   29.046625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   29.055976] task: ffff8880b2ebc300 task.stack: ffff8880955b0000
[   29.062077] RIP: 0010:ieee80211_chanctx_num_assigned+0xa5/0x120
[   29.068153] RSP: 0018:ffff8880955b74a8 EFLAGS: 00010a02
[   29.073514] RAX: 1bd5a00000000020 RBX: deacfffffffff920 RCX: 1ffffffff1279f18
[   29.080798] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: dead000000000100
[   29.088057] RBP: ffff8880b0f1b020 R08: 0000000000000000 R09: 0000000000040589
[   29.095324] R10: ffff8880b2ebcc50 R11: ffff8880b2ebc300 R12: 0000000000000002
[   29.102592] R13: dffffc0000000000 R14: ffff8880b0f1b000 R15: 0000000000000000
[   29.109853] FS:  0000000002562880(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
[   29.118056] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   29.123923] CR2: 00007f4d1d5e7210 CR3: 00000000995b3000 CR4: 00000000001406f0
[   29.131170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   29.138416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   29.145669] Call Trace:
[   29.148239]  ieee80211_assign_vif_chanctx+0x65e/0x1370
[   29.153489]  __ieee80211_vif_release_channel+0x1ef/0x3f0
[   29.158915]  ieee80211_vif_release_channel+0xef/0x1f0
[   29.164106]  ieee80211_ibss_disconnect+0x527/0xd40
[   29.169012]  ieee80211_ibss_leave+0x12/0xd8
[   29.173309]  __cfg80211_leave_ibss+0x14c/0x6d0
[   29.177881]  cfg80211_leave_ibss+0x54/0x70
[   29.182090]  cfg80211_change_iface+0x791/0x13d0
[   29.186739]  nl80211_set_interface+0x588/0x760
[   29.191296]  ? nl80211_nan_del_func+0x830/0x830
[   29.195939]  ? nl80211_dump_interface+0x640/0x640
[   29.200754]  ? nl80211_pre_doit+0x79/0x510
[   29.204963]  genl_family_rcv_msg+0x572/0xb20
[   29.209347]  ? genl_rcv+0x40/0x40
[   29.212773]  ? __ww_mutex_wakeup_for_backoff+0x210/0x210
[   29.218199]  ? trace_hardirqs_on+0x10/0x10
[   29.222406]  ? sock_sendmsg+0xb5/0x100
[   29.226271]  genl_rcv_msg+0xaf/0x140
[   29.229958]  netlink_rcv_skb+0x125/0x390
[   29.233992]  ? genl_family_rcv_msg+0xb20/0xb20
[   29.238548]  ? netlink_ack+0x9a0/0x9a0
[   29.242409]  ? lock_acquire+0x170/0x3f0
[   29.246359]  genl_rcv+0x24/0x40
[   29.249623]  netlink_unicast+0x437/0x610
[   29.253664]  ? netlink_sendskb+0xd0/0xd0
[   29.257701]  ? __check_object_size+0x179/0x22c
[   29.262256]  netlink_sendmsg+0x62e/0xb80
[   29.266306]  ? nlmsg_notify+0x170/0x170
[   29.270258]  ? kernel_recvmsg+0x210/0x210
[   29.274399]  ? security_socket_sendmsg+0x83/0xb0
[   29.279128]  ? nlmsg_notify+0x170/0x170
[   29.283074]  sock_sendmsg+0xb5/0x100
[   29.286764]  ___sys_sendmsg+0x6c8/0x800
[   29.290712]  ? copy_msghdr_from_user+0x3b0/0x3b0
[   29.295441]  ? dev_ioctl+0xe7/0xbe0
[   29.299055]  ? dev_ifsioc+0x7d0/0x7d0
[   29.302845]  ? __dentry_kill+0x3f7/0x550
[   29.306935]  ? trace_hardirqs_on+0x10/0x10
[   29.311154]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[   29.316155]  ? kmem_cache_free+0x23a/0x2b0
[   29.320368]  ? sock_ioctl+0x16c/0x4c0
[   29.324145]  ? sock_release+0x1e0/0x1e0
[   29.328240]  ? __fdget+0x167/0x1f0
[   29.331772]  ? sockfd_lookup_light+0xb2/0x160
[   29.336288]  __sys_sendmsg+0xa3/0x120
[   29.340135]  ? SyS_shutdown+0x160/0x160
[   29.344119]  ? security_file_ioctl+0x83/0xb0
[   29.348531]  SyS_sendmsg+0x27/0x40
[   29.352059]  ? __sys_sendmsg+0x120/0x120
[   29.356117]  do_syscall_64+0x1d5/0x640
[   29.360112]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[   29.365288] RIP: 0033:0x441f29
[   29.368456] RSP: 002b:00007ffc5aafb9f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   29.376144] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441f29
[   29.383391] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[   29.390666] RBP: 0000000000007131 R08: 00000000004002e0 R09: 00000000004002e0
[   29.397921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402a90
[   29.405178] R13: 0000000000402b20 R14: 0000000000000000 R15: 0000000000000000
[   29.412432] Code: 98 20 f8 ff ff 48 39 c5 74 3b 49 bd 00 00 00 00 00 fc ff df e8 8d cd 7b fa 48 8d bb e0 07 00 00 41 83 c4 01 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 75 5d 48 8b 83 e0 07 00 00 48 8d 98 20 f8 ff ff 
[   29.431515] RIP: ieee80211_chanctx_num_assigned+0xa5/0x120 RSP: ffff8880955b74a8
[   29.440388] ---[ end trace b82d94e37ab537f4 ]---
[   29.445195] Kernel panic - not syncing: Fatal exception
[   29.451100] Kernel Offset: disabled
[   29.454720] Rebooting in 86400 seconds..