Warning: Permanently added '10.128.0.122' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 68.448811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.489710][ T8439] general protection fault, probably for non-canonical address 0xfbd59c0000000020: 0000 [#1] PREEMPT SMP KASAN [ 68.501493][ T8439] KASAN: maybe wild-memory-access in range [0xdead000000000100-0xdead000000000107] [ 68.510788][ T8439] CPU: 1 PID: 8439 Comm: syz-executor049 Not tainted 5.12.0-rc4-next-20210322-syzkaller #0 [ 68.520781][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.530848][ T8439] RIP: 0010:ieee80211_chanctx_num_assigned+0xb1/0x140 [ 68.537688][ T8439] Code: a8 f6 ff ff 48 39 c5 74 3b 49 bd 00 00 00 00 00 fc ff df e8 41 c7 06 f9 48 8d bb 58 09 00 00 41 83 c4 01 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 75 68 48 8b 83 58 09 00 00 48 8d 98 a8 f6 ff ff 48 [ 68.557315][ T8439] RSP: 0018:ffffc900016bf330 EFLAGS: 00010a02 [ 68.563507][ T8439] RAX: 1bd5a00000000020 RBX: deacfffffffff7a8 RCX: 0000000000000000 [ 68.571486][ T8439] RDX: ffff8880145a0000 RSI: ffffffff886d5f5f RDI: dead000000000100 [ 68.579466][ T8439] RBP: ffff888013552720 R08: 0000000000000000 R09: 0000000000000001 [ 68.587481][ T8439] R10: ffffffff886d5fbb R11: 0000000000000000 R12: 0000000000000002 [ 68.595471][ T8439] R13: dffffc0000000000 R14: ffff888013552700 R15: 0000000000000000 [ 68.603455][ T8439] FS: 000000000156b300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 68.612405][ T8439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.619008][ T8439] CR2: 00000000004b4120 CR3: 0000000014741000 CR4: 00000000001506e0 [ 68.627024][ T8439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.635049][ T8439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.643039][ T8439] Call Trace: [ 68.646329][ T8439] ieee80211_assign_vif_chanctx+0x7bd/0x1240 [ 68.652422][ T8439] __ieee80211_vif_release_channel+0x236/0x430 [ 68.658597][ T8439] ieee80211_vif_release_channel+0x117/0x220 [ 68.664618][ T8439] ieee80211_ibss_disconnect+0x44e/0x7b0 [ 68.670282][ T8439] ieee80211_ibss_leave+0x12/0x150 [ 68.675426][ T8439] __cfg80211_leave_ibss+0x1a2/0x4d0 [ 68.680716][ T8439] cfg80211_leave_ibss+0x57/0x80 [ 68.685648][ T8439] cfg80211_change_iface+0x820/0xf30 [ 68.690936][ T8439] nl80211_set_interface+0x65c/0x8d0 [ 68.696226][ T8439] ? nl80211_notify_iface+0x180/0x180 [ 68.701600][ T8439] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 68.707849][ T8439] ? nl80211_pre_doit+0xa6/0x5c0 [ 68.712800][ T8439] genl_family_rcv_msg_doit+0x228/0x320 [ 68.718366][ T8439] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 68.725834][ T8439] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.732076][ T8439] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.738308][ T8439] ? ns_capable+0xde/0x100 [ 68.742815][ T8439] genl_rcv_msg+0x328/0x580 [ 68.747317][ T8439] ? genl_get_cmd+0x480/0x480 [ 68.751988][ T8439] ? nl80211_notify_iface+0x180/0x180 [ 68.757360][ T8439] ? lock_release+0x720/0x720 [ 68.762030][ T8439] netlink_rcv_skb+0x153/0x420 [ 68.766795][ T8439] ? genl_get_cmd+0x480/0x480 [ 68.771455][ T8439] ? netlink_ack+0xaa0/0xaa0 [ 68.776033][ T8439] genl_rcv+0x24/0x40 [ 68.780009][ T8439] netlink_unicast+0x533/0x7d0 [ 68.784774][ T8439] ? netlink_attachskb+0x870/0x870 [ 68.789884][ T8439] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.796113][ T8439] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.802376][ T8439] ? __phys_addr_symbol+0x2c/0x70 [ 68.807417][ T8439] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 68.813141][ T8439] ? __check_object_size+0x171/0x3f0 [ 68.818419][ T8439] netlink_sendmsg+0x856/0xd90 [ 68.823175][ T8439] ? netlink_unicast+0x7d0/0x7d0 [ 68.828144][ T8439] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.834379][ T8439] ? netlink_unicast+0x7d0/0x7d0 [ 68.839304][ T8439] sock_sendmsg+0xcf/0x120 [ 68.843712][ T8439] ____sys_sendmsg+0x6e8/0x810 [ 68.848491][ T8439] ? kernel_sendmsg+0x50/0x50 [ 68.853152][ T8439] ? do_recvmmsg+0x6d0/0x6d0 [ 68.857742][ T8439] ? lock_chain_count+0x20/0x20 [ 68.862592][ T8439] ? find_held_lock+0x2d/0x110 [ 68.867363][ T8439] ___sys_sendmsg+0xf3/0x170 [ 68.871969][ T8439] ? sendmsg_copy_msghdr+0x160/0x160 [ 68.877248][ T8439] ? __lock_acquire+0x16a7/0x5230 [ 68.882280][ T8439] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.888381][ T8439] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 68.894613][ T8439] ? __fget_light+0x215/0x280 [ 68.899333][ T8439] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 68.905600][ T8439] __sys_sendmsg+0xe5/0x1b0 [ 68.910097][ T8439] ? __sys_sendmsg_sock+0x30/0x30 [ 68.915112][ T8439] ? __context_tracking_enter+0xef/0x100 [ 68.920755][ T8439] ? syscall_enter_from_user_mode+0x27/0x70 [ 68.926651][ T8439] do_syscall_64+0x2d/0x70 [ 68.931068][ T8439] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.936961][ T8439] RIP: 0033:0x440e59 [ 68.940924][ T8439] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.960532][ T8439] RSP: 002b:00007ffdd98ddc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.968936][ T8439] RAX: ffffffffffffffda RBX: 0000000000010b3d RCX: 0000000000440e59 [ 68.976895][ T8439] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 68.984856][ T8439] RBP: 0000000000000000 R08: 00007ffdd98dde18 R09: 00007ffdd98dde18 [ 68.994379][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd98ddc8c [ 69.002345][ T8439] R13: 431bde82d7b634db R14: 00000000004b4018 R15: 00000000004004b8 [ 69.010756][ T8439] Modules linked in: [ 69.016944][ T8439] ---[ end trace a966a9763f023301 ]--- [ 69.022482][ T8439] RIP: 0010:ieee80211_chanctx_num_assigned+0xb1/0x140 [ 69.030590][ T8439] Code: a8 f6 ff ff 48 39 c5 74 3b 49 bd 00 00 00 00 00 fc ff df e8 41 c7 06 f9 48 8d bb 58 09 00 00 41 83 c4 01 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 75 68 48 8b 83 58 09 00 00 48 8d 98 a8 f6 ff ff 48 [ 69.050619][ T8439] RSP: 0018:ffffc900016bf330 EFLAGS: 00010a02 [ 69.057062][ T8439] RAX: 1bd5a00000000020 RBX: deacfffffffff7a8 RCX: 0000000000000000 [ 69.065244][ T8439] RDX: ffff8880145a0000 RSI: ffffffff886d5f5f RDI: dead000000000100 [ 69.073240][ T8439] RBP: ffff888013552720 R08: 0000000000000000 R09: 0000000000000001 [ 69.082058][ T8439] R10: ffffffff886d5fbb R11: 0000000000000000 R12: 0000000000000002 [ 69.090086][ T8439] R13: dffffc0000000000 R14: ffff888013552700 R15: 0000000000000000 [ 69.098101][ T8439] FS: 000000000156b300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 69.107088][ T8439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.113726][ T8439] CR2: 00007fa8d403e148 CR3: 0000000014741000 CR4: 00000000001506f0 [ 69.121721][ T8439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.129797][ T8439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.137981][ T8439] Kernel panic - not syncing: Fatal exception [ 69.144215][ T8439] Kernel Offset: disabled [ 69.148547][ T8439] Rebooting in 86400 seconds..