IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready Bluetooth: hci5: command 0x040f tx timeout Bluetooth: hci1: command 0x040f tx timeout kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 8206 Comm: syz-executor.0 Not tainted 5.0.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' RIP: 0010:__read_once_size include/linux/compiler.h:193 [inline] RIP: 0010:compound_head include/linux/page-flags.h:143 [inline] RIP: 0010:put_page include/linux/mm.h:981 [inline] RIP: 0010:qp_release_pages+0x44/0x240 drivers/misc/vmw_vmci/vmci_queue_pair.c:650 Code: 75 c0 88 55 cf 0f 84 a5 01 00 00 49 bc 00 00 00 00 00 fc ff df 45 31 ed 31 c0 e9 ab 00 00 00 49 8d 7f 08 48 89 fa 48 c1 ea 03 <42> 80 3c 22 00 0f 85 8a 01 00 00 49 8b 57 08 48 8d 4a ff 83 e2 01 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 RSP: 0018:ffff888083e776d8 EFLAGS: 00010202 RAX: 1ffff110124bbb30 RBX: ffff8880925dd980 RCX: 1ffff110124bbb2c RDX: 0000000000000001 RSI: ffff8880925dd980 RDI: 0000000000000008 RBP: ffff888083e77718 R08: ffffed1011b0baf9 R09: ffffed1011b0baf8 R10: ffffed1011b0baf8 R11: ffff88808d85d7c7 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000002400 R15: 0000000000000000 FS: 00007f844a4fd700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' CR2: 0000000001590004 CR3: 0000000091cae000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: qp_host_get_user_memory.isra.15+0x1fe/0x3a0 drivers/misc/vmw_vmci/vmci_queue_pair.c:674 qp_host_register_user_memory drivers/misc/vmw_vmci/vmci_queue_pair.c:717 [inline] qp_broker_create drivers/misc/vmw_vmci/vmci_queue_pair.c:1394 [inline] qp_broker_alloc+0xec6/0x1a80 drivers/misc/vmw_vmci/vmci_queue_pair.c:1748 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 vmci_qp_broker_alloc+0x17/0x20 drivers/misc/vmw_vmci/vmci_queue_pair.c:1941 vmci_host_do_alloc_queuepair.isra.5+0x275/0x340 drivers/misc/vmw_vmci/vmci_host.c:491 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready vmci_host_unlocked_ioctl+0xbad/0x17f0 drivers/misc/vmw_vmci/vmci_host.c:930 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0x196/0x10c0 fs/ioctl.c:696 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready ksys_ioctl+0x62/0x90 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x6e/0xb0 fs/ioctl.c:718 ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' do_syscall_64+0xd0/0x4d0 arch/x86/entry/common.c:290 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45de59 Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f844a4fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000010300 RCX: 000000000045de59 RDX: 0000000020000100 RSI: 00000000000007a8 RDI: 0000000000000003 ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c R13: 00007ffe938e5eaf R14: 00007f844a4fd9c0 R15: 000000000118bf2c Modules linked in: ---[ end trace 04db4fec57631124 ]--- wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 RIP: 0010:__read_once_size include/linux/compiler.h:193 [inline] RIP: 0010:compound_head include/linux/page-flags.h:143 [inline] RIP: 0010:put_page include/linux/mm.h:981 [inline] RIP: 0010:qp_release_pages+0x44/0x240 drivers/misc/vmw_vmci/vmci_queue_pair.c:650 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 Code: 75 c0 88 55 cf 0f 84 a5 01 00 00 49 bc 00 00 00 00 00 fc ff df 45 31 ed 31 c0 e9 ab 00 00 00 49 8d 7f 08 48 89 fa 48 c1 ea 03 <42> 80 3c 22 00 0f 85 8a 01 00 00 49 8b 57 08 48 8d 4a ff 83 e2 01 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 RSP: 0018:ffff888083e776d8 EFLAGS: 00010202 RAX: 1ffff110124bbb30 RBX: ffff8880925dd980 RCX: 1ffff110124bbb2c IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready RDX: 0000000000000001 RSI: ffff8880925dd980 RDI: 0000000000000008 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready RBP: ffff888083e77718 R08: ffffed1011b0baf9 R09: ffffed1011b0baf8 R10: ffffed1011b0baf8 R11: ffff88808d85d7c7 R12: dffffc0000000000 R13: 0000000000000000 R14: 0000000000002400 R15: 0000000000000000 FS: 00007f844a4fd700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 neighbour: ndisc_cache: neighbor table overflow! CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' CR2: 0000555aa5a5ea07 CR3: 0000000091cae000 CR4: 00000000001406e0 neighbour: ndisc_cache: neighbor table overflow! DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 neighbour: ndisc_cache: neighbor table overflow! DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 neighbour: ndisc_cache: neighbor table overflow! neighbour: ndisc_cache: neighbor table overflow! wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50