bisecting fixing commit since 6b6446efedb27c2766745a04f9b5d4449f51391d building syzkaller on cba33199be220cbf61f7c0c8223d88a25a913d6f testing commit 6b6446efedb27c2766745a04f9b5d4449f51391d with gcc (GCC) 8.4.1 20210217 kernel signature: 57356f037a3992d358f048038eb1a30f18709b108d55f1ddb405077ff16f22c3 all runs: crashed: WARNING in ieee80211_probe_client testing current HEAD cf256fbcbe347b7d0ff58fe2dfa382a156bd3694 testing commit cf256fbcbe347b7d0ff58fe2dfa382a156bd3694 with gcc (GCC) 8.4.1 20210217 kernel signature: 75564d296383794586bacd46c25284f74c29de34d5b79fb89bffc865dfe28e23 all runs: crashed: WARNING in ieee80211_probe_client revisions tested: 2, total time: 20m54.272421324s (build: 13m56.286765655s, test: 6m36.993018917s) the crash still happens on HEAD commit msg: Linux 4.14.231 crash: WARNING in ieee80211_probe_client IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 ------------[ cut here ]------------ wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 WARNING: CPU: 1 PID: 9082 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9082 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9082 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881d1c063c0 task.stack: ffff8881ded30000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881ded374e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881d2538ec0 RCX: ffffed103a380d88 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881ded37538 R08: 1ffff1103a380d88 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881d1c063c0 R12: ffff8881ccd29920 R13: ffff8881e5c8c7e0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007fc8f450d700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff6efc0f98 CR3: 00000001e8f94004 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007fc8f450d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c1a0 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c1a0 R13: 00007fff4d4f790f R14: 00007fc8f450d300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50ba ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9083 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9083 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9083 Comm: syz-executor.0 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881d1cc2400 task.stack: ffff8881f3a20000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881f3a274e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cccf4e80 RCX: ffffed103a398590 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881f3a27538 R08: 1ffff1103a398590 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881d1cc2400 R12: ffff8881ed869860 R13: ffff8881e5c8ca60 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f6286ea5700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc42a2af9c CR3: 00000001ec400006 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f6286ea5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c0f8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c0f8 R13: 00007ffdd23d3aaf R14: 00007f6286ea5300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50bb ]--- IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9112 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9112 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9112 Comm: syz-executor.3 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e864c140 task.stack: ffff8881d23e0000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d23e74e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881d2538ec0 RCX: ffffed103d0c9938 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d23e7538 R08: 1ffff1103d0c9938 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e864c140 R12: ffff8881ccd29920 R13: ffff8881e7658060 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007fc8f4570700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff626c10000 CR3: 00000001d4324002 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007fc8f4570188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007fff4d4f790f R14: 00007fc8f4570300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50bc ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9104 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9104 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9104 Comm: syz-executor.0 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e720e640 task.stack: ffff8881de1b8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881de1bf4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cccf4e80 RCX: ffffed103ce41dd8 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881de1bf538 R08: 1ffff1103ce41dd8 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e720e640 R12: ffff8881ed869860 R13: ffff8881e72d30e0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f6286ee7700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd5c5e7b40 CR3: 00000001d967a003 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f6286ee7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007ffdd23d3aaf R14: 00007f6286ee7300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50bd ]--- wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9155 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9155 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9155 Comm: syz-executor.3 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e65882c0 task.stack: ffff8881ccdd0000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881ccdd74e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881d2538ec0 RCX: ffffed103ccb1168 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881ccdd7538 R08: 1ffff1103ccb1168 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e65882c0 R12: ffff8881ccd29920 R13: ffff8881ee00d520 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007fc8f4591700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff626c56000 CR3: 00000001e72b0004 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007fc8f4591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bf00 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00 R13: 00007fff4d4f790f R14: 00007fc8f4591300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50be ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9165 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9165 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9165 Comm: syz-executor.0 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881d1a08240 task.stack: ffff8881ce380000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881ce3874e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cccf4e80 RCX: ffffed103a341158 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881ce387538 R08: 1ffff1103a341158 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881d1a08240 R12: ffff8881ed869860 R13: ffff8881dfbe0d20 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f6286f08700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff626c59000 CR3: 00000001ce3a2003 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f6286f08188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bf00 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00 R13: 00007ffdd23d3aaf R14: 00007f6286f08300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50bf ]--- IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9194 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9194 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 Modules linked in: CPU: 1 PID: 9194 Comm: syz-executor.3 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e3dde080 task.stack: ffff8881e4310000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881e43174e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881d2538ec0 RCX: ffffed103c7bbd20 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881e4317538 R08: 1ffff1103c7bbd20 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e3dde080 R12: ffff8881ccd29920 R13: ffff8881dbff1aa0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007fc8f450d700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff626c61028 CR3: 00000001e72b0004 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007fc8f450d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c1a0 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c1a0 R13: 00007fff4d4f790f R14: 00007fc8f450d300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c0 ]--- IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9196 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9196 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9196 Comm: syz-executor.0 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e4a3c640 task.stack: ffff8881d19e8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d19ef4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cccf4e80 RCX: ffffed103c9479d8 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d19ef538 R08: 1ffff1103c9479d8 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e4a3c640 R12: ffff8881ed869860 R13: ffff8881e7507aa0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f6286ea5700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4061db378 CR3: 00000001ce3a2003 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f6286ea5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c0f8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c0f8 R13: 00007ffdd23d3aaf R14: 00007f6286ea5300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c1 ]--- wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready ------------[ cut here ]------------ wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 WARNING: CPU: 0 PID: 9203 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9203 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9203 Comm: syz-executor.3 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e38643c0 task.stack: ffff8881d0ef0000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d0ef74e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881d2538ec0 RCX: ffffed103c70c988 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d0ef7538 R08: 1ffff1103c70c988 R09: 0000000000000000 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 R10: 00000000000000a0 R11: ffff8881e38643c0 R12: ffff8881ccd29920 R13: ffff8881dc1faaa0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007fc8f4570700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4061de6b8 CR3: 00000001e46c0005 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007fc8f4570188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007fff4d4f790f R14: 00007fc8f4570300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c2 ]--- IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9233 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9233 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9233 Comm: syz-executor.0 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e0404300 task.stack: ffff8881d1200000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d12074e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cccf4e80 RCX: ffffed103c080970 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d1207538 R08: 1ffff1103c080970 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e0404300 R12: ffff8881ed869860 R13: ffff8881df27cae0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f6286ec6700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000200 CR3: 00000001f20e0006 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f6286ec6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c050 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c050 R13: 00007ffdd23d3aaf R14: 00007f6286ec6300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c3 ]--- wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9252 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9252 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9252 Comm: syz-executor.3 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881df5b66c0 task.stack: ffff8881d1078000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d107f4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881d2538ec0 RCX: ffffed103beb6de8 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d107f538 R08: 1ffff1103beb6de8 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881df5b66c0 R12: ffff8881ccd29920 R13: ffff8881ded180e0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007fc8f450d700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000538208 CR3: 00000001ce3a4003 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007fc8f450d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c1a0 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c1a0 R13: 00007fff4d4f790f R14: 00007fc8f450d300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c4 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9251 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9251 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9251 Comm: syz-executor.2 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881df6ba640 task.stack: ffff8881e4be8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881e4bef4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881d2190f80 RCX: ffffed103bed75d8 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881e4bef538 R08: 1ffff1103bed75d8 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881df6ba640 R12: ffff8881d3709ae0 R13: ffff8881deda82e0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f27426d9700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000005374a8 CR3: 00000001e1d7a001 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f27426d9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c0f8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c0f8 R13: 00007fff3223d9ef R14: 00007f27426d9300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c5 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9271 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9271 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9271 Comm: syz-executor.1 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881df04e340 task.stack: ffff8881c6eb8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881c6ebf4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881df3e5b80 RCX: ffffed103be09d78 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881c6ebf538 R08: 1ffff1103be09d78 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881df04e340 R12: ffff8881dae11c60 R13: ffff8881dce94060 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f7bf5089700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4061d4140 CR3: 00000001e55fc001 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f7bf5089188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bf00 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00 R13: 00007fff96d0936f R14: 00007f7bf5089300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c6 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9275 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9275 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9275 Comm: syz-executor.1 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881dce701c0 task.stack: ffff8881c6e98000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881c6e9f4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881df3e5b80 RCX: ffffed103b9ce148 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881c6e9f538 R08: 1ffff1103b9ce148 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881dce701c0 R12: ffff8881dae11c60 R13: ffff8881d9242ae0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f7bf5068700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7bf5067108 CR3: 00000001e55fc001 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f7bf5068188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007fff96d0936f R14: 00007f7bf5068300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c7 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9280 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9280 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9280 Comm: syz-executor.0 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881ddaea140 task.stack: ffff8881c6ef8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881c6eff4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cccf4e80 RCX: ffffed103bb5d538 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881c6eff538 R08: 1ffff1103bb5d538 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881ddaea140 R12: ffff8881ed869860 R13: ffff8881dce4d020 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f6286f08700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000515150 CR3: 00000001d4cf0004 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f6286f08188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bf00 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00 R13: 00007ffdd23d3aaf R14: 00007f6286f08300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c8 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9287 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9287 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9287 Comm: syz-executor.0 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881dd40e000 task.stack: ffff8881c6f48000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881c6f4f4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cccf4e80 RCX: ffffed103ba81d10 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881c6f4f538 R08: 1ffff1103ba81d10 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881dd40e000 R12: ffff8881ed869860 R13: ffff8881dde3e2a0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f6286ee7700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6286ee6108 CR3: 00000001d4cf0004 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f6286ee7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007ffdd23d3aaf R14: 00007f6286ee7300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50c9 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9293 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9293 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9293 Comm: syz-executor.1 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881dd2bc440 task.stack: ffff8881c6838000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881c683f4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881df3e5b80 RCX: ffffed103ba57998 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881c683f538 R08: 1ffff1103ba57998 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881dd2bc440 R12: ffff8881dae11c60 R13: ffff8881ed4c17a0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f7bf4fe4700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6286ee6108 CR3: 00000001cec55002 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f7bf4fe4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c248 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c248 R13: 00007fff96d0936f R14: 00007f7bf4fe4300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50ca ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9294 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9294 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9294 Comm: syz-executor.3 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881db972580 task.stack: ffff8881c6840000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881c68474e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881d2538ec0 RCX: ffffed103b72e5c0 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881c6847538 R08: 1ffff1103b72e5c0 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881db972580 R12: ffff8881ccd29920 R13: ffff8881ed4c9d60 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007fc8f44ec700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff626ce3000 CR3: 00000001ddca8003 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007fc8f44ec188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c248 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c248 R13: 00007fff4d4f790f R14: 00007fc8f44ec300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50cb ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9302 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9302 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9302 Comm: syz-executor.4 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881dbdf0040 task.stack: ffff8881c6a78000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881c6a7f4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881dec65b40 RCX: ffffed103b7be118 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881c6a7f538 R08: 1ffff1103b7be118 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881dbdf0040 R12: ffff8881d14b1ca0 R13: ffff8881d5e085e0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f23abbae700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055f4061d4140 CR3: 00000001ee2c6006 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f23abbae188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bf00 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00 R13: 00007ffc18f0be1f R14: 00007f23abbae300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50cc ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9306 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9306 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9306 Comm: syz-executor.4 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881dad723c0 task.stack: ffff8881d87a0000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d87a74e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881dec65b40 RCX: ffffed103b5ae588 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d87a7538 R08: 1ffff1103b5ae588 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881dad723c0 R12: ffff8881d14b1ca0 R13: ffff8881e12100a0 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007f23abb8d700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f23abb8c108 CR3: 00000001ee2c6006 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f23abb8d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007ffc18f0be1f R14: 00007f23abb8d300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 32 6a 88 be aa 02 00 00 48 c7 c7 c0 31 6a 88 c6 05 f0 fb 27 03 01 e8 93 f9 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 50 19 b3 fa e9 c5 fd ff ---[ end trace 91d96c08495f50cd ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9313 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9313 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9313 Comm: syz-executor.3 Tainted: G W 4.14.231-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881dc640580 task.stack: ffff8881c9578000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881c957f4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881d2538ec0 RCX: ffffed103b8c81c0 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881c957f538 R08: 1ffff1103b8c81c0 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881dc640580 R12: ffff8881ccd29920 R13: ffff8881e0c30860 R14: 0000000000000000 R15: ffff8881f1b4c700 FS: 00007fc8f4591700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd3d81dc77 CR3: 00000001df537002 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062