bisecting fixing commit since 87335852c5d9ec629f80bb2257b9a9945962b719
building syzkaller on 3c7136c000d478908c0d17b38cf6ae8e2e2164c3
testing commit 87335852c5d9ec629f80bb2257b9a9945962b719 with gcc (GCC) 8.1.0
kernel signature: c9512d836ac928990a9334e53b2590667498a73dd05c521a5574c322805082b3
all runs: crashed: WARNING in cfg80211_connect
testing current HEAD 1752938529c614a8ed4432ecce6ebc95d3b87207
testing commit 1752938529c614a8ed4432ecce6ebc95d3b87207 with gcc (GCC) 8.1.0
kernel signature: 5bdfd9ce385aeb687844fa275918ac028e28d96f5513a7224587ea2b8733328e
all runs: crashed: WARNING in cfg80211_connect
revisions tested: 2, total time: 23m33.942580316s (build: 17m21.216862165s, test: 5m42.648282566s)
the crash still happens on HEAD
commit msg: Linux 4.14.213
crash: WARNING in cfg80211_connect
IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
------------[ cut here ]------------
WARNING: CPU: 0 PID: 9876 at net/wireless/sme.c:533 wiphy_to_rdev net/wireless/core.h:112 [inline]
WARNING: CPU: 0 PID: 9876 at net/wireless/sme.c:533 cfg80211_sme_connect net/wireless/sme.c:518 [inline]
WARNING: CPU: 0 PID: 9876 at net/wireless/sme.c:533 cfg80211_connect+0x1801/0x1fa0 net/wireless/sme.c:1141
hwsim sw_scan_complete
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 9876 Comm: syz-executor.3 Not tainted 4.14.213-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1f1 lib/dump_stack.c:58
 panic+0x1b0/0x358 kernel/panic.c:183
 __warn.cold.7+0x25/0x2c kernel/panic.c:547
 report_bug+0x1a4/0x1f3 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:cfg80211_sme_connect net/wireless/sme.c:533 [inline]
RIP: 0010:cfg80211_connect+0x1801/0x1fa0 net/wireless/sme.c:1141
RSP: 0018:ffff88809de37310 EFLAGS: 00010282
RAX: dffffc0000000000 RBX: ffff888096a55110 RCX: ffff888096a55238
RDX: 1ffff11012d4aa47 RSI: ffff8880a1dd8526 RDI: ffffffff886a1598
RBP: ffff88809de37400 R08: ffffed1012d4aa43 R09: ffffed1012d4aa42
R10: ffffed1012d4aa42 R11: ffff888096a55215 R12: ffffffff886a1460
R13: ffff88809de374b8 R14: 0000000000000000 R15: ffffffff86e61ad0
 nl80211_connect+0x1310/0x1f00 net/wireless/nl80211.c:9113
 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600
ieee80211 phy7: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static)
 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625
 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433
 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636
 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline]
 netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313
 netlink_sendmsg+0x657/0xc60 net/netlink/af_netlink.c:1878
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xac/0xf0 net/socket.c:656
 ___sys_sendmsg+0x625/0x920 net/socket.c:2062
 __sys_sendmsg+0xc1/0x140 net/socket.c:2096
 SYSC_sendmsg net/socket.c:2107 [inline]
 SyS_sendmsg+0xd/0x20 net/socket.c:2103
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45deb9
RSP: 002b:00007f47f064cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
Bluetooth: hci5 command 0x0419 tx timeout
RAX: ffffffffffffffda RBX: 000000000002b080 RCX: 000000000045deb9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
RBP: 000000000118c008 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4
R13: 00007fffadc12a3f R14: 00007f47f064d9c0 R15: 000000000118bfd4
Kernel Offset: disabled
Rebooting in 86400 seconds..