bisecting fixing commit since 6b6446efedb27c2766745a04f9b5d4449f51391d building syzkaller on cba33199be220cbf61f7c0c8223d88a25a913d6f testing commit 6b6446efedb27c2766745a04f9b5d4449f51391d with gcc (GCC) 8.4.1 20210217 kernel signature: 8896778b933c9f6cd10d27b04373d8d8c6fb3832dd0591ad92c06f44b8df327f all runs: crashed: WARNING in ieee80211_probe_client testing current HEAD cb83ddcd5332fcc3efd52ba994976efc4dd6061e testing commit cb83ddcd5332fcc3efd52ba994976efc4dd6061e with gcc (GCC) 8.4.1 20210217 kernel signature: 0771dd081364c0d00dd7b59fab5c0bb120c6c540c1a9cdebe5f49c507296b505 all runs: crashed: WARNING in ieee80211_probe_client revisions tested: 2, total time: 21m45.057572959s (build: 15m4.59642036s, test: 6m18.882735991s) the crash still happens on HEAD commit msg: Linux 4.14.226 crash: WARNING in ieee80211_probe_client IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready device veth0_vlan entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9018 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9018 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9018 Comm: syz-executor.2 Not tainted 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881dcc080c0 task.stack: ffff8881d63b8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d63bf4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cc8610c0 RCX: ffffed103b981128 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d63bf538 R08: 1ffff1103b981128 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881dcc080c0 R12: ffff8881f1909820 R13: ffff8881ecfc2560 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f845bb12700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffff03a7eac CR3: 00000001d630e004 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f845bb12188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c1a0 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c1a0 R13: 00007ffc328d0c0f R14: 00007f845bb12300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec512f ]--- device veth1_vlan entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9028 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9028 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9028 Comm: syz-executor.2 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881eca38340 task.stack: ffff8881d63b8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d63bf4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cc8610c0 RCX: ffffed103d947178 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d63bf538 R08: 1ffff1103d947178 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881eca38340 R12: ffff8881f1909820 R13: ffff8881e8db6ca0 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f845bb96700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe07d64e4c0 CR3: 00000001ec43b001 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f845bb96188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bf00 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00 R13: 00007ffc328d0c0f R14: 00007f845bb96300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5130 ]--- IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready batman_adv: batadv0: Interface activated: batadv_slave_0 IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9041 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9041 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9041 Comm: syz-executor.2 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881d20f2680 task.stack: ffff8881d2788000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d278f4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cc8610c0 RCX: ffffed103a41e5e0 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d278f538 R08: 1ffff1103a41e5e0 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881d20f2680 R12: ffff8881f1909820 R13: ffff8881e8413aa0 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f845bb33700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6261435000 CR3: 00000001ec43b001 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f845bb33188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c0f8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c0f8 R13: 00007ffc328d0c0f R14: 00007f845bb33300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5131 ]--- IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready device veth0_macvtap entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready batman_adv: batadv0: Interface activated: batadv_slave_1 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready device veth0_vlan entered promiscuous mode device veth1_macvtap entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready device veth1_vlan entered promiscuous mode ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9058 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9058 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9058 Comm: syz-executor.2 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e8cf2140 task.stack: ffff8881d63b8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d63bf4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cc8610c0 RCX: ffffed103d19e538 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d63bf538 R08: 1ffff1103d19e538 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e8cf2140 R12: ffff8881f1909820 R13: ffff8881e93fca60 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f845bb12700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055d4bab4e338 CR3: 00000001ec9a7001 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f845bb12188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c1a0 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c1a0 R13: 00007ffc328d0c0f R14: 00007f845bb12300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5132 ]--- IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready batman_adv: batadv0: Interface activated: batadv_slave_0 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready device veth0_macvtap entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready batman_adv: batadv0: Interface activated: batadv_slave_1 device veth1_macvtap entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9107 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9107 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9107 Comm: syz-executor.2 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e6e04480 task.stack: ffff8881e6df8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881e6dff4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cc8610c0 RCX: ffffed103cdc09a0 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881e6dff538 R08: 1ffff1103cdc09a0 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e6e04480 R12: ffff8881f1909820 R13: ffff8881f2a71ce0 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f845bb12700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffeae85cfa8 CR3: 00000001ed314005 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f845bb12188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c1a0 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c1a0 R13: 00007ffc328d0c0f R14: 00007f845bb12300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5133 ]--- wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready batman_adv: batadv0: Interface activated: batadv_slave_0 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready batman_adv: batadv0: Interface activated: batadv_slave_1 IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9152 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9152 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9152 Comm: syz-executor.2 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881d1ac0040 task.stack: ffff8881d4800000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d48074e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cc8610c0 RCX: ffffed103a358118 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d4807538 R08: 1ffff1103a358118 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881d1ac0040 R12: ffff8881f1909820 R13: ffff8881f332e5e0 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f845bb12700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000538208 CR3: 00000001d9955001 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f845bb12188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c1a0 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c1a0 R13: 00007ffc328d0c0f R14: 00007f845bb12300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5134 ]--- wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9163 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9163 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9163 Comm: syz-executor.2 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e6298480 task.stack: ffff8881e6c98000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881e6c9f4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cc8610c0 RCX: ffffed103cc531a0 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881e6c9f538 R08: 1ffff1103cc531a0 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e6298480 R12: ffff8881f1909820 R13: ffff8881e5e8cd20 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f845bb96700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055d4bab84718 CR3: 00000001d9955005 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f845bb96188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bf00 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00 R13: 00007ffc328d0c0f R14: 00007f845bb96300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5135 ]--- IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9190 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9190 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9190 Comm: syz-executor.1 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881d0cc0400 task.stack: ffff8881cfb98000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881cfb9f4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881e0775b80 RCX: ffffed103a198190 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881cfb9f538 R08: 1ffff1103a198190 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881d0cc0400 R12: ffff8881d21c19a0 R13: ffff8881d1bf00a0 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f483e7dd700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f62614cc198 CR3: 00000001e5767004 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f483e7dd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007ffc509a6dcf R14: 00007f483e7dd300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5136 ]--- wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9198 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 0 PID: 9198 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 0 PID: 9198 Comm: syz-executor.3 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e2ddc600 task.stack: ffff8881d12b8000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881d12bf4e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881df43d140 RCX: ffffed103c5bb9d0 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881d12bf538 R08: 1ffff1103c5bb9d0 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e2ddc600 R12: ffff8881dbc29a60 R13: ffff8881d0c44ae0 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007ffb3f7e4700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f62614d9000 CR3: 00000001e45e6002 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007ffb3f7e4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055c1a0 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055c1a0 R13: 00007ffe4df63aff R14: 00007ffb3f7e4300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5137 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9180 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9180 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9180 Comm: syz-executor.2 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e6a9c580 task.stack: ffff8881cfb90000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881cfb974e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cc8610c0 RCX: ffffed103cd539c0 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881cfb97538 R08: 1ffff1103cd539c0 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e6a9c580 R12: ffff8881f1909820 R13: ffff8881db2d82a0 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f845bb75700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f62614db000 CR3: 00000001d9955001 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f845bb75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007ffc328d0c0f R14: 00007f845bb75300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5138 ]--- wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9222 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9222 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9222 Comm: syz-executor.3 Tainted: G W 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881e01240c0 task.stack: ffff8881cc900000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881cc9074e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881df43d140 RCX: ffffed103c024928 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881cc907538 R08: 1ffff1103c024928 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881e01240c0 R12: ffff8881dbc29a60 R13: ffff8881f16f1520 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007ffb3f847700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff4b887bec CR3: 00000001e45e6003 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007ffb3f847188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007ffe4df63aff R14: 00007ffb3f847300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec5139 ]--- wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9253 at net/mac80211/cfg.c:3392 rcu_read_unlock include/linux/rcupdate.h:681 [inline] WARNING: CPU: 1 PID: 9253 at net/mac80211/cfg.c:3392 ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3457 Modules linked in: CPU: 1 PID: 9253 Comm: syz-executor.2 Tainted: G W 4.14.226-syzkaller #0 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8881ce6a2300 task.stack: ffff8881e0410000 RIP: 0010:ieee80211_probe_client+0x5cf/0x700 net/mac80211/cfg.c:3392 RSP: 0018:ffff8881e04174e0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff8881cc8610c0 RCX: ffffed1039cd4570 RDX: 1ffffffff11e10a1 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff8881e0417538 R08: 1ffff11039cd4570 R09: 0000000000000000 R10: 00000000000000a0 R11: ffff8881ce6a2300 R12: ffff8881f1909820 R13: ffff8881e0cfc860 R14: 0000000000000000 R15: ffff8881f1b66680 FS: 00007f845bb75700(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f845bb53108 CR3: 00000001e0db5006 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rdev_probe_client net/wireless/rdev-ops.h:882 [inline] nl80211_probe_client+0x339/0xad0 net/wireless/nl80211.c:11067 genl_family_rcv_msg+0x57f/0xfe0 net/netlink/genetlink.c:600 genl_rcv_msg+0xa7/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x12f/0x3b0 net/netlink/af_netlink.c:2433 genl_rcv+0x23/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x639/0xbe0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465889 RSP: 002b:00007f845bb75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000055bfa8 RCX: 0000000000465889 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 RBP: 00000000004af68d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bfa8 R13: 00007ffc328d0c0f R14: 00007f845bb75300 R15: 0000000000022000 Code: c0 0f 85 50 ff ff ff 48 c7 c2 a0 1e 6a 88 be aa 02 00 00 48 c7 c7 c0 1d 6a 88 c6 05 e7 00 29 03 01 e8 53 c4 49 00 e9 2c ff ff ff <0f> 0b bb ea ff ff ff e9 0a ff ff ff e8 10 25 b4 fa e9 c5 fd ff ---[ end trace d4b55ef888ec513a ]--- IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready