RBP: 00007f0ce6a831d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffe4679d0f R14: 00007f0ce6a83300 R15: 0000000000022000 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 13276 at net/mac80211/chan.c:1768 ieee80211_vif_release_channel+0x19d/0x200 net/mac80211/chan.c:1768 Modules linked in: CPU: 1 PID: 13276 Comm: syz-executor.6 Not tainted 5.10.60 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:ieee80211_vif_release_channel+0x19d/0x200 net/mac80211/chan.c:1768 Code: 8d bd 20 1b 00 00 be ff ff ff ff e8 ad 5f 1f 00 31 ff 41 89 c4 89 c6 e8 81 71 86 fd 45 85 e4 0f 85 64 ff ff ff e8 f3 77 86 fd <0f> 0b e9 58 ff ff ff e8 e7 77 86 fd 0f 0b e9 da fe ff ff 48 c7 c7 RSP: 0018:ffff888040b77030 EFLAGS: 00010216 RAX: 000000000001f572 RBX: ffff888042534bc0 RCX: ffffc90002612000 RDX: 0000000000040000 RSI: ffffffff83b8e6bd RDI: 0000000000000005 RBP: ffff888042534fb0 R08: 0000000000000000 R09: ffff888042534047 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: ffff88801cbb8cc0 R14: 00000000fffffff4 R15: dffffc0000000000 FS: 00007f0ce6a83700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9000d6c590 CR3: 000000001d06c000 CR4: 0000000000350ee0 Call Trace: ieee80211_start_ap+0x16f9/0x2230 net/mac80211/cfg.c:1220 rdev_start_ap net/wireless/rdev-ops.h:158 [inline] nl80211_start_ap+0x1df2/0x2a70 net/wireless/nl80211.c:5335 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] genl_rcv_msg+0x33c/0x5a0 net/netlink/genetlink.c:800 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2496 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811 netlink_unicast_kernel net/netlink/af_netlink.c:1306 [inline] netlink_unicast+0x53a/0x7e0 net/netlink/af_netlink.c:1332 netlink_sendmsg+0x85a/0xd90 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0x150/0x190 net/socket.c:671 ____sys_sendmsg+0x701/0x860 net/socket.c:2340 ___sys_sendmsg+0xff/0x170 net/socket.c:2394 __sys_sendmsg+0xe9/0x1b0 net/socket.c:2427 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x466609 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0ce6a83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 RBP: 00007f0ce6a831d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffe4679d0f R14: 00007f0ce6a83300 R15: 0000000000022000 irq event stamp: 1899 hardirqs last enabled at (1909): [] console_unlock+0x926/0xb30 kernel/printk/printk.c:2552 hardirqs last disabled at (1918): [] console_unlock+0x832/0xb30 kernel/printk/printk.c:2467 softirqs last enabled at (1140): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (1067): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace dc36c883692179ea ]--- netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. ------------[ cut here ]------------ WARNING: CPU: 0 PID: 13276 at net/mac80211/iface.c:111 __ieee80211_recalc_idle+0x28a/0x460 net/mac80211/iface.c:111 Modules linked in: CPU: 0 PID: 13276 Comm: syz-executor.6 Tainted: G W 5.10.60 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__ieee80211_recalc_idle+0x28a/0x460 net/mac80211/iface.c:111 Code: 8d bb 20 1b 00 00 be ff ff ff ff e8 00 8f 2a 00 31 ff 41 89 c5 89 c6 e8 d4 a0 91 fd 45 85 ed 0f 85 d8 fd ff ff e8 46 a7 91 fd <0f> 0b e9 cc fd ff ff e8 3a a7 91 fd be 08 00 00 00 4c 89 ef e8 3d RSP: 0018:ffff888040b76f90 EFLAGS: 00010246 RAX: 0000000000040000 RBX: ffff88801cbb8cc0 RCX: ffffc90002612000 RDX: 0000000000040000 RSI: ffffffff83adb76a RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff85472b0f R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 00000000fffffff4 R15: dffffc0000000000 FS: 00007f0ce6a83700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9000bad040 CR3: 000000001d06c000 CR4: 0000000000350ef0 Call Trace: ieee80211_recalc_idle+0x15/0x50 net/mac80211/iface.c:147 ieee80211_free_chanctx+0x127/0x1d0 net/mac80211/chan.c:575 __ieee80211_vif_release_channel+0x2ca/0x430 net/mac80211/chan.c:1559 ieee80211_vif_release_channel+0x139/0x200 net/mac80211/chan.c:1771 ieee80211_start_ap+0x16f9/0x2230 net/mac80211/cfg.c:1220 rdev_start_ap net/wireless/rdev-ops.h:158 [inline] nl80211_start_ap+0x1df2/0x2a70 net/wireless/nl80211.c:5335 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] genl_rcv_msg+0x33c/0x5a0 net/netlink/genetlink.c:800 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2496 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811 netlink_unicast_kernel net/netlink/af_netlink.c:1306 [inline] netlink_unicast+0x53a/0x7e0 net/netlink/af_netlink.c:1332 netlink_sendmsg+0x85a/0xd90 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0x150/0x190 net/socket.c:671 ____sys_sendmsg+0x701/0x860 net/socket.c:2340 ___sys_sendmsg+0xff/0x170 net/socket.c:2394 __sys_sendmsg+0xe9/0x1b0 net/socket.c:2427 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x466609 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0ce6a83188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 RBP: 00007f0ce6a831d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffe4679d0f R14: 00007f0ce6a83300 R15: 0000000000022000 irq event stamp: 3045 hardirqs last enabled at (3057): [] console_unlock+0x926/0xb30 kernel/printk/printk.c:2552 hardirqs last disabled at (3068): [] console_unlock+0x832/0xb30 kernel/printk/printk.c:2467 softirqs last enabled at (2700): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (2609): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace dc36c883692179eb ]--- netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'.