[Kernel-packages] [Bug 1825058] Re: mac80211_hwsim unable to handle kernel NULL pointer dereference at0000000000000000

2019-04-30 Thread tdotreppe
** Tags removed: verification-needed-bionic
** Tags added: verification-done-bionic

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1825058

Title:
  mac80211_hwsim unable to handle kernel NULL pointer dereference
  at

Status in linux package in Ubuntu:
  Fix Released
Status in linux source package in Bionic:
  Fix Committed
Status in linux source package in Cosmic:
  Fix Committed

Bug description:
  [Impact]
  Kernel NULL pointer dereference in mac80211_hwsim.

  [Fix]
  a1881c9b8a1e mac80211_hwsim: Timer should be initialized before device 
registered

  This fix has been included in 4.19.9 or above.

  [Test Case]
  $ git clone https://github.com/aircrack-ng/aircrack-ng
  # Tested with 69a406c
  $ cd aircrack-ng
  $ grep 'sudo apt' README.md | bash
  $ autoreconf -i
  $ ./configure --with-experimental
  $ make check
  $ sudo bash scripts/airmon-ng.linux check kill
  $ sudo make integration

  # Run integration test again and check dmesg
  $ sudo bash scripts/airmon-ng.linux check kill
  $ sudo make integration

  Verified with VMs setup locally.

  [Regression Risk]
  Low. Move forward data structure initialization only. This patch has
  also been included in LTS stable kernel.

   Original Bug Report 

  The issue happens on 16.04 with linux-image-4.15.0-47-generic (as well
  as linux-image-4.15.0-45-generic). It also happens with linux-
  image-4.15.0-47-generic on 18.04 as well as the HWE kernel
  (4.18.0-17-generic). All test were done on 64 bit in a virtual machine
  and can be reproduced. It doesn't happen on 18.10 (mac80211_hwsim has
  other issues on this kernel that are solved in 19.04, most likely
  unrelated to this) or 19.04.

  Output:

  [  406.036796] cfg80211: Loading compiled-in X.509 certificates for 
regulatory database
  [  406.048785] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
  [  406.110060] mac80211_hwsim: initializing netlink
  [  406.153872] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
  [  406.154217] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
  [  406.316376] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  406.316829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  406.894434] device wlan1 entered promiscuous mode
  [  407.623768] mac80211_hwsim: initializing netlink
  [  407.627809] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht'
  [  407.761474] device wlan0 entered promiscuous mode
  [  412.293557] mac80211_hwsim: initializing netlink
  [  412.298984] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht'
  [  412.410453] device wlan0 entered promiscuous mode
  [  417.040581] mac80211_hwsim: initializing netlink
  [  417.045603] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht'
  [  417.048093] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht'
  [  417.221470] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  417.223812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  417.755334] device wlan1 entered promiscuous mode
  [  419.690453] mac80211_hwsim: initializing netlink
  [  419.696569] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht'
  [  419.697137] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht'
  [  419.870739] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  419.871090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  420.406242] device wlan1 entered promiscuous mode
  [  422.434785] mac80211_hwsim: initializing netlink
  [  422.435399] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht'
  [  422.579207] device wlan0 entered promiscuous mode
  [  427.126059] mac80211_hwsim: initializing netlink
  [  427.128889] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht'
  [  427.133435] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht'
  [  427.135756] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht'
  [  427.385722] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  427.386258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  427.932765] device wlan2 entered promiscuous mode
  [  430.923486] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
  [  434.757426] wlan1: authenticate with 02:00:00:00:00:00
  [  434.757476] wlan1: send auth to 02:00:00:00:00:00 (try 1/3)
  [  434.758851] wlan1: authenticated
  [  434.758940] mac80211_hwsim hwsim1 wlan1: disabling HT/VHT due to WEP/TKIP 
use
  [  434.758942] mac80211_hwsim hwsim1 wlan1: disabling HT as WMM/QoS is not 
supported by the AP
  [  434.758943] mac80211_hwsim hwsim1 wlan1: disabling VHT as WMM/QoS is not 
supported by the AP
  [  434.761333] wlan1: associate with 02:00:00:00:00:00 (try 1/3)
  [  434.761750] wlan1: RX AssocResp from 02:00:00:00:00:00 (capab=0x11 
status=0 aid=1)
  [  434.761761] wlan1: associated
  [  434.762107] IPv6: 

[Kernel-packages] [Bug 1825058] Re: mac80211_hwsim unable to handle kernel NULL pointer dereference at0000000000000000

2019-04-25 Thread tdotreppe
** Tags removed: verification-needed-cosmic
** Tags added: verification-done-cosmic

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1825058

Title:
  mac80211_hwsim unable to handle kernel NULL pointer dereference
  at

Status in linux package in Ubuntu:
  Fix Released
Status in linux source package in Bionic:
  Fix Committed
Status in linux source package in Cosmic:
  Fix Committed

Bug description:
  [Impact]
  Kernel NULL pointer dereference in mac80211_hwsim.

  [Fix]
  a1881c9b8a1e mac80211_hwsim: Timer should be initialized before device 
registered

  This fix has been included in 4.19.9 or above.

  [Test Case]
  $ git clone https://github.com/aircrack-ng/aircrack-ng
  # Tested with 69a406c
  $ cd aircrack-ng
  $ grep 'sudo apt' README.md | bash
  $ autoreconf -i
  $ ./configure --with-experimental
  $ make check
  $ sudo bash scripts/airmon-ng.linux check kill
  $ sudo make integration

  # Run integration test again and check dmesg
  $ sudo bash scripts/airmon-ng.linux check kill
  $ sudo make integration

  Verified with VMs setup locally.

  [Regression Risk]
  Low. Move forward data structure initialization only. This patch has
  also been included in LTS stable kernel.

   Original Bug Report 

  The issue happens on 16.04 with linux-image-4.15.0-47-generic (as well
  as linux-image-4.15.0-45-generic). It also happens with linux-
  image-4.15.0-47-generic on 18.04 as well as the HWE kernel
  (4.18.0-17-generic). All test were done on 64 bit in a virtual machine
  and can be reproduced. It doesn't happen on 18.10 (mac80211_hwsim has
  other issues on this kernel that are solved in 19.04, most likely
  unrelated to this) or 19.04.

  Output:

  [  406.036796] cfg80211: Loading compiled-in X.509 certificates for 
regulatory database
  [  406.048785] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
  [  406.110060] mac80211_hwsim: initializing netlink
  [  406.153872] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
  [  406.154217] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
  [  406.316376] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  406.316829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  406.894434] device wlan1 entered promiscuous mode
  [  407.623768] mac80211_hwsim: initializing netlink
  [  407.627809] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht'
  [  407.761474] device wlan0 entered promiscuous mode
  [  412.293557] mac80211_hwsim: initializing netlink
  [  412.298984] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht'
  [  412.410453] device wlan0 entered promiscuous mode
  [  417.040581] mac80211_hwsim: initializing netlink
  [  417.045603] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht'
  [  417.048093] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht'
  [  417.221470] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  417.223812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  417.755334] device wlan1 entered promiscuous mode
  [  419.690453] mac80211_hwsim: initializing netlink
  [  419.696569] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht'
  [  419.697137] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht'
  [  419.870739] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  419.871090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  420.406242] device wlan1 entered promiscuous mode
  [  422.434785] mac80211_hwsim: initializing netlink
  [  422.435399] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht'
  [  422.579207] device wlan0 entered promiscuous mode
  [  427.126059] mac80211_hwsim: initializing netlink
  [  427.128889] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht'
  [  427.133435] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht'
  [  427.135756] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht'
  [  427.385722] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  427.386258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  427.932765] device wlan2 entered promiscuous mode
  [  430.923486] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
  [  434.757426] wlan1: authenticate with 02:00:00:00:00:00
  [  434.757476] wlan1: send auth to 02:00:00:00:00:00 (try 1/3)
  [  434.758851] wlan1: authenticated
  [  434.758940] mac80211_hwsim hwsim1 wlan1: disabling HT/VHT due to WEP/TKIP 
use
  [  434.758942] mac80211_hwsim hwsim1 wlan1: disabling HT as WMM/QoS is not 
supported by the AP
  [  434.758943] mac80211_hwsim hwsim1 wlan1: disabling VHT as WMM/QoS is not 
supported by the AP
  [  434.761333] wlan1: associate with 02:00:00:00:00:00 (try 1/3)
  [  434.761750] wlan1: RX AssocResp from 02:00:00:00:00:00 (capab=0x11 
status=0 aid=1)
  [  434.761761] wlan1: associated
  [  434.762107] IPv6: 

[Kernel-packages] [Bug 1825058] Re: mac80211_hwsim unable to handle kernel NULL pointer dereference at0000000000000000

2019-04-16 Thread tdotreppe
** Changed in: linux (Ubuntu)
   Status: Incomplete => Confirmed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1825058

Title:
  mac80211_hwsim unable to handle kernel NULL pointer dereference
  at

Status in linux package in Ubuntu:
  Confirmed

Bug description:
  The issue happens on 16.04 with linux-image-4.15.0-47-generic (as well
  as linux-image-4.15.0-45-generic). It also happens with linux-
  image-4.15.0-47-generic on 18.04 as well as the HWE kernel
  (4.18.0-17-generic). All test were done on 64 bit in a virtual machine
  and can be reproduced. It doesn't happen on 18.10 (mac80211_hwsim has
  other issues on this kernel that are solved in 19.04, most likely
  unrelated to this) or 19.04.

  Output:

  [  406.036796] cfg80211: Loading compiled-in X.509 certificates for 
regulatory database
  [  406.048785] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
  [  406.110060] mac80211_hwsim: initializing netlink
  [  406.153872] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
  [  406.154217] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
  [  406.316376] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  406.316829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  406.894434] device wlan1 entered promiscuous mode
  [  407.623768] mac80211_hwsim: initializing netlink
  [  407.627809] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht'
  [  407.761474] device wlan0 entered promiscuous mode
  [  412.293557] mac80211_hwsim: initializing netlink
  [  412.298984] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht'
  [  412.410453] device wlan0 entered promiscuous mode
  [  417.040581] mac80211_hwsim: initializing netlink
  [  417.045603] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht'
  [  417.048093] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht'
  [  417.221470] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  417.223812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  417.755334] device wlan1 entered promiscuous mode
  [  419.690453] mac80211_hwsim: initializing netlink
  [  419.696569] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht'
  [  419.697137] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht'
  [  419.870739] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  419.871090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  420.406242] device wlan1 entered promiscuous mode
  [  422.434785] mac80211_hwsim: initializing netlink
  [  422.435399] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht'
  [  422.579207] device wlan0 entered promiscuous mode
  [  427.126059] mac80211_hwsim: initializing netlink
  [  427.128889] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht'
  [  427.133435] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht'
  [  427.135756] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht'
  [  427.385722] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  427.386258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  427.932765] device wlan2 entered promiscuous mode
  [  430.923486] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
  [  434.757426] wlan1: authenticate with 02:00:00:00:00:00
  [  434.757476] wlan1: send auth to 02:00:00:00:00:00 (try 1/3)
  [  434.758851] wlan1: authenticated
  [  434.758940] mac80211_hwsim hwsim1 wlan1: disabling HT/VHT due to WEP/TKIP 
use
  [  434.758942] mac80211_hwsim hwsim1 wlan1: disabling HT as WMM/QoS is not 
supported by the AP
  [  434.758943] mac80211_hwsim hwsim1 wlan1: disabling VHT as WMM/QoS is not 
supported by the AP
  [  434.761333] wlan1: associate with 02:00:00:00:00:00 (try 1/3)
  [  434.761750] wlan1: RX AssocResp from 02:00:00:00:00:00 (capab=0x11 
status=0 aid=1)
  [  434.761761] wlan1: associated
  [  434.762107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
  [  437.039513] wlan1: deauthenticating from 02:00:00:00:00:00 by local choice 
(Reason: 3=DEAUTH_LEAVING)
  [  437.133996] mac80211_hwsim: initializing netlink
  [  437.138685] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht'
  [  437.139801] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
  [  437.140661] BUG: unable to handle kernel NULL pointer dereference at 

  [  437.140668] IP: hrtimer_active+0xd/0x50
  [  437.140689] PGD 0 P4D 0 
  [  437.140692] Oops:  [#1] SMP PTI
  [  437.140693] Modules linked in: mac80211_hwsim(+) arc4 mac80211 cfg80211 
coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc snd_ens1371 
snd_ac97_codec aesni_intel gameport ac97_bus vmw_balloon snd_pcm aes_x86_64 
crypto_simd glue_helper cryptd intel_rapl_perf snd_seq_midi snd_seq_midi_event 
snd_rawmidi input_leds joydev serio_raw snd_seq vmwgfx ttm drm_kms_helper 

[Kernel-packages] [Bug 1825058] Re: mac80211_hwsim unable to handle kernel NULL pointer dereference at0000000000000000

2019-04-16 Thread tdotreppe
The non-HWE kernel for 16.04 is unaffected.

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1825058

Title:
  mac80211_hwsim unable to handle kernel NULL pointer dereference
  at

Status in linux package in Ubuntu:
  New

Bug description:
  The issue happens on 16.04 with linux-image-4.15.0-47-generic (as well
  as linux-image-4.15.0-45-generic). It also happens with linux-
  image-4.15.0-47-generic on 18.04 as well as the HWE kernel
  (4.18.0-17-generic). All test were done on 64 bit in a virtual machine
  and can be reproduced. It doesn't happen on 18.10 (mac80211_hwsim has
  other issues on this kernel that are solved in 19.04, most likely
  unrelated to this) or 19.04.

  Output:

  [  406.036796] cfg80211: Loading compiled-in X.509 certificates for 
regulatory database
  [  406.048785] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
  [  406.110060] mac80211_hwsim: initializing netlink
  [  406.153872] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
  [  406.154217] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
  [  406.316376] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  406.316829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  406.894434] device wlan1 entered promiscuous mode
  [  407.623768] mac80211_hwsim: initializing netlink
  [  407.627809] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht'
  [  407.761474] device wlan0 entered promiscuous mode
  [  412.293557] mac80211_hwsim: initializing netlink
  [  412.298984] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht'
  [  412.410453] device wlan0 entered promiscuous mode
  [  417.040581] mac80211_hwsim: initializing netlink
  [  417.045603] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht'
  [  417.048093] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht'
  [  417.221470] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  417.223812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  417.755334] device wlan1 entered promiscuous mode
  [  419.690453] mac80211_hwsim: initializing netlink
  [  419.696569] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht'
  [  419.697137] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht'
  [  419.870739] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  419.871090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  420.406242] device wlan1 entered promiscuous mode
  [  422.434785] mac80211_hwsim: initializing netlink
  [  422.435399] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht'
  [  422.579207] device wlan0 entered promiscuous mode
  [  427.126059] mac80211_hwsim: initializing netlink
  [  427.128889] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht'
  [  427.133435] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht'
  [  427.135756] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht'
  [  427.385722] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
  [  427.386258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
  [  427.932765] device wlan2 entered promiscuous mode
  [  430.923486] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
  [  434.757426] wlan1: authenticate with 02:00:00:00:00:00
  [  434.757476] wlan1: send auth to 02:00:00:00:00:00 (try 1/3)
  [  434.758851] wlan1: authenticated
  [  434.758940] mac80211_hwsim hwsim1 wlan1: disabling HT/VHT due to WEP/TKIP 
use
  [  434.758942] mac80211_hwsim hwsim1 wlan1: disabling HT as WMM/QoS is not 
supported by the AP
  [  434.758943] mac80211_hwsim hwsim1 wlan1: disabling VHT as WMM/QoS is not 
supported by the AP
  [  434.761333] wlan1: associate with 02:00:00:00:00:00 (try 1/3)
  [  434.761750] wlan1: RX AssocResp from 02:00:00:00:00:00 (capab=0x11 
status=0 aid=1)
  [  434.761761] wlan1: associated
  [  434.762107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
  [  437.039513] wlan1: deauthenticating from 02:00:00:00:00:00 by local choice 
(Reason: 3=DEAUTH_LEAVING)
  [  437.133996] mac80211_hwsim: initializing netlink
  [  437.138685] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht'
  [  437.139801] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
  [  437.140661] BUG: unable to handle kernel NULL pointer dereference at 

  [  437.140668] IP: hrtimer_active+0xd/0x50
  [  437.140689] PGD 0 P4D 0 
  [  437.140692] Oops:  [#1] SMP PTI
  [  437.140693] Modules linked in: mac80211_hwsim(+) arc4 mac80211 cfg80211 
coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc snd_ens1371 
snd_ac97_codec aesni_intel gameport ac97_bus vmw_balloon snd_pcm aes_x86_64 
crypto_simd glue_helper cryptd intel_rapl_perf snd_seq_midi snd_seq_midi_event 
snd_rawmidi input_leds joydev serio_raw snd_seq vmwgfx ttm drm_kms_helper 
snd_seq_device snd_timer snd drm 

[Kernel-packages] [Bug 1825058] [NEW] mac80211_hwsim unable to handle kernel NULL pointer dereference at0000000000000000

2019-04-16 Thread tdotreppe
Public bug reported:

The issue happens on 16.04 with linux-image-4.15.0-47-generic (as well
as linux-image-4.15.0-45-generic). It also happens with linux-
image-4.15.0-47-generic on 18.04 as well as the HWE kernel
(4.18.0-17-generic). All test were done on 64 bit in a virtual machine
and can be reproduced. It doesn't happen on 18.10 (mac80211_hwsim has
other issues on this kernel that are solved in 19.04, most likely
unrelated to this) or 19.04.

Output:

[  406.036796] cfg80211: Loading compiled-in X.509 certificates for regulatory 
database
[  406.048785] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[  406.110060] mac80211_hwsim: initializing netlink
[  406.153872] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[  406.154217] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
[  406.316376] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  406.316829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  406.894434] device wlan1 entered promiscuous mode
[  407.623768] mac80211_hwsim: initializing netlink
[  407.627809] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht'
[  407.761474] device wlan0 entered promiscuous mode
[  412.293557] mac80211_hwsim: initializing netlink
[  412.298984] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht'
[  412.410453] device wlan0 entered promiscuous mode
[  417.040581] mac80211_hwsim: initializing netlink
[  417.045603] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht'
[  417.048093] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht'
[  417.221470] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  417.223812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  417.755334] device wlan1 entered promiscuous mode
[  419.690453] mac80211_hwsim: initializing netlink
[  419.696569] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht'
[  419.697137] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht'
[  419.870739] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  419.871090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  420.406242] device wlan1 entered promiscuous mode
[  422.434785] mac80211_hwsim: initializing netlink
[  422.435399] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht'
[  422.579207] device wlan0 entered promiscuous mode
[  427.126059] mac80211_hwsim: initializing netlink
[  427.128889] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht'
[  427.133435] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht'
[  427.135756] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht'
[  427.385722] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  427.386258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  427.932765] device wlan2 entered promiscuous mode
[  430.923486] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[  434.757426] wlan1: authenticate with 02:00:00:00:00:00
[  434.757476] wlan1: send auth to 02:00:00:00:00:00 (try 1/3)
[  434.758851] wlan1: authenticated
[  434.758940] mac80211_hwsim hwsim1 wlan1: disabling HT/VHT due to WEP/TKIP use
[  434.758942] mac80211_hwsim hwsim1 wlan1: disabling HT as WMM/QoS is not 
supported by the AP
[  434.758943] mac80211_hwsim hwsim1 wlan1: disabling VHT as WMM/QoS is not 
supported by the AP
[  434.761333] wlan1: associate with 02:00:00:00:00:00 (try 1/3)
[  434.761750] wlan1: RX AssocResp from 02:00:00:00:00:00 (capab=0x11 status=0 
aid=1)
[  434.761761] wlan1: associated
[  434.762107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  437.039513] wlan1: deauthenticating from 02:00:00:00:00:00 by local choice 
(Reason: 3=DEAUTH_LEAVING)
[  437.133996] mac80211_hwsim: initializing netlink
[  437.138685] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht'
[  437.139801] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  437.140661] BUG: unable to handle kernel NULL pointer dereference at 

[  437.140668] IP: hrtimer_active+0xd/0x50
[  437.140689] PGD 0 P4D 0 
[  437.140692] Oops:  [#1] SMP PTI
[  437.140693] Modules linked in: mac80211_hwsim(+) arc4 mac80211 cfg80211 
coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc snd_ens1371 
snd_ac97_codec aesni_intel gameport ac97_bus vmw_balloon snd_pcm aes_x86_64 
crypto_simd glue_helper cryptd intel_rapl_perf snd_seq_midi snd_seq_midi_event 
snd_rawmidi input_leds joydev serio_raw snd_seq vmwgfx ttm drm_kms_helper 
snd_seq_device snd_timer snd drm fb_sys_fops soundcore syscopyarea sysfillrect 
sysimgblt shpchp mac_hid vmw_vsock_vmci_transport vsock vmw_vmci sch_fq_codel 
parport_pc ppdev lp parport ip_tables x_tables autofs4 hid_generic usbhid hid 
psmouse mptspi ahci libahci e1000 mptscsih mptbase scsi_transport_spi i2c_piix4 
pata_acpi [last unloaded: mac80211_hwsim]
[  437.140726] CPU: 0 PID: 27091 Comm: wpa_supplicant Not tainted 
4.15.0-47-generic #50-Ubuntu
[  437.140727] Hardware name: VMware, Inc.