bisecting fixing commit since 6b6446efedb27c2766745a04f9b5d4449f51391d
building syzkaller on cba33199be220cbf61f7c0c8223d88a25a913d6f
testing commit 6b6446efedb27c2766745a04f9b5d4449f51391d with gcc (GCC) 8.4.1 20210217
kernel signature: b7154eb5fd64106549a025828f0a7f86bffbcd1a1a07bd0647e39cdcf56a3c8d
all runs: crashed: WARNING in ieee80211_start_next_roc
testing current HEAD 29c52025152bab4c557d8174da58f1a4c8e70438
testing commit 29c52025152bab4c557d8174da58f1a4c8e70438 with gcc (GCC) 8.4.1 20210217
kernel signature: 55de429003b2edb873e19536598c00edaaf8b08f41963113d8d0bdd7899f08ff
all runs: crashed: WARNING in ieee80211_start_next_roc
revisions tested: 2, total time: 21m38.312172678s (build: 14m16.295807157s, test: 6m29.231126224s)
the crash still happens on HEAD
commit msg: Linux 4.14.221
crash: WARNING in ieee80211_start_next_roc
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
------------[ cut here ]------------
WARNING: CPU: 0 PID: 9188 at net/mac80211/offchannel.c:419 ieee80211_start_next_roc+0x1b7/0x210 net/mac80211/offchannel.c:409
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 9188 Comm: kworker/u4:7 Not tainted 4.14.221-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy5 ieee80211_scan_work
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 panic+0x1b0/0x358 kernel/panic.c:183
 __warn.cold.7+0x25/0x25 kernel/panic.c:547
 report_bug+0x1a1/0x200 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:ieee80211_start_next_roc net/mac80211/offchannel.c:419 [inline]
RIP: 0010:ieee80211_start_next_roc+0x1b7/0x210 net/mac80211/offchannel.c:401
RSP: 0018:ffff8881d0ea7ba0 EFLAGS: 00010202
RAX: 0000000000000000 RBX: ffff8881cc9d9860 RCX: ffffed103cbdddd0
RDX: 1ffff1103cf23ea4 RSI: 0000000000000000 RDI: ffff8881e791f520
RBP: ffff8881d0ea7bb0 R08: 1ffff1103cbdddd0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881e791f500
R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881cc9da748
 __ieee80211_scan_completed+0x505/0x1210 net/mac80211/scan.c:415
 ieee80211_scan_work+0x2da/0x1620 net/mac80211/scan.c:962
 process_one_work+0x74f/0x1620 kernel/workqueue.c:2116
 worker_thread+0xcc/0xee0 kernel/workqueue.c:2250
 kthread+0x338/0x400 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..