bisecting fixing commit since 6b6446efedb27c2766745a04f9b5d4449f51391d building syzkaller on cba33199be220cbf61f7c0c8223d88a25a913d6f testing commit 6b6446efedb27c2766745a04f9b5d4449f51391d with gcc (GCC) 8.4.1 20210217 kernel signature: 0a3fc62d95e111ce542b8210b8b9e0161d41125198a50d651eff2080f0eb794f run #0: crashed: WARNING in ieee80211_ibss_csa_beacon run #1: crashed: WARNING in ieee80211_ibss_csa_beacon run #2: crashed: WARNING in ieee80211_ibss_csa_beacon run #3: crashed: WARNING in ieee80211_ibss_csa_beacon run #4: crashed: WARNING in ieee80211_ibss_csa_beacon run #5: crashed: WARNING in ieee80211_ibss_csa_beacon run #6: crashed: WARNING in ieee80211_ibss_csa_beacon run #7: crashed: WARNING in ieee80211_ibss_csa_beacon run #8: crashed: WARNING in ieee80211_ibss_csa_beacon run #9: crashed: WARNING in ieee80211_ibss_csa_beacon run #10: OK run #11: OK run #12: OK run #13: crashed: WARNING in ieee80211_ibss_csa_beacon run #14: crashed: WARNING in ieee80211_ibss_csa_beacon run #15: OK run #16: OK run #17: crashed: WARNING in ieee80211_ibss_csa_beacon run #18: crashed: WARNING in ieee80211_ibss_csa_beacon run #19: crashed: WARNING in ieee80211_ibss_csa_beacon testing current HEAD 29c52025152bab4c557d8174da58f1a4c8e70438 testing commit 29c52025152bab4c557d8174da58f1a4c8e70438 with gcc (GCC) 8.4.1 20210217 kernel signature: 4b059139bf69fa46c48b8ef5cd48750f460318e3906f65bc4d0f8e8d9fb637ea run #0: crashed: WARNING in ieee80211_ibss_csa_beacon run #1: crashed: WARNING in ieee80211_ibss_csa_beacon run #2: crashed: WARNING in ieee80211_ibss_csa_beacon run #3: crashed: WARNING in ieee80211_ibss_csa_beacon run #4: crashed: WARNING in ieee80211_ibss_csa_beacon run #5: crashed: WARNING in ieee80211_ibss_csa_beacon run #6: crashed: WARNING in ieee80211_ibss_csa_beacon run #7: crashed: WARNING in ieee80211_ibss_csa_beacon run #8: OK run #9: OK revisions tested: 2, total time: 33m20.645209283s (build: 14m18.107784942s, test: 18m7.427582226s) the crash still happens on HEAD commit msg: Linux 4.14.221 crash: WARNING in ieee80211_ibss_csa_beacon IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8820 at net/mac80211/ibss.c:506 sdata_assert_lock net/mac80211/ieee80211_i.h:1003 [inline] WARNING: CPU: 0 PID: 8820 at net/mac80211/ibss.c:506 ieee80211_ibss_csa_beacon+0x4ad/0x600 net/mac80211/ibss.c:496 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 8820 Comm: kworker/u4:5 Not tainted 4.14.221-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy13 ieee80211_csa_finalize_work Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x14b/0x1e7 lib/dump_stack.c:58 panic+0x1b0/0x358 kernel/panic.c:183 __warn.cold.7+0x25/0x25 kernel/panic.c:547 report_bug+0x1a1/0x200 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:177 [inline] fixup_bug arch/x86/kernel/traps.c:172 [inline] do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964 RIP: 0010:ieee80211_ibss_csa_beacon+0x4ad/0x600 net/mac80211/ibss.c:506 RSP: 0018:ffff8881de5f7c30 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000002 RCX: 1ffff1103bd0a5b1 RDX: 1ffffffff11e109b RSI: ffff8881de852d68 RDI: 0000000000000001 RBP: ffff8881de5f7c88 R08: ffff8881de852d88 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8881dccee928 R14: ffff8881dcceeef0 R15: ffff8881dccee400 ieee80211_ibss_finish_csa+0x1aa/0x4c0 net/mac80211/ibss.c:565 ieee80211_set_after_csa_beacon net/mac80211/cfg.c:2909 [inline] __ieee80211_csa_finalize+0x5d2/0xb30 net/mac80211/cfg.c:2965 ieee80211_csa_finalize net/mac80211/cfg.c:2988 [inline] ieee80211_csa_finalize_work+0xfb/0x120 net/mac80211/cfg.c:3013 process_one_work+0x74f/0x1620 kernel/workqueue.c:2116 worker_thread+0xcc/0xee0 kernel/workqueue.c:2250 kthread+0x338/0x400 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Kernel Offset: disabled Rebooting in 86400 seconds..