bisecting fixing commit since 6b6446efedb27c2766745a04f9b5d4449f51391d building syzkaller on cba33199be220cbf61f7c0c8223d88a25a913d6f testing commit 6b6446efedb27c2766745a04f9b5d4449f51391d with gcc (GCC) 8.4.1 20210217 kernel signature: c74d223fc1dd462a5285539f8a0a5c262ebbd58d25a0d185777112e27b42bec1 run #0: crashed: WARNING in ieee80211_ibss_csa_beacon run #1: crashed: WARNING in ieee80211_ibss_csa_beacon run #2: crashed: WARNING in ieee80211_ibss_csa_beacon run #3: crashed: WARNING in ieee80211_ibss_csa_beacon run #4: crashed: WARNING in ieee80211_ibss_csa_beacon run #5: crashed: WARNING in ieee80211_ibss_csa_beacon run #6: crashed: WARNING in ieee80211_ibss_csa_beacon run #7: crashed: WARNING in ieee80211_ibss_csa_beacon run #8: crashed: WARNING in ieee80211_ibss_csa_beacon run #9: crashed: WARNING in ieee80211_ibss_csa_beacon run #10: crashed: WARNING in ieee80211_ibss_csa_beacon run #11: crashed: WARNING in ieee80211_ibss_csa_beacon run #12: crashed: WARNING in ieee80211_ibss_csa_beacon run #13: OK run #14: crashed: WARNING in ieee80211_ibss_csa_beacon run #15: OK run #16: crashed: WARNING in ieee80211_ibss_csa_beacon run #17: crashed: WARNING in ieee80211_ibss_csa_beacon run #18: crashed: WARNING in ieee80211_ibss_csa_beacon run #19: crashed: WARNING in ieee80211_ibss_csa_beacon testing current HEAD cb83ddcd5332fcc3efd52ba994976efc4dd6061e testing commit cb83ddcd5332fcc3efd52ba994976efc4dd6061e with gcc (GCC) 8.4.1 20210217 kernel signature: be8d26c2221200535b191b426aeb4938c430eb6ee00834db99612eba8b98245f all runs: crashed: WARNING in ieee80211_ibss_csa_beacon revisions tested: 2, total time: 33m23.054255032s (build: 14m42.742140745s, test: 18m19.456347898s) the crash still happens on HEAD commit msg: Linux 4.14.226 crash: WARNING in ieee80211_ibss_csa_beacon IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 0 PID: 532 at net/mac80211/ibss.c:506 sdata_assert_lock net/mac80211/ieee80211_i.h:1003 [inline] WARNING: CPU: 0 PID: 532 at net/mac80211/ibss.c:506 ieee80211_ibss_csa_beacon+0x4ad/0x600 net/mac80211/ibss.c:496 Modules linked in: CPU: 0 PID: 532 Comm: kworker/u4:3 Not tainted 4.14.226-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy17 ieee80211_csa_finalize_work task: ffff8881f3d80040 task.stack: ffff8881f3d98000 RIP: 0010:ieee80211_ibss_csa_beacon+0x4ad/0x600 net/mac80211/ibss.c:506 RSP: 0018:ffff8881f3d9fc30 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000002 RCX: 1ffff1103e7b0131 RDX: 1ffffffff11e10a3 RSI: ffff8881f3d80968 RDI: 0000000000000001 RBP: ffff8881f3d9fc88 R08: ffff8881f3d80988 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8881e0732628 R14: ffff8881e0732bf0 R15: ffff8881e0732100 FS: 0000000000000000(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd643b02000 CR3: 0000000008e6a003 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ieee80211_ibss_finish_csa+0x1aa/0x4c0 net/mac80211/ibss.c:565 ieee80211_set_after_csa_beacon net/mac80211/cfg.c:2909 [inline] __ieee80211_csa_finalize+0x5d2/0xb30 net/mac80211/cfg.c:2965 ieee80211_csa_finalize net/mac80211/cfg.c:2988 [inline] ieee80211_csa_finalize_work+0xfb/0x120 net/mac80211/cfg.c:3013 process_one_work+0x74f/0x1620 kernel/workqueue.c:2116 worker_thread+0xcc/0xee0 kernel/workqueue.c:2250 kthread+0x338/0x400 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Code: 01 e8 55 3e 4d 00 e9 13 fd ff ff 49 8d bf e8 00 00 00 be ff ff ff ff e8 a2 eb 7a fa 85 c0 0f 85 b3 fb ff ff 0f 0b e9 ac fb ff ff <0f> 0b bb ea ff ff ff e9 b7 fe ff ff e8 b2 9e b7 fa e9 c4 fb ff ---[ end trace 6f2cdbfe227ed3d1 ]--- wlan1: failed to finalize CSA, disconnecting