bisecting cause commit starting from 456afe01b10085518406022c69cfd2b718d6eaf8 building syzkaller on 5ef9c29141f85f210b326ce68718498ae0c1fd35 testing commit 456afe01b10085518406022c69cfd2b718d6eaf8 with gcc (GCC) 8.1.0 kernel signature: ef98cd7e995b842d35b1d2a02bc099ce6a5262b33e7ac35b8768bddd1a3e02a5 all runs: crashed: WARNING in __ieee80211_beacon_get testing release v5.8 testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c with gcc (GCC) 8.1.0 kernel signature: 04c4129dd8b752ccbd3b8ae38942abac8a03c62ed20622ed24791daf4a1c773a all runs: crashed: WARNING in __ieee80211_beacon_get testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 with gcc (GCC) 8.1.0 kernel signature: ed4d14e22a5e899bcdc78c3ca91e674432765f53e0a73fa156c81b34dfe9fc80 all runs: crashed: WARNING in __ieee80211_beacon_get testing release v5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 with gcc (GCC) 8.1.0 kernel signature: 84297acb3d1e0cd67b90aac6faa9351c6f0df73be104c2fcc5da014ad635e84a all runs: crashed: WARNING in __ieee80211_beacon_get testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 with gcc (GCC) 8.1.0 kernel signature: c9439f9c8ca5e2523ee16b4280cc93a7150dd49d8fb8291c1c7c87c5c917cfcf all runs: crashed: WARNING in __ieee80211_beacon_get testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.1.0 kernel signature: eecba05921d953ec2376e65a78b835dc20ca3d93119b05f9b869c63a444cfd95 all runs: OK # git bisect start d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 219d54332a09e8d8741c1e1982f5eae56099de85 Bisecting: 8639 revisions left to test after this (roughly 13 steps) [8c39f71ee2019e77ee14f88b1321b2348db51820] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net testing commit 8c39f71ee2019e77ee14f88b1321b2348db51820 with gcc (GCC) 8.1.0 kernel signature: 569d41ad9c19d1b3a53569a5a3b3f8a2adf597a9ee20e74c95ebde661ca7ae81 all runs: crashed: WARNING in __ieee80211_beacon_get # git bisect bad 8c39f71ee2019e77ee14f88b1321b2348db51820 Bisecting: 3435 revisions left to test after this (roughly 12 steps) [3b397c7ccafe0624018cb09fc96729f8f6165573] Merge tag 'regmap-v5.5' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap testing commit 3b397c7ccafe0624018cb09fc96729f8f6165573 with gcc (GCC) 8.1.0 kernel signature: 2d3141ab3bddeec1573958499365b487b2ee7ad40e3653738027c4f5bab51100 all runs: crashed: WARNING in __ieee80211_beacon_get # git bisect bad 3b397c7ccafe0624018cb09fc96729f8f6165573 Bisecting: 1709 revisions left to test after this (roughly 11 steps) [924ea58dadea23cc28b60d02b9c0896b7b168a6f] Merge tag 'mt76-for-kvalo-2019-11-20' of https://github.com/nbd168/wireless testing commit 924ea58dadea23cc28b60d02b9c0896b7b168a6f with gcc (GCC) 8.1.0 kernel signature: bc67cf702d9221b07fc45529240d5c6c71e1d1cedd78712772f6ab8be4a02862 all runs: crashed: WARNING in __ieee80211_beacon_get # git bisect bad 924ea58dadea23cc28b60d02b9c0896b7b168a6f Bisecting: 855 revisions left to test after this (roughly 10 steps) [3b7ad08b5153b0eda2f4d57ac53d815c30acd172] vsock: Simplify '__vsock_release()' testing commit 3b7ad08b5153b0eda2f4d57ac53d815c30acd172 with gcc (GCC) 8.1.0 kernel signature: ee7bab05cda3309ca845a151a5a14402a6861e2a5dd53bdc6b2c3ec22b3572c3 all runs: crashed: WARNING in __ieee80211_beacon_get # git bisect bad 3b7ad08b5153b0eda2f4d57ac53d815c30acd172 Bisecting: 427 revisions left to test after this (roughly 9 steps) [a3e09ded6a6d4b4cbdeb8c1ec4c7cf60798b3ce0] i40e: Extract detection of HW flags into a function testing commit a3e09ded6a6d4b4cbdeb8c1ec4c7cf60798b3ce0 with gcc (GCC) 8.1.0 kernel signature: 58a7518f7f187eea71482c24911a12baf2958a3196ec921e2e8dcb62fbc02fd8 all runs: crashed: WARNING in __ieee80211_beacon_get # git bisect bad a3e09ded6a6d4b4cbdeb8c1ec4c7cf60798b3ce0 Bisecting: 218 revisions left to test after this (roughly 8 steps) [cb0ce18aaf4c08f1c5c60d8a09fcba34f63f6f51] genetlink: do not parse attributes for families with zero maxattr testing commit cb0ce18aaf4c08f1c5c60d8a09fcba34f63f6f51 with gcc (GCC) 8.1.0 kernel signature: a95cf4d11949c3a93af1f7a4e53f024cc6b3d116c3e8cb033690fdf7e925303b all runs: OK # git bisect good cb0ce18aaf4c08f1c5c60d8a09fcba34f63f6f51 Bisecting: 109 revisions left to test after this (roughly 7 steps) [49c65e4ff19772847e030e04121bece0517eb32c] selftests: mlxsw: Generalize the parameters of mirror_gre test testing commit 49c65e4ff19772847e030e04121bece0517eb32c with gcc (GCC) 8.1.0 kernel signature: 72dbd585f69d746bb884528d54a8bc0462839a042841c79a3f9c2c83fc54bf2b all runs: crashed: WARNING in __ieee80211_beacon_get # git bisect bad 49c65e4ff19772847e030e04121bece0517eb32c Bisecting: 54 revisions left to test after this (roughly 6 steps) [752677e89fca11fd6e239df2fb9877b9e6b83ab2] samples/bpf: Add makefile.target for separate CC target build testing commit 752677e89fca11fd6e239df2fb9877b9e6b83ab2 with gcc (GCC) 8.1.0 kernel signature: 6a6e0e91e3aeb06307f910cf6b88f056a5435bc1835a6ce00c587f9e3ea9165f all runs: OK # git bisect good 752677e89fca11fd6e239df2fb9877b9e6b83ab2 Bisecting: 27 revisions left to test after this (roughly 5 steps) [a9d6ed7a8bd0f3091b9fe6d0b9facc9392c1ec21] net: dsa: sja1105: Move PTP data to its own private structure testing commit a9d6ed7a8bd0f3091b9fe6d0b9facc9392c1ec21 with gcc (GCC) 8.1.0 kernel signature: a79e0d92b0bf5fdc4e66966a47eeab7e347547685919460eb9dc31c2f0fce977 all runs: crashed: WARNING in __ieee80211_beacon_get # git bisect bad a9d6ed7a8bd0f3091b9fe6d0b9facc9392c1ec21 Bisecting: 14 revisions left to test after this (roughly 4 steps) [b8fc345d6b5d661e1125bd6a0e30b6fabf1a076e] Merge branch 'selftests-bpf-Makefile-cleanup' testing commit b8fc345d6b5d661e1125bd6a0e30b6fabf1a076e with gcc (GCC) 8.1.0 kernel signature: 5d54c00f7ebf6292c989a256ba35a7a4293500ea996dc85677ab55bfcfd23c43 all runs: OK # git bisect good b8fc345d6b5d661e1125bd6a0e30b6fabf1a076e Bisecting: 7 revisions left to test after this (roughly 3 steps) [b1103d256704869f94c1399d189618c43724ded6] mac80211: minstrel_ht: replace rate stats ewma with a better moving average testing commit b1103d256704869f94c1399d189618c43724ded6 with gcc (GCC) 8.1.0 kernel signature: b7846c7e5d4cbbad08ed7896f21e3b0f06960eb054156fd048dc7d975267021f all runs: OK # git bisect good b1103d256704869f94c1399d189618c43724ded6 Bisecting: 3 revisions left to test after this (roughly 2 steps) [7e0d15ee0d8ba28a41ed02c8d2c1c17124b13234] Merge tag 'mac80211-next-for-net-next-2019-10-11' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next testing commit 7e0d15ee0d8ba28a41ed02c8d2c1c17124b13234 with gcc (GCC) 8.1.0 kernel signature: 05ecddc6dbf2d6fc79d35cc81127619380d4c3bd96354531cc9b9d021c72f82e all runs: crashed: WARNING in __ieee80211_beacon_get # git bisect bad 7e0d15ee0d8ba28a41ed02c8d2c1c17124b13234 Bisecting: 1 revision left to test after this (roughly 1 step) [b5764696ac409523414f70421c13b7e7a9309454] mac80211_hwsim: add more 5GHz channels, 5/10 MHz support testing commit b5764696ac409523414f70421c13b7e7a9309454 with gcc (GCC) 8.1.0 kernel signature: d46f6cc75bdcd3c3ab27aa18aae6d1fe599f3dbee55076d68fe3f7b17c52b72e all runs: OK # git bisect good b5764696ac409523414f70421c13b7e7a9309454 Bisecting: 0 revisions left to test after this (roughly 0 steps) [7dfd8ac327301f302b03072066c66eb32578e940] mac80211_hwsim: add support for OCB testing commit 7dfd8ac327301f302b03072066c66eb32578e940 with gcc (GCC) 8.1.0 kernel signature: dd61f0cfbe409994a469ea7de9b210b824598228aa9ef2411baf7911fbe469eb all runs: crashed: WARNING in __ieee80211_beacon_get # git bisect bad 7dfd8ac327301f302b03072066c66eb32578e940 7dfd8ac327301f302b03072066c66eb32578e940 is the first bad commit commit 7dfd8ac327301f302b03072066c66eb32578e940 Author: Ramon Fontes Date: Thu Oct 10 15:13:07 2019 -0300 mac80211_hwsim: add support for OCB OCB (Outside the Context of a BSS) interfaces are the implementation of 802.11p, support that. Signed-off-by: Ramon Fontes Link: https://lore.kernel.org/r/20191010181307.11821-2-ramonreisfontes@gmail.com Signed-off-by: Johannes Berg drivers/net/wireless/mac80211_hwsim.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) culprit signature: dd61f0cfbe409994a469ea7de9b210b824598228aa9ef2411baf7911fbe469eb parent signature: d46f6cc75bdcd3c3ab27aa18aae6d1fe599f3dbee55076d68fe3f7b17c52b72e revisions tested: 20, total time: 4h7m32.812034377s (build: 2h15m30.023508283s, test: 1h49m46.410788422s) first bad commit: 7dfd8ac327301f302b03072066c66eb32578e940 mac80211_hwsim: add support for OCB recipients (to): ["johannes.berg@intel.com" "johannes@sipsolutions.net" "linux-wireless@vger.kernel.org" "netdev@vger.kernel.org" "ramonreisfontes@gmail.com"] recipients (cc): ["davem@davemloft.net" "kvalo@codeaurora.org" "linux-kernel@vger.kernel.org"] crash: WARNING in __ieee80211_beacon_get ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8443 at net/mac80211/tx.c:4557 __ieee80211_beacon_get+0x8fe/0x1980 net/mac80211/tx.c:4602 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 8443 Comm: modprobe Not tainted 5.3.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x12b/0x17b lib/dump_stack.c:113 panic+0x2da/0x5a3 kernel/panic.c:220 __warn.cold.10+0x25/0x25 kernel/panic.c:581 report_bug+0x1b0/0x270 lib/bug.c:195 fixup_bug arch/x86/kernel/traps.c:179 [inline] do_error_trap+0x125/0x210 arch/x86/kernel/traps.c:272 do_invalid_op+0x36/0x40 arch/x86/kernel/traps.c:291 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1028 RIP: 0010:__ieee80211_beacon_get+0x8fe/0x1980 net/mac80211/tx.c:4557 Code: 0c 00 00 00 00 4c 89 f0 48 8b 5d d0 65 48 33 1c 25 28 00 00 00 0f 85 2a 0c 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e8 0b 13 16 fa 45 31 f6 85 c0 74 92 e9 74 ff ff ff 44 0f b6 RSP: 0000:ffff8880ae609a90 EFLAGS: 00010202 RAX: 000000000000000b RBX: ffff88809cfea790 RCX: 0000000000000000 RDX: 1ffff110139fd4f2 RSI: 0000000000000000 RDI: ffff8880ae609bf8 RBP: ffff8880ae609ba0 R08: ffffed1015cc137f R09: ffff8880ae609bf0 R10: ffffed1015cc137e R11: ffff8880ae609bf7 R12: ffff8880ae609bf0 R13: ffff888082e50d40 R14: ffff88809cfea790 R15: 0000000000000000 ieee80211_beacon_get_tim+0x84/0x780 net/mac80211/tx.c:4618 ieee80211_beacon_get include/net/mac80211.h:4735 [inline] mac80211_hwsim_beacon_tx+0xc3/0x680 drivers/net/wireless/mac80211_hwsim.c:1577 __iterate_interfaces+0xe2/0x370 net/mac80211/util.c:735 ieee80211_iterate_active_interfaces_atomic+0x72/0x120 net/mac80211/util.c:771 mac80211_hwsim_beacon+0xce/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1613 __run_hrtimer kernel/time/hrtimer.c:1514 [inline] __hrtimer_run_queues+0x2d8/0xad0 kernel/time/hrtimer.c:1576 hrtimer_run_softirq+0x19e/0x2c0 kernel/time/hrtimer.c:1593 __do_softirq+0x276/0xaf5 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x1a6/0x1f0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1d8/0x690 arch/x86/kernel/apic/apic.c:1137 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830 RIP: 0010:debug_smp_processor_id+0x20/0x250 lib/smp_processor_id.c:58 Code: ff ff 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 56 41 55 41 54 53 65 8b 1d be 62 71 7c 65 8b 05 6f cd 71 7c a9 ff ff ff 7f 74 0b <89> d8 5b 41 5c 41 5d 41 5e 5d c3 48 c7 c7 58 e5 43 89 48 b8 00 00 RSP: 0000:ffff88808add7ab0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 RAX: 0000000080000002 RBX: 0000000000000000 RCX: ffff8880993c4c98 RDX: 0000000000000000 RSI: ffff88809a80c470 RDI: ffff8880993c4c94 RBP: ffff88808add7ad0 R08: fffff94000573759 R09: fffff94000573759 R10: fffff94000573758 R11: ffffea0002b9bac7 R12: ffff88809a809180 R13: ffff88808add7cc0 R14: ffffea0002b9bb00 R15: ffff88809a80c458 rcu_dynticks_curr_cpu_in_eqs+0x17/0x120 kernel/rcu/tree.c:299 rcu_is_watching+0x10/0x30 kernel/rcu/tree.c:901 rcu_read_lock_held_common+0xba/0x120 kernel/rcu/update.c:105 rcu_read_lock_held+0x5b/0xb0 kernel/rcu/update.c:281 xa_entry include/linux/xarray.h:1145 [inline] xas_next_entry include/linux/xarray.h:1569 [inline] filemap_map_pages+0x7af/0xda0 mm/filemap.c:2633 do_fault_around mm/memory.c:3450 [inline] do_read_fault mm/memory.c:3484 [inline] do_fault mm/memory.c:3618 [inline] handle_pte_fault mm/memory.c:3849 [inline] __handle_mm_fault+0x259d/0x3430 mm/memory.c:3973 handle_mm_fault+0x314/0x870 mm/memory.c:4010 do_user_addr_fault arch/x86/mm/fault.c:1441 [inline] __do_page_fault+0x36e/0xa60 arch/x86/mm/fault.c:1506 do_page_fault+0x2d/0x3e4 arch/x86/mm/fault.c:1530 page_fault+0x39/0x40 arch/x86/entry/entry_64.S:1202 RIP: 0033:0x7f905ea4b710 Code: Bad RIP value. RSP: 002b:00007ffff8a30bb8 EFLAGS: 00010246 RAX: 00007f905ea4b710 RBX: 00007f905e9e6790 RCX: 00007f905ed60068 RDX: 0000000000000000 RSI: 0000000000000025 RDI: 00007f905e9e6850 RBP: 00007ffff8a30ce0 R08: 00007f905e9ccea8 R09: 00007f905e9ccea8 R10: 00007f905ed616f0 R11: 0000000000000000 R12: 00007f905ef83000 R13: 00007f905e9e6838 R14: 00007f905e9c7000 R15: 0000000000399078 Kernel Offset: disabled Rebooting in 86400 seconds..