bisecting fixing commit since 6b6446efedb27c2766745a04f9b5d4449f51391d
building syzkaller on cba33199be220cbf61f7c0c8223d88a25a913d6f
testing commit 6b6446efedb27c2766745a04f9b5d4449f51391d with gcc (GCC) 8.4.1 20210217
kernel signature: 4bbb7c056590ba315ba194c36fae854ff244741ad58436b67293e0a525b80f5c
run #0: crashed: WARNING in ieee80211_ibss_csa_beacon
run #1: crashed: WARNING in ieee80211_ibss_csa_beacon
run #2: crashed: WARNING in ieee80211_ibss_csa_beacon
run #3: crashed: WARNING in ieee80211_ibss_csa_beacon
run #4: crashed: WARNING in ieee80211_ibss_csa_beacon
run #5: crashed: WARNING in ieee80211_ibss_csa_beacon
run #6: crashed: WARNING in ieee80211_ibss_csa_beacon
run #7: crashed: WARNING in ieee80211_ibss_csa_beacon
run #8: crashed: WARNING in ieee80211_ibss_csa_beacon
run #9: crashed: WARNING in ieee80211_ibss_csa_beacon
run #10: crashed: WARNING in ieee80211_ibss_csa_beacon
run #11: crashed: WARNING in ieee80211_ibss_csa_beacon
run #12: crashed: WARNING in ieee80211_ibss_csa_beacon
run #13: crashed: WARNING in ieee80211_ibss_csa_beacon
run #14: crashed: WARNING in ieee80211_ibss_csa_beacon
run #15: crashed: WARNING in ieee80211_ibss_csa_beacon
run #16: OK
run #17: crashed: WARNING in ieee80211_ibss_csa_beacon
run #18: OK
run #19: OK
testing current HEAD cf256fbcbe347b7d0ff58fe2dfa382a156bd3694
testing commit cf256fbcbe347b7d0ff58fe2dfa382a156bd3694 with gcc (GCC) 8.4.1 20210217
kernel signature: 87e2f2641e57183641c442c360d6145626aabcac0ac62b28280013cd9e370a60
run #0: crashed: WARNING in ieee80211_ibss_csa_beacon
run #1: crashed: WARNING in ieee80211_ibss_csa_beacon
run #2: crashed: WARNING in ieee80211_ibss_csa_beacon
run #3: crashed: WARNING in ieee80211_ibss_csa_beacon
run #4: OK
run #5: crashed: WARNING in __cfg80211_ibss_joined
run #6: crashed: WARNING in ieee80211_ibss_csa_beacon
run #7: OK
run #8: OK
run #9: crashed: WARNING in ieee80211_ibss_csa_beacon
revisions tested: 2, total time: 33m48.257040198s (build: 15m10.06036701s, test: 18m17.774953518s)
the crash still happens on HEAD
commit msg: Linux 4.14.231
crash: WARNING in ieee80211_ibss_csa_beacon
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
------------[ cut here ]------------
WARNING: CPU: 1 PID: 66 at net/mac80211/ibss.c:506 sdata_assert_lock net/mac80211/ieee80211_i.h:1003 [inline]
WARNING: CPU: 1 PID: 66 at net/mac80211/ibss.c:506 ieee80211_ibss_csa_beacon+0x4ad/0x600 net/mac80211/ibss.c:496
Modules linked in:
CPU: 1 PID: 66 Comm: kworker/u4:2 Not tainted 4.14.231-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy17 ieee80211_csa_finalize_work
task: ffff8881f4868300 task.stack: ffff8881f4870000
RIP: 0010:ieee80211_ibss_csa_beacon+0x4ad/0x600 net/mac80211/ibss.c:506
RSP: 0018:ffff8881f4877c30 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000002 RCX: 1ffff1103e90d189
RDX: 1ffffffff11e10a3 RSI: ffff8881f4868c28 RDI: 0000000000000001
RBP: ffff8881f4877c88 R08: ffff8881f4868c48 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881d6ad6728 R14: ffff8881d6ad6cf0 R15: ffff8881d6ad6200
FS:  0000000000000000(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000040 CR3: 0000000008e6a002 CR4: 00000000001606e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ieee80211_ibss_finish_csa+0x1aa/0x4c0 net/mac80211/ibss.c:565
 ieee80211_set_after_csa_beacon net/mac80211/cfg.c:2909 [inline]
 __ieee80211_csa_finalize+0x5d2/0xb30 net/mac80211/cfg.c:2965
 ieee80211_csa_finalize net/mac80211/cfg.c:2988 [inline]
 ieee80211_csa_finalize_work+0xfb/0x120 net/mac80211/cfg.c:3013
 process_one_work+0x74f/0x1620 kernel/workqueue.c:2116
 worker_thread+0xcc/0xee0 kernel/workqueue.c:2250
 kthread+0x338/0x400 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 01 e8 55 75 4d 00 e9 13 fd ff ff 49 8d bf e8 00 00 00 be ff ff ff ff e8 92 c8 79 fa 85 c0 0f 85 b3 fb ff ff 0f 0b e9 ac fb ff ff <0f> 0b bb ea ff ff ff e9 b7 fe ff ff e8 b2 94 b6 fa e9 c4 fb ff 
---[ end trace 31cbe40ac54cc18f ]---
wlan1: failed to finalize CSA, disconnecting