ci starts bisection 2023-05-22 05:16:59.506155345 +0000 UTC m=+159141.848050402 bisecting fixing commit since bc77f7318da8812244cd2329d0bfc1312e75cfd9 building syzkaller on fbf0499acc828df26995835e51d83c3a0117e716 ensuring issue is reproducible on original commit bc77f7318da8812244cd2329d0bfc1312e75cfd9 testing commit bc77f7318da8812244cd2329d0bfc1312e75cfd9 gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f4c6b93f1f3caec284ee222fe31d7559e066686a5ff1a28b91d548f0acaed238 all runs: crashed: WARNING in ieee80211_free_ack_frame testing current HEAD dcbe4ea1985d3123836794be021c39cb33954f9f testing commit dcbe4ea1985d3123836794be021c39cb33954f9f gcc compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9feb9e6166af952683441c477d90705988b7b49c63542b4baa91500c3191ce09 all runs: crashed: WARNING in ieee80211_free_ack_frame crash still not fixed/happens on the oldest tested release revisions tested: 2, total time: 28m51.832076631s (build: 18m10.757139589s, test: 9m55.064037052s) crash still not fixed on HEAD or HEAD had kernel test errors commit msg: Merge branch '1GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue crash: WARNING in ieee80211_free_ack_frame ------------[ cut here ]------------ Have pending ack frames! WARNING: CPU: 1 PID: 12 at net/mac80211/main.c:1510 ieee80211_free_ack_frame+0x35/0x40 net/mac80211/main.c:1510 Modules linked in: CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted 6.4.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 Workqueue: netns cleanup_net RIP: 0010:ieee80211_free_ack_frame+0x35/0x40 net/mac80211/main.c:1510 Code: 55 48 89 f5 74 11 48 89 ef be 02 00 00 00 e8 b2 78 aa fe 31 c0 5d c3 48 c7 c7 80 35 8b 8a c6 05 2e 09 9f 04 01 e8 cb 6c 91 f8 <0f> 0b eb d8 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 b8 00 00 00 00 00 RSP: 0018:ffffc900001179f0 EFLAGS: 00010286 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000001 RBP: ffff88807c030280 R08: 0000000000000000 R09: ffffc9000011771f R10: fffff52000022ee3 R11: 0000000000022868 R12: 0000000000000000 R13: 0000000080000000 R14: 0000000000000000 R15: ffff88806bacf730 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc213f7020 CR3: 0000000025d9b000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: idr_for_each+0xf9/0x1d0 lib/idr.c:208 ieee80211_free_hw+0x89/0x2a0 net/mac80211/main.c:1528 mac80211_hwsim_del_radio drivers/net/wireless/virtual/mac80211_hwsim.c:5403 [inline] hwsim_exit_net+0x3fe/0x7c0 drivers/net/wireless/virtual/mac80211_hwsim.c:6276 ops_exit_list+0x94/0x160 net/core/net_namespace.c:170 cleanup_net+0x427/0x990 net/core/net_namespace.c:614 process_one_work+0x86e/0x1410 kernel/workqueue.c:2405 worker_thread+0x5af/0xf00 kernel/workqueue.c:2552 kthread+0x2ea/0x3c0 kernel/kthread.c:379 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308