ci starts bisection 2023-05-22 05:16:59.506155345 +0000 UTC m=+159141.848050402
bisecting fixing commit since bc77f7318da8812244cd2329d0bfc1312e75cfd9
building syzkaller on fbf0499acc828df26995835e51d83c3a0117e716
ensuring issue is reproducible on original commit bc77f7318da8812244cd2329d0bfc1312e75cfd9

testing commit bc77f7318da8812244cd2329d0bfc1312e75cfd9 gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: f4c6b93f1f3caec284ee222fe31d7559e066686a5ff1a28b91d548f0acaed238
all runs: crashed: WARNING in ieee80211_free_ack_frame
testing current HEAD dcbe4ea1985d3123836794be021c39cb33954f9f
testing commit dcbe4ea1985d3123836794be021c39cb33954f9f gcc
compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 9feb9e6166af952683441c477d90705988b7b49c63542b4baa91500c3191ce09
all runs: crashed: WARNING in ieee80211_free_ack_frame
crash still not fixed/happens on the oldest tested release
revisions tested: 2, total time: 28m51.832076631s (build: 18m10.757139589s, test: 9m55.064037052s)
crash still not fixed on HEAD or HEAD had kernel test errors
commit msg: Merge branch '1GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/next-queue
crash: WARNING in ieee80211_free_ack_frame
------------[ cut here ]------------
Have pending ack frames!
WARNING: CPU: 1 PID: 12 at net/mac80211/main.c:1510 ieee80211_free_ack_frame+0x35/0x40 net/mac80211/main.c:1510
Modules linked in:
CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted 6.4.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
Workqueue: netns cleanup_net
RIP: 0010:ieee80211_free_ack_frame+0x35/0x40 net/mac80211/main.c:1510
Code: 55 48 89 f5 74 11 48 89 ef be 02 00 00 00 e8 b2 78 aa fe 31 c0 5d c3 48 c7 c7 80 35 8b 8a c6 05 2e 09 9f 04 01 e8 cb 6c 91 f8 <0f> 0b eb d8 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 b8 00 00 00 00 00
RSP: 0018:ffffc900001179f0 EFLAGS: 00010286
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000001
RBP: ffff88807c030280 R08: 0000000000000000 R09: ffffc9000011771f
R10: fffff52000022ee3 R11: 0000000000022868 R12: 0000000000000000
R13: 0000000080000000 R14: 0000000000000000 R15: ffff88806bacf730
FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc213f7020 CR3: 0000000025d9b000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 idr_for_each+0xf9/0x1d0 lib/idr.c:208
 ieee80211_free_hw+0x89/0x2a0 net/mac80211/main.c:1528
 mac80211_hwsim_del_radio drivers/net/wireless/virtual/mac80211_hwsim.c:5403 [inline]
 hwsim_exit_net+0x3fe/0x7c0 drivers/net/wireless/virtual/mac80211_hwsim.c:6276
 ops_exit_list+0x94/0x160 net/core/net_namespace.c:170
 cleanup_net+0x427/0x990 net/core/net_namespace.c:614
 process_one_work+0x86e/0x1410 kernel/workqueue.c:2405
 worker_thread+0x5af/0xf00 kernel/workqueue.c:2552
 kthread+0x2ea/0x3c0 kernel/kthread.c:379
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>