WARNING in ieee80211_start_next_roc

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 6b6446ef Linux 4.14.204
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=12c94746500000
kernel config: https://syzkaller.appspot.com/x/.config?x=3b2e3745f25cbc4e
dashboard link: https://syzkaller.appspot.com/bug?extid=c63745cb0e718ef69011
compiler: gcc (GCC) 10.1.0-syz 20200507
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=17842cfa500000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1598f3a8500000

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+c63745...@syzkaller.appspotmail.com

------------[ cut here ]------------
WARNING: CPU: 0 PID: 22 at net/mac80211/offchannel.c:419 ieee80211_start_next_roc+0x1ca/0x220 net/mac80211/offchannel.c:419
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.204-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy3 ieee80211_scan_work
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x283 lib/dump_stack.c:58
panic+0x1f9/0x42d kernel/panic.c:183
__warn.cold+0x20/0x4b kernel/panic.c:547
report_bug+0x208/0x249 lib/bug.c:186
fixup_bug arch/x86/kernel/traps.c:177 [inline]
fixup_bug arch/x86/kernel/traps.c:172 [inline]
do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:ieee80211_start_next_roc+0x1ca/0x220 net/mac80211/offchannel.c:419
RSP: 0018:ffff8880b55ffbd0 EFLAGS: 00010297
RAX: ffff8880b55ee5c0 RBX: ffff888093edfc80 RCX: 1ffffffff1279f18
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff888093edfca0
RBP: ffff8880a37a8fa0 R08: ffffffff8b9c4298 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: ffff8880a37a9e48 R14: ffff8880a8cd8840 R15: ffff8880a37a9fe8
__ieee80211_scan_completed+0x7bf/0x14d0 net/mac80211/scan.c:415
ieee80211_scan_work+0x300/0x15a0 net/mac80211/scan.c:962
process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
kthread+0x30d/0x420 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this issue, for details see:
https://goo.gl/tpsmEJ#testing-patches