syzbot


WARNING in ieee80211_recalc_chanctx_chantype

Status: upstream: reported on 2025/08/07 09:34
Subsystems: wireless
[Documentation on labels]
Reported-by: syzbot+3e1ddd8aa744da8bec01@syzkaller.appspotmail.com
First crash: 120d, last: 9d06h
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [wireless?] WARNING in ieee80211_recalc_chanctx_chantype 0 (1) 2025/08/07 09:34

Sample crash report:
ip6gre1: left promiscuous mode
ip6gre1: left allmulticast mode
gretap1: left promiscuous mode
------------[ cut here ]------------
WARNING: CPU: 0 PID: 19801 at net/mac80211/chan.c:833 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 net/mac80211/chan.c:833
Modules linked in:
CPU: 0 UID: 0 PID: 19801 Comm: syz.3.2202 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 net/mac80211/chan.c:833
Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5b 9d 5a f7 4d 8b 36 4d 39 fe 74 22 e8 8e db f4 f6 e9 ef f8 ff ff e8 84 db f4 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 76 db f4 f6 e9 39 07 00 00 48 83 7c 24
RSP: 0018:ffffc90004aa6220 EFLAGS: 00010246
RAX: ffffffff8acb3082 RBX: 0000000000000000 RCX: 0000000000080000
RDX: ffffc9000d8b0000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: ffffc90004aa6400 R08: ffff888032b657c7 R09: 1ffff1100656caf8
R10: dffffc0000000000 R11: ffffed100656caf9 R12: dffffc0000000000
R13: 0000000000000070 R14: ffff888027a2a910 R15: ffff888027a2a910
FS:  00007fcf133ab6c0(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000285030 CR3: 000000003117a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ieee80211_assign_link_chanctx+0x5ca/0xd70 net/mac80211/chan.c:933
 __ieee80211_link_release_channel+0x33b/0x4a0 net/mac80211/chan.c:1879
 ieee80211_leave_mesh+0xc5/0x130 net/mac80211/cfg.c:2955
 rdev_leave_mesh net/wireless/rdev-ops.h:372 [inline]
 cfg80211_leave_mesh+0x293/0x800 net/wireless/mesh.c:277
 cfg80211_netdev_notifier_call+0x1aa/0x1440 net/wireless/core.c:1576
 notifier_call_chain+0x1b6/0x3e0 kernel/notifier.c:85
 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline]
 call_netdevice_notifiers net/core/dev.c:2281 [inline]
 __dev_close_many+0x106/0x6f0 net/core/dev.c:1726
 __dev_close net/core/dev.c:1767 [inline]
 __dev_change_flags+0x2c7/0x6d0 net/core/dev.c:9635
 netif_change_flags+0x88/0x1a0 net/core/dev.c:9700
 do_setlink+0xc55/0x41c0 net/core/rtnetlink.c:3151
 rtnl_group_changelink net/core/rtnetlink.c:3783 [inline]
 __rtnl_newlink net/core/rtnetlink.c:3937 [inline]
 rtnl_newlink+0x14ad/0x1c80 net/core/rtnetlink.c:4065
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6951
 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2552
 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1346
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1896
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg+0x21c/0x270 net/socket.c:742
 ____sys_sendmsg+0x505/0x830 net/socket.c:2630
 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2684
 __sys_sendmsg net/socket.c:2716 [inline]
 __do_sys_sendmsg net/socket.c:2721 [inline]
 __se_sys_sendmsg net/socket.c:2719 [inline]
 __x64_sys_sendmsg+0x19b/0x260 net/socket.c:2719
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcf1258f749
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fcf133ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fcf127e6090 RCX: 00007fcf1258f749
RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
RBP: 00007fcf12613f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fcf127e6128 R14: 00007fcf127e6090 R15: 00007fcf1290fa28
 </TASK>

Crashes (28):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/21 09:53 upstream fd95357fd8c6 280ea308 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/11/20 06:37 upstream 23cb64fb7625 26ee5237 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in ieee80211_recalc_chanctx_chantype
2025/09/27 22:09 upstream fec734e8d564 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/24 02:20 upstream cec1e6e5d1ab 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in ieee80211_recalc_chanctx_chantype
2025/09/21 22:03 upstream 2d5bd41a4505 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/22 18:25 upstream a2e94e80790b bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in ieee80211_recalc_chanctx_chantype
2025/08/06 00:21 upstream 7e161a991ea7 904e669c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in ieee80211_recalc_chanctx_chantype
2025/08/03 09:24 upstream 186f3edfdd41 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/10/19 16:00 upstream 1c64efcb083c 1c8c8cd8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in ieee80211_recalc_chanctx_chantype
2025/10/03 03:02 upstream 7f7072574127 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in ieee80211_recalc_chanctx_chantype
2025/11/22 12:09 upstream 2eba5e05d9bc 4fb8ef37 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in ieee80211_recalc_chanctx_chantype
2025/09/19 23:25 upstream 1522b530ac3e 67c37560 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in ieee80211_recalc_chanctx_chantype
2025/09/10 23:30 net 78dd8ad62cad fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/09 02:08 net 1dbfb0363224 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/09 02:07 net 1dbfb0363224 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/15 00:18 net 4faff70959d5 dcc075fb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/13 23:59 net d7e82594a45c 22ec1469 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/10 23:16 net 33caa208dba6 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/04 21:21 net 1dbf1d590d10 abdcb213 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/29 23:43 net-next e835faaed2f8 86341da6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/11 19:50 net-next 5adf6f2b9972 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/08 09:14 net-next c6142e1913de d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/07 02:37 net-next c6142e1913de d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/25 21:08 net-next 992e9f53a0db bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/24 10:19 net-next b1c92cdf5af3 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/17 02:49 net-next bab3ce404553 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/03 10:25 linux-next 5d50cf9f7cf2 96a211bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in ieee80211_recalc_chanctx_chantype
2025/08/24 12:06 linux-next 7fa4d8dc380f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in ieee80211_recalc_chanctx_chantype
* Struck through repros no longer work on HEAD.