syzbot


WARNING in ieee80211_recalc_chanctx_chantype

Status: upstream: reported on 2025/08/07 09:34
Subsystems: wireless
[Documentation on labels]
Reported-by: syzbot+3e1ddd8aa744da8bec01@syzkaller.appspotmail.com
First crash: 63d, last: 3d01h
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [wireless?] WARNING in ieee80211_recalc_chanctx_chantype 0 (1) 2025/08/07 09:34

Sample crash report:
gtp0: left allmulticast mode
bond1: left promiscuous mode
geneve2: left promiscuous mode
vlan2: left promiscuous mode
------------[ cut here ]------------
WARNING: CPU: 0 PID: 20795 at net/mac80211/chan.c:844 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 net/mac80211/chan.c:844
Modules linked in:
CPU: 0 UID: 0 PID: 20795 Comm: syz.5.3756 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 net/mac80211/chan.c:844
Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4b c8 24 f7 4d 8b 36 4d 39 fe 74 22 e8 ae 4a c1 f6 e9 ef f8 ff ff e8 a4 4a c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 96 4a c1 f6 e9 39 07 00 00 48 83 7c 24
RSP: 0018:ffffc9000c136380 EFLAGS: 00010246
RAX: ffffffff8afe7892 RBX: 0000000000000000 RCX: 0000000000080000
RDX: ffffc90010355000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: ffffc9000c136540 R08: ffff88804d611737 R09: 1ffff11009ac22e6
R10: dffffc0000000000 R11: ffffed1009ac22e7 R12: dffffc0000000000
R13: 0000000000000070 R14: ffff888058c3a8c0 R15: ffff888058c3a8c0
FS:  00007fc9f659b6c0(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000404030 CR3: 0000000069b64000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ieee80211_assign_link_chanctx+0x5ca/0xd70 net/mac80211/chan.c:944
 __ieee80211_link_release_channel+0x33b/0x4a0 net/mac80211/chan.c:1890
 ieee80211_leave_mesh+0xc5/0x130 net/mac80211/cfg.c:2842
 rdev_leave_mesh net/wireless/rdev-ops.h:372 [inline]
 cfg80211_leave_mesh+0x290/0x800 net/wireless/mesh.c:277
 cfg80211_netdev_notifier_call+0x1b3/0x1450 net/wireless/core.c:1567
 notifier_call_chain+0x1b6/0x3e0 kernel/notifier.c:85
 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline]
 call_netdevice_notifiers net/core/dev.c:2281 [inline]
 __dev_close_many+0x106/0x6f0 net/core/dev.c:1726
 __dev_close net/core/dev.c:1767 [inline]
 __dev_change_flags+0x2c7/0x6d0 net/core/dev.c:9547
 netif_change_flags+0x88/0x1a0 net/core/dev.c:9612
 do_setlink+0xc55/0x41c0 net/core/rtnetlink.c:3143
 rtnl_group_changelink net/core/rtnetlink.c:3775 [inline]
 __rtnl_newlink net/core/rtnetlink.c:3929 [inline]
 rtnl_newlink+0x149f/0x1c70 net/core/rtnetlink.c:4057
 rtnetlink_rcv_msg+0x7cf/0xb70 net/core/rtnetlink.c:6946
 netlink_rcv_skb+0x205/0x470 net/netlink/af_netlink.c:2552
 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline]
 netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1346
 netlink_sendmsg+0x805/0xb30 net/netlink/af_netlink.c:1896
 sock_sendmsg_nosec net/socket.c:714 [inline]
 __sock_sendmsg+0x219/0x270 net/socket.c:729
 ____sys_sendmsg+0x505/0x830 net/socket.c:2614
 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2668
 __sys_sendmsg net/socket.c:2700 [inline]
 __do_sys_sendmsg net/socket.c:2705 [inline]
 __se_sys_sendmsg net/socket.c:2703 [inline]
 __x64_sys_sendmsg+0x19b/0x260 net/socket.c:2703
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc9f578eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc9f659b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fc9f59e6270 RCX: 00007fc9f578eec9
RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
RBP: 00007fc9f5811f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc9f59e6308 R14: 00007fc9f59e6270 R15: 00007fc9f5b0fa28
 </TASK>

Crashes (24):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/27 22:09 upstream fec734e8d564 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/24 02:20 upstream cec1e6e5d1ab 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in ieee80211_recalc_chanctx_chantype
2025/09/21 22:03 upstream 2d5bd41a4505 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/22 18:25 upstream a2e94e80790b bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in ieee80211_recalc_chanctx_chantype
2025/08/06 00:21 upstream 7e161a991ea7 904e669c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in ieee80211_recalc_chanctx_chantype
2025/08/03 09:24 upstream 186f3edfdd41 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/10/03 03:02 upstream 7f7072574127 49379ee0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in ieee80211_recalc_chanctx_chantype
2025/09/19 23:25 upstream 1522b530ac3e 67c37560 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in ieee80211_recalc_chanctx_chantype
2025/09/10 23:30 net 78dd8ad62cad fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/09 02:08 net 1dbfb0363224 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/09 02:07 net 1dbfb0363224 d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/15 00:18 net 4faff70959d5 dcc075fb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/13 23:59 net d7e82594a45c 22ec1469 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/10 23:16 net 33caa208dba6 32a0e5ed .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/04 21:21 net 1dbf1d590d10 abdcb213 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/29 23:43 net-next e835faaed2f8 86341da6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/11 19:50 net-next 5adf6f2b9972 fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/08 09:14 net-next c6142e1913de d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/07 02:37 net-next c6142e1913de d291dd2d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/25 21:08 net-next 992e9f53a0db bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/24 10:19 net-next b1c92cdf5af3 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/08/17 02:49 net-next bab3ce404553 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_recalc_chanctx_chantype
2025/09/03 10:25 linux-next 5d50cf9f7cf2 96a211bc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in ieee80211_recalc_chanctx_chantype
2025/08/24 12:06 linux-next 7fa4d8dc380f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in ieee80211_recalc_chanctx_chantype
* Struck through repros no longer work on HEAD.