syzbot


WARNING in ieee80211_ibss_csa_beacon (2)

Status: upstream: reported on 2025/01/22 20:29
Reported-by: syzbot+4b2ba5be5f7ed9cf598d@syzkaller.appspotmail.com
First crash: 135d, last: 51d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in ieee80211_ibss_csa_beacon wireless C error 4997 834d 1703d 22/28 fixed on 2023/02/24 13:50
linux-4.19 WARNING in ieee80211_ibss_csa_beacon C error 1037 823d 1658d 0/1 upstream: reported C repro on 2020/11/22 05:50
linux-4.14 WARNING in ieee80211_ibss_csa_beacon C 1 840d 1671d 0/1 upstream: reported C repro on 2020/11/08 18:28
linux-5.15 WARNING in ieee80211_ibss_csa_beacon 504 210d 821d 0/3 auto-obsoleted due to no activity on 2025/01/17 15:26
upstream WARNING in ieee80211_ibss_csa_beacon (2) wireless 2892 496d 829d 0/28 auto-obsoleted due to no activity on 2024/04/07 10:40
linux-6.1 WARNING in ieee80211_ibss_csa_beacon 315 18d 822d 0/3 upstream: reported on 2023/03/08 04:59

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 7674 at net/mac80211/ibss.c:503 ieee80211_ibss_csa_beacon+0x572/0x620 net/mac80211/ibss.c:-1
Modules linked in:
CPU: 1 PID: 7674 Comm: syz.2.909 Not tainted 5.15.180-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:ieee80211_ibss_csa_beacon+0x572/0x620 net/mac80211/ibss.c:503
Code: f7 c6 05 22 66 2a 04 01 48 c7 c7 30 8d b8 8b be 01 02 00 00 48 c7 c2 c0 8d b8 8b e8 28 56 96 f7 e9 6a fe ff ff e8 2e a3 b3 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 1d a3 b3 f7 0f 0b e9 f5 fa
RSP: 0018:ffffc90002fbeef8 EFLAGS: 00010283
RAX: ffffffff89cc9f12 RBX: ffff88801efe3550 RCX: 0000000000080000
RDX: ffffc9000bf01000 RSI: 00000000000004c1 RDI: 00000000000004c2
RBP: ffff888060c79ae2 R08: dffffc0000000000 R09: fffffbfff2131832
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888060c79ae8
R13: ffff88801efe05c0 R14: ffff888060c78c80 R15: ffff888060c79b08
FS:  00007fd535dc06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc7fa6d068 CR3: 000000007b3b5000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000ffff5325
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ieee80211_set_csa_beacon net/mac80211/cfg.c:3382 [inline]
 __ieee80211_channel_switch net/mac80211/cfg.c:3512 [inline]
 ieee80211_channel_switch+0x11d7/0x1f60 net/mac80211/cfg.c:3550
 rdev_channel_switch+0xf1/0x260 net/wireless/rdev-ops.h:1088
 nl80211_channel_switch+0x8d5/0x10f0 net/wireless/nl80211.c:9389
 genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
 genl_rcv_msg+0xfc2/0x14a0 net/netlink/genetlink.c:792
 netlink_rcv_skb+0x1cf/0x410 net/netlink/af_netlink.c:2489
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803
 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
 netlink_unicast+0x7c0/0x990 net/netlink/af_netlink.c:1337
 netlink_sendmsg+0xa30/0xd60 net/netlink/af_netlink.c:1905
 sock_sendmsg_nosec net/socket.c:704 [inline]
 __sock_sendmsg net/socket.c:716 [inline]
 ____sys_sendmsg+0x59e/0x8f0 net/socket.c:2436
 ___sys_sendmsg+0x252/0x2e0 net/socket.c:2490
 __sys_sendmsg net/socket.c:2519 [inline]
 __do_sys_sendmsg net/socket.c:2528 [inline]
 __se_sys_sendmsg+0x19a/0x260 net/socket.c:2526
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x80 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fd537f58169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fd535dc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fd53817ffa0 RCX: 00007fd537f58169
RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
RBP: 00007fd537fdaa68 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fd53817ffa0 R15: 00007ffcc1c625c8
 </TASK>

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/17 13:17 linux-5.15.y f7347f400572 229db4cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ieee80211_ibss_csa_beacon
2025/03/24 09:17 linux-5.15.y 0c935c049b5c 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ieee80211_ibss_csa_beacon
2025/03/09 22:35 linux-5.15.y c16c81c81336 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ieee80211_ibss_csa_beacon
2025/02/06 01:18 linux-5.15.y c16c81c81336 4dc70884 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ieee80211_ibss_csa_beacon
2025/01/22 20:29 linux-5.15.y 4735586da88e a44b0418 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ieee80211_ibss_csa_beacon
2025/04/05 06:21 linux-5.15.y 0c935c049b5c c53ea9c9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
2025/03/19 20:27 linux-5.15.y 0c935c049b5c e20d7b13 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
2025/03/09 05:37 linux-5.15.y c16c81c81336 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
2025/03/07 19:13 linux-5.15.y c16c81c81336 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
2025/03/07 19:11 linux-5.15.y c16c81c81336 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
2025/03/05 15:00 linux-5.15.y c16c81c81336 60f5d8d9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
2025/03/01 23:57 linux-5.15.y c16c81c81336 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
2025/03/01 21:42 linux-5.15.y c16c81c81336 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
2025/02/20 10:55 linux-5.15.y c16c81c81336 50668798 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
2025/02/09 07:18 linux-5.15.y c16c81c81336 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_ibss_csa_beacon
* Struck through repros no longer work on HEAD.