WARNING in ieee80211_ibss_csa_beacon

Status: upstream: reported C repro on 2020/11/08 18:28
Reported-by: syzbot+80e54ae109d8e7c3d947@syzkaller.appspotmail.com
First crash: 2089d, last: 1257d
▶ ▼ Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in ieee80211_ibss_csa_beacon wireless -1 syz, C error 4997 1251d 2121d 22/29 fixed on 2023/02/24 13:50
linux-5.15 WARNING in ieee80211_ibss_csa_beacon (3) -1 18 43d 369d 0/3 upstream: reported on 2025/07/26 04:50
linux-6.6 WARNING in ieee80211_ibss_csa_beacon -1 1 399d 399d 0/2 auto-obsoleted due to no activity on 2025/10/03 10:51
linux-6.6 WARNING in ieee80211_ibss_csa_beacon (2) -1 6 49d 242d 0/2 upstream: reported on 2025/11/29 13:51
linux-6.1 WARNING in ieee80211_ibss_csa_beacon (2) -1 31 1d12h 254d 0/3 upstream: reported on 2025/11/18 07:37
linux-4.19 WARNING in ieee80211_ibss_csa_beacon -1 syz, C error 1037 1241d 2076d 0/1 upstream: reported C repro on 2020/11/22 05:50
linux-5.15 WARNING in ieee80211_ibss_csa_beacon -1 504 628d 1239d 0/3 auto-obsoleted due to no activity on 2025/01/17 15:26
linux-5.15 WARNING in ieee80211_ibss_csa_beacon (2) -1 15 468d 553d 0/3 auto-obsoleted due to no activity on 2025/07/10 03:17
upstream WARNING in ieee80211_ibss_csa_beacon (2) wireless -1 2892 913d 1247d 0/29 auto-obsoleted due to no activity on 2024/04/07 10:40
linux-6.1 WARNING in ieee80211_ibss_csa_beacon -1 318 354d 1240d 0/3 auto-obsoleted due to no activity on 2025/10/18 20:45
▶ ▼ Fix bisection attempts (25)
Created Duration User Patch Repo Result
2023/02/18 13:45 35m bisect fix linux-4.14.y OK (0) job log log
2023/01/19 13:07 28m bisect fix linux-4.14.y OK (0) job log log
2022/10/26 09:20 28m bisect fix linux-4.14.y OK (0) job log log
2022/09/16 00:08 31m bisect fix linux-4.14.y OK (0) job log log
2022/08/16 23:38 28m bisect fix linux-4.14.y OK (0) job log log
2022/07/17 23:04 33m bisect fix linux-4.14.y OK (0) job log log
2022/06/17 22:34 29m bisect fix linux-4.14.y OK (0) job log log
2022/05/18 20:28 27m bisect fix linux-4.14.y OK (0) job log log
2022/04/18 19:47 35m bisect fix linux-4.14.y OK (0) job log log
2022/03/19 18:57 27m bisect fix linux-4.14.y OK (0) job log log
2022/02/17 18:29 28m bisect fix linux-4.14.y OK (0) job log log
2022/01/18 17:54 34m bisect fix linux-4.14.y OK (0) job log log
2021/12/19 17:25 28m bisect fix linux-4.14.y OK (0) job log log
2021/11/19 16:53 32m bisect fix linux-4.14.y OK (0) job log log
2021/10/20 16:24 28m bisect fix linux-4.14.y OK (0) job log log
2021/09/20 15:55 27m bisect fix linux-4.14.y OK (0) job log log
2021/08/21 15:22 32m bisect fix linux-4.14.y OK (0) job log log
2021/07/22 14:31 32m bisect fix linux-4.14.y OK (0) job log log
2021/06/22 11:45 34m bisect fix linux-4.14.y OK (0) job log log
2021/05/22 21:25 29m bisect fix linux-4.14.y OK (0) job log log
2021/04/22 18:56 33m bisect fix linux-4.14.y OK (0) job log log
2021/03/23 18:22 33m bisect fix linux-4.14.y OK (0) job log log
2021/02/21 11:56 33m bisect fix linux-4.14.y OK (0) job log log
2021/02/18 06:58 18m bisect fix linux-4.14.y error job log
2021/02/06 20:06 0m bisect fix linux-4.14.y error job log

Sample crash report:
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
------------[ cut here ]------------
WARNING: CPU: 0 PID: 715 at net/mac80211/ibss.c:506 ieee80211_ibss_csa_beacon+0x523/0x670 net/mac80211/ibss.c:506
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 715 Comm: kworker/u4:3 Not tainted 4.14.204-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy3 ieee80211_csa_finalize_work
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x283 lib/dump_stack.c:58
 panic+0x1f9/0x42d kernel/panic.c:183
 __warn.cold+0x20/0x4b kernel/panic.c:547
 report_bug+0x208/0x249 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:ieee80211_ibss_csa_beacon+0x523/0x670 net/mac80211/ibss.c:506
RSP: 0018:ffff8880b4097ca0 EFLAGS: 00010297
RAX: ffff8880b4044440 RBX: ffff888094155b40 RCX: 1ffff110168089b1
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880b4044cc4
RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888094156630 R14: ffff888094bb9160 R15: ffff888094156068
 ieee80211_set_after_csa_beacon net/mac80211/cfg.c:2909 [inline]
 __ieee80211_csa_finalize+0x677/0xca0 net/mac80211/cfg.c:2965
 ieee80211_csa_finalize net/mac80211/cfg.c:2988 [inline]
 ieee80211_csa_finalize_work+0x105/0x130 net/mac80211/cfg.c:3013
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/08 18:27 linux-4.14.y 6b6446efedb2 cba33199 .config console log report syz C ci2-linux-4-14
* Struck through repros no longer work on HEAD.