WARNING in ieee80211_free_ack_frame

Status: auto-obsoleted due to no activity on 2025/10/27 06:34
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+76650bc15304cbb8f2ef@syzkaller.appspotmail.com
First crash: 1222d, last: 376d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2023/05/10 upstream (ToT) ad2fd53a7870 C [report] WARNING in ieee80211_free_ack_frame
▶ ▼ Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 WARNING in ieee80211_free_ack_frame -1 2 278d 361d 0/3 auto-obsoleted due to no activity on 2026/02/02 21:22
linux-4.19 WARNING in ieee80211_free_ack_frame -1 syz, C error 97 1257d 2122d 0/1 upstream: reported C repro on 2020/10/07 07:47
upstream WARNING in ieee80211_free_ack_frame (2) wireless -1 syz, C error done 205 23d 1718d 0/29 upstream: reported C repro on 2021/11/15 07:38
upstream WARNING in ieee80211_free_ack_frame wireless -1 syz done 117 1728d 2122d 20/29 fixed on 2021/11/10 00:50
▶ ▼ Last patch testing requests (5)
Created Duration User Patch Repo Result
2025/09/28 09:59 18m retest repro linux-5.15.y OK log
2025/07/19 06:22 11m retest repro linux-5.15.y report log
2025/05/07 19:59 1h18m retest repro linux-5.15.y report log
2025/02/26 04:09 14m retest repro linux-5.15.y report log
2024/12/18 03:56 11m retest repro linux-5.15.y report log
▶ ▼ Fix bisection attempts (3)
Created Duration User Patch Repo Result
2023/06/26 18:46 0m bisect fix linux-5.15.y error job log
2023/05/25 13:29 45m bisect fix linux-5.15.y OK (0) job log log
2023/04/25 11:49 45m bisect fix linux-5.15.y OK (0) job log log

Sample crash report:
WARNING: CPU: 0 PID: 4106 at net/mac80211/main.c:1418 ieee80211_free_ack_frame+0x64/0x6c net/mac80211/main.c:1418
Modules linked in:
CPU: 0 PID: 4106 Comm: kworker/u4:2 Not tainted 5.15.104-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: netns cleanup_net
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : ieee80211_free_ack_frame+0x64/0x6c net/mac80211/main.c:1418
lr : ieee80211_free_ack_frame+0x64/0x6c net/mac80211/main.c:1418
sp : ffff80001cbd7720
x29: ffff80001cbd7720 x28: dfff800000000000 x27: 0000000000000000

x26: 1ffff0000397af10
 x25: 0000000000000001
 x24: ffff0000c04671b0

x23: 1ffff0000397aef1
 x22: ffff80001cbd7780
 x21: 1ffff0000397aef0

x20: ffff800016cbd000
 x19: ffff0000cabb5140
 x18: ffff80001cbd6d60

x17: 1fffe000368fff8e
 x16: ffff8000082e8e80
 x15: ffff80001495eda0

x14: 1ffff0000291806a
 x13: ffffffffffffffff
 x12: 0000000000000000

x11: ff8080000832b060
 x10: 0000000000000000
 x9 : 98ba53ea72224500

x8 : 98ba53ea72224500
 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff8000081a7184
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000018
Call trace:
 ieee80211_free_ack_frame+0x64/0x6c net/mac80211/main.c:1418
 idr_for_each+0x19c/0x2b4 lib/idr.c:208
 ieee80211_free_hw+0xd4/0x3a8 net/mac80211/main.c:1436
 mac80211_hwsim_del_radio+0x26c/0x3d8 drivers/net/wireless/mac80211_hwsim.c:3476
 hwsim_exit_net+0x518/0x5e0 drivers/net/wireless/mac80211_hwsim.c:4242
 ops_exit_list net/core/net_namespace.c:169 [inline]
 cleanup_net+0x568/0x9bc net/core/net_namespace.c:596
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2306
 worker_thread+0x910/0x1034 kernel/workqueue.c:2453
 kthread+0x37c/0x45c kernel/kthread.c:319
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 53334
hardirqs last  enabled at (53333): [<ffff800008196cf8>] mod_lruvec_page_state include/linux/vmstat.h:497 [inline]
hardirqs last  enabled at (53333): [<ffff800008196cf8>] account_kernel_stack+0x130/0x274 kernel/fork.c:387
hardirqs last disabled at (53334): [<ffff800011938e98>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last  enabled at (53312): [<ffff800008020ccc>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (53312): [<ffff800008020ccc>] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587
softirqs last disabled at (53307): [<ffff8000081b4ee0>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (53307): [<ffff8000081b4ee0>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (53307): [<ffff8000081b4ee0>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 07f4111d9017daeb ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/03/26 11:43 linux-5.15.y 115472395b0a fbf0499a .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_free_ack_frame
* Struck through repros no longer work on HEAD.