syzbot


WARNING in ieee80211_mgd_probe_ap_send

Status: upstream: reported C repro on 2024/03/29 04:03
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+c819c1d6f08fd167aa7e@syzkaller.appspotmail.com
First crash: 712d, last: 18d
Fix commit to backport (bisect log) :
tree: upstream
commit 777b26002b73127e81643d9286fadf3d41e0e477
Author: Johannes Berg <johannes.berg@intel.com>
Date: Mon Aug 28 11:59:46 2023 +0000

  wifi: mac80211: move TDLS work to wiphy work

[report pending]
  
Fix bisection: the issue occurs on the latest tested release (bisect log)
Crash: WARNING in cfg80211_rx_mlme_mgmt (log)
Repro: C syz .config
  
Bug presence (2)
Date Name Commit Repro Result
2024/05/04 linux-5.15.y (ToT) 284087d4f7d5 C [report] WARNING in ieee80211_mgd_probe_ap_send
2024/05/04 upstream (ToT) 7367539ad4b0 C Didn't crash
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in ieee80211_mgd_probe_ap_send (3) wireless -1 C 22 4d20h 109d 0/29 upstream: reported C repro on 2025/11/22 00:06
upstream WARNING in ieee80211_mgd_probe_ap_send (2) wireless -1 26 225d 494d 0/29 auto-obsoleted due to no activity on 2025/11/06 05:42
upstream WARNING in ieee80211_mgd_probe_ap_send wireless -1 1 1452d 1448d 0/29 auto-closed as invalid on 2022/07/18 10:06
linux-6.6 WARNING in ieee80211_mgd_probe_ap_send origin:lts-only -1 C inconclusive 6 16d 261d 0/2 upstream: reported C repro on 2025/06/23 06:48
Last patch testing requests (18)
Created Duration User Patch Repo Result
2026/03/07 15:09 22m retest repro linux-5.15.y OK log
2026/02/01 09:44 17m hannelotta@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 9eec9a14ee10820a0c00dd3e02ac1e0ab27ad142 OK log
2026/02/01 09:13 15m hannelotta@gmail.com git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 9eec9a14ee10820a0c00dd3e02ac1e0ab27ad142 report log
2026/01/31 21:54 17m hannelotta@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git cd9b81672742d239a3f05fe545bf4212b56d0ac9 OK log
2026/01/31 21:03 48m hannelotta@gmail.com git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git cd9b81672742d239a3f05fe545bf4212b56d0ac9 report log
2026/01/31 20:34 22m hannelotta@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 2cf6f68313dcc3c404f49fdee41bbf3c694ad75d OK log
2026/01/31 19:39 21m hannelotta@gmail.com git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 2cf6f68313dcc3c404f49fdee41bbf3c694ad75d report log
2025/12/17 06:25 15m retest repro linux-5.15.y report log
2025/10/08 02:04 15m retest repro linux-5.15.y report log
2025/09/17 19:34 33m hannelotta@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 3db754f56897798e2228b3dd13a117de723c2be6 OK log
2025/09/12 16:27 21m hannelotta@gmail.com git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 3db754f56897798e2228b3dd13a117de723c2be6 report log
2025/09/12 05:23 35m hannelotta@gmail.com patch git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 60a9e718726fa7019ae00916e4b1c52498da5b60 OK log
2025/09/11 16:48 1h33m hannelotta@gmail.com git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 60a9e718726fa7019ae00916e4b1c52498da5b60 report log
2025/09/07 14:02 15m hannelotta@gmail.com git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git 7a6c2d093c4599727874a7e5e9b27fb313d2bd9c report log
2025/07/29 17:20 14m retest repro linux-5.15.y report log
2025/05/19 23:53 9m retest repro linux-5.15.y report log
2025/02/28 21:08 18m retest repro linux-5.15.y report log
2024/12/20 09:06 9m retest repro linux-5.15.y report log
Fix bisection attempts (7)
Created Duration User Patch Repo Result
2025/04/14 00:50 8h02m fix candidate upstream OK (1) job log
2024/10/15 03:20 0m fix candidate upstream error job log
2024/10/11 00:28 2h16m bisect fix linux-5.15.y OK (0) job log log
2024/08/26 16:39 1h55m bisect fix linux-5.15.y OK (0) job log log
2024/07/15 03:13 1h12m bisect fix linux-5.15.y OK (0) job log log
2024/06/03 16:22 1h00m bisect fix linux-5.15.y OK (0) job log log
2024/04/29 19:50 1h57m bisect fix linux-5.15.y OK (0) job log log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 154 at net/mac80211/mlme.c:2557 ieee80211_mgd_probe_ap_send+0x5aa/0x670 net/mac80211/mlme.c:2557
Modules linked in:
CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Workqueue: phy22 ieee80211_beacon_connection_loss_work
RIP: 0010:ieee80211_mgd_probe_ap_send+0x5aa/0x670 net/mac80211/mlme.c:2557
Code: ec 94 1f f8 48 8b 3c 24 48 81 c7 88 0d 00 00 4c 89 f6 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1b be 0e f8 e8 c6 94 1f f8 <0f> 0b e9 74 fb ff ff e8 ba 94 1f f8 0f 0b e9 42 ff ff ff e8 ae 94
RSP: 0018:ffffc90002027ba0 EFLAGS: 00010293
RAX: ffffffff89598d7a RBX: ffff888040674c80 RCX: ffff88801d615940
RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f800
RBP: 1ffff110080cea51 R08: ffffffff8d89dc2f R09: 1ffffffff1b13b85
R10: dffffc0000000000 R11: fffffbfff1b13b86 R12: ffff88805fe360b8
R13: ffff888040675288 R14: 0000000000000002 R15: ffff888040675c78
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6348ed8dac CR3: 000000002b6c3000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ieee80211_mgd_probe_ap+0x2c1/0x330 net/mac80211/mlme.c:2640
 process_one_work+0x85f/0x1010 kernel/workqueue.c:2310
 worker_thread+0xaa6/0x1290 kernel/workqueue.c:2457
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/21 06:51 linux-5.15.y 3330a8d33e08 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ieee80211_mgd_probe_ap_send
2024/03/29 12:56 linux-5.15.y 9465fef4ae35 c52bcb23 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ieee80211_mgd_probe_ap_send
2024/03/29 04:03 linux-5.15.y 9465fef4ae35 e91187ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ieee80211_mgd_probe_ap_send
2024/03/29 04:02 linux-5.15.y 9465fef4ae35 e91187ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in ieee80211_mgd_probe_ap_send
2025/04/14 11:49 linux-5.15.y f7347f400572 0bd6db41 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in ieee80211_mgd_probe_ap_send
* Struck through repros no longer work on HEAD.