syzbot


WARNING in cfg80211_scan_done (2)

Status: upstream: reported syz repro on 2025/06/13 02:16
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+d7464e115e82924f1719@syzkaller.appspotmail.com
First crash: 13d, last: 13d
Bug presence (1)
Date Name Commit Repro Result
2025/06/16 upstream (ToT) e04c78d86a96 C [report] WARNING in cfg80211_scan_done
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 WARNING in cfg80211_scan_done 3 150d 152d 0/3 auto-obsoleted due to no activity on 2025/05/07 16:33
upstream WARNING in cfg80211_scan_done wireless syz 25 8d16h 317d 0/29 upstream: reported syz repro on 2024/08/13 14:03
linux-5.15 WARNING in cfg80211_scan_done 2 96d 104d 0/3 upstream: reported on 2025/03/14 06:34

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 11 at net/wireless/scan.c:1118 cfg80211_scan_done+0x2c4/0x504 net/wireless/scan.c:1117
Modules linked in:
CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.141-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : cfg80211_scan_done+0x2c4/0x504 net/wireless/scan.c:1117
lr : cfg80211_scan_done+0x2c4/0x504 net/wireless/scan.c:1117
sp : ffff80001c8378d0
x29: ffff80001c8378e0 x28: ffff0000c3488760 x27: 1fffe000185ad20d
x26: 1fffe000185ad20f x25: dfff800000000000 x24: ffff0000c34881b8
x23: ffff0000c2d69068 x22: ffff0000c348abb8 x21: 0000000000000000
x20: ffff0000c2d69078 x19: ffff0000c2d69000 x18: 0000000000000000
x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000040000000
x14: 0000000000000002 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100
x11: ff00800010fe8294 x10: 0000000000000000 x9 : ffff800010fe8294
x8 : ffff0000c09ab780 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff80001c8378d6 x4 : ffff0000c2d69086 x3 : ffff800010fe8040
x2 : 0000000000000006 x1 : ffff800011f695a0 x0 : 0000000000000001
Call trace:
 cfg80211_scan_done+0x2c4/0x504 net/wireless/scan.c:1117
 __ieee80211_scan_completed+0x470/0xa1c net/mac80211/scan.c:483
 ieee80211_scan_work+0xd8/0x17a8 net/mac80211/scan.c:1169
 cfg80211_wiphy_work+0x1d8/0x218 net/wireless/core.c:433
 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292
 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864
irq event stamp: 1756804
hardirqs last  enabled at (1756803): [<ffff80000a88d70c>] __free_object+0x1c4/0x850 lib/debugobjects.c:355
hardirqs last disabled at (1756804): [<ffff80001191c930>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (1756756): [<ffff80000c6ce1a4>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (1756756): [<ffff80000c6ce1a4>] macvlan_process_broadcast+0x1c4/0x5c4 drivers/net/macvlan.c:305
softirqs last disabled at (1756754): [<ffff80000c6ce0bc>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (1756754): [<ffff80000c6ce0bc>] macvlan_process_broadcast+0xdc/0x5c4 drivers/net/macvlan.c:303
---[ end trace 0000000000000000 ]---

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/13 14:45 linux-6.1.y 58485ff1a74f 98683f8f .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in cfg80211_scan_done
2025/06/13 02:22 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in cfg80211_scan_done
2025/06/13 02:16 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in cfg80211_scan_done
2025/06/13 02:16 linux-6.1.y 58485ff1a74f 98683f8f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in cfg80211_scan_done
* Struck through repros no longer work on HEAD.