syzbot


WARNING in ieee80211_tdls_build_mgmt_packet_data

Status: upstream: reported C repro on 2025/01/19 21:41
Subsystems: wireless
[Documentation on labels]
Reported-by: syzbot+e55106f8389651870be0@syzkaller.appspotmail.com
First crash: 467d, last: 3d10h
Cause bisection: failed (error log, bisect log)
  
Fix bisection: failed (error log, bisect log)
  
Discussions (2)
Title Replies (including bot) Last reply
[PATCH] mac80211: tdls: don't WARN_ON_ONCE on missing STA info 2 (2) 2025/10/26 10:34
[syzbot] [wireless?] WARNING in ieee80211_tdls_build_mgmt_packet_data 0 (2) 2025/02/06 06:05
Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/04/25 03:43 31m retest repro upstream report log
2026/01/24 14:48 20m retest repro upstream OK log
2026/01/10 14:02 25m retest repro net-next report log
2025/11/08 22:40 19m retest repro upstream report log
2025/10/28 09:50 19m retest repro upstream OK log
2025/09/18 08:04 20m retest repro upstream OK log
2025/08/30 22:17 21m retest repro upstream report log
2025/07/10 07:24 20m retest repro upstream report log
2025/06/21 21:55 19m retest repro upstream report log
2025/05/01 06:34 19m retest repro upstream report log

Sample crash report:
mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
------------[ cut here ]------------
!sta || !ap_sta
WARNING: net/mac80211/tdls.c:611 at ieee80211_tdls_add_setup_cfm_ies net/mac80211/tdls.c:611 [inline], CPU#0: syz.0.596/6699
WARNING: net/mac80211/tdls.c:611 at ieee80211_tdls_add_ies net/mac80211/tdls.c:762 [inline], CPU#0: syz.0.596/6699
WARNING: net/mac80211/tdls.c:611 at ieee80211_tdls_build_mgmt_packet_data+0x2ea1/0x4050 net/mac80211/tdls.c:984, CPU#0: syz.0.596/6699
Modules linked in:
CPU: 0 UID: 0 PID: 6699 Comm: syz.0.596 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:ieee80211_tdls_add_setup_cfm_ies net/mac80211/tdls.c:611 [inline]
RIP: 0010:ieee80211_tdls_add_ies net/mac80211/tdls.c:762 [inline]
RIP: 0010:ieee80211_tdls_build_mgmt_packet_data+0x2ea1/0x4050 net/mac80211/tdls.c:984
Code: fc ff df e9 a1 fe ff ff e8 4c 0a 88 f6 90 0f 0b 90 e9 78 fe ff ff e8 3e 0a 88 f6 90 0f 0b 90 e9 85 fe ff ff e8 30 0a 88 f6 90 <0f> 0b 90 e9 77 fe ff ff e8 22 0a 88 f6 48 c7 c7 30 99 eb 8f 4c 89
RSP: 0018:ffffc900032a7080 EFLAGS: 00010293
RAX: ffffffff8b3da4c0 RBX: ffff888031090e00 RCX: ffff88802c341e80
RDX: 0000000000000000 RSI: ffffffff8e16b1b3 RDI: ffff88802c341e80
RBP: ffffc900032a7200 R08: 0000000000000000 R09: 000000000000000c
R10: 000000000000000c R11: 0000000000000000 R12: ffff888031092610
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888031088ec0
FS:  0000555594b4c500(0000) GS:ffff888125457000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000021c0 CR3: 000000007eb3e000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ieee80211_tdls_prep_mgmt_packet+0x3a4/0x820 net/mac80211/tdls.c:1058
 ieee80211_tdls_mgmt+0x32e/0x840 net/mac80211/tdls.c:1299
 rdev_tdls_mgmt net/wireless/rdev-ops.h:932 [inline]
 nl80211_tdls_mgmt+0x4da/0x7a0 net/wireless/nl80211.c:13723
 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114
 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline]
 genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209
 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344

Crashes (25):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/30 21:30 upstream 7aaa8047eafd 458630d8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/12/27 07:52 net-next 7b8e9264f55a d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_tdls_build_mgmt_packet_data
2026/04/10 12:44 upstream 9a9c8ce300cd 38c8e246 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2026/03/18 19:02 upstream a989fde763f4 0199f9a1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2026/03/08 15:18 upstream c23719abc330 5cb44a80 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2026/03/03 22:15 upstream af4e9ef3d784 4180d919 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2026/02/22 13:32 upstream 32a92f8c8932 6e7b5511 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/10/14 09:42 upstream 3a8660878839 b6605ba8 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/08/04 02:39 upstream 352af6a011d5 7368264b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/07/31 18:07 upstream 260f6f4fda93 3526e777 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/06/07 21:39 upstream bdc7f8c5adad 4826c28e .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/06/07 19:41 upstream bdc7f8c5adad 4826c28e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/04/16 07:47 upstream 1a1d569a75f3 a95239b1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/03/25 23:08 upstream 2df0c02dab82 89d30d73 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/03/25 10:07 upstream 2f2d52945852 875573af .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/03/09 17:13 upstream 1110ce6a1e34 163f510d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/03/07 06:32 upstream f315296c92fd 831e3629 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/03/01 21:31 upstream 03d38806a902 c3901742 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/02/25 11:05 upstream d082ecbc71e9 d34966d1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/02/20 11:05 upstream 87a132e73910 50668798 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/02/06 06:05 upstream 92514ef226f5 577d049b .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/02/06 05:07 upstream 92514ef226f5 577d049b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/01/23 16:23 upstream 21266b8df522 f6a35ef3 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/01/20 13:41 upstream ffd294d346d1 f2cb035c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
2025/01/15 21:31 upstream 619f0b6fad52 968edaf4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in ieee80211_tdls_build_mgmt_packet_data
* Struck through repros no longer work on HEAD.