WARNING in ieee80211_start_next_roc

Status: upstream: reported C repro on 2020/11/08 18:11
Reported-by: syzbot+c63745cb0e718ef69011@syzkaller.appspotmail.com
First crash: 2088d, last: 1256d
▶ ▼ Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in ieee80211_start_next_roc -1 syz, C error 73 1250d 2027d 0/1 upstream: reported C repro on 2021/01/09 02:54
upstream WARNING in ieee80211_start_next_roc prio:low wireless -1 syz, C inconclusive error 1228 14d 2058d 0/29 upstream: reported C repro on 2020/12/09 02:03
linux-5.15 WARNING in ieee80211_start_next_roc missing-backport origin:upstream -1 syz, C done 56 30d 1232d 0/3 upstream: reported C repro on 2023/03/14 10:47
linux-6.1 WARNING in ieee80211_start_next_roc origin:upstream missing-backport -1 syz, C done 105 42d 1230d 0/3 upstream: reported C repro on 2023/03/16 12:33
▶ ▼ Fix bisection attempts (25)
Created Duration User Patch Repo Result
2023/02/18 13:10 30m bisect fix linux-4.14.y OK (0) job log log
2023/01/19 12:42 21m bisect fix linux-4.14.y OK (0) job log log
2022/10/26 08:48 30m bisect fix linux-4.14.y OK (0) job log log
2022/09/15 23:39 27m bisect fix linux-4.14.y OK (0) job log log
2022/08/16 22:56 33m bisect fix linux-4.14.y OK (0) job log log
2022/07/17 22:35 21m bisect fix linux-4.14.y OK (0) job log log
2022/06/17 22:08 26m bisect fix linux-4.14.y OK (0) job log log
2022/05/18 20:00 28m bisect fix linux-4.14.y OK (0) job log log
2022/04/18 19:03 21m bisect fix linux-4.14.y OK (0) job log log
2022/03/19 18:24 21m bisect fix linux-4.14.y OK (0) job log log
2022/02/17 17:54 29m bisect fix linux-4.14.y OK (0) job log log
2022/01/18 17:29 24m bisect fix linux-4.14.y OK (0) job log log
2021/12/19 16:53 22m bisect fix linux-4.14.y OK (0) job log log
2021/11/19 16:21 24m bisect fix linux-4.14.y OK (0) job log log
2021/10/20 15:48 21m bisect fix linux-4.14.y OK (0) job log log
2021/09/20 15:26 22m bisect fix linux-4.14.y OK (0) job log log
2021/08/21 14:53 27m bisect fix linux-4.14.y OK (0) job log log
2021/07/22 14:07 23m bisect fix linux-4.14.y OK (0) job log log
2021/06/22 11:24 21m bisect fix linux-4.14.y OK (0) job log log
2021/05/22 20:08 29m bisect fix linux-4.14.y OK (0) job log log
2021/04/22 17:35 21m bisect fix linux-4.14.y OK (0) job log log
2021/03/23 17:10 22m bisect fix linux-4.14.y OK (0) job log log
2021/02/21 11:33 21m bisect fix linux-4.14.y OK (0) job log log
2021/02/18 06:40 18m bisect fix linux-4.14.y error job log
2021/02/06 18:55 0m bisect fix linux-4.14.y error job log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 22 at net/mac80211/offchannel.c:419 ieee80211_start_next_roc+0x1ca/0x220 net/mac80211/offchannel.c:419
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.204-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy3 ieee80211_scan_work
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x283 lib/dump_stack.c:58
 panic+0x1f9/0x42d kernel/panic.c:183
 __warn.cold+0x20/0x4b kernel/panic.c:547
 report_bug+0x208/0x249 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:ieee80211_start_next_roc+0x1ca/0x220 net/mac80211/offchannel.c:419
RSP: 0018:ffff8880b55ffbd0 EFLAGS: 00010297
RAX: ffff8880b55ee5c0 RBX: ffff888093edfc80 RCX: 1ffffffff1279f18
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff888093edfca0
RBP: ffff8880a37a8fa0 R08: ffffffff8b9c4298 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: ffff8880a37a9e48 R14: ffff8880a8cd8840 R15: ffff8880a37a9fe8
 __ieee80211_scan_completed+0x7bf/0x14d0 net/mac80211/scan.c:415
 ieee80211_scan_work+0x300/0x15a0 net/mac80211/scan.c:962
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/08 18:10 linux-4.14.y 6b6446efedb2 cba33199 .config console log report syz C ci2-linux-4-14
* Struck through repros no longer work on HEAD.