[v5.15] WARNING in __cfg80211_ibss_joined

9 views

Skip to first unread message

syzbot

unread,

Mar 8, 2023, 2:50:44 PM3/8/23

to syzkaller...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: d9b4a0c83a2d Linux 5.15.98
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=171b6584c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=2f8d9515b973b23b
dashboard link: https://syzkaller.appspot.com/bug?extid=bc4633dace1e9260de4a
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/037cabbd3313/disk-d9b4a0c8.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/9967e551eb34/vmlinux-d9b4a0c8.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a050c7a4fd99/bzImage-d9b4a0c8.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+bc4633...@syzkaller.appspotmail.com

WARNING: CPU: 0 PID: 5460 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x42b/0x4b0
Modules linked in:
CPU: 0 PID: 5460 Comm: kworker/u4:18 Not tainted 5.15.98-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: cfg80211 cfg80211_event_work
RIP: 0010:__cfg80211_ibss_joined+0x42b/0x4b0 net/wireless/ibss.c:37
Code: 3b 84 24 80 00 00 00 0f 85 8e 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7e 4e e8 f7 0f 0b eb bf e8 75 4e e8 f7 <0f> 0b eb b1 e8 6c 4e e8 f7 0f 0b e9 70 fd ff ff e8 60 4e e8 f7 0f
RSP: 0018:ffffc90003f0fac0 EFLAGS: 00010293
RAX: ffffffff8998061b RBX: 0000000000000006 RCX: ffff888022cf8000
RDX: 0000000000000000 RSI: ffffffff8a8aff60 RDI: ffffffff8ad8b900
RBP: ffffc90003f0fba0 R08: dffffc0000000000 R09: fffffbfff1f58822
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807be4cc90
R13: dffffc0000000000 R14: ffff888073e93510 R15: 1ffff920007e1f60
FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e423000 CR3: 0000000062ef6000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
cfg80211_process_wdev_events+0x39f/0x4c0 net/wireless/util.c:980
cfg80211_process_rdev_events+0xa8/0x100 net/wireless/util.c:1006
cfg80211_event_work+0x2b/0x40 net/wireless/core.c:328
process_one_work+0x8e6/0x1230 kernel/workqueue.c:2306
worker_thread+0xaca/0x1280 kernel/workqueue.c:2453
kthread+0x3f6/0x4f0 kernel/kthread.c:319
ret_from_fork+0x1f/0x30 <unknown>:298
</TASK>

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,

Mar 8, 2023, 6:41:46 PM3/8/23

to syzkaller...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: d9b4a0c83a2d Linux 5.15.98
git tree: linux-5.15.y

console output: https://syzkaller.appspot.com/x/log.txt?x=17c6b7e4c80000

kernel config: https://syzkaller.appspot.com/x/.config?x=2f8d9515b973b23b
dashboard link: https://syzkaller.appspot.com/bug?extid=bc4633dace1e9260de4a
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1138236cc80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/037cabbd3313/disk-d9b4a0c8.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/9967e551eb34/vmlinux-d9b4a0c8.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a050c7a4fd99/bzImage-d9b4a0c8.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+bc4633...@syzkaller.appspotmail.com

wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
------------[ cut here ]------------
WARNING: CPU: 0 PID: 430 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x42b/0x4b0
Modules linked in:
CPU: 1 PID: 430 Comm: kworker/u4:3 Not tainted 5.15.98-syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: cfg80211 cfg80211_event_work
RIP: 0010:__cfg80211_ibss_joined+0x42b/0x4b0 net/wireless/ibss.c:37
Code: 3b 84 24 80 00 00 00 0f 85 8e 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7e 4e e8 f7 0f 0b eb bf e8 75 4e e8 f7 <0f> 0b eb b1 e8 6c 4e e8 f7 0f 0b e9 70 fd ff ff e8 60 4e e8 f7 0f

RSP: 0018:ffffc9000309fac0 EFLAGS: 00010293

RAX: ffffffff8998061b RBX: 0000000000000006 RCX: ffff888019a4d700

RDX: 0000000000000000 RSI: ffffffff8a8aff60 RDI: ffffffff8ad8b900

RBP: ffffc9000309fba0 R08: dffffc0000000000 R09: fffffbfff1f58822
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806b888c90
R13: dffffc0000000000 R14: ffff88807c133510 R15: 1ffff92000613f60

FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033

CR2: 00007fe5c085dff8 CR3: 000000002360e000 CR4: 00000000003506e0

syzbot

unread,

Mar 18, 2023, 7:11:43 AM3/18/23

to syzkaller...@googlegroups.com

syzbot has found a reproducer for the following issue on:

HEAD commit: 8020ae3c051d Linux 5.15.103
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=125a2c6ec80000
kernel config: https://syzkaller.appspot.com/x/.config?x=d4215fb4040f8f8d

dashboard link: https://syzkaller.appspot.com/bug?extid=bc4633dace1e9260de4a
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2

syz repro: https://syzkaller.appspot.com/x/repro.syz?x=120c4816c80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10787c6ec80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/857e17de0f0a/disk-8020ae3c.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/9efc49fcd441/vmlinux-8020ae3c.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f14c38b6bfa7/bzImage-8020ae3c.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+bc4633...@syzkaller.appspotmail.com

WARNING: CPU: 0 PID: 1010 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x42b/0x4b0
Modules linked in:
CPU: 0 PID: 1010 Comm: kworker/u4:3 Not tainted 5.15.103-syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: cfg80211 cfg80211_event_work

RIP: 0010:__cfg80211_ibss_joined+0x42b/0x4b0 net/wireless/ibss.c:37

Code: 3b 84 24 80 00 00 00 0f 85 8e 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 de 5c e1 f7 0f 0b eb bf e8 d5 5c e1 f7 <0f> 0b eb b1 e8 cc 5c e1 f7 0f 0b e9 70 fd ff ff e8 c0 5c e1 f7 0f
RSP: 0018:ffffc90004cc7ac0 EFLAGS: 00010293
RAX: ffffffff899f1bfb RBX: 0000000000000006 RCX: ffff88801be69d00
RDX: 0000000000000000 RSI: ffffffff8a8afc80 RDI: ffffffff8ad8b940
RBP: ffffc90004cc7ba0 R08: dffffc0000000000 R09: fffffbfff1f76622
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807df8cc90
R13: dffffc0000000000 R14: ffff888071ceb510 R15: 1ffff92000998f60
FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000

CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033

CR2: 00007fff918bb408 CR3: 000000001db72000 CR4: 00000000003506f0

DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
cfg80211_process_wdev_events+0x39f/0x4c0 net/wireless/util.c:980
cfg80211_process_rdev_events+0xa8/0x100 net/wireless/util.c:1006
cfg80211_event_work+0x2b/0x40 net/wireless/core.c:328

process_one_work+0x90d/0x1270 kernel/workqueue.c:2306

worker_thread+0xaca/0x1280 kernel/workqueue.c:2453
kthread+0x3f6/0x4f0 kernel/kthread.c:319

ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
</TASK>

syzbot

unread,

Mar 18, 2023, 9:26:50 AM3/18/23

to syzkaller...@googlegroups.com

Hello,

syzbot found the following issue on:

HEAD commit: 7eaef76fbc46 Linux 6.1.20
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13c5ef21c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=29ad3fe3c7b61175
dashboard link: https://syzkaller.appspot.com/bug?extid=06ac196aa9b02158d28c

compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2

userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1449c086c80000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=125b5e4ac80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/34f95428f5fb/disk-7eaef76f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1bdd9b2c390d/vmlinux-7eaef76f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/419140981cfa/Image-7eaef76f.gz.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:

Reported-by: syzbot+06ac19...@syzkaller.appspotmail.com

------------[ cut here ]------------
WARNING: CPU: 0 PID: 153 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3f4/0x508 net/wireless/ibss.c:37
Modules linked in:
CPU: 0 PID: 153 Comm: kworker/u4:4 Not tainted 6.1.20-syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: cfg80211 cfg80211_event_work

pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __cfg80211_ibss_joined+0x3f4/0x508 net/wireless/ibss.c:37
lr : __cfg80211_ibss_joined+0x3f4/0x508 net/wireless/ibss.c:37
sp : ffff80001db579a0
x29: ffff80001db57a30 x28: ffff0000ce4fc000 x27: ffff0000ce4fcc90
x26: 1ffff00003b6af38 x25: dfff800000000000 x24: ffff0000ce4fc000
x23: 0000000000000006 x22: ffff0000d9da3658 x21: ffff0000ce4fcc90
x20: ffff0000c9f95018 x19: ffff0000ce4fcdf0 x18: 0000000000000140
x17: ffff0000cb3e7288 x16: ffff800008503bb4 x15: 0000000000000000
x14: 1ffff00002ae60b0 x13: dfff800000000000 x12: 0000000000000003
x11: ff808000119f6534 x10: 0000000000000000 x9 : ffff8000119f6534
x8 : ffff0000c4eb8000 x7 : ffff800011937200 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000006 x1 : ffff8000123ad060 x0 : 0000000000000000
Call trace:
__cfg80211_ibss_joined+0x3f4/0x508 net/wireless/ibss.c:37
cfg80211_process_wdev_events+0x328/0x450 net/wireless/util.c:986
cfg80211_process_rdev_events+0xc8/0x12c net/wireless/util.c:1012
cfg80211_event_work+0x34/0x4c net/wireless/core.c:328
process_one_work+0x868/0x16f4 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x24c/0x2d4 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 71142
hardirqs last enabled at (71141): [<ffff8000081cafb0>] __local_bh_enable_ip+0x258/0x4d0 kernel/softirq.c:401
hardirqs last disabled at (71142): [<ffff8000122560d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (71140): [<ffff8000119377c0>] spin_unlock_bh include/linux/spinlock.h:395 [inline]
softirqs last enabled at (71140): [<ffff8000119377c0>] cfg80211_get_bss+0x7ec/0xce0 net/wireless/scan.c:1471
softirqs last disabled at (71138): [<ffff800011937200>] spin_lock_bh include/linux/spinlock.h:355 [inline]
softirqs last disabled at (71138): [<ffff800011937200>] cfg80211_get_bss+0x22c/0xce0 net/wireless/scan.c:1445
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 153 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3f4/0x508 net/wireless/ibss.c:37
Modules linked in:
CPU: 0 PID: 153 Comm: kworker/u4:4 Tainted: G W 6.1.20-syzkaller #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: cfg80211 cfg80211_event_work

pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __cfg80211_ibss_joined+0x3f4/0x508 net/wireless/ibss.c:37
lr : __cfg80211_ibss_joined+0x3f4/0x508 net/wireless/ibss.c:37
sp : ffff80001db579a0
x29: ffff80001db57a30 x28: ffff0000ce4fc000 x27: ffff0000ce4fcc90
x26: 1ffff00003b6af38 x25: dfff800000000000 x24: ffff0000ce4fc000
x23: 0000000000000006 x22: ffff0000d9da3658 x21: ffff0000ce4fcc90
x20: ffff0000ca8ae018 x19: ffff0000ce4fcdf0 x18: 0000000000000140
x17: ffff0000cb3e7288 x16: ffff800008503bb4 x15: 0000000000000000
x14: 1ffff00002ae60b0 x13: dfff800000000000 x12: 0000000000000003
x11: ff808000119f6534
x10: 0000000000000000 x9 : ffff8000119f6534
x8 : ffff0000c4eb8000 x7 : ffff800011937200 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000006 x1 : ffff8000123ad060 x0 : 0000000000000000
Call trace:
__cfg80211_ibss_joined+0x3f4/0x508 net/wireless/ibss.c:37
cfg80211_process_wdev_events+0x328/0x450 net/wireless/util.c:986
cfg80211_process_rdev_events+0xc8/0x12c net/wireless/util.c:1012
cfg80211_event_work+0x34/0x4c net/wireless/core.c:328
process_one_work+0x868/0x16f4 kernel/workqueue.c:2289
worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
kthread+0x24c/0x2d4 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 71168
hardirqs last enabled at (71167): [<ffff8000081cafb0>] __local_bh_enable_ip+0x258/0x4d0 kernel/softirq.c:401
hardirqs last disabled at (71168): [<ffff8000122560d4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (71166): [<ffff8000119377c0>] spin_unlock_bh include/linux/spinlock.h:395 [inline]
softirqs last enabled at (71166): [<ffff8000119377c0>] cfg80211_get_bss+0x7ec/0xce0 net/wireless/scan.c:1471
softirqs last disabled at (71164): [<ffff800011937200>] spin_lock_bh include/linux/spinlock.h:355 [inline]
softirqs last disabled at (71164): [<ffff800011937200>] cfg80211_get_bss+0x22c/0xce0 net/wireless/scan.c:1445
---[ end trace 0000000000000000 ]---
wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50