syzbot


WARNING in __cfg80211_bss_update (2)

Status: upstream: reported C repro on 2024/07/09 00:36
Subsystems: wireless
[Documentation on labels]
Reported-by: syzbot+1a797e1c81be78a2ace7@syzkaller.appspotmail.com
First crash: 13d, last: 1d21h
Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: WARNING in cfg80211_bss_update (log)
Repro: C syz .config
  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [wireless?] WARNING in __cfg80211_bss_update (2) 0 (2) 2024/07/17 08:55
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in __cfg80211_bss_update wireless 1 238d 234d 0/27 auto-obsoleted due to no activity on 2024/03/02 19:52

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1743 cfg80211_combine_bsses net/wireless/scan.c:1743 [inline]
WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1743 __cfg80211_bss_update+0x1b4a/0x2170 net/wireless/scan.c:1983
Modules linked in:
CPU: 1 PID: 24 Comm: ksoftirqd/1 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:cfg80211_combine_bsses net/wireless/scan.c:1743 [inline]
RIP: 0010:__cfg80211_bss_update+0x1b4a/0x2170 net/wireless/scan.c:1983
Code: e1 07 fe c1 38 c1 0f 8c 44 fb ff ff 48 8b 7c 24 70 e8 ba 04 24 f7 e9 35 fb ff ff e8 80 e6 bd f6 90 0f 0b 90 e9 bb fb ff ff 90 <0f> 0b 90 48 89 ef e8 7b 9a de f9 84 c0 0f 84 9f 00 00 00 e8 5e e6
RSP: 0018:ffffc900001e6db8 EFLAGS: 00010287
RAX: ffff888024282410 RBX: ffff888024282810 RCX: dffffc0000000000
RDX: ffff8880176f8000 RSI: 0000000000000000 RDI: 0000000000000006
RBP: ffff88802a031810 R08: ffffffff8ad83d6b R09: 0245006400000000
R10: 0000505050505050 R11: 0003000000000000 R12: ffff88802a031800
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888024282800
FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000066ab50 CR3: 000000000e132000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 cfg80211_inform_single_bss_data+0xd51/0x2030 net/wireless/scan.c:2331
 cfg80211_inform_bss_data+0x3dd/0x5a70 net/wireless/scan.c:3159
 cfg80211_inform_bss_frame_data+0x3bc/0x720 net/wireless/scan.c:3249
 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226
 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5223 [inline]
 ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5460
 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5483
 ieee80211_rx include/net/mac80211.h:5132 [inline]
 ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439
 tasklet_action_common+0x321/0x4d0 kernel/softirq.c:785
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 run_ksoftirqd+0xca/0x130 kernel/softirq.c:928
 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/17 08:54 net-next 58f9416d413a 215bec2d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-upstream-net-next-test-gce WARNING in __cfg80211_bss_update
2024/07/14 21:00 upstream 4d145e3f830b eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in __cfg80211_bss_update
2024/07/06 01:54 upstream d270dd21bee0 2a40360c .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __cfg80211_bss_update
2024/07/17 07:37 net-next 58f9416d413a 215bec2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-net-next-test-gce WARNING in __cfg80211_bss_update
* Struck through repros no longer work on HEAD.