syzbot


WARNING in ieee80211_rx_list (2)

Status: upstream: reported on 2024/06/26 07:06
Subsystems: wireless
[Documentation on labels]
Reported-by: syzbot+1d516edf1e74469ba5d3@syzkaller.appspotmail.com
Fix commit: wifi: mac80211: disable softirqs for queued frame handling
Patched on: [ci-upstream-bpf-kasan-gce ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-net-next-test-gce], missing on: [ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 7d00h, last: 17h42m
Discussions (2)
Title Replies (including bot) Last reply
[PATCH] wifi: mac80211: disable softirqs for queued frame handling 1 (1) 2024/06/26 07:15
[syzbot] [wireless?] WARNING in ieee80211_rx_list (2) 0 (1) 2024/06/26 07:06
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in ieee80211_rx_list wireless C inconclusive error 3489 21d 1373d 27/27 fixed on 2024/06/18 10:18
linux-5.15 WARNING in ieee80211_rx_list origin:lts-only syz error 2 18d 83d 0/3 upstream: reported syz repro on 2024/04/06 19:04

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 8824 at net/mac80211/rx.c:5345 ieee80211_rx_list+0x14c7/0x2e90 net/mac80211/rx.c:5345
Modules linked in:
CPU: 1 PID: 8824 Comm: syz.2.1273 Not tainted 6.10.0-rc5-syzkaller-00200-g5bbd9b249880 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:ieee80211_rx_list+0x14c7/0x2e90 net/mac80211/rx.c:5345
Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e ca 19 00 00 8b 53 70 4c 89 ee 48 89 ef e8 a4 da fd ff e9 fa ef ff ff e8 ca 26 30 f7 90 <0f> 0b 90 e9 15 ec ff ff e8 bc 26 30 f7 90 0f 0b 90 e9 f3 ef ff ff
RSP: 0018:ffffc90014a8eee8 EFLAGS: 00010246
RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc900104e0000
RDX: 0000000000040000 RSI: ffffffff8a5f0846 RDI: 0000000000000005
RBP: ffff88802438b140 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000003 R12: ffff88802438b140
R13: ffff88802438b218 R14: 0000000000000000 R15: 0000000000000001
FS:  00007f6035fff6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f671dc17fa4 CR3: 000000007c536000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 ieee80211_rx_napi+0xdd/0x400 net/mac80211/rx.c:5482
 ieee80211_rx include/net/mac80211.h:5093 [inline]
 ieee80211_handle_queued_frames+0xd5/0x130 net/mac80211/main.c:437
 ieee80211_stop_device+0x1e/0xe0 net/mac80211/util.c:1570
 ieee80211_do_stop+0x18bd/0x2200 net/mac80211/iface.c:706
 ieee80211_stop+0x11e/0x6b0 net/mac80211/iface.c:765
 __dev_close_many+0x1c8/0x310 net/core/dev.c:1556
 dev_close_many+0x24c/0x6a0 net/core/dev.c:1581
 dev_close net/core/dev.c:1607 [inline]
 dev_close+0x181/0x230 net/core/dev.c:1601
 nl80211_del_interface+0xec/0x190 net/wireless/nl80211.c:4387
 genl_family_rcv_msg

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/06/28 13:41 upstream 5bbd9b249880 b62c7d46 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in ieee80211_rx_list
2024/06/24 22:00 upstream 626737a5791b 215eef4a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in ieee80211_rx_list
2024/06/22 06:57 upstream 66cc544fd75c edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in ieee80211_rx_list
2024/06/23 10:09 net-next 185d72112b95 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ieee80211_rx_list
* Struck through repros no longer work on HEAD.