syzbot


WARNING in kcov_remote_start

Status: upstream: reported on 2024/10/02 09:28
Reported-by: syzbot+2029dfbb2ddd5c92c28b@syzkaller.appspotmail.com
First crash: 15d, last: 15d
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in kcov_remote_start (4) usb 107983 99d 130d 26/28 fixed on 2024/07/10 08:24
upstream WARNING in kcov_remote_start (2) usb C 1153 1871d 1871d 0/28 closed as invalid on 2019/09/04 14:27
upstream WARNING in kcov_remote_start (5) wireless 4241 1d23h 95d 0/28 upstream: reported on 2024/07/14 08:47
upstream WARNING in kcov_remote_start (3) usb 265513 134d 203d 25/28 fixed on 2024/06/05 13:52
upstream WARNING in kcov_remote_start usb C 655 1871d 1871d 0/28 closed as invalid on 2019/09/03 16:37

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4883 at kernel/kcov.c:844 kcov_remote_start+0x368/0x4cc kernel/kcov.c:888
Modules linked in:
CPU: 0 PID: 4883 Comm: syz.1.173 Not tainted 5.15.167-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : kcov_remote_start+0x368/0x4cc
lr : kcov_remote_start+0xc4/0x4cc kernel/kcov.c:837
sp : ffff800020cc6980
x29: ffff800020cc6990 x28: ffff0000e69c8c10 x27: ffff0000d4ee8dc0
x26: 1fffe0001cd39182 x25: dfff800000000000 x24: dfff800000000000
x23: ffff0000d4eeb368 x22: 0000000000ff0100 x21: 0000000000000000
x20: 0000000000000000 x19: ffff0000d0598000 x18: 0000000000000200
x17: 0000000000000002 x16: ffff8000082ec9a8 x15: 0000000000000003
x14: ffff0000d0598000 x13: 0000000000ff0100 x12: 0000000000040000
x11: 0000000000029944 x10: ffff800020f8c000 x9 : 0000000000000200
x8 : 0000000000000002 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80000804605c
x2 : 0000000000000001 x1 : ffff8000114b24b4 x0 : ffff8000084c6950
Call trace:
 kcov_remote_start+0x368/0x4cc kernel/kcov.c:888
 kcov_remote_start_common include/linux/kcov.h:50 [inline]
 ieee80211_rx_list+0x490/0x21d8 net/mac80211/rx.c:4964
 ieee80211_rx_napi+0x164/0x34c net/mac80211/rx.c:5005
 ieee80211_rx include/net/mac80211.h:4571 [inline]
 ieee80211_handle_queued_frames+0xec/0x18c net/mac80211/main.c:235
 ieee80211_stop_device+0x24/0x88 net/mac80211/util.c:2150
 ieee80211_do_stop+0x1248/0x18dc net/mac80211/iface.c:621
 ieee80211_stop+0x13c/0x198 net/mac80211/iface.c:649
 __dev_close_many+0x2f4/0x3e4 net/core/dev.c:1590
 dev_close_many+0x1e0/0x468 net/core/dev.c:1615
 dev_close+0x174/0x250 net/core/dev.c:1641
 nl80211_del_interface+0xd0/0x66c net/wireless/nl80211.c:4109
 genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
 genl_rcv_msg+0xc18/0x1018 net/netlink/genetlink.c:792
 netlink_rcv_skb+0x20c/0x3b8 net/netlink/af_netlink.c:2503
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:803
 netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]
 netlink_unicast+0x664/0x938 net/netlink/af_netlink.c:1352
 netlink_sendmsg+0x844/0xb38 net/netlink/af_netlink.c:1920
 sock_sendmsg_nosec net/socket.c:704 [inline]
 __sock_sendmsg net/socket.c:716 [inline]
 ____sys_sendmsg+0x584/0x870 net/socket.c:2431
 ___sys_sendmsg+0x214/0x294 net/socket.c:2485
 __sys_sendmsg net/socket.c:2514 [inline]
 __do_sys_sendmsg net/socket.c:2523 [inline]
 __se_sys_sendmsg net/socket.c:2521 [inline]
 __arm64_sys_sendmsg+0x1ac/0x25c net/socket.c:2521
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 2961
hardirqs last  enabled at (2960): [<ffff800011b98cec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
hardirqs last  enabled at (2960): [<ffff800011b98cec>] _raw_spin_unlock_irqrestore+0xac/0x158 kernel/locking/spinlock.c:194
hardirqs last disabled at (2961): [<ffff8000084c6950>] kcov_remote_start+0xc4/0x4cc kernel/kcov.c:837
softirqs last  enabled at (2896): [<ffff80001146ec38>] spin_unlock_bh include/linux/spinlock.h:408 [inline]
softirqs last  enabled at (2896): [<ffff80001146ec38>] netif_addr_unlock_bh include/linux/netdevice.h:4617 [inline]
softirqs last  enabled at (2896): [<ffff80001146ec38>] ieee80211_do_stop+0x4c4/0x18dc net/mac80211/iface.c:444
softirqs last disabled at (2958): [<ffff8000115069ac>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 125bbba345ec7677 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/02 09:28 linux-5.15.y 3a5928702e71 ea2b66a6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in kcov_remote_start
* Struck through repros no longer work on HEAD.