syzbot


WARNING in kcov_remote_start

Status: upstream: reported on 2024/10/02 09:28
Reported-by: syzbot+2029dfbb2ddd5c92c28b@syzkaller.appspotmail.com
First crash: 71d, last: 36d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in kcov_remote_start (4) usb 107983 155d 185d 26/28 fixed on 2024/07/10 08:24
upstream WARNING in kcov_remote_start (2) usb C 1153 1926d 1926d 0/28 closed as invalid on 2019/09/04 14:27
upstream WARNING in kcov_remote_start (5) wireless 4243 51d 151d 28/28 fixed on 2024/10/22 14:56
upstream WARNING in kcov_remote_start (3) usb 265513 189d 259d 25/28 fixed on 2024/06/05 13:52
upstream WARNING in kcov_remote_start usb C 655 1926d 1926d 0/28 closed as invalid on 2019/09/03 16:37
upstream WARNING in kcov_remote_start (6) wireless 17 1d13h 37d 0/28 upstream: reported on 2024/11/04 21:25

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5314 at kernel/kcov.c:844 kcov_remote_start+0x368/0x4cc kernel/kcov.c:888
Modules linked in:
CPU: 0 PID: 5314 Comm: syz.2.293 Not tainted 5.15.170-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : kcov_remote_start+0x368/0x4cc
lr : kcov_remote_start+0xc4/0x4cc kernel/kcov.c:837
sp : ffff800020356900
x29: ffff800020356910 x28: ffff0000e6431c10 x27: ffff0000db900dc0
x26: 1fffe0001cc86382 x25: dfff800000000000 x24: dfff800000000000
x23: ffff0000db903368 x22: 0000000000ff0100 x21: 0000000000000000
x20: 0000000000000000 x19: ffff0000d1c9b680 x18: 0000000000000200
x17: 0000000000000002 x16: ffff8000082ec8b8 x15: 0000000000000003
x14: ffff0000d1c9b680 x13: 0000000000ff0100 x12: 0000000000040000
x11: 000000000003ffff x10: ffff80002154e000 x9 : 0000000000000200
x8 : 0000000000000002 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80000804605c
x2 : 0000000000000001 x1 : ffff8000114aa234 x0 : ffff8000084c4d94
Call trace:
 kcov_remote_start+0x368/0x4cc kernel/kcov.c:888
 kcov_remote_start_common include/linux/kcov.h:50 [inline]
 ieee80211_rx_list+0x490/0x21d8 net/mac80211/rx.c:4964
 ieee80211_rx_napi+0x164/0x34c net/mac80211/rx.c:5005
 ieee80211_rx include/net/mac80211.h:4571 [inline]
 ieee80211_handle_queued_frames+0xec/0x18c net/mac80211/main.c:235
 ieee80211_stop_device+0x24/0x88 net/mac80211/util.c:2150
 ieee80211_do_stop+0x1534/0x1c68 net/mac80211/iface.c:636
 ieee80211_stop+0x13c/0x198 net/mac80211/iface.c:664
 __dev_close_many+0x2f4/0x3e4 net/core/dev.c:1590
 dev_close_many+0x1e0/0x468 net/core/dev.c:1615
 dev_close+0x174/0x250 net/core/dev.c:1641
 nl80211_del_interface+0xd0/0x66c net/wireless/nl80211.c:4109
 genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
 genl_rcv_msg+0xc18/0x1018 net/netlink/genetlink.c:792
 netlink_rcv_skb+0x20c/0x3b8 net/netlink/af_netlink.c:2504
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:803
 netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]
 netlink_unicast+0x664/0x938 net/netlink/af_netlink.c:1352
 netlink_sendmsg+0x844/0xb38 net/netlink/af_netlink.c:1920
 sock_sendmsg_nosec net/socket.c:704 [inline]
 __sock_sendmsg net/socket.c:716 [inline]
 ____sys_sendmsg+0x584/0x870 net/socket.c:2436
 ___sys_sendmsg+0x214/0x294 net/socket.c:2490
 __sys_sendmsg net/socket.c:2519 [inline]
 __do_sys_sendmsg net/socket.c:2528 [inline]
 __se_sys_sendmsg net/socket.c:2526 [inline]
 __arm64_sys_sendmsg+0x1ac/0x25c net/socket.c:2526
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 3053
hardirqs last  enabled at (3052): [<ffff800011b90f24>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
hardirqs last  enabled at (3052): [<ffff800011b90f24>] _raw_spin_unlock_irqrestore+0xac/0x158 kernel/locking/spinlock.c:194
hardirqs last disabled at (3053): [<ffff8000084c4d94>] kcov_remote_start+0xc4/0x4cc kernel/kcov.c:837
softirqs last  enabled at (2988): [<ffff80001146668c>] spin_unlock_bh include/linux/spinlock.h:408 [inline]
softirqs last  enabled at (2988): [<ffff80001146668c>] netif_addr_unlock_bh include/linux/netdevice.h:4617 [inline]
softirqs last  enabled at (2988): [<ffff80001146668c>] ieee80211_do_stop+0x538/0x1c68 net/mac80211/iface.c:445
softirqs last disabled at (3050): [<ffff8000114fe738>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 292543192696ca9b ]---

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/06 09:04 linux-5.15.y 72244eab0dad 3a465482 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in kcov_remote_start
2024/10/02 09:28 linux-5.15.y 3a5928702e71 ea2b66a6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in kcov_remote_start
* Struck through repros no longer work on HEAD.