WARNING in ath6kl_htc_pipe_rx_complete

Status: fixed on 2023/06/01 20:51
Reported-by: syzbot+466f488371fea3a64c73@syzkaller.appspotmail.com
Fix commit: 75c4a8154cb6 wifi: ath6kl: reduce WARN to dev_dbg() in callback
First crash: 1200d, last: 1200d
Fix bisection: fixed by (bisect log) :
commit 644df7e865e76ab7a62c67c25cbbc093c944d0ef
Author: Fedor Pchelkin <pchelkin@ispras.ru>
Date: Fri Feb 24 10:28:05 2023 +0000

  wifi: ath6kl: reduce WARN to dev_dbg() in callback

  
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2023/05/18 upstream (ToT) 2d1bcbc6cd70 C Didn't crash
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in ath6kl_htc_pipe_rx_complete usb wireless -1 syz, C error 2008 1200d 2470d 22/29 fixed on 2023/06/08 14:41
linux-5.15 WARNING in ath6kl_htc_pipe_rx_complete -1 syz, C error 3 1193d 1200d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:08

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 14 at drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 ath6kl_htc_pipe_rx_complete+0xae0/0xc78 drivers/net/wireless/ath/ath6kl/htc_pipe.c:964
Modules linked in:
CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 6.1.26-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023
Workqueue: ath6kl_wq ath6kl_usb_io_comp_work
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : ath6kl_htc_pipe_rx_complete+0xae0/0xc78 drivers/net/wireless/ath/ath6kl/htc_pipe.c:964
lr : ath6kl_htc_pipe_rx_complete+0xad8/0xc78 drivers/net/wireless/ath/ath6kl/htc_pipe.c:963
sp : ffff800019ba7940
x29: ffff800019ba7a50 x28: 1fffe0001bc88594 x27: 1fffe0001bc88518
x26: dfff800000000000 x25: ffff0000c45efdc0 x24: ffff0000d5940e00
x23: 1ffff00003374f3c x22: ffff800013441930 x21: ffff0000d5940e00
x20: 0000000000000000 x19: dfff800000000000 x18: ffff800019ba7780
x17: ffff80001558d000 x16: ffff80000825e194 x15: 000000000000b652
x14: 000000001b127eb8 x13: dfff800000000000 x12: 0000000000000003
x11: ff8080000d58dc88 x10: 0000000000000000 x9 : ffff80000d58dc88
x8 : ffff0000c09a1b40 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff800018736e70 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000005 x1 : ffff0000c45efdc0 x0 : ffff800013441ca0
Call trace:
 ath6kl_htc_pipe_rx_complete+0xae0/0xc78 drivers/net/wireless/ath/ath6kl/htc_pipe.c:964
 ath6kl_htc_rx_complete drivers/net/wireless/ath/ath6kl/htc-ops.h:109 [inline]
 ath6kl_core_rx_complete+0x78/0x90 drivers/net/wireless/ath/ath6kl/core.c:62
 ath6kl_usb_io_comp_work+0xe0/0x160 drivers/net/wireless/ath/ath6kl/usb.c:604
 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2289
 worker_thread+0x8e4/0xfec kernel/workqueue.c:2436
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 50238
hardirqs last  enabled at (50237): [<ffff8000121bef3c>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (50237): [<ffff8000121bef3c>] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (50238): [<ffff8000120dc90c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (3652): [<ffff80000839169c>] local_bh_enable+0xc/0x2c include/linux/bottom_half.h:32
softirqs last disabled at (3648): [<ffff800008391670>] local_bh_disable+0xc/0x2c include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
ath6kl: Target not yet initialized

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/04/30 18:43 linux-6.1.y ca1c9012c941 62df2017 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ath6kl_htc_pipe_rx_complete
* Struck through repros no longer work on HEAD.