syzbot


WARNING in ieee80211_start_next_roc

Status: upstream: reported C repro on 2020/12/09 02:03
Reported-by: syzbot+c3a167b5615df4ccd7fb@syzkaller.appspotmail.com
First crash: 573d, last: 1d07h

Cause bisection: introduced by (bisect log) [no-op commit]:
commit 6ad8c632ee48ae099aa13704ef18a641220fe211
Author: Sudarsana Reddy Kalluru <sudarsana.kalluru@qlogic.com>
Date: Wed Jun 8 10:22:10 2016 +0000

  qed: Add support for query/config dcbx.

Crash: KASAN: null-ptr-deref Read (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in ieee80211_start_next_roc C error 53 2d08h 538d 0/1 upstream: reported C repro on 2021/01/09 02:54
linux-4.14 WARNING in ieee80211_start_next_roc C 1 13d 600d 0/1 upstream: reported C repro on 2020/11/08 18:11

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3756 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc net/mac80211/offchannel.c:401 [inline]
WARNING: CPU: 0 PID: 3756 at net/mac80211/offchannel.c:401 ieee80211_start_next_roc+0x1f4/0x240 net/mac80211/offchannel.c:383
Modules linked in:
CPU: 0 PID: 3756 Comm: syz-executor227 Not tainted 5.19.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ieee80211_start_next_roc net/mac80211/offchannel.c:401 [inline]
RIP: 0010:ieee80211_start_next_roc+0x1f4/0x240 net/mac80211/offchannel.c:383
RIP: 0010:ieee80211_start_next_roc net/mac80211/offchannel.c:401 [inline]
RIP: 0010:ieee80211_start_next_roc+0x1f4/0x240 net/mac80211/offchannel.c:383
Code: 28 23 00 00 48 89 ef 48 89 c2 e8 27 89 0c 00 5b 5d e9 60 c1 b8 f8 e8 5b c1 b8 f8 48 89 ef e8 a3 6c ff ff eb 8d e8 4c c1 b8 f8 <0f> 0b eb 84 48 c7 c7 0c a8 bb 8d e8 dc 84 05 f9 e9 2f fe ff ff e8
RSP: 0018:ffffc900035ff428 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff888021f71d80 RSI: ffffffff88c1b544 RDI: 0000000000000001
RBP: ffff88801fb98de0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88801fb9a870
FS:  0000555556249300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdac2b3828 CR3: 000000001fc70000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 __ieee80211_scan_completed+0x592/0xee0 net/mac80211/scan.c:502
 ieee80211_scan_cancel+0x165/0x9b0 net/mac80211/scan.c:1301
 ieee80211_do_stop+0x1861/0x1fe0 net/mac80211/iface.c:384
 ieee80211_runtime_change_iftype net/mac80211/iface.c:1787 [inline]
 ieee80211_if_change_type+0x383/0x840 net/mac80211/iface.c:1825
 ieee80211_change_iface+0x57/0x3f0 net/mac80211/cfg.c:190
 rdev_change_virtual_intf net/wireless/rdev-ops.h:69 [inline]
 cfg80211_change_iface+0x5e1/0xf10 net/wireless/util.c:1078
 nl80211_set_interface+0x64f/0x8c0 net/wireless/nl80211.c:4041
 genl_family_rcv_msg_doit+0x228/0x320 net/netlink/genetlink.c:731
 genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
 genl_rcv_msg+0x328/0x580 net/netlink/genetlink.c:792
 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2501
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:734
 __sys_sendto+0x21a/0x320 net/socket.c:2119
 __do_sys_sendto net/socket.c:2131 [inline]
 __se_sys_sendto net/socket.c:2127 [inline]
 __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2127
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fa06c86df86
Code: 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89
RSP: 002b:00007ffdac2b26e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007ffdac2b27c0 RCX: 00007fa06c86df86
RDX: 0000000000000024 RSI: 00007ffdac2b2810 RDI: 0000000000000007
RBP: 0000000000000001 R08: 00007ffdac2b2704 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdac2b2810 R14: 0000000000000007 R15: 0000000000000000
 </TASK>

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2021/06/13 15:45 upstream 8ecfa36cd4db 805b5003 .config log report syz C
ci-upstream-kasan-gce-root 2021/04/06 11:14 upstream 0a50438c8436 e4b4d570 .config log report syz C
ci-upstream-kasan-gce 2021/01/04 02:10 upstream e71ba9452f0b 20366b87 .config log report syz C
Crashes (325):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2022/06/07 02:03 upstream f2906aa86338 c8857892 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/04/22 09:58 upstream 59f0c2447e25 2738b391 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-root 2022/03/23 15:48 upstream 6b1f86f8e9c7 5ff41e94 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2022/03/16 21:04 upstream 56e337f2cf13 dfa9a8ed .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2021/10/18 21:55 upstream cf52ad5ff16c 0c5d9412 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2021/09/09 13:05 upstream 2d338201d531 e2776ee4 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2021/08/29 02:33 upstream 3f5ad13cb012 be2c130d .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-root 2021/08/27 15:05 upstream 77dd11439b86 b318694d .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-root 2021/08/20 11:19 upstream d992fe5318d8 b599f2fc .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2021/04/28 09:58 upstream 57fa2369ab17 805b5003 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2021/04/20 07:12 upstream 7af08140979a 4285c989 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-selinux-root 2021/04/16 09:27 upstream 7e25f40eab52 c59079a6 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-root 2021/03/07 10:53 upstream a38fd8748464 e4b4d570 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/04/19 20:12 linux-next 634de1db0e9b c334415e .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2021/10/06 01:48 linux-next 29616f67fcbd 0a63fd36 .config log report syz C WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2020/12/05 01:54 upstream e87297fa080a 20366b87 .config log report syz C
ci-upstream-kasan-gce-root 2022/05/30 11:06 upstream b00ed48bb0a7 a46af346 .config log report syz WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2022/06/30 12:26 upstream d9b2ba67917c 1434eec0 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-root 2022/06/27 19:22 upstream 03c765b0e3b4 ef82eb2c .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2022/06/27 00:17 upstream 03c765b0e3b4 a371c43c .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-selinux-root 2022/06/25 19:40 upstream 8c23f235a6a8 a371c43c .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/06/24 20:17 upstream 92f20ff72066 a5dbd430 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-root 2022/06/15 20:23 upstream 979086f5e006 1719ee24 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-root 2022/06/15 01:57 upstream 018ab4fabddd 127d1faf .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2022/06/12 02:02 upstream 7a68065eb9cd 0d5abf15 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2022/06/09 15:46 upstream 6bfb56e93bce 0d5abf15 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-selinux-root 2022/06/08 20:52 upstream 6bfb56e93bce b2706118 .config log report info WARNING in ieee80211_start_next_roc
ci-qemu-upstream 2022/06/06 04:12 upstream f2906aa86338 c8857892 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/06/05 17:59 upstream 44688ffd111a c8857892 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-selinux-root 2022/06/04 05:22 upstream 50fd82b3a9a9 c8857892 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2022/06/03 13:20 upstream 50fd82b3a9a9 eee80d3c .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/06/03 11:11 upstream 50fd82b3a9a9 02dddea8 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2022/06/03 04:33 upstream 50fd82b3a9a9 02dddea8 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2022/06/02 11:08 upstream d1dc87763f40 5783034f .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-selinux-root 2022/06/01 16:26 upstream 700170bf6b4d 3666edfe .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce 2022/05/31 17:45 upstream 8ab2afa23bd1 af70c3a9 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/05/12 18:39 upstream 0ac824f379fb 9ad6612a .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/05/12 14:26 upstream feb9c5e19e91 9ad6612a .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/05/11 15:28 upstream feb9c5e19e91 beb0b407 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/05/09 01:25 upstream c5eb0a61238d e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/05/08 08:57 upstream 30c8e80f7932 e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/05/07 23:33 upstream 30c8e80f7932 e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-qemu-upstream 2022/05/07 21:23 upstream 30c8e80f7932 e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-smack-root 2022/05/07 16:10 upstream 4b97bac0756a e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/06/29 12:17 upstream 941e3e791269 496a8536 .config log report info WARNING in ieee80211_start_next_roc
ci-qemu-upstream-386 2022/06/09 10:03 upstream 6bfb56e93bce 0d5abf15 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/06/02 09:24 upstream 8171acb8bc9b b4bc6a3d .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/26 04:39 upstream 7e062cda7d90 3037caa9 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/22 09:28 upstream eaea45fc0e7b 7268fa62 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/20 15:45 upstream 3d7285a335ed bd37ad7e .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/18 17:01 upstream ef1302160bfb 50c53f39 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/12 23:49 upstream 0ac824f379fb 9ad6612a .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/10 12:14 upstream 9be9ed2612b5 8b277b8e .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/09 10:42 upstream c5eb0a61238d 8b277b8e .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/09 08:35 upstream c5eb0a61238d e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/09 02:29 upstream c5eb0a61238d e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/08 15:01 upstream 30c8e80f7932 e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/07 08:28 upstream 4b97bac0756a e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-kasan-gce-386 2022/05/06 15:46 upstream fe27d189e3f4 e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-net-this-kasan-gce 2022/03/01 21:25 net 7cf5aa32e392 45a13a73 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-net-kasan-gce 2022/01/31 14:18 net-next ff58831fa02d 6b7c57fe .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/06/29 15:41 linux-next cb71b93c2dc3 1434eec0 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/06/28 20:22 linux-next cb71b93c2dc3 496a8536 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/06/27 17:42 linux-next aab35c3d5112 ef82eb2c .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/06/27 11:29 linux-next aab35c3d5112 a371c43c .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/06/13 18:35 linux-next 6d0c80680317 0d5abf15 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/06/11 16:17 linux-next 6d0c80680317 0d5abf15 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/06/07 23:58 linux-next 73d0e32571a0 b2706118 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/05/31 23:53 linux-next 3b46e4e44180 3666edfe .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/05/08 21:41 linux-next 38a288f5941e e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/05/08 16:07 linux-next 38a288f5941e e60b1103 .config log report info WARNING in ieee80211_start_next_roc
ci-upstream-linux-next-kasan-gce-root 2022/05/06 17:30 linux-next 38a288f5941e e60b1103 .config log report info WARNING in ieee80211_start_next_roc