syzbot


divide error in mac80211_hwsim_bss_info_changed

Status: auto-closed as invalid on 2021/02/09 23:56
Reported-by: syzbot+14e60354edce3ae858fb@syzkaller.appspotmail.com
First crash: 724d, last: 717d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream divide error in mac80211_hwsim_bss_info_changed (2) 2 298d 346d 0/24 auto-closed as invalid on 2022/04/04 22:30
upstream divide error in mac80211_hwsim_bss_info_changed 1 534d 501d 0/24 auto-closed as invalid on 2021/08/12 01:33

Sample crash report:
divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 2950 Comm: kworker/u4:12 Tainted: G        W         5.4.70-syzkaller-00065-g93a4197bc23a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy188 ieee80211_scan_work
RIP: 0010:mac80211_hwsim_bss_info_changed+0x3df/0x800 drivers/net/wireless/mac80211_hwsim.c:1759
Code: 00 fc ff df 48 81 44 24 20 40 13 00 00 49 03 1f 41 80 7c 0d 00 00 74 08 4c 89 f7 e8 3b b9 ec fe 49 8b 0e 89 ce 48 89 d8 31 d2 <48> f7 f6 29 d1 48 69 f1 e8 03 00 00 48 8b 7c 24 20 31 d2 b9 05 00
RSP: 0018:ffff8881d1fff9c0 EFLAGS: 00010246
RAX: 0005b1820938e650 RBX: 0005b1820938e650 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff8881d1fffa98 R08: ffffffff81331dc6 R09: ffffffff83a6a85d
R10: ffff8881d245ec80 R11: 0000000000000003 R12: ffff88819e22c970
R13: 1ffff11033c45e4a R14: ffff88819e22f250 R15: ffff88819e22f308
FS:  0000000000000000(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001590004 CR3: 00000001ad335006 CR4: 00000000001606f0
DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 drv_bss_info_changed+0x32d/0x580 net/mac80211/driver-ops.h:178
 ieee80211_offchannel_return+0x39b/0x500 net/mac80211/offchannel.c:178
 __ieee80211_scan_completed+0x6ac/0x8c0 net/mac80211/scan.c:444
 ieee80211_scan_work+0x15c/0x13c0 net/mac80211/scan.c:1082
 process_one_work+0x777/0xf90 kernel/workqueue.c:2280
 worker_thread+0xa8f/0x1430 kernel/workqueue.c:2426
 kthread+0x317/0x340 kernel/kthread.c:268
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace ec27b50502f498ce ]---
RIP: 0010:mac80211_hwsim_bss_info_changed+0x3df/0x800 drivers/net/wireless/mac80211_hwsim.c:1759
Code: 00 fc ff df 48 81 44 24 20 40 13 00 00 49 03 1f 41 80 7c 0d 00 00 74 08 4c 89 f7 e8 3b b9 ec fe 49 8b 0e 89 ce 48 89 d8 31 d2 <48> f7 f6 29 d1 48 69 f1 e8 03 00 00 48 8b 7c 24 20 31 d2 b9 05 00
RSP: 0018:ffff8881d1fff9c0 EFLAGS: 00010246
RAX: 0005b1820938e650 RBX: 0005b1820938e650 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff8881d1fffa98 R08: ffffffff81331dc6 R09: ffffffff83a6a85d
R10: ffff8881d245ec80 R11: 0000000000000003 R12: ffff88819e22c970
R13: 1ffff11033c45e4a R14: ffff88819e22f250 R15: ffff88819e22f308
FS:  0000000000000000(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffef5563c3c CR3: 00000001d2c67004 CR4: 00000000001606e0
DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-android-5-4-kasan 2020/10/12 23:55 android12-5.4 93a4197bc23a d32b0bbf .config log report info
ci2-android-5-4-kasan 2020/10/05 14:01 android12-5.4 9d0d630081ae 1880b4a9 .config log report info
* Struck through repros no longer work on HEAD.