syzbot


WARNING in ieee80211_free_ack_frame

Status: fixed on 2021/11/10 00:50
Reported-by: syzbot+a063bbf0b15737362592@syzkaller.appspotmail.com
Fix commit: bd18de517923 mac80211_hwsim: drop pending frames on stop
First crash: 853d, last: 458d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: WARNING in ieee80211_free_ack_frame (log)
Repro: syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in ieee80211_free_ack_frame C error 94 7d06h 852d 0/1 upstream: reported C repro on 2020/10/07 07:47
upstream WARNING in ieee80211_free_ack_frame (2) 29 25d 448d 0/24 upstream: reported on 2021/11/15 07:38
Last patch testing requests:
Created Duration User Patch Repo Result
2021/05/17 15:04 16m johannes@sipsolutions.net patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/ master OK

Sample crash report:
netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
------------[ cut here ]------------
Have pending ack frames!
WARNING: CPU: 0 PID: 4541 at net/mac80211/main.c:1400 ieee80211_free_ack_frame+0x48/0x50 net/mac80211/main.c:1400
Modules linked in:
CPU: 1 PID: 4541 Comm: kworker/u4:5 Not tainted 5.12.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:ieee80211_free_ack_frame+0x48/0x50 net/mac80211/main.c:1400
Code: e8 4d 6b 1a f9 48 89 ef e8 f5 69 a3 fe 31 c0 5b 5d c3 e8 3b 6b 1a f9 48 c7 c7 20 e4 85 8a c6 05 f6 9f 58 05 01 e8 2d b0 6d 00 <0f> 0b eb d2 0f 1f 40 00 41 57 41 56 41 55 49 89 d5 41 54 49 89 f4
RSP: 0018:ffffc900098779d8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff888021a0b880 RSI: ffffffff815c7bd5 RDI: fffff5200130ef2d
RBP: ffff88801a87edc0 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815c1a3e R11: 0000000000000000 R12: dffffc0000000000
R13: ffffffff8859f2a0 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd8db3e7000 CR3: 00000000129cd000 CR4: 0000000000350ee0
Call Trace:
 idr_for_each+0x113/0x220 lib/idr.c:208
 ieee80211_free_hw+0x9b/0x2b0 net/mac80211/main.c:1416
 mac80211_hwsim_del_radio drivers/net/wireless/mac80211_hwsim.c:3435 [inline]
 hwsim_exit_net+0x5bc/0xc90 drivers/net/wireless/mac80211_hwsim.c:4187
 ops_exit_list+0xb0/0x160 net/core/net_namespace.c:175
 cleanup_net+0x4ea/0xb10 net/core/net_namespace.c:595
 process_one_work+0x98d/0x1600 kernel/workqueue.c:2275
 worker_thread+0x64c/0x1120 kernel/workqueue.c:2421
 kthread+0x3b1/0x4a0 kernel/kthread.c:313
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-upstream-kasan-gce-root 2020/11/11 17:06 upstream eccc87672492 4a77ae0b .config console log report syz
* Struck through repros no longer work on HEAD.
Crashes (117):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci-upstream-kasan-gce-root 2021/05/04 20:39 upstream d2b6f8a17919 09efdd63 .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-smack-root 2021/03/25 07:31 upstream 4ee998b0ef8b 607e3baf .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/21 00:38 upstream f40ddce88593 3e5ed8b4 .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/17 00:07 upstream f40ddce88593 98682e5e .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-smack-root 2021/02/16 03:28 upstream f40ddce88593 98682e5e .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-smack-root 2021/02/13 18:35 upstream c6d8570e4d64 98682e5e .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce 2021/02/11 10:05 upstream 291009f656e8 a52ee10a .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/10 03:11 upstream e0756cfc7d7c 2bd9619f .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/10 00:16 upstream e0756cfc7d7c 2bd9619f .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-root 2021/02/09 22:47 upstream e0756cfc7d7c 2bd9619f .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-smack-root 2021/02/09 14:51 upstream e0756cfc7d7c 2bd9619f .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-smack-root 2021/02/08 04:02 upstream b75dba7f472c 2ce644fc .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-root 2021/02/05 21:15 upstream dd86e7fa07a3 23a562df .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-root 2021/01/31 22:11 upstream 6642d600b541 fc9fd31e .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-root 2021/01/29 01:59 upstream e5ff2cb9cf67 7df34f59 .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-root 2021/01/28 15:14 upstream 76c057c84d28 eefc07f2 .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/06/01 02:19 linux-next a1f92694393a 032639db .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/04/17 21:32 linux-next 1216f02e46a4 7e2b734b .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/04/03 12:52 linux-next 454c576c3f5e 6a81331a .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/03/31 20:20 linux-next 931294922e65 6a81331a .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/03/28 15:27 linux-next 931294922e65 a8529b82 .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/03/27 07:03 linux-next 931294922e65 a8529b82 .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/03/27 04:25 linux-next 931294922e65 a8529b82 .config console log report syz WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce 2020/12/30 00:43 upstream dea8dcf2a9fa 80910769 .config console log report syz
ci-upstream-kasan-gce 2020/12/05 07:22 upstream e87297fa080a 20366b87 .config console log report syz
ci-upstream-kasan-gce 2020/11/20 17:33 upstream 4d02da974ea8 740ff461 .config console log report syz
ci-upstream-kasan-gce-root 2020/10/12 03:04 upstream 3dd0130f2430 4a77ae0b .config console log report syz
ci-upstream-kasan-gce-smack-root 2020/10/08 15:18 upstream c85fb28b6f99 92390980 .config console log report syz
ci-upstream-kasan-gce-selinux-root 2020/10/07 14:04 upstream c85fb28b6f99 1880b4a9 .config console log report syz
ci-upstream-kasan-gce-386 2020/11/25 05:39 upstream 80145ac2f739 e34b696c .config console log report syz
ci-upstream-kasan-gce-386 2020/11/23 07:59 upstream a349e4c65960 0d27f508 .config console log report syz
ci-upstream-kasan-gce-root 2021/11/05 14:27 upstream d4439a1189f9 4c1be0be .config console log report info WARNING in ieee80211_free_ack_frame
ci-qemu-upstream 2021/11/04 17:17 upstream ce840177930f 4c1be0be .config console log report info WARNING in ieee80211_free_ack_frame
ci-qemu-upstream 2021/10/20 03:45 upstream d9abdee5fd5a 466b7db1 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce 2021/10/14 12:11 upstream 348949d9a444 5462d470 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce 2021/09/30 22:49 upstream 02d5e016800d 1d849ab4 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce 2021/05/20 12:06 upstream c3d0e3fd41b7 c560a65d .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-root 2021/05/03 18:52 upstream d2b6f8a17919 ad61f371 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-root 2021/05/03 17:09 upstream d2b6f8a17919 ad61f371 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/03/31 13:26 upstream 5e46d1b78a03 6a81331a .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/25 17:44 upstream 29c395c77a9a 76f7fc95 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/23 16:19 upstream 3b9cdafb5358 fcc6d71b .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/17 11:07 upstream f40ddce88593 052f8d9f .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/14 00:06 upstream ac30d8ce28d6 98682e5e .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-root 2021/02/13 03:22 upstream dcc0b49040c7 98682e5e .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/08 12:40 upstream 92bf22614b21 2ce644fc .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2021/02/07 23:00 upstream b75dba7f472c 2ce644fc .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce 2021/02/07 15:48 upstream 825b5991a46e 2ce644fc .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-386 2021/01/21 00:02 upstream 75439bc439e0 d4f4eca5 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/06/01 22:31 net 4ef8d857b5f4 032639db .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/06/01 07:47 net 4ac06a1e013c 032639db .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/05/29 08:13 net 6850ec973791 858ea628 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/05/28 12:29 net 44991d61aa12 858ea628 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/05/27 17:46 net d7c5303fbc8a 858ea628 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/05/26 23:08 net 62f3415db237 858ea628 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/05/26 11:23 net f5d287126f63 54f0bcf1 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/05/02 10:24 net bbd6f0a94813 77e2b668 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/04/30 04:04 net bbd6f0a94813 77e2b668 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/02/18 16:20 net 3af409ca278d 14052202 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/02/17 20:15 net 3af409ca278d 14052202 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/02/17 07:50 net 3af409ca278d 052f8d9f .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-this-kasan-gce 2021/02/16 05:11 net 4773acf3d4b5 98682e5e .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/05/20 00:15 net-next bc6d076daa8c a343ba6b .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/12 14:14 net-next 3c5a2fd042d0 a5f86b15 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/11 18:02 net-next e4b62cf7559f a5f86b15 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/11 12:54 net-next e4b62cf7559f a52ee10a .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/10 20:45 net-next de1db4a6ed62 a52ee10a .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/06 18:59 net-next c90597bdebb5 0655e081 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/06 12:32 net-next 4d469ec8ec05 0655e081 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/06 03:39 net-next 4d469ec8ec05 23a562df .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/05 17:01 net-next 4d469ec8ec05 23a562df .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/04 23:14 net-next 32d1bbb1d609 23a562df .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/04 11:47 net-next 32d1bbb1d609 42b90a7c .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/02 23:48 net-next 9ae4bdc6e4c1 624dad51 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/02/01 15:04 net-next 14e8e0f60088 e6b95f32 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/01/30 08:27 net-next 46eb3c108fe1 fc9fd31e .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/01/29 09:16 net-next 462512824f90 6593fd32 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/01/27 14:49 net-next 6626a0266566 a0ebf917 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/01/27 09:22 net-next 6626a0266566 a0ebf917 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/01/26 15:15 net-next 02c26940908f 52e37319 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-net-kasan-gce 2021/01/26 08:30 net-next 24f97b6af9a0 52e37319 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/01/27 23:21 linux-next bc085f8fc88f eefc07f2 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/01/27 12:31 linux-next bc085f8fc88f a0ebf917 .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-linux-next-kasan-gce-root 2021/01/26 21:08 linux-next bc085f8fc88f 55a7d4df .config console log report info WARNING in ieee80211_free_ack_frame
ci-upstream-kasan-gce-selinux-root 2020/10/07 01:11 upstream c85fb28b6f99 1880b4a9 .config console log report info
ci-upstream-kasan-gce-selinux-root 2020/10/06 22:54 upstream c85fb28b6f99 1880b4a9 .config console log report info
ci-upstream-linux-next-kasan-gce-root 2021/01/17 12:53 linux-next b3a3cbdec55b 813be542 .config console log report info
* Struck through repros no longer work on HEAD.