syzbot


WARNING in cfg80211_connect

Status: fixed on 2021/11/10 00:50
Reported-by: syzbot+5f9392825de654244975@syzkaller.appspotmail.com
Fix commit: 1b5ab825d9ac cfg80211: remove WARN_ON() in cfg80211_sme_connect
First crash: 726d, last: 534d

Cause bisection: introduced by (bisect log) :
commit 16d4d43595b4780daac8fcea6d042689124cb094
Author: Christoph Hellwig <hch@lst.de>
Date: Wed Jul 20 01:38:55 2016 +0000

  xfs: split direct I/O and DAX path

Crash: KASAN: use-after-free Read in batadv_iv_ogm_queue_add (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in cfg80211_connect C done 336 531d 726d 1/1 fixed on 2021/05/14 02:49
linux-4.14 WARNING in cfg80211_connect C done 101 547d 726d 1/1 fixed on 2021/05/03 13:12
Patch testing requests:
Created Duration User Patch Repo Result
2021/04/07 02:10 29m ducheng2@gmail.com patch upstream OK
2021/04/07 02:08 10m ducheng2@gmail.com patch upstream error
2021/04/06 10:01 18m ducheng2@gmail.com patch upstream OK
2021/04/06 09:57 0m ducheng2@gmail.com patch upstream error
2021/04/05 07:26 10m ducheng2@gmail.com upstream report log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 8406 at net/wireless/sme.c:532 cfg80211_sme_connect net/wireless/sme.c:532 [inline]
WARNING: CPU: 1 PID: 8406 at net/wireless/sme.c:532 cfg80211_connect+0x1600/0x1ad0 net/wireless/sme.c:1257
Modules linked in:
CPU: 0 PID: 8406 Comm: syz-executor421 Not tainted 5.12.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:cfg80211_sme_connect net/wireless/sme.c:532 [inline]
RIP: 0010:cfg80211_connect+0x1600/0x1ad0 net/wireless/sme.c:1257
Code: e8 95 57 e2 f8 e9 9b ea ff ff 44 89 e1 80 e1 07 38 c1 0f 8c fd ea ff ff 4c 89 e7 e8 5a 57 e2 f8 e9 f0 ea ff ff e8 c0 70 9e f8 <0f> 0b bd 8d ff ff ff e9 9d f4 ff ff e8 af 70 9e f8 0f 0b e9 f8 f3
RSP: 0018:ffffc900016a7678 EFLAGS: 00010293
RAX: ffffffff88daa810 RBX: ffffffff8af26660 RCX: ffff88801bba54c0
RDX: 0000000000000000 RSI: ffff888012ff3026 RDI: ffff88801c584d38
RBP: ffff88801c584d58 R08: dffffc0000000000 R09: ffffed10038b09a7
R10: ffffed10038b09a7 R11: 0000000000000000 R12: dffffc0000000000
R13: ffff88801c584e10 R14: 1ffff110038b09ac R15: ffff88801c584d60
FS:  0000000001282300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7f792e4000 CR3: 0000000021171000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 nl80211_connect+0x16d9/0x1e20 net/wireless/nl80211.c:10901
 genl_family_rcv_msg_doit net/netlink/genetlink.c:739 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline]
 genl_rcv_msg+0xe4e/0x1280 net/netlink/genetlink.c:800
 netlink_rcv_skb+0x190/0x3a0 net/netlink/af_netlink.c:2502
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811
 netlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline]
 netlink_unicast+0x786/0x940 net/netlink/af_netlink.c:1338
 netlink_sendmsg+0x9ae/0xd50 net/netlink/af_netlink.c:1927
 sock_sendmsg_nosec net/socket.c:654 [inline]
 sock_sendmsg net/socket.c:674 [inline]
 ____sys_sendmsg+0x519/0x800 net/socket.c:2350
 ___sys_sendmsg net/socket.c:2404 [inline]
 __sys_sendmsg+0x2bf/0x370 net/socket.c:2433
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x441089
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd53bce6f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441089
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000c00000000 R09: 0000000c00000000
R10: 0000000c00000000 R11: 0000000000000246 R12: 000000000000c9cf
R13: 00007ffd53bce760 R14: 00007ffd53bce750 R15: 00007ffd53bce71c

Crashes (2320):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/04/07 07:30 upstream 2d743660786e 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/04/07 07:30 upstream 2d743660786e 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/06 18:59 upstream 0a50438c8436 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/04/06 18:35 upstream 0a50438c8436 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/06 12:09 upstream 0a50438c8436 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/05 10:07 upstream e49d033bddf5 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/05 09:02 upstream e49d033bddf5 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/05 05:54 upstream e49d033bddf5 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/04/04 16:24 upstream 2023a53bdf41 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/04 02:02 upstream 57fbdb15ec42 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/02 06:07 upstream ffd9fb546d49 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/01 12:08 upstream d19cc4bfbff1 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/31 18:22 upstream 5e46d1b78a03 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/30 18:44 upstream 1e43c377a79f 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/28 18:02 upstream 0f4498cef9f5 a8529b82 .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/03/28 11:41 upstream 0f4498cef9f5 a8529b82 .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/27 15:49 upstream 0f4498cef9f5 a8529b82 .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/27 06:34 upstream db24726bfefa a8529b82 .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/27 01:32 upstream db24726bfefa a8529b82 .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/27 00:54 upstream db24726bfefa a8529b82 .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/26 04:57 upstream e138138003eb 6a383ecf .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/26 03:49 upstream e138138003eb 6a383ecf .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/03/25 14:51 upstream 4ee998b0ef8b 607e3baf .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/03/24 10:29 upstream 7acac4b3196c e613994b .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/23 02:31 upstream 84196390620a 8092f30d .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/03/07 03:35 upstream a38fd8748464 e4b4d570 .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/02 05:16 upstream fe07bfda2fb9 183afb6c .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/02/24 21:28 upstream c03c21ba6f4e fcc6d71b .config log report syz C WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/02/20 15:31 upstream f40ddce88593 3e5ed8b4 .config log report syz C WARNING in cfg80211_connect
ci-upstream-net-this-kasan-gce 2021/02/27 08:19 net eee7ede695cf 4c37c133 .config log report syz C WARNING in cfg80211_connect
ci-upstream-net-this-kasan-gce 2021/02/20 16:57 net 3af409ca278d 3e5ed8b4 .config log report syz C WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/03/09 10:15 net-next d310ec03a34e 09fbf400 .config log report syz C WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/02/27 08:18 net-next d310ec03a34e 4c37c133 .config log report syz C WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/02/25 16:14 net-next d310ec03a34e 76f7fc95 .config log report syz C WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/02/20 23:31 net-next 38b5133ad607 3e5ed8b4 .config log report syz C WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/02/20 15:22 net-next 38b5133ad607 3e5ed8b4 .config log report syz C WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/04/09 00:28 linux-next 6145d80cfc62 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/04/07 07:07 linux-next 9c54130cd255 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/04/05 12:46 linux-next 454c576c3f5e 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/04/04 02:46 linux-next 454c576c3f5e 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/04/03 04:18 linux-next 454c576c3f5e 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/03/30 02:27 linux-next 931294922e65 6a81331a .config log report syz C WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/03/29 01:58 linux-next 931294922e65 a8529b82 .config log report syz C WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/03/22 23:05 linux-next e3128d2f068e 8092f30d .config log report syz C WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2020/10/01 21:31 net-next 87d5034d0758 9602ddf4 .config log report syz C
ci-upstream-kasan-gce 2021/04/10 00:03 upstream 17e7124aad76 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/09 21:50 upstream 17e7124aad76 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/09 18:55 upstream 17e7124aad76 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/09 14:07 upstream 4fa56ad0d12e 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/09 10:28 upstream 4fa56ad0d12e 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/09 05:35 upstream 4fa56ad0d12e 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/09 04:34 upstream 4fa56ad0d12e 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/09 03:29 upstream 4fa56ad0d12e 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/08 21:13 upstream 454859c552da 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/08 13:46 upstream 454859c552da 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/08 04:01 upstream 3a22981230f9 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/04/07 00:47 upstream 2d743660786e 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/06 18:22 upstream 0a50438c8436 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/05 03:14 upstream e49d033bddf5 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/05 00:30 upstream e49d033bddf5 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/04 23:14 upstream e49d033bddf5 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/04 18:22 upstream 2023a53bdf41 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/04 09:39 upstream 2023a53bdf41 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/04 07:51 upstream 2023a53bdf41 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/04 04:44 upstream 57fbdb15ec42 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/04/03 19:11 upstream 57fbdb15ec42 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/03 03:06 upstream d93a0d43e3d0 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/02 18:22 upstream 1678e493d530 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/04/02 13:26 upstream 1678e493d530 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/04/01 22:44 upstream ffd9fb546d49 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/01 13:33 upstream d19cc4bfbff1 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/04/01 07:28 upstream d19cc4bfbff1 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/01 05:32 upstream d19cc4bfbff1 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/01 02:01 upstream 5e46d1b78a03 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/04/01 00:13 upstream 5e46d1b78a03 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/31 16:09 upstream 5e46d1b78a03 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/03/31 13:28 upstream 5e46d1b78a03 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/03/31 00:42 upstream 2bb25b3a748a 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/30 14:43 upstream 1e43c377a79f 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/03/30 04:59 upstream 1e43c377a79f 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/03/29 23:23 upstream 1e43c377a79f 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-smack-root 2021/03/29 22:16 upstream 1e43c377a79f 6a81331a .config log report info WARNING in cfg80211_connect
ci-qemu-upstream 2021/03/29 17:52 upstream a5e13c6df0e4 a8529b82 .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-selinux-root 2021/03/29 14:42 upstream a5e13c6df0e4 a8529b82 .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce 2021/03/29 13:24 upstream a5e13c6df0e4 a8529b82 .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-386 2021/04/08 12:25 upstream 454859c552da 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-386 2021/04/08 02:20 upstream 3a22981230f9 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-386 2021/04/08 00:48 upstream 3a22981230f9 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-386 2021/04/07 03:40 upstream 2d743660786e 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-386 2021/04/07 02:27 upstream 2d743660786e 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-386 2021/04/01 21:18 upstream ffd9fb546d49 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-386 2021/04/01 19:36 upstream ffd9fb546d49 6a81331a .config log report info WARNING in cfg80211_connect
ci-qemu-upstream-386 2021/03/29 20:33 upstream 1e43c377a79f 6a81331a .config log report info WARNING in cfg80211_connect
ci-qemu2-arm64 2021/03/06 18:01 upstream a38fd8748464 e4b4d570 .config log report info WARNING in cfg80211_connect
ci-qemu2-arm64-compat 2021/03/06 00:24 upstream 280d542f6ffa 4a024a9b .config log report info WARNING in cfg80211_connect
ci-qemu2-arm64-mte 2021/02/28 20:00 upstream 5695e5161974 4c37c133 .config log report info WARNING in cfg80211_connect
ci-upstream-net-this-kasan-gce 2021/03/26 17:17 net 75887e881b19 a8529b82 .config log report info WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/04/10 23:28 net-next 626b598aa8be bfeda1b1 .config log report info WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/04/07 20:29 net-next be107538c529 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/04/06 09:24 net-next cc0626c2aaed 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/04/05 20:14 net-next 514e1150da9c 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-net-kasan-gce 2021/04/01 11:57 net-next 917e2e6c5798 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/04/09 02:13 linux-next 6145d80cfc62 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/04/06 14:44 linux-next 9c54130cd255 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-linux-next-kasan-gce-root 2021/04/02 03:47 linux-next 454c576c3f5e 6a81331a .config log report info WARNING in cfg80211_connect
ci-upstream-kasan-gce-root 2021/01/17 13:05 upstream 0da0a8a0a0e1 813be542 .config log report info
ci-qemu-upstream-386 2020/10/01 09:58 upstream 60e720931556 4103fce0 .config log report info
ci-qemu-upstream-386 2020/10/01 08:35 upstream 60e720931556 4103fce0 .config log report info
* Struck through repros no longer work on HEAD.