From: syzbot <syzbot+1a797e1c81be78a2ace7@syzkaller.appspotmail.com>
To: davem@davemloft.net, edumazet@google.com,
johannes@sipsolutions.net, kuba@kernel.org,
linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org,
netdev@vger.kernel.org, pabeni@redhat.com,
syzkaller-bugs@googlegroups.com
Subject: Re: [syzbot] [wireless?] WARNING in __cfg80211_bss_update (2)
Date: Wed, 17 Jul 2024 01:55:19 -0700 [thread overview]
Message-ID: <0000000000002a80cf061d6d9f16@google.com> (raw)
In-Reply-To: <0000000000000346a6061cc5b897@google.com>
syzbot has found a reproducer for the following issue on:
HEAD commit: 58f9416d413a Merge branch 'ice-support-to-dump-phy-config-..
git tree: net-next
console+strace: https://syzkaller.appspot.com/x/log.txt?x=14cae9e9980000
kernel config: https://syzkaller.appspot.com/x/.config?x=db697e01efa9d1d7
dashboard link: https://syzkaller.appspot.com/bug?extid=1a797e1c81be78a2ace7
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=152be1fd980000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16446b4e980000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/3fb480f5ebf6/disk-58f9416d.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1a62eb04b3aa/vmlinux-58f9416d.xz
kernel image: https://storage.googleapis.com/syzbot-assets/67d14a897f84/bzImage-58f9416d.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+1a797e1c81be78a2ace7@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1743 cfg80211_combine_bsses net/wireless/scan.c:1743 [inline]
WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1743 __cfg80211_bss_update+0x1b4a/0x2170 net/wireless/scan.c:1983
Modules linked in:
CPU: 1 PID: 24 Comm: ksoftirqd/1 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:cfg80211_combine_bsses net/wireless/scan.c:1743 [inline]
RIP: 0010:__cfg80211_bss_update+0x1b4a/0x2170 net/wireless/scan.c:1983
Code: e1 07 fe c1 38 c1 0f 8c 44 fb ff ff 48 8b 7c 24 70 e8 ba 04 24 f7 e9 35 fb ff ff e8 80 e6 bd f6 90 0f 0b 90 e9 bb fb ff ff 90 <0f> 0b 90 48 89 ef e8 7b 9a de f9 84 c0 0f 84 9f 00 00 00 e8 5e e6
RSP: 0018:ffffc900001e6db8 EFLAGS: 00010287
RAX: ffff888024282410 RBX: ffff888024282810 RCX: dffffc0000000000
RDX: ffff8880176f8000 RSI: 0000000000000000 RDI: 0000000000000006
RBP: ffff88802a031810 R08: ffffffff8ad83d6b R09: 0245006400000000
R10: 0000505050505050 R11: 0003000000000000 R12: ffff88802a031800
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888024282800
FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000066ab50 CR3: 000000000e132000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
cfg80211_inform_single_bss_data+0xd51/0x2030 net/wireless/scan.c:2331
cfg80211_inform_bss_data+0x3dd/0x5a70 net/wireless/scan.c:3159
cfg80211_inform_bss_frame_data+0x3bc/0x720 net/wireless/scan.c:3249
ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226
ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340
__ieee80211_rx_handle_packet net/mac80211/rx.c:5223 [inline]
ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5460
ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5483
ieee80211_rx include/net/mac80211.h:5132 [inline]
ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439
tasklet_action_common+0x321/0x4d0 kernel/softirq.c:785
handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
run_ksoftirqd+0xca/0x130 kernel/softirq.c:928
smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
</TASK>
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
prev parent reply other threads:[~2024-07-17 8:55 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-07-09 0:36 [syzbot] [wireless?] WARNING in __cfg80211_bss_update (2) syzbot
2024-07-17 8:55 ` syzbot [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=0000000000002a80cf061d6d9f16@google.com \
--to=syzbot+1a797e1c81be78a2ace7@syzkaller.appspotmail.com \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=johannes@sipsolutions.net \
--cc=kuba@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-wireless@vger.kernel.org \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=syzkaller-bugs@googlegroups.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.