Re: [syzbot] [wireless?] general protection fault in cfg80211_mlme_deauth
From: Edward Adam Davis
Date: Tue Apr 08 2025 - 21:31:35 EST
#syz test
diff --git a/net/wireless/sme.c b/net/wireless/sme.c
index cf998500a965..b983faa5bbf1 100644
--- a/net/wireless/sme.c
+++ b/net/wireless/sme.c
@@ -269,6 +269,16 @@ void cfg80211_conn_work(struct work_struct *work)
memcpy(bssid_buf, wdev->conn->params.bssid, ETH_ALEN);
bssid = bssid_buf;
}
+
+ if (wdev->conn->state == CFG80211_CONN_ASSOC_FAILED) {
+ printk("bssid: %p, pbssid: %p, dis bssid: %p, connected: %d, %s\n",
+ wdev->conn->bssid, wdev->conn->params.bssid,
+ wdev->disconnect_bssid, wdev->connected, __func__);
+ BUG_ON(!wdev->conn->bssid ||
+ !wdev->conn->params.bssid ||
+ !wdev->disconnect_bssid);
+ }
+
treason = NL80211_TIMEOUT_UNSPECIFIED;
if (cfg80211_conn_do_work(wdev, &treason)) {
struct cfg80211_connect_resp_params cr;
@@ -411,6 +421,8 @@ bool cfg80211_sme_rx_assoc_resp(struct wireless_dev *wdev, u16 status)
return true;
}
+ printk("bssid: %p, pbssid: %p, dis bssid: %p, %s\n",
+ wdev->conn->bssid, wdev->conn->params.bssid, wdev->disconnect_bssid, __func__);
wdev->conn->state = CFG80211_CONN_ASSOC_FAILED;
schedule_work(&rdev->conn_work);
return false;