I observe the same callstack on Ubuntu 20.04.06 LTS after trying to enable monitor mode:
sudo ip link set dev wlp82s0 down
sudo iwconfig wlp82s0 mode monitor
// Callstack visible after that command
sudo ip link set dev wlp82s0 up
When I call those commands again then callstack is not seen, but monitor mode not works and I am unable to do wifi sniffing. Wifi sniffing stopped working today. Reboot of PC does not help.
PC: Lenovo P53
Info about wifi driver:
$ cat dmesg.txt | grep -E "wifi|wlp82s0"
[ 29.785225] iwlwifi 0000:52:00.0: enabling device (0000 -> 0002)
[ 29.807499] iwlwifi 0000:52:00.0: api flags index 2 larger than supported by driver
[ 29.807514] iwlwifi 0000:52:00.0: TLV_FW_FSEQ_VERSION: FSEQ Version: 89.3.35.37
[ 29.807735] iwlwifi 0000:52:00.0: loaded firmware version 66.f1c864e0.0 cc-a0-66.ucode op_mode iwlmvm
[ 29.971841] iwlwifi 0000:52:00.0: BIOS contains WGDS but no WRDS
[ 29.971851] iwlwifi 0000:52:00.0: Detected Intel(R) Wi-Fi 6 AX200 160MHz, REV=0x340
[ 30.131778] iwlwifi 0000:52:00.0: Detected RF HR B3, rfid=0x10a100
[ 30.201478] iwlwifi 0000:52:00.0: base HW address: f8:e4:e3:d9:d2:ee
[ 30.578367] iwlwifi 0000:52:00.0 wlp82s0: renamed from wlan0
Hello,
I observe the same callstack on Ubuntu 20.04.06 LTS after trying to enable monitor mode:
sudo ip link set dev wlp82s0 down
sudo iwconfig wlp82s0 mode monitor
// Callstack visible after that command
sudo ip link set dev wlp82s0 up
When I call those commands again then callstack is not seen, but monitor mode not works and I am unable to do wifi sniffing. Wifi sniffing stopped working today. Reboot of PC does not help.
PC: Lenovo P53 FSEQ_VERSION: FSEQ Version: 89.3.35.37
Info about wifi driver:
$ cat dmesg.txt | grep -E "wifi|wlp82s0"
[ 29.785225] iwlwifi 0000:52:00.0: enabling device (0000 -> 0002)
[ 29.807499] iwlwifi 0000:52:00.0: api flags index 2 larger than supported by driver
[ 29.807514] iwlwifi 0000:52:00.0: TLV_FW_
[ 29.807735] iwlwifi 0000:52:00.0: loaded firmware version 66.f1c864e0.0 cc-a0-66.ucode op_mode iwlmvm
[ 29.971841] iwlwifi 0000:52:00.0: BIOS contains WGDS but no WRDS
[ 29.971851] iwlwifi 0000:52:00.0: Detected Intel(R) Wi-Fi 6 AX200 160MHz, REV=0x340
[ 30.131778] iwlwifi 0000:52:00.0: Detected RF HR B3, rfid=0x10a100
[ 30.201478] iwlwifi 0000:52:00.0: base HW address: f8:e4:e3:d9:d2:ee
[ 30.578367] iwlwifi 0000:52:00.0 wlp82s0: renamed from wlan0
callstack: ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= === linux-hwe- 5.15-x48ylI/ linux-hwe- 5.15-5. 15.0/drivers/ net/wireless/ intel/iwlwifi/ mvm/mac- ctxt.c: 669:22 20QNS1T600, BIOS N2NET38W (1.23 ) 06/04/2020 lvl+0x4a/ 0x63 0x10/0x16 0x9/0x49 handle_ shift_out_ of_bounds. cold+0x61/ 0x10e mac_ctxt_ cmd_listener. cold+0x20/ 0x32 [iwlmvm] mac_ctx_ send+0x8b/ 0xd0 [iwlmvm] mac_ctxt_ add+0x44/ 0xf0 [iwlmvm] mac_add_ interface+ 0x133/0x350 [iwlmvm] interface+ 0x47/0x100 [mac80211] add_virtual_ monitor+ 0x11a/0x330 [mac80211] do_open+ 0x867/0x970 [mac80211] check_concurren t_iface+ 0x158/0x1d0 [mac80211] open+0x70/ 0x90 [mac80211] 0xe5/0x1a0 flags+0x190/ 0x200 flags+0x26/ 0x70 0x907/0xc40 parse+0x4c/ 0x1a0 newlink+ 0x593/0xa10 0x41/0x60 node_track_ caller+ 0x1d0/0x4e0 head+0x69/ 0x80 sock_rcv_ skb+0x2c/ 0x50 deliver_ tap+0x3d/ 0x230 trim_cap+ 0xc1/0x230 tail+0x48/ 0x60 readable+ 0x4b/0x80 sendskb+ 0x3f/0x60 unicast+ 0x21b/0x250 0x37c/0x400 resched+ 0x19/0x40 alloc_trace+ 0x15a/0x420 0x49/0x70 rcv_msg+ 0x15d/0x410 resched+ 0x19/0x40 isra.0+ 0x130/0x130 rcv_skb+ 0x53/0x100 rcv+0x15/ 0x20 unicast+ 0x1ab/0x250 sendmsg+ 0x23e/0x4a0 0x66/0x70 sendmsg+ 0x21c/0x290 from_user+ 0x5c/0x90 sendmsg+ 0x81/0xc0 no_expire+ 0x4c/0x260 resched+ 0x19/0x40 file_free+ 0x54/0x60 0x62/0xc0 mm_fault+ 0xd9/0x2c0 sendmsg+ 0x1f/0x30 64+0x59/ 0xc0 exit_to_ user_mode+ 0x9/0x20 exit+0x1d/ 0x30 fault+0x89/ 0x170 64_after_ hwframe+ 0x61/0xcb aee5a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ===
[ 502.483818] =======
[ 502.483829] UBSAN: shift-out-of-bounds in /build/
[ 502.483841] shift exponent 65535 is too large for 64-bit type 'long unsigned int'
[ 502.483851] CPU: 0 PID: 5401 Comm: ip Tainted: P OE 5.15.0-69-generic #76~20.04.1-Ubuntu
[ 502.483862] Hardware name: LENOVO 20QNS1T600/
[ 502.483866] Call Trace:
[ 502.483871] <TASK>
[ 502.483877] dump_stack_
[ 502.483890] dump_stack+
[ 502.483896] ubsan_epilogue+
[ 502.483909] __ubsan_
[ 502.483929] iwl_mvm_
[ 502.484008] iwl_mvm_
[ 502.484061] iwl_mvm_
[ 502.484108] iwl_mvm_
[ 502.484153] drv_add_
[ 502.484266] ieee80211_
[ 502.484392] ieee80211_
[ 502.484511] ? ieee80211_
[ 502.484629] ieee80211_
[ 502.484744] __dev_open+
[ 502.484757] __dev_change_
[ 502.484770] dev_change_
[ 502.484781] do_setlink+
[ 502.484796] ? __nla_validate_
[ 502.484811] __rtnl_
[ 502.484822] ? __nla_reserve+
[ 502.484832] ? __kmalloc_
[ 502.484843] ? skb_free_
[ 502.484854] ? security_
[ 502.484868] ? netlink_
[ 502.484876] ? sk_filter_
[ 502.484889] ? skb_queue_
[ 502.484898] ? sock_def_
[ 502.484905] ? __netlink_
[ 502.484913] ? netlink_
[ 502.484924] ? rtnl_getlink+
[ 502.484950] ? __cond_
[ 502.484963] ? kmem_cache_
[ 502.484972] rtnl_newlink+
[ 502.484982] rtnetlink_
[ 502.484994] ? __cond_
[ 502.485004] ? rtnl_calcit.
[ 502.485015] netlink_
[ 502.485026] rtnetlink_
[ 502.485034] netlink_
[ 502.485043] netlink_
[ 502.485055] sock_sendmsg+
[ 502.485067] ____sys_
[ 502.485076] ? copy_msghdr_
[ 502.485091] ___sys_
[ 502.485103] ? mntput_
[ 502.485112] ? __cond_
[ 502.485123] ? security_
[ 502.485132] ? call_rcu+0xa8/0x230
[ 502.485144] ? __fput+0x127/0x280
[ 502.485158] __sys_sendmsg+
[ 502.485171] ? handle_
[ 502.485181] __x64_sys_
[ 502.485191] do_syscall_
[ 502.485203] ? irqentry_
[ 502.485211] ? irqentry_
[ 502.485218] ? exc_page_
[ 502.485225] entry_SYSCALL_
[ 502.485235] RIP: 0033:0x7f342cf485e7
[ 502.485245] Code: 64 89 02 48 c7 c0 ff ff ff ff eb bb 0f 1f 80 00 00 00 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 502.485252] RSP: 002b:00007ffe89
[ 502.485263] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f342cf485e7
[ 502.485269] RDX: 0000000000000000 RSI: 00007ffe89aee620 RDI: 0000000000000003
[ 502.485273] RBP: 000000006437ce8c R08: 0000000000000001 R09: 000000000000007c
[ 502.485278] R10: 00007f342d014be0 R11: 0000000000000246 R12: 0000000000000001
[ 502.485283] R13: 00007ffe89aeee00 R14: 00007ffe89aee6f0 R15: 000055702574a020
[ 502.485295] </TASK>
[ 502.485299] =======