From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CC8C031077A for ; Sat, 27 Jun 2026 17:14:13 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.66 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782580455; cv=none; b=Tpe3wbxxi6Jr7dkxhFysCvYnY+rxWG7WkI09/wSQcNHoCWJVSEyu6Eb6cFQactLcMiS6/fJbbHWK6PZ0d6zQSdSh9jqL1M56T9rs451mGouEM8Lc8+UkgrgeXdO8pPeG/+d2mHPdagWU0FZHKQYUXzQkMORvFKYBBwookpjDw8I= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782580455; c=relaxed/simple; bh=QDFyZHocWkxENJp1COzHVpR5fHLV0dBsGKtbxKxkCP0=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=mKfF2w4SMtkwLRsoonAz4ogg1p7VW+i1JE1GBlfH33tYcGRhfBRf5BfGyxTMVLpJLPltXO4XD5eSgMIVPO0OJpBzraTX2o/HF78gqoTYbPW60dV9w/zFLl/7cowyxI+I05GTZgOjuGb1KZRy1XRuW+tVDYoaN3KCgcr/nUJCe68= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=mag9dObb; arc=none smtp.client-ip=209.85.128.66 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="mag9dObb" Received: by mail-wm1-f66.google.com with SMTP id 5b1f17b1804b1-493a548fc99so733975e9.2 for ; Sat, 27 Jun 2026 10:14:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1782580452; x=1783185252; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=QDFyZHocWkxENJp1COzHVpR5fHLV0dBsGKtbxKxkCP0=; b=mag9dObbcEBoH1+H6DWdvzW0foyFHxzX6lqKXY/wEr/8Do6MbhaBhMq8pesvRNxrKh 44zIQuyFtCpcQyLmymevnkQBDbfBV/TtXbatsCI1XzxTsBl3IRlhIyCdDLR+uhf6wCpl d2qu+B7zg2a0va5B7BnNfVE6Ti3K7Lw9q+woS0mmUOiR2Z/h/peXuJTg9144rnsueaWf GkkKzZ/as1qiE+uTSNm7GDWUTt8U+BZIHOQPpVKupKki55+WgMFJhCbEd4SsfWVj5POi edlH9XUJDEidgh7EopK2Wi3O3Bt1DTRZGpmdLnp5bOIV8SA/ueAxX7u52XtTc0KQsBkd MNiQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782580452; x=1783185252; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=QDFyZHocWkxENJp1COzHVpR5fHLV0dBsGKtbxKxkCP0=; b=sRktEumnZLIaEDZj06L16Msi/BTcMM9RHLRx3bLfNu84FerxDKOl0QiV8DSatzOEpY Q+jDdg4yAiHiP6Cf4RUNW6V1keUIb/XjAwX7uvqFldhnw3CGNq9ZHB7rMDBCp6Q1zehF 5K3+WDMwsv3LkTW9LmjPQlAvnr3jdDJeGJ6ONypXqSWhg6ft1KQQbmLP18jOVjc80M6Q BKa2MuYoH3iPsgeuIFarkJooz1DvYWZ3LpNuSinJz5VGLxYG/XmxOvF1QsGP0kqBsfcp JKwPcApt2CG7X9by14WxCln1lv5eCr0TgGmlK//YBRwaWGSIRewiA8uaC012lLfVhyqs h8Zw== X-Forwarded-Encrypted: i=1; AFNElJ9tNNOC5UaxZb1ciRMZ5xG0R6yRqG8FjuhlGbS+10NcjYpiFsX0eIvMSF1StiCGnXgCcpx8EuPMTaOVLBU=@vger.kernel.org X-Gm-Message-State: AOJu0YzyZqzHLtM024+q/Scz5vAczHyF64O5ZBzqqeNsOZlmxkBfQJiT Oqk4pIMSempmHt+n1OTtfaMLBwra5cz1Pgyt/8Y+kVujj9uJxihiHH5Z X-Gm-Gg: AfdE7cns/0nELwqOwcJX9v3Y9RZ2OaotXfAsfmhaLXsHHk51yIE7sxx6AfhxoRWv80C BCMWatHb2UyNh+hpFH88QOl6oMgW76SUIiyagIGH6qL2xJgA/W0p7aZXsKomZE+rm3HuFiZcoHy fDAbIMQJKMoodG8LTnvWOe9WObhMuCburyzie2A8AmaR+JsrewKBA8z9luAXnmLTz3FODMqZ5mJ 5qV/XOLYeZbrByP21iG3Xv5EZazXREcafxNz8BhgmFxB/TrsPoPaRwN/Z0e93b7p9tdaB+O5NQY 3L6unNYuJCVzcaqo90WLjOMIvfHzfABwaPGB2tYzAeo2XKHXoiinegIhqcfwN2ON58qnkE5dOQI JH+mxlJ3q6ds/KnlOBWSLKFPomQaKcafoWhPr2CDEMqeEGO6CGPp8oBa3boGbu1SxuPkyC5ZQzJ IRp+dB0Gja/a4= X-Received: by 2002:a05:600c:8411:b0:492:3172:bcf0 with SMTP id 5b1f17b1804b1-4926683880emr154263455e9.3.1782580452046; Sat, 27 Jun 2026 10:14:12 -0700 (PDT) Received: from fedora ([212.253.209.56]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-46c221d9371sm36799668f8f.21.2026.06.27.10.14.10 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 27 Jun 2026 10:14:11 -0700 (PDT) From: Serhat Kumral To: ghwns6743@gmail.com Cc: benjamin.berg@intel.com, johannes@sipsolutions.net, linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org, miriam.rachel.korenblit@intel.com, serhatkumral1@gmail.com, syzbot+21629c14aa749636db9d@syzkaller.appspotmail.com Subject: Re: [PATCH wireless] wifi: mac80211_hwsim: avoid division by zero in mac80211_hwsim_write_tsf() Date: Fri, 26 Jun 2026 10:37:38 +0300 Message-ID: <20260626073738.13014-1-serhatkumral1@gmail.com> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260627134827.12531-1-ghwns6743@gmail.com> References: <20260627134827.12531-1-ghwns6743@gmail.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Thanks a lot for the independent confirmation and for tracking down the exact mechanism -- the OOB read landing inside struct mac80211_hwsim_data (via sband->bitrates = data->rates) explains precisely why KASAN stays quiet. Appreciate you sharing the reproducer too. On hardening ieee80211_get_tx_rate() centrally: I'd defer to Johannes on the preferred direction, since it touches callers across several drivers (ath5k, adm8211, and likely others) that currently dereference the return value without a NULL check -- any change there needs an audit of all of them, which felt out of scope for this fix. If it's considered worth doing, I'd be happy to help with that audit.