syzbot


WARNING in sta_info_insert_rcu (4)

Status: upstream: reported C repro on 2024/11/18 16:56
Subsystems: wireless
[Documentation on labels]
Reported-by: syzbot+8b512026a7ec10dcbdd9@syzkaller.appspotmail.com
Fix commit: d1b1a5eb27c4 wifi: mac80211: drop invalid source address OCB frames
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce], missing on: [ci-qemu-native-arm64-kvm ci-qemu2-riscv64 ci-upstream-gce-arm64 ci2-upstream-usb]
First crash: 225d, last: 9d06h
Discussions (10)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 5.4 4/7] wifi: mac80211: drop invalid source address OCB frames 1 (1) 2025/06/24 04:13
[PATCH AUTOSEL 5.10 5/8] wifi: mac80211: drop invalid source address OCB frames 1 (1) 2025/06/24 04:13
[PATCH AUTOSEL 5.15 07/11] wifi: mac80211: drop invalid source address OCB frames 1 (1) 2025/06/24 04:12
[PATCH AUTOSEL 6.1 11/15] wifi: mac80211: drop invalid source address OCB frames 1 (1) 2025/06/24 04:12
[PATCH AUTOSEL 6.6 14/18] wifi: mac80211: drop invalid source address OCB frames 1 (1) 2025/06/24 04:12
[PATCH AUTOSEL 6.12 15/19] wifi: mac80211: drop invalid source address OCB frames 1 (1) 2025/06/24 04:11
[PATCH AUTOSEL 6.15 16/20] wifi: mac80211: drop invalid source address OCB frames 1 (1) 2025/06/24 04:11
[PATCH wireless v2] wifi: mac80211: drop invalid source address OCB frames 1 (2) 2025/06/16 15:45
[syzbot] [wireless?] WARNING in sta_info_insert_rcu (4) 0 (4) 2025/06/16 15:18
[PATCH] wifi: mac80211: drop invalid source address OCB frames 1 (2) 2025/06/16 14:02
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in sta_info_insert_rcu C 1648 843d 1737d 0/1 upstream: reported C repro on 2020/09/24 11:41
linux-5.15 WARNING in sta_info_insert_rcu missing-backport origin:lts-only C inconclusive 5 27d 697d 0/3 upstream: reported C repro on 2023/07/31 21:20
upstream WARNING in sta_info_insert_rcu (3) wireless C done 6 672d 713d 23/29 fixed on 2023/10/12 12:48
linux-4.14 WARNING in sta_info_insert_rcu C 13 859d 1734d 0/1 upstream: reported C repro on 2020/09/27 22:10
linux-6.1 WARNING in sta_info_insert_rcu origin:upstream C done 1 684d 684d 3/3 fixed on 2023/10/05 17:16
upstream WARNING in sta_info_insert_rcu (2) wireless 1 1093d 1089d 0/29 auto-obsoleted due to no activity on 2022/10/28 19:30
upstream WARNING in sta_info_insert_rcu C done done 2533 1300d 1737d 20/29 fixed on 2022/03/08 16:11
Last patch testing requests (4)
Created Duration User Patch Repo Result
2025/06/16 15:18 21m johannes@sipsolutions.net patch upstream OK log
2025/06/16 13:40 9m johannes@sipsolutions.net patch upstream error
2025/04/28 22:29 13m retest repro upstream report log
2025/02/17 03:03 15m retest repro upstream report log

Sample crash report:
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3069 at net/mac80211/sta_info.c:756 sta_info_insert_check net/mac80211/sta_info.c:755 [inline]
WARNING: CPU: 0 PID: 3069 at net/mac80211/sta_info.c:756 sta_info_insert_rcu+0x32e/0x1940 net/mac80211/sta_info.c:960
Modules linked in:
CPU: 0 UID: 0 PID: 3069 Comm: kworker/u4:11 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:sta_info_insert_check net/mac80211/sta_info.c:755 [inline]
RIP: 0010:sta_info_insert_rcu+0x32e/0x1940 net/mac80211/sta_info.c:960
Code: 00 00 00 e8 24 83 e0 f6 84 c0 49 bc 00 00 00 00 00 fc ff df 0f 84 bd 00 00 00 e8 7d 5b f9 f6 e9 16 01 00 00 e8 73 5b f9 f6 90 <0f> 0b 90 41 be ea ff ff ff 4c 8b 3c 24 4c 89 fe e8 4d c8 ff ff e8
RSP: 0018:ffffc9000d71f928 EFLAGS: 00010293
RAX: ffffffff8ac6965d RBX: 000000000000ffff RCX: ffff888037c72440
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
RBP: 00000000ffeeffff R08: ffff888047885737 R09: 1ffff11008f10ae6
R10: dffffc0000000000 R11: ffffed1008f10ae7 R12: 00000000ffffffff
R13: dffffc0000000000 R14: ffff888047884d80 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff88808d6c2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000100 CR3: 000000003f23f000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ieee80211_ocb_finish_sta net/mac80211/ocb.c:102 [inline]
 ieee80211_ocb_work+0x31f/0x580 net/mac80211/ocb.c:136
 cfg80211_wiphy_work+0x2dc/0x460 net/wireless/core.c:435
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xadb/0x17a0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (27):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/18 19:54 upstream 5723cc3450bc f41472b0 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/01/16 09:35 upstream 619f0b6fad52 968edaf4 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in sta_info_insert_rcu
2025/06/18 21:17 upstream 52da431bf03b ed3e87f7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/06/16 11:15 upstream e04c78d86a96 5f4b362d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/06/09 07:40 upstream 939f15e640f1 4826c28e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/05/28 23:34 upstream feacb1774bd5 3d2f584d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/05/23 09:28 upstream 5cdb2c77c4c3 fa44301a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/05/18 18:34 upstream 5723cc3450bc f41472b0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/04/14 22:09 upstream 834a4a689699 0bd6db41 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/04/07 07:07 upstream 0af2f6be1b42 1c65791e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/04/04 23:21 upstream e48e99b6edf4 c53ea9c9 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/04/01 08:19 upstream 609706855d90 36d76a97 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/03/27 21:31 upstream 1a9239bb4253 928390c4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/03/19 20:12 upstream 81e4f8d68c66 8d0a2921 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/03/16 04:17 upstream eb88e6bfbc0a e2826670 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/03/14 16:39 upstream e3a854b577cb e2826670 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/03/11 11:38 upstream 4d872d51bc9d 16256247 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/03/09 11:36 upstream b7c90e3e717a 163f510d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/02/03 03:02 upstream 69e858e0b8b2 568559e4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/01/28 05:16 upstream 805ba04cb7cc 18070896 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/01/25 23:23 upstream 405057718a1f 9fbd772e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/01/25 11:09 upstream b46c89c08f41 9fbd772e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/01/16 09:01 upstream 619f0b6fad52 968edaf4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in sta_info_insert_rcu
2025/01/12 17:44 upstream b62cef9a5c67 6dbc6a9b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/01/11 07:32 upstream 77a903cd8e5a 6dbc6a9b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2024/11/14 16:56 upstream 0a9b9d17f3a7 77f3eeb7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in sta_info_insert_rcu
2025/03/09 07:10 net 505ead7ab77f 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in sta_info_insert_rcu
* Struck through repros no longer work on HEAD.