WARNING in sta_info_insert_rcu

Status: upstream: reported C repro on 2023/07/31 21:20
Bug presence: origin:lts-only
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+af22409d8084f9c4bac2@syzkaller.appspotmail.com
First crash: 1089d, last: 47d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2024/01/16 linux-5.15.y (ToT) ddcaf4999061 C [report] WARNING in sta_info_insert_rcu
2024/01/16 upstream (ToT) 052d534373b7 C Didn't crash
▶ ▼ Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in sta_info_insert_rcu -1 C 1648 1236d 2130d 0/1 upstream: reported C repro on 2020/09/24 11:41
upstream WARNING in sta_info_insert_rcu (3) wireless -1 C done 6 1065d 1106d 23/29 fixed on 2023/10/12 12:48
linux-4.14 WARNING in sta_info_insert_rcu -1 C 13 1252d 2126d 0/1 upstream: reported C repro on 2020/09/27 22:10
linux-6.1 WARNING in sta_info_insert_rcu origin:upstream -1 C done 1 1077d 1077d 3/3 fixed on 2023/10/05 17:16
upstream WARNING in sta_info_insert_rcu (2) wireless -1 1 1486d 1482d 0/29 auto-obsoleted due to no activity on 2022/10/28 19:30
upstream WARNING in sta_info_insert_rcu (4) wireless -1 C 27 401d 614d 29/29 fixed on 2025/08/06 17:37
upstream WARNING in sta_info_insert_rcu -1 C done done 2533 1693d 2130d 20/29 fixed on 2022/03/08 16:11
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/06/08 13:51 2h01m retest repro linux-5.15.y report log
2026/06/08 13:51 30m retest repro linux-5.15.y report log
2026/06/08 13:51 22m retest repro linux-5.15.y report log
2026/05/19 01:09 20m retest repro linux-5.15.y report log
2026/03/26 01:31 23m retest repro linux-5.15.y report log
2026/03/11 12:24 19m retest repro linux-5.15.y report log
2026/03/11 12:24 16m retest repro linux-5.15.y report log
2026/02/25 08:27 10m retest repro linux-5.15.y report log
2026/01/14 23:10 18m retest repro linux-5.15.y report log
2025/12/31 04:02 10m retest repro linux-5.15.y report log
▶ ▼ Fix bisection attempts (6)
Created Duration User Patch Repo Result
2024/03/28 01:34 1h19m fix candidate upstream OK (0) job log
2024/02/01 15:32 1h33m fix candidate upstream error job log
2024/01/09 12:00 0m fix candidate upstream error job log
2023/12/10 11:46 1m fix candidate upstream error job log
2023/10/17 09:15 0m fix candidate upstream error job log
2023/10/15 13:44 0m bisect fix linux-5.15.y error job log

Sample crash report:
wlan1: authenticate with 08:02:11:00:00:01
------------[ cut here ]------------
WARNING: CPU: 0 PID: 7 at net/mac80211/sta_info.c:546 sta_info_insert_rcu+0x1f3/0x2140 net/mac80211/sta_info.c:723
Modules linked in:
CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 5.15.146-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Workqueue: events cfg80211_conn_work
RIP: 0010:sta_info_insert_check net/mac80211/sta_info.c:545 [inline]
RIP: 0010:sta_info_insert_rcu+0x1f3/0x2140 net/mac80211/sta_info.c:723
Code: 83 00 00 00 e8 4e 96 c4 f7 84 c0 49 bc 00 00 00 00 00 fc ff df 0f 84 a7 00 00 00 e8 67 d5 d9 f7 e9 00 01 00 00 e8 5d d5 d9 f7 <0f> 0b 41 bc ea ff ff ff 4c 8b 6c 24 10 48 8b 6c 24 08 4c 89 ee e8
RSP: 0018:ffffc90000cc7328 EFLAGS: 00010293
RAX: ffffffff89a654e3 RBX: 0000000000110308 RCX: ffff888011e4bb80
RDX: 0000000000000000 RSI: 0000000000110308 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff89a65489 R09: ffffed100fe65254
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: 0000000000000100 R14: ffff88807f328c80 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f69fef452d0 CR3: 000000002314e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 sta_info_insert+0x12/0xa0 net/mac80211/sta_info.c:736
 ieee80211_prep_connection+0x2e47/0x3870 net/mac80211/mlme.c:5380
 ieee80211_mgd_auth+0xa67/0xf00 net/mac80211/mlme.c:5525
 rdev_auth net/wireless/rdev-ops.h:458 [inline]
 cfg80211_mlme_auth+0x4de/0x7d0 net/wireless/mlme.c:273
 cfg80211_conn_do_work+0x382/0xbb0 net/wireless/sme.c:170
 cfg80211_conn_work+0x28d/0x4d0 net/wireless/sme.c:256
 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310
 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457
 kthread+0x3f6/0x4f0 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/01/15 10:17 linux-5.15.y 26c690eff0a5 551587c1 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan WARNING in sta_info_insert_rcu
2025/07/13 12:47 linux-5.15.y 2f693b607545 3cda49cf .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in sta_info_insert_rcu
2024/07/17 16:41 linux-5.15.y f45bea23c39c 215bec2d .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in sta_info_insert_rcu
2023/07/31 21:18 linux-5.15.y 09996673e313 2a0d0f29 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in sta_info_insert_rcu
2025/07/13 10:12 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in sta_info_insert_rcu
2024/10/20 04:48 linux-5.15.y 584a40a22cb9 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in sta_info_insert_rcu
2024/07/17 14:37 linux-5.15.y f45bea23c39c 215bec2d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 WARNING in sta_info_insert_rcu
* Struck through repros no longer work on HEAD.