syzbot
WARNING in ieee80211_ocb_rx_no_sta (2)
Status:
fixed on 2026/01/26 05:07
Subsystems:
wireless
[Documentation on labels]
Reported-by: syzbot+b364457b2d1d4e4a3054@syzkaller.appspotmail.com
Fix commit:
ff4071c60018
wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
First crash: 255d, last: 236d
▶
▼
Last patch testing requests (7)
Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 15 at net/mac80211/ocb.c:63 ieee80211_ocb_rx_no_sta+0x511/0x5d0 net/mac80211/ocb.c:63
Modules linked in:
CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:ieee80211_ocb_rx_no_sta+0x511/0x5d0 net/mac80211/ocb.c:63
Code: 48 0a 00 00 48 c7 c7 40 88 8a 8c 48 89 de 4c 89 fa 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 25 4c f6 e8 00 a7 e4 f6 90 <0f> 0b 90 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 00 00 00
RSP: 0018:ffffc9000041f470 EFLAGS: 00010246
RAX: ffffffff8adb6c60 RBX: ffff8880596e0d80 RCX: ffff88801ab1c900
RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8adb6809
R10: 000000000000000c R11: 0000000000000100 R12: ffffffff8adb6809
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88804464b40a
FS: 0000000000000000(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000561f9cf3b950 CR3: 000000004130f000 CR4: 0000000000352ef0
Call Trace:
<TASK>
ieee80211_accept_frame net/mac80211/rx.c:4432 [inline]
ieee80211_prepare_and_rx_handle+0x2555/0x6770 net/mac80211/rx.c:4994
__ieee80211_rx_handle_packet net/mac80211/rx.c:5304 [inline]
ieee80211_rx_list+0x2294/0x2c10 net/mac80211/rx.c:5451
ieee80211_rx_napi+0x1a8/0x3d0 net/mac80211/rx.c:5474
ieee80211_rx include/net/mac80211.h:5214 [inline]
ieee80211_handle_queued_frames+0xe8/0x1f0 net/mac80211/main.c:453
tasklet_action_common+0x36c/0x580 kernel/softirq.c:925
handle_softirqs+0x286/0x870 kernel/softirq.c:622
run_ksoftirqd+0x9b/0x100 kernel/softirq.c:1063
smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
</TASK>
* Struck through repros no longer work on HEAD.