BUG: sleeping function called from invalid context in corrupted

BUG: sleeping function called from invalid context in corrupted

Status: fixed on 2021/03/10 01:49
Subsystems: wireless
[Documentation on labels]
Reported-by: syzbot+b7aeb9318541a1c709f1@syzkaller.appspotmail.com
Fix commit: 7bc40aedf24d mac80211: free sta in sta_info_insert_finish() on errors
First crash: 1532d, last: 1506d

Cause bisection: introduced by (bisect log) :
commit dcd479e10a0510522a5d88b29b8f79ea3467d501
Author: Johannes Berg <johannes.berg@intel.com>
Date: Fri Oct 9 12:17:11 2020 +0000

mac80211: always wind down STA state

Crash: BUG: sleeping function called from invalid context in sta_info_move_state (log)
Repro: syz .config

▶ ▼ Discussions (9)

Title	Replies (including bot)	Last reply
[PATCH 5.4 000/158] 5.4.80-rc1 review	166 (166)	2020/12/11 20:25
[PATCH 4.19 00/91] 4.19.160-rc1 review	98 (98)	2020/11/24 22:52
[PATCH 5.9 000/252] 5.9.11-rc1 review	259 (259)	2020/11/24 20:28
[PATCH 4.4 00/38] 4.4.246-rc1 review	43 (43)	2020/11/24 19:53
[PATCH 4.9 00/47] 4.9.246-rc1 review	51 (51)	2020/11/24 08:31
[PATCH 4.14 00/60] 4.14.209-rc1 review	63 (63)	2020/11/24 07:21
[PATCH] mac80211: free sta in sta_info_insert_finish() on errors	1 (1)	2020/11/12 10:22
[PATCH] mac80211: wind down station state earlier	2 (2)	2020/11/12 08:26
BUG: sleeping function called from invalid context in corrupted	0 (1)	2020/11/09 13:23

▶ ▼ Similar bugs (2)

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	BUG: sleeping function called from invalid context in corrupted (2) net	C	done		4	953d	953d	0/28	auto-obsoleted due to no activity on 2023/04/21 20:05
linux-4.19	BUG: sleeping function called from invalid context in corrupted	C		done	2	1515d	1516d	1/1	fixed on 2020/12/25 08:46

Sample crash report:

BUG: sleeping function called from invalid context at net/mac80211/sta_info.c:1962

Crashes (18):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2020/11/13 22:54	upstream	585e5b17b92d	e1140d25	.config	console log	report	syz				ci-upstream-kasan-gce-smack-root
2020/11/11 19:45	upstream	eccc87672492	cca87986	.config	console log	report	syz				ci-upstream-kasan-gce-smack-root
2020/11/11 04:12	upstream	e2f0c565ec70	cca87986	.config	console log	report	syz				ci-upstream-kasan-gce-smack-root
2020/11/07 02:39	upstream	bf3e76289cd2	64069d48	.config	console log	report	syz				ci-upstream-kasan-gce-smack-root
2020/11/12 21:51	net-old	52755b66ddce	77a55c8e	.config	console log	report	syz				ci-upstream-net-this-kasan-gce
2020/11/07 05:10	net-old	bf3e76289cd2	64069d48	.config	console log	report	syz				ci-upstream-net-this-kasan-gce
2020/12/03 12:50	bpf-next	97306be45fbe	e6b0d314	.config	console log	report	syz				ci-upstream-bpf-next-kasan-gce
2020/12/03 12:02	bpf-next	97306be45fbe	e6b0d314	.config	console log	report	syz				ci-upstream-bpf-next-kasan-gce
2020/12/01 17:01	bpf-next	df5422851559	07bfe8a5	.config	console log	report	syz				ci-upstream-bpf-next-kasan-gce
2020/12/01 15:24	bpf-next	df5422851559	07bfe8a5	.config	console log	report	syz				ci-upstream-bpf-next-kasan-gce
2020/11/27 15:14	bpf-next	830382e4ccb5	5018c946	.config	console log	report	syz				ci-upstream-bpf-next-kasan-gce
2020/11/25 03:11	bpf-next	1c26ac6ab3ce	e34b696c	.config	console log	report	syz				ci-upstream-bpf-next-kasan-gce
2020/11/19 09:42	bpf-next	d05512618056	0767f13f	.config	console log	report	syz				ci-upstream-bpf-next-kasan-gce
2020/11/16 08:55	bpf-next	2d38c5802f46	1bf9a662	.config	console log	report	syz				ci-upstream-bpf-next-kasan-gce
2020/11/15 10:32	bpf-next	2d38c5802f46	1bf9a662	.config	console log	report	syz				ci-upstream-bpf-next-kasan-gce
2020/11/14 11:26	net-next-old	774626fa440e	1bf9a662	.config	console log	report	syz				ci-upstream-net-kasan-gce
2020/11/16 03:34	linux-next	92edc4aef867	1bf9a662	.config	console log	report	syz				ci-upstream-linux-next-kasan-gce-root
2020/11/11 08:21	linux-next	6dd65e60af98	cca87986	.config	console log	report	syz				ci-upstream-linux-next-kasan-gce-root

* ~~Struck through~~ repros no longer work on HEAD.