[v5.15] WARNING in minstrel_ht_update_caps
6 views
Skip to first unread message
syzbot
Feb 24, 2025, 8:02:41 AM2/24/25
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: c16c81c81336 Linux 5.15.178
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=12953fdf980000
kernel config: https://syzkaller.appspot.com/x/.config?x=d302c69e93fb6774
dashboard link: https://syzkaller.appspot.com/bug?extid=71309069d4a84523ff89
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/267e46ee7273/disk-c16c81c8.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/944e289206cf/vmlinux-c16c81c8.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f8cadf62458e/bzImage-c16c81c8.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+713090...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 12633 at include/net/mac80211.h:6309 minstrel_ht_update_caps+0x44f/0x1760 net/mac80211/rc80211_minstrel_ht.c:1613
Modules linked in:
CPU: 1 PID: 12633 Comm: syz.0.2128 Not tainted 5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:rate_lowest_index include/net/mac80211.h:6309 [inline]
RIP: 0010:minstrel_ht_update_caps+0x44f/0x1760 net/mac80211/rc80211_minstrel_ht.c:1613
Code: 97 c8 97 f7 eb 26 e8 90 c8 97 f7 49 c1 fe 38 49 bf 00 00 00 00 00 fc ff df eb 14 e8 7b c8 97 f7 49 bf 00 00 00 00 00 fc ff df <0f> 0b 45 31 f6 4c 8b 6c 24 20 4b 8d 2c 76 49 8d 5c ad 00 48 89 d8
RSP: 0018:ffffc9000307ef70 EFLAGS: 00010283
RAX: ffffffff89e8bd15 RBX: 000000000000000c RCX: 0000000000080000
RDX: ffffc90003be3000 RSI: 0000000000000406 RDI: 0000000000000407
RBP: 0000000000000000 R08: ffffffff89e8bc29 R09: 0000000000000000
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888079b9b360
R13: 1ffff1100f37366c R14: 0b00000000000000 R15: dffffc0000000000
FS: 00007f98f63266c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3458aa CR3: 00000000604ff000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
rate_control_rate_init+0x348/0x590 net/mac80211/rate.c:62
sta_apply_auth_flags+0x1b6/0x410 net/mac80211/cfg.c:1378
sta_apply_parameters+0x152c/0x1d00 net/mac80211/cfg.c:1705
ieee80211_add_station+0x2ba/0x4b0 net/mac80211/cfg.c:1749
rdev_add_station+0xfc/0x260 net/wireless/rdev-ops.h:190
nl80211_new_station+0x1542/0x1b10 net/wireless/nl80211.c:6784
genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]
genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
genl_rcv_msg+0xfbd/0x14a0 net/netlink/genetlink.c:792
netlink_rcv_skb+0x1cf/0x410 net/netlink/af_netlink.c:2489
genl_rcv+0x24/0x40 net/netlink/genetlink.c:803
netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
netlink_unicast+0x7b6/0x980 net/netlink/af_netlink.c:1337
netlink_sendmsg+0xa30/0xd60 net/netlink/af_netlink.c:1905
sock_sendmsg_nosec net/socket.c:704 [inline]
__sock_sendmsg net/socket.c:716 [inline]
____sys_sendmsg+0x59e/0x8f0 net/socket.c:2436
___sys_sendmsg+0x252/0x2e0 net/socket.c:2490
__sys_sendmsg net/socket.c:2519 [inline]
__do_sys_sendmsg net/socket.c:2528 [inline]
__se_sys_sendmsg+0x19a/0x260 net/socket.c:2526
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f98f84bd169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f98f6326038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f98f86d5fa0 RCX: 00007f98f84bd169
RDX: 0000000000000000 RSI: 0000400000001080 RDI: 0000000000000005
RBP: 00007f98f853e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f98f86d5fa0 R15: 00007fffe85d3f18
</TASK>
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: c16c81c81336 Linux 5.15.178
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=12953fdf980000
kernel config: https://syzkaller.appspot.com/x/.config?x=d302c69e93fb6774
dashboard link: https://syzkaller.appspot.com/bug?extid=71309069d4a84523ff89
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/267e46ee7273/disk-c16c81c8.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/944e289206cf/vmlinux-c16c81c8.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f8cadf62458e/bzImage-c16c81c8.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+713090...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 12633 at include/net/mac80211.h:6309 minstrel_ht_update_caps+0x44f/0x1760 net/mac80211/rc80211_minstrel_ht.c:1613
Modules linked in:
CPU: 1 PID: 12633 Comm: syz.0.2128 Not tainted 5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:rate_lowest_index include/net/mac80211.h:6309 [inline]
RIP: 0010:minstrel_ht_update_caps+0x44f/0x1760 net/mac80211/rc80211_minstrel_ht.c:1613
Code: 97 c8 97 f7 eb 26 e8 90 c8 97 f7 49 c1 fe 38 49 bf 00 00 00 00 00 fc ff df eb 14 e8 7b c8 97 f7 49 bf 00 00 00 00 00 fc ff df <0f> 0b 45 31 f6 4c 8b 6c 24 20 4b 8d 2c 76 49 8d 5c ad 00 48 89 d8
RSP: 0018:ffffc9000307ef70 EFLAGS: 00010283
RAX: ffffffff89e8bd15 RBX: 000000000000000c RCX: 0000000000080000
RDX: ffffc90003be3000 RSI: 0000000000000406 RDI: 0000000000000407
RBP: 0000000000000000 R08: ffffffff89e8bc29 R09: 0000000000000000
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888079b9b360
R13: 1ffff1100f37366c R14: 0b00000000000000 R15: dffffc0000000000
FS: 00007f98f63266c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3458aa CR3: 00000000604ff000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
rate_control_rate_init+0x348/0x590 net/mac80211/rate.c:62
sta_apply_auth_flags+0x1b6/0x410 net/mac80211/cfg.c:1378
sta_apply_parameters+0x152c/0x1d00 net/mac80211/cfg.c:1705
ieee80211_add_station+0x2ba/0x4b0 net/mac80211/cfg.c:1749
rdev_add_station+0xfc/0x260 net/wireless/rdev-ops.h:190
nl80211_new_station+0x1542/0x1b10 net/wireless/nl80211.c:6784
genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]
genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
genl_rcv_msg+0xfbd/0x14a0 net/netlink/genetlink.c:792
netlink_rcv_skb+0x1cf/0x410 net/netlink/af_netlink.c:2489
genl_rcv+0x24/0x40 net/netlink/genetlink.c:803
netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
netlink_unicast+0x7b6/0x980 net/netlink/af_netlink.c:1337
netlink_sendmsg+0xa30/0xd60 net/netlink/af_netlink.c:1905
sock_sendmsg_nosec net/socket.c:704 [inline]
__sock_sendmsg net/socket.c:716 [inline]
____sys_sendmsg+0x59e/0x8f0 net/socket.c:2436
___sys_sendmsg+0x252/0x2e0 net/socket.c:2490
__sys_sendmsg net/socket.c:2519 [inline]
__do_sys_sendmsg net/socket.c:2528 [inline]
__se_sys_sendmsg+0x19a/0x260 net/socket.c:2526
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f98f84bd169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f98f6326038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f98f86d5fa0 RCX: 00007f98f84bd169
RDX: 0000000000000000 RSI: 0000400000001080 RDI: 0000000000000005
RBP: 00007f98f853e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f98f86d5fa0 R15: 00007fffe85d3f18
</TASK>
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
May 25, 2025, 12:55:41 AM5/25/25
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 98f47d0e9b8c Linux 5.15.184
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13335ad4580000
kernel config: https://syzkaller.appspot.com/x/.config?x=9eb2b5a65dfc4761
dashboard link: https://syzkaller.appspot.com/bug?extid=71309069d4a84523ff89
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=179ae170580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10b35ad4580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d2845fb3af6c/disk-98f47d0e.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1f12b743be24/vmlinux-98f47d0e.xz
kernel image: https://storage.googleapis.com/syzbot-assets/8f178b57ea38/Image-98f47d0e.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+713090...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4026 at include/net/mac80211.h:6309 rate_lowest_index include/net/mac80211.h:-1 [inline]
WARNING: CPU: 1 PID: 4026 at include/net/mac80211.h:6309 minstrel_ht_update_caps+0x3c0/0x1324 net/mac80211/rc80211_minstrel_ht.c:1613
Modules linked in:
CPU: 1 PID: 4026 Comm: syz-executor283 Not tainted 5.15.184-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : rate_lowest_index include/net/mac80211.h:-1 [inline]
pc : minstrel_ht_update_caps+0x3c0/0x1324 net/mac80211/rc80211_minstrel_ht.c:1613
lr : rate_lowest_index include/net/mac80211.h:6304 [inline]
lr : minstrel_ht_update_caps+0x3b4/0x1324 net/mac80211/rc80211_minstrel_ht.c:1613
sp : ffff80001f156dc0
x29: ffff80001f156e50 x28: ffff0000c0877458 x27: ffff0000ce94b378
x26: 0000000000000000 x25: 0b00000000000000 x24: 000000000000000b
x23: ffff0000ce94b380 x22: 1fffe00019d29670 x21: dfff800000000000
x20: 0000000000000003 x19: ffff0000ce94de70 x18: 0000000000000000
x17: ffff800016cdf000 x16: ffff8000082d465c x15: ffff8000167bf4c0
x14: ffff0000c1ebc080 x13: 0000000000000000 x12: 0000000000ff0100
x11: 0000000000000201 x10: 0000000000000000 x9 : ffff800010c697f8
x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
x2 : 000000000000003c x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
rate_lowest_index include/net/mac80211.h:-1 [inline]
minstrel_ht_update_caps+0x3c0/0x1324 net/mac80211/rc80211_minstrel_ht.c:1613
minstrel_ht_rate_init+0x48/0x60 net/mac80211/rc80211_minstrel_ht.c:1719
rate_control_rate_init+0x2e0/0x548 net/mac80211/rate.c:62
sta_apply_auth_flags+0x158/0x350 net/mac80211/cfg.c:1378
sta_apply_parameters+0x117c/0x1ad0 net/mac80211/cfg.c:1705
ieee80211_add_station+0x250/0x424 net/mac80211/cfg.c:1749
rdev_add_station+0x12c/0x524 net/wireless/rdev-ops.h:190
nl80211_new_station+0xce4/0xfb4 net/wireless/nl80211.c:6789
netlink_rcv_skb+0x208/0x3c4 net/netlink/af_netlink.c:2489
genl_rcv+0x38/0x50 net/netlink/genetlink.c:803
netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
netlink_unicast+0x60c/0x89c net/netlink/af_netlink.c:1337
netlink_sendmsg+0x6e8/0x9cc net/netlink/af_netlink.c:1905
___sys_sendmsg+0x1d0/0x240 net/socket.c:2490
__arm64_sys_sendmsg+0x1a8/0x254 net/socket.c:2526
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 15773
hardirqs last enabled at (15771): [<ffff80000871cb00>] mod_lruvec_page_state include/linux/vmstat.h:497 [inline]
hardirqs last enabled at (15771): [<ffff80000871cb00>] kmalloc_order+0xc4/0x160 mm/slab_common.c:989
hardirqs last disabled at (15773): [<ffff8000111a0f18>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last enabled at (15748): [<ffff80000f67527c>] spin_unlock_bh include/linux/spinlock.h:408 [inline]
softirqs last enabled at (15748): [<ffff80000f67527c>] release_sock+0x1d0/0x258 net/core/sock.c:3277
softirqs last disabled at (15772): [<ffff800010afe874>] spin_lock_bh include/linux/spinlock.h:368 [inline]
softirqs last disabled at (15772): [<ffff800010afe874>] rate_control_rate_init+0x27c/0x548 net/mac80211/rate.c:61
---[ end trace 95704c2cbf61f783 ]---
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
HEAD commit: 98f47d0e9b8c Linux 5.15.184
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13335ad4580000
kernel config: https://syzkaller.appspot.com/x/.config?x=9eb2b5a65dfc4761
dashboard link: https://syzkaller.appspot.com/bug?extid=71309069d4a84523ff89
compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6
userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=179ae170580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10b35ad4580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d2845fb3af6c/disk-98f47d0e.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1f12b743be24/vmlinux-98f47d0e.xz
kernel image: https://storage.googleapis.com/syzbot-assets/8f178b57ea38/Image-98f47d0e.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+713090...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4026 at include/net/mac80211.h:6309 minstrel_ht_update_caps+0x3c0/0x1324 net/mac80211/rc80211_minstrel_ht.c:1613
Modules linked in:
CPU: 1 PID: 4026 Comm: syz-executor283 Not tainted 5.15.184-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : rate_lowest_index include/net/mac80211.h:-1 [inline]
pc : minstrel_ht_update_caps+0x3c0/0x1324 net/mac80211/rc80211_minstrel_ht.c:1613
lr : rate_lowest_index include/net/mac80211.h:6304 [inline]
lr : minstrel_ht_update_caps+0x3b4/0x1324 net/mac80211/rc80211_minstrel_ht.c:1613
sp : ffff80001f156dc0
x29: ffff80001f156e50 x28: ffff0000c0877458 x27: ffff0000ce94b378
x26: 0000000000000000 x25: 0b00000000000000 x24: 000000000000000b
x23: ffff0000ce94b380 x22: 1fffe00019d29670 x21: dfff800000000000
x20: 0000000000000003 x19: ffff0000ce94de70 x18: 0000000000000000
x17: ffff800016cdf000 x16: ffff8000082d465c x15: ffff8000167bf4c0
x14: ffff0000c1ebc080 x13: 0000000000000000 x12: 0000000000ff0100
x11: 0000000000000201 x10: 0000000000000000 x9 : ffff800010c697f8
x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
x2 : 000000000000003c x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
rate_lowest_index include/net/mac80211.h:-1 [inline]
minstrel_ht_update_caps+0x3c0/0x1324 net/mac80211/rc80211_minstrel_ht.c:1613
minstrel_ht_rate_init+0x48/0x60 net/mac80211/rc80211_minstrel_ht.c:1719
rate_control_rate_init+0x2e0/0x548 net/mac80211/rate.c:62
sta_apply_auth_flags+0x158/0x350 net/mac80211/cfg.c:1378
sta_apply_parameters+0x117c/0x1ad0 net/mac80211/cfg.c:1705
ieee80211_add_station+0x250/0x424 net/mac80211/cfg.c:1749
rdev_add_station+0x12c/0x524 net/wireless/rdev-ops.h:190
nl80211_new_station+0xce4/0xfb4 net/wireless/nl80211.c:6789
genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]
genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
genl_rcv_msg+0x8b4/0xb6c net/netlink/genetlink.c:792
genl_family_rcv_msg net/netlink/genetlink.c:775 [inline]
netlink_rcv_skb+0x208/0x3c4 net/netlink/af_netlink.c:2489
genl_rcv+0x38/0x50 net/netlink/genetlink.c:803
netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline]
netlink_unicast+0x60c/0x89c net/netlink/af_netlink.c:1337
netlink_sendmsg+0x6e8/0x9cc net/netlink/af_netlink.c:1905
sock_sendmsg_nosec net/socket.c:704 [inline]
__sock_sendmsg net/socket.c:716 [inline]
____sys_sendmsg+0x61c/0x920 net/socket.c:2436
__sock_sendmsg net/socket.c:716 [inline]
___sys_sendmsg+0x1d0/0x240 net/socket.c:2490
__sys_sendmsg net/socket.c:2519 [inline]
__do_sys_sendmsg net/socket.c:2528 [inline]
__se_sys_sendmsg net/socket.c:2526 [inline]
__do_sys_sendmsg net/socket.c:2528 [inline]
__arm64_sys_sendmsg+0x1a8/0x254 net/socket.c:2526
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 15773
hardirqs last enabled at (15771): [<ffff80000871cb00>] mod_lruvec_page_state include/linux/vmstat.h:497 [inline]
hardirqs last enabled at (15771): [<ffff80000871cb00>] kmalloc_order+0xc4/0x160 mm/slab_common.c:989
hardirqs last disabled at (15773): [<ffff8000111a0f18>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last enabled at (15748): [<ffff80000f67527c>] spin_unlock_bh include/linux/spinlock.h:408 [inline]
softirqs last enabled at (15748): [<ffff80000f67527c>] release_sock+0x1d0/0x258 net/core/sock.c:3277
softirqs last disabled at (15772): [<ffff800010afe874>] spin_lock_bh include/linux/spinlock.h:368 [inline]
softirqs last disabled at (15772): [<ffff800010afe874>] rate_control_rate_init+0x27c/0x548 net/mac80211/rate.c:61
---[ end trace 95704c2cbf61f783 ]---
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
syzbot
Jun 14, 2025, 12:05:04 PM6/14/25
to syzkaller...@googlegroups.com
syzbot suspects this issue could be fixed by backporting the following commit:
commit 16ee3ea8faef8ff042acc15867a6c458c573de61
git tree: upstream
Author: Mikhail Lobanov <m.lo...@rosa.ru>
Date: Mon Mar 17 10:31:37 2025 +0000
wifi: mac80211: check basic rates validity in sta_link_apply_parameters
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=166fdd70580000
kernel config: https://syzkaller.appspot.com/x/.config?x=6d966a9f787a9782
dashboard link: https://syzkaller.appspot.com/bug?extid=71309069d4a84523ff89
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=150b5ad4580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=17a235f4580000
Please keep in mind that other backports might be required as well.
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
commit 16ee3ea8faef8ff042acc15867a6c458c573de61
git tree: upstream
Author: Mikhail Lobanov <m.lo...@rosa.ru>
Date: Mon Mar 17 10:31:37 2025 +0000
wifi: mac80211: check basic rates validity in sta_link_apply_parameters
bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=166fdd70580000
kernel config: https://syzkaller.appspot.com/x/.config?x=6d966a9f787a9782
dashboard link: https://syzkaller.appspot.com/bug?extid=71309069d4a84523ff89
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=150b5ad4580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=17a235f4580000
Please keep in mind that other backports might be required as well.
For information about bisection process see: https://goo.gl/tpsmEJ#bisection
syzbot
Aug 13, 2025, 4:01:07 PM8/13/25
to syzkaller...@googlegroups.com
For archival purposes, forwarding an incoming command email to
syzkaller...@googlegroups.com.
***
Subject: Re: [v6.12] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
cdf264c0a5906063a0e2b750d420d77cb992446d
syzkaller...@googlegroups.com.
***
Subject: Re: [v6.12] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
cdf264c0a5906063a0e2b750d420d77cb992446d
syzbot
Aug 13, 2025, 4:08:10 PM8/13/25
to syzkaller...@googlegroups.com
Subject: Re: [6.6] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
3a8ababb8b6a0ced2be230b60b6e3ddbd8d67014
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
syzbot
Aug 14, 2025, 1:14:54 AM8/14/25
to syzkaller...@googlegroups.com
Subject: Re: [v6.12] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
cdf264c0a5906063a0e2b750d420d77cb992446d
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
syzbot
Aug 18, 2025, 12:11:10 AM8/18/25
to syzkaller...@googlegroups.com
Subject: Re: [6.6] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
bb9c90ab9c5a1a933a0dfd302a3fde73642b2b06
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
syzbot
Aug 18, 2025, 11:57:33 AM8/18/25
to syzkaller...@googlegroups.com
Subject: Re: [6.1] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
0bc96de781b4da716c8dbd248af4b26d8d8341f5
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
syzbot
Aug 23, 2025, 1:43:40 PM8/23/25
to syzkaller...@googlegroups.com
syzbot
Aug 23, 2025, 2:20:45 PM8/23/25
to syzkaller...@googlegroups.com
syzbot
Aug 24, 2025, 3:40:49 PM8/24/25
to syzkaller...@googlegroups.com
Subject: Re: [v5.15] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
c79648372d02944bf4a54d87e3901db05d0ac82e
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
syzbot
Aug 25, 2025, 3:17:27 PM8/25/25
to syzkaller...@googlegroups.com
Subject: Re: [v5.10] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
d5eca7ebcf6f64c4aebf9684c365c130a3a069b3
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
syzbot
Aug 25, 2025, 3:33:51 PM8/25/25
to syzkaller...@googlegroups.com
Subject: Re: [v5.4] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
04b7726c3cdd2fb4da040c2b898bcf405ed607bd
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
syzbot
Aug 25, 2025, 4:14:17 PM8/25/25
to syzkaller...@googlegroups.com
Subject: Re: [v5.10] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
d5eca7ebcf6f64c4aebf9684c365c130a3a069b3
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
syzbot
Sep 7, 2025, 8:18:42 AM9/7/25
to syzkaller...@googlegroups.com
For archival purposes, forwarding an incoming command email to
syzkaller...@googlegroups.com.
***
Subject: Re: [v5.10] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
c30b4019ea89633d790f0bfcbb03234f0d006f87
syzkaller...@googlegroups.com.
***
Subject: Re: [v5.10] WARNING in minstrel_ht_update_caps
Author: hanne...@gmail.com
#syz test:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
syzbot
Sep 7, 2025, 9:16:38 AM9/7/25
to syzkaller...@googlegroups.com
syzbot
Dec 6, 2025, 12:09:20 AM12/6/25
to syzkaller...@googlegroups.com
Auto-closing this bug as obsolete.
No recent activity, existing reproducers are no longer triggering the issue.
No recent activity, existing reproducers are no longer triggering the issue.
Reply all
Reply to author
Forward
0 new messages