WARNING in __rate_control_send_low (3)

Status: upstream: reported C repro on 2024/10/26 13:25
Subsystems: wireless
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+34463a129786910405dd@syzkaller.appspotmail.com
Fix commit: f5dd0626d2b0 wifi: mac80211: don't apply peer rates to off-channel frames
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-native-arm64-kvm ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root]
First crash: 722d, last: 2h04m
Cause bisection: introduced by (bisect log) :
commit 119aadf816f5373dc82ca4109d6d5b777e00475b
Author: Ramon Fontes <ramonreisfontes@gmail.com>
Date: Fri May 15 16:46:40 2020 +0000

  mac80211_hwsim: report the WIPHY_FLAG_SUPPORTS_5_10_MHZ capability

Crash: WARNING in __rate_control_send_low (log)
Repro: C syz .config
  
▶ ▼ ✨ AI Patch Versions (1)
Version Stage Reported Report Link Job
1 moderation 2026/06/24 12:36 Discussion e8a36bfc-63cc-4c4b-922c-20a8151f983a
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
e8a36bfc patching ❓ WARNING in __rate_control_send_low (3) 2026/06/24 09:59 2026/06/24 09:59 2026/06/24 12:36 042555ff
c4022a0e assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ WARNING in __rate_control_send_low (3) 2026/05/22 22:07 2026/05/22 22:07 2026/05/22 22:36 df8ac09c
▶ ▼ Discussions (20)
Title Replies (including bot) Last reply
[PATCH wireless 01/10] wifi: mac80211: don't apply peer rates to off-channel frames 1 (1) 2026/09/04 14:57
[syzbot] Monthly wireless report (May 2026) 0 (1) 2026/05/02 12:32
[syzbot] Monthly wireless report (Apr 2026) 0 (1) 2026/04/01 07:42
[syzbot] Monthly wireless report (Mar 2026) 0 (1) 2026/03/01 06:22
[syzbot] Monthly wireless report (Jan 2026) 0 (1) 2026/01/28 22:39
[syzbot] Monthly wireless report (Dec 2025) 0 (1) 2025/12/29 08:12
[syzbot] Monthly wireless report (Nov 2025) 0 (1) 2025/11/27 07:44
[syzbot] Monthly wireless report (Oct 2025) 0 (1) 2025/10/27 08:42
[syzbot] Monthly wireless report (Sep 2025) 0 (1) 2025/09/25 16:01
[syzbot] Monthly wireless report (Aug 2025) 0 (1) 2025/08/25 13:19
[syzbot] Monthly wireless report (Jul 2025) 0 (1) 2025/07/25 12:39
[syzbot] Monthly wireless report (Jun 2025) 0 (1) 2025/06/24 07:38
[syzbot] Monthly wireless report (May 2025) 0 (1) 2025/05/24 10:04
[syzbot] Monthly wireless report (Apr 2025) 0 (1) 2025/04/22 12:41
[syzbot] Monthly wireless report (Mar 2025) 0 (1) 2025/03/18 14:49
[syzbot] Monthly wireless report (Feb 2025) 0 (1) 2025/02/16 21:53
[syzbot] Monthly wireless report (Jan 2025) 0 (1) 2025/01/15 13:48
[syzbot] Monthly wireless report (Dec 2024) 0 (1) 2024/12/16 09:44
[syzbot] Monthly wireless report (Nov 2024) 0 (1) 2024/11/14 08:58
[syzbot] [wireless?] WARNING in __rate_control_send_low (3) 0 (3) 2024/10/29 20:32
▶ ▼ Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 WARNING in __rate_control_send_low origin:lts-only -1 syz, C inconclusive 422 7h03m 458d 0/2 upstream: reported C repro on 2025/07/13 22:51
linux-4.14 WARNING in __rate_control_send_low -1 syz, C 4 1325d 2198d 0/1 upstream: reported C repro on 2020/10/08 02:03
linux-4.19 WARNING in __rate_control_send_low -1 syz, C 354 1336d 2186d 0/1 upstream: reported C repro on 2020/10/19 12:45
linux-5.15 WARNING in __rate_control_send_low missing-backport origin:upstream -1 syz, C error 1352 3d06h 1307d 0/3 upstream: reported C repro on 2023/03/17 23:53
upstream WARNING in __rate_control_send_low wireless -1 syz, C inconclusive 2759 875d 2191d 25/29 fixed on 2024/05/22 23:08
upstream WARNING in __rate_control_send_low (2) wireless -1 syz, C done 3233 722d 875d 28/29 fixed on 2024/10/22 11:57
linux-6.1 WARNING in __rate_control_send_low origin:upstream missing-backport -1 syz, C inconclusive 1494 4h36m 1297d 0/3 upstream: reported C repro on 2023/03/27 21:44

Sample crash report:
------------[ cut here ]------------
no supported rates for sta 08:02:11:00:00:00 (0xf, band 0) in rate_mask 0xffffffff with flags 0x10
WARNING: CPU: 1 PID: 146 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 net/mac80211/rate.c:398
Modules linked in:
CPU: 1 UID: 0 PID: 146 Comm: kworker/u8:5 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:__rate_control_send_low+0x5df/0x820 net/mac80211/rate.c:398
Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 7e ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 df a5 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
RSP: 0018:ffffc90002e37258 EFLAGS: 00010246
RAX: a9858661d3e14100 RBX: ffff888028738f3c RCX: ffff888021309e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: dffffc0000000000 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e
R10: dffffc0000000000 R11: fffffbfff1f4209f R12: ffff888077a97528
R13: 0000000000000010 R14: ffff888023e30e40 R15: ffff888023e330d8
FS:  0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555557258808 CR3: 000000000df38000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 rate_control_send_low+0xf2/0x7a0 net/mac80211/rate.c:423
 rate_control_get_rate+0x20b/0x5d0 net/mac80211/rate.c:934
 ieee80211_tx_h_rate_ctrl+0xb32/0x1780 net/mac80211/tx.c:753
 invoke_tx_handlers_late+0xb6/0x1820 net/mac80211/tx.c:1833
 ieee80211_tx+0x2ac/0x420 net/mac80211/tx.c:1954
 __ieee80211_tx_skb_tid_band+0x50f/0x680 net/mac80211/tx.c:6103
 ieee80211_tx_skb_tid_band net/mac80211/ieee80211_i.h:2350 [inline]
 ieee80211_send_scan_probe_req net/mac80211/scan.c:670 [inline]
 ieee80211_scan_state_send_probe+0x59a/0xa10 net/mac80211/scan.c:698
 ieee80211_scan_work+0x5b1/0x1ce0 net/mac80211/scan.c:1158
 cfg80211_wiphy_work+0x2df/0x460 net/wireless/core.c:435
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402
 kthread+0x711/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (12641):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/02 08:06 upstream 66701750d556 ffe4b334 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in __rate_control_send_low
2025/02/02 20:54 upstream 69e858e0b8b2 568559e4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in __rate_control_send_low
2025/01/12 02:28 upstream b62cef9a5c67 6dbc6a9b .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __rate_control_send_low
2026/01/31 00:08 upstream 4d310797262f c75a2f6e .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in __rate_control_send_low
2025/03/13 10:34 upstream b7f94fcf5546 44be8b44 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in __rate_control_send_low
2025/03/05 22:10 upstream bb2281fb05e5 034534df .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in __rate_control_send_low
2025/02/19 15:36 upstream 6537cfb395f3 cbd8edab .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in __rate_control_send_low
2025/02/16 06:48 upstream ad1b832bf1cf 40a34ec9 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in __rate_control_send_low
2025/01/21 05:44 upstream 3d3a9c8b89d4 6e87cfa2 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in __rate_control_send_low
2024/11/14 18:11 upstream 0a9b9d17f3a7 77f3eeb7 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in __rate_control_send_low
2024/11/14 17:33 upstream 0a9b9d17f3a7 77f3eeb7 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in __rate_control_send_low
2024/12/25 22:23 net b3a69c559899 444551c4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2024/10/29 03:17 net b5abbf612092 9efb3cc7 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/15 07:09 upstream 4056b3c9d3c9 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __rate_control_send_low
2026/10/12 11:09 upstream 24a19b953e2a 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __rate_control_send_low
2026/10/12 06:27 upstream b88c841d1164 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in __rate_control_send_low
2026/10/11 16:50 upstream b88c841d1164 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in __rate_control_send_low
2026/10/11 13:20 upstream a5ebb76233b7 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in __rate_control_send_low
2026/10/01 01:34 upstream 551c722f4080 892a21ec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in __rate_control_send_low
2026/09/15 13:36 upstream 587858367581 81a27d1a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in __rate_control_send_low
2024/10/25 22:05 upstream b423f5a9a61f 65e8686b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in __rate_control_send_low
2026/10/10 15:11 upstream 3857c2fe5449 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in __rate_control_send_low
2026/10/10 06:06 upstream 3857c2fe5449 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in __rate_control_send_low
2026/10/14 11:21 upstream 4056b3c9d3c9 1a71827b .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in __rate_control_send_low
2025/11/06 06:00 upstream dc77806cf3b4 a6c9c731 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in __rate_control_send_low
2026/09/07 11:51 upstream df2908090cda 5e4626f5 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in __rate_control_send_low
2026/10/15 06:21 net 513444cc62e2 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/15 01:06 net 513444cc62e2 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/14 20:23 net 513444cc62e2 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/14 16:27 net 513444cc62e2 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/14 15:04 net 513444cc62e2 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/14 07:05 net 513444cc62e2 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/14 06:46 net 513444cc62e2 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/14 03:06 net 8e2fbe0e75d3 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/13 22:25 net 8e2fbe0e75d3 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/13 18:50 net 8e2fbe0e75d3 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/13 17:35 net 8e2fbe0e75d3 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/13 14:56 net 8e2fbe0e75d3 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/13 12:57 net 8e2fbe0e75d3 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/13 09:42 net 8e2fbe0e75d3 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/13 03:59 net 4f6ac74fa594 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/12 13:05 net af32da41b032 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/12 04:36 net af32da41b032 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/11 22:54 net af32da41b032 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/11 20:18 net af32da41b032 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/11 15:23 net af32da41b032 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/11 08:45 net af32da41b032 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/10 21:35 net af32da41b032 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/10 19:15 net af32da41b032 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/10 01:49 net af32da41b032 a8add9cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/09 23:35 net af32da41b032 a8add9cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2024/10/22 13:17 net d95d9a31aceb a93682b3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in __rate_control_send_low
2026/10/14 18:46 net-next 05b5019b01fb 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/14 09:09 net-next 05b5019b01fb 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/13 23:26 net-next d7804253678e 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/13 20:34 net-next d7804253678e 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/13 07:13 net-next d0bd617658dd 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/13 06:13 net-next d0bd617658dd 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/12 16:55 net-next 3a82195416fd 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/12 01:28 net-next d8674294aefe 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/11 01:42 net-next d8674294aefe 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/10 22:56 net-next d8674294aefe 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/10 03:55 net-next d8674294aefe a8add9cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/09 21:39 net-next d8674294aefe a8add9cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/09 19:48 net-next d8674294aefe a8add9cd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in __rate_control_send_low
2026/10/12 20:47 linux-next 4eb2586bd40d 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in __rate_control_send_low
2026/10/06 19:45 linux-next eea3fef32a9c f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in __rate_control_send_low
2026/10/12 23:25 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 01850bca59c9 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in __rate_control_send_low
2026/10/11 23:55 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 71c3e5409eef 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in __rate_control_send_low
2026/10/11 04:56 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 71c3e5409eef 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in __rate_control_send_low
* Struck through repros no longer work on HEAD.