Re: [syzbot] [fs?] [wireless?] general protection fault in simple_recursive_removal (5)

From: Hillf Danton
Date: Wed Jul 23 2025 - 23:35:19 EST


> Date: Wed, 23 Jul 2025 10:19:28 -0700 [thread overview]
> Hello,
>
> syzbot found the following issue on:
>
> HEAD commit: 89be9a83ccf1 Linux 6.16-rc7
> git tree: upstream
> console output: https://syzkaller.appspot.com/x/log.txt?x=11b42fd4580000
> kernel config: https://syzkaller.appspot.com/x/.config?x=8adfe52da0de2761
> dashboard link: https://syzkaller.appspot.com/bug?extid=d6ccd49ae046542a0641
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=134baf22580000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16d5a4f0580000

#syz test

--- x/net/mac80211/debugfs_sta.c
+++ y/net/mac80211/debugfs_sta.c
@@ -1276,6 +1276,12 @@ void ieee80211_sta_debugfs_add(struct st

void ieee80211_sta_debugfs_remove(struct sta_info *sta)
{
+ struct dentry *stations_dir = sta->sdata->debugfs.subdir_stations;
+
+ if (!stations_dir)
+ return;
+ if (!sta->debugfs_dir)
+ return;
debugfs_remove_recursive(sta->debugfs_dir);
sta->debugfs_dir = NULL;
}
--