Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. executing program executing program executing program [ 54.206258][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. [ 54.224605][ T3501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. [ 54.243517][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. executing program executing program [ 54.257714][ T155] ------------[ cut here ]------------ [ 54.262914][ T3503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. [ 54.263933][ T155] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 54.284471][ T155] WARNING: CPU: 1 PID: 155 at net/mac80211/rate.c:376 __rate_control_send_low+0x653/0x890 [ 54.290713][ T3504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. [ 54.294812][ T155] Modules linked in: executing program executing program [ 54.308478][ T155] CPU: 1 PID: 155 Comm: kworker/u4:3 Not tainted 5.15.153-syzkaller #0 [ 54.317090][ T155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 54.317506][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. [ 54.328944][ T155] Workqueue: phy1 ieee80211_scan_work [ 54.328990][ T155] RIP: 0010:__rate_control_send_low+0x653/0x890 executing program executing program [ 54.351618][ T3506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. [ 54.351961][ T155] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 a0 8a 93 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 ad c6 9f f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 54.372835][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. [ 54.382928][ T155] RSP: 0018:ffffc900010cf408 EFLAGS: 00010246 [ 54.382962][ T155] RAX: 895d7f3993b80300 RBX: 000000000000000c RCX: ffff888012b1bb80 executing program executing program executing program [ 54.382979][ T155] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 54.382993][ T155] RBP: ffff8880744dd028 R08: ffffffff8166661c R09: ffffed10173667a8 [ 54.383009][ T155] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 54.383025][ T155] R13: 000000000000000c R14: 0000000000000000 R15: 00000000ffffffff [ 54.383040][ T155] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 54.403822][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. [ 54.406837][ T155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.406859][ T155] CR2: 00007ffc3d8d2ed8 CR3: 000000000c68e000 CR4: 00000000003506e0 [ 54.425068][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor220'. [ 54.432359][ T155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.432385][ T155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.432400][ T155] Call Trace: [ 54.432411][ T155] [ 54.432422][ T155] ? __warn+0x15b/0x300 [ 54.432453][ T155] ? __rate_control_send_low+0x653/0x890 [ 54.518122][ T155] ? report_bug+0x1b7/0x2e0 [ 54.523128][ T155] ? handle_bug+0x3d/0x70 [ 54.527658][ T155] ? exc_invalid_op+0x16/0x40 [ 54.532554][ T155] ? asm_exc_invalid_op+0x16/0x20 [ 54.537965][ T155] ? __wake_up_klogd+0xcc/0x100 [ 54.543119][ T155] ? __rate_control_send_low+0x653/0x890 [ 54.548941][ T155] ? __rate_control_send_low+0x653/0x890 [ 54.554825][ T155] rate_control_send_low+0x1a8/0x770 [ 54.560361][ T155] rate_control_get_rate+0x20a/0x5d0 [ 54.565788][ T155] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 54.571618][ T155] ? ieee80211_ie_len_he_cap+0x620/0x620 [ 54.577433][ T155] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 54.583492][ T155] invoke_tx_handlers_late+0xb2/0x17f0 [ 54.589099][ T155] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 54.594961][ T155] ieee80211_tx+0x2df/0x460 [ 54.600073][ T155] ? ieee80211_skb_resize+0x640/0x640 [ 54.605615][ T155] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 54.611293][ T155] ? ieee80211_xmit+0x355/0x470 [ 54.616330][ T155] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 54.622970][ T155] ieee80211_scan_state_send_probe+0x557/0x8f0 [ 54.629353][ T155] ieee80211_scan_work+0x62b/0x1d00 [ 54.634635][ T155] ? print_irqtrace_events+0x210/0x210 [ 54.640341][ T155] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 54.646758][ T155] ? ieee80211_can_scan+0x200/0x200 [ 54.651998][ T155] ? do_raw_spin_unlock+0x137/0x8b0 [ 54.657304][ T155] process_one_work+0x8a1/0x10c0 [ 54.662350][ T155] ? worker_detach_from_pool+0x260/0x260 [ 54.668564][ T155] ? _raw_spin_lock_irqsave+0x120/0x120 [ 54.674549][ T155] ? kthread_data+0x4e/0xc0 [ 54.679292][ T155] ? wq_worker_running+0x97/0x170 [ 54.684454][ T155] worker_thread+0xaca/0x1280 [ 54.689282][ T155] kthread+0x3f6/0x4f0 [ 54.693603][ T155] ? rcu_lock_release+0x20/0x20 [ 54.698662][ T155] ? kthread_blkcg+0xd0/0xd0 [ 54.703298][ T155] ret_from_fork+0x1f/0x30 [ 54.707845][ T155] [ 54.710892][ T155] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.718366][ T155] CPU: 1 PID: 155 Comm: kworker/u4:3 Not tainted 5.15.153-syzkaller #0 [ 54.726795][ T155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 54.737151][ T155] Workqueue: phy1 ieee80211_scan_work [ 54.743197][ T155] Call Trace: [ 54.746540][ T155] [ 54.749585][ T155] dump_stack_lvl+0x1e3/0x2cb [ 54.754532][ T155] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 54.760328][ T155] ? panic+0x84d/0x84d [ 54.764446][ T155] ? __rate_control_send_low+0x5d0/0x890 [ 54.770535][ T155] ? __rate_control_send_low+0x5d0/0x890 [ 54.776343][ T155] panic+0x318/0x84d [ 54.780639][ T155] ? __warn+0x16a/0x300 [ 54.785035][ T155] ? fb_is_primary_device+0xcc/0xcc [ 54.790597][ T155] ? ret_from_fork+0x1f/0x30 [ 54.795666][ T155] ? __rate_control_send_low+0x653/0x890 [ 54.802116][ T155] __warn+0x2b2/0x300 [ 54.806454][ T155] ? __rate_control_send_low+0x653/0x890 [ 54.812301][ T155] report_bug+0x1b7/0x2e0 [ 54.816831][ T155] handle_bug+0x3d/0x70 [ 54.821032][ T155] exc_invalid_op+0x16/0x40 [ 54.825575][ T155] asm_exc_invalid_op+0x16/0x20 [ 54.830467][ T155] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 54.836750][ T155] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 a0 8a 93 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 ad c6 9f f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 54.856796][ T155] RSP: 0018:ffffc900010cf408 EFLAGS: 00010246 [ 54.863819][ T155] RAX: 895d7f3993b80300 RBX: 000000000000000c RCX: ffff888012b1bb80 [ 54.871845][ T155] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 54.881020][ T155] RBP: ffff8880744dd028 R08: ffffffff8166661c R09: ffffed10173667a8 [ 54.889227][ T155] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 54.897279][ T155] R13: 000000000000000c R14: 0000000000000000 R15: 00000000ffffffff [ 54.905823][ T155] ? __wake_up_klogd+0xcc/0x100 [ 54.910727][ T155] ? __rate_control_send_low+0x653/0x890 [ 54.916769][ T155] rate_control_send_low+0x1a8/0x770 [ 54.922659][ T155] rate_control_get_rate+0x20a/0x5d0 [ 54.927999][ T155] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 54.933926][ T155] ? ieee80211_ie_len_he_cap+0x620/0x620 [ 54.939598][ T155] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 54.945729][ T155] invoke_tx_handlers_late+0xb2/0x17f0 [ 54.951336][ T155] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 54.957387][ T155] ieee80211_tx+0x2df/0x460 [ 54.962162][ T155] ? ieee80211_skb_resize+0x640/0x640 [ 54.967594][ T155] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 54.973139][ T155] ? ieee80211_xmit+0x355/0x470 [ 54.978039][ T155] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 54.984934][ T155] ieee80211_scan_state_send_probe+0x557/0x8f0 [ 54.991276][ T155] ieee80211_scan_work+0x62b/0x1d00 [ 54.996632][ T155] ? print_irqtrace_events+0x210/0x210 [ 55.002128][ T155] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 55.008189][ T155] ? ieee80211_can_scan+0x200/0x200 [ 55.013563][ T155] ? do_raw_spin_unlock+0x137/0x8b0 [ 55.019003][ T155] process_one_work+0x8a1/0x10c0 [ 55.024081][ T155] ? worker_detach_from_pool+0x260/0x260 [ 55.029870][ T155] ? _raw_spin_lock_irqsave+0x120/0x120 [ 55.035543][ T155] ? kthread_data+0x4e/0xc0 [ 55.040397][ T155] ? wq_worker_running+0x97/0x170 [ 55.045557][ T155] worker_thread+0xaca/0x1280 [ 55.050384][ T155] kthread+0x3f6/0x4f0 [ 55.054501][ T155] ? rcu_lock_release+0x20/0x20 [ 55.059561][ T155] ? kthread_blkcg+0xd0/0xd0 [ 55.064602][ T155] ret_from_fork+0x1f/0x30 [ 55.069456][ T155] [ 55.073827][ T155] Kernel Offset: disabled [ 55.079632][ T155] Rebooting in 86400 seconds..