DUID 00:04:1b:4d:40:85:b1:6b:61:74:2c:72:11:ce:21:17:3d:97 forked to background, child pid 3172 [ 30.418409][ T3173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.434081][ T3173] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.130' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 52.506119][ T144] ------------[ cut here ]------------ [ 52.511799][ T144] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 52.522539][ T144] WARNING: CPU: 1 PID: 144 at net/mac80211/rate.c:376 __rate_control_send_low+0x653/0x890 [ 52.532544][ T144] Modules linked in: [ 52.536528][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted 5.15.118-syzkaller #0 [ 52.544787][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 executing program executing program executing program executing program [ 52.554939][ T144] Workqueue: phy1 ieee80211_scan_work [ 52.560413][ T144] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 52.566751][ T144] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 e0 5f 93 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 7d 82 a0 f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 52.586548][ T144] RSP: 0018:ffffc9000123f408 EFLAGS: 00010246 [ 52.592656][ T144] RAX: 8828fe3b35ddcc00 RBX: 000000000000000c RCX: ffff8880131c9dc0 executing program executing program executing program executing program [ 52.600719][ T144] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000 [ 52.608770][ T144] RBP: ffff88807733e3e8 R08: ffffffff8166491c R09: fffff52000247dc1 [ 52.616820][ T144] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 52.624831][ T144] R13: 000000000000000c R14: 0000000000000000 R15: 00000000ffffffff [ 52.632987][ T144] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 52.642018][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.648888][ T144] CR2: 00007f21ef150230 CR3: 000000000c68e000 CR4: 00000000003506e0 [ 52.656942][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.664943][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.673013][ T144] Call Trace: [ 52.676353][ T144] [ 52.679309][ T144] ? __warn+0x15b/0x300 [ 52.683499][ T144] ? __rate_control_send_low+0x653/0x890 [ 52.689248][ T144] ? report_bug+0x1b7/0x2e0 [ 52.693793][ T144] ? handle_bug+0x3d/0x70 [ 52.698237][ T144] ? exc_invalid_op+0x16/0x40 [ 52.702958][ T144] ? asm_exc_invalid_op+0x16/0x20 [ 52.708163][ T144] ? __wake_up_klogd+0xcc/0x100 [ 52.713055][ T144] ? __rate_control_send_low+0x653/0x890 [ 52.718792][ T144] ? __rate_control_send_low+0x653/0x890 [ 52.724478][ T144] rate_control_send_low+0x1a8/0x770 [ 52.729875][ T144] rate_control_get_rate+0x20a/0x5d0 [ 52.735242][ T144] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 52.740994][ T144] ? ieee80211_ie_len_he_cap+0x600/0x600 [ 52.746720][ T144] ? ieee80211_tx_h_select_key+0x1590/0x1590 [ 52.752755][ T144] invoke_tx_handlers_late+0xb2/0x17f0 [ 52.758346][ T144] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 52.764205][ T144] ieee80211_tx+0x2df/0x460 [ 52.768805][ T144] ? ieee80211_skb_resize+0x640/0x640 [ 52.774220][ T144] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 52.779786][ T144] ? ieee80211_xmit+0x355/0x470 [ 52.784663][ T144] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 52.790558][ T144] ieee80211_scan_state_send_probe+0x557/0x8f0 [ 52.796805][ T144] ieee80211_scan_work+0x62b/0x1d00 [ 52.802062][ T144] ? print_irqtrace_events+0x210/0x210 [ 52.807626][ T144] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 52.813554][ T144] ? ieee80211_can_scan+0x200/0x200 [ 52.818827][ T144] ? do_raw_spin_unlock+0x137/0x8b0 [ 52.824067][ T144] process_one_work+0x8a1/0x10c0 [ 52.829109][ T144] ? worker_detach_from_pool+0x260/0x260 [ 52.834784][ T144] ? _raw_spin_lock_irqsave+0x120/0x120 [ 52.840425][ T144] ? kthread_data+0x4e/0xc0 [ 52.844966][ T144] ? wq_worker_running+0x97/0x170 [ 52.850198][ T144] worker_thread+0xaca/0x1280 [ 52.854940][ T144] kthread+0x3f6/0x4f0 [ 52.859118][ T144] ? rcu_lock_release+0x20/0x20 [ 52.863996][ T144] ? kthread_blkcg+0xd0/0xd0 [ 52.868679][ T144] ret_from_fork+0x1f/0x30 [ 52.873145][ T144] [ 52.876264][ T144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 52.883556][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted 5.15.118-syzkaller #0 [ 52.891819][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 52.901895][ T144] Workqueue: phy1 ieee80211_scan_work [ 52.907305][ T144] Call Trace: [ 52.910601][ T144] [ 52.913547][ T144] dump_stack_lvl+0x1e3/0x2cb [ 52.918261][ T144] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 52.923917][ T144] ? panic+0x84d/0x84d [ 52.928013][ T144] ? __rate_control_send_low+0x610/0x890 [ 52.933679][ T144] ? __rate_control_send_low+0x610/0x890 [ 52.939339][ T144] panic+0x318/0x84d [ 52.943265][ T144] ? __warn+0x16a/0x300 [ 52.947447][ T144] ? fb_is_primary_device+0xcc/0xcc [ 52.952691][ T144] ? ret_from_fork+0x1f/0x30 [ 52.957316][ T144] ? __rate_control_send_low+0x653/0x890 [ 52.962977][ T144] __warn+0x2b2/0x300 [ 52.966989][ T144] ? __rate_control_send_low+0x653/0x890 [ 52.972641][ T144] report_bug+0x1b7/0x2e0 [ 52.976988][ T144] handle_bug+0x3d/0x70 [ 52.981260][ T144] exc_invalid_op+0x16/0x40 [ 52.985774][ T144] asm_exc_invalid_op+0x16/0x20 [ 52.990828][ T144] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 52.997101][ T144] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 e0 5f 93 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 7d 82 a0 f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 53.016808][ T144] RSP: 0018:ffffc9000123f408 EFLAGS: 00010246 [ 53.022998][ T144] RAX: 8828fe3b35ddcc00 RBX: 000000000000000c RCX: ffff8880131c9dc0 [ 53.031001][ T144] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000 [ 53.039000][ T144] RBP: ffff88807733e3e8 R08: ffffffff8166491c R09: fffff52000247dc1 [ 53.046992][ T144] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 53.055002][ T144] R13: 000000000000000c R14: 0000000000000000 R15: 00000000ffffffff [ 53.063005][ T144] ? __wake_up_klogd+0xcc/0x100 [ 53.067897][ T144] ? __rate_control_send_low+0x653/0x890 [ 53.073579][ T144] rate_control_send_low+0x1a8/0x770 [ 53.078900][ T144] rate_control_get_rate+0x20a/0x5d0 [ 53.084229][ T144] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 53.090021][ T144] ? ieee80211_ie_len_he_cap+0x600/0x600 [ 53.095703][ T144] ? ieee80211_tx_h_select_key+0x1590/0x1590 [ 53.101740][ T144] invoke_tx_handlers_late+0xb2/0x17f0 [ 53.107331][ T144] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 53.113177][ T144] ieee80211_tx+0x2df/0x460 [ 53.117710][ T144] ? ieee80211_skb_resize+0x640/0x640 [ 53.123126][ T144] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 53.128633][ T144] ? ieee80211_xmit+0x355/0x470 [ 53.133517][ T144] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 53.139359][ T144] ieee80211_scan_state_send_probe+0x557/0x8f0 [ 53.145562][ T144] ieee80211_scan_work+0x62b/0x1d00 [ 53.150898][ T144] ? print_irqtrace_events+0x210/0x210 [ 53.156465][ T144] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 53.162366][ T144] ? ieee80211_can_scan+0x200/0x200 [ 53.167596][ T144] ? do_raw_spin_unlock+0x137/0x8b0 [ 53.172834][ T144] process_one_work+0x8a1/0x10c0 [ 53.177814][ T144] ? worker_detach_from_pool+0x260/0x260 [ 53.183478][ T144] ? _raw_spin_lock_irqsave+0x120/0x120 [ 53.189050][ T144] ? kthread_data+0x4e/0xc0 [ 53.193596][ T144] ? wq_worker_running+0x97/0x170 [ 53.198838][ T144] worker_thread+0xaca/0x1280 [ 53.203659][ T144] kthread+0x3f6/0x4f0 [ 53.207753][ T144] ? rcu_lock_release+0x20/0x20 [ 53.212631][ T144] ? kthread_blkcg+0xd0/0xd0 [ 53.217358][ T144] ret_from_fork+0x1f/0x30 [ 53.221826][ T144] [ 53.225109][ T144] Kernel Offset: disabled [ 53.229519][ T144] Rebooting in 86400 seconds..