[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.22' (ECDSA) to the list of known hosts. syzkaller login: [ 53.698078][ T8483] IPVS: ftp: loaded support on port[0] = 21 [ 53.778754][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.786796][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 53.828305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.839206][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.847452][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.856487][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.872101][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz-executor600'. [ 53.882056][ T8483] ------------[ cut here ]------------ [ 53.888990][ T8483] WARNING: CPU: 0 PID: 8483 at net/mac80211/rate.c:282 ieee80211_check_rate_mask+0x2b6/0x380 [ 53.899441][ T8483] Modules linked in: [ 53.903712][ T8483] CPU: 0 PID: 8483 Comm: syz-executor600 Not tainted 5.11.0-rc4-syzkaller #0 [ 53.912598][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.923378][ T8483] RIP: 0010:ieee80211_check_rate_mask+0x2b6/0x380 [ 53.930374][ T8483] Code: 00 42 89 ac a3 58 0b 00 00 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e8 57 1f f9 e8 e3 57 1f f9 0f 0b eb e4 e8 da 57 1f f9 <0f> 0b eb db e8 21 18 62 f9 e9 ef fd ff ff 48 89 ef e8 14 18 62 f9 [ 53.950138][ T8483] RSP: 0018:ffffc9000965f4b0 EFLAGS: 00010293 [ 53.956378][ T8483] RAX: 0000000000000000 RBX: ffff8880234e8bc0 RCX: 0000000000000000 [ 53.964608][ T8483] RDX: ffff8880204eb780 RSI: ffffffff885372a6 RDI: 0000000000000003 [ 53.973289][ T8483] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff885d284e [ 53.981313][ T8483] R10: ffffffff885370b4 R11: 0000000000000000 R12: 0000000000000020 [ 53.989543][ T8483] R13: 0000000000000000 R14: ffff8880234e8bc0 R15: 0000000000000000 [ 53.998221][ T8483] FS: 0000000001cf0880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 54.007639][ T8483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.014272][ T8483] CR2: 00007ffa1803d098 CR3: 0000000023ab2000 CR4: 0000000000350ee0 [ 54.022368][ T8483] Call Trace: [ 54.025642][ T8483] ieee80211_change_bss+0x534/0xc10 [ 54.030906][ T8483] nl80211_set_bss+0x76c/0xc00 [ 54.035689][ T8483] ? cfg80211_cqm_rssi_update+0x640/0x640 [ 54.041538][ T8483] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 54.048022][ T8483] ? nl80211_pre_doit+0xa2/0x630 [ 54.052959][ T8483] genl_family_rcv_msg_doit+0x228/0x320 [ 54.058541][ T8483] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 54.065916][ T8483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.072234][ T8483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.078565][ T8483] ? ns_capable+0xde/0x100 [ 54.082975][ T8483] genl_rcv_msg+0x328/0x580 [ 54.087861][ T8483] ? genl_get_cmd+0x480/0x480 [ 54.092556][ T8483] ? cfg80211_cqm_rssi_update+0x640/0x640 [ 54.098322][ T8483] ? lock_release+0x710/0x710 [ 54.103000][ T8483] netlink_rcv_skb+0x153/0x420 [ 54.107819][ T8483] ? genl_get_cmd+0x480/0x480 [ 54.112658][ T8483] ? netlink_ack+0xaa0/0xaa0 [ 54.117236][ T8483] genl_rcv+0x24/0x40 [ 54.121420][ T8483] netlink_unicast+0x533/0x7d0 [ 54.126284][ T8483] ? netlink_attachskb+0x870/0x870 [ 54.131438][ T8483] ? _copy_from_iter_full+0x275/0x850 [ 54.136812][ T8483] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.143095][ T8483] ? __phys_addr_symbol+0x2c/0x70 [ 54.148196][ T8483] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 54.153913][ T8483] ? __check_object_size+0x171/0x3f0 [ 54.159234][ T8483] netlink_sendmsg+0x856/0xd90 [ 54.163998][ T8483] ? netlink_unicast+0x7d0/0x7d0 [ 54.169009][ T8483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.175250][ T8483] ? netlink_unicast+0x7d0/0x7d0 [ 54.180330][ T8483] sock_sendmsg+0xcf/0x120 [ 54.184827][ T8483] ____sys_sendmsg+0x6e8/0x810 [ 54.189824][ T8483] ? kernel_sendmsg+0x50/0x50 [ 54.194581][ T8483] ? do_recvmmsg+0x6c0/0x6c0 [ 54.199219][ T8483] ? stack_trace_save+0x8c/0xc0 [ 54.204073][ T8483] ? stack_trace_consume_entry+0x160/0x160 [ 54.209944][ T8483] ___sys_sendmsg+0xf3/0x170 [ 54.214533][ T8483] ? sendmsg_copy_msghdr+0x160/0x160 [ 54.219851][ T8483] ? task_work_run+0xdd/0x190 [ 54.224526][ T8483] ? syscall_exit_to_user_mode+0x19/0x50 [ 54.230237][ T8483] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.236305][ T8483] ? debug_object_active_state+0x260/0x350 [ 54.242251][ T8483] ? lock_downgrade+0x6d0/0x6d0 [ 54.247102][ T8483] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 54.253276][ T8483] ? lockdep_hardirqs_on+0x79/0x100 [ 54.258562][ T8483] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 54.264371][ T8483] ? debug_object_active_state+0x260/0x350 [ 54.270251][ T8483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.276484][ T8483] ? __fget_light+0x215/0x280 [ 54.281212][ T8483] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.287457][ T8483] __sys_sendmsg+0xe5/0x1b0 [ 54.292031][ T8483] ? __sys_sendmsg_sock+0xb0/0xb0 [ 54.297145][ T8483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 54.303253][ T8483] do_syscall_64+0x2d/0x70 [ 54.307760][ T8483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.313656][ T8483] RIP: 0033:0x4419b9 [ 54.317628][ T8483] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.337343][ T8483] RSP: 002b:00007fff30b7c818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.345830][ T8483] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004419b9 [ 54.353890][ T8483] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 54.361977][ T8483] RBP: 000000306e616c77 R08: 0000000000000000 R09: 0000002100000000 [ 54.370120][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 54.378345][ T8483] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 54.386329][ T8483] Kernel panic - not syncing: panic_on_warn set ... [ 54.392899][ T8483] CPU: 1 PID: 8483 Comm: syz-executor600 Not tainted 5.11.0-rc4-syzkaller #0 [ 54.401641][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.411761][ T8483] Call Trace: [ 54.415116][ T8483] dump_stack+0x107/0x163 [ 54.419602][ T8483] panic+0x306/0x73d [ 54.423488][ T8483] ? __warn_printk+0xf3/0xf3 [ 54.428061][ T8483] ? __warn.cold+0x1a/0x44 [ 54.432456][ T8483] ? ieee80211_check_rate_mask+0x2b6/0x380 [ 54.438256][ T8483] __warn.cold+0x35/0x44 [ 54.442573][ T8483] ? ieee80211_check_rate_mask+0x2b6/0x380 [ 54.448365][ T8483] report_bug+0x1bd/0x210 [ 54.452675][ T8483] handle_bug+0x3c/0x60 [ 54.456816][ T8483] exc_invalid_op+0x14/0x40 [ 54.461298][ T8483] asm_exc_invalid_op+0x12/0x20 [ 54.466325][ T8483] RIP: 0010:ieee80211_check_rate_mask+0x2b6/0x380 [ 54.472890][ T8483] Code: 00 42 89 ac a3 58 0b 00 00 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e8 57 1f f9 e8 e3 57 1f f9 0f 0b eb e4 e8 da 57 1f f9 <0f> 0b eb db e8 21 18 62 f9 e9 ef fd ff ff 48 89 ef e8 14 18 62 f9 [ 54.492482][ T8483] RSP: 0018:ffffc9000965f4b0 EFLAGS: 00010293 [ 54.498524][ T8483] RAX: 0000000000000000 RBX: ffff8880234e8bc0 RCX: 0000000000000000 [ 54.506648][ T8483] RDX: ffff8880204eb780 RSI: ffffffff885372a6 RDI: 0000000000000003 [ 54.514982][ T8483] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff885d284e [ 54.523155][ T8483] R10: ffffffff885370b4 R11: 0000000000000000 R12: 0000000000000020 [ 54.531107][ T8483] R13: 0000000000000000 R14: ffff8880234e8bc0 R15: 0000000000000000 [ 54.539069][ T8483] ? ieee80211_check_rate_mask+0xc4/0x380 [ 54.544978][ T8483] ? ieee80211_parse_bitrates+0x5e/0x3e0 [ 54.550592][ T8483] ? ieee80211_check_rate_mask+0x2b6/0x380 [ 54.556379][ T8483] ieee80211_change_bss+0x534/0xc10 [ 54.561559][ T8483] nl80211_set_bss+0x76c/0xc00 [ 54.566304][ T8483] ? cfg80211_cqm_rssi_update+0x640/0x640 [ 54.572103][ T8483] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 54.578324][ T8483] ? nl80211_pre_doit+0xa2/0x630 [ 54.583238][ T8483] genl_family_rcv_msg_doit+0x228/0x320 [ 54.588763][ T8483] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 54.596117][ T8483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.602460][ T8483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.608800][ T8483] ? ns_capable+0xde/0x100 [ 54.613200][ T8483] genl_rcv_msg+0x328/0x580 [ 54.617767][ T8483] ? genl_get_cmd+0x480/0x480 [ 54.622419][ T8483] ? cfg80211_cqm_rssi_update+0x640/0x640 [ 54.628118][ T8483] ? lock_release+0x710/0x710 [ 54.632778][ T8483] netlink_rcv_skb+0x153/0x420 [ 54.637519][ T8483] ? genl_get_cmd+0x480/0x480 [ 54.642258][ T8483] ? netlink_ack+0xaa0/0xaa0 [ 54.646829][ T8483] genl_rcv+0x24/0x40 [ 54.650785][ T8483] netlink_unicast+0x533/0x7d0 [ 54.655615][ T8483] ? netlink_attachskb+0x870/0x870 [ 54.660701][ T8483] ? _copy_from_iter_full+0x275/0x850 [ 54.666228][ T8483] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.672545][ T8483] ? __phys_addr_symbol+0x2c/0x70 [ 54.677548][ T8483] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 54.683244][ T8483] ? __check_object_size+0x171/0x3f0 [ 54.688509][ T8483] netlink_sendmsg+0x856/0xd90 [ 54.693252][ T8483] ? netlink_unicast+0x7d0/0x7d0 [ 54.698167][ T8483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.704881][ T8483] ? netlink_unicast+0x7d0/0x7d0 [ 54.710377][ T8483] sock_sendmsg+0xcf/0x120 [ 54.715082][ T8483] ____sys_sendmsg+0x6e8/0x810 [ 54.719832][ T8483] ? kernel_sendmsg+0x50/0x50 [ 54.724484][ T8483] ? do_recvmmsg+0x6c0/0x6c0 [ 54.729051][ T8483] ? stack_trace_save+0x8c/0xc0 [ 54.733879][ T8483] ? stack_trace_consume_entry+0x160/0x160 [ 54.739669][ T8483] ___sys_sendmsg+0xf3/0x170 [ 54.744236][ T8483] ? sendmsg_copy_msghdr+0x160/0x160 [ 54.749498][ T8483] ? task_work_run+0xdd/0x190 [ 54.754169][ T8483] ? syscall_exit_to_user_mode+0x19/0x50 [ 54.759789][ T8483] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.765924][ T8483] ? debug_object_active_state+0x260/0x350 [ 54.771795][ T8483] ? lock_downgrade+0x6d0/0x6d0 [ 54.776628][ T8483] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 54.782422][ T8483] ? lockdep_hardirqs_on+0x79/0x100 [ 54.787599][ T8483] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 54.793385][ T8483] ? debug_object_active_state+0x260/0x350 [ 54.799168][ T8483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.805386][ T8483] ? __fget_light+0x215/0x280 [ 54.810042][ T8483] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.816353][ T8483] __sys_sendmsg+0xe5/0x1b0 [ 54.820834][ T8483] ? __sys_sendmsg_sock+0xb0/0xb0 [ 54.825847][ T8483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 54.831724][ T8483] do_syscall_64+0x2d/0x70 [ 54.836118][ T8483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.841993][ T8483] RIP: 0033:0x4419b9 [ 54.845867][ T8483] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.865537][ T8483] RSP: 002b:00007fff30b7c818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.873942][ T8483] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004419b9 [ 54.881891][ T8483] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 54.889846][ T8483] RBP: 000000306e616c77 R08: 0000000000000000 R09: 0000002100000000 [ 54.897971][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 54.906284][ T8483] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 54.918093][ T8483] Kernel Offset: disabled [ 54.922571][ T8483] Rebooting in 86400 seconds..