[ OK ] Found device /dev/ttyS0. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. syzkaller login: [ 64.067077][ T6878] IPVS: ftp: loaded support on port[0] = 21 [ 64.133426][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.163436][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 64.177776][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.185715][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.193731][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.211798][ T2636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.240553][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor823'. [ 64.251734][ T6878] ------------[ cut here ]------------ [ 64.258298][ T6878] WARNING: CPU: 1 PID: 6878 at net/mac80211/rate.c:281 ieee80211_check_rate_mask+0x1af/0x220 [ 64.269427][ T6878] Kernel panic - not syncing: panic_on_warn set ... [ 64.276034][ T6878] CPU: 1 PID: 6878 Comm: syz-executor823 Not tainted 5.9.0-rc6-syzkaller #0 [ 64.284706][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.294950][ T6878] Call Trace: [ 64.298231][ T6878] dump_stack+0x198/0x1fd [ 64.302550][ T6878] panic+0x382/0x7fb [ 64.306440][ T6878] ? __warn_printk+0xf3/0xf3 [ 64.311046][ T6878] ? printk+0xba/0xed [ 64.315049][ T6878] ? log_store.cold+0x16/0x16 [ 64.319723][ T6878] ? __warn.cold+0x5/0x4b [ 64.324031][ T6878] ? __warn+0xd6/0x1f2 [ 64.328174][ T6878] ? ieee80211_check_rate_mask+0x1af/0x220 [ 64.333981][ T6878] __warn.cold+0x20/0x4b [ 64.338216][ T6878] ? ieee80211_check_rate_mask+0x1af/0x220 [ 64.344004][ T6878] report_bug+0x1bd/0x210 [ 64.348332][ T6878] handle_bug+0x38/0x90 [ 64.352490][ T6878] ? lock_is_held_type+0xbb/0xf0 [ 64.357419][ T6878] exc_invalid_op+0x14/0x40 [ 64.361902][ T6878] asm_exc_invalid_op+0x12/0x20 [ 64.366749][ T6878] RIP: 0010:ieee80211_check_rate_mask+0x1af/0x220 [ 64.373158][ T6878] Code: 45 85 ff 0f 84 86 0c 00 00 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 bf 8c a1 f9 e8 ba 8c a1 f9 0f 0b eb e4 e8 b1 8c a1 f9 <0f> 0b eb db e8 e8 4f e3 f9 e9 f6 fe ff ff 48 89 ef e8 db 4f e3 f9 [ 64.392846][ T6878] RSP: 0018:ffffc900055274b0 EFLAGS: 00010293 [ 64.398903][ T6878] RAX: 0000000000000000 RBX: ffff88808a7d0c00 RCX: ffffffff87d4fa14 [ 64.406870][ T6878] RDX: ffff888091b2e000 RSI: ffffffff87d4faff RDI: 0000000000000005 [ 64.414820][ T6878] RBP: 0000000000000000 R08: ffff88808a7d1e58 R09: ffff888091b2e900 [ 64.422783][ T6878] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 64.430732][ T6878] R13: 00000000ffffffff R14: ffff88808a7d0c00 R15: 0000000000000000 [ 64.438698][ T6878] ? ieee80211_check_rate_mask+0xc4/0x220 [ 64.444406][ T6878] ? ieee80211_check_rate_mask+0x1af/0x220 [ 64.450221][ T6878] ieee80211_change_bss+0x53c/0xc20 [ 64.455402][ T6878] nl80211_set_bss+0x76c/0xc70 [ 64.460147][ T6878] ? nl80211_set_power_save+0x6c0/0x6c0 [ 64.465691][ T6878] ? nl80211_pre_doit+0xa2/0x630 [ 64.470612][ T6878] genl_family_rcv_msg_doit+0x228/0x320 [ 64.476154][ T6878] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 64.483507][ T6878] ? ns_capable+0xde/0x100 [ 64.487906][ T6878] genl_rcv_msg+0x328/0x580 [ 64.492388][ T6878] ? genl_get_cmd+0x480/0x480 [ 64.497072][ T6878] ? lock_acquire+0x1f3/0xaf0 [ 64.501744][ T6878] ? nl80211_set_power_save+0x6c0/0x6c0 [ 64.507297][ T6878] ? lock_release+0x8f0/0x8f0 [ 64.511968][ T6878] netlink_rcv_skb+0x15a/0x430 [ 64.516721][ T6878] ? genl_get_cmd+0x480/0x480 [ 64.521389][ T6878] ? netlink_ack+0xa10/0xa10 [ 64.525967][ T6878] ? __kmalloc_node_track_caller+0x38/0x60 [ 64.531753][ T6878] genl_rcv+0x24/0x40 [ 64.535908][ T6878] netlink_unicast+0x533/0x7d0 [ 64.540652][ T6878] ? netlink_attachskb+0x810/0x810 [ 64.545742][ T6878] ? __phys_addr_symbol+0x2c/0x70 [ 64.550759][ T6878] ? __check_object_size+0x171/0x3e4 [ 64.556025][ T6878] netlink_sendmsg+0x856/0xd90 [ 64.560770][ T6878] ? netlink_unicast+0x7d0/0x7d0 [ 64.565702][ T6878] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.570989][ T6878] ? netlink_unicast+0x7d0/0x7d0 [ 64.575909][ T6878] sock_sendmsg+0xcf/0x120 [ 64.580303][ T6878] ____sys_sendmsg+0x6e8/0x810 [ 64.585044][ T6878] ? kernel_sendmsg+0x50/0x50 [ 64.589872][ T6878] ? do_recvmmsg+0x6d0/0x6d0 [ 64.595144][ T6878] ? stack_trace_consume_entry+0x160/0x160 [ 64.600940][ T6878] ___sys_sendmsg+0xf3/0x170 [ 64.605540][ T6878] ? sendmsg_copy_msghdr+0x160/0x160 [ 64.610911][ T6878] ? syscall_exit_to_user_mode+0x7e/0x2e0 [ 64.616614][ T6878] ? lock_downgrade+0x830/0x830 [ 64.621459][ T6878] ? check_preemption_disabled+0x50/0x130 [ 64.627170][ T6878] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.632970][ T6878] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 64.638944][ T6878] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 64.644738][ T6878] ? lockdep_hardirqs_on+0x53/0x100 [ 64.649934][ T6878] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 64.655731][ T6878] ? debug_object_active_state+0x260/0x350 [ 64.661517][ T6878] ? debug_object_init_on_stack+0x20/0x20 [ 64.667244][ T6878] ? __fget_light+0x215/0x280 [ 64.671927][ T6878] __sys_sendmsg+0xe5/0x1b0 [ 64.676409][ T6878] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.681424][ T6878] ? lock_is_held_type+0xbb/0xf0 [ 64.686347][ T6878] ? check_preemption_disabled+0x50/0x130 [ 64.692060][ T6878] ? syscall_enter_from_user_mode+0x1d/0x60 [ 64.697934][ T6878] do_syscall_64+0x2d/0x70 [ 64.702343][ T6878] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.708225][ T6878] RIP: 0033:0x4419c9 [ 64.712100][ T6878] Code: e8 dc 05 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.731695][ T6878] RSP: 002b:00007ffdbf57fbe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.740099][ T6878] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004419c9 [ 64.748049][ T6878] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 64.755998][ T6878] RBP: 000000306e616c77 R08: 0000000000000000 R09: 0000002000000000 [ 64.763947][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 64.772001][ T6878] R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000004 [ 64.781446][ T6878] Kernel Offset: disabled [ 64.785844][ T6878] Rebooting in 86400 seconds..