wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready ------------[ cut here ]------------ no supported rates (0xffffffff) in rate_mask 0x0 with flags 0x0 WARNING: CPU: 1 PID: 17691 at net/mac80211/rate.c:359 __rate_control_send_low+0x4bb/0x580 net/mac80211/rate.c:359 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 17691 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 panic+0x26a/0x50e kernel/panic.c:186 audit: type=1326 audit(1665952435.902:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f50f865a9 code=0x7ffc0000 __warn.cold+0x20/0x5a kernel/panic.c:541 report_bug+0x262/0x2b0 lib/bug.c:183 fixup_bug arch/x86/kernel/traps.c:178 [inline] fixup_bug arch/x86/kernel/traps.c:173 [inline] do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038 RIP: 0010:__rate_control_send_low+0x4bb/0x580 net/mac80211/rate.c:359 Code: 0f 85 d6 00 00 00 48 8b 44 24 18 44 8b 24 a8 e8 9b 42 c6 f9 8b 54 24 24 44 89 e9 44 89 e6 48 c7 c7 80 98 67 89 e8 6a 7a 56 00 <0f> 0b e9 03 fe ff ff e8 79 42 c6 f9 41 83 cd 10 e9 32 fc ff ff e8 RSP: 0018:ffff8880ba107a70 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff888095049728 RCX: 0000000000000000 RDX: 0000000000000100 RSI: ffffffff814dff01 RDI: ffffed1017420f40 RBP: ffff88804339b448 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000000 rate_control_send_low+0x272/0x610 net/mac80211/rate.c:383 minstrel_ht_get_rate+0x58/0x1510 net/mac80211/rc80211_minstrel_ht.c:1045 rate_control_get_rate+0x43c/0x520 net/mac80211/rate.c:910 __ieee80211_beacon_get+0x93b/0x1a30 net/mac80211/tx.c:4436 ieee80211_beacon_get_tim+0x88/0x890 net/mac80211/tx.c:4463 ieee80211_beacon_get include/net/mac80211.h:4484 [inline] mac80211_hwsim_beacon_tx+0xff/0x680 drivers/net/wireless/mac80211_hwsim.c:1577 __iterate_interfaces+0x2e1/0x4a0 net/mac80211/util.c:614 ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 net/mac80211/util.c:650 mac80211_hwsim_beacon+0xc9/0x190 drivers/net/wireless/mac80211_hwsim.c:1615 __tasklet_hrtimer_trampoline+0x29/0xa0 kernel/softirq.c:601 tasklet_action_common.constprop.0+0x265/0x360 kernel/softirq.c:522 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:unwind_next_frame+0xe2b/0x1400 arch/x86/kernel/unwind_orc.c:571 Code: 8d 7e 40 4c 8b a4 24 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 03 00 00 4d 89 66 40 <48> b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 04 02 84 RSP: 0018:ffff888045c07650 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000001 RBX: 1ffff11008b80ed3 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: ffff888045c075e0 RDI: ffff888045c07dd8 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 R10: ffff888045c077df R11: 0000000000074071 R12: ffff888045c07e08 R13: ffff888045c077b5 R14: ffff888045c07780 R15: ffffffff8b957268 __save_stack_trace+0x9f/0x190 arch/x86/kernel/stacktrace.c:44 save_stack mm/kasan/kasan.c:448 [inline] set_track mm/kasan/kasan.c:460 [inline] kasan_kmalloc+0xeb/0x160 mm/kasan/kasan.c:553 slab_post_alloc_hook mm/slab.h:445 [inline] slab_alloc mm/slab.c:3397 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x144/0x3c0 mm/slab.c:3736 kmalloc include/linux/slab.h:520 [inline] aa_label_asxprint+0x86/0x130 security/apparmor/label.c:1708 apparmor_secid_to_secctx+0x84/0x150 security/apparmor/secid.c:88 security_secid_to_secctx+0x56/0xb0 security/security.c:1317 audit_log_task_context+0xec/0x160 kernel/audit.c:2227 audit_log_task+0x1cd/0x300 kernel/auditsc.c:2446 audit_seccomp+0x76/0x290 kernel/auditsc.c:2496 seccomp_log kernel/seccomp.c:603 [inline] __seccomp_filter+0x7ac/0xca0 kernel/seccomp.c:731 __secure_computing+0xfc/0x360 kernel/seccomp.c:796 syscall_trace_enter+0x563/0xd60 arch/x86/entry/common.c:121 do_syscall_64+0x486/0x620 arch/x86/entry/common.c:283 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f2f50f865a9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2f4f8f9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007f2f510a6f88 RCX: 00007f2f50f865a9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2f510a6f8c RBP: 00007f2f510a6f80 R08: 0000004a054f1afc R09: 0000000000000000 R10: 000000000000001e R11: 0000000000000246 R12: 00007f2f510a6f8c R13: 00007ffedfa9f44f R14: 00007f2f4f8f9300 R15: 0000000000022000 Kernel Offset: disabled Rebooting in 86400 seconds.. ---------------- Code disassembly (best guess): 0: 8d 7e 40 lea 0x40(%rsi),%edi 3: 4c 8b a4 24 88 00 00 mov 0x88(%rsp),%r12 a: 00 b: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 12: fc ff df 15: 48 89 fa mov %rdi,%rdx 18: 48 c1 ea 03 shr $0x3,%rdx 1c: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 20: 0f 85 28 03 00 00 jne 0x34e 26: 4d 89 66 40 mov %r12,0x40(%r14) * 2a: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax <-- trapping instruction 31: fc ff df 34: 4c 89 f2 mov %r14,%rdx 37: 48 c1 ea 03 shr $0x3,%rdx 3b: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax 3f: 84 .byte 0x84