IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 ieee80211 phy4: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static) no supported rates (0xffffffff) in rate_mask 0x0 with flags 0x0 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 5 at net/mac80211/rate.c:362 __rate_control_send_low.cold.6+0x56/0x78 net/mac80211/rate.c:359 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.210-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy11 ieee80211_iface_work Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x14b/0x1f1 lib/dump_stack.c:58 panic+0x1b0/0x358 kernel/panic.c:183 __warn.cold.7+0x25/0x2c kernel/panic.c:547 report_bug+0x1a4/0x1f3 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:177 [inline] do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295 ieee80211 phy4: mac80211_hwsim_config (freq=2447(2447 - 0)/noht idle=0 ps=0 smps=static) ieee80211 phy4: mac80211_hwsim_bss_info_changed(changed=0x4000 vif->addr=02:00:00:00:04:00) do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964 RIP: 0010:__rate_control_send_low.cold.6+0x56/0x78 net/mac80211/rate.c:359 RSP: 0018:ffff8881f6407a48 EFLAGS: 00010286 RAX: 000000000000003f RBX: 000000000000000c RCX: 0000000000000000 RDX: 000000000000003f RSI: ffff8881f531ca68 RDI: ffffed103ec80f40 RBP: ffff8881f6407ab0 R08: ffff8881f531ca38 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881e4584c28 R13: 0000000000000000 R14: 0000000000000090 R15: 000000000000000c ieee80211 phy4: mac80211_hwsim_bss_info_changed(changed=0xc8340 vif->addr=02:00:00:00:04:00) ieee80211 phy4: BCN EN: 1 (BI=100) rate_control_send_low+0x21d/0x570 net/mac80211/rate.c:383 minstrel_ht_get_rate+0x50/0x1500 net/mac80211/rc80211_minstrel_ht.c:1045 rate_control_get_rate+0x3ac/0x5e0 net/mac80211/rate.c:910 __ieee80211_beacon_get+0x814/0x1950 net/mac80211/tx.c:4319 ieee80211_beacon_get_tim+0x7c/0x6d0 net/mac80211/tx.c:4346 ieee80211 phy4: TX Power: 20 dBm ieee80211_beacon_get include/net/mac80211.h:4401 [inline] mac80211_hwsim_beacon_tx+0xd3/0x550 drivers/net/wireless/mac80211_hwsim.c:1520 __iterate_interfaces+0xd6/0x380 net/mac80211/util.c:613 ieee80211_iterate_active_interfaces_atomic+0x61/0x100 net/mac80211/util.c:649 mac80211_hwsim_beacon+0xbb/0x180 drivers/net/wireless/mac80211_hwsim.c:1558 __tasklet_hrtimer_trampoline+0x2d/0xb0 kernel/softirq.c:618 tasklet_hi_action+0x19e/0x360 kernel/softirq.c:549 __do_softirq+0x246/0x9b5 kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x15f/0x1a0 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x145/0x5d0 arch/x86/kernel/apic/apic.c:1102 apic_timer_interrupt+0x9a/0xa0 arch/x86/entry/entry_64.S:793 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:console_unlock+0xc12/0xe50 kernel/printk/printk.c:2404 RSP: 0018:ffff8881f532fa40 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: dffffc0000000000 RBX: 0000000000000200 RCX: 1ffff1103ea63947 RDX: 1ffffffff11e1099 RSI: ffff8881f531ca18 RDI: 0000000000000282 RBP: ffff8881f532fab8 R08: ffff8881f531ca38 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: 0000000000000000 R14: ffffffff8961c2a0 R15: ffffffff8961c270 vprintk_emit+0x32f/0x4e0 kernel/printk/printk.c:1923 vprintk_default+0x1a/0x20 kernel/printk/printk.c:1963 vprintk_func+0x49/0x12c kernel/printk/printk_safe.c:401 printk+0x91/0xab kernel/printk/printk.c:1996 ieee80211_sta_find_ibss net/mac80211/ibss.c:1474 [inline] ieee80211_ibss_work.cold.11+0x253/0x4d5 net/mac80211/ibss.c:1700 ieee80211_iface_work+0x4a6/0x690 net/mac80211/iface.c:1383 process_one_work+0x74f/0x1620 kernel/workqueue.c:2116 worker_thread+0xcc/0xed0 kernel/workqueue.c:2250 kthread+0x338/0x400 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Kernel Offset: disabled Rebooting in 86400 seconds..