wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. ------------[ cut here ]------------ no supported rates (0xffffffff) in rate_mask 0x0 with flags 0x0 WARNING: CPU: 0 PID: 1 at net/mac80211/rate.c:359 __rate_control_send_low+0x4bb/0x580 net/mac80211/rate.c:359 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 panic+0x26a/0x50e kernel/panic.c:186 __warn.cold+0x20/0x5a kernel/panic.c:541 report_bug+0x262/0x2b0 lib/bug.c:183 fixup_bug arch/x86/kernel/traps.c:178 [inline] fixup_bug arch/x86/kernel/traps.c:173 [inline] do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038 RIP: 0010:__rate_control_send_low+0x4bb/0x580 net/mac80211/rate.c:359 Code: 0f 85 d6 00 00 00 48 8b 44 24 18 44 8b 24 a8 e8 9b 42 c6 f9 8b 54 24 24 44 89 e9 44 89 e6 48 c7 c7 80 98 67 89 e8 6a 7a 56 00 <0f> 0b e9 03 fe ff ff e8 79 42 c6 f9 41 83 cd 10 e9 32 fc ff ff e8 RSP: 0018:ffff8880ba007a70 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff8880aa2fd5a8 RCX: 0000000000000000 RDX: 0000000000000100 RSI: ffffffff814dff01 RDI: ffffed1017400f40 RBP: ffff88805331b388 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: 00000000ffffffff netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. R13: 0000000000000000 R14: 000000000000000c R15: 0000000000000000 rate_control_send_low+0x272/0x610 net/mac80211/rate.c:383 minstrel_ht_get_rate+0x58/0x1510 net/mac80211/rc80211_minstrel_ht.c:1045 rate_control_get_rate+0x43c/0x520 net/mac80211/rate.c:910 __ieee80211_beacon_get+0x93b/0x1a30 net/mac80211/tx.c:4436 ieee80211_beacon_get_tim+0x88/0x890 net/mac80211/tx.c:4463 ieee80211_beacon_get include/net/mac80211.h:4484 [inline] mac80211_hwsim_beacon_tx+0xff/0x680 drivers/net/wireless/mac80211_hwsim.c:1577 __iterate_interfaces+0x2e1/0x4a0 net/mac80211/util.c:614 ieee80211_iterate_active_interfaces_atomic+0x8d/0x170 net/mac80211/util.c:650 mac80211_hwsim_beacon+0xc9/0x190 drivers/net/wireless/mac80211_hwsim.c:1615 __tasklet_hrtimer_trampoline+0x29/0xa0 kernel/softirq.c:601 tasklet_action_common.constprop.0+0x265/0x360 kernel/softirq.c:522 sp0: Synchronizing with TNC __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:__sanitizer_cov_trace_pc+0x22/0x50 kernel/kcov.c:101 Code: 90 90 90 90 90 90 90 90 48 8b 34 24 65 48 8b 04 25 c0 df 01 00 65 8b 15 cc 59 9f 7e 81 e2 00 01 1f 00 75 2b 8b 90 60 13 00 00 <83> fa 02 75 20 48 8b 88 68 13 00 00 8b 80 64 13 00 00 48 8b 11 48 RSP: 0018:ffff8880b5a07a20 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: ffff8880b59fa040 RBX: 0000000000000001 RCX: ffffffff83771e23 RDX: 0000000000000000 RSI: ffffffff83771e31 RDI: 0000000000000005 RBP: ffffffff88b3e120 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000074071 R12: 0000000000000000 R13: ffffffff88b3e0e0 R14: ffff88823b843380 R15: 0000000000001000 check_preemption_disabled+0x41/0x280 lib/smp_processor_id.c:51 rcu_dynticks_curr_cpu_in_eqs kernel/rcu/tree.c:348 [inline] rcu_is_watching+0x12/0xc0 kernel/rcu/tree.c:1025 rcu_read_unlock include/linux/rcupdate.h:677 [inline] is_bpf_text_address+0x10e/0x1b0 kernel/bpf/core.c:548 kernel_text_address kernel/extable.c:152 [inline] kernel_text_address+0xbd/0xf0 kernel/extable.c:122 __kernel_text_address+0x9/0x30 kernel/extable.c:107 unwind_get_return_address arch/x86/kernel/unwind_orc.c:297 [inline] unwind_get_return_address+0x51/0x90 arch/x86/kernel/unwind_orc.c:292 __save_stack_trace+0xaf/0x190 arch/x86/kernel/stacktrace.c:45 save_stack mm/kasan/kasan.c:448 [inline] set_track mm/kasan/kasan.c:460 [inline] kasan_kmalloc+0xeb/0x160 mm/kasan/kasan.c:553 slab_post_alloc_hook mm/slab.h:445 [inline] slab_alloc mm/slab.c:3397 [inline] kmem_cache_alloc+0x110/0x370 mm/slab.c:3557 getname_flags+0xce/0x590 fs/namei.c:140 do_sys_open+0x26c/0x520 fs/open.c:1079 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fc58ad1685d Code: bb 20 00 00 75 10 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 67 f6 ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffd1a0a53e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007ffd1a0a5470 RCX: 00007fc58ad1685d RDX: 0000000000000001 RSI: 00000000000a0100 RDI: 00005644f4903eb0 RBP: 0000000000000008 R08: 00005644f48a32db R09: 0000000000000020 R10: 0000000000000000 R11: 0000000000000293 R12: 00005644f4903ec7 R13: 00005644f488ed40 R14: 00007ffd1a0a5400 R15: 00005644f48a32b0 Kernel Offset: disabled Rebooting in 86400 seconds.. ---------------- Code disassembly (best guess): 0: 90 nop 1: 90 nop 2: 90 nop 3: 90 nop 4: 90 nop 5: 90 nop 6: 90 nop 7: 90 nop 8: 48 8b 34 24 mov (%rsp),%rsi c: 65 48 8b 04 25 c0 df mov %gs:0x1dfc0,%rax 13: 01 00 15: 65 8b 15 cc 59 9f 7e mov %gs:0x7e9f59cc(%rip),%edx # 0x7e9f59e8 1c: 81 e2 00 01 1f 00 and $0x1f0100,%edx 22: 75 2b jne 0x4f 24: 8b 90 60 13 00 00 mov 0x1360(%rax),%edx * 2a: 83 fa 02 cmp $0x2,%edx <-- trapping instruction 2d: 75 20 jne 0x4f 2f: 48 8b 88 68 13 00 00 mov 0x1368(%rax),%rcx 36: 8b 80 64 13 00 00 mov 0x1364(%rax),%eax 3c: 48 8b 11 mov (%rcx),%rdx 3f: 48 rex.W