program: syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x78, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {0x9}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x2, 0xfff, 0x4}}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9f, 0x68}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x10, 0x80, 0xc, 0x5b, {{0x5, 0x4, 0x2, 0x14, 0x14, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast1, @local}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r11, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r8, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x400, 0x6, 0x6, 0x9, 0xd}, {0x2, 0x6, 0x9, 0x1, 0x25}], 0x2, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) [ 121.479731][ T44] Bluetooth: hci0: command tx timeout [ 121.724804][ T5338] loop0: detected capacity change from 0 to 4096 [ 121.877574][ T5340] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.987139][ T5338] ------------[ cut here ]------------ [ 121.990059][ T5338] !chanctx_conf [ 121.990096][ T5338] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x64a/0x6e0, CPU#0: syz.0.0/5338 [ 121.996395][ T5338] Modules linked in: [ 121.999311][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 122.003105][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.007027][ T5338] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 122.009676][ T5338] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 b0 a8 f6 90 0f 0b 90 eb e1 e8 47 b0 a8 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 122.017417][ T5338] RSP: 0018:ffffc9000374efd8 EFLAGS: 00010287 [ 122.019888][ T5338] RAX: ffffffff8b1d0a49 RBX: ffff888012c80000 RCX: 0000000000100000 [ 122.023878][ T5338] RDX: ffffc90020802000 RSI: 0000000000000399 RDI: 000000000000039a [ 122.026882][ T5338] RBP: 0000000000000000 R08: ffffffff8b1d0563 R09: ffffffff8e95cd60 [ 122.030060][ T5338] R10: dffffc0000000000 R11: ffffed1002590031 R12: 1ffff1100259000a [ 122.033076][ T5338] R13: ffff88801fd10f20 R14: 0000000000000001 R15: ffffffff8b1d0563 [ 122.036183][ T5338] FS: 00007fc4cca196c0(0000) GS:ffff88808c885000(0000) knlGS:0000000000000000 [ 122.039607][ T5338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.042103][ T5338] CR2: 0000200000001080 CR3: 000000001339e000 CR4: 0000000000352ef0 [ 122.045123][ T5338] Call Trace: [ 122.046424][ T5338] [ 122.047647][ T5338] rate_control_rate_init_all_links+0x109/0x1a0 [ 122.050056][ T5338] sta_apply_auth_flags+0x1c2/0x400 [ 122.052044][ T5338] sta_apply_parameters+0x1098/0x18a0 [ 122.054075][ T5338] ieee80211_add_station+0x3e6/0x710 [ 122.056132][ T5338] rdev_add_station+0xfc/0x290 [ 122.057995][ T5338] nl80211_new_station+0x1cab/0x2130 [ 122.060049][ T5338] ? __pfx_nl80211_new_station+0x10/0x10 [ 122.062263][ T5338] ? __rtnl_unlock+0xc8/0xf0 [ 122.064026][ T5338] genl_family_rcv_msg_doit+0x22a/0x330 [ 122.066018][ T5338] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 122.068511][ T5338] ? bpf_lsm_capable+0x9/0x20 [ 122.070340][ T5338] ? security_capable+0x7e/0x2c0 [ 122.072238][ T5338] genl_rcv_msg+0x61c/0x7a0 [ 122.073979][ T5338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.076160][ T5338] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 122.079015][ T5338] ? __pfx_nl80211_new_station+0x10/0x10 [ 122.081189][ T5338] ? __pfx_nl80211_post_doit+0x10/0x10 [ 122.083252][ T5338] ? __pfx_ref_tracker_free+0x10/0x10 [ 122.085362][ T5338] ? __asan_memcpy+0x40/0x70 [ 122.087219][ T5338] ? __skb_clone+0x63/0x7a0 [ 122.089153][ T5338] netlink_rcv_skb+0x232/0x4b0 [ 122.091025][ T5338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.093001][ T5338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.095055][ T5338] ? down_read+0x270/0x2e0 [ 122.096833][ T5338] ? genl_rcv+0xd/0x40 [ 122.098600][ T5338] genl_rcv+0x28/0x40 [ 122.100204][ T5338] netlink_unicast+0x75c/0x8e0 [ 122.102213][ T5338] netlink_sendmsg+0x813/0xb40 [ 122.104202][ T5338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.106360][ T5338] ? aa_sock_msg_perm+0xf1/0x1b0 [ 122.108428][ T5338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.110454][ T5338] ____sys_sendmsg+0x972/0x9f0 [ 122.112273][ T5338] ? __might_fault+0xaf/0x130 [ 122.114146][ T5338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.116222][ T5338] ? import_iovec+0x73/0xa0 [ 122.118137][ T5338] ___sys_sendmsg+0x2a5/0x360 [ 122.119989][ T5338] ? __lock_acquire+0x6b5/0x2cf0 [ 122.121934][ T5338] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.124019][ T5338] ? futex_wait+0x2a2/0x390 [ 122.125714][ T5338] ? __fget_files+0x2a/0x420 [ 122.127576][ T5338] ? __fget_files+0x3a0/0x420 [ 122.129530][ T5338] __x64_sys_sendmsg+0x1bd/0x2a0 [ 122.131470][ T5338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.133606][ T5338] ? rcu_is_watching+0x15/0xb0 [ 122.135498][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.137899][ T5338] do_syscall_64+0x15f/0xf80 [ 122.139731][ T5338] ? trace_irq_disable+0x3b/0x140 [ 122.141757][ T5338] ? clear_bhb_loop+0x40/0x90 [ 122.143556][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.145729][ T5338] RIP: 0033:0x7fc4cbb9cdd9 [ 122.147470][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.154203][ T5338] RSP: 002b:00007fc4cca18fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.157158][ T5338] RAX: ffffffffffffffda RBX: 00007fc4cbe15fa0 RCX: 00007fc4cbb9cdd9 [ 122.160734][ T5338] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 122.163772][ T5338] RBP: 00007fc4cbc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 122.166860][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.170000][ T5338] R13: 00007fc4cbe16038 R14: 00007fc4cbe15fa0 R15: 00007fffa93bf7d8 [ 122.173080][ T5338] [ 122.174287][ T5338] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.177157][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 122.180600][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.184485][ T5338] Call Trace: [ 122.185827][ T5338] [ 122.186784][ T5338] vpanic+0x56c/0xa60 [ 122.188213][ T5338] ? __pfx__printk+0x10/0x10 [ 122.189999][ T5338] ? __pfx_vpanic+0x10/0x10 [ 122.191734][ T5338] ? is_bpf_text_address+0x292/0x2b0 [ 122.193683][ T5338] ? is_bpf_text_address+0x26/0x2b0 [ 122.195715][ T5338] panic+0xc5/0xd0 [ 122.197167][ T5338] ? __pfx_panic+0x10/0x10 [ 122.198894][ T5338] __warn+0x315/0x4c0 [ 122.200481][ T5338] ? rate_control_rate_init+0x64a/0x6e0 [ 122.202476][ T5338] ? rate_control_rate_init+0x64a/0x6e0 [ 122.204627][ T5338] __report_bug+0x29a/0x540 [ 122.206481][ T5338] ? rate_control_rate_init+0x64a/0x6e0 [ 122.208673][ T5338] ? __pfx___report_bug+0x10/0x10 [ 122.210667][ T5338] ? __lock_acquire+0x6b5/0x2cf0 [ 122.212655][ T5338] ? __lock_acquire+0x6b5/0x2cf0 [ 122.214509][ T5338] ? rate_control_rate_init+0x64a/0x6e0 [ 122.216735][ T5338] report_bug+0x16a/0x220 [ 122.218438][ T5338] ? rate_control_rate_init+0x64a/0x6e0 [ 122.220630][ T5338] ? rate_control_rate_init+0x64c/0x6e0 [ 122.222766][ T5338] handle_bug+0x9c/0x200 [ 122.224457][ T5338] exc_invalid_op+0x1a/0x50 [ 122.226268][ T5338] asm_exc_invalid_op+0x1a/0x20 [ 122.228217][ T5338] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 122.230721][ T5338] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 b0 a8 f6 90 0f 0b 90 eb e1 e8 47 b0 a8 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 122.238181][ T5338] RSP: 0018:ffffc9000374efd8 EFLAGS: 00010287 [ 122.240574][ T5338] RAX: ffffffff8b1d0a49 RBX: ffff888012c80000 RCX: 0000000000100000 [ 122.243660][ T5338] RDX: ffffc90020802000 RSI: 0000000000000399 RDI: 000000000000039a [ 122.246720][ T5338] RBP: 0000000000000000 R08: ffffffff8b1d0563 R09: ffffffff8e95cd60 [ 122.249743][ T5338] R10: dffffc0000000000 R11: ffffed1002590031 R12: 1ffff1100259000a [ 122.252656][ T5338] R13: ffff88801fd10f20 R14: 0000000000000001 R15: ffffffff8b1d0563 [ 122.255696][ T5338] ? rate_control_rate_init+0x163/0x6e0 [ 122.257855][ T5338] ? rate_control_rate_init+0x163/0x6e0 [ 122.260010][ T5338] ? rate_control_rate_init+0x649/0x6e0 [ 122.262152][ T5338] ? rate_control_rate_init+0x649/0x6e0 [ 122.264268][ T5338] rate_control_rate_init_all_links+0x109/0x1a0 [ 122.266729][ T5338] sta_apply_auth_flags+0x1c2/0x400 [ 122.268761][ T5338] sta_apply_parameters+0x1098/0x18a0 [ 122.270862][ T5338] ieee80211_add_station+0x3e6/0x710 [ 122.272901][ T5338] rdev_add_station+0xfc/0x290 [ 122.274782][ T5338] nl80211_new_station+0x1cab/0x2130 [ 122.276781][ T5338] ? __pfx_nl80211_new_station+0x10/0x10 [ 122.278990][ T5338] ? __rtnl_unlock+0xc8/0xf0 [ 122.280925][ T5338] genl_family_rcv_msg_doit+0x22a/0x330 [ 122.283053][ T5338] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 122.285450][ T5338] ? bpf_lsm_capable+0x9/0x20 [ 122.287340][ T5338] ? security_capable+0x7e/0x2c0 [ 122.289289][ T5338] genl_rcv_msg+0x61c/0x7a0 [ 122.291024][ T5338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.293031][ T5338] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 122.295142][ T5338] ? __pfx_nl80211_new_station+0x10/0x10 [ 122.297333][ T5338] ? __pfx_nl80211_post_doit+0x10/0x10 [ 122.299427][ T5338] ? __pfx_ref_tracker_free+0x10/0x10 [ 122.301507][ T5338] ? __asan_memcpy+0x40/0x70 [ 122.303284][ T5338] ? __skb_clone+0x63/0x7a0 [ 122.305065][ T5338] netlink_rcv_skb+0x232/0x4b0 [ 122.306766][ T5338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.308653][ T5338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.310683][ T5338] ? down_read+0x270/0x2e0 [ 122.312499][ T5338] ? genl_rcv+0xd/0x40 [ 122.314149][ T5338] genl_rcv+0x28/0x40 [ 122.315731][ T5338] netlink_unicast+0x75c/0x8e0 [ 122.317637][ T5338] netlink_sendmsg+0x813/0xb40 [ 122.319525][ T5338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.321502][ T5338] ? aa_sock_msg_perm+0xf1/0x1b0 [ 122.323427][ T5338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.325450][ T5338] ____sys_sendmsg+0x972/0x9f0 [ 122.327292][ T5338] ? __might_fault+0xaf/0x130 [ 122.329142][ T5338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.331158][ T5338] ? import_iovec+0x73/0xa0 [ 122.332936][ T5338] ___sys_sendmsg+0x2a5/0x360 [ 122.334804][ T5338] ? __lock_acquire+0x6b5/0x2cf0 [ 122.336842][ T5338] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.338900][ T5338] ? futex_wait+0x2a2/0x390 [ 122.340745][ T5338] ? __fget_files+0x2a/0x420 [ 122.342548][ T5338] ? __fget_files+0x3a0/0x420 [ 122.344404][ T5338] __x64_sys_sendmsg+0x1bd/0x2a0 [ 122.346135][ T5338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.348303][ T5338] ? rcu_is_watching+0x15/0xb0 [ 122.350190][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.352482][ T5338] do_syscall_64+0x15f/0xf80 [ 122.354256][ T5338] ? trace_irq_disable+0x3b/0x140 [ 122.356231][ T5338] ? clear_bhb_loop+0x40/0x90 [ 122.358010][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.360318][ T5338] RIP: 0033:0x7fc4cbb9cdd9 [ 122.362051][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.369210][ T5338] RSP: 002b:00007fc4cca18fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.372437][ T5338] RAX: ffffffffffffffda RBX: 00007fc4cbe15fa0 RCX: 00007fc4cbb9cdd9 [ 122.375583][ T5338] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 122.378625][ T5338] RBP: 00007fc4cbc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 122.381700][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.384812][ T5338] R13: 00007fc4cbe16038 R14: 00007fc4cbe15fa0 R15: 00007fffa93bf7d8 [ 122.387788][ T5338] [ 122.389390][ T5338] Kernel Offset: disabled [ 122.391067][ T5338] Rebooting in 86400 seconds..