program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) [ 106.786578][ T5284] Bluetooth: hci0: command tx timeout [ 107.037802][ T5319] ------------[ cut here ]------------ [ 107.037822][ T5319] !chanctx_conf [ 107.037839][ T5319] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#0: syz.0.0/5319 [ 107.047842][ T5319] Modules linked in: [ 107.050179][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 107.054446][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.058687][ T5319] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 107.061431][ T5319] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 36 52 6f f6 90 0f 0b 90 eb e1 e8 2b 52 6f f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 107.070176][ T5319] RSP: 0018:ffffc9000d5f6fe8 EFLAGS: 00010283 [ 107.073194][ T5319] RAX: ffffffff8b589145 RBX: ffff88803e494050 RCX: 0000000000100000 [ 107.076630][ T5319] RDX: ffffc9000f3e1000 RSI: 0000000000000374 RDI: 0000000000000375 [ 107.079880][ T5319] RBP: dffffc0000000000 R08: ffffffff8b588cb7 R09: 0000000000000000 [ 107.083450][ T5319] R10: dffffc0000000000 R11: ffffed1007c92831 R12: ffffffff8b588cb7 [ 107.086876][ T5319] R13: ffff888052ae0f40 R14: 0000000000000001 R15: 0000000000000000 [ 107.091009][ T5319] FS: 00007fc8237c66c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 107.095435][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.098453][ T5319] CR2: 0000200000001080 CR3: 000000004284d000 CR4: 0000000000352ef0 [ 107.102135][ T5319] Call Trace: [ 107.103778][ T5319] [ 107.105035][ T5319] rate_control_rate_init_all_links+0xf4/0x190 [ 107.107638][ T5319] sta_apply_auth_flags+0x1bc/0x430 [ 107.109836][ T5319] sta_apply_parameters+0x1291/0x1b50 [ 107.112112][ T5319] ieee80211_add_station+0x3de/0x700 [ 107.114670][ T5319] rdev_add_station+0xfc/0x290 [ 107.116857][ T5319] nl80211_new_station+0x1b4e/0x1fd0 [ 107.119280][ T5319] ? trace_contention_end+0x3d/0x140 [ 107.121811][ T5319] ? __pfx_nl80211_new_station+0x10/0x10 [ 107.124434][ T5319] ? __rtnl_unlock+0xc8/0xf0 [ 107.126561][ T5319] ? nl80211_pre_doit+0x53d/0x890 [ 107.128842][ T5319] genl_family_rcv_msg_doit+0x233/0x340 [ 107.131275][ T5319] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 107.134050][ T5319] ? bpf_lsm_capable+0x9/0x20 [ 107.136141][ T5319] ? security_capable+0x7e/0x2c0 [ 107.138440][ T5319] genl_rcv_msg+0x614/0x7a0 [ 107.140397][ T5319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.142667][ T5319] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 107.145260][ T5319] ? __pfx_nl80211_new_station+0x10/0x10 [ 107.147757][ T5319] ? __pfx_nl80211_post_doit+0x10/0x10 [ 107.150227][ T5319] ? __asan_memcpy+0x40/0x70 [ 107.152607][ T5319] ? __skb_clone+0x5c/0x6c0 [ 107.154830][ T5319] netlink_rcv_skb+0x226/0x4a0 [ 107.157081][ T5319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.159280][ T5319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.161740][ T5319] ? down_read+0x2be/0x330 [ 107.163888][ T5319] genl_rcv+0x28/0x40 [ 107.165757][ T5319] netlink_unicast+0x7bd/0x940 [ 107.167875][ T5319] netlink_sendmsg+0x813/0xb40 [ 107.170082][ T5319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.172435][ T5319] ? apparmor_socket_sendmsg+0x98/0x360 [ 107.175065][ T5319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.177397][ T5319] sock_sendmsg_nosec+0x13a/0x180 [ 107.179683][ T5319] ____sys_sendmsg+0x54e/0x850 [ 107.181863][ T5319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.184262][ T5319] ? import_iovec+0x73/0xa0 [ 107.186297][ T5319] ___sys_sendmsg+0x2a5/0x360 [ 107.188290][ T5319] ? __lock_acquire+0x747/0x2de0 [ 107.190435][ T5319] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.192921][ T5319] ? futex_wait+0x2a2/0x390 [ 107.195083][ T5319] ? __fget_files+0x2a/0x420 [ 107.197079][ T5319] ? __fget_files+0x3a2/0x420 [ 107.199080][ T5319] __x64_sys_sendmsg+0x1b1/0x290 [ 107.201174][ T5319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.204732][ T5319] do_syscall_64+0x166/0x520 [ 107.206611][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.209091][ T5319] ? clear_bhb_loop+0x70/0xc0 [ 107.211082][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.213802][ T5319] RIP: 0033:0x7fc82299e159 [ 107.215783][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.224114][ T5319] RSP: 002b:00007fc8237c5fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.227705][ T5319] RAX: ffffffffffffffda RBX: 00007fc822c25fa0 RCX: 00007fc82299e159 [ 107.230863][ T5319] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 107.234321][ T5319] RBP: 00007fc822a3506b R08: 0000000000000000 R09: 0000000000000000 [ 107.237556][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.240847][ T5319] R13: 00007fc822c26038 R14: 00007fc822c25fa0 R15: 00007ffe0b81f408 [ 107.244439][ T5319] [ 107.245809][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.249038][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 107.253087][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.257249][ T5319] Call Trace: [ 107.258707][ T5319] [ 107.259976][ T5319] vpanic+0x56d/0xa60 [ 107.261761][ T5319] ? __pfx__printk+0x10/0x10 [ 107.263805][ T5319] ? __pfx_vpanic+0x10/0x10 [ 107.265773][ T5319] ? is_bpf_text_address+0x292/0x2b0 [ 107.268205][ T5319] ? is_bpf_text_address+0x26/0x2b0 [ 107.270546][ T5319] panic+0xc5/0xd0 [ 107.272241][ T5319] ? __pfx_panic+0x10/0x10 [ 107.274177][ T5319] __warn+0x315/0x4c0 [ 107.275903][ T5319] ? rate_control_rate_init+0x5a6/0x630 [ 107.278400][ T5319] ? rate_control_rate_init+0x5a6/0x630 [ 107.280760][ T5319] __report_bug+0x276/0x570 [ 107.282785][ T5319] ? rate_control_rate_init+0x5a6/0x630 [ 107.285240][ T5319] ? __pfx___report_bug+0x10/0x10 [ 107.287558][ T5319] ? __lock_acquire+0x747/0x2de0 [ 107.289797][ T5319] ? __lock_acquire+0x747/0x2de0 [ 107.292056][ T5319] ? rate_control_rate_init+0x5a6/0x630 [ 107.294515][ T5319] report_bug+0x16b/0x220 [ 107.296331][ T5319] ? rate_control_rate_init+0x5a6/0x630 [ 107.298771][ T5319] ? rate_control_rate_init+0x5a8/0x630 [ 107.301154][ T5319] handle_bug+0x9c/0x200 [ 107.302974][ T5319] exc_invalid_op+0x1a/0x50 [ 107.304948][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 107.307123][ T5319] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 107.309858][ T5319] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 36 52 6f f6 90 0f 0b 90 eb e1 e8 2b 52 6f f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 107.317977][ T5319] RSP: 0018:ffffc9000d5f6fe8 EFLAGS: 00010283 [ 107.320572][ T5319] RAX: ffffffff8b589145 RBX: ffff88803e494050 RCX: 0000000000100000 [ 107.324042][ T5319] RDX: ffffc9000f3e1000 RSI: 0000000000000374 RDI: 0000000000000375 [ 107.327493][ T5319] RBP: dffffc0000000000 R08: ffffffff8b588cb7 R09: 0000000000000000 [ 107.331007][ T5319] R10: dffffc0000000000 R11: ffffed1007c92831 R12: ffffffff8b588cb7 [ 107.334512][ T5319] R13: ffff888052ae0f40 R14: 0000000000000001 R15: 0000000000000000 [ 107.337934][ T5319] ? rate_control_rate_init+0x117/0x630 [ 107.340399][ T5319] ? rate_control_rate_init+0x117/0x630 [ 107.342934][ T5319] ? rate_control_rate_init+0x5a5/0x630 [ 107.345444][ T5319] ? rate_control_rate_init+0x5a5/0x630 [ 107.347845][ T5319] rate_control_rate_init_all_links+0xf4/0x190 [ 107.350581][ T5319] sta_apply_auth_flags+0x1bc/0x430 [ 107.352945][ T5319] sta_apply_parameters+0x1291/0x1b50 [ 107.355289][ T5319] ieee80211_add_station+0x3de/0x700 [ 107.357570][ T5319] rdev_add_station+0xfc/0x290 [ 107.359676][ T5319] nl80211_new_station+0x1b4e/0x1fd0 [ 107.362044][ T5319] ? trace_contention_end+0x3d/0x140 [ 107.364361][ T5319] ? __pfx_nl80211_new_station+0x10/0x10 [ 107.366792][ T5319] ? __rtnl_unlock+0xc8/0xf0 [ 107.368826][ T5319] ? nl80211_pre_doit+0x53d/0x890 [ 107.371087][ T5319] genl_family_rcv_msg_doit+0x233/0x340 [ 107.373533][ T5319] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 107.376186][ T5319] ? bpf_lsm_capable+0x9/0x20 [ 107.378225][ T5319] ? security_capable+0x7e/0x2c0 [ 107.380373][ T5319] genl_rcv_msg+0x614/0x7a0 [ 107.382278][ T5319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.384483][ T5319] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 107.386829][ T5319] ? __pfx_nl80211_new_station+0x10/0x10 [ 107.389310][ T5319] ? __pfx_nl80211_post_doit+0x10/0x10 [ 107.391770][ T5319] ? __asan_memcpy+0x40/0x70 [ 107.393822][ T5319] ? __skb_clone+0x5c/0x6c0 [ 107.395825][ T5319] netlink_rcv_skb+0x226/0x4a0 [ 107.397954][ T5319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.400147][ T5319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.402586][ T5319] ? down_read+0x2be/0x330 [ 107.404653][ T5319] genl_rcv+0x28/0x40 [ 107.406546][ T5319] netlink_unicast+0x7bd/0x940 [ 107.408735][ T5319] netlink_sendmsg+0x813/0xb40 [ 107.410921][ T5319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.413356][ T5319] ? apparmor_socket_sendmsg+0x98/0x360 [ 107.415851][ T5319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.418170][ T5319] sock_sendmsg_nosec+0x13a/0x180 [ 107.420369][ T5319] ____sys_sendmsg+0x54e/0x850 [ 107.422491][ T5319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.424977][ T5319] ? import_iovec+0x73/0xa0 [ 107.427056][ T5319] ___sys_sendmsg+0x2a5/0x360 [ 107.429223][ T5319] ? __lock_acquire+0x747/0x2de0 [ 107.431462][ T5319] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.433794][ T5319] ? futex_wait+0x2a2/0x390 [ 107.435881][ T5319] ? __fget_files+0x2a/0x420 [ 107.437871][ T5319] ? __fget_files+0x3a2/0x420 [ 107.440040][ T5319] __x64_sys_sendmsg+0x1b1/0x290 [ 107.442352][ T5319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.444811][ T5319] do_syscall_64+0x166/0x520 [ 107.446818][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.449446][ T5319] ? clear_bhb_loop+0x70/0xc0 [ 107.451519][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.454125][ T5319] RIP: 0033:0x7fc82299e159 [ 107.456057][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.464397][ T5319] RSP: 002b:00007fc8237c5fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.468107][ T5319] RAX: ffffffffffffffda RBX: 00007fc822c25fa0 RCX: 00007fc82299e159 [ 107.471661][ T5319] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 107.475181][ T5319] RBP: 00007fc822a3506b R08: 0000000000000000 R09: 0000000000000000 [ 107.478633][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.482090][ T5319] R13: 00007fc822c26038 R14: 00007fc822c25fa0 R15: 00007ffe0b81f408 [ 107.485484][ T5319] [ 107.487212][ T5319] Kernel Offset: disabled [ 107.489099][ T5319] Rebooting in 86400 seconds..