program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x414, r4, 0x5, 0x70bd26, 0x0, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_TX_RATES={0x39c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x95f, 0xc, 0x8, 0x81, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x60, 0x16, 0x5]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x7, 0x1, 0x7e, 0x9, 0x6, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x10, 0x2, 0xffff, 0x8, 0x7fff, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x6, 0x7, 0x2, 0x7fff, 0x2, 0x93]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9709, 0xf1df, 0x2, 0xf, 0x1000, 0x149, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x800, 0xfff, 0x7ff, 0x4, 0x0, 0x5]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x4, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x4, 0xa}, {0x4, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x2}, {0x6, 0x9}, {0x4, 0x5}, {0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x1}, {0x6, 0x5}, {0x7, 0x7}, {0x6, 0x3}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x4}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x5}, {0x4, 0x8}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x5, 0x3}, {0x7, 0x1}, {0x3, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x7, 0x5}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0xa}, {0x6}, {0x2, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x5, 0x4}, {0x5, 0x7}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x3, 0x1}, {0x4, 0x9}, {0x7, 0x6}, {0x1, 0x8}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {0x4, 0x8}, {0x6, 0xa}, {0x4, 0x6}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x8}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x18, 0xb, 0x48, 0x24, 0x6, 0x5, 0x0, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x2}, {0x6, 0x8}, {0x4, 0x7}, {0x0, 0x7}, {0x4}, {0x5, 0x2}, {0x7, 0x1}, {0x6, 0x6}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x7}, {0x4}, {0x6, 0x2}, {0x0, 0x4}, {0x6, 0x4}, {0x3}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x2}, {0x6}, {}, {0x0, 0x1}, {0x3, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x3}, {0x3, 0x8}, {0x4, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0xa}, {0x5, 0x1}, {0x5, 0x7}, {0x4, 0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x5}, {0x4, 0x1}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0xa}, {0x6, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x7, 0x7}, {0x5, 0x2}, {0x3}, {0x4, 0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0x1}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x3, 0x8}, {0x7, 0xa}, {0x5, 0x5}, {0x7}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x6}, {0x2, 0x1}, {0x6, 0xa}, {0x7, 0x7}, {0x4, 0x1}, {0x4, 0x7}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x3}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x6, 0xff, 0xd4, 0x2, 0x5, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x3}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x5, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x4}, {0x3, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x3}, {0x5, 0xa}, {0x3, 0x6}, {0x1}, {0x7, 0x2}, {0x7, 0x2}, {0x6}, {0x0, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0x4, 0x1}, {0x4, 0x3}, {0x5, 0x8}, {0x6, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x5}, {0x5, 0x5}, {0x1, 0x5}, {0x1}, {0x1, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x30, 0x5f, 0x18, 0xb, 0x5, 0x30, 0x18, 0x2, 0x30]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff, 0x401, 0x5, 0x8a, 0x2, 0xfffe, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8001, 0x0, 0x1, 0x6, 0x9, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x54a4, 0x6, 0x9, 0x6, 0x6, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x6, 0xab, 0x1, 0x67, 0x781, 0x6647]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x5, 0x4, 0x1, 0xf000, 0x3, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x0, 0x1, 0x12, 0x60, 0xb, 0x12, 0x1b, 0x48, 0x2, 0x1b, 0x1b, 0x2, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xe, 0x10, 0x0, 0x4, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb753, 0x6, 0x8001, 0x6, 0x1, 0x5, 0x0, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x8, 0x8, 0x4, 0x9000, 0x5601, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x5, 0x48, 0x1, 0x43, 0x0, 0x30, 0x2, 0x3, 0x4, 0x2, 0x48, 0x6, 0xc, 0x4, 0x30, 0x43, 0x4, 0x16, 0x30, 0x8c6f82825bc6a799]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x5}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x4}, {0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x4, 0x5}, {0x2}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x48, 0x18, 0x36, 0x3, 0x6c, 0xc, 0x24, 0x6c, 0x1b, 0x2, 0x6c, 0x9, 0x3, 0x0, 0x48, 0xc, 0x5, 0x0, 0xc, 0x1, 0x5, 0xc, 0x1, 0x1, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x24, 0x6c, 0x1, 0x16, 0x1, 0xc, 0x6c, 0x6c, 0x6, 0x9, 0x2, 0xb, 0x4, 0xb]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x414}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x3c, r8, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = fsopen(&(0x7f0000000100)='ufs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000200)='\xbd\x02\xd5q\xc45@\xc1\xe2y\x9b\x03?#X\xa2\x13 \x04q\xd0\xc5c\xc0\xa90d\xdf=~\x03\x05\xcc\x99\xd0Lx\xa8\xc0~:$\xdag\x8b\x8a\xb5\xbf\x17g\xcb\x0edc\xddr\x8c\x84\x90F\xca\x81\x01R\xf2\xdf\b\xbc\x19\xdf\xd6\xe0\x1b\x00\f\xd7x\xd4=a\xc8\xc9\xfaX%\x1e\x15\xe3\xa3\xed7n\xfb\xa2\xfe\n\x01\x96\x9c\xbe\x99\x05i\xbb>\x14\xe9\x1b&qG\x14\xee\x84\xdd\xb8\xfb\x14\xe4\x10,\x1c\xfc\r\xdaCH\xb6\x920\xd4~\xc3\xb9\r\x8f\xee\x99ZR;\x85\xd5,\r<\x93{R\xd5\x9d\xed\xe3\xabo\xfa\x14\x15T\x83m\xb2\xf6\x18\x13w\x8f\xd8\x15\x93\xb2^\xd4\xc6\xb9z.\xca\x13\xd9\xc2Z\xb1', 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) [ 93.641431][ T5288] Bluetooth: hci0: command tx timeout [ 93.801552][ T5330] ------------[ cut here ]------------ [ 93.804545][ T5330] !chanctx_conf [ 93.804558][ T5330] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#0: syz.0.0/5330 [ 93.811335][ T5330] Modules linked in: [ 93.813417][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.817490][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.821523][ T5330] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 93.824553][ T5330] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bc 94 91 00 cc e8 46 72 82 f6 90 0f 0b 90 eb e1 e8 3b 72 82 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 93.834144][ T5330] RSP: 0018:ffffc9000f6aefe8 EFLAGS: 00010283 [ 93.836790][ T5330] RAX: ffffffff8b44b2f5 RBX: ffff888012e70050 RCX: 0000000000100000 [ 93.840284][ T5330] RDX: ffffc9000eea2000 RSI: 00000000000003c7 RDI: 00000000000003c8 [ 93.843709][ T5330] RBP: dffffc0000000000 R08: ffffffff8b44ae67 R09: 0000000000000000 [ 93.847164][ T5330] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b44ae67 [ 93.850528][ T5330] R13: ffff888051610f40 R14: 0000000000000001 R15: 0000000000000000 [ 93.853891][ T5330] FS: 00007fb3322ce6c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 93.857426][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.860439][ T5330] CR2: 00007fb3322d7230 CR3: 00000000433c3000 CR4: 0000000000352ef0 [ 93.864127][ T5330] Call Trace: [ 93.865650][ T5330] [ 93.866999][ T5330] rate_control_rate_init_all_links+0xf4/0x190 [ 93.869827][ T5330] sta_apply_auth_flags+0x1bc/0x430 [ 93.872546][ T5330] sta_apply_parameters+0x1291/0x1b50 [ 93.875152][ T5330] ieee80211_add_station+0x3de/0x700 [ 93.877833][ T5330] rdev_add_station+0xfc/0x290 [ 93.879959][ T5330] nl80211_new_station+0x1b4e/0x1fd0 [ 93.882386][ T5330] ? trace_contention_end+0x3d/0x140 [ 93.884641][ T5330] ? __pfx_nl80211_new_station+0x10/0x10 [ 93.887071][ T5330] ? __rtnl_unlock+0xc8/0xf0 [ 93.889204][ T5330] ? nl80211_pre_doit+0x53d/0x890 [ 93.891503][ T5330] genl_family_rcv_msg_doit+0x233/0x340 [ 93.894242][ T5330] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.897095][ T5330] ? bpf_lsm_capable+0x9/0x20 [ 93.899193][ T5330] ? security_capable+0x7e/0x2c0 [ 93.901259][ T5330] genl_rcv_msg+0x614/0x7a0 [ 93.903345][ T5330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.905807][ T5330] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 93.908558][ T5330] ? __pfx_nl80211_new_station+0x10/0x10 [ 93.911126][ T5330] ? __pfx_nl80211_post_doit+0x10/0x10 [ 93.913456][ T5330] ? __pfx_ref_tracker_free+0x10/0x10 [ 93.915492][ T5330] ? __asan_memcpy+0x40/0x70 [ 93.917320][ T5330] ? __skb_clone+0x5c/0x6c0 [ 93.919238][ T5330] netlink_rcv_skb+0x226/0x4a0 [ 93.921297][ T5330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.923463][ T5330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.925741][ T5330] ? down_read+0x2be/0x330 [ 93.927723][ T5330] genl_rcv+0x28/0x40 [ 93.929737][ T5330] netlink_unicast+0x7bb/0x940 [ 93.931923][ T5330] netlink_sendmsg+0x813/0xb40 [ 93.934173][ T5330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.936451][ T5330] ? aa_sock_msg_perm+0xf1/0x1b0 [ 93.938615][ T5330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.940723][ T5330] sock_sendmsg_nosec+0x13a/0x180 [ 93.942897][ T5330] ____sys_sendmsg+0x54e/0x850 [ 93.945045][ T5330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.947178][ T5330] ? import_iovec+0x73/0xa0 [ 93.948995][ T5330] ___sys_sendmsg+0x2a5/0x360 [ 93.951136][ T5330] ? __lock_acquire+0x683/0x2cf0 [ 93.953773][ T5330] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.956320][ T5330] ? futex_wake+0x51b/0x5f0 [ 93.958348][ T5330] ? __fget_files+0x2a/0x420 [ 93.960273][ T5330] ? __fget_files+0x3a2/0x420 [ 93.962597][ T5330] __x64_sys_sendmsg+0x1b1/0x290 [ 93.964789][ T5330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.967170][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.969858][ T5330] do_syscall_64+0x174/0x580 [ 93.971961][ T5330] ? trace_irq_disable+0x3b/0x140 [ 93.974461][ T5330] ? clear_bhb_loop+0x40/0x90 [ 93.976758][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.979552][ T5330] RIP: 0033:0x7fb33139e019 [ 93.981454][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.989504][ T5330] RSP: 002b:00007fb3322cdfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.993062][ T5330] RAX: ffffffffffffffda RBX: 00007fb331625fa0 RCX: 00007fb33139e019 [ 93.996557][ T5330] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 94.000086][ T5330] RBP: 00007fb33143500c R08: 0000000000000000 R09: 0000000000000000 [ 94.003624][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.006998][ T5330] R13: 00007fb331626038 R14: 00007fb331625fa0 R15: 00007ffd8a6246e8 [ 94.010400][ T5330] [ 94.011732][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.014832][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.019089][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.023644][ T5330] Call Trace: [ 94.025129][ T5330] [ 94.026556][ T5330] vpanic+0x56c/0xa60 [ 94.028362][ T5330] ? __pfx__printk+0x10/0x10 [ 94.030479][ T5330] ? __pfx_vpanic+0x10/0x10 [ 94.032534][ T5330] ? is_bpf_text_address+0x292/0x2b0 [ 94.035057][ T5330] ? is_bpf_text_address+0x26/0x2b0 [ 94.037663][ T5330] panic+0xc5/0xd0 [ 94.039373][ T5330] ? __pfx_panic+0x10/0x10 [ 94.041364][ T5330] __warn+0x315/0x4c0 [ 94.043032][ T5330] ? rate_control_rate_init+0x5a6/0x630 [ 94.045241][ T5330] ? rate_control_rate_init+0x5a6/0x630 [ 94.047642][ T5330] __report_bug+0x276/0x570 [ 94.049644][ T5330] ? stack_depot_save_flags+0x3ec/0x800 [ 94.052054][ T5330] ? rate_control_rate_init+0x5a6/0x630 [ 94.054663][ T5330] ? __pfx___report_bug+0x10/0x10 [ 94.057304][ T5330] ? __lock_acquire+0x683/0x2cf0 [ 94.059460][ T5330] ? __lock_acquire+0x683/0x2cf0 [ 94.061648][ T5330] ? rate_control_rate_init+0x5a6/0x630 [ 94.064065][ T5330] report_bug+0x16a/0x220 [ 94.065982][ T5330] ? rate_control_rate_init+0x5a6/0x630 [ 94.068403][ T5330] ? rate_control_rate_init+0x5a8/0x630 [ 94.070822][ T5330] handle_bug+0x9c/0x200 [ 94.072681][ T5330] exc_invalid_op+0x1a/0x50 [ 94.074646][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 94.076853][ T5330] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 94.079653][ T5330] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bc 94 91 00 cc e8 46 72 82 f6 90 0f 0b 90 eb e1 e8 3b 72 82 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 94.088425][ T5330] RSP: 0018:ffffc9000f6aefe8 EFLAGS: 00010283 [ 94.090827][ T5330] RAX: ffffffff8b44b2f5 RBX: ffff888012e70050 RCX: 0000000000100000 [ 94.093885][ T5330] RDX: ffffc9000eea2000 RSI: 00000000000003c7 RDI: 00000000000003c8 [ 94.097005][ T5330] RBP: dffffc0000000000 R08: ffffffff8b44ae67 R09: 0000000000000000 [ 94.100347][ T5330] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b44ae67 [ 94.104072][ T5330] R13: ffff888051610f40 R14: 0000000000000001 R15: 0000000000000000 [ 94.107993][ T5330] ? rate_control_rate_init+0x117/0x630 [ 94.110547][ T5330] ? rate_control_rate_init+0x117/0x630 [ 94.112998][ T5330] ? rate_control_rate_init+0x5a5/0x630 [ 94.115440][ T5330] ? rate_control_rate_init+0x5a5/0x630 [ 94.117877][ T5330] rate_control_rate_init_all_links+0xf4/0x190 [ 94.120456][ T5330] sta_apply_auth_flags+0x1bc/0x430 [ 94.122712][ T5330] sta_apply_parameters+0x1291/0x1b50 [ 94.125104][ T5330] ieee80211_add_station+0x3de/0x700 [ 94.127501][ T5330] rdev_add_station+0xfc/0x290 [ 94.129618][ T5330] nl80211_new_station+0x1b4e/0x1fd0 [ 94.131943][ T5330] ? trace_contention_end+0x3d/0x140 [ 94.134281][ T5330] ? __pfx_nl80211_new_station+0x10/0x10 [ 94.136577][ T5330] ? __rtnl_unlock+0xc8/0xf0 [ 94.138629][ T5330] ? nl80211_pre_doit+0x53d/0x890 [ 94.140858][ T5330] genl_family_rcv_msg_doit+0x233/0x340 [ 94.143405][ T5330] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 94.146164][ T5330] ? bpf_lsm_capable+0x9/0x20 [ 94.148258][ T5330] ? security_capable+0x7e/0x2c0 [ 94.150463][ T5330] genl_rcv_msg+0x614/0x7a0 [ 94.152471][ T5330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.154761][ T5330] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 94.157365][ T5330] ? __pfx_nl80211_new_station+0x10/0x10 [ 94.160053][ T5330] ? __pfx_nl80211_post_doit+0x10/0x10 [ 94.162515][ T5330] ? __pfx_ref_tracker_free+0x10/0x10 [ 94.164897][ T5330] ? __asan_memcpy+0x40/0x70 [ 94.166935][ T5330] ? __skb_clone+0x5c/0x6c0 [ 94.168929][ T5330] netlink_rcv_skb+0x226/0x4a0 [ 94.171076][ T5330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.173457][ T5330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.175968][ T5330] ? down_read+0x2be/0x330 [ 94.178180][ T5330] genl_rcv+0x28/0x40 [ 94.180031][ T5330] netlink_unicast+0x7bb/0x940 [ 94.182115][ T5330] netlink_sendmsg+0x813/0xb40 [ 94.184182][ T5330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.186617][ T5330] ? aa_sock_msg_perm+0xf1/0x1b0 [ 94.188878][ T5330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.191418][ T5330] sock_sendmsg_nosec+0x13a/0x180 [ 94.193680][ T5330] ____sys_sendmsg+0x54e/0x850 [ 94.195785][ T5330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.197926][ T5330] ? import_iovec+0x73/0xa0 [ 94.199905][ T5330] ___sys_sendmsg+0x2a5/0x360 [ 94.201729][ T5330] ? __lock_acquire+0x683/0x2cf0 [ 94.203750][ T5330] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.206066][ T5330] ? futex_wake+0x51b/0x5f0 [ 94.208076][ T5330] ? __fget_files+0x2a/0x420 [ 94.210142][ T5330] ? __fget_files+0x3a2/0x420 [ 94.212189][ T5330] __x64_sys_sendmsg+0x1b1/0x290 [ 94.214330][ T5330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 94.216733][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.219417][ T5330] do_syscall_64+0x174/0x580 [ 94.221520][ T5330] ? trace_irq_disable+0x3b/0x140 [ 94.223939][ T5330] ? clear_bhb_loop+0x40/0x90 [ 94.226075][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.228838][ T5330] RIP: 0033:0x7fb33139e019 [ 94.230922][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.239489][ T5330] RSP: 002b:00007fb3322cdfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.242977][ T5330] RAX: ffffffffffffffda RBX: 00007fb331625fa0 RCX: 00007fb33139e019 [ 94.246477][ T5330] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 94.249802][ T5330] RBP: 00007fb33143500c R08: 0000000000000000 R09: 0000000000000000 [ 94.253051][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.256497][ T5330] R13: 00007fb331626038 R14: 00007fb331625fa0 R15: 00007ffd8a6246e8 [ 94.259850][ T5330] [ 94.261598][ T5330] Kernel Offset: disabled [ 94.263469][ T5330] Rebooting in 86400 seconds..