program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) [ 76.615382][ T5288] Bluetooth: hci0: command tx timeout [ 76.636717][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.680172][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.793021][ T5325] ------------[ cut here ]------------ [ 76.796966][ T5325] !chanctx_conf [ 76.796982][ T5325] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#0: syz.0.0/5325 [ 76.806264][ T5325] Modules linked in: [ 76.809772][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.815510][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.820933][ T5325] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 76.823642][ T5325] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 96 91 00 cc e8 16 72 82 f6 90 0f 0b 90 eb e1 e8 0b 72 82 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 76.832008][ T5325] RSP: 0018:ffffc9000dbf6fe8 EFLAGS: 00010283 [ 76.835432][ T5325] RAX: ffffffff8b44b0b5 RBX: ffff88803bdb4050 RCX: 0000000000100000 [ 76.840127][ T5325] RDX: ffffc9000f032000 RSI: 0000000000000485 RDI: 0000000000000486 [ 76.847005][ T5325] RBP: dffffc0000000000 R08: ffffffff8b44ac27 R09: 0000000000000000 [ 76.880448][ T5325] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b44ac27 [ 76.885012][ T5325] R13: ffff888000780f40 R14: 0000000000000001 R15: 0000000000000000 [ 76.897961][ T5325] FS: 00007f667ac326c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 76.901954][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.927953][ T5325] CR2: 0000200000001080 CR3: 000000001222b000 CR4: 0000000000352ef0 [ 76.931249][ T5325] Call Trace: [ 76.932649][ T5325] [ 76.933879][ T5325] rate_control_rate_init_all_links+0xf4/0x190 [ 76.936358][ T5325] sta_apply_auth_flags+0x1bc/0x430 [ 76.944426][ T5325] sta_apply_parameters+0x1291/0x1b50 [ 76.952831][ T5325] ieee80211_add_station+0x3de/0x700 [ 76.976554][ T5325] rdev_add_station+0xfc/0x290 [ 76.979771][ T5325] nl80211_new_station+0x1b4e/0x1fd0 [ 77.000100][ T5325] ? trace_contention_end+0x3d/0x140 [ 77.029031][ T5325] ? __pfx_nl80211_new_station+0x10/0x10 [ 77.032198][ T5325] ? __rtnl_unlock+0xc8/0xf0 [ 77.035106][ T5325] ? nl80211_pre_doit+0x53d/0x890 [ 77.037249][ T5325] genl_family_rcv_msg_doit+0x233/0x340 [ 77.039640][ T5325] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 77.042173][ T5325] ? bpf_lsm_capable+0x9/0x20 [ 77.044036][ T5325] ? security_capable+0x7e/0x2c0 [ 77.046053][ T5325] genl_rcv_msg+0x614/0x7a0 [ 77.048623][ T5325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.055642][ T5325] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 77.059718][ T5325] ? __pfx_nl80211_new_station+0x10/0x10 [ 77.063230][ T5325] ? __pfx_nl80211_post_doit+0x10/0x10 [ 77.065494][ T5325] ? __pfx_ref_tracker_free+0x10/0x10 [ 77.067745][ T5325] ? __asan_memcpy+0x40/0x70 [ 77.069727][ T5325] ? __skb_clone+0x5c/0x6c0 [ 77.071583][ T5325] netlink_rcv_skb+0x226/0x4a0 [ 77.077340][ T5325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.079902][ T5325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.082428][ T5325] ? down_read+0x2be/0x330 [ 77.102536][ T5325] genl_rcv+0x28/0x40 [ 77.104951][ T5325] netlink_unicast+0x7bb/0x940 [ 77.107547][ T5325] netlink_sendmsg+0x813/0xb40 [ 77.110017][ T5325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.112944][ T5325] ? aa_sock_msg_perm+0xf1/0x1b0 [ 77.115246][ T5325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.118124][ T5325] sock_sendmsg_nosec+0x13a/0x180 [ 77.120683][ T5325] ____sys_sendmsg+0x54e/0x850 [ 77.123913][ T5325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.127659][ T5325] ? import_iovec+0x73/0xa0 [ 77.131069][ T5325] ___sys_sendmsg+0x2a5/0x360 [ 77.133323][ T5325] ? __lock_acquire+0x683/0x2cf0 [ 77.135365][ T5325] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.138335][ T5325] ? futex_wait+0x2a2/0x390 [ 77.141385][ T5325] ? __fget_files+0x2a/0x420 [ 77.144166][ T5325] ? __fget_files+0x3a2/0x420 [ 77.146970][ T5325] __x64_sys_sendmsg+0x1b1/0x290 [ 77.149327][ T5325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 77.153352][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.173638][ T5325] do_syscall_64+0x174/0x580 [ 77.176313][ T5325] ? trace_irq_disable+0x3b/0x140 [ 77.181231][ T5325] ? clear_bhb_loop+0x40/0x90 [ 77.185011][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.188457][ T5325] RIP: 0033:0x7f6679d9e019 [ 77.191378][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.200990][ T5325] RSP: 002b:00007f667ac31fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.220191][ T5325] RAX: ffffffffffffffda RBX: 00007f667a025fa0 RCX: 00007f6679d9e019 [ 77.223400][ T5325] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 77.237636][ T5325] RBP: 00007f6679e3500c R08: 0000000000000000 R09: 0000000000000000 [ 77.289664][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.294222][ T5325] R13: 00007f667a026038 R14: 00007f667a025fa0 R15: 00007ffd82373c38 [ 77.307991][ T5325] [ 77.309336][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.312670][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.317045][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.321267][ T5325] Call Trace: [ 77.322751][ T5325] [ 77.324051][ T5325] vpanic+0x56c/0xa60 [ 77.325798][ T5325] ? __pfx__printk+0x10/0x10 [ 77.338912][ T5325] ? __pfx_vpanic+0x10/0x10 [ 77.342010][ T5325] ? is_bpf_text_address+0x292/0x2b0 [ 77.344319][ T5325] ? is_bpf_text_address+0x26/0x2b0 [ 77.346572][ T5325] panic+0xc5/0xd0 [ 77.359017][ T5325] ? __pfx_panic+0x10/0x10 [ 77.361654][ T5325] __warn+0x315/0x4c0 [ 77.363882][ T5325] ? rate_control_rate_init+0x5a6/0x630 [ 77.367040][ T5325] ? rate_control_rate_init+0x5a6/0x630 [ 77.370419][ T5325] __report_bug+0x276/0x570 [ 77.373247][ T5325] ? stack_depot_save_flags+0x3ec/0x800 [ 77.376443][ T5325] ? rate_control_rate_init+0x5a6/0x630 [ 77.379342][ T5325] ? __pfx___report_bug+0x10/0x10 [ 77.382277][ T5325] ? __lock_acquire+0x683/0x2cf0 [ 77.385912][ T5325] ? __lock_acquire+0x683/0x2cf0 [ 77.388060][ T5325] ? rate_control_rate_init+0x5a6/0x630 [ 77.391128][ T5325] report_bug+0x16a/0x220 [ 77.393705][ T5325] ? rate_control_rate_init+0x5a6/0x630 [ 77.397138][ T5325] ? rate_control_rate_init+0x5a8/0x630 [ 77.400372][ T5325] handle_bug+0x9c/0x200 [ 77.403166][ T5325] exc_invalid_op+0x1a/0x50 [ 77.405861][ T5325] asm_exc_invalid_op+0x1a/0x20 [ 77.409137][ T5325] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 77.413966][ T5325] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 96 91 00 cc e8 16 72 82 f6 90 0f 0b 90 eb e1 e8 0b 72 82 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 77.426223][ T5325] RSP: 0018:ffffc9000dbf6fe8 EFLAGS: 00010283 [ 77.429205][ T5325] RAX: ffffffff8b44b0b5 RBX: ffff88803bdb4050 RCX: 0000000000100000 [ 77.432972][ T5325] RDX: ffffc9000f032000 RSI: 0000000000000485 RDI: 0000000000000486 [ 77.436163][ T5325] RBP: dffffc0000000000 R08: ffffffff8b44ac27 R09: 0000000000000000 [ 77.439425][ T5325] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b44ac27 [ 77.442669][ T5325] R13: ffff888000780f40 R14: 0000000000000001 R15: 0000000000000000 [ 77.445888][ T5325] ? rate_control_rate_init+0x117/0x630 [ 77.458962][ T5325] ? rate_control_rate_init+0x117/0x630 [ 77.469086][ T5325] ? rate_control_rate_init+0x5a5/0x630 [ 77.472369][ T5325] ? rate_control_rate_init+0x5a5/0x630 [ 77.475144][ T5325] rate_control_rate_init_all_links+0xf4/0x190 [ 77.492168][ T5325] sta_apply_auth_flags+0x1bc/0x430 [ 77.495296][ T5325] sta_apply_parameters+0x1291/0x1b50 [ 77.498800][ T5325] ieee80211_add_station+0x3de/0x700 [ 77.502001][ T5325] rdev_add_station+0xfc/0x290 [ 77.504747][ T5325] nl80211_new_station+0x1b4e/0x1fd0 [ 77.507994][ T5325] ? trace_contention_end+0x3d/0x140 [ 77.511031][ T5325] ? __pfx_nl80211_new_station+0x10/0x10 [ 77.514196][ T5325] ? __rtnl_unlock+0xc8/0xf0 [ 77.517461][ T5325] ? nl80211_pre_doit+0x53d/0x890 [ 77.520783][ T5325] genl_family_rcv_msg_doit+0x233/0x340 [ 77.524258][ T5325] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 77.536284][ T5325] ? bpf_lsm_capable+0x9/0x20 [ 77.539290][ T5325] ? security_capable+0x7e/0x2c0 [ 77.542076][ T5325] genl_rcv_msg+0x614/0x7a0 [ 77.543887][ T5325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.545884][ T5325] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 77.559297][ T5325] ? __pfx_nl80211_new_station+0x10/0x10 [ 77.562525][ T5325] ? __pfx_nl80211_post_doit+0x10/0x10 [ 77.565591][ T5325] ? __pfx_ref_tracker_free+0x10/0x10 [ 77.569188][ T5325] ? __asan_memcpy+0x40/0x70 [ 77.579103][ T5325] ? __skb_clone+0x5c/0x6c0 [ 77.582424][ T5325] netlink_rcv_skb+0x226/0x4a0 [ 77.585044][ T5325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.597044][ T5325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.599527][ T5325] ? down_read+0x2be/0x330 [ 77.601498][ T5325] genl_rcv+0x28/0x40 [ 77.603689][ T5325] netlink_unicast+0x7bb/0x940 [ 77.606977][ T5325] netlink_sendmsg+0x813/0xb40 [ 77.618417][ T5325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.620670][ T5325] ? aa_sock_msg_perm+0xf1/0x1b0 [ 77.623703][ T5325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.627207][ T5325] sock_sendmsg_nosec+0x13a/0x180 [ 77.639362][ T5325] ____sys_sendmsg+0x54e/0x850 [ 77.642003][ T5325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.643990][ T5325] ? import_iovec+0x73/0xa0 [ 77.645835][ T5325] ___sys_sendmsg+0x2a5/0x360 [ 77.647777][ T5325] ? __lock_acquire+0x683/0x2cf0 [ 77.649694][ T5325] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.673030][ T5325] ? futex_wait+0x2a2/0x390 [ 77.674870][ T5325] ? __fget_files+0x2a/0x420 [ 77.676605][ T5325] ? __fget_files+0x3a2/0x420 [ 77.688918][ T5325] __x64_sys_sendmsg+0x1b1/0x290 [ 77.692221][ T5325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 77.695087][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.707716][ T5325] do_syscall_64+0x174/0x580 [ 77.709611][ T5325] ? trace_irq_disable+0x3b/0x140 [ 77.712395][ T5325] ? clear_bhb_loop+0x40/0x90 [ 77.715122][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.727543][ T5325] RIP: 0033:0x7f6679d9e019 [ 77.729616][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.748759][ T5325] RSP: 002b:00007f667ac31fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.752496][ T5325] RAX: ffffffffffffffda RBX: 00007f667a025fa0 RCX: 00007f6679d9e019 [ 77.756154][ T5325] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 77.769879][ T5325] RBP: 00007f6679e3500c R08: 0000000000000000 R09: 0000000000000000 [ 77.773494][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.782297][ T5325] R13: 00007f667a026038 R14: 00007f667a025fa0 R15: 00007ffd82373c38 [ 77.800623][ T5325] [ 77.802988][ T5325] Kernel Offset: disabled [ 77.805162][ T5325] Rebooting in 86400 seconds..