program: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000010c0)={0xd30, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xba97}, @WGDEVICE_A_PEERS={0xce0, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x124, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x94, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x401, @local, 0xb74}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xe}, 0xa}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}]}, {0x5ac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, @WGPEER_A_ALLOWEDIPS={0x518, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cfea63944f2892c891ca92ccea00be62e4e866e07a4f972ccea92eea4dd828c6"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}, {0x2dc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2a71}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "89e8ff768619d93747a2e6d2acdc172e49993a7dc5d0e725be81732ef8190dcd"}]}, {0x214, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1fca5c340aa4e61916f5532e8b7275ca32c1090fd49c968aae126aee0c548705"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xe1, @private0, 0x2}}, @WGPEER_A_ALLOWEDIPS={0x180, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7abf96340acbc8219a9c485f6da13197fe21451f365f60c63afe6cf5bf1d2f85"}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xd30}, 0x1, 0x0, 0x0, 0x24001001}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xc8, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4d, 0xe, {{{}, {0x200}, @broadcast, @device_a, @from_mac}, 0x87, @random=0x7b, 0x1, @void, @val={0x1, 0x4, [{0x12}, {0x12, 0x1}, {0x5}, {0xb}]}, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2020, 0x3, 0x7, 0x0, {0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x2, 0x7}}, @void, @void, @void}}], @NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x3}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "6f2fc5de8a56fb76"}]}, @crypto_settings=[@NL80211_ATTR_PMK={0x10, 0xfe, "5c7e81435a5ab6bd22a35dd2"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x799}]}, 0xc8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0) (async) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) (async) landlock_restrict_self(r9, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'geneve1\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x3c, r12, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c003300080100000802110000000802110000010802110000000000"], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="4cbda5dfbde0d5ae584a7c4f00000016cc5bf4d1acfec1be06c6ca803796c95979a1d4156b8a439ed0f96ab76a6d91479c126a3130f1b90dc10cbe6e43bb3b3f35737786717cb5cf5cde77c11b9579fefa2d9d89287ca17ada77d28714fa3d15eaff5fc96d76a09fccaccc1fa2cf58302cdf83d5b7af332b291c7b5608908f2f1543f6c64f54b506ac5e79fbe9221556f2bfdaef967b7fd248e3c0882f3d0ff9992e1d4270f8b3324cd36ff8d2d7eb1c760b0599b03f86db62cc4d23ae00d52a3d37551f48159ba74ff29e9a6ef9d21a0f17b9a6fcff2c739b806ff7fc3377d3660d55108b0028796f4efe109613025cf9cc1277f7dd8f4f8180968f69d04257c05b21d1fa51c07aa2f1c0baf58b65da97e9c1b75b1c46435bc60a4b89ce8e09dc6aad0130d9afecf10c1cc7e64bf0d4ea35df640891366177d64f9c60c316e7b28211198ed4d1913923e1daf1cac46e45ce6102d42572a65c5ea1ae751f099cb26ab33349792e7690396c83f064684e4dbd2b20c71d398f1a580c70059821bacd34417dbe130c2b5c58cc660cf67645ab2a88fcd9f7f15d6dda4d19d46e25804c561e6248a3dd7bbc148ba1d2b2faa944b8373bbf14b20602ffddeb86f4557743d5d62823ae466d54477d4bc8e435391d5523644431ac645d70b84c0889a53819bf55d005a989eee80e300c4dfa5c29ed6cd36d3b850d56519b5272145db922d0d16d9e50c31dff", @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c003300080100000802110000000802110000010802110000000000"], 0x4c}}, 0x0) [ 68.622490][ T4670] Bluetooth: hci0: command tx timeout [ 68.711213][ T5323] netlink: 52 bytes leftover after parsing attributes in process `syz.0.0'. [ 68.728258][ T5322] ------------[ cut here ]------------ [ 68.731592][ T5322] WARNING: CPU: 0 PID: 5322 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 68.736775][ T5322] Modules linked in: [ 68.738839][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 68.745128][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.749741][ T5322] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 68.752820][ T5322] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b2 6e e2 f6 90 0f 0b 90 eb e1 e8 a7 6e e2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 68.760577][ T5322] RSP: 0018:ffffc9000d586ff0 EFLAGS: 00010293 [ 68.763287][ T5322] RAX: ffffffff8adddff9 RBX: ffff888053010000 RCX: ffff88801fbf0000 [ 68.766690][ T5322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 68.770199][ T5322] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8adddb13 [ 68.773616][ T5322] R10: dffffc0000000000 R11: ffffed100a602031 R12: 1ffff1100a60200a [ 68.777071][ T5322] R13: ffff888043be8e40 R14: 0000000000000001 R15: ffffffff8adddb13 [ 68.780447][ T5322] FS: 00007fa2483f56c0(0000) GS:ffff88808d250000(0000) knlGS:0000000000000000 [ 68.784521][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.787403][ T5322] CR2: 00002000000010c0 CR3: 0000000042b43000 CR4: 0000000000352ef0 [ 68.791035][ T5322] Call Trace: [ 68.792725][ T5322] [ 68.794034][ T5322] rate_control_rate_init_all_links+0x109/0x1a0 [ 68.796728][ T5322] sta_apply_auth_flags+0x1c2/0x400 [ 68.799017][ T5322] sta_apply_parameters+0xe4b/0x15b0 [ 68.801316][ T5322] ieee80211_add_station+0x424/0x6a0 [ 68.803879][ T5322] rdev_add_station+0x105/0x290 [ 68.805937][ T5322] nl80211_new_station+0x1723/0x1b40 [ 68.808059][ T5322] ? __pfx_nl80211_new_station+0x10/0x10 [ 68.810517][ T5322] ? netdev_run_todo+0xe1d/0xea0 [ 68.813150][ T5322] ? nl80211_pre_doit+0x4f1/0x930 [ 68.815583][ T5322] genl_family_rcv_msg_doit+0x215/0x300 [ 68.817999][ T5322] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 68.820415][ T5322] ? bpf_lsm_capable+0x9/0x20 [ 68.822759][ T5322] ? security_capable+0x7e/0x2e0 [ 68.824959][ T5322] genl_rcv_msg+0x60e/0x790 [ 68.827366][ T5322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 68.830510][ T5322] ? ref_tracker_free+0x63a/0x7d0 [ 68.833442][ T5322] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 68.835954][ T5322] ? __pfx_nl80211_new_station+0x10/0x10 [ 68.838416][ T5322] ? __pfx_nl80211_post_doit+0x10/0x10 [ 68.840947][ T5322] ? __pfx_ref_tracker_free+0x10/0x10 [ 68.843306][ T5322] netlink_rcv_skb+0x205/0x470 [ 68.845243][ T5322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 68.847122][ T5322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.849449][ T5322] ? down_read+0x1ad/0x2e0 [ 68.851726][ T5322] genl_rcv+0x28/0x40 [ 68.853542][ T5322] netlink_unicast+0x758/0x8d0 [ 68.855474][ T5322] netlink_sendmsg+0x805/0xb30 [ 68.857337][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.859422][ T5322] ? aa_sock_msg_perm+0x94/0x160 [ 68.861458][ T5322] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 68.864017][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.866604][ T5322] __sock_sendmsg+0x219/0x270 [ 68.868969][ T5322] ____sys_sendmsg+0x505/0x830 [ 68.871569][ T5322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.874545][ T5322] ? import_iovec+0x74/0xa0 [ 68.877109][ T5322] ___sys_sendmsg+0x21f/0x2a0 [ 68.879852][ T5322] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.882940][ T5322] ? __fget_files+0x2a/0x420 [ 68.885136][ T5322] ? __fget_files+0x3a0/0x420 [ 68.887801][ T5322] __x64_sys_sendmsg+0x19b/0x260 [ 68.890367][ T5322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 68.893390][ T5322] ? rcu_is_watching+0x15/0xb0 [ 68.895792][ T5322] ? do_syscall_64+0xbe/0x3b0 [ 68.898034][ T5322] do_syscall_64+0xfa/0x3b0 [ 68.900106][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 68.902682][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.905882][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 68.908314][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.910947][ T5322] RIP: 0033:0x7fa24bf8e929 [ 68.913049][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.923003][ T5322] RSP: 002b:00007fa2483f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.926771][ T5322] RAX: ffffffffffffffda RBX: 00007fa24c1b5fa0 RCX: 00007fa24bf8e929 [ 68.930170][ T5322] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000c [ 68.933586][ T5322] RBP: 00007fa24c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 68.937286][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.940890][ T5322] R13: 0000000000000000 R14: 00007fa24c1b5fa0 R15: 00007ffcba7d52d8 [ 68.944483][ T5322] [ 68.945938][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.949580][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 68.955298][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.960018][ T5322] Call Trace: [ 68.961571][ T5322] [ 68.962950][ T5322] dump_stack_lvl+0x99/0x250 [ 68.965255][ T5322] ? __asan_memcpy+0x40/0x70 [ 68.967954][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.970492][ T5322] ? __pfx__printk+0x10/0x10 [ 68.972483][ T5322] panic+0x2db/0x790 [ 68.974190][ T5322] ? __pfx_panic+0x10/0x10 [ 68.976206][ T5322] __warn+0x31b/0x4b0 [ 68.978032][ T5322] ? rate_control_rate_init+0x64a/0x6e0 [ 68.980581][ T5322] ? rate_control_rate_init+0x64a/0x6e0 [ 68.983279][ T5322] report_bug+0x2be/0x4f0 [ 68.985380][ T5322] ? rate_control_rate_init+0x64a/0x6e0 [ 68.987759][ T5322] ? rate_control_rate_init+0x64a/0x6e0 [ 68.990079][ T5322] ? rate_control_rate_init+0x64c/0x6e0 [ 68.992396][ T5322] handle_bug+0x84/0x160 [ 68.994303][ T5322] exc_invalid_op+0x1a/0x50 [ 68.996773][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 68.999725][ T5322] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 69.002881][ T5322] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b2 6e e2 f6 90 0f 0b 90 eb e1 e8 a7 6e e2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 69.011418][ T5322] RSP: 0018:ffffc9000d586ff0 EFLAGS: 00010293 [ 69.014408][ T5322] RAX: ffffffff8adddff9 RBX: ffff888053010000 RCX: ffff88801fbf0000 [ 69.018376][ T5322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 69.021869][ T5322] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8adddb13 [ 69.025434][ T5322] R10: dffffc0000000000 R11: ffffed100a602031 R12: 1ffff1100a60200a [ 69.029434][ T5322] R13: ffff888043be8e40 R14: 0000000000000001 R15: ffffffff8adddb13 [ 69.033668][ T5322] ? rate_control_rate_init+0x163/0x6e0 [ 69.036081][ T5322] ? rate_control_rate_init+0x163/0x6e0 [ 69.038803][ T5322] ? rate_control_rate_init+0x649/0x6e0 [ 69.041294][ T5322] rate_control_rate_init_all_links+0x109/0x1a0 [ 69.043970][ T5322] sta_apply_auth_flags+0x1c2/0x400 [ 69.046824][ T5322] sta_apply_parameters+0xe4b/0x15b0 [ 69.049828][ T5322] ieee80211_add_station+0x424/0x6a0 [ 69.052525][ T5322] rdev_add_station+0x105/0x290 [ 69.054755][ T5322] nl80211_new_station+0x1723/0x1b40 [ 69.057131][ T5322] ? __pfx_nl80211_new_station+0x10/0x10 [ 69.059607][ T5322] ? netdev_run_todo+0xe1d/0xea0 [ 69.061870][ T5322] ? nl80211_pre_doit+0x4f1/0x930 [ 69.064470][ T5322] genl_family_rcv_msg_doit+0x215/0x300 [ 69.068090][ T5322] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 69.071716][ T5322] ? bpf_lsm_capable+0x9/0x20 [ 69.073686][ T5322] ? security_capable+0x7e/0x2e0 [ 69.075741][ T5322] genl_rcv_msg+0x60e/0x790 [ 69.077687][ T5322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.079851][ T5322] ? ref_tracker_free+0x63a/0x7d0 [ 69.081996][ T5322] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 69.084194][ T5322] ? __pfx_nl80211_new_station+0x10/0x10 [ 69.086638][ T5322] ? __pfx_nl80211_post_doit+0x10/0x10 [ 69.089269][ T5322] ? __pfx_ref_tracker_free+0x10/0x10 [ 69.092173][ T5322] netlink_rcv_skb+0x205/0x470 [ 69.094440][ T5322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.096699][ T5322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.098962][ T5322] ? down_read+0x1ad/0x2e0 [ 69.100996][ T5322] genl_rcv+0x28/0x40 [ 69.102921][ T5322] netlink_unicast+0x758/0x8d0 [ 69.105198][ T5322] netlink_sendmsg+0x805/0xb30 [ 69.107422][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.109715][ T5322] ? aa_sock_msg_perm+0x94/0x160 [ 69.111877][ T5322] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 69.114407][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.116927][ T5322] __sock_sendmsg+0x219/0x270 [ 69.119120][ T5322] ____sys_sendmsg+0x505/0x830 [ 69.121391][ T5322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.123849][ T5322] ? import_iovec+0x74/0xa0 [ 69.126068][ T5322] ___sys_sendmsg+0x21f/0x2a0 [ 69.128463][ T5322] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.130717][ T5322] ? __fget_files+0x2a/0x420 [ 69.132837][ T5322] ? __fget_files+0x3a0/0x420 [ 69.135221][ T5322] __x64_sys_sendmsg+0x19b/0x260 [ 69.137853][ T5322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 69.140651][ T5322] ? rcu_is_watching+0x15/0xb0 [ 69.142875][ T5322] ? do_syscall_64+0xbe/0x3b0 [ 69.145106][ T5322] do_syscall_64+0xfa/0x3b0 [ 69.147215][ T5322] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.149702][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.152709][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 69.155131][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.158177][ T5322] RIP: 0033:0x7fa24bf8e929 [ 69.160298][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.169433][ T5322] RSP: 002b:00007fa2483f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.173280][ T5322] RAX: ffffffffffffffda RBX: 00007fa24c1b5fa0 RCX: 00007fa24bf8e929 [ 69.176724][ T5322] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000c [ 69.180534][ T5322] RBP: 00007fa24c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 69.184326][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.187872][ T5322] R13: 0000000000000000 R14: 00007fa24c1b5fa0 R15: 00007ffcba7d52d8 [ 69.191764][ T5322] [ 69.193784][ T5322] Kernel Offset: disabled [ 69.195835][ T5322] Rebooting in 86400 seconds..