program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0xa0, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0], 0xfe, 0x123a, &(0x7f00000024c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x2, @pix_mp={0x8, 0x1000, 0x31303553, 0x3, 0x4, [{0x74, 0x6}, {0x600, 0x40bb}, {0x2}, {0x9, 0x2}, {0xc96, 0x8001}, {0xfffffff9, 0x7f}, {0x5, 0x1f5b}, {0x5}], 0x8, 0x0, 0x8, 0x0, 0x6}}) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x28, r9, 0xe7816804f9787cab, 0x70b52a, 0x25dfdc03, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 125.727025][ T5281] Bluetooth: hci0: command tx timeout [ 125.913701][ T5320] ------------[ cut here ]------------ [ 125.916479][ T5320] !chanctx_conf [ 125.916493][ T5320] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#0: syz.0.0/5320 [ 125.922862][ T5320] Modules linked in: [ 125.925116][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 125.929031][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.933792][ T5320] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 125.936374][ T5320] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c 97 91 00 cc e8 d6 ef 77 f6 90 0f 0b 90 eb e1 e8 cb ef 77 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 125.944422][ T5320] RSP: 0018:ffffc9000d93efe8 EFLAGS: 00010283 [ 125.947526][ T5320] RAX: ffffffff8b4f44f5 RBX: ffff88801fb58050 RCX: 0000000000100000 [ 125.951630][ T5320] RDX: ffffc9000eb3a000 RSI: 000000000000038e RDI: 000000000000038f [ 125.954938][ T5320] RBP: dffffc0000000000 R08: ffffffff8b4f4067 R09: 0000000000000000 [ 125.958186][ T5320] R10: 0000000000000000 R11: ffffffff8ed5a360 R12: ffffffff8b4f4067 [ 125.961622][ T5320] R13: ffff888011ee0f40 R14: 0000000000000001 R15: 0000000000000000 [ 125.965587][ T5320] FS: 00007feacba476c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000 [ 125.970219][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.973206][ T5320] CR2: 00007feacad96cd0 CR3: 0000000012b1d000 CR4: 0000000000352ef0 [ 125.976529][ T5320] Call Trace: [ 125.978133][ T5320] [ 125.979369][ T5320] rate_control_rate_init_all_links+0xf4/0x190 [ 125.982106][ T5320] sta_apply_auth_flags+0x1bc/0x430 [ 125.984203][ T5320] sta_apply_parameters+0x1291/0x1b50 [ 125.986350][ T5320] ieee80211_add_station+0x3de/0x700 [ 125.988393][ T5320] rdev_add_station+0xfc/0x290 [ 125.990525][ T5320] nl80211_new_station+0x1b4e/0x1fd0 [ 125.992729][ T5320] ? trace_contention_end+0x3d/0x140 [ 125.994734][ T5320] ? __pfx_nl80211_new_station+0x10/0x10 [ 125.996988][ T5320] ? __rtnl_unlock+0xc8/0xf0 [ 125.998888][ T5320] ? nl80211_pre_doit+0x53d/0x890 [ 126.001080][ T5320] genl_family_rcv_msg_doit+0x233/0x340 [ 126.003665][ T5320] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 126.006218][ T5320] ? bpf_lsm_capable+0x9/0x20 [ 126.008242][ T5320] ? security_capable+0x7e/0x2c0 [ 126.010284][ T5320] genl_rcv_msg+0x614/0x7a0 [ 126.012443][ T5320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.014479][ T5320] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 126.016451][ T5320] ? __pfx_nl80211_new_station+0x10/0x10 [ 126.018550][ T5320] ? __pfx_nl80211_post_doit+0x10/0x10 [ 126.020548][ T5320] ? __pfx_ref_tracker_free+0x10/0x10 [ 126.023085][ T5320] ? __asan_memcpy+0x40/0x70 [ 126.025026][ T5320] ? __skb_clone+0x5c/0x6c0 [ 126.026916][ T5320] netlink_rcv_skb+0x226/0x4a0 [ 126.028987][ T5320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.031262][ T5320] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.033484][ T5320] ? down_read+0x2be/0x330 [ 126.035270][ T5320] genl_rcv+0x28/0x40 [ 126.036958][ T5320] netlink_unicast+0x7bd/0x940 [ 126.038773][ T5320] netlink_sendmsg+0x813/0xb40 [ 126.040706][ T5320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.043211][ T5320] ? aa_sock_msg_perm+0xf6/0x1c0 [ 126.045281][ T5320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.047415][ T5320] sock_sendmsg_nosec+0x13a/0x180 [ 126.049371][ T5320] ____sys_sendmsg+0x54e/0x850 [ 126.051334][ T5320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.053319][ T5320] ? import_iovec+0x73/0xa0 [ 126.055080][ T5320] ___sys_sendmsg+0x2a5/0x360 [ 126.057023][ T5320] ? __lock_acquire+0x683/0x2cf0 [ 126.058861][ T5320] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.060861][ T5320] ? futex_wait+0x2a2/0x390 [ 126.062721][ T5320] ? __fget_files+0x2a/0x420 [ 126.064614][ T5320] ? __fget_files+0x3a2/0x420 [ 126.066618][ T5320] __x64_sys_sendmsg+0x1b1/0x290 [ 126.068642][ T5320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.070847][ T5320] do_syscall_64+0x166/0x520 [ 126.072829][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.075416][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 126.077505][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.080040][ T5320] RIP: 0033:0x7feacab9e159 [ 126.082202][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.089974][ T5320] RSP: 002b:00007feacba46fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.093588][ T5320] RAX: ffffffffffffffda RBX: 00007feacae25fa0 RCX: 00007feacab9e159 [ 126.096793][ T5320] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 126.100047][ T5320] RBP: 00007feacac35024 R08: 0000000000000000 R09: 0000000000000000 [ 126.103692][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.106959][ T5320] R13: 00007feacae26038 R14: 00007feacae25fa0 R15: 00007ffdbe3e40d8 [ 126.110466][ T5320] [ 126.111938][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.114978][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 126.118736][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.123100][ T5320] Call Trace: [ 126.124552][ T5320] [ 126.125847][ T5320] vpanic+0x56d/0xa60 [ 126.127538][ T5320] ? __pfx__printk+0x10/0x10 [ 126.129539][ T5320] ? __pfx_vpanic+0x10/0x10 [ 126.131408][ T5320] ? is_bpf_text_address+0x292/0x2b0 [ 126.133608][ T5320] ? is_bpf_text_address+0x26/0x2b0 [ 126.135890][ T5320] panic+0xc5/0xd0 [ 126.137538][ T5320] ? __pfx_panic+0x10/0x10 [ 126.139405][ T5320] __warn+0x315/0x4c0 [ 126.141025][ T5320] ? rate_control_rate_init+0x5a6/0x630 [ 126.143199][ T5320] ? rate_control_rate_init+0x5a6/0x630 [ 126.145273][ T5320] __report_bug+0x276/0x570 [ 126.146868][ T5320] ? stack_depot_save_flags+0x404/0x7f0 [ 126.148751][ T5320] ? rate_control_rate_init+0x5a6/0x630 [ 126.150673][ T5320] ? __pfx___report_bug+0x10/0x10 [ 126.152482][ T5320] ? __lock_acquire+0x683/0x2cf0 [ 126.154372][ T5320] ? __lock_acquire+0x683/0x2cf0 [ 126.156110][ T5320] ? rate_control_rate_init+0x5a6/0x630 [ 126.158187][ T5320] report_bug+0x16b/0x220 [ 126.160005][ T5320] ? rate_control_rate_init+0x5a6/0x630 [ 126.162447][ T5320] ? rate_control_rate_init+0x5a8/0x630 [ 126.164780][ T5320] handle_bug+0x9c/0x200 [ 126.166623][ T5320] exc_invalid_op+0x1a/0x50 [ 126.168560][ T5320] asm_exc_invalid_op+0x1a/0x20 [ 126.170396][ T5320] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 126.172704][ T5320] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c 97 91 00 cc e8 d6 ef 77 f6 90 0f 0b 90 eb e1 e8 cb ef 77 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 126.179580][ T5320] RSP: 0018:ffffc9000d93efe8 EFLAGS: 00010283 [ 126.181802][ T5320] RAX: ffffffff8b4f44f5 RBX: ffff88801fb58050 RCX: 0000000000100000 [ 126.184575][ T5320] RDX: ffffc9000eb3a000 RSI: 000000000000038e RDI: 000000000000038f [ 126.187347][ T5320] RBP: dffffc0000000000 R08: ffffffff8b4f4067 R09: 0000000000000000 [ 126.190102][ T5320] R10: 0000000000000000 R11: ffffffff8ed5a360 R12: ffffffff8b4f4067 [ 126.192656][ T5320] R13: ffff888011ee0f40 R14: 0000000000000001 R15: 0000000000000000 [ 126.195197][ T5320] ? rate_control_rate_init+0x117/0x630 [ 126.196950][ T5320] ? rate_control_rate_init+0x117/0x630 [ 126.198700][ T5320] ? rate_control_rate_init+0x5a5/0x630 [ 126.200480][ T5320] ? rate_control_rate_init+0x5a5/0x630 [ 126.202568][ T5320] rate_control_rate_init_all_links+0xf4/0x190 [ 126.205018][ T5320] sta_apply_auth_flags+0x1bc/0x430 [ 126.207019][ T5320] sta_apply_parameters+0x1291/0x1b50 [ 126.209219][ T5320] ieee80211_add_station+0x3de/0x700 [ 126.211412][ T5320] rdev_add_station+0xfc/0x290 [ 126.213520][ T5320] nl80211_new_station+0x1b4e/0x1fd0 [ 126.215768][ T5320] ? trace_contention_end+0x3d/0x140 [ 126.218115][ T5320] ? __pfx_nl80211_new_station+0x10/0x10 [ 126.220544][ T5320] ? __rtnl_unlock+0xc8/0xf0 [ 126.222654][ T5320] ? nl80211_pre_doit+0x53d/0x890 [ 126.224909][ T5320] genl_family_rcv_msg_doit+0x233/0x340 [ 126.227273][ T5320] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 126.229907][ T5320] ? bpf_lsm_capable+0x9/0x20 [ 126.231980][ T5320] ? security_capable+0x7e/0x2c0 [ 126.234281][ T5320] genl_rcv_msg+0x614/0x7a0 [ 126.236317][ T5320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.238542][ T5320] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 126.240889][ T5320] ? __pfx_nl80211_new_station+0x10/0x10 [ 126.243343][ T5320] ? __pfx_nl80211_post_doit+0x10/0x10 [ 126.245698][ T5320] ? __pfx_ref_tracker_free+0x10/0x10 [ 126.248026][ T5320] ? __asan_memcpy+0x40/0x70 [ 126.250059][ T5320] ? __skb_clone+0x5c/0x6c0 [ 126.252016][ T5320] netlink_rcv_skb+0x226/0x4a0 [ 126.253779][ T5320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.255981][ T5320] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.257942][ T5320] ? down_read+0x2be/0x330 [ 126.259626][ T5320] genl_rcv+0x28/0x40 [ 126.261204][ T5320] netlink_unicast+0x7bd/0x940 [ 126.263097][ T5320] netlink_sendmsg+0x813/0xb40 [ 126.265029][ T5320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.267039][ T5320] ? aa_sock_msg_perm+0xf6/0x1c0 [ 126.269060][ T5320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.271189][ T5320] sock_sendmsg_nosec+0x13a/0x180 [ 126.273311][ T5320] ____sys_sendmsg+0x54e/0x850 [ 126.275292][ T5320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.277446][ T5320] ? import_iovec+0x73/0xa0 [ 126.279325][ T5320] ___sys_sendmsg+0x2a5/0x360 [ 126.281293][ T5320] ? __lock_acquire+0x683/0x2cf0 [ 126.283459][ T5320] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.285625][ T5320] ? futex_wait+0x2a2/0x390 [ 126.287448][ T5320] ? __fget_files+0x2a/0x420 [ 126.289363][ T5320] ? __fget_files+0x3a2/0x420 [ 126.291213][ T5320] __x64_sys_sendmsg+0x1b1/0x290 [ 126.293188][ T5320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.295322][ T5320] do_syscall_64+0x166/0x520 [ 126.297284][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.299804][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 126.301873][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.304312][ T5320] RIP: 0033:0x7feacab9e159 [ 126.306176][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.314090][ T5320] RSP: 002b:00007feacba46fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.317454][ T5320] RAX: ffffffffffffffda RBX: 00007feacae25fa0 RCX: 00007feacab9e159 [ 126.320767][ T5320] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 126.323920][ T5320] RBP: 00007feacac35024 R08: 0000000000000000 R09: 0000000000000000 [ 126.327015][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.329953][ T5320] R13: 00007feacae26038 R14: 00007feacae25fa0 R15: 00007ffdbe3e40d8 [ 126.332851][ T5320] [ 126.334503][ T5320] Kernel Offset: disabled [ 126.336302][ T5320] Rebooting in 86400 seconds..