program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)={0x94, r1, 0x100, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0xffffffffffffff4c}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_PMK={0x8, 0xfe, "6d69f41e"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_PMK={0x27, 0xfe, "80eb4d8780921f3723a214655eae04bcb6993749364027e7fec2b4b7f7bd2713cecf64"}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x20000014) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000380)={0x2, 0x8de, &(0x7f00000002c0), 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="270502001c0014000600002fb96db4f7babe05000700810005008100", 0x1c}, {&(0x7f0000000280)="991b0d9e9def56e4bbdf", 0xa}, {&(0x7f00000004c0)="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", 0xe01}], 0x3}, 0x30040805) (async) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={0x0}, 0x1) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000002000014000300776c616e31000000000400000000000000000000000000004e52631cf61534d5bf77d4ebfcd61c00a69fb4ff0bbac140bd158632c9367896551a4a52eff920a3220be38f2e2a4a6e1ba4fc4f206596bdf63dc778815fff9789e06be43036dece0232d092994b9b78653641e28e9929d4cfabb7733935479971ca83224ecf5b719e524cad37ed7ccfa710de7a27dad9f37dee57ab563b379070185cbef316de4b2dec1e11ed03f4a58689856fd91f009e913029efedeb221c793c0d6b9c59a8fe44150753043cb0bb17060360bdb3dce5240bc77590efd63da3003e88c960aaa5f7edfd8ba34a"], 0x3c}}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000440), 0x10) listen(r12, 0x0) (async) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) close(r12) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) (async) close(0x3) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 84.790555][ T4652] Bluetooth: hci0: command tx timeout [ 84.966397][ T5323] ------------[ cut here ]------------ [ 84.969065][ T5323] !chanctx_conf [ 84.969077][ T5323] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#0: syz.0.0/5323 [ 84.975692][ T5323] Modules linked in: [ 84.978829][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 84.983105][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.987282][ T5323] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 84.990209][ T5323] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bc 51 91 00 cc e8 26 1e 84 f6 90 0f 0b 90 eb e1 e8 1b 1e 84 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 84.999322][ T5323] RSP: 0018:ffffc9000e69efe0 EFLAGS: 00010293 [ 85.002145][ T5323] RAX: ffffffff8b426475 RBX: ffff888012a1c050 RCX: ffff888036a0ca80 [ 85.006039][ T5323] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 85.010754][ T5323] RBP: dffffc0000000000 R08: ffffffff8b425fe7 R09: 0000000000000000 [ 85.014284][ T5323] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b425fe7 [ 85.017842][ T5323] R13: ffff8880529e0f40 R14: 0000000000000001 R15: 0000000000000000 [ 85.022141][ T5323] FS: 00007f8d403a36c0(0000) GS:ffff88808c54e000(0000) knlGS:0000000000000000 [ 85.026956][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.029955][ T5323] CR2: 0000557c3667d168 CR3: 0000000012b6d000 CR4: 0000000000352ef0 [ 85.033408][ T5323] Call Trace: [ 85.034911][ T5323] [ 85.036053][ T5323] rate_control_rate_init_all_links+0xf4/0x190 [ 85.038744][ T5323] sta_apply_auth_flags+0x1bc/0x430 [ 85.041466][ T5323] sta_apply_parameters+0x126d/0x1b10 [ 85.044284][ T5323] ieee80211_add_station+0x3de/0x700 [ 85.046685][ T5323] rdev_add_station+0xfc/0x290 [ 85.048847][ T5323] nl80211_new_station+0x1b4e/0x1fd0 [ 85.051146][ T5323] ? trace_contention_end+0x3d/0x140 [ 85.053431][ T5323] ? __pfx_nl80211_new_station+0x10/0x10 [ 85.055759][ T5323] ? __rtnl_unlock+0xc8/0xf0 [ 85.058186][ T5323] ? nl80211_pre_doit+0x53d/0x890 [ 85.061449][ T5323] genl_family_rcv_msg_doit+0x233/0x340 [ 85.064044][ T5323] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 85.066687][ T5323] ? bpf_lsm_capable+0x9/0x20 [ 85.068771][ T5323] ? security_capable+0x7e/0x2c0 [ 85.070994][ T5323] genl_rcv_msg+0x614/0x7a0 [ 85.072868][ T5323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.075150][ T5323] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 85.077600][ T5323] ? __pfx_nl80211_new_station+0x10/0x10 [ 85.080488][ T5323] ? __pfx_nl80211_post_doit+0x10/0x10 [ 85.083199][ T5323] ? __pfx_ref_tracker_free+0x10/0x10 [ 85.085685][ T5323] ? __asan_memcpy+0x40/0x70 [ 85.087742][ T5323] ? __skb_clone+0x5c/0x6c0 [ 85.089783][ T5323] netlink_rcv_skb+0x226/0x4a0 [ 85.091814][ T5323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.093947][ T5323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.096453][ T5323] ? down_read+0x2be/0x330 [ 85.098825][ T5323] genl_rcv+0x28/0x40 [ 85.101169][ T5323] netlink_unicast+0x7bb/0x940 [ 85.103234][ T5323] netlink_sendmsg+0x813/0xb40 [ 85.105206][ T5323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.107420][ T5323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 85.109692][ T5323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.112092][ T5323] sock_sendmsg_nosec+0x13a/0x180 [ 85.114934][ T5323] ____sys_sendmsg+0x54e/0x850 [ 85.117697][ T5323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.119967][ T5323] ? import_iovec+0x73/0xa0 [ 85.122028][ T5323] ___sys_sendmsg+0x2a5/0x360 [ 85.124055][ T5323] ? __lock_acquire+0x683/0x2cf0 [ 85.126131][ T5323] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.128557][ T5323] ? futex_wait+0x2a2/0x390 [ 85.130795][ T5323] ? __fget_files+0x2a/0x420 [ 85.133812][ T5323] ? __fget_files+0x3a2/0x420 [ 85.136543][ T5323] __x64_sys_sendmsg+0x1b1/0x290 [ 85.138881][ T5323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 85.141810][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.144434][ T5323] do_syscall_64+0x174/0x580 [ 85.146197][ T5323] ? trace_irq_disable+0x3b/0x140 [ 85.148338][ T5323] ? clear_bhb_loop+0x40/0x90 [ 85.150738][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.154127][ T5323] RIP: 0033:0x7f8d3f59de59 [ 85.156572][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.165251][ T5323] RSP: 002b:00007f8d403a2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.168803][ T5323] RAX: ffffffffffffffda RBX: 00007f8d3f825fa0 RCX: 00007f8d3f59de59 [ 85.172599][ T5323] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 85.176713][ T5323] RBP: 00007f8d3f633e6f R08: 0000000000000000 R09: 0000000000000000 [ 85.180785][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.184193][ T5323] R13: 00007f8d3f826038 R14: 00007f8d3f825fa0 R15: 00007ffe8754eb68 [ 85.187651][ T5323] [ 85.189124][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.192569][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.199346][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.203618][ T5323] Call Trace: [ 85.205050][ T5323] [ 85.206250][ T5323] vpanic+0x56c/0xa60 [ 85.207991][ T5323] ? __pfx__printk+0x10/0x10 [ 85.210191][ T5323] ? __pfx_vpanic+0x10/0x10 [ 85.212632][ T5323] ? is_bpf_text_address+0x292/0x2b0 [ 85.215277][ T5323] ? is_bpf_text_address+0x26/0x2b0 [ 85.217756][ T5323] panic+0xc5/0xd0 [ 85.219357][ T5323] ? __pfx_panic+0x10/0x10 [ 85.221302][ T5323] __warn+0x315/0x4c0 [ 85.223154][ T5323] ? rate_control_rate_init+0x5a6/0x630 [ 85.225667][ T5323] ? rate_control_rate_init+0x5a6/0x630 [ 85.228459][ T5323] __report_bug+0x331/0x530 [ 85.231003][ T5323] ? stack_depot_save_flags+0x3ec/0x800 [ 85.233912][ T5323] ? rate_control_rate_init+0x5a6/0x630 [ 85.236360][ T5323] ? __pfx___report_bug+0x10/0x10 [ 85.238553][ T5323] ? __lock_acquire+0x683/0x2cf0 [ 85.240707][ T5323] ? __lock_acquire+0x683/0x2cf0 [ 85.242797][ T5323] ? rate_control_rate_init+0x5a6/0x630 [ 85.245214][ T5323] report_bug+0x16a/0x220 [ 85.247724][ T5323] ? rate_control_rate_init+0x5a6/0x630 [ 85.251335][ T5323] ? rate_control_rate_init+0x5a8/0x630 [ 85.254311][ T5323] handle_bug+0x9c/0x200 [ 85.256490][ T5323] exc_invalid_op+0x1a/0x50 [ 85.258457][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 85.260786][ T5323] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 85.263932][ T5323] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bc 51 91 00 cc e8 26 1e 84 f6 90 0f 0b 90 eb e1 e8 1b 1e 84 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 85.272164][ T5323] RSP: 0018:ffffc9000e69efe0 EFLAGS: 00010293 [ 85.274834][ T5323] RAX: ffffffff8b426475 RBX: ffff888012a1c050 RCX: ffff888036a0ca80 [ 85.278713][ T5323] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 85.282569][ T5323] RBP: dffffc0000000000 R08: ffffffff8b425fe7 R09: 0000000000000000 [ 85.286010][ T5323] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b425fe7 [ 85.289566][ T5323] R13: ffff8880529e0f40 R14: 0000000000000001 R15: 0000000000000000 [ 85.293095][ T5323] ? rate_control_rate_init+0x117/0x630 [ 85.295898][ T5323] ? rate_control_rate_init+0x117/0x630 [ 85.298669][ T5323] ? rate_control_rate_init+0x5a5/0x630 [ 85.301007][ T5323] rate_control_rate_init_all_links+0xf4/0x190 [ 85.303728][ T5323] sta_apply_auth_flags+0x1bc/0x430 [ 85.306229][ T5323] sta_apply_parameters+0x126d/0x1b10 [ 85.308841][ T5323] ieee80211_add_station+0x3de/0x700 [ 85.311386][ T5323] rdev_add_station+0xfc/0x290 [ 85.313502][ T5323] nl80211_new_station+0x1b4e/0x1fd0 [ 85.315806][ T5323] ? trace_contention_end+0x3d/0x140 [ 85.318290][ T5323] ? __pfx_nl80211_new_station+0x10/0x10 [ 85.321413][ T5323] ? __rtnl_unlock+0xc8/0xf0 [ 85.323688][ T5323] ? nl80211_pre_doit+0x53d/0x890 [ 85.325857][ T5323] genl_family_rcv_msg_doit+0x233/0x340 [ 85.328297][ T5323] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 85.331199][ T5323] ? bpf_lsm_capable+0x9/0x20 [ 85.333538][ T5323] ? security_capable+0x7e/0x2c0 [ 85.335958][ T5323] genl_rcv_msg+0x614/0x7a0 [ 85.338010][ T5323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.340141][ T5323] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 85.342318][ T5323] ? __pfx_nl80211_new_station+0x10/0x10 [ 85.344948][ T5323] ? __pfx_nl80211_post_doit+0x10/0x10 [ 85.347747][ T5323] ? __pfx_ref_tracker_free+0x10/0x10 [ 85.350141][ T5323] ? __asan_memcpy+0x40/0x70 [ 85.352018][ T5323] ? __skb_clone+0x5c/0x6c0 [ 85.353954][ T5323] netlink_rcv_skb+0x226/0x4a0 [ 85.356112][ T5323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.358413][ T5323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.360940][ T5323] ? down_read+0x2be/0x330 [ 85.363106][ T5323] genl_rcv+0x28/0x40 [ 85.364958][ T5323] netlink_unicast+0x7bb/0x940 [ 85.367131][ T5323] netlink_sendmsg+0x813/0xb40 [ 85.369209][ T5323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.371505][ T5323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 85.373783][ T5323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.376332][ T5323] sock_sendmsg_nosec+0x13a/0x180 [ 85.378951][ T5323] ____sys_sendmsg+0x54e/0x850 [ 85.381136][ T5323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.383319][ T5323] ? import_iovec+0x73/0xa0 [ 85.385168][ T5323] ___sys_sendmsg+0x2a5/0x360 [ 85.387121][ T5323] ? __lock_acquire+0x683/0x2cf0 [ 85.389340][ T5323] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.391859][ T5323] ? futex_wait+0x2a2/0x390 [ 85.393809][ T5323] ? __fget_files+0x2a/0x420 [ 85.395760][ T5323] ? __fget_files+0x3a2/0x420 [ 85.397835][ T5323] __x64_sys_sendmsg+0x1b1/0x290 [ 85.400039][ T5323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 85.402293][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.404815][ T5323] do_syscall_64+0x174/0x580 [ 85.406736][ T5323] ? trace_irq_disable+0x3b/0x140 [ 85.409003][ T5323] ? clear_bhb_loop+0x40/0x90 [ 85.411119][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.413729][ T5323] RIP: 0033:0x7f8d3f59de59 [ 85.415752][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.423778][ T5323] RSP: 002b:00007f8d403a2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.427164][ T5323] RAX: ffffffffffffffda RBX: 00007f8d3f825fa0 RCX: 00007f8d3f59de59 [ 85.430636][ T5323] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 85.433946][ T5323] RBP: 00007f8d3f633e6f R08: 0000000000000000 R09: 0000000000000000 [ 85.437306][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.440789][ T5323] R13: 00007f8d3f826038 R14: 00007f8d3f825fa0 R15: 00007ffe8754eb68 [ 85.444125][ T5323] [ 85.445920][ T5323] Kernel Offset: disabled [ 85.447841][ T5323] Rebooting in 86400 seconds..