program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000010c0)={0x1158, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x75}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x76, 0xc5, "5444ccb7d6d83aad8359a493c973d543c3da6beb501be950f132682b292c3dcc8263afe0924a227edad1b21770099525f677c95fa6fd2b9c694c64edf5c43d4cd6168201d98e80e608557a571c38c59e370e6edf5ae9423e176e779bc145a704f57498dd2f965072df66409546ffff25f3ef"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "d20058243b4b961976765994961b26689a9442c0ee6c904eaa2f6d8624143133fd3f475bf65a087ccb8620400f2dd43ac69139a96fc7ea73e84d84b630c21d1c071ad251274ea10d28a3797674e98ad7ae8beec8da02d3ef4ede95b58b9f7416210e849f31fa9ae1c760440d6884f09ec2eac848f7ab6c491736f1e437ebcd6cdd1497bf25cf0c5d5b14666bd0bd4192e8548828f92b7813db28130acb54393b80790b2ed03caef17da13703aaf718cbd35347a423c9046b7786e1cf3aa82a4c8c1541cefa1723aa39523643d2c3c878cfb2e101ef4cdd9c953f1cd4a66678e7d226946baff157bc8eaab45a2700db8590669903b9d18024255e08b49e265d8621099bf0aa55a5eb9c10647c3f7cfb5b3f38e707abe844c06f5b861bc7f191f6fc2eca2025c5935a0d5d5970da5038cc3b74dd6b69cf9f7e168bec92edd1098d1768bcf3109bba0831f5bff24ec00eb95303d5a6ddf59a61f3861a60e693b555af9238b5e0d4f52264b9db267c41bc33715ee303eeae3fc0f83815b4bf1df2dfe3e198b6892dda64d2aaf194b60b2b2f94a8958f960ab214cebeb0ff331fb58a4271cd8d84aa66aea41b09854f08455a0ecb153389f5780868ed006955729d8366b1d3edc0ff090ff412fd6471adfc6f1943eb1a09a79a7d4fcd1caa191586a2e4ba03fdea3f3e0f05c169481172e8db96b3b8de8d2ecc286fa61bbdef4df6524ef00c972f563bcd881253ccf2eafd730823e22971905dfa65f42d9d41deb409ca1f93d149e9ffb3380a1dccc2cbe6058ed95d617198a5fa9ba3a358700043276536df05ab8ea708c89bbd8382449571ebbc558a89d683e538e08b4eb52b50e1baab2711f1730e11d74d1bb17b0dfb4fe9f152262171239f51d140003bad74ba73b9bad95ef72a0b47187924e29357b9711c8b087d73a0c2b156602256d427324a66f9bcdd3818dab7483425e9bef763153039a890579ab58c3ad19424c31e6769926b462e24d74068acfa68ed45115f6e2ffaca982d492145e5f6344f3f1ada83b00310e91605f591b539ed675aa76ef76ce3fd2963531a3818cb349c4aae6955a2e1891b3c1f49caa6a9c6b50818caa695942f6134c2b25469e28e741c37898849f2dc40943a974d9c38ff60095784bcab20821e278695f255dfc3333bb2b92b22450d53c85433a54ffdcb594b85d48eff3999d72cb2cc66d0505ba9dfcab67a86acffe02fc220f59d5ccacab0879019a2b2d3f936347d6c5d68e3a20d03f77eb41278ebb5cb31fdab411b50747ab02e512423a9fd75409633ab66f6eb216e222e109ba3387cd2b87048aee2658e7a36200dd7b278990b61d1a81bb89e14a6f54ee51a7c8579fe6f68604dd6e0f790c54d9659f56ee5cf797e61b986df25f44107e683f873911ccb377aad407b6eae8219409a1b9b2bd4b442b56d0c1de5e9dfc4fa67a88f11f735419d1a3ce2a5bc346ad56b7e94448736ca0ffe39528b7f7b7a83552f6a43b7c452cd543b718c50cd7463fb84db118a656a465215e7ac3b3fc0a90bc25c378b575b9df0361b17496ce401d23b1ff1c4dac00ded18509ed4c49a9669f012f93bdfb99c4246a653d2d95daf1e903d2a2715233a9da97fba51afad74fcbdf9e96d888a2a2bae881292d1dc16831091af67d4a103b11b949be0e60e56cfb251053ddc54b62eaa8c5c0c2b77b99a71271db4b243bffeda334649255d31ff4bc18970587d822428b4eefd974874068ba025cbcfaf689cfb4a9a6b498027f4501f7a2ce8f2a2434ddd989710cc0f64f7983543732b59d18167adb9157cd61ed23376e21ce8689e2b0381fa1a196d8abe42449e3206d6c1de5b4a0e4f9fb1048f55d5ad343133fc444ab2f9ae75451c82798b889dbb861d93554c0f01d1854c1289d1a33f9e57adacbc56a3a722bdd26f157670a4228f3a3be4856ceb4d6d1d0f5b68bb6a8387c2f5311b446a59caf79db2c54ea5c247115f7e30dc1ccb39f0b2cbd578c34d229ba7000377fcd02f9323448fdcc2674e5d6761423eb516e9694b65c454b6d16c5dfda0682adf20a82dfb651e6c0e2db05f0e7442d793d77799c9344813510e0e8aae61c460ebd8312a357f3ff6cec06025312cac6db1a9c060bc57d1227611cab91075fbc9bc6ea4d0f2c66010609458992e6e4cbbc52067b39c736beeb4bcda3c370fe2e3d9225388966c3ed8b4c503213d3faa7748ff33e90f3841b3069254aca2d5ec0f5be5f9a67274254e2b95eab9dc693ef30094f93d8f149656bf1768c7980204cf28416ba0e83d5d85e6f50b64cb92a63568a2896562810dacb2413dcc1de1a1b9d7c1b9ecb254e39f867a82c01581b096beedaefa61e0698aa073168382ebcffe507fc7beccc4553ae2099f3883533b4237a6dcf1f05bcfe637605884797fabae23b7e925883d299f15c4be85ad9b752dc4758a9840f5a0fd26aa6ff60661471c3443f507d7f35b5d368cacb70969b2740e60d4ee241fecc780f9eb0fae44be7e49c72dd1f16bbea5c37ac3e54eac55e2d8133d5621f7033c6516c203258b7b77327ebbd9daba281e3273bab5707d5808410a219e4920dd975537e92cd52c3d41bfbd06be8a340411636e2f4ff73d41358f82d949c5eda10d40ced9389775004fc010f9f0d5c557098219e9e92e46bb194bfe603ed35e207a6e4e9437684c8cc04fd52c48a8a61f3fb388031b2767eff05988c54842870117d0ba77c60ac87b5e0c04093074ed6906452790a9d9cffbd0cfd5ccda489d6895d83ab74cf5d9f7e364f4784b0667cb7408c79b9469feec96fb91d4f980f1f894229c87b4b6c8e0df868f6d274b054346bf6dbccf74373d63e86e33a8d2ac6b1fab592753b80ce0af443df3f832b3fcaf2fcf565371f083739433317836b6c075762fd8c086b7d63502804039bc406411691576d07868620e4fa917840d22cd792c40fd681734de44e07235571e8917ab57b65c1b598299efeb801ec2165b567b222d283fc5f307fda43353cb1025fe01a1996707a7e430c57027c3956441b30bc55d5620f91129953b9f87f7aa1236d53f726fd17712c3d5c082bf3c80e95a25d20735a6f113774bd6532e38bd67d52cadbb74533049bc7cf3064198450a43291eadee28abdd9e24123b75b518a5234f8be49e83de9b0e5f85ed5adacc14137db54594b8750ab8c357b47d864d63907f0ea55c9c35665f9fcc348acf08b490e4b9d6f13fbb44358de3b02d006d28e64e294a91aba7f34e1755202fe4530299330f8853d0d21c9ea62b7e58b9b66055d53935b4865cfce49bab8c18812e5c3d8abcd90c7d32bf84975145b1ee7869800405d9f806d2caa8eca5b5615a770b5197a543c50a5f1700e3b718510f2ed4001af5e51377eb1bd5df10e18a75c313626318649c8d92225b63442b019e508c5fe57f7f12c69e51196ba05d3ed11787a98c0d299f45feb5548393c641497185fbbd9401572de3324907ceaf9df4255f7415fa86f30bc931997c8cedf7175d9c14c64308971d6e67f6ea23727949133920929d1f1c07cf6b5c5e35b2350381ec53c706b961bb2064fa124c1dfdbf0d4e7b6139856c6765b0c56ca3d565febc72bbd50b497fca0eb6140563b08b759ed5bebf88e19787849ed7b30cce6c364b1f76a2fbaa1cbccebeb39a37ff77d9abaff47871c0e96b4f3cdb6b2a18b4648772a3fdf879a981b46f236d0585ee849ae4882b5e2d2db013b279ed2a99ad940d73ba8067fb9737fbe38b9516e89188c6ee497749cea6992ec150d85f511b46b52725cb788f3514f5f530ab0d5cb00ec11e068c267ce829fa7d96f9ded6b45c5a2e3301426945f8c898a43f03b18957a4c7001deabd401c20ea2fed3b227bad1a236016af628e9af0faf60aa450825b5811a8d9239928902e98fd3289aa6a245b4a0e60040df1931a93401de0f4eeb6eddb1225cf3c5f52ce97b0d1657b56bb26e37a281daed99cb0212db972e46eaa09009bd983fa722ba8acdb2640d865a31bc22549a42764752293fe5da166a9394a5f9d2ce78f6391c686810b4fb586c43c3c2e021ece5d1fd1aedca7a0b5e7bc1817575cd3e9b864c5e9fd071d33855bac8132b276f0d9d5a462c9cf0e597d0197a7a7ca09bacb6953998ab6146fa247e81bc482acfe540295135cfb6478d24aa3f3b2e2a5840c68d47a8c82f0be4a287841230c661e83baf4a3693bae40302c67abc6d8450874a510c87b5c5855c0b72ca5e2f603fd342c37f6ca40cfc6973fc07c87797b4bef21bd4b5d3b36a5eed3e8b8f62858365fc7e247039d8fc77c82ac05d61b89a353ef496e16d4e4223e5f3be899a626266a4384189f7f80026f7c1a9bf874ae11baa3cd4a9eb9a66afbcc471dc6dee21b17e1939e96fe99ba2179dc3b54c368c02f33e17ff1330fd6692a259d26a4e5484b83f6c198cd284c749413b79d68888a35c3cf961b7f7d05b4a42fd4ed63a653b4c61bd9ef60b7a8a824316a41bb930d775d737b15d59e7a90c8200d49a37425769a270633c1b68b484df6dc943643966aa33f717e871319dc59bc46f1aa5b4e05c0d7f7e89207df43e50c006d813a93cf976d6d9093d55cd43d9f222c2dd4dc3f6f889b5e9244e9dd87a6751c2cc4a99762ee87ce2991ea0c4d67e648ff08b15fe516edf76a97e6b4aff1ee441da441605a447941e2734423d7b1e0061985ce9b1b88edae1a856d7ae2273c05836467438a2eb405daa1fcaf8aa07bb2a8d73dacaa9dc454420a29c654ddf0f7ea770aac467a90d01fa903de7dc3eb9b58d0595449c7229dd227fe8d560637c3f6e0459b1a1ba792fd497f089b778de0bb166227e6e4fd508e64ecb0bda4caae705d187f5c73f6002f391c4cc3e656b3e5e3f7839af072d8b63c47b3da28be3a3132d8b63d21a91182763c50858a25dfb204a1b53b521b191e3cfbd6f57114a2c59313b2caaad5fe06c68d3aef673fb3e372136874f9363d9fed525d6ce446ec35e8a045920912527201e731c5a36bf8c92a18ab2d754b8232a16434b04119c8ed8414193360a370e829e20f2cf014faaa3c28fc54fdaeb5ef22a3708b8278b84c21fa73abe3034a066f4625a6880932098198947b80f8f4d5a0393c6f0727f42ef3c65e69f6fb008ae7f8fcae0cd4185020d7d28f8d7d2d60e725868a829a0725fc23499db8ddf681f4655dc83e9fdee91d4b881f32ba261300b9fc223770028eccd106f53083b7f6f860b8f7db6ba9908c75fa12fa09f49ae95b9629fe3a191ca5122b651ae2a5e88da571d9784e62207a7e5badffba773acfebd1643d278e683d3a6485d26d9a9624f09f05c95e77481848dacda49936b6af6eb16c5aa8fa46f1e970dcf00f0cdb197e1b7e7a2de9615b5f3a6d993cd409fe4a3527a237a13b5f95bbeb9ef4d2964c7ebef1f632c3233b89d5f12b483677c76cc71c2c5e96343e0bc069c28e428a4cf6e110aeafa68d29606afc4742968ff04ccdcc1ca535f6b219fb82024e2186bfad87a4564f26fddf53ac7557ed6697709ca7ed9d51f1bd9181311708ce60a1a40bfd376a89b38cf4983fd18b66f77bef6f4885054423425160d5b6d33895c810af439c9ee918d9cb787ba4ba84c5c11fbeb495e7d255209b38bb74a3cb299e9ec7d859159a93ea76fa5bf287b7b4cde61afc78103b4543651598775492b8c0bad88648f11de2a5cb6420498222fcff83d4ae44cf77cfd46198a44dc4a4c96fd3fb3198c20e8ddd3e7584614ec8c54922cd58433cb45f1c39129d5c16abbf4b464fcfbf4d81eaa6dc14d00e06b8130f"}, @NL80211_ATTR_VENDOR_DATA={0x9d, 0xc5, "f75737ee5480c62a4ffc05015c2f5be0420847a77fb9a0ff2d2fdca963c5569ae58e2d6ef3730e9ab4977621127037146e600f5e4770cd8581c3eaf45dc8bd1e3daa11f8870d18c7d5907980c8980297fb2de58dd52ec5bdbe8244159680af23d6d487674323d5d56d67c11415d18f374da5dae5db56afc70d36014d1f4ac392170ba02ae1719fba0eadb91b6dc16aff2276f86dc749f2d02b"}]}, 0x1158}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c1a00005e3a29900b12de4b000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000010000000000000000000064000100080026006c09000008000c006400000008000d0000000000"], 0x5c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x18, 0x6a, 0x100, 0x70bd26, 0x25dfdbfe}, 0x18}}, 0x0) r6 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0x20002f7}) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r9, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) [ 94.724834][ T5339] Bluetooth: hci0: command tx timeout [ 94.917035][ T5360] ------------[ cut here ]------------ [ 94.919469][ T5360] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 94.937533][ T5360] WARNING: CPU: 0 PID: 5360 at drivers/net/wireless/virtual/mac80211_hwsim.c:2654 mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 94.943529][ T5360] Modules linked in: [ 94.945516][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.950245][ T5360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.954944][ T5360] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 94.958673][ T5360] Code: 71 17 00 00 48 c7 c7 e0 8b 4e 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 c0 d4 82 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 47 bf fa 90 0f 0b 90 e9 fe fe ff [ 94.968306][ T5360] RSP: 0018:ffffc9000d346f50 EFLAGS: 00010286 [ 94.971500][ T5360] RAX: d5850616fafdd100 RBX: 0000000000000014 RCX: 0000000000100000 [ 94.975499][ T5360] RDX: ffffc9000e042000 RSI: 000000000000177a RDI: 000000000000177b [ 94.979786][ T5360] RBP: 0000000000000000 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 94.983301][ T5360] R10: dffffc0000000000 R11: ffffed1003f8484b R12: 0000000000000000 [ 94.986957][ T5360] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 94.990770][ T5360] FS: 00007f3de573d6c0(0000) GS:ffff88808d00a000(0000) knlGS:0000000000000000 [ 94.995621][ T5360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.998883][ T5360] CR2: 0000200000002000 CR3: 0000000042e0e000 CR4: 0000000000352ef0 [ 95.002382][ T5360] Call Trace: [ 95.003844][ T5360] [ 95.005158][ T5360] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 95.008347][ T5360] mac80211_hwsim_sta_add+0xa3/0x310 [ 95.011144][ T5360] drv_sta_state+0x8be/0x1840 [ 95.013633][ T5360] sta_info_insert_rcu+0xd32/0x1940 [ 95.015913][ T5360] ? sta_info_insert_rcu+0x2ce/0x1940 [ 95.018255][ T5360] sta_info_insert+0x16/0xc0 [ 95.020147][ T5360] rdev_add_station+0x105/0x290 [ 95.022149][ T5360] nl80211_new_station+0x1755/0x1b70 [ 95.024516][ T5360] ? __pfx_nl80211_new_station+0x10/0x10 [ 95.027535][ T5360] ? netdev_run_todo+0xe1d/0xea0 [ 95.030428][ T5360] ? nl80211_pre_doit+0x4f1/0x930 [ 95.032716][ T5360] genl_family_rcv_msg_doit+0x212/0x300 [ 95.035151][ T5360] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.038009][ T5360] ? bpf_lsm_capable+0x9/0x20 [ 95.040194][ T5360] ? security_capable+0x7e/0x2e0 [ 95.042627][ T5360] genl_rcv_msg+0x60e/0x790 [ 95.045004][ T5360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.047823][ T5360] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 95.050428][ T5360] ? __pfx_nl80211_new_station+0x10/0x10 [ 95.052993][ T5360] ? __pfx_nl80211_post_doit+0x10/0x10 [ 95.055488][ T5360] ? __asan_memcpy+0x40/0x70 [ 95.058043][ T5360] ? __pfx_ref_tracker_free+0x10/0x10 [ 95.061141][ T5360] netlink_rcv_skb+0x208/0x470 [ 95.063979][ T5360] ? __lock_acquire+0xab9/0xd20 [ 95.066673][ T5360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.068982][ T5360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.071393][ T5360] ? down_read+0x1ad/0x2e0 [ 95.073597][ T5360] genl_rcv+0x28/0x40 [ 95.075581][ T5360] netlink_unicast+0x82c/0x9e0 [ 95.078649][ T5360] ? __pfx_netlink_unicast+0x10/0x10 [ 95.081262][ T5360] ? netlink_sendmsg+0x642/0xb30 [ 95.083512][ T5360] ? skb_put+0x11b/0x210 [ 95.085516][ T5360] netlink_sendmsg+0x805/0xb30 [ 95.087891][ T5360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.090758][ T5360] ? aa_sock_msg_perm+0xf1/0x1d0 [ 95.093277][ T5360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.095737][ T5360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.098340][ T5360] __sock_sendmsg+0x219/0x270 [ 95.100532][ T5360] ____sys_sendmsg+0x505/0x830 [ 95.102902][ T5360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.105908][ T5360] ? import_iovec+0x74/0xa0 [ 95.108278][ T5360] ___sys_sendmsg+0x21f/0x2a0 [ 95.110385][ T5360] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.112877][ T5360] ? __fget_files+0x2a/0x420 [ 95.115197][ T5360] ? __fget_files+0x3a0/0x420 [ 95.117572][ T5360] __x64_sys_sendmsg+0x19b/0x260 [ 95.119785][ T5360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.122430][ T5360] ? rcu_is_watching+0x15/0xb0 [ 95.125003][ T5360] ? do_syscall_64+0xbe/0x3b0 [ 95.127568][ T5360] do_syscall_64+0xfa/0x3b0 [ 95.129725][ T5360] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.132010][ T5360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.134811][ T5360] ? clear_bhb_loop+0x60/0xb0 [ 95.137219][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.140175][ T5360] RIP: 0033:0x7f3de498eba9 [ 95.142382][ T5360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.151245][ T5360] RSP: 002b:00007f3de573d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.155404][ T5360] RAX: ffffffffffffffda RBX: 00007f3de4bd5fa0 RCX: 00007f3de498eba9 [ 95.159302][ T5360] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 95.162824][ T5360] RBP: 00007f3de4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 95.166854][ T5360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.171738][ T5360] R13: 00007f3de4bd6038 R14: 00007f3de4bd5fa0 R15: 00007ffe0cba8e38 [ 95.176467][ T5360] [ 95.178097][ T5360] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.181388][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.185462][ T5360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.190754][ T5360] Call Trace: [ 95.192363][ T5360] [ 95.193747][ T5360] dump_stack_lvl+0x99/0x250 [ 95.195941][ T5360] ? __asan_memcpy+0x40/0x70 [ 95.197960][ T5360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.200267][ T5360] ? __pfx__printk+0x10/0x10 [ 95.202426][ T5360] vpanic+0x281/0x750 [ 95.204271][ T5360] ? __pfx__printk+0x10/0x10 [ 95.206436][ T5360] ? __pfx_vpanic+0x10/0x10 [ 95.208758][ T5360] ? is_bpf_text_address+0x292/0x2b0 [ 95.211492][ T5360] panic+0xb9/0xc0 [ 95.213382][ T5360] ? __pfx_panic+0x10/0x10 [ 95.215388][ T5360] __warn+0x31b/0x4b0 [ 95.217237][ T5360] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 95.220222][ T5360] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 95.223311][ T5360] report_bug+0x2be/0x4f0 [ 95.225546][ T5360] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 95.228738][ T5360] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 95.231346][ T5360] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 95.233952][ T5360] handle_bug+0x84/0x160 [ 95.235653][ T5360] exc_invalid_op+0x1a/0x50 [ 95.237898][ T5360] asm_exc_invalid_op+0x1a/0x20 [ 95.240358][ T5360] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 95.243567][ T5360] Code: 71 17 00 00 48 c7 c7 e0 8b 4e 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 c0 d4 82 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 47 bf fa 90 0f 0b 90 e9 fe fe ff [ 95.251977][ T5360] RSP: 0018:ffffc9000d346f50 EFLAGS: 00010286 [ 95.255029][ T5360] RAX: d5850616fafdd100 RBX: 0000000000000014 RCX: 0000000000100000 [ 95.259316][ T5360] RDX: ffffc9000e042000 RSI: 000000000000177a RDI: 000000000000177b [ 95.263017][ T5360] RBP: 0000000000000000 R08: ffff88801fc24253 R09: 1ffff11003f8484a [ 95.266532][ T5360] R10: dffffc0000000000 R11: ffffed1003f8484b R12: 0000000000000000 [ 95.270176][ T5360] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 95.274223][ T5360] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 95.277220][ T5360] mac80211_hwsim_sta_add+0xa3/0x310 [ 95.279759][ T5360] drv_sta_state+0x8be/0x1840 [ 95.281965][ T5360] sta_info_insert_rcu+0xd32/0x1940 [ 95.284609][ T5360] ? sta_info_insert_rcu+0x2ce/0x1940 [ 95.287129][ T5360] sta_info_insert+0x16/0xc0 [ 95.289560][ T5360] rdev_add_station+0x105/0x290 [ 95.291613][ T5360] nl80211_new_station+0x1755/0x1b70 [ 95.293887][ T5360] ? __pfx_nl80211_new_station+0x10/0x10 [ 95.296631][ T5360] ? netdev_run_todo+0xe1d/0xea0 [ 95.299154][ T5360] ? nl80211_pre_doit+0x4f1/0x930 [ 95.301451][ T5360] genl_family_rcv_msg_doit+0x212/0x300 [ 95.304014][ T5360] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.306632][ T5360] ? bpf_lsm_capable+0x9/0x20 [ 95.308930][ T5360] ? security_capable+0x7e/0x2e0 [ 95.311642][ T5360] genl_rcv_msg+0x60e/0x790 [ 95.314371][ T5360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.316699][ T5360] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 95.319118][ T5360] ? __pfx_nl80211_new_station+0x10/0x10 [ 95.321622][ T5360] ? __pfx_nl80211_post_doit+0x10/0x10 [ 95.324038][ T5360] ? __asan_memcpy+0x40/0x70 [ 95.326125][ T5360] ? __pfx_ref_tracker_free+0x10/0x10 [ 95.329014][ T5360] netlink_rcv_skb+0x208/0x470 [ 95.331548][ T5360] ? __lock_acquire+0xab9/0xd20 [ 95.333937][ T5360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.336131][ T5360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.338480][ T5360] ? down_read+0x1ad/0x2e0 [ 95.340425][ T5360] genl_rcv+0x28/0x40 [ 95.342227][ T5360] netlink_unicast+0x82c/0x9e0 [ 95.344809][ T5360] ? __pfx_netlink_unicast+0x10/0x10 [ 95.347634][ T5360] ? netlink_sendmsg+0x642/0xb30 [ 95.349978][ T5360] ? skb_put+0x11b/0x210 [ 95.351888][ T5360] netlink_sendmsg+0x805/0xb30 [ 95.354013][ T5360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.356261][ T5360] ? aa_sock_msg_perm+0xf1/0x1d0 [ 95.358519][ T5360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.360839][ T5360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.363326][ T5360] __sock_sendmsg+0x219/0x270 [ 95.365627][ T5360] ____sys_sendmsg+0x505/0x830 [ 95.367889][ T5360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.370630][ T5360] ? import_iovec+0x74/0xa0 [ 95.372665][ T5360] ___sys_sendmsg+0x21f/0x2a0 [ 95.374874][ T5360] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.377702][ T5360] ? __fget_files+0x2a/0x420 [ 95.380164][ T5360] ? __fget_files+0x3a0/0x420 [ 95.382350][ T5360] __x64_sys_sendmsg+0x19b/0x260 [ 95.384551][ T5360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.387363][ T5360] ? rcu_is_watching+0x15/0xb0 [ 95.389923][ T5360] ? do_syscall_64+0xbe/0x3b0 [ 95.392392][ T5360] do_syscall_64+0xfa/0x3b0 [ 95.394560][ T5360] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.397227][ T5360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.400403][ T5360] ? clear_bhb_loop+0x60/0xb0 [ 95.402551][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.405179][ T5360] RIP: 0033:0x7f3de498eba9 [ 95.407362][ T5360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.416497][ T5360] RSP: 002b:00007f3de573d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.420742][ T5360] RAX: ffffffffffffffda RBX: 00007f3de4bd5fa0 RCX: 00007f3de498eba9 [ 95.423770][ T5360] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 95.426839][ T5360] RBP: 00007f3de4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 95.430120][ T5360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.434002][ T5360] R13: 00007f3de4bd6038 R14: 00007f3de4bd5fa0 R15: 00007ffe0cba8e38 [ 95.438587][ T5360] [ 95.440839][ T5360] Kernel Offset: disabled [ 95.443023][ T5360] Rebooting in 86400 seconds..