program: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000027c0), 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001b80)={0x5f8, r7, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_PROBE_RESP={0x5c1, 0x91, "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"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5f8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a0, 0x2, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x17c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xd4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x400}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10000}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0x40040) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x3c, r11, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r15 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r15, &(0x7f00000019c0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)="fed5a9e34e8ab2fee33a5e163100311ddf1f758a454254a3d7d0248aa6780d56470b9cc3129be53a80dea788808e39c0bc0db7018accab43a27d62d05ae495c8c23163753830778a1d2f5ee20b1559b5e7c07f0a5849884f3fa0e62c2745282d46f5274827c8459eac52aba09172950e898bed41754b2489e186089ffe599a26a0ae60ca29019a58c95b672b7ab73d5aeaf62ed3123071df975f7fe8441878a929d3e30fb828ee8d9d1da43e9fc072e03a1377302d66d3978ce92d622c394ca0e2848e6ad831e82cd0cc746dbdf6e9b3671a45659ba89c24bf0569", 0xdb}, {&(0x7f0000000840)="d29a1f18e7f8468729530b8d42fb19fd99f4c9b3b3cd57fa91029dc2cdec2ee503bd0577a6e2caee5f97ff3b93b536cbacd8dfb7f7b020463e854da30c9cbcdfc87dd9cf3b4ebea06b9f377c22a7f6fbdb393ca22372852d1baeb17a9bd7b94264fc2529c57c001da1021955d290c1e4cf3a", 0x72}, {&(0x7f00000008c0)="c9396fc49622d2c5271e59e00e2c28f76d16a9c0f0ec256e8142de33388603c2a6ec99630a86ee758f9a81dfa6f7e7449dd936e0f13a293789476a0acb9e9d0d042334fe544a32ba8abae05ae16064c94ba5a6f6020213a3ce9911d59bff66f128ed250e74bb01176abb1bbe609e0d73a2187d7abf73ed25073e2a9a38324eb9d8c5cb44bd291379f22fd75e77fca8c20368b0fe2cee7aa80e9fbbc85e9e00daa264b900516f243c32d4bfdd7436fd6a50", 0xb1}], 0x3, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xd8, 0x117, 0x2, 0xc4, "6b15f2cc2e123c6f5d4049b6a8eb2afcbbc18a7c6549bed644e8d0beb2444ecd7b529b0002a0267a3347a5bb22d1f6254ecfdc5ff3a56015a59ce7295da1e4ed4729b28b6e074d57afd9c0ce0f0907ff54eb6da8d180e9f7274f76bf2ea2b33db06b4d98c110af15f950357b4323c6d442d2d4e4e92d76f51ed3429bb4aee8cf69857a836e9cfa916ddc33ccfc011346349bbf1b83a815c69f149641a1e06f21942ef536a3e83fca14c23e1c9127af19f132c4bbc667a2a9dc512a48ec8b4ee8ee3c065c"}, @iv={0xa8, 0x117, 0x2, 0x8d, "2461d9503ae79318e3da5f230e19913ef4aa6c32496e2a7cd434d98f968c6d63ec271864f132810f93cb53479e6f1363dbf2469f1887ad2d97b6aae245af7bb7d129e2b2eb9619a5fdf65441c398a380fa6647f3b1d0ed50c5a557e64a82cedeae491783efd7993d9554a5a5a68e459c3f77cd3b6e6ed59f4e20e0d17a22c1928efba959eda00484aedba6c0b2"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x200}, @iv={0xc0, 0x117, 0x2, 0xa6, "d7f0cc4f8f69f071dd1c0a8415e4b7a510d589721d67954b025e81855e84042f3883d067c47a2be9ed0b8894d8412dbb763d1793f0adcb4cb5f932e1ee49d0331f8022c26a994d86ca551ee15b126a82a947fac51f53ce9cb3543d4aa93cf73c2abcf7212f3128281fce2e41857d05d58f6ba4eed7f5973c17d8b36d41d31bf9d5044e93ae3775227a2adc92a92f3cfcfdfcb4645824aafcb9d9c7029f877e1ef7b1a73e25fb"}], 0x2b8, 0x20000000}, {0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c40)="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", 0xfb}, {&(0x7f0000000d40)="5b6f22f994c974e43e821c8db0d1c0fae4cf4cfd02785233ccc9ec492bfc1507401c040f2c1ad6672592043910422717", 0x30}, {&(0x7f0000000d80)="03a8a3fe4506f596f366282ea669b89e6ec91f9970dc207a1e559c8698da0b54ef52fecdc3c04406910c9245fdd862b71ee147db75a9cbcf1a91a5e3b8fd7811978518d1728b11691fab52c27ad6b92824ff82e362adc4ed59df36bd4d9653260e4d328d584219d3525df859a9bc3847d7912e5620f2b2a9deede17f7e18e84fe5cfba558fb41afc9c03c4a9b037395c51e0a57e322b6ff00c97ab7d4f6a98e0d41c26fb00ee9d362f2ade0c3c85afc956284dbb37f0c50ab8e381e689ba3b302eb188c1a323606f51bc91e56ba3", 0xce}], 0x3, &(0x7f00000010c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xc7, "3dca617e5b17674328c6f29c030db15d122ed696894f733bd5f7108f4ba57d5a8bff170fdc446a97bd648ff8e24f6e97e33f7e2414014b325ccc4dfbfee0bc9993eea74c9e1a60dd94c46fdf860d8bd0522b1f7d949d263929a2f0378dfb5671671e28f5d09e20a778743894ea4d4fa4dfbc8362210fee3387375373c1e0087eea75c933792cfb9a90d8a859fa866a0d28a7e7e6ee9a0f0a3613fc7d1c118dc218616a756d2949a1624132ca0ac3c180e3f795e00cc096ce79adf1c1532d3709c23f22959eedca"}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x128, 0x10}, {0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000ec0)="138e342ccc5078e9d1bcbbeff220fada6f13660e1abbc2de0c507c8193ce5fbf953b4e4f43c7b9493d825af8e91fc16a14782993405dfc768ec86f131440c7854a9e5f4e3c933d49484b87142cc033dc67219ab470e199d21d478b590bdabc9a4952b1ee12cc39cee3511b90be65", 0x6e}, {&(0x7f0000000f40)="7c754a03d51e02bcc013f4a708a8ad62a29a3ba11325034ce19b29b27bd6bd017945826d7d256811d4ad", 0x2a}, {&(0x7f0000000fc0)="db5d26ef8660e607d388f9ef1396d7867d5a6858d46fa7181c33eb189ac4ba2949857a75a5c0a9af40c1f14289610804d7bcc222a299555d5f43d724482be83eb6db96dade5326c7af93591e581c", 0x4e}, {&(0x7f0000001200)="7cd3bc4de25c84baf94ec711ca8a7856df263b640d9bf5a4db7b419a92416b1d", 0x20}, {&(0x7f0000001240)="e1922525f9342118934d1d4941ed8c19f254ef9a39dbc65b354c3be85e13da91d85213ed78f08299d43a9e6851ecda0585c03fbdad670f6e9c8b3a0f41b62280ce892d48cfc3f911a1af62e7f823a272da7e36566a530e4e753ce2cc7ee0fab8a36e80f737dc669d525328180afbd99644b31464537a1924043bbb99a5acba1300ad6a77a9ae53c01d7121c30a21627ed4d081858c02ad7c6c6ab15047bdad9587699f642be88a4422706324817b3a25f1675d4e65ba4d4bf62f892909cf920545f7ebc92cd55f187cb204f93b64b819930ab87d532fe2f8cbc09f21d3a128e67fbd0fa929d0a3", 0xe7}, {&(0x7f0000001340)="543abee25ddb3b375826b834264962a2a333d2516590498db483db93768a4cd0a63de93ae216aaf9f3909b675e6ab9f68e50144cb04e99d54b857a469c5d2aaffa2caab141119a9a91368217de4ca2692fd0ca9ff6076abd1785e5c9f2547d7a51c87e544457ad9adaa532a07fb40194d05cc267370880f539f83577a48acf090b418b131c4907e6353941755fc0953c72ea821f74022a841010dae2428937187c821eef4b19613c40a8c1f1fadbd54932559f7243fd3344b21b57aa4938d678456eeb900f5e839936d8330e39a5d5e0d56d0eabf8af6ff43c7c51217b6140", 0xdf}, {&(0x7f0000001440)="d76b722d41e70a10cd79b6fa422f2edab63cdefe9b0187dee565048f468c0e7b7ff991af4665c4e23123c0b7de2965d19427", 0x32}, {&(0x7f0000001480)="e3507559a34cc10e1ccbecb84dc70b50f33cf444cdd5ffec55d57dfaac5c84afff5753d4728ba695a234452caa278ea1bf9cfa18d465f47a10fa1aa97d6e8ef4f71f4b30d1deef172de285", 0x4b}], 0x8, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001580)="e6bee66f99063b25e9d3c0d4da53b813021fdd12494f802a5c6f8f73d4fbd3d9d70af1695466a4f49b1bd3ae2ac30f33fb34a4c4d65d25f9c36941be77e951df157228bd39417019a38f850f6bba039c8a37302a7841e41d7b699b1d6f65f8bf74b844c34fe548b3cc03916eb599ac8cf8fdf8e068e7423c62835890f66b467f9dfb37ddde927e72dbac5eb4", 0x8c}], 0x1, &(0x7f0000001680)=[@iv={0x78, 0x117, 0x2, 0x64, "f239fb19bbb2ce1c8614e092e171faf8dd55382c8f1819e6caefcabb68e227424ee64ccf4c2b99a932b530a7ef43f09746d5bc4b520c023bbc69c9a3e652b2f04e10e2b3c5f08e687caa82b66b576635c307e75591a64cb069c6cbbc1cb7d3ce4ab9fd07"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0xa8, 0x801}, {0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001740)="a97b1de51edd635b3b39be7209916ff15efa9d1affa8f40aba7059fd89d1379c1b96773f8f2c5256c50810b19d2a056f64cc6490b7daef27886a3dce5a663aa6127d981eb47e34b7b0eb6e04305b93f392b04a6413b561d09413f0c7c980f9d0d66b2e5099023cd2e3145a42c96be77b00dce96cc17394337338f47e98197d56cd2aace0ae1c541fa6b9fb0f1c9eb992ab3e16eef78138ddbe2acbb7e93f66c9e6488b12b250befdfe04603dc3fdaf5c92457fbb20d62583d7ab082fe028c91d402e7994f30d4c89e3809e2882e0ca05", 0xd0}, {&(0x7f0000001840)="60f11646620f8745b2e475b042017904d80b11939ae98c74fae1389fdfe03739a48c16c2777bcc17295d5da719029e21d11824bdce5c24d6d7ae320af67c06ffcde5763037cec7e054143dd79b9c85893eda9ca20dde2064d30d84ece11989246c36af778227a4f827df80b0b55f3f2778966a96508794f7248d41d6d3ad4ea381f174520f0b69ff70230e6edd4213daa7d4a22935cc67edc8d2bae94e367b60ca6c6db16796f24855766d30bed825d6ac", 0xb1}, {&(0x7f0000001900)="0c1cc41809f0c0d6b7973d434f6f342bc0daa95586474dc932d38f5c9257929ea743b7ea406f2d03b6af2ffb581643be7397", 0x32}], 0x3, &(0x7f0000001980)=[@assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4000000}], 0x5, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000042c0), 0xffffffffffffffff) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r17, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000000)={0x2c, r16, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000002800)) [ 74.870362][ T5298] Bluetooth: hci0: command tx timeout [ 74.973811][ T5319] ------------[ cut here ]------------ [ 74.976534][ T5319] WARNING: CPU: 0 PID: 5319 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 74.981140][ T5319] Modules linked in: [ 74.982970][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 74.988341][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.992998][ T5319] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 74.995778][ T5319] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 ba e2 f6 90 0f 0b 90 eb e1 e8 27 ba e2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 75.004084][ T5319] RSP: 0018:ffffc9000d36eff0 EFLAGS: 00010283 [ 75.006837][ T5319] RAX: ffffffff8add92f9 RBX: ffff88803e28c000 RCX: 0000000000100000 [ 75.010184][ T5319] RDX: ffffc9000ddfa000 RSI: 00000000000003bb RDI: 00000000000003bc [ 75.014194][ T5319] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8add8e13 [ 75.017768][ T5319] R10: dffffc0000000000 R11: ffffed1007c51831 R12: 1ffff11007c5180a [ 75.021008][ T5319] R13: ffff888042538e40 R14: 0000000000000001 R15: ffffffff8add8e13 [ 75.025672][ T5319] FS: 00007f60b802f6c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 75.029592][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.032468][ T5319] CR2: 00007f60b7384170 CR3: 00000000426cb000 CR4: 0000000000352ef0 [ 75.036449][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.039655][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.042826][ T5319] Call Trace: [ 75.044250][ T5319] [ 75.045651][ T5319] rate_control_rate_init_all_links+0x109/0x1a0 [ 75.048218][ T5319] sta_apply_auth_flags+0x1c2/0x400 [ 75.050513][ T5319] sta_apply_parameters+0xe4b/0x15b0 [ 75.052840][ T5319] ieee80211_add_station+0x424/0x6a0 [ 75.055276][ T5319] rdev_add_station+0x105/0x290 [ 75.057320][ T5319] nl80211_new_station+0x1723/0x1b40 [ 75.059437][ T5319] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.061714][ T5319] ? netdev_run_todo+0xe1d/0xea0 [ 75.063867][ T5319] ? nl80211_pre_doit+0x4f1/0x930 [ 75.066260][ T5319] genl_family_rcv_msg_doit+0x212/0x300 [ 75.068805][ T5319] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.071353][ T5319] ? bpf_lsm_capable+0x9/0x20 [ 75.073460][ T5319] ? security_capable+0x7e/0x2e0 [ 75.076017][ T5319] genl_rcv_msg+0x60e/0x790 [ 75.078167][ T5319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.080441][ T5319] ? ref_tracker_free+0x63a/0x7d0 [ 75.082639][ T5319] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 75.085226][ T5319] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.087652][ T5319] ? __pfx_nl80211_post_doit+0x10/0x10 [ 75.090026][ T5319] ? __pfx_ref_tracker_free+0x10/0x10 [ 75.092508][ T5319] netlink_rcv_skb+0x208/0x470 [ 75.094598][ T5319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.096913][ T5319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.099168][ T5319] ? down_read+0x1ad/0x2e0 [ 75.101265][ T5319] genl_rcv+0x28/0x40 [ 75.103137][ T5319] netlink_unicast+0x75b/0x8d0 [ 75.105348][ T5319] netlink_sendmsg+0x805/0xb30 [ 75.107453][ T5319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.109760][ T5319] ? aa_sock_msg_perm+0x94/0x160 [ 75.111943][ T5319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 75.114274][ T5319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.116926][ T5319] __sock_sendmsg+0x219/0x270 [ 75.119055][ T5319] ____sys_sendmsg+0x505/0x830 [ 75.121250][ T5319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.123578][ T5319] ? import_iovec+0x74/0xa0 [ 75.125605][ T5319] ___sys_sendmsg+0x21f/0x2a0 [ 75.127541][ T5319] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.129765][ T5319] ? __fget_files+0x2a/0x420 [ 75.131752][ T5319] ? __fget_files+0x3a0/0x420 [ 75.133735][ T5319] __x64_sys_sendmsg+0x19b/0x260 [ 75.135908][ T5319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 75.138246][ T5319] ? rcu_is_watching+0x15/0xb0 [ 75.140310][ T5319] ? do_syscall_64+0xbe/0x3b0 [ 75.142227][ T5319] do_syscall_64+0xfa/0x3b0 [ 75.144108][ T5319] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.146335][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.148981][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.151020][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.153345][ T5319] RIP: 0033:0x7f60b718e929 [ 75.155340][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.163312][ T5319] RSP: 002b:00007f60b802f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.166865][ T5319] RAX: ffffffffffffffda RBX: 00007f60b73b5fa0 RCX: 00007f60b718e929 [ 75.170159][ T5319] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000a [ 75.173900][ T5319] RBP: 00007f60b7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.177370][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.180731][ T5319] R13: 0000000000000000 R14: 00007f60b73b5fa0 R15: 00007fff4a627368 [ 75.184156][ T5319] [ 75.185547][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.188515][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 75.193335][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.197899][ T5319] Call Trace: [ 75.199409][ T5319] [ 75.200702][ T5319] dump_stack_lvl+0x99/0x250 [ 75.202751][ T5319] ? __asan_memcpy+0x40/0x70 [ 75.204740][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.206965][ T5319] ? __pfx__printk+0x10/0x10 [ 75.208981][ T5319] panic+0x2db/0x790 [ 75.210768][ T5319] ? __pfx_panic+0x10/0x10 [ 75.212639][ T5319] __warn+0x31b/0x4b0 [ 75.214297][ T5319] ? rate_control_rate_init+0x64a/0x6e0 [ 75.217201][ T5319] ? rate_control_rate_init+0x64a/0x6e0 [ 75.220031][ T5319] report_bug+0x2be/0x4f0 [ 75.221979][ T5319] ? rate_control_rate_init+0x64a/0x6e0 [ 75.224304][ T5319] ? rate_control_rate_init+0x64a/0x6e0 [ 75.226553][ T5319] ? rate_control_rate_init+0x64c/0x6e0 [ 75.229494][ T5319] handle_bug+0x84/0x160 [ 75.231669][ T5319] exc_invalid_op+0x1a/0x50 [ 75.233817][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 75.235916][ T5319] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 75.238519][ T5319] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 ba e2 f6 90 0f 0b 90 eb e1 e8 27 ba e2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 75.246722][ T5319] RSP: 0018:ffffc9000d36eff0 EFLAGS: 00010283 [ 75.249397][ T5319] RAX: ffffffff8add92f9 RBX: ffff88803e28c000 RCX: 0000000000100000 [ 75.252803][ T5319] RDX: ffffc9000ddfa000 RSI: 00000000000003bb RDI: 00000000000003bc [ 75.256156][ T5319] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8add8e13 [ 75.259453][ T5319] R10: dffffc0000000000 R11: ffffed1007c51831 R12: 1ffff11007c5180a [ 75.262698][ T5319] R13: ffff888042538e40 R14: 0000000000000001 R15: ffffffff8add8e13 [ 75.266012][ T5319] ? rate_control_rate_init+0x163/0x6e0 [ 75.268430][ T5319] ? rate_control_rate_init+0x163/0x6e0 [ 75.270804][ T5319] ? rate_control_rate_init+0x649/0x6e0 [ 75.273211][ T5319] rate_control_rate_init_all_links+0x109/0x1a0 [ 75.275854][ T5319] sta_apply_auth_flags+0x1c2/0x400 [ 75.278144][ T5319] sta_apply_parameters+0xe4b/0x15b0 [ 75.280408][ T5319] ieee80211_add_station+0x424/0x6a0 [ 75.282632][ T5319] rdev_add_station+0x105/0x290 [ 75.284714][ T5319] nl80211_new_station+0x1723/0x1b40 [ 75.286994][ T5319] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.289394][ T5319] ? netdev_run_todo+0xe1d/0xea0 [ 75.291634][ T5319] ? nl80211_pre_doit+0x4f1/0x930 [ 75.294104][ T5319] genl_family_rcv_msg_doit+0x212/0x300 [ 75.296612][ T5319] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.299203][ T5319] ? bpf_lsm_capable+0x9/0x20 [ 75.301259][ T5319] ? security_capable+0x7e/0x2e0 [ 75.303364][ T5319] genl_rcv_msg+0x60e/0x790 [ 75.305373][ T5319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.307495][ T5319] ? ref_tracker_free+0x63a/0x7d0 [ 75.309565][ T5319] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 75.311680][ T5319] ? __pfx_nl80211_new_station+0x10/0x10 [ 75.313713][ T5319] ? __pfx_nl80211_post_doit+0x10/0x10 [ 75.315715][ T5319] ? __pfx_ref_tracker_free+0x10/0x10 [ 75.318433][ T5319] netlink_rcv_skb+0x208/0x470 [ 75.320551][ T5319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.322669][ T5319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.324997][ T5319] ? down_read+0x1ad/0x2e0 [ 75.326918][ T5319] genl_rcv+0x28/0x40 [ 75.328649][ T5319] netlink_unicast+0x75b/0x8d0 [ 75.330742][ T5319] netlink_sendmsg+0x805/0xb30 [ 75.332791][ T5319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.335033][ T5319] ? aa_sock_msg_perm+0x94/0x160 [ 75.337151][ T5319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 75.339484][ T5319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.341788][ T5319] __sock_sendmsg+0x219/0x270 [ 75.343829][ T5319] ____sys_sendmsg+0x505/0x830 [ 75.345891][ T5319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.348136][ T5319] ? import_iovec+0x74/0xa0 [ 75.350129][ T5319] ___sys_sendmsg+0x21f/0x2a0 [ 75.352147][ T5319] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.354415][ T5319] ? __fget_files+0x2a/0x420 [ 75.356337][ T5319] ? __fget_files+0x3a0/0x420 [ 75.358323][ T5319] __x64_sys_sendmsg+0x19b/0x260 [ 75.360471][ T5319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 75.362752][ T5319] ? rcu_is_watching+0x15/0xb0 [ 75.364843][ T5319] ? do_syscall_64+0xbe/0x3b0 [ 75.366894][ T5319] do_syscall_64+0xfa/0x3b0 [ 75.368885][ T5319] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.371079][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.373766][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.375799][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.378277][ T5319] RIP: 0033:0x7f60b718e929 [ 75.380231][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.388287][ T5319] RSP: 002b:00007f60b802f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.391946][ T5319] RAX: ffffffffffffffda RBX: 00007f60b73b5fa0 RCX: 00007f60b718e929 [ 75.395329][ T5319] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000a [ 75.398769][ T5319] RBP: 00007f60b7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.402146][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.405539][ T5319] R13: 0000000000000000 R14: 00007f60b73b5fa0 R15: 00007fff4a627368 [ 75.409022][ T5319] [ 75.410735][ T5319] Kernel Offset: disabled [ 75.412648][ T5319] Rebooting in 86400 seconds..