program: restart_syscall() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="050026bd7000000000000f0000008930dcc27ea808000300d249fc01f1324f61cdee59b95976fb1a9b254c9ea865674b89a6a28ed9bb8f56e8daca832771fb5e53f1b181c6f8e893db1191f535bd624ae5b3b75b009cebd4d0acc02146086681076497dc423007b9d3418d811297b5af07592636c4dab2d87ca7b4fde9d4f07bf528e700bc95106e4d47", @ANYRES32=r6, @ANYBLOB="4c000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a01001d00000000000000a60200fe0004000000000009000000037206030303030303080026006c090000080027000100000008000c006400000008000d0000000000"], 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x3c, r9, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r12, 0x5452, &(0x7f0000000000)=0x5) readv(r12, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/38, 0x26}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r13, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', {0x3}, 0x6}) syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') [ 93.395294][ T4648] Bluetooth: hci0: command tx timeout [ 93.411565][ T1387] cfg80211: failed to load regulatory.db [ 93.704126][ T5322] netlink: 116 bytes leftover after parsing attributes in process `syz.0.0'. [ 93.713351][ T5322] ------------[ cut here ]------------ [ 93.716110][ T5322] !chanctx_conf [ 93.716119][ T5322] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#0: syz.0.0/5322 [ 93.723055][ T5322] Modules linked in: [ 93.724746][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.729296][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.734849][ T5322] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 93.737786][ T5322] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 7b 91 00 cc e8 36 99 82 f6 90 0f 0b 90 eb e1 e8 2b 99 82 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 93.745878][ T5322] RSP: 0018:ffffc9000f6cefe8 EFLAGS: 00010287 [ 93.748503][ T5322] RAX: ffffffff8b447b25 RBX: ffff888012c50050 RCX: 0000000000100000 [ 93.752098][ T5322] RDX: ffffc9000ee42000 RSI: 0000000000000370 RDI: 0000000000000371 [ 93.755882][ T5322] RBP: dffffc0000000000 R08: ffffffff8b447697 R09: 0000000000000000 [ 93.760004][ T5322] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b447697 [ 93.763454][ T5322] R13: ffff888013690f40 R14: 0000000000000001 R15: 0000000000000000 [ 93.767573][ T5322] FS: 00007f2692bb46c0(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000 [ 93.772318][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.775626][ T5322] CR2: 0000200000001080 CR3: 0000000012974000 CR4: 0000000000352ef0 [ 93.780727][ T5322] Call Trace: [ 93.782480][ T5322] [ 93.784087][ T5322] rate_control_rate_init_all_links+0xf4/0x190 [ 93.787404][ T5322] sta_apply_auth_flags+0x1bc/0x430 [ 93.790059][ T5322] sta_apply_parameters+0x1291/0x1b50 [ 93.792452][ T5322] ieee80211_add_station+0x3de/0x700 [ 93.794855][ T5322] rdev_add_station+0xfc/0x290 [ 93.797116][ T5322] nl80211_new_station+0x1b4e/0x1fd0 [ 93.799429][ T5322] ? trace_contention_end+0x3d/0x140 [ 93.801941][ T5322] ? __pfx_nl80211_new_station+0x10/0x10 [ 93.804444][ T5322] ? __rtnl_unlock+0xc8/0xf0 [ 93.806693][ T5322] ? nl80211_pre_doit+0x53d/0x890 [ 93.809006][ T5322] genl_family_rcv_msg_doit+0x233/0x340 [ 93.811266][ T5322] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.813957][ T5322] ? bpf_lsm_capable+0x9/0x20 [ 93.816068][ T5322] ? security_capable+0x7e/0x2c0 [ 93.819036][ T5322] genl_rcv_msg+0x614/0x7a0 [ 93.821556][ T5322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.823492][ T5322] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 93.825414][ T5322] ? __pfx_nl80211_new_station+0x10/0x10 [ 93.827490][ T5322] ? __pfx_nl80211_post_doit+0x10/0x10 [ 93.829870][ T5322] ? __pfx_ref_tracker_free+0x10/0x10 [ 93.832146][ T5322] ? __asan_memcpy+0x40/0x70 [ 93.834049][ T5322] ? __skb_clone+0x5c/0x6c0 [ 93.835871][ T5322] netlink_rcv_skb+0x226/0x4a0 [ 93.837964][ T5322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.841173][ T5322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.844370][ T5322] ? down_read+0x2be/0x330 [ 93.846803][ T5322] genl_rcv+0x28/0x40 [ 93.848560][ T5322] netlink_unicast+0x7bb/0x940 [ 93.850597][ T5322] netlink_sendmsg+0x813/0xb40 [ 93.852686][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.855219][ T5322] ? aa_sock_msg_perm+0xf1/0x1b0 [ 93.857803][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.859904][ T5322] sock_sendmsg_nosec+0x13a/0x180 [ 93.862041][ T5322] ____sys_sendmsg+0x54e/0x850 [ 93.864391][ T5322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.867396][ T5322] ? import_iovec+0x73/0xa0 [ 93.870168][ T5322] ___sys_sendmsg+0x2a5/0x360 [ 93.872889][ T5322] ? __lock_acquire+0x683/0x2cf0 [ 93.875702][ T5322] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.878762][ T5322] ? futex_wait+0x2a2/0x390 [ 93.881890][ T5322] ? __fget_files+0x2a/0x420 [ 93.884466][ T5322] ? __fget_files+0x3a2/0x420 [ 93.886697][ T5322] __x64_sys_sendmsg+0x1b1/0x290 [ 93.889009][ T5322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.891366][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.893852][ T5322] do_syscall_64+0x174/0x580 [ 93.895768][ T5322] ? trace_irq_disable+0x3b/0x140 [ 93.898237][ T5322] ? clear_bhb_loop+0x40/0x90 [ 93.901030][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.904100][ T5322] RIP: 0033:0x7f2691d9de99 [ 93.906058][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.914999][ T5322] RSP: 002b:00007f2692bb3fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.918979][ T5322] RAX: ffffffffffffffda RBX: 00007f2692025fa0 RCX: 00007f2691d9de99 [ 93.922513][ T5322] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 93.925597][ T5322] RBP: 00007f2691e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 93.928786][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.932711][ T5322] R13: 00007f2692026038 R14: 00007f2692025fa0 R15: 00007fffc4f02108 [ 93.936641][ T5322] [ 93.938483][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.941542][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.945221][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.948954][ T5322] Call Trace: [ 93.950358][ T5322] [ 93.951702][ T5322] vpanic+0x56c/0xa60 [ 93.953454][ T5322] ? __pfx__printk+0x10/0x10 [ 93.955819][ T5322] ? __pfx_vpanic+0x10/0x10 [ 93.958071][ T5322] ? is_bpf_text_address+0x292/0x2b0 [ 93.960580][ T5322] ? is_bpf_text_address+0x26/0x2b0 [ 93.962934][ T5322] panic+0xc5/0xd0 [ 93.964612][ T5322] ? __pfx_panic+0x10/0x10 [ 93.966728][ T5322] __warn+0x315/0x4c0 [ 93.968525][ T5322] ? rate_control_rate_init+0x5a6/0x630 [ 93.970875][ T5322] ? rate_control_rate_init+0x5a6/0x630 [ 93.973650][ T5322] __report_bug+0x276/0x570 [ 93.976268][ T5322] ? stack_depot_save_flags+0x3ec/0x800 [ 93.979324][ T5322] ? rate_control_rate_init+0x5a6/0x630 [ 93.982191][ T5322] ? __pfx___report_bug+0x10/0x10 [ 93.984272][ T5322] ? __lock_acquire+0x683/0x2cf0 [ 93.986151][ T5322] ? __lock_acquire+0x683/0x2cf0 [ 93.988242][ T5322] ? rate_control_rate_init+0x5a6/0x630 [ 93.990727][ T5322] report_bug+0x16a/0x220 [ 93.992643][ T5322] ? rate_control_rate_init+0x5a6/0x630 [ 93.995054][ T5322] ? rate_control_rate_init+0x5a8/0x630 [ 93.997346][ T5322] handle_bug+0x9c/0x200 [ 93.999060][ T5322] exc_invalid_op+0x1a/0x50 [ 94.001129][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 94.003538][ T5322] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 94.006425][ T5322] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 7b 91 00 cc e8 36 99 82 f6 90 0f 0b 90 eb e1 e8 2b 99 82 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 94.014493][ T5322] RSP: 0018:ffffc9000f6cefe8 EFLAGS: 00010287 [ 94.017376][ T5322] RAX: ffffffff8b447b25 RBX: ffff888012c50050 RCX: 0000000000100000 [ 94.021292][ T5322] RDX: ffffc9000ee42000 RSI: 0000000000000370 RDI: 0000000000000371 [ 94.024559][ T5322] RBP: dffffc0000000000 R08: ffffffff8b447697 R09: 0000000000000000 [ 94.027960][ T5322] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b447697 [ 94.031347][ T5322] R13: ffff888013690f40 R14: 0000000000000001 R15: 0000000000000000 [ 94.035123][ T5322] ? rate_control_rate_init+0x117/0x630 [ 94.038045][ T5322] ? rate_control_rate_init+0x117/0x630 [ 94.040330][ T5322] ? rate_control_rate_init+0x5a5/0x630 [ 94.042669][ T5322] ? rate_control_rate_init+0x5a5/0x630 [ 94.044921][ T5322] rate_control_rate_init_all_links+0xf4/0x190 [ 94.047630][ T5322] sta_apply_auth_flags+0x1bc/0x430 [ 94.049989][ T5322] sta_apply_parameters+0x1291/0x1b50 [ 94.052671][ T5322] ieee80211_add_station+0x3de/0x700 [ 94.055263][ T5322] rdev_add_station+0xfc/0x290 [ 94.057326][ T5322] nl80211_new_station+0x1b4e/0x1fd0 [ 94.059612][ T5322] ? trace_contention_end+0x3d/0x140 [ 94.061835][ T5322] ? __pfx_nl80211_new_station+0x10/0x10 [ 94.064211][ T5322] ? __rtnl_unlock+0xc8/0xf0 [ 94.066284][ T5322] ? nl80211_pre_doit+0x53d/0x890 [ 94.068493][ T5322] genl_family_rcv_msg_doit+0x233/0x340 [ 94.071123][ T5322] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 94.074260][ T5322] ? bpf_lsm_capable+0x9/0x20 [ 94.076518][ T5322] ? security_capable+0x7e/0x2c0 [ 94.078541][ T5322] genl_rcv_msg+0x614/0x7a0 [ 94.080498][ T5322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.082591][ T5322] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 94.084804][ T5322] ? __pfx_nl80211_new_station+0x10/0x10 [ 94.087145][ T5322] ? __pfx_nl80211_post_doit+0x10/0x10 [ 94.089564][ T5322] ? __pfx_ref_tracker_free+0x10/0x10 [ 94.092492][ T5322] ? __asan_memcpy+0x40/0x70 [ 94.095153][ T5322] ? __skb_clone+0x5c/0x6c0 [ 94.097443][ T5322] netlink_rcv_skb+0x226/0x4a0 [ 94.099527][ T5322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.101976][ T5322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.104468][ T5322] ? down_read+0x2be/0x330 [ 94.106493][ T5322] genl_rcv+0x28/0x40 [ 94.108418][ T5322] netlink_unicast+0x7bb/0x940 [ 94.110665][ T5322] netlink_sendmsg+0x813/0xb40 [ 94.112883][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.115350][ T5322] ? aa_sock_msg_perm+0xf1/0x1b0 [ 94.117651][ T5322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.120052][ T5322] sock_sendmsg_nosec+0x13a/0x180 [ 94.122929][ T5322] ____sys_sendmsg+0x54e/0x850 [ 94.125356][ T5322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.127699][ T5322] ? import_iovec+0x73/0xa0 [ 94.129648][ T5322] ___sys_sendmsg+0x2a5/0x360 [ 94.131727][ T5322] ? __lock_acquire+0x683/0x2cf0 [ 94.134079][ T5322] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.136795][ T5322] ? futex_wait+0x2a2/0x390 [ 94.138949][ T5322] ? __fget_files+0x2a/0x420 [ 94.140990][ T5322] ? __fget_files+0x3a2/0x420 [ 94.143056][ T5322] __x64_sys_sendmsg+0x1b1/0x290 [ 94.145162][ T5322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 94.147522][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.150495][ T5322] do_syscall_64+0x174/0x580 [ 94.153110][ T5322] ? trace_irq_disable+0x3b/0x140 [ 94.155616][ T5322] ? clear_bhb_loop+0x40/0x90 [ 94.157746][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.160335][ T5322] RIP: 0033:0x7f2691d9de99 [ 94.162321][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.170983][ T5322] RSP: 002b:00007f2692bb3fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.175113][ T5322] RAX: ffffffffffffffda RBX: 00007f2692025fa0 RCX: 00007f2691d9de99 [ 94.178726][ T5322] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 94.182169][ T5322] RBP: 00007f2691e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 94.185382][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.188600][ T5322] R13: 00007f2692026038 R14: 00007f2692025fa0 R15: 00007fffc4f02108 [ 94.192994][ T5322] [ 94.195104][ T5322] Kernel Offset: disabled [ 94.197053][ T5322] Rebooting in 86400 seconds..