------------[ cut here ]------------
WARNING: CPU: 1 PID: 86731 at net/wireless/chan.c:1436 wdev_chandef+0x139/0x180
Modules linked in:
CPU: 1 PID: 86731 Comm: syz-executor.6 Not tainted 5.19.0-rc3-next-20220622 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:wdev_chandef+0x139/0x180
Code: fd 48 8d bb b0 00 00 00 be ff ff ff ff e8 cf 69 3f 00 31 ff 89 c5 89 c6 e8 e4 04 68 fd 85 ed 0f 85 20 ff ff ff e8 07 08 68 fd <0f> 0b e9 14 ff ff ff e8 fb 07 68 fd 4c 8d a3 98 02 00 00 e8 ef 07
RSP: 0018:ffff888040b672f8 EFLAGS: 00010212
RAX: 000000000000061d RBX: ffff888021924b50 RCX: ffffc9000a93b000
RDX: 0000000000040000 RSI: ffffffff83dc7a59 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000008
FS:  00007fbbe3e4f700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbbe692fb10 CR3: 00000000466ee000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 nl80211_parse_tx_bitrate_mask.isra.0+0x3ba/0x21c0
 nl80211_set_tid_config+0x12d3/0x1740
 genl_family_rcv_msg_doit+0x22d/0x330
 genl_rcv_msg+0x33c/0x5a0
 netlink_rcv_skb+0x14b/0x430
 genl_rcv+0x24/0x40
 netlink_unicast+0x54a/0x800
 netlink_sendmsg+0x917/0xe10
 sock_sendmsg+0x150/0x190
 ____sys_sendmsg+0x70c/0x870
 ___sys_sendmsg+0xf3/0x170
 __x64_sys_sendmsg+0x132/0x220
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fbbe68d9b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbbe3e4f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbbe69ecf60 RCX: 00007fbbe68d9b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00007fbbe6933f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdd6f0d41f R14: 00007fbbe3e4f300 R15: 0000000000022000
 </TASK>
irq event stamp: 1895
hardirqs last  enabled at (1907): [<ffffffff812b0f38>] __up_console_sem+0x78/0x80
hardirqs last disabled at (1918): [<ffffffff812b0f1d>] __up_console_sem+0x5d/0x80
softirqs last  enabled at (1032): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (991): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 86731 at net/wireless/chan.c:1436 wdev_chandef+0x139/0x180
Modules linked in:
CPU: 1 PID: 86731 Comm: syz-executor.6 Tainted: G        W         5.19.0-rc3-next-20220622 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:wdev_chandef+0x139/0x180
Code: fd 48 8d bb b0 00 00 00 be ff ff ff ff e8 cf 69 3f 00 31 ff 89 c5 89 c6 e8 e4 04 68 fd 85 ed 0f 85 20 ff ff ff e8 07 08 68 fd <0f> 0b e9 14 ff ff ff e8 fb 07 68 fd 4c 8d a3 98 02 00 00 e8 ef 07
RSP: 0018:ffff888040b672f8 EFLAGS: 00010246
RAX: 0000000000040000 RBX: ffff888021924b50 RCX: ffffc9000a93b000
RDX: 0000000000040000 RSI: ffffffff83dc7a59 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000008
FS:  00007fbbe3e4f700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbbe692fb10 CR3: 00000000466ee000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 nl80211_parse_tx_bitrate_mask.isra.0+0x3ba/0x21c0
 nl80211_set_tid_config+0x12d3/0x1740
 genl_family_rcv_msg_doit+0x22d/0x330
 genl_rcv_msg+0x33c/0x5a0
 netlink_rcv_skb+0x14b/0x430
 genl_rcv+0x24/0x40
 netlink_unicast+0x54a/0x800
 netlink_sendmsg+0x917/0xe10
 sock_sendmsg+0x150/0x190
 ____sys_sendmsg+0x70c/0x870
 ___sys_sendmsg+0xf3/0x170
 __x64_sys_sendmsg+0x132/0x220
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fbbe68d9b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbbe3e4f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbbe69ecf60 RCX: 00007fbbe68d9b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00007fbbe6933f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdd6f0d41f R14: 00007fbbe3e4f300 R15: 0000000000022000
 </TASK>
irq event stamp: 2829
hardirqs last  enabled at (2839): [<ffffffff812b0f38>] __up_console_sem+0x78/0x80
hardirqs last disabled at (2850): [<ffffffff812b0f1d>] __up_console_sem+0x5d/0x80
softirqs last  enabled at (1032): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (991): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 86731 at net/wireless/chan.c:1436 wdev_chandef+0x139/0x180
Modules linked in:
CPU: 1 PID: 86731 Comm: syz-executor.6 Tainted: G        W         5.19.0-rc3-next-20220622 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:wdev_chandef+0x139/0x180
Code: fd 48 8d bb b0 00 00 00 be ff ff ff ff e8 cf 69 3f 00 31 ff 89 c5 89 c6 e8 e4 04 68 fd 85 ed 0f 85 20 ff ff ff e8 07 08 68 fd <0f> 0b e9 14 ff ff ff e8 fb 07 68 fd 4c 8d a3 98 02 00 00 e8 ef 07
RSP: 0018:ffff888040b672f8 EFLAGS: 00010246
RAX: 0000000000040000 RBX: ffff888021924b50 RCX: ffffc9000a93b000
RDX: 0000000000040000 RSI: ffffffff83dc7a59 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000008
FS:  00007fbbe3e4f700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbbe692fb10 CR3: 00000000466ee000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 nl80211_parse_tx_bitrate_mask.isra.0+0x3ba/0x21c0
 nl80211_set_tid_config+0x12d3/0x1740
 genl_family_rcv_msg_doit+0x22d/0x330
 genl_rcv_msg+0x33c/0x5a0
 netlink_rcv_skb+0x14b/0x430
 genl_rcv+0x24/0x40
 netlink_unicast+0x54a/0x800
 netlink_sendmsg+0x917/0xe10
 sock_sendmsg+0x150/0x190
 ____sys_sendmsg+0x70c/0x870
 ___sys_sendmsg+0xf3/0x170
 __x64_sys_sendmsg+0x132/0x220
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fbbe68d9b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbbe3e4f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbbe69ecf60 RCX: 00007fbbe68d9b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00007fbbe6933f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdd6f0d41f R14: 00007fbbe3e4f300 R15: 0000000000022000
 </TASK>
irq event stamp: 3779
hardirqs last  enabled at (3791): [<ffffffff812b0f38>] __up_console_sem+0x78/0x80
hardirqs last disabled at (3802): [<ffffffff812b0f1d>] __up_console_sem+0x5d/0x80
softirqs last  enabled at (1032): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (991): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
blktrace: Concurrent blktraces are not allowed on sg0
------------[ cut here ]------------
WARNING: CPU: 0 PID: 86754 at net/wireless/chan.c:1436 wdev_chandef+0x139/0x180
Modules linked in:
CPU: 0 PID: 86754 Comm: syz-executor.6 Tainted: G        W         5.19.0-rc3-next-20220622 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:wdev_chandef+0x139/0x180
Code: fd 48 8d bb b0 00 00 00 be ff ff ff ff e8 cf 69 3f 00 31 ff 89 c5 89 c6 e8 e4 04 68 fd 85 ed 0f 85 20 ff ff ff e8 07 08 68 fd <0f> 0b e9 14 ff ff ff e8 fb 07 68 fd 4c 8d a3 98 02 00 00 e8 ef 07
RSP: 0018:ffff888042a2f2f8 EFLAGS: 00010202
RAX: 0000000000000720 RBX: ffff888021924b50 RCX: ffffc9000a93b000
RDX: 0000000000040000 RSI: ffffffff83dc7a59 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000008
FS:  00007fbbe3e4f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0c7f653540 CR3: 00000000163aa000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 nl80211_parse_tx_bitrate_mask.isra.0+0x3ba/0x21c0
 nl80211_set_tid_config+0x12d3/0x1740
 genl_family_rcv_msg_doit+0x22d/0x330
 genl_rcv_msg+0x33c/0x5a0
 netlink_rcv_skb+0x14b/0x430
 genl_rcv+0x24/0x40
 netlink_unicast+0x54a/0x800
 netlink_sendmsg+0x917/0xe10
 sock_sendmsg+0x150/0x190
 ____sys_sendmsg+0x70c/0x870
 ___sys_sendmsg+0xf3/0x170
 __x64_sys_sendmsg+0x132/0x220
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fbbe68d9b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbbe3e4f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbbe69ecf60 RCX: 00007fbbe68d9b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00007fbbe6933f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdd6f0d41f R14: 00007fbbe3e4f300 R15: 0000000000022000
 </TASK>
irq event stamp: 1573
hardirqs last  enabled at (1581): [<ffffffff812b7d3f>] vprintk_emit+0x57f/0x5e0
hardirqs last disabled at (1588): [<ffffffff812b7cd6>] vprintk_emit+0x516/0x5e0
softirqs last  enabled at (936): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (921): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 86754 at net/wireless/chan.c:1436 wdev_chandef+0x139/0x180
Modules linked in:
CPU: 0 PID: 86754 Comm: syz-executor.6 Tainted: G        W         5.19.0-rc3-next-20220622 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:wdev_chandef+0x139/0x180
Code: fd 48 8d bb b0 00 00 00 be ff ff ff ff e8 cf 69 3f 00 31 ff 89 c5 89 c6 e8 e4 04 68 fd 85 ed 0f 85 20 ff ff ff e8 07 08 68 fd <0f> 0b e9 14 ff ff ff e8 fb 07 68 fd 4c 8d a3 98 02 00 00 e8 ef 07
RSP: 0018:ffff888042a2f2f8 EFLAGS: 00010212
RAX: 0000000000030458 RBX: ffff888021924b50 RCX: ffffc9000a93b000
RDX: 0000000000040000 RSI: ffffffff83dc7a59 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000008
FS:  00007fbbe3e4f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0c7f653540 CR3: 00000000163aa000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 nl80211_parse_tx_bitrate_mask.isra.0+0x3ba/0x21c0
 nl80211_set_tid_config+0x12d3/0x1740
 genl_family_rcv_msg_doit+0x22d/0x330
 genl_rcv_msg+0x33c/0x5a0
 netlink_rcv_skb+0x14b/0x430
 genl_rcv+0x24/0x40
 netlink_unicast+0x54a/0x800
 netlink_sendmsg+0x917/0xe10
 sock_sendmsg+0x150/0x190
 ____sys_sendmsg+0x70c/0x870
 ___sys_sendmsg+0xf3/0x170
 __x64_sys_sendmsg+0x132/0x220
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fbbe68d9b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbbe3e4f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbbe69ecf60 RCX: 00007fbbe68d9b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00007fbbe6933f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdd6f0d41f R14: 00007fbbe3e4f300 R15: 0000000000022000
 </TASK>
irq event stamp: 3115
hardirqs last  enabled at (3127): [<ffffffff812b0f38>] __up_console_sem+0x78/0x80
hardirqs last disabled at (3142): [<ffffffff812b0f1d>] __up_console_sem+0x5d/0x80
softirqs last  enabled at (1914): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (1883): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 86754 at net/wireless/chan.c:1436 wdev_chandef+0x139/0x180
Modules linked in:
CPU: 0 PID: 86754 Comm: syz-executor.6 Tainted: G        W         5.19.0-rc3-next-20220622 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:wdev_chandef+0x139/0x180
Code: fd 48 8d bb b0 00 00 00 be ff ff ff ff e8 cf 69 3f 00 31 ff 89 c5 89 c6 e8 e4 04 68 fd 85 ed 0f 85 20 ff ff ff e8 07 08 68 fd <0f> 0b e9 14 ff ff ff e8 fb 07 68 fd 4c 8d a3 98 02 00 00 e8 ef 07
RSP: 0018:ffff888042a2f2f8 EFLAGS: 00010246
RAX: 0000000000040000 RBX: ffff888021924b50 RCX: ffffc9000a93b000
RDX: 0000000000040000 RSI: ffffffff83dc7a59 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000008
FS:  00007fbbe3e4f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0c7f653540 CR3: 00000000163aa000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 nl80211_parse_tx_bitrate_mask.isra.0+0x3ba/0x21c0
 nl80211_set_tid_config+0x12d3/0x1740
 genl_family_rcv_msg_doit+0x22d/0x330
 genl_rcv_msg+0x33c/0x5a0
 netlink_rcv_skb+0x14b/0x430
 genl_rcv+0x24/0x40
 netlink_unicast+0x54a/0x800
 netlink_sendmsg+0x917/0xe10
 sock_sendmsg+0x150/0x190
 ____sys_sendmsg+0x70c/0x870
 ___sys_sendmsg+0xf3/0x170
 __x64_sys_sendmsg+0x132/0x220
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fbbe68d9b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbbe3e4f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbbe69ecf60 RCX: 00007fbbe68d9b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00007fbbe6933f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdd6f0d41f R14: 00007fbbe3e4f300 R15: 0000000000022000
 </TASK>
irq event stamp: 3851
hardirqs last  enabled at (3859): [<ffffffff812b7d3f>] vprintk_emit+0x57f/0x5e0
hardirqs last disabled at (3868): [<ffffffff841bd92b>] sysvec_apic_timer_interrupt+0xb/0xc0
softirqs last  enabled at (1914): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (1883): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 87080 at net/wireless/chan.c:1436 wdev_chandef+0x139/0x180
Modules linked in:
CPU: 0 PID: 87080 Comm: syz-executor.6 Tainted: G        W         5.19.0-rc3-next-20220622 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:wdev_chandef+0x139/0x180
Code: fd 48 8d bb b0 00 00 00 be ff ff ff ff e8 cf 69 3f 00 31 ff 89 c5 89 c6 e8 e4 04 68 fd 85 ed 0f 85 20 ff ff ff e8 07 08 68 fd <0f> 0b e9 14 ff ff ff e8 fb 07 68 fd 4c 8d a3 98 02 00 00 e8 ef 07
RSP: 0018:ffff888019e1f2f8 EFLAGS: 00010212
RAX: 00000000000005d6 RBX: ffff888021924b50 RCX: ffffc9000a93b000
RDX: 0000000000040000 RSI: ffffffff83dc7a59 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000008
FS:  00007fbbe3e4f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd466aeeda8 CR3: 0000000041f14000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 nl80211_parse_tx_bitrate_mask.isra.0+0x3ba/0x21c0
 nl80211_set_tid_config+0x12d3/0x1740
 genl_family_rcv_msg_doit+0x22d/0x330
 genl_rcv_msg+0x33c/0x5a0
 netlink_rcv_skb+0x14b/0x430
 genl_rcv+0x24/0x40
 netlink_unicast+0x54a/0x800
 netlink_sendmsg+0x917/0xe10
 sock_sendmsg+0x150/0x190
 ____sys_sendmsg+0x70c/0x870
 ___sys_sendmsg+0xf3/0x170
 __x64_sys_sendmsg+0x132/0x220
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fbbe68d9b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbbe3e4f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbbe69ecf60 RCX: 00007fbbe68d9b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00007fbbe6933f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdd6f0d41f R14: 00007fbbe3e4f300 R15: 0000000000022000
 </TASK>
irq event stamp: 1681
hardirqs last  enabled at (1689): [<ffffffff812b7d3f>] vprintk_emit+0x57f/0x5e0
hardirqs last disabled at (1696): [<ffffffff812b7cd6>] vprintk_emit+0x516/0x5e0
softirqs last  enabled at (1498): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (1489): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 87080 at net/wireless/chan.c:1436 wdev_chandef+0x139/0x180
Modules linked in:
CPU: 0 PID: 87080 Comm: syz-executor.6 Tainted: G        W         5.19.0-rc3-next-20220622 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:wdev_chandef+0x139/0x180
Code: fd 48 8d bb b0 00 00 00 be ff ff ff ff e8 cf 69 3f 00 31 ff 89 c5 89 c6 e8 e4 04 68 fd 85 ed 0f 85 20 ff ff ff e8 07 08 68 fd <0f> 0b e9 14 ff ff ff e8 fb 07 68 fd 4c 8d a3 98 02 00 00 e8 ef 07
RSP: 0018:ffff888019e1f2f8 EFLAGS: 00010216
RAX: 000000000002f7fb RBX: ffff888021924b50 RCX: ffffc9000a93b000
RDX: 0000000000040000 RSI: ffffffff83dc7a59 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000008
FS:  00007fbbe3e4f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd466aeeda8 CR3: 0000000041f14000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 nl80211_parse_tx_bitrate_mask.isra.0+0x3ba/0x21c0
 nl80211_set_tid_config+0x12d3/0x1740
 genl_family_rcv_msg_doit+0x22d/0x330
 genl_rcv_msg+0x33c/0x5a0
 netlink_rcv_skb+0x14b/0x430
 genl_rcv+0x24/0x40
 netlink_unicast+0x54a/0x800
 netlink_sendmsg+0x917/0xe10
 sock_sendmsg+0x150/0x190
 ____sys_sendmsg+0x70c/0x870
 ___sys_sendmsg+0xf3/0x170
 __x64_sys_sendmsg+0x132/0x220
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fbbe68d9b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbbe3e4f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbbe69ecf60 RCX: 00007fbbe68d9b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00007fbbe6933f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdd6f0d41f R14: 00007fbbe3e4f300 R15: 0000000000022000
 </TASK>
irq event stamp: 3149
hardirqs last  enabled at (3157): [<ffffffff812b7d3f>] vprintk_emit+0x57f/0x5e0
hardirqs last disabled at (3164): [<ffffffff812b7cd6>] vprintk_emit+0x516/0x5e0
softirqs last  enabled at (2256): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (2235): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 87080 at net/wireless/chan.c:1436 wdev_chandef+0x139/0x180
Modules linked in:
CPU: 0 PID: 87080 Comm: syz-executor.6 Tainted: G        W         5.19.0-rc3-next-20220622 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:wdev_chandef+0x139/0x180
Code: fd 48 8d bb b0 00 00 00 be ff ff ff ff e8 cf 69 3f 00 31 ff 89 c5 89 c6 e8 e4 04 68 fd 85 ed 0f 85 20 ff ff ff e8 07 08 68 fd <0f> 0b e9 14 ff ff ff e8 fb 07 68 fd 4c 8d a3 98 02 00 00 e8 ef 07
RSP: 0018:ffff888019e1f2f8 EFLAGS: 00010246
RAX: 0000000000040000 RBX: ffff888021924b50 RCX: ffffc9000a93b000
RDX: 0000000000040000 RSI: ffffffff83dc7a59 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000008 R15: 0000000000000008
FS:  00007fbbe3e4f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd466aeeda8 CR3: 0000000041f14000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 nl80211_parse_tx_bitrate_mask.isra.0+0x3ba/0x21c0
 nl80211_set_tid_config+0x12d3/0x1740
 genl_family_rcv_msg_doit+0x22d/0x330
 genl_rcv_msg+0x33c/0x5a0
 netlink_rcv_skb+0x14b/0x430
 genl_rcv+0x24/0x40
 netlink_unicast+0x54a/0x800
 netlink_sendmsg+0x917/0xe10
 sock_sendmsg+0x150/0x190
 ____sys_sendmsg+0x70c/0x870
 ___sys_sendmsg+0xf3/0x170
 __x64_sys_sendmsg+0x132/0x220
 do_syscall_64+0x3b/0x90
 entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fbbe68d9b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbbe3e4f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fbbe69ecf60 RCX: 00007fbbe68d9b19
RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
RBP: 00007fbbe6933f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdd6f0d41f R14: 00007fbbe3e4f300 R15: 0000000000022000
 </TASK>
irq event stamp: 4483
hardirqs last  enabled at (4493): [<ffffffff812b0f38>] __up_console_sem+0x78/0x80
hardirqs last disabled at (4504): [<ffffffff812b0f1d>] __up_console_sem+0x5d/0x80
softirqs last  enabled at (2256): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
softirqs last disabled at (2235): [<ffffffff81168d33>] __irq_exit_rcu+0x113/0x170
---[ end trace 0000000000000000 ]---
blktrace: Concurrent blktraces are not allowed on sg0
loop0: detected capacity change from 0 to 256
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
blktrace: Concurrent blktraces are not allowed on sg0
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
blktrace: Concurrent blktraces are not allowed on sg0
loop0: detected capacity change from 0 to 256
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
loop0: detected capacity change from 0 to 256
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
loop0: detected capacity change from 0 to 256
netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
ext2: Unknown parameter 'nojournal'
ext2: Unknown parameter 'nojournal'
program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
blk_print_req_error: 73 callbacks suppressed
I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
buffer_io_error: 126 callbacks suppressed
Buffer I/O error on dev sr0, logical block 0, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
Buffer I/O error on dev sr0, logical block 1, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
Buffer I/O error on dev sr0, logical block 2, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
Buffer I/O error on dev sr0, logical block 3, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
Buffer I/O error on dev sr0, logical block 4, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
Buffer I/O error on dev sr0, logical block 5, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
Buffer I/O error on dev sr0, logical block 6, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
Buffer I/O error on dev sr0, logical block 7, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
Buffer I/O error on dev sr0, logical block 0, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
Buffer I/O error on dev sr0, logical block 1, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
sr 1:0:0:0: [sr0] tag#0 unaligned transfer