program: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x44c) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8, 0xb, 0xa}}}}]}, 0x40}, 0x1, 0x7a00}, 0x0) [ 79.148198][ T5305] Bluetooth: hci0: command tx timeout [ 79.151600][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.154249][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.281099][ T47] ------------[ cut here ]------------ [ 79.283536][ T47] WARNING: CPU: 0 PID: 47 at net/mac80211/sta_info.c:756 sta_info_insert_rcu+0x322/0x1900 [ 79.288558][ T47] Modules linked in: [ 79.290736][ T47] CPU: 0 UID: 0 PID: 47 Comm: kworker/u4:3 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 79.295984][ T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.301033][ T47] Workqueue: events_unbound cfg80211_wiphy_work [ 79.304359][ T47] RIP: 0010:sta_info_insert_rcu+0x322/0x1900 [ 79.307364][ T47] Code: 85 db 4c 8b 6c 24 28 0f 84 90 00 00 00 e8 86 e2 36 f6 84 c0 0f 84 b4 00 00 00 e8 79 83 51 f6 e9 0d 01 00 00 e8 6f 83 51 f6 90 <0f> 0b 90 41 be ea ff ff ff 4c 8b 6c 24 28 4c 89 ee e8 38 ce ff ff [ 79.315380][ T47] RSP: 0018:ffffc90000627920 EFLAGS: 00010293 [ 79.317922][ T47] RAX: ffffffff8b705ba1 RBX: 0000000000000001 RCX: ffff88801e66a440 [ 79.320783][ T47] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 79.323779][ T47] RBP: 00000000ffffffff R08: ffffffff8b705b2e R09: 1ffff110087e3ae6 [ 79.326723][ T47] R10: dffffc0000000000 R11: ffffed10087e3ae7 R12: 00000000ffeeffff [ 79.329589][ T47] R13: 000000000000ffff R14: 000000000000feff R15: ffff888043f1cd80 [ 79.332493][ T47] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 79.335690][ T47] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.338409][ T47] CR2: 00007f7cda7f9f98 CR3: 0000000040584000 CR4: 0000000000352ef0 [ 79.341567][ T47] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.344589][ T47] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.347788][ T47] Call Trace: [ 79.349128][ T47] [ 79.350247][ T47] ? __warn+0x165/0x4d0 [ 79.351981][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 79.354084][ T47] ? report_bug+0x2b3/0x500 [ 79.355926][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 79.358204][ T47] ? handle_bug+0x60/0x90 [ 79.359955][ T47] ? exc_invalid_op+0x1a/0x50 [ 79.361845][ T47] ? asm_exc_invalid_op+0x1a/0x20 [ 79.363841][ T47] ? sta_info_insert_rcu+0x2ae/0x1900 [ 79.366329][ T47] ? sta_info_insert_rcu+0x321/0x1900 [ 79.368728][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 79.370840][ T47] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 79.373267][ T47] ? rate_control_rate_init+0x135/0x680 [ 79.375632][ T47] ieee80211_ocb_work+0x310/0x570 [ 79.377967][ T47] ? __pfx_ieee80211_ocb_work+0x10/0x10 [ 79.380268][ T47] ? ieee80211_iface_work+0xec3/0xf90 [ 79.382561][ T47] ? rcu_is_watching+0x15/0xb0 [ 79.384516][ T47] cfg80211_wiphy_work+0x2f0/0x490 [ 79.386888][ T47] ? process_scheduled_works+0x9c6/0x18e0 [ 79.389687][ T47] process_scheduled_works+0xabe/0x18e0 [ 79.392001][ T47] ? __pfx_process_scheduled_works+0x10/0x10 [ 79.394475][ T47] ? assign_work+0x364/0x3d0 [ 79.396457][ T47] worker_thread+0x870/0xd30 [ 79.398609][ T47] ? __kthread_parkme+0x169/0x1d0 [ 79.400745][ T47] ? __pfx_worker_thread+0x10/0x10 [ 79.402903][ T47] kthread+0x7a9/0x920 [ 79.404546][ T47] ? __pfx_kthread+0x10/0x10 [ 79.406485][ T47] ? __pfx_worker_thread+0x10/0x10 [ 79.408773][ T47] ? __pfx_kthread+0x10/0x10 [ 79.410788][ T47] ? __pfx_kthread+0x10/0x10 [ 79.412673][ T47] ? __pfx_kthread+0x10/0x10 [ 79.414493][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.416535][ T47] ? lockdep_hardirqs_on+0x99/0x150 [ 79.418429][ T47] ? __pfx_kthread+0x10/0x10 [ 79.420236][ T47] ret_from_fork+0x4b/0x80 [ 79.422023][ T47] ? __pfx_kthread+0x10/0x10 [ 79.423855][ T47] ret_from_fork_asm+0x1a/0x30 [ 79.425831][ T47] [ 79.427104][ T47] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.430183][ T47] CPU: 0 UID: 0 PID: 47 Comm: kworker/u4:3 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 79.434509][ T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.438659][ T47] Workqueue: events_unbound cfg80211_wiphy_work [ 79.441214][ T47] Call Trace: [ 79.442593][ T47] [ 79.443902][ T47] dump_stack_lvl+0x241/0x360 [ 79.445836][ T47] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.447935][ T47] ? __pfx__printk+0x10/0x10 [ 79.449840][ T47] ? _printk+0xd5/0x120 [ 79.451610][ T47] ? __init_begin+0x41000/0x41000 [ 79.453628][ T47] ? vscnprintf+0x5d/0x90 [ 79.455306][ T47] panic+0x349/0x880 [ 79.456983][ T47] ? __warn+0x174/0x4d0 [ 79.458747][ T47] ? __pfx_panic+0x10/0x10 [ 79.460581][ T47] ? ret_from_fork_asm+0x1a/0x30 [ 79.462573][ T47] __warn+0x344/0x4d0 [ 79.464133][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 79.466295][ T47] report_bug+0x2b3/0x500 [ 79.468035][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 79.470296][ T47] handle_bug+0x60/0x90 [ 79.471988][ T47] exc_invalid_op+0x1a/0x50 [ 79.473886][ T47] asm_exc_invalid_op+0x1a/0x20 [ 79.475881][ T47] RIP: 0010:sta_info_insert_rcu+0x322/0x1900 [ 79.478309][ T47] Code: 85 db 4c 8b 6c 24 28 0f 84 90 00 00 00 e8 86 e2 36 f6 84 c0 0f 84 b4 00 00 00 e8 79 83 51 f6 e9 0d 01 00 00 e8 6f 83 51 f6 90 <0f> 0b 90 41 be ea ff ff ff 4c 8b 6c 24 28 4c 89 ee e8 38 ce ff ff [ 79.485866][ T47] RSP: 0018:ffffc90000627920 EFLAGS: 00010293 [ 79.488335][ T47] RAX: ffffffff8b705ba1 RBX: 0000000000000001 RCX: ffff88801e66a440 [ 79.491483][ T47] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 79.494744][ T47] RBP: 00000000ffffffff R08: ffffffff8b705b2e R09: 1ffff110087e3ae6 [ 79.497969][ T47] R10: dffffc0000000000 R11: ffffed10087e3ae7 R12: 00000000ffeeffff [ 79.501167][ T47] R13: 000000000000ffff R14: 000000000000feff R15: ffff888043f1cd80 [ 79.504397][ T47] ? sta_info_insert_rcu+0x2ae/0x1900 [ 79.506624][ T47] ? sta_info_insert_rcu+0x321/0x1900 [ 79.508936][ T47] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 79.511279][ T47] ? rate_control_rate_init+0x135/0x680 [ 79.513580][ T47] ieee80211_ocb_work+0x310/0x570 [ 79.515672][ T47] ? __pfx_ieee80211_ocb_work+0x10/0x10 [ 79.518003][ T47] ? ieee80211_iface_work+0xec3/0xf90 [ 79.520165][ T47] ? rcu_is_watching+0x15/0xb0 [ 79.522181][ T47] cfg80211_wiphy_work+0x2f0/0x490 [ 79.524328][ T47] ? process_scheduled_works+0x9c6/0x18e0 [ 79.526613][ T47] process_scheduled_works+0xabe/0x18e0 [ 79.528922][ T47] ? __pfx_process_scheduled_works+0x10/0x10 [ 79.531367][ T47] ? assign_work+0x364/0x3d0 [ 79.533392][ T47] worker_thread+0x870/0xd30 [ 79.535463][ T47] ? __kthread_parkme+0x169/0x1d0 [ 79.537670][ T47] ? __pfx_worker_thread+0x10/0x10 [ 79.539922][ T47] kthread+0x7a9/0x920 [ 79.541708][ T47] ? __pfx_kthread+0x10/0x10 [ 79.543691][ T47] ? __pfx_worker_thread+0x10/0x10 [ 79.545802][ T47] ? __pfx_kthread+0x10/0x10 [ 79.547711][ T47] ? __pfx_kthread+0x10/0x10 [ 79.549661][ T47] ? __pfx_kthread+0x10/0x10 [ 79.551617][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.553950][ T47] ? lockdep_hardirqs_on+0x99/0x150 [ 79.556202][ T47] ? __pfx_kthread+0x10/0x10 [ 79.558232][ T47] ret_from_fork+0x4b/0x80 [ 79.560164][ T47] ? __pfx_kthread+0x10/0x10 [ 79.562274][ T47] ret_from_fork_asm+0x1a/0x30 [ 79.564311][ T47] [ 79.565905][ T47] Kernel Offset: disabled [ 79.567740][ T47] Rebooting in 86400 seconds..