program: socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file7\x00', 0x0, &(0x7f00000000c0)={[{@nodecompose}, {@type={'type', 0x3d, "e6c0539c"}}]}, 0x1, 0x5e6, &(0x7f0000001940)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="08e00900080211000001080211000001ffffffffffff2412080211000001284d43c0"], 0x22) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x10000, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x5, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028004000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000028ca9e2224d26c46ff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c000280050001a1c68cd018cf9bef8014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa"], 0xc8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r7, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x308ae94b) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) [ 77.148973][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.151624][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.154902][ T5309] Bluetooth: hci0: command tx timeout [ 77.264880][ T5325] loop0: detected capacity change from 0 to 1024 [ 77.355366][ T47] ------------[ cut here ]------------ [ 77.358488][ T47] WARNING: CPU: 0 PID: 47 at net/mac80211/sta_info.c:756 sta_info_insert_rcu+0x322/0x1900 [ 77.362951][ T47] Modules linked in: [ 77.364860][ T47] CPU: 0 UID: 0 PID: 47 Comm: kworker/u4:3 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 77.369849][ T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.375089][ T47] Workqueue: events_unbound cfg80211_wiphy_work [ 77.377755][ T47] RIP: 0010:sta_info_insert_rcu+0x322/0x1900 [ 77.380199][ T47] Code: 85 db 4c 8b 6c 24 28 0f 84 90 00 00 00 e8 96 a8 36 f6 84 c0 0f 84 b4 00 00 00 e8 89 49 51 f6 e9 0d 01 00 00 e8 7f 49 51 f6 90 <0f> 0b 90 41 be ea ff ff ff 4c 8b 6c 24 28 4c 89 ee e8 38 ce ff ff [ 77.388160][ T47] RSP: 0018:ffffc90000627920 EFLAGS: 00010293 [ 77.390554][ T47] RAX: ffffffff8b709701 RBX: 0000000000000000 RCX: ffff88801e462440 [ 77.393427][ T47] RDX: 0000000000000000 RSI: 0000000000110308 RDI: 0000000000000000 [ 77.396129][ T47] RBP: 0000000000110308 R08: ffffffff8b70968e R09: 1ffff11007ef5ae6 [ 77.399383][ T47] R10: dffffc0000000000 R11: ffffed1007ef5ae7 R12: 0000000000000000 [ 77.402572][ T47] R13: 0000000000000100 R14: 0000000000000000 R15: ffff88803f7acd80 [ 77.405792][ T47] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 77.409225][ T47] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.411894][ T47] CR2: 000055741dc52e60 CR3: 0000000045a20000 CR4: 0000000000352ef0 [ 77.415054][ T47] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.418231][ T47] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.421394][ T47] Call Trace: [ 77.422703][ T47] [ 77.423971][ T47] ? __warn+0x165/0x4d0 [ 77.425700][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 77.428020][ T47] ? report_bug+0x2b3/0x500 [ 77.429954][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 77.432148][ T47] ? handle_bug+0x60/0x90 [ 77.433901][ T47] ? exc_invalid_op+0x1a/0x50 [ 77.436110][ T47] ? asm_exc_invalid_op+0x1a/0x20 [ 77.439226][ T47] ? sta_info_insert_rcu+0x2ae/0x1900 [ 77.442009][ T47] ? sta_info_insert_rcu+0x321/0x1900 [ 77.444711][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 77.446808][ T47] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 77.448951][ T47] ? rate_control_rate_init+0x135/0x680 [ 77.451234][ T47] ieee80211_ocb_work+0x310/0x570 [ 77.453363][ T47] ? __pfx_ieee80211_ocb_work+0x10/0x10 [ 77.455453][ T47] ? ieee80211_iface_work+0xec3/0xf90 [ 77.457759][ T47] ? rcu_is_watching+0x15/0xb0 [ 77.459794][ T47] cfg80211_wiphy_work+0x2f0/0x490 [ 77.461949][ T47] ? process_scheduled_works+0x9c6/0x18e0 [ 77.464268][ T47] process_scheduled_works+0xabe/0x18e0 [ 77.466472][ T47] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.468902][ T47] ? assign_work+0x364/0x3d0 [ 77.470798][ T47] worker_thread+0x870/0xd30 [ 77.472873][ T47] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 77.475396][ T47] ? __kthread_parkme+0x169/0x1d0 [ 77.477612][ T47] ? __pfx_worker_thread+0x10/0x10 [ 77.479730][ T47] kthread+0x7a9/0x920 [ 77.481373][ T47] ? __pfx_kthread+0x10/0x10 [ 77.483241][ T47] ? __pfx_worker_thread+0x10/0x10 [ 77.485308][ T47] ? __pfx_kthread+0x10/0x10 [ 77.487256][ T47] ? __pfx_kthread+0x10/0x10 [ 77.489188][ T47] ? __pfx_kthread+0x10/0x10 [ 77.491053][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.493090][ T47] ? lockdep_hardirqs_on+0x99/0x150 [ 77.495201][ T47] ? __pfx_kthread+0x10/0x10 [ 77.497171][ T47] ret_from_fork+0x4b/0x80 [ 77.498919][ T47] ? __pfx_kthread+0x10/0x10 [ 77.500818][ T47] ret_from_fork_asm+0x1a/0x30 [ 77.502712][ T47] [ 77.503957][ T47] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.506374][ T47] CPU: 0 UID: 0 PID: 47 Comm: kworker/u4:3 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 77.510248][ T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.514351][ T47] Workqueue: events_unbound cfg80211_wiphy_work [ 77.516826][ T47] Call Trace: [ 77.518070][ T47] [ 77.519456][ T47] dump_stack_lvl+0x241/0x360 [ 77.521607][ T47] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.523945][ T47] ? __pfx__printk+0x10/0x10 [ 77.525704][ T47] ? _printk+0xd5/0x120 [ 77.527267][ T47] ? __init_begin+0x41000/0x41000 [ 77.529274][ T47] ? vscnprintf+0x5d/0x90 [ 77.531009][ T47] panic+0x349/0x880 [ 77.532483][ T47] ? __warn+0x174/0x4d0 [ 77.534182][ T47] ? __pfx_panic+0x10/0x10 [ 77.535859][ T47] ? ret_from_fork_asm+0x1a/0x30 [ 77.537747][ T47] __warn+0x344/0x4d0 [ 77.539334][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 77.541420][ T47] report_bug+0x2b3/0x500 [ 77.542847][ T47] ? sta_info_insert_rcu+0x322/0x1900 [ 77.544755][ T47] handle_bug+0x60/0x90 [ 77.546275][ T47] exc_invalid_op+0x1a/0x50 [ 77.547954][ T47] asm_exc_invalid_op+0x1a/0x20 [ 77.549698][ T47] RIP: 0010:sta_info_insert_rcu+0x322/0x1900 [ 77.551786][ T47] Code: 85 db 4c 8b 6c 24 28 0f 84 90 00 00 00 e8 96 a8 36 f6 84 c0 0f 84 b4 00 00 00 e8 89 49 51 f6 e9 0d 01 00 00 e8 7f 49 51 f6 90 <0f> 0b 90 41 be ea ff ff ff 4c 8b 6c 24 28 4c 89 ee e8 38 ce ff ff [ 77.558713][ T47] RSP: 0018:ffffc90000627920 EFLAGS: 00010293 [ 77.561078][ T47] RAX: ffffffff8b709701 RBX: 0000000000000000 RCX: ffff88801e462440 [ 77.563905][ T47] RDX: 0000000000000000 RSI: 0000000000110308 RDI: 0000000000000000 [ 77.566728][ T47] RBP: 0000000000110308 R08: ffffffff8b70968e R09: 1ffff11007ef5ae6 [ 77.569488][ T47] R10: dffffc0000000000 R11: ffffed1007ef5ae7 R12: 0000000000000000 [ 77.572533][ T47] R13: 0000000000000100 R14: 0000000000000000 R15: ffff88803f7acd80 [ 77.575598][ T47] ? sta_info_insert_rcu+0x2ae/0x1900 [ 77.577665][ T47] ? sta_info_insert_rcu+0x321/0x1900 [ 77.579810][ T47] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 77.582067][ T47] ? rate_control_rate_init+0x135/0x680 [ 77.584201][ T47] ieee80211_ocb_work+0x310/0x570 [ 77.586164][ T47] ? __pfx_ieee80211_ocb_work+0x10/0x10 [ 77.588246][ T47] ? ieee80211_iface_work+0xec3/0xf90 [ 77.590148][ T47] ? rcu_is_watching+0x15/0xb0 [ 77.591907][ T47] cfg80211_wiphy_work+0x2f0/0x490 [ 77.593895][ T47] ? process_scheduled_works+0x9c6/0x18e0 [ 77.596071][ T47] process_scheduled_works+0xabe/0x18e0 [ 77.598137][ T47] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.600492][ T47] ? assign_work+0x364/0x3d0 [ 77.602182][ T47] worker_thread+0x870/0xd30 [ 77.604085][ T47] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 77.606508][ T47] ? __kthread_parkme+0x169/0x1d0 [ 77.608485][ T47] ? __pfx_worker_thread+0x10/0x10 [ 77.610445][ T47] kthread+0x7a9/0x920 [ 77.612380][ T47] ? __pfx_kthread+0x10/0x10 [ 77.614643][ T47] ? __pfx_worker_thread+0x10/0x10 [ 77.617002][ T47] ? __pfx_kthread+0x10/0x10 [ 77.619175][ T47] ? __pfx_kthread+0x10/0x10 [ 77.621393][ T47] ? __pfx_kthread+0x10/0x10 [ 77.623565][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.625530][ T47] ? lockdep_hardirqs_on+0x99/0x150 [ 77.627738][ T47] ? __pfx_kthread+0x10/0x10 [ 77.629595][ T47] ret_from_fork+0x4b/0x80 [ 77.631396][ T47] ? __pfx_kthread+0x10/0x10 [ 77.633170][ T47] ret_from_fork_asm+0x1a/0x30 [ 77.635115][ T47] [ 77.636392][ T47] Kernel Offset: disabled [ 77.637851][ T47] Rebooting in 86400 seconds..