bisecting fixing commit since cbfa1702aaf69b2311ea1b35e04f113c48368c67
building syzkaller on b74c49a6af84e6ab50018024e8862263b1e0bd6d
testing commit cbfa1702aaf69b2311ea1b35e04f113c48368c67 with gcc (GCC) 8.4.1 20210217
kernel signature: c2c2cb9ae1db65c24e403f6f944290269c4332c2e6ab30d895182f0dbf72cf62
all runs: crashed: WARNING in sta_info_insert_rcu
testing current HEAD 3242aa3a635c0958671ee1e4b0958dcc7c4e5c79
testing commit 3242aa3a635c0958671ee1e4b0958dcc7c4e5c79 with gcc (GCC) 8.4.1 20210217
kernel signature: 8ca693f8f4c8873016a272014c31390e8062bc0d7e485c04269cf252ea8cc3bb
all runs: crashed: WARNING in sta_info_insert_rcu
revisions tested: 2, total time: 22m4.590139131s (build: 14m46.863404034s, test: 6m21.791615442s)
the crash still happens on HEAD
commit msg: Linux 4.14.222
crash: WARNING in sta_info_insert_rcu
IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
device veth1_macvtap entered promiscuous mode
IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
------------[ cut here ]------------
WARNING: CPU: 0 PID: 286 at net/mac80211/sta_info.c:482 sta_info_insert_check net/mac80211/sta_info.c:481 [inline]
WARNING: CPU: 0 PID: 286 at net/mac80211/sta_info.c:482 sta_info_insert_rcu+0x1b6/0x1d90 net/mac80211/sta_info.c:627
ieee80211 phy6: mac80211_hwsim_bss_info_changed(changed=0x10 vif->addr=02:00:00:00:06:00)
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 286 Comm: kworker/u4:3 Not tainted 4.14.222-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: phy2 ieee80211_iface_work
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1e7 lib/dump_stack.c:58
 panic+0x1b0/0x358 kernel/panic.c:183
ieee80211 phy6:   HT: op_mode=0xb
 __warn.cold.7+0x25/0x25 kernel/panic.c:547
 report_bug+0x1a1/0x200 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 fixup_bug arch/x86/kernel/traps.c:172 [inline]
 do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295
ieee80211 phy7: Selected rate control algorithm 'minstrel_ht'
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
ieee80211 phy7: hwaddr 02:00:00:00:07:00 registered
RIP: 0010:sta_info_insert_check net/mac80211/sta_info.c:481 [inline]
RIP: 0010:sta_info_insert_rcu+0x1b6/0x1d90 net/mac80211/sta_info.c:627
RSP: 0018:ffff8881f4707a98 EFLAGS: 00010202
RAX: 0000000000000005 RBX: ffff8881dc214980 RCX: 00000000bd63276f
RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8881d879e70c
RBP: ffff8881f4707b58 R08: 0000000000005bd4 R09: ffffffff895666a0
R10: ffff8881f4707a88 R11: ffff8881f46fa200 R12: 00000000bd63377f
R13: ffff8881d879d640 R14: ffff8881d8461920 R15: ffff8881dc2149c8
ieee80211 phy7: mac80211_hwsim_start
 ieee80211_ibss_finish_sta+0x1c4/0x280 net/mac80211/ibss.c:601
ieee80211 phy7: mac80211_hwsim_add_interface (type=1 mac_addr=02:00:00:00:07:00)
 ieee80211_ibss_work+0x252/0xd80 net/mac80211/ibss.c:1692
ieee80211 phy7: mac80211_hwsim_bss_info_changed(changed=0xe vif->addr=02:00:00:00:07:00)
ieee80211 phy7:   ERP_CTS_PROT: 0
 ieee80211_iface_work+0x4a6/0x690 net/mac80211/iface.c:1383
 process_one_work+0x74f/0x1620 kernel/workqueue.c:2116
ieee80211 phy7:   ERP_PREAMBLE: 0
 worker_thread+0xcc/0xee0 kernel/workqueue.c:2250
 kthread+0x338/0x400 kernel/kthread.c:232
ieee80211 phy7:   ERP_SLOT: 0
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Kernel Offset: disabled
Rebooting in 86400 seconds..