last executing test programs: 1m2.044261616s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./c_proc\x00', 0x1ff) mount(&(0x7f0000000240), &(0x7f0000000280)='./c_proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./c_proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 1m1.967909735s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='mem\n', 0x4) 46.721517748s ago: executing program 32 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='mem\n', 0x4) 46.437789424s ago: executing program 1 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x100) close(r0) read(0xffffffffffffffff, &(0x7f0000000400), 0x100) 46.279050139s ago: executing program 1 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 46.263521328s ago: executing program 1 (id=225): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'lo\x00', @ifru_mtu=0x500}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0x60}}]}, 0x13c}}, 0x0) 46.13052448s ago: executing program 1 (id=227): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2a0, 0x2a0, 0xffff, 0x3, 0x0, 0x3, 0xa}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1}, 0xe) listen(r0, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8200c00080001000201040001004000"], 0x11) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82010000c0001000b0108000200000028000000"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c82010000c0001000b0208000200000028000000"], 0x15) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8201a001600010004021200400000000409030a0300000000a002050100"], 0x1f) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c8201c0018000100050114004000000000000409030a0300000000a002050100"], 0x21) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8201c0018000100050214004000000000000409030a0300000000a002050100"], 0x21) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8200600020040000500"], 0xb) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) write(r1, &(0x7f0000000600)='hello', 0x5) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8200600020040000500"], 0xb) 45.675268973s ago: executing program 2 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/cfg80211/parameters/bss_entries_limit\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) syz_80211_join_ibss(&(0x7f0000000300)='wlan0\x00', &(0x7f0000000340)=@default_ibss_ssid, 0x6, 0x1) syz_80211_inject_frame(&(0x7f0000000400), &(0x7f0000000440)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000500), &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) 44.984893081s ago: executing program 2 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/ieee80211/phy0/netdev:wlan0/state\x00', 0x0, 0x0) read(r1, &(0x7f0000000400), 0x100) 44.951545313s ago: executing program 2 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x34}}, 0x0) 44.879570481s ago: executing program 2 (id=235): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = socket(0x1f, 0x5, 0x8) bind(r0, &(0x7f0000000200), 0x31) listen(r0, 0x1) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write(0xca, &(0x7f0000000300)="043e100e0001000101aaaaaaaaaa1101100000", 0x13) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) write(0xca, &(0x7f0000000340)="043e080f01000000000000", 0xb) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) close(r0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 44.795040757s ago: executing program 1 (id=236): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000500)='trigger_nfqueue', 0xf, 0x0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 44.773262303s ago: executing program 1 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='devices\n', 0x8) close(r0) syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='freeze\n', 0x7) 44.087007936s ago: executing program 2 (id=248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x24}}, 0x0) 44.086869859s ago: executing program 2 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='foo\x00', 0x3) 34.403464844s ago: executing program 33 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/c1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/c1/protocol\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/c1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/c1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/c1/comms/1/addr\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)="020000007f00000100"/128, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r3, &(0x7f0000000400)="0600000000000000020000000401000000000000000000006c733100"/128, 0x80) 32.798622031s ago: executing program 6 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/vfio-pci\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) 32.7761821s ago: executing program 6 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 +4\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) 32.678544283s ago: executing program 6 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) 32.67833637s ago: executing program 6 (id=310): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2a0, 0x2a0, 0xffff, 0x3, 0x0, 0x3, 0xa}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1}, 0xe) listen(r0, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8200c00080001000201040001004000"], 0x11) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82010000c0001000b0108000200000028000000"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c82010000c0001000b0208000200000028000000"], 0x15) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8201a001600010004021200400000000409030a0300000000a002050100"], 0x1f) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c8201c0018000100050114004000000000000409030a0300000000a002050100"], 0x21) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8201c0018000100050214004000000000000409030a0300000000a002050100"], 0x21) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8200600020040000500"], 0xb) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) write(r1, &(0x7f0000000600)='hello', 0x5) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) 31.675247187s ago: executing program 3 (id=316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)}, 0x50) 31.653276736s ago: executing program 3 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 31.611433846s ago: executing program 3 (id=318): r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='key\x00', &(0x7f0000000200)='foobar\x00', 0x0) 31.543707074s ago: executing program 3 (id=319): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b52810000000000010902270001010080fa0904000003ff000000070581020002000705020200020007058303400001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 31.307989584s ago: executing program 6 (id=322): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040960501000001000000010902190001010080320904000001000000000705810340000a"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)={0x40, 0xa, 0x10, '\x00'/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x4, 0x2) 30.48461729s ago: executing program 5 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/netfilter/nf_log_all_netns\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @remote}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 30.379286381s ago: executing program 5 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) 30.372812477s ago: executing program 5 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/virtio\x00', 0x0, 0x0) 30.346421093s ago: executing program 5 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='reg-fixed-voltage\x00', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='pcspkr\x00', 0x7) 30.27424013s ago: executing program 5 (id=327): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}]}, 0x38}}, 0x0) 30.274068342s ago: executing program 5 (id=328): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2a0, 0x2a0, 0xffff, 0x3, 0x0, 0x3, 0xa}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1}, 0xe) listen(r0, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8200c00080001000201040001004000"], 0x11) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82010000c0001000b0108000200000028000000"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c82010000c0001000b0208000200000028000000"], 0x15) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8201a001600010004021200400000000409030a0300000000a002050100"], 0x1f) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c8201c0018000100050114004000000000000409030a0300000000a002050100"], 0x21) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8201c0018000100050214004000000000000409030a0300000000a002050100"], 0x21) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) write(r1, &(0x7f0000000600)='hello', 0x5) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8200600020040000500"], 0xb) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) 30.245982561s ago: executing program 6 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c90012000e00050014010a0023004000000500050a00"], 0x17) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) 30.045521905s ago: executing program 3 (id=330): r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000010000)='\x00'/32768, 0x8000, 0x40, 0x0, 0x0) getpid() 29.971265025s ago: executing program 3 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='200\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sys/class/net/bridge0/bridge/max_age\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='600\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\x00', 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r3, &(0x7f0000000200)="0180c2000000525400123456000742420300000080", 0x15, 0x0, &(0x7f0000000240)={0x11, 0x3, r4}, 0x14) nanosleep(&(0x7f0000000300)={0x9}, 0x0) 9.279377192s ago: executing program 34 (id=328): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2a0, 0x2a0, 0xffff, 0x3, 0x0, 0x3, 0xa}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1}, 0xe) listen(r0, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8200c00080001000201040001004000"], 0x11) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82010000c0001000b0108000200000028000000"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c82010000c0001000b0208000200000028000000"], 0x15) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8201a001600010004021200400000000409030a0300000000a002050100"], 0x1f) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c8201c0018000100050114004000000000000409030a0300000000a002050100"], 0x21) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8201c0018000100050214004000000000000409030a0300000000a002050100"], 0x21) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) write(r1, &(0x7f0000000600)='hello', 0x5) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8200600020040000500"], 0xb) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) 8.611560812s ago: executing program 35 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='devices\n', 0x8) close(r0) syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='freeze\n', 0x7) 8.529269935s ago: executing program 36 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='foo\x00', 0x3) 8.303179469s ago: executing program 37 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='200\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sys/class/net/bridge0/bridge/max_age\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='600\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\x00', 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r3, &(0x7f0000000200)="0180c2000000525400123456000742420300000080", 0x15, 0x0, &(0x7f0000000240)={0x11, 0x3, r4}, 0x14) nanosleep(&(0x7f0000000300)={0x9}, 0x0) 8.096329984s ago: executing program 38 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c90012000e00050014010a0023004000000500050a00"], 0x17) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) 2.706565906s ago: executing program 0 (id=335): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) 2.650944475s ago: executing program 8 (id=333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 2.539949943s ago: executing program 8 (id=344): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x400, 0x400, 0x0, 0x3, 0x0, 0x0, 0xa}, 0xc) fcntl$setstatus(r0, 0x4, 0x800) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c82010000c0001000b0108000200000088020000"], 0x15) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c82010000c0001000b0208000200000088020000"], 0x15) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c82010000c000100030108004000400000000000"], 0x15) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c82010000c000100030208004000400000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8201a0016000100040a1200400000000409030a03d007e02ea002050100"], 0x1f) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c8201c0018000100050114004000000000000409030a03d007e02ea002050100"], 0x21) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c8201c0018000100050214004000000000000409030a03d007e02ea002050100"], 0x21) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8200a00060040000000deadbeef"], 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x14dc9380}, 0x0) 2.509907348s ago: executing program 9 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'wlan1\x00', 0x1}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000580)={0x3}, &(0x7f00000005c0)) 1.640674218s ago: executing program 8 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) unshare(0x40000000) 1.514818962s ago: executing program 8 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='4420', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000500)={{0x0, 0x0, 0x0}}, 0x80, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 1.33682689s ago: executing program 8 (id=348): syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="d00000000802110000010802110000000802110000000000030001021000000000"], 0x21) nanosleep(&(0x7f0000000040)={0x0, 0x2faf080}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="8801000008021100000108021100000008021100000020000000deadbeef"], 0x1c) 1.114708715s ago: executing program 7 (id=332): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2a0, 0x2a0, 0xffff, 0x3, 0x0, 0x3, 0xa}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1}, 0xe) listen(r0, 0x1) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8200c00080001000201040001004000"], 0x11) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82010000c0001000b0108000200000028000000"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c82010000c0001000b0208000200000028000000"], 0x15) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8201a001600010004021200400000000409030a0300000000a002050100"], 0x1f) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c8201c0018000100050114004000000000000409030a0300000000a002050100"], 0x21) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8201c0018000100050214004000000000000409030a0300000000a002050100"], 0x21) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8200600020040000500"], 0xb) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) nanosleep(&(0x7f0000000300)={0x0, 0x1312d00}, 0x0) 1.100619427s ago: executing program 9 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/100, 0x64) 1.049563992s ago: executing program 4 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="1400028006000100010000000600120001000000"], 0x2c}}, 0x0) 1.04902817s ago: executing program 9 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x0, r3, 0x1, 0x0, 0x0, {{}, {}, {0x0, 0x18, {0x32}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 1.036414508s ago: executing program 4 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void}, 0x52) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x2d, 0x1a}}, 0x44) nanosleep(&(0x7f00000005c0)={0x0, 0x2faf080}, &(0x7f0000000600)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 662.974549ms ago: executing program 8 (id=353): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1d, @a_listen={0x0, 0x3, 0x5, 0x80, 0xff, 0x1, 0x0, "", 0x0, 0x0, 0x0, 0x12, 0x11, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Ffm'}}, 0x20) write$nci(r0, &(0x7f0000000780)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0541"}, 0x5) nanosleep(&(0x7f00000007c0)={0x0, 0x5f5e100}, 0x0) 583.808922ms ago: executing program 0 (id=354): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="05000000010001", 0x7) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000140)="0d000000010001", 0x7) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000180)="3300000008000102030405060101", 0xe) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000200)="34000000070001020304050601", 0xd) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) read(r1, &(0x7f0000000400)=""/128, 0x80) close(r1) close(r0) 444.645924ms ago: executing program 9 (id=355): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10080}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x98, &(0x7f0000000680)}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) nanosleep(&(0x7f0000000b80)={0x0, 0x10000000}, 0x0) r8 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000000b80)={0x0, 0x10000000}, 0x0) 253.589027ms ago: executing program 4 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='2049\n\x00', 0x5) close(r0) 168.05129ms ago: executing program 4 (id=357): delete_module(&(0x7f0000000000)='sunrpc\x00', 0x0) 167.876232ms ago: executing program 4 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.3\x00', 0x0, 0x0) 155.859487ms ago: executing program 4 (id=359): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1000\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0\n', 0x2) close(r1) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 101.285131ms ago: executing program 9 (id=360): syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 0s ago: executing program 9 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/c1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/c1/protocol\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/c1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/c1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/c1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)="020000007f00000100"/128, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r3, &(0x7f0000000400)="0600000000000000020000000401000000000000000000006c733100"/120, 0x78) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 28.960231][ T4699] cgroup: Unknown subsys name 'net' [ 29.100462][ T4699] cgroup: Unknown subsys name 'cpuset' [ 29.101922][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.240729][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.050090][ T4723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.050134][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.050498][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.050659][ T4723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.051277][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.051523][ T4723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.051616][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.051644][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.052078][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.052159][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.052680][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.053093][ T4723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.053275][ T4727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.053354][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.053605][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.054012][ T4727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.054197][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.054275][ T4723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.055095][ T4726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.055161][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.055659][ T4726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.055879][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.067363][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.078898][ T4727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.086419][ T4716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.371753][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.372104][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.372180][ T4710] bridge_slave_0: entered allmulticast mode [ 30.372657][ T4710] bridge_slave_0: entered promiscuous mode [ 30.373825][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.373850][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.373934][ T4710] bridge_slave_1: entered allmulticast mode [ 30.374314][ T4710] bridge_slave_1: entered promiscuous mode [ 30.394653][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.396525][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.404917][ T4710] team0: Port device team_slave_0 added [ 30.407355][ T4710] team0: Port device team_slave_1 added [ 30.413457][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.413467][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.413477][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.415392][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.415401][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.415417][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.487770][ T4710] hsr_slave_0: entered promiscuous mode [ 30.488257][ T4710] hsr_slave_1: entered promiscuous mode [ 30.564395][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.564465][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.564518][ T4712] bridge_slave_0: entered allmulticast mode [ 30.564958][ T4712] bridge_slave_0: entered promiscuous mode [ 30.565838][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.565858][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.565946][ T4712] bridge_slave_1: entered allmulticast mode [ 30.566320][ T4712] bridge_slave_1: entered promiscuous mode [ 30.613895][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.613961][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.614019][ T4709] bridge_slave_0: entered allmulticast mode [ 30.614468][ T4709] bridge_slave_0: entered promiscuous mode [ 30.621312][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.621356][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.621380][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.621440][ T4709] bridge_slave_1: entered allmulticast mode [ 30.621857][ T4709] bridge_slave_1: entered promiscuous mode [ 30.644040][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.644822][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.656287][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.656384][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.656448][ T4720] bridge_slave_0: entered allmulticast mode [ 30.656885][ T4720] bridge_slave_0: entered promiscuous mode [ 30.658416][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.658439][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.658490][ T4714] bridge_slave_0: entered allmulticast mode [ 30.659678][ T4714] bridge_slave_0: entered promiscuous mode [ 30.660682][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.660709][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.660761][ T4714] bridge_slave_1: entered allmulticast mode [ 30.661171][ T4714] bridge_slave_1: entered promiscuous mode [ 30.662726][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.668809][ T4709] team0: Port device team_slave_0 added [ 30.673188][ T4709] team0: Port device team_slave_1 added [ 30.678072][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.678099][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.678151][ T4720] bridge_slave_1: entered allmulticast mode [ 30.678548][ T4720] bridge_slave_1: entered promiscuous mode [ 30.685741][ T4712] team0: Port device team_slave_0 added [ 30.686650][ T4712] team0: Port device team_slave_1 added [ 30.690882][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.690891][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.690904][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.691430][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.691437][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.691449][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.706570][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.707450][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.711852][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.726933][ T4709] hsr_slave_0: entered promiscuous mode [ 30.727217][ T4709] hsr_slave_1: entered promiscuous mode [ 30.727439][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.727477][ T4709] Cannot create hsr debugfs directory [ 30.728122][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.728133][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.728149][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.730779][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.731517][ T4720] team0: Port device team_slave_0 added [ 30.732326][ T4720] team0: Port device team_slave_1 added [ 30.740433][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.740442][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.740459][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.751168][ T4712] hsr_slave_0: entered promiscuous mode [ 30.751478][ T4712] hsr_slave_1: entered promiscuous mode [ 30.751687][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.751697][ T4712] Cannot create hsr debugfs directory [ 30.766624][ T4714] team0: Port device team_slave_0 added [ 30.767405][ T4714] team0: Port device team_slave_1 added [ 30.787091][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.787102][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.787115][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.797014][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.797024][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.797038][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.799518][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.799526][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.799541][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.801781][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.806323][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.808629][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.808637][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.808650][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.812245][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.814252][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.814531][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.816093][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.823836][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.826363][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.852955][ T4720] hsr_slave_0: entered promiscuous mode [ 30.853566][ T4720] hsr_slave_1: entered promiscuous mode [ 30.853743][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 30.853753][ T4720] Cannot create hsr debugfs directory [ 30.855160][ T4714] hsr_slave_0: entered promiscuous mode [ 30.855449][ T4714] hsr_slave_1: entered promiscuous mode [ 30.855625][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.855635][ T4714] Cannot create hsr debugfs directory [ 30.893582][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.893617][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.893745][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.893772][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.959189][ T4709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.960313][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.961768][ T4709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.963330][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.963626][ T4709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.964907][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.969869][ T4709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.971729][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.986958][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.996672][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.997798][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.998117][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.000540][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.003016][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.006645][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.006671][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.006738][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.006765][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.011824][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.013047][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.023273][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.023689][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.041204][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.042277][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.069456][ T4720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.072312][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.073873][ T4720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.074803][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.075087][ T4720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.075875][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.076142][ T4720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.077012][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.092583][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.096724][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.114928][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.114965][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.115324][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.115345][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.128616][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.148593][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.157385][ T4714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.158375][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.158685][ T4714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.162518][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.173744][ T4714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.177855][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.178174][ T4714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.188358][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.189886][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.193280][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.196863][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.196911][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.197244][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.197262][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.223833][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.226620][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.226652][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.252290][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.252324][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.258725][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.258739][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.267552][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.284195][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.295360][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.295389][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.297114][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.297138][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.306430][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.316052][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.316068][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.334679][ T4710] veth0_vlan: entered promiscuous mode [ 31.336687][ T4710] veth1_vlan: entered promiscuous mode [ 31.344660][ T4710] veth0_macvtap: entered promiscuous mode [ 31.345790][ T4710] veth1_macvtap: entered promiscuous mode [ 31.358461][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.362777][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.367309][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.367455][ T54] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.419171][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.427900][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.427913][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.430737][ T3847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.448461][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.455979][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.455994][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.507061][ T4710] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.566149][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.581121][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.594530][ T4712] veth0_vlan: entered promiscuous mode [ 31.596661][ T4712] veth1_vlan: entered promiscuous mode [ 31.605242][ T4720] veth0_vlan: entered promiscuous mode [ 31.608417][ T4720] veth1_vlan: entered promiscuous mode [ 31.628512][ T4712] veth0_macvtap: entered promiscuous mode [ 31.639629][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.640483][ T4712] veth1_macvtap: entered promiscuous mode [ 31.646867][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.647876][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.654116][ T4720] veth0_macvtap: entered promiscuous mode [ 31.655490][ T4720] veth1_macvtap: entered promiscuous mode [ 31.670616][ T4709] veth0_vlan: entered promiscuous mode [ 31.673140][ T4709] veth1_vlan: entered promiscuous mode [ 31.676331][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.681625][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.686434][ T4714] veth0_vlan: entered promiscuous mode [ 31.697049][ T4714] veth1_vlan: entered promiscuous mode [ 31.709172][ T3847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.709251][ T3847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.709268][ T3847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.709285][ T3847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.731360][ T4709] veth0_macvtap: entered promiscuous mode [ 31.732652][ T4709] veth1_macvtap: entered promiscuous mode [ 31.733853][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.733865][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.751585][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.751600][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.766513][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.767798][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.786648][ T4714] veth0_macvtap: entered promiscuous mode [ 31.787895][ T4714] veth1_macvtap: entered promiscuous mode [ 31.792582][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.793548][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.797516][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.797554][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.797580][ T1159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.797603][ T1159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.808982][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.808993][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.836667][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.836680][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.850417][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.850741][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.865760][ T3847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.865913][ T3847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.865940][ T3847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.865949][ T3847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.866098][ T3847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.866539][ T3847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.866636][ T3847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.866813][ T3847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.867002][ T3847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.876619][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.876634][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.895825][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.895839][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.897851][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.897862][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.900929][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.966201][ T4908] Zero length message leads to an empty skb [ 31.971873][ T4910] FAULT_INJECTION: forcing a failure. [ 31.971873][ T4910] name fail_futex, interval 1, probability 0, space 0, times 1 [ 31.971893][ T4910] CPU: 0 UID: 0 PID: 4910 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT [ 31.971906][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.971912][ T4910] Call trace: [ 31.971915][ T4910] show_stack+0x2c/0x3c (C) [ 31.971934][ T4910] __dump_stack+0x30/0x40 [ 31.971946][ T4910] dump_stack_lvl+0xd8/0x12c [ 31.971958][ T4910] dump_stack+0x1c/0x28 [ 31.971969][ T4910] should_fail_ex+0x41c/0x590 [ 31.971982][ T4910] should_fail+0x14/0x24 [ 31.971993][ T4910] get_futex_key+0x1ec/0x12b0 [ 31.972004][ T4910] futex_wait_setup+0x58/0x674 [ 31.972016][ T4910] __futex_wait+0x108/0x25c [ 31.972027][ T4910] futex_wait+0x108/0x2c0 [ 31.972038][ T4910] do_futex+0x320/0x378 [ 31.972048][ T4910] __arm64_sys_futex+0x2e4/0x418 [ 31.972058][ T4910] invoke_syscall+0x98/0x244 [ 31.972071][ T4910] el0_svc_common+0xec/0x23c [ 31.972082][ T4910] do_el0_svc+0x4c/0x5c [ 31.972093][ T4910] el0_svc+0x64/0x260 [ 31.972104][ T4910] el0t_64_sync_handler+0x44/0x104 [ 31.972115][ T4910] el0t_64_sync+0x198/0x19c [ 32.044171][ T4917] PM: suspend entry (deep) [ 32.089479][ T4716] Bluetooth: hci3: command tx timeout [ 32.089591][ T4716] Bluetooth: hci0: command tx timeout [ 32.089660][ T4716] Bluetooth: hci2: command tx timeout [ 32.123722][ T40] Filesystems sync: 0.079 seconds [ 32.169141][ T4722] Bluetooth: hci1: command tx timeout [ 32.169317][ T4722] Bluetooth: hci4: command tx timeout [ 32.508446][ T4930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.562463][ T4930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.614522][ T4930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.669725][ T4930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.721871][ T4930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.770389][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.770562][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.872686][ T4917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 32.872768][ T4917] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 32.874635][ T4917] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 32.875652][ T4917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 32.875689][ T4917] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 32.876503][ T4917] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 32.877202][ T4917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 32.877234][ T4917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 32.878565][ T4917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 32.884824][ T4917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 32.884852][ T4917] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 32.887900][ T4917] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 32.891263][ T4917] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 32.891289][ T4917] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 32.894495][ T4917] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 33.573669][ T4716] Bluetooth: hci2: connection err: -111 [ 33.649565][ T4716] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 33.660946][ T4716] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 33.661051][ T4716] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 33.671362][ T4716] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 33.671580][ T4716] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 33.671694][ T4716] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 33.722092][ T4716] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 33.813737][ T4716] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 34.168883][ T4716] Bluetooth: hci0: command 0x040f tx timeout [ 34.288880][ T4716] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 34.300175][ T4716] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 34.300271][ T4716] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 34.310594][ T4716] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 34.310742][ T4716] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 34.310840][ T4716] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 34.361135][ T4716] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 34.740199][ T4975] batman_adv: batadv0: Adding interface: wlan0 [ 34.740212][ T4975] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.740228][ T4975] batman_adv: batadv0: Interface activated: wlan0 [ 34.891301][ T4716] Bluetooth: hci2: command 0x040f tx timeout [ 34.891336][ T4716] Bluetooth: hci3: command 0x040f tx timeout [ 34.891360][ T4716] Bluetooth: hci1: command 0x040f tx timeout [ 34.937464][ T4980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 34.962477][ T4984] Bluetooth: ISO socket layer initialized [ 34.963036][ T4722] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 34.963124][ T4722] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 34.969186][ T4722] Bluetooth: hci4: command 0x040f tx timeout [ 35.010705][ T4988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.39'. [ 35.104848][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 35.115378][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 35.115445][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 35.126365][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 35.126466][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 35.126526][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 35.128222][ T5004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.174855][ T5004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.176976][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 35.215991][ T5004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.255738][ T5004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.321617][ T5008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 35.325062][ T5008] loop0: detected capacity change from 0 to 65536 [ 35.385803][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 35.396155][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 35.396273][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 35.406545][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 35.406725][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 35.406830][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 35.457176][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 35.498020][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 35.588080][ T5017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 35.688298][ T5027] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 35.688440][ T5027] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 35.688790][ T5027] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 35.693879][ T5027] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 36.061908][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.061924][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.137206][ C0] bridge0: port 1(bridge_slave_0) received tcn bpdu [ 36.137221][ C0] bridge0: topology change detected, propagating [ 36.450553][ T5049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.451542][ T5049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.845757][ T5071] pimreg: entered allmulticast mode [ 36.847825][ T5070] pimreg: left allmulticast mode [ 36.959144][ C1] bridge0: port 1(bridge_slave_0) received tcn bpdu [ 36.959160][ C1] bridge0: topology change detected, propagating [ 36.972857][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 36.972883][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 36.972952][ T4722] Bluetooth: hci1: command 0x040f tx timeout [ 37.014074][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 37.024388][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 37.024477][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 37.034734][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 37.034842][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 37.034931][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 37.050387][ T4722] Bluetooth: hci4: command 0x040f tx timeout [ 37.085192][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 37.190911][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.191272][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.441558][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 37.458212][ T5108] bridge_slave_1: left allmulticast mode [ 37.458233][ T5108] bridge_slave_1: left promiscuous mode [ 37.458331][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.463122][ T5108] bridge_slave_0: left allmulticast mode [ 37.463139][ T5108] bridge_slave_0: left promiscuous mode [ 37.463229][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.683226][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 37.683248][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 37.724900][ T5121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.725095][ T5121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.805402][ T5124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.808311][ T5124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.849018][ T4722] Bluetooth: hci0: command 0x040f tx timeout [ 37.973141][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.973330][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.049481][ T4716] Bluetooth: hci1: command 0x040f tx timeout [ 39.049508][ T4716] Bluetooth: hci2: command 0x040f tx timeout [ 39.050675][ T4722] Bluetooth: hci3: command 0x040f tx timeout [ 39.100707][ T5149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.101399][ T5149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.129000][ T4722] Bluetooth: hci4: command 0x040f tx timeout [ 39.507939][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 39.508161][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 39.508259][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 39.844288][ T5165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.844308][ T5165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.929119][ T4716] Bluetooth: hci0: command 0x040f tx timeout [ 40.550396][ T5203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.550581][ T5203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.128959][ T4716] Bluetooth: hci3: command 0x040f tx timeout [ 41.131262][ T4716] Bluetooth: hci1: command 0x040f tx timeout [ 41.131287][ T4716] Bluetooth: hci2: command 0x040f tx timeout [ 41.208968][ T4727] Bluetooth: hci4: command 0x040f tx timeout [ 41.307756][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.308439][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.731325][ T5235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.782253][ T5235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.915871][ T5241] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.929158][ T4727] Bluetooth: hci5: command 0x1003 tx timeout [ 41.929205][ T4722] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 41.975504][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.975995][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.136442][ T5248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.383692][ T5252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.392976][ T5252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.784422][ T5280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.848575][ T5284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.906559][ T5280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.960085][ T5284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.098959][ T54] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.139608][ T5301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 43.209018][ T4727] Bluetooth: hci1: command 0x040f tx timeout [ 43.209047][ T4727] Bluetooth: hci3: command 0x040f tx timeout [ 43.209084][ T4722] Bluetooth: hci2: command 0x040f tx timeout [ 43.288988][ T4722] Bluetooth: hci4: command 0x040f tx timeout [ 43.367667][ T54] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 43.643679][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 43.646590][ T5337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.646758][ T5337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.656784][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 43.657391][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 43.667768][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 43.667908][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 43.668010][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 43.722936][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 43.810200][ T5347] batman_adv: batadv0: Adding interface: veth0 [ 43.810213][ T5347] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.810230][ T5347] batman_adv: batadv0: Interface activated: veth0 [ 43.816570][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 43.910669][ T5351] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 44.306345][ T5359] tipc: Started in network mode [ 44.306361][ T5359] tipc: Node identity 4, cluster identity 4711 [ 44.306369][ T5359] tipc: Node number set to 4 [ 44.307486][ T5359] tipc: Enabled bearer , priority 0 [ 44.402754][ T5363] dlm: Using SCTP for communications [ 44.417045][ T5367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.424540][ T5363] dlm: ls1: joining the lockspace group... [ 44.885923][ T5372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.420817][ T5389] Bluetooth: MGMT ver 1.23 [ 45.455920][ T5391] syz_tun: entered allmulticast mode [ 45.458580][ T5390] syz_tun: left allmulticast mode [ 45.576388][ T5399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.576577][ T5399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.893874][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 45.904252][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 45.904357][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 45.914668][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 45.914788][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 45.914887][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 45.965163][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 46.056735][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 46.113141][ T5410] nvmet: adding nsid 1 to subsystem testsubsys [ 46.116256][ T5410] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 46.116805][ T5410] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 46.117362][ T5410] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 46.117907][ T5410] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 46.898774][ T5427] syz_tun: entered allmulticast mode [ 46.946207][ T5410] nvme nvme1: failed to connect socket: -512 [ 47.305416][ T4716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 47.306573][ T4716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 47.307075][ T4716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 47.308096][ T4716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 47.308315][ T4716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 47.496350][ T5452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 47.613287][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 47.613540][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 47.672477][ T4722] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 47.731971][ T5426] syz_tun: left allmulticast mode [ 47.801529][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.806523][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.806640][ T5437] bridge_slave_0: entered allmulticast mode [ 47.807250][ T5437] bridge_slave_0: entered promiscuous mode [ 47.808064][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.808091][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.821516][ T5437] bridge_slave_1: entered allmulticast mode [ 47.825166][ T5437] bridge_slave_1: entered promiscuous mode [ 47.834696][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 47.838258][ T5437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.843699][ T5437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.845021][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 47.845125][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 47.855387][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 47.855489][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 47.855986][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 47.857376][ T5437] team0: Port device team_slave_0 added [ 47.858165][ T5437] team0: Port device team_slave_1 added [ 47.871100][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.871110][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.871123][ T5437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.871646][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.871653][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.871668][ T5437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.902813][ T5437] hsr_slave_0: entered promiscuous mode [ 47.903105][ T5437] hsr_slave_1: entered promiscuous mode [ 47.903302][ T5437] debugfs: 'hsr0' already exists in 'hsr' [ 47.903314][ T5437] Cannot create hsr debugfs directory [ 47.950528][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 47.972546][ T5437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.973943][ T5437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.974371][ T5437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.975810][ T5437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.976268][ T5437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.978089][ T5437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.978606][ T5437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.993258][ T5437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.034902][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.034931][ T5437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.035013][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.035047][ T5437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.045233][ T4722] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 48.059972][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.064449][ T5437] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.233436][ T5437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.321968][ T3847] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 48.323862][ T5498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.348191][ T5437] veth0_vlan: entered promiscuous mode [ 48.352903][ T5437] veth1_vlan: entered promiscuous mode [ 48.371866][ T5437] veth0_macvtap: entered promiscuous mode [ 48.373897][ T5437] veth1_macvtap: entered promiscuous mode [ 48.383883][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.392577][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.424422][ T5499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.438199][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.438212][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.449050][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.449353][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.449373][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.449389][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.464508][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.464518][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.738306][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 48.738329][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 49.073866][ T4722] Bluetooth: hci3: unexpected event for opcode 0x041b [ 49.126958][ T4722] Bluetooth: hci3: Unable to find connection for dst 11:aa:aa:aa:aa:aa sid 0x01 [ 49.192185][ T5524] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 49.276303][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.276523][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.332916][ T5530] PM: suspend entry (s2idle) [ 49.332930][ T5530] PM: suspend exit [ 49.368930][ T4722] Bluetooth: hci5: command tx timeout [ 49.714994][ T1082] IPVS: starting estimator thread 0... [ 49.715759][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 49.726111][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 49.726416][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 49.762148][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 49.762250][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 49.762340][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 49.798947][ T5547] IPVS: using max 59 ests per chain, 141600 per kthread [ 49.812681][ T4722] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 51.014218][ T5558] pimreg: entered allmulticast mode [ 51.019148][ T5557] pimreg: left allmulticast mode [ 51.185993][ T5562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.448962][ T4722] Bluetooth: hci5: command tx timeout [ 51.872551][ T5586] lo speed is unknown, defaulting to 1000 [ 51.873579][ T5586] lo speed is unknown, defaulting to 1000 [ 51.874417][ T5586] lo speed is unknown, defaulting to 1000 [ 51.923233][ T4803] lo speed is unknown, defaulting to 1000 [ 51.923296][ T5586] infiniband syz0: set active [ 51.923315][ T5586] infiniband syz0: added lo [ 51.948052][ T5586] RDS/IB: syz0: added [ 51.948149][ T5586] smc: adding ib device syz0 with port count 1 [ 51.948176][ T5586] smc: ib device syz0 port 1 has no pnetid [ 51.948752][ T4803] lo speed is unknown, defaulting to 1000 [ 51.956919][ T5586] lo speed is unknown, defaulting to 1000 [ 52.001377][ T5586] lo speed is unknown, defaulting to 1000 [ 52.049112][ T5586] lo speed is unknown, defaulting to 1000 [ 52.093053][ T5586] lo speed is unknown, defaulting to 1000 [ 52.139021][ T5586] lo speed is unknown, defaulting to 1000 [ 52.187530][ T5586] lo speed is unknown, defaulting to 1000 [ 52.301418][ T5594] tipc: Started in network mode [ 52.301434][ T5594] tipc: Node identity 4, cluster identity 4711 [ 52.301442][ T5594] tipc: Node number set to 4 [ 52.302163][ T5594] tipc: Enabled bearer , priority 0 [ 52.427547][ T5596] PM: suspend entry (s2idle) [ 52.427559][ T5596] PM: suspend exit [ 52.679008][ T5604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.679196][ T5604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.114388][ T5609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.153945][ T1154] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 53.153962][ T1154] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 53.165243][ T12] wlan1: authenticated [ 53.165332][ T1154] wlan1: aborting authentication with 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 53.166571][ T5609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.218540][ T5609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.275942][ T5610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.529230][ T4722] Bluetooth: hci5: command tx timeout [ 53.935897][ T5616] netlink: 60 bytes leftover after parsing attributes in process `syz.5.276'. [ 54.599567][ T5626] sysfs: Unknown parameter './sys' [ 55.737752][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 55.798752][ T54] IPVS: starting estimator thread 0... [ 55.881807][ T5640] IPVS: using max 60 ests per chain, 144000 per kthread [ 55.988057][ T5646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.990849][ T5646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.325048][ T5655] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.011929][ T4716] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 58.011960][ T4716] Bluetooth: hci5: Injecting HCI hardware error event [ 58.013310][ T4716] Bluetooth: hci5: hardware error 0x00 [ 58.061662][ T5666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.061859][ T5666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.117291][ T5669] bonding: bond1 is being created... [ 58.131178][ T5669] bond1: option slaves: interface +dummy0 does not exist! [ 58.287293][ T5678] bond0: (slave bond_slave_0): Releasing backup interface [ 58.301031][ T5669] bond0: (slave bond_slave_1): Releasing backup interface [ 58.319369][ T5669] bond0: option slaves: interface +dummy0 does not exist! [ 58.320677][ T5669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.048895][ T4722] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 59.588724][ T5690] lo speed is unknown, defaulting to 1000 [ 59.633650][ T5690] FAULT_INJECTION: forcing a failure. [ 59.633650][ T5690] name failslab, interval 1, probability 0, space 0, times 1 [ 59.633672][ T5690] CPU: 0 UID: 0 PID: 5690 Comm: syz.3.299 Not tainted syzkaller #0 PREEMPT [ 59.633682][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 59.633687][ T5690] Call trace: [ 59.633691][ T5690] show_stack+0x2c/0x3c (C) [ 59.633711][ T5690] __dump_stack+0x30/0x40 [ 59.633723][ T5690] dump_stack_lvl+0xd8/0x12c [ 59.633733][ T5690] dump_stack+0x1c/0x28 [ 59.633742][ T5690] should_fail_ex+0x41c/0x590 [ 59.633756][ T5690] should_failslab+0xc4/0x120 [ 59.633769][ T5690] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 59.633778][ T5690] kmemdup_noprof+0x44/0x8c [ 59.633786][ T5690] neigh_sysctl_register+0xc0/0x458 [ 59.633797][ T5690] devinet_sysctl_register+0xb0/0x1c0 [ 59.633805][ T5690] inetdev_init+0x250/0x49c [ 59.633812][ T5690] inetdev_event+0x248/0x1184 [ 59.633831][ T5690] notifier_call_chain+0x1a4/0x624 [ 59.633841][ T5690] raw_notifier_call_chain+0x3c/0x50 [ 59.633850][ T5690] call_netdevice_notifiers_info+0xb8/0x120 [ 59.633861][ T5690] register_netdevice+0x1018/0x14c0 [ 59.633871][ T5690] __ip_tunnel_create+0x34c/0x4b0 [ 59.633882][ T5690] ip_tunnel_init_net+0x238/0x49c [ 59.633892][ T5690] ipgre_tap_init_net+0x38/0x48 [ 59.633902][ T5690] ops_init+0x2cc/0x528 [ 59.633911][ T5690] setup_net+0x118/0x2fc [ 59.633919][ T5690] copy_net_ns+0x454/0x698 [ 59.633927][ T5690] create_new_namespaces+0x304/0x50c [ 59.633936][ T5690] unshare_nsproxy_namespaces+0x120/0x170 [ 59.633944][ T5690] ksys_unshare+0x438/0x6cc [ 59.633953][ T5690] __arm64_sys_unshare+0x40/0x54 [ 59.633960][ T5690] invoke_syscall+0x98/0x244 [ 59.633971][ T5690] el0_svc_common+0xec/0x23c [ 59.633980][ T5690] do_el0_svc+0x4c/0x5c [ 59.633990][ T5690] el0_svc+0x64/0x260 [ 59.634000][ T5690] el0t_64_sync_handler+0x44/0x104 [ 59.634009][ T5690] el0t_64_sync+0x198/0x19c [ 59.703775][ T5691] lo speed is unknown, defaulting to 1000 [ 59.807644][ T4727] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 59.808214][ T4727] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 59.808487][ T4727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 59.814162][ T4727] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 59.814430][ T4727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 59.930065][ T5692] lo speed is unknown, defaulting to 1000 [ 60.089035][ T4716] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 60.134504][ T5692] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.134563][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.134676][ T5692] bridge_slave_0: entered allmulticast mode [ 60.135143][ T5692] bridge_slave_0: entered promiscuous mode [ 60.142145][ T5692] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.142201][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.142260][ T5692] bridge_slave_1: entered allmulticast mode [ 60.142721][ T5692] bridge_slave_1: entered promiscuous mode [ 60.157961][ T5692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.161464][ T5692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.168134][ T5692] team0: Port device team_slave_0 added [ 60.172508][ T5692] team0: Port device team_slave_1 added [ 60.181174][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.181184][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.181198][ T5692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.181749][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.181756][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.181772][ T5692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.211920][ T5692] hsr_slave_0: entered promiscuous mode [ 60.212241][ T5692] hsr_slave_1: entered promiscuous mode [ 60.212519][ T5692] debugfs: 'hsr0' already exists in 'hsr' [ 60.212530][ T5692] Cannot create hsr debugfs directory [ 60.284227][ T5692] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 60.287922][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.288418][ T5692] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 60.298590][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.301025][ T5692] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 60.314272][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.314748][ T5692] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.327744][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.376199][ T5711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.376376][ T5711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.398657][ T5692] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.398693][ T5692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.398761][ T5692] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.398789][ T5692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.424603][ T5692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.431045][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.432506][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.457867][ T5717] netlink: 56 bytes leftover after parsing attributes in process `syz.5.301'. [ 60.457887][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.301'. [ 60.457898][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.301'. [ 60.471916][ T5692] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.491158][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.491185][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.491506][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.491523][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.526555][ T5692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.526571][ T5692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.723287][ T5692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.821430][ T5692] veth0_vlan: entered promiscuous mode [ 60.823489][ T5692] veth1_vlan: entered promiscuous mode [ 60.841931][ T5692] veth0_macvtap: entered promiscuous mode [ 60.846440][ T5692] veth1_macvtap: entered promiscuous mode [ 60.854504][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.863526][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.897206][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.897220][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.902658][ T3847] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.903008][ T3847] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.903148][ T3847] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.903444][ T3847] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.945470][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.945484][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.056421][ T5743] tipc: Started in network mode [ 61.056440][ T5743] tipc: Node identity 0a94fe5551bc, cluster identity 4711 [ 61.056542][ T5743] tipc: Enabled bearer , priority 0 [ 61.083770][ T5743] tipc: Disabling bearer [ 61.705229][ T5767] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 61.859099][ T4716] Bluetooth: hci6: command tx timeout [ 62.413359][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.413913][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.687027][ T5789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.688260][ T5789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.929087][ T4716] Bluetooth: hci6: command tx timeout [ 63.969921][ C0] bridge0: port 1(bridge_slave_0) received tcn bpdu [ 63.969936][ C0] bridge0: topology change detected, propagating [ 64.491073][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.491114][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.516301][ T10] cfg80211: failed to load regulatory.db [ 64.518511][ T4917] Freezing user space processes [ 66.009142][ T4716] Bluetooth: hci6: command tx timeout [ 68.089111][ T4727] Bluetooth: hci6: command tx timeout [ 70.168891][ T4716] Bluetooth: hci6: command 0x0406 tx timeout [ 84.525790][ T4917] Freezing user space processes failed after 20.007 seconds (3 tasks refusing to freeze, wq_busy=0): [ 84.525832][ T4917] task:syz-executor state:S stack:0 pid:4709 tgid:4709 ppid:1 task_flags:0x40054c flags:0x00000018 [ 84.525850][ T4917] Call trace: [ 84.525855][ T4917] __switch_to+0x2b4/0x6e4 (T) [ 84.525872][ T4917] __schedule+0x1370/0x2d80 [ 84.525881][ T4917] schedule+0x13c/0x20c [ 84.525889][ T4917] do_wait+0x248/0x640 [ 84.525903][ T4917] kernel_wait4+0x204/0x308 [ 84.525915][ T4917] zap_pid_ns_processes+0x394/0x61c [ 84.525925][ T4917] do_exit+0x171c/0x1a74 [ 84.525936][ T4917] do_group_exit+0x198/0x238 [ 84.525947][ T4917] get_signal+0xfb0/0x1094 [ 84.525956][ T4917] arch_do_signal_or_restart+0x288/0x444c [ 84.525968][ T4917] exit_to_user_mode_loop+0x70/0x17c [ 84.525980][ T4917] el0_svc+0x18c/0x260 [ 84.525990][ T4917] el0t_64_sync_handler+0x44/0x104 [ 84.526000][ T4917] el0t_64_sync+0x198/0x19c [ 84.526010][ T4917] task:syz-executor state:S stack:0 pid:4720 tgid:4720 ppid:1 task_flags:0x40054c flags:0x00000018 [ 84.526022][ T4917] Call trace: [ 84.526025][ T4917] __switch_to+0x2b4/0x6e4 (T) [ 84.526034][ T4917] __schedule+0x1370/0x2d80 [ 84.526042][ T4917] schedule+0x13c/0x20c [ 84.526050][ T4917] do_wait+0x248/0x640 [ 84.526061][ T4917] kernel_wait4+0x204/0x308 [ 84.526072][ T4917] zap_pid_ns_processes+0x394/0x61c [ 84.526081][ T4917] do_exit+0x171c/0x1a74 [ 84.526092][ T4917] do_group_exit+0x198/0x238 [ 84.526103][ T4917] get_signal+0xfb0/0x1094 [ 84.526111][ T4917] arch_do_signal_or_restart+0x288/0x444c [ 84.526122][ T4917] exit_to_user_mode_loop+0x70/0x17c [ 84.526132][ T4917] el0_svc+0x18c/0x260 [ 84.526141][ T4917] el0t_64_sync_handler+0x44/0x104 [ 84.526151][ T4917] el0t_64_sync+0x198/0x19c [ 84.526163][ T4917] task:syz.4.189 state:D stack:0 pid:5363 tgid:5362 ppid:4709 task_flags:0x400140 flags:0x00000011 [ 84.526174][ T4917] Call trace: [ 84.526177][ T4917] __switch_to+0x2b4/0x6e4 (T) [ 84.526186][ T4917] __schedule+0x1370/0x2d80 [ 84.526194][ T4917] schedule+0x13c/0x20c [ 84.526202][ T4917] do_uevent+0x244/0x538 [ 84.526212][ T4917] __dlm_new_lockspace+0x1300/0x184c [ 84.526221][ T4917] dlm_new_user_lockspace+0x78/0xa0 [ 84.526229][ T4917] device_create_lockspace+0xc4/0x2fc [ 84.526239][ T4917] device_write+0x674/0xbfc [ 84.526248][ T4917] vfs_write+0x2a4/0xa0c [ 84.526261][ T4917] ksys_write+0x12c/0x228 [ 84.526272][ T4917] __arm64_sys_write+0x84/0x98 [ 84.526283][ T4917] invoke_syscall+0x98/0x244 [ 84.526295][ T4917] el0_svc_common+0xec/0x23c [ 84.526306][ T4917] do_el0_svc+0x4c/0x5c [ 84.526316][ T4917] el0_svc+0x64/0x260 [ 84.526325][ T4917] el0t_64_sync_handler+0x44/0x104 [ 84.526335][ T4917] el0t_64_sync+0x198/0x19c [ 84.526440][ T4917] OOM killer enabled. [ 84.526444][ T4917] Restarting tasks: Starting [ 84.592947][ T4917] Restarting tasks: Done [ 84.593134][ T4917] random: crng reseeded on system resumption [ 84.619059][ T4917] hwrng_fill thread creation failed [ 84.650910][ T4917] PM: suspend exit [ 85.649254][ T4722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.665562][ T4722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.666131][ T4722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.666458][ T4722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.666718][ T4722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.697919][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.698523][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.698739][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.703217][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.703433][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.756093][ T4716] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.756520][ T4716] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.756744][ T4716] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.769834][ T4716] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.770152][ T4716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.793983][ T1082] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.825282][ T4714] tipc: Resetting bearer [ 85.976238][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.976684][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.976919][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.977223][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.977431][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.005327][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.005729][ T4716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.006001][ T4716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.006315][ T4716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.006515][ T4716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.038112][ T4714] tipc: Disabling bearer [ 86.071069][ T4710] tipc: Resetting bearer [ 86.081395][ T4710] tipc: Disabling bearer [ 86.156759][ T1082] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.384071][ T1082] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.388538][ T5832] lo speed is unknown, defaulting to 1000 [ 86.461579][ T5829] lo speed is unknown, defaulting to 1000 [ 86.532033][ T5841] lo speed is unknown, defaulting to 1000 [ 86.636828][ T1082] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.689031][ T5842] lo speed is unknown, defaulting to 1000 [ 86.806322][ T5826] lo speed is unknown, defaulting to 1000 [ 86.869867][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.869928][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.870029][ T5832] bridge_slave_0: entered allmulticast mode [ 86.870564][ T5832] bridge_slave_0: entered promiscuous mode [ 86.912772][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.912866][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.912940][ T5832] bridge_slave_1: entered allmulticast mode [ 86.913428][ T5832] bridge_slave_1: entered promiscuous mode [ 86.996395][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.029523][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.047260][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.047324][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.047385][ T5841] bridge_slave_0: entered allmulticast mode [ 87.056605][ T5841] bridge_slave_0: entered promiscuous mode [ 87.096147][ T5832] team0: Port device team_slave_0 added [ 87.103320][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.103351][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.103429][ T5841] bridge_slave_1: entered allmulticast mode [ 87.103900][ T5841] bridge_slave_1: entered promiscuous mode [ 87.166390][ T1082] bridge_slave_1: left allmulticast mode [ 87.166432][ T1082] bridge_slave_1: left promiscuous mode [ 87.166931][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.177486][ T1082] bridge_slave_0: left allmulticast mode [ 87.177500][ T1082] bridge_slave_0: left promiscuous mode [ 87.177569][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.280941][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.312701][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.324039][ T1082] bond0 (unregistering): Released all slaves [ 87.334191][ T5832] team0: Port device team_slave_1 added [ 87.334402][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.334430][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.334496][ T5829] bridge_slave_0: entered allmulticast mode [ 87.334949][ T5829] bridge_slave_0: entered promiscuous mode [ 87.335754][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.335784][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.335849][ T5829] bridge_slave_1: entered allmulticast mode [ 87.336243][ T5829] bridge_slave_1: entered promiscuous mode [ 87.384800][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.385717][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.386740][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.427230][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.427243][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.427257][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.427773][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.427780][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.427793][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.452127][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.455974][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 87.475964][ T5829] team0: Port device team_slave_0 added [ 87.476747][ T5829] team0: Port device team_slave_1 added [ 87.496353][ T5841] team0: Port device team_slave_0 added [ 87.497180][ T5841] team0: Port device team_slave_1 added [ 87.526826][ T5832] hsr_slave_0: entered promiscuous mode [ 87.527150][ T5832] hsr_slave_1: entered promiscuous mode [ 87.527346][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 87.527356][ T5832] Cannot create hsr debugfs directory [ 87.527689][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.527697][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.527711][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.528320][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.528326][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.528339][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.580378][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.580391][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.580403][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.581859][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.581869][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.581885][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.689668][ T4716] Bluetooth: hci5: command tx timeout [ 87.779455][ T4716] Bluetooth: hci4: command tx timeout [ 87.851057][ T4716] Bluetooth: hci7: command tx timeout [ 87.900787][ T5829] hsr_slave_0: entered promiscuous mode [ 87.901887][ T5829] hsr_slave_1: entered promiscuous mode [ 87.902130][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 87.902140][ T5829] Cannot create hsr debugfs directory [ 87.903621][ T5841] hsr_slave_0: entered promiscuous mode [ 87.904200][ T5841] hsr_slave_1: entered promiscuous mode [ 87.904435][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 87.904444][ T5841] Cannot create hsr debugfs directory [ 87.920229][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.920294][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.920354][ T5842] bridge_slave_0: entered allmulticast mode [ 87.920820][ T5842] bridge_slave_0: entered promiscuous mode [ 87.934751][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.934819][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.934885][ T5842] bridge_slave_1: entered allmulticast mode [ 87.935347][ T5842] bridge_slave_1: entered promiscuous mode [ 88.015907][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.015973][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.016042][ T5826] bridge_slave_0: entered allmulticast mode [ 88.016634][ T5826] bridge_slave_0: entered promiscuous mode [ 88.022342][ T4716] Bluetooth: hci1: command tx timeout [ 88.027210][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.027233][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.027294][ T5826] bridge_slave_1: entered allmulticast mode [ 88.027781][ T5826] bridge_slave_1: entered promiscuous mode [ 88.089237][ T4716] Bluetooth: hci2: command tx timeout [ 88.165929][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.189480][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 88.201914][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.230083][ T5842] team0: Port device team_slave_0 added [ 88.235742][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.295989][ T5842] team0: Port device team_slave_1 added [ 88.306743][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.319544][ T5826] team0: Port device team_slave_0 added [ 88.323129][ T5826] team0: Port device team_slave_1 added [ 88.391579][ T1082] hsr_slave_0: left promiscuous mode [ 88.409609][ T1082] hsr_slave_1: left promiscuous mode [ 88.410665][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.410688][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.430112][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.430125][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.453727][ T1082] veth1_macvtap: left promiscuous mode [ 88.453766][ T1082] veth0_macvtap: left promiscuous mode [ 88.453822][ T1082] veth1_vlan: left promiscuous mode [ 88.453896][ T1082] veth0_vlan: left promiscuous mode [ 88.595141][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 88.608176][ T1082] team0 (unregistering): Port device team_slave_0 removed [ 88.664860][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.664873][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.664885][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.665493][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.665501][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.665516][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.737634][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.737647][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.737662][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.757089][ T5842] hsr_slave_0: entered promiscuous mode [ 88.757448][ T5842] hsr_slave_1: entered promiscuous mode [ 88.757671][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 88.757682][ T5842] Cannot create hsr debugfs directory [ 88.765436][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.765445][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.765461][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.006634][ T5832] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 89.009072][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.009771][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 89.018334][ T5826] hsr_slave_0: entered promiscuous mode [ 89.018629][ T5826] hsr_slave_1: entered promiscuous mode [ 89.018808][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 89.030528][ T5826] Cannot create hsr debugfs directory [ 89.030651][ T5832] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 89.035543][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.038736][ T5832] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 89.057142][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.080763][ T5832] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 89.085536][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.179636][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.186129][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.237986][ T3847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.238015][ T3847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.238552][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.238570][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.254438][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.254451][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.438644][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.565950][ T5832] veth0_vlan: entered promiscuous mode [ 89.570844][ T5832] veth1_vlan: entered promiscuous mode [ 89.577465][ T5832] veth0_macvtap: entered promiscuous mode [ 89.578582][ T5832] veth1_macvtap: entered promiscuous mode [ 89.591960][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.674307][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.733250][ T3299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.733264][ T3299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.760566][ T3299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.760579][ T3299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.770129][ T4716] Bluetooth: hci5: command tx timeout [ 89.774271][ T3847] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.776863][ T3847] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.776884][ T3847] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.776904][ T3847] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.859386][ T4716] Bluetooth: hci4: command tx timeout [ 89.959171][ T4716] Bluetooth: hci7: command tx timeout [ 90.021734][ T1082] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.086425][ T1082] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.100677][ T4716] Bluetooth: hci1: command tx timeout [ 90.117877][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.123767][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.124565][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.125571][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.125918][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.127113][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.127493][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.138877][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.160016][ T1082] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.169030][ T4716] Bluetooth: hci2: command tx timeout [ 90.180622][ T5829] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 90.184526][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.184871][ T5829] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 90.185895][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.192228][ T5829] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 90.194150][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.208491][ T5842] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.214117][ T5829] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 90.215446][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.224141][ T1082] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.260168][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.265574][ T5842] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.278177][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.282413][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.284217][ T3847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.284243][ T3847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.286424][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.286445][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.299020][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.302372][ T3847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.302406][ T3847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.304369][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.304390][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.316788][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.377873][ T5842] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.387879][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.438175][ T1082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.490386][ T5842] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.517482][ T1082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.587039][ T1082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.607279][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.608157][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 90.618355][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.644348][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.654164][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.666645][ T1082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.675960][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.678279][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.683481][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.684616][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.687652][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.693230][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.712686][ T5841] veth0_vlan: entered promiscuous mode [ 90.762265][ T5841] veth1_vlan: entered promiscuous mode [ 90.789157][ T3847] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.845786][ T5841] veth0_macvtap: entered promiscuous mode [ 90.881284][ T5841] veth1_macvtap: entered promiscuous mode [ 90.895754][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 90.905598][ T5829] veth0_vlan: entered promiscuous mode [ 90.907901][ T5826] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 90.912182][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.917306][ T6122] netlink: 'syz.9.339': attribute type 1 has an invalid length. [ 90.927960][ T1082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.945512][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.947554][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.950823][ T5829] veth1_vlan: entered promiscuous mode [ 90.951925][ T5826] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 90.954029][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.955898][ T5826] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 90.957511][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.969615][ T5826] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 90.971493][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.985564][ T5829] veth0_macvtap: entered promiscuous mode [ 90.990581][ T5829] veth1_macvtap: entered promiscuous mode [ 90.994092][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.998037][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.001360][ T6125] rdma_rxe: rxe_newlink: failed to add lo [ 91.019169][ T1082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.024050][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.089393][ T1082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.101818][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.101838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.113690][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.139545][ T1159] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.140065][ T1159] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.140084][ T1159] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.140101][ T1159] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.164394][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.164679][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.170015][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.170200][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.170321][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.170352][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.190310][ T1082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.201305][ T3847] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.201334][ T3847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.217065][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.217092][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.244598][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.245167][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.245179][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.270439][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.270457][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.296045][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 91.301010][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.312340][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.312369][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.312880][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.312909][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.326542][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.326558][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.416711][ T1082] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.514260][ T1082] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.568226][ T6179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.582175][ T1082] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.587315][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.635690][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.636113][ T6179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.670196][ T1082] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.695181][ T6179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.714904][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 91.723358][ T5826] veth0_vlan: entered promiscuous mode [ 91.751437][ T5826] veth1_vlan: entered promiscuous mode [ 91.805876][ T5826] veth0_macvtap: entered promiscuous mode [ 91.812563][ T1082] bridge_slave_1: left allmulticast mode [ 91.812583][ T1082] bridge_slave_1: left promiscuous mode [ 91.812692][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.813979][ T1082] bridge_slave_0: left allmulticast mode [ 91.813993][ T1082] bridge_slave_0: left promiscuous mode [ 91.814059][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.825840][ T1082] bridge_slave_1: left allmulticast mode [ 91.825856][ T1082] bridge_slave_1: left promiscuous mode [ 91.825915][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.827337][ T1082] bridge_slave_0: left allmulticast mode [ 91.827351][ T1082] bridge_slave_0: left promiscuous mode [ 91.827405][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.847412][ T1082] bridge_slave_1: left allmulticast mode [ 91.847430][ T1082] bridge_slave_1: left promiscuous mode [ 91.847503][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.848550][ T1082] bridge_slave_0: left allmulticast mode [ 91.848560][ T1082] bridge_slave_0: left promiscuous mode [ 91.848610][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.849176][ T4722] Bluetooth: hci5: command tx timeout [ 91.861424][ T1082] bridge_slave_1: left allmulticast mode [ 91.861440][ T1082] bridge_slave_1: left promiscuous mode [ 91.861503][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.862868][ T1082] bridge_slave_0: left allmulticast mode [ 91.862879][ T1082] bridge_slave_0: left promiscuous mode [ 91.862940][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.930211][ T4722] Bluetooth: hci4: command tx timeout [ 92.001047][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.009637][ T4722] Bluetooth: hci7: command tx timeout [ 92.017916][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.039789][ T1082] bond0 (unregistering): Released all slaves [ 92.080997][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.110463][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.139881][ T1082] bond0 (unregistering): Released all slaves [ 92.169412][ T4722] Bluetooth: hci1: command tx timeout [ 92.183745][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.210538][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.240329][ T1082] bond0 (unregistering): Released all slaves [ 92.249075][ T4722] Bluetooth: hci2: command tx timeout [ 92.279780][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.293297][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.294436][ T1082] bond0 (unregistering): Released all slaves [ 92.344649][ T1082] bond0 (unregistering): Released all slaves [ 92.347959][ T1082] bond1 (unregistering): Released all slaves [ 92.358588][ T5826] veth1_macvtap: entered promiscuous mode [ 92.360803][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 92.370941][ T6226] FAULT_INJECTION: forcing a failure. [ 92.370941][ T6226] name failslab, interval 1, probability 0, space 0, times 0 [ 92.370959][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.8.346 Not tainted syzkaller #0 PREEMPT [ 92.370969][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.370975][ T6226] Call trace: [ 92.370978][ T6226] show_stack+0x2c/0x3c (C) [ 92.370997][ T6226] __dump_stack+0x30/0x40 [ 92.371009][ T6226] dump_stack_lvl+0xd8/0x12c [ 92.371020][ T6226] dump_stack+0x1c/0x28 [ 92.371031][ T6226] should_fail_ex+0x41c/0x590 [ 92.371045][ T6226] should_failslab+0xc4/0x120 [ 92.371058][ T6226] __kmalloc_noprof+0x108/0x6c8 [ 92.371066][ T6226] ops_init+0x7c/0x528 [ 92.371078][ T6226] setup_net+0x118/0x2fc [ 92.371087][ T6226] copy_net_ns+0x454/0x698 [ 92.371096][ T6226] create_new_namespaces+0x304/0x50c [ 92.371107][ T6226] unshare_nsproxy_namespaces+0x120/0x170 [ 92.371118][ T6226] ksys_unshare+0x438/0x6cc [ 92.371127][ T6226] __arm64_sys_unshare+0x40/0x54 [ 92.371136][ T6226] invoke_syscall+0x98/0x244 [ 92.371148][ T6226] el0_svc_common+0xec/0x23c [ 92.371159][ T6226] do_el0_svc+0x4c/0x5c [ 92.371170][ T6226] el0_svc+0x64/0x260 [ 92.371182][ T6226] el0t_64_sync_handler+0x44/0x104 [ 92.371192][ T6226] el0t_64_sync+0x198/0x19c [ 92.403797][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.416438][ T5842] veth0_vlan: entered promiscuous mode [ 92.427017][ T1082] tipc: Left network mode [ 92.431965][ T5842] veth1_vlan: entered promiscuous mode [ 92.435548][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.455961][ T1082] tipc: Left network mode [ 92.463244][ T1082] tipc: Left network mode [ 92.497595][ T6231] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 92.497968][ T6231] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 92.498323][ T6231] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 92.498679][ T6231] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 92.504679][ T5842] veth0_macvtap: entered promiscuous mode [ 92.506034][ T5842] veth1_macvtap: entered promiscuous mode [ 92.509159][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509233][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509287][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509312][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.524063][ T4388] nvmet_tcp: pdu 0 bad hlen 0 [ 92.556403][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.562821][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.652499][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.671513][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.671528][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.710919][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 92.721856][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.759514][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.764014][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.764026][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.766135][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.768317][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.768326][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.776629][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.776640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.779458][ T3299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.779488][ T3299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.959522][ T6267] tipc: Started in network mode [ 92.959548][ T6267] tipc: Node identity 4, cluster identity 4711 [ 92.959555][ T6267] tipc: Node number set to 4 [ 92.965717][ T6267] tipc: Enabled bearer , priority 0 [ 93.025795][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 93.027893][ T6268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.083774][ T1082] batman_adv: batadv0: Interface deactivated: wlan0 [ 93.085219][ T6268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.085835][ T865] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 93.085850][ T865] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 93.103108][ T1082] batman_adv: batadv0: Removing interface: wlan0 [ 93.144999][ T6287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.171194][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 93.193508][ T13] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 93.197497][ T1159] wlan1: authenticated [ 93.197585][ T26] wlan1: aborting authentication with 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 93.198063][ T6287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.300350][ T4722] Bluetooth: hci3: command 0x1003 tx timeout [ 93.300561][ T4716] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 93.307557][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 93.333907][ T6154] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 93.485955][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 93.629914][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 93.678906][ C1] llcp: nfc_llcp_symm_timer: SYMM timeout [ 93.796263][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 93.913111][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.913126][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.929219][ T4722] Bluetooth: hci5: command tx timeout [ 93.946744][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 94.009352][ T4722] Bluetooth: hci4: command tx timeout [ 94.012564][ C0] ------------[ cut here ]------------ [ 94.012572][ C0] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#0: dhcpcd-run-hook/6395 [ 94.012837][ C1] ------------[ cut here ]------------ [ 94.012846][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 94.012879][ C1] Modules linked in: [ 94.012890][ C1] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT [ 94.012901][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.012906][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 94.012920][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.012929][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.012939][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.012948][ C1] sp : ffff80008ebe7150 [ 94.012952][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff000111d69890 [ 94.012964][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.012976][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 94.012987][ C1] x20: ffff000121810000 x19: ffff000111d69800 x18: 00000000f877736b [ 94.012999][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 94.013010][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.013021][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 94.013032][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.013043][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.013053][ C1] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 94.013064][ C1] Call trace: [ 94.013067][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.013080][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.013091][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.013102][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.013114][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.013124][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.013134][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.013143][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.013151][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.013164][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.013172][ C1] tasklet_action_common+0x1dc/0x278 [ 94.013182][ C1] tasklet_action+0x68/0x8c [ 94.013190][ C1] handle_softirqs+0x2ec/0xd98 [ 94.013198][ C1] __do_softirq+0x14/0x20 [ 94.013206][ C1] ____do_softirq+0x14/0x20 [ 94.013215][ C1] call_on_irq_stack+0x30/0x48 [ 94.013223][ C1] do_softirq_own_stack+0x20/0x2c [ 94.013231][ C1] do_softirq+0x90/0xf8 [ 94.013238][ C1] __local_bh_enable_ip+0x240/0x35c [ 94.013247][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 94.013257][ C1] __ip6_ins_rt+0x6c/0x84 [ 94.013266][ C1] ip6_ins_rt+0x9c/0xf0 [ 94.013274][ C1] __ipv6_ifa_notify+0x478/0x6d0 [ 94.013285][ C1] addrconf_dad_completed+0x11c/0x9e4 [ 94.013296][ C1] addrconf_dad_work+0x8a4/0xfe8 [ 94.013306][ C1] process_scheduled_works+0x91c/0x1250 [ 94.013316][ C1] worker_thread+0x798/0xbd0 [ 94.013325][ C1] kthread+0x304/0x3d4 [ 94.013334][ C1] ret_from_fork+0x10/0x20 [ 94.013341][ C1] irq event stamp: 651137 [ 94.013345][ C1] hardirqs last enabled at (651136): [] kcov_remote_start+0x190/0x560 [ 94.013356][ C1] hardirqs last disabled at (651137): [] el1_brk64+0x20/0x54 [ 94.013366][ C1] softirqs last enabled at (650662): [] __ip6_ins_rt+0x6c/0x84 [ 94.013376][ C1] softirqs last disabled at (650663): [] __do_softirq+0x14/0x20 [ 94.013384][ C1] ---[ end trace 0000000000000000 ]--- [ 94.014370][ T54] ------------[ cut here ]------------ [ 94.014376][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 94.014392][ T54] Modules linked in: [ 94.014398][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 94.014408][ T54] Tainted: [W]=WARN [ 94.014411][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.014415][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 94.014426][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.014434][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.014446][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.014455][ T54] sp : ffff800090336ed0 [ 94.014458][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff000121d78c90 [ 94.014469][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.014479][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 94.014490][ T54] x20: ffff000121810000 x19: ffff000121d78c00 x18: 00000000f877736b [ 94.014500][ T54] x17: ffff800086065c28 x16: ffff8000860613ec x15: 0000000000000000 [ 94.014510][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.014520][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.014530][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.014540][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.014549][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 94.014559][ T54] Call trace: [ 94.014562][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.014572][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.014583][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.014593][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.014603][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 94.014613][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.014621][ T54] ieee80211_iface_work+0x600/0xd3c [ 94.014628][ T54] cfg80211_wiphy_work+0x278/0x588 [ 94.014639][ T54] process_scheduled_works+0x91c/0x1250 [ 94.014648][ T54] worker_thread+0x798/0xbd0 [ 94.014656][ T54] kthread+0x304/0x3d4 [ 94.014663][ T54] ret_from_fork+0x10/0x20 [ 94.014671][ T54] irq event stamp: 651805 [ 94.014674][ T54] hardirqs last enabled at (651804): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 94.014685][ T54] hardirqs last disabled at (651805): [] el1_brk64+0x20/0x54 [ 94.014694][ T54] softirqs last enabled at (651788): [] ieee80211_ibss_work+0x2d0/0xd9c [ 94.014702][ T54] softirqs last disabled at (651802): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.014714][ T54] ---[ end trace 0000000000000000 ]--- [ 94.089306][ T4722] Bluetooth: hci7: command tx timeout [ 94.115350][ C1] ------------[ cut here ]------------ [ 94.115358][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz.4.359/6371 [ 94.115383][ C1] Modules linked in: [ 94.115393][ C1] CPU: 1 UID: 0 PID: 6371 Comm: syz.4.359 Tainted: G W syzkaller #0 PREEMPT [ 94.115404][ C1] Tainted: [W]=WARN [ 94.115408][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.115413][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.115421][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.115431][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.115440][ C1] sp : ffff80008ebe7150 [ 94.115443][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff000121d78090 [ 94.115456][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.115468][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 94.115479][ C1] x20: ffff000121810000 x19: ffff000121d78000 x18: 00000000626f44a5 [ 94.115491][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.115502][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.115513][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 94.115524][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.115534][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.115545][ C1] x2 : 0000000000000001 x1 : ffff0000d03d9d80 x0 : 0000000000000000 [ 94.115556][ C1] Call trace: [ 94.115559][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.115572][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.115583][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.115594][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.115606][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.115616][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.115626][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.115635][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.115643][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.115655][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.115663][ C1] tasklet_action_common+0x1dc/0x278 [ 94.115674][ C1] tasklet_action+0x68/0x8c [ 94.115682][ C1] handle_softirqs+0x2ec/0xd98 [ 94.115690][ C1] __do_softirq+0x14/0x20 [ 94.115698][ C1] ____do_softirq+0x14/0x20 [ 94.115707][ C1] call_on_irq_stack+0x30/0x48 [ 94.115715][ C1] do_softirq_own_stack+0x20/0x2c [ 94.115723][ C1] do_softirq+0x90/0xf8 [ 94.115730][ C1] __local_bh_enable_ip+0x240/0x35c [ 94.115739][ C1] fpsimd_restore_current_state+0x3a4/0x9c8 [ 94.115748][ C1] exit_to_user_mode_loop+0xe0/0x17c [ 94.115758][ C1] el0_svc+0x18c/0x260 [ 94.115768][ C1] el0t_64_sync_handler+0x44/0x104 [ 94.115778][ C1] el0t_64_sync+0x198/0x19c [ 94.115786][ C1] irq event stamp: 8479 [ 94.115789][ C1] hardirqs last enabled at (8478): [] kcov_remote_start+0x190/0x560 [ 94.115800][ C1] hardirqs last disabled at (8479): [] el1_brk64+0x20/0x54 [ 94.115810][ C1] softirqs last enabled at (8278): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 94.115820][ C1] softirqs last disabled at (8279): [] __do_softirq+0x14/0x20 [ 94.115835][ C1] ---[ end trace 0000000000000000 ]--- [ 94.116972][ T54] ------------[ cut here ]------------ [ 94.116978][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 94.116995][ T54] Modules linked in: [ 94.117001][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 94.117011][ T54] Tainted: [W]=WARN [ 94.117013][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.117018][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 94.117031][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.117038][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.117047][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.117055][ T54] sp : ffff800090336ed0 [ 94.117058][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0000d926a890 [ 94.117070][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.117080][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 94.117091][ T54] x20: ffff000121810000 x19: ffff0000d926a800 x18: 1fffe00035bb1028 [ 94.117101][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.117111][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.117121][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.117131][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.117141][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.117150][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 94.117160][ T54] Call trace: [ 94.117162][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.117173][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.117184][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.117194][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.117204][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 94.117214][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.117222][ T54] ieee80211_iface_work+0x600/0xd3c [ 94.117230][ T54] cfg80211_wiphy_work+0x278/0x588 [ 94.117240][ T54] process_scheduled_works+0x91c/0x1250 [ 94.117249][ T54] worker_thread+0x798/0xbd0 [ 94.117258][ T54] kthread+0x304/0x3d4 [ 94.117265][ T54] ret_from_fork+0x10/0x20 [ 94.117272][ T54] irq event stamp: 658781 [ 94.117275][ T54] hardirqs last enabled at (658779): [] kcov_remote_start+0x190/0x560 [ 94.117284][ T54] hardirqs last disabled at (658781): [] el1_brk64+0x20/0x54 [ 94.117294][ T54] softirqs last enabled at (658768): [] handle_softirqs+0xc28/0xd98 [ 94.117302][ T54] softirqs last disabled at (658780): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.117314][ T54] ---[ end trace 0000000000000000 ]--- [ 94.217618][ C1] ------------[ cut here ]------------ [ 94.217627][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 94.217651][ C1] Modules linked in: [ 94.217662][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 94.217674][ C1] Tainted: [W]=WARN [ 94.217677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.217682][ C1] Workqueue: events_unbound toggle_allocation_gate [ 94.217696][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.217704][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.217714][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.217723][ C1] sp : ffff80008ebe7150 [ 94.217727][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d926ac90 [ 94.217740][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.217751][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 94.217763][ C1] x20: ffff000121810000 x19: ffff0000d926ac00 x18: 00000000626f44a5 [ 94.217774][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 94.217785][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.217796][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 94.217807][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.217818][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.217834][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 94.217845][ C1] Call trace: [ 94.217849][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.217862][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.217873][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.217884][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.217896][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.217906][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.217916][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.217925][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.217933][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.217946][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.217953][ C1] tasklet_action_common+0x1dc/0x278 [ 94.217963][ C1] tasklet_action+0x68/0x8c [ 94.217971][ C1] handle_softirqs+0x2ec/0xd98 [ 94.217979][ C1] __do_softirq+0x14/0x20 [ 94.217988][ C1] ____do_softirq+0x14/0x20 [ 94.217997][ C1] call_on_irq_stack+0x30/0x48 [ 94.218004][ C1] do_softirq_own_stack+0x20/0x2c [ 94.218012][ C1] __irq_exit_rcu+0x1ac/0x428 [ 94.218020][ C1] irq_exit_rcu+0x14/0x84 [ 94.218028][ C1] el1_interrupt+0x40/0x60 [ 94.218039][ C1] el1h_64_irq_handler+0x18/0x24 [ 94.218048][ C1] el1h_64_irq+0x6c/0x70 [ 94.218056][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 94.218068][ C1] kick_all_cpus_sync+0x34/0x40 [ 94.218079][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 94.218088][ C1] __jump_label_update+0x31c/0x344 [ 94.218096][ C1] jump_label_update+0x428/0x4b8 [ 94.218107][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 94.218119][ C1] static_key_enable+0x24/0x38 [ 94.218130][ C1] toggle_allocation_gate+0xb8/0x28c [ 94.218141][ C1] process_scheduled_works+0x91c/0x1250 [ 94.218151][ C1] worker_thread+0x798/0xbd0 [ 94.218160][ C1] kthread+0x304/0x3d4 [ 94.218168][ C1] ret_from_fork+0x10/0x20 [ 94.218176][ C1] irq event stamp: 177757 [ 94.218179][ C1] hardirqs last enabled at (177756): [] kcov_remote_start+0x190/0x560 [ 94.218190][ C1] hardirqs last disabled at (177757): [] el1_brk64+0x20/0x54 [ 94.218201][ C1] softirqs last enabled at (177284): [] handle_softirqs+0xc28/0xd98 [ 94.218210][ C1] softirqs last disabled at (177287): [] __do_softirq+0x14/0x20 [ 94.218218][ C1] ---[ end trace 0000000000000000 ]--- [ 94.220797][ T54] ------------[ cut here ]------------ [ 94.220803][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 94.220821][ T54] Modules linked in: [ 94.220832][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 94.220844][ T54] Tainted: [W]=WARN [ 94.220847][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.220851][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 94.220863][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.220871][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.220880][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.220888][ T54] sp : ffff800090336ed0 [ 94.220891][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0000d9268490 [ 94.220902][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.220912][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 94.220923][ T54] x20: ffff000121810000 x19: ffff0000d9268400 x18: 00000000d8fda138 [ 94.220933][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.220943][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.220953][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.220962][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.220972][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.220982][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 94.220991][ T54] Call trace: [ 94.220994][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.221004][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.221015][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.221025][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.221035][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 94.221045][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.221053][ T54] ieee80211_iface_work+0x600/0xd3c [ 94.221061][ T54] cfg80211_wiphy_work+0x278/0x588 [ 94.221071][ T54] process_scheduled_works+0x91c/0x1250 [ 94.221080][ T54] worker_thread+0x798/0xbd0 [ 94.221088][ T54] kthread+0x304/0x3d4 [ 94.221096][ T54] ret_from_fork+0x10/0x20 [ 94.221103][ T54] irq event stamp: 673771 [ 94.221106][ T54] hardirqs last enabled at (673769): [] kcov_remote_start+0x190/0x560 [ 94.221115][ T54] hardirqs last disabled at (673771): [] el1_brk64+0x20/0x54 [ 94.221125][ T54] softirqs last enabled at (673758): [] handle_softirqs+0xc28/0xd98 [ 94.221133][ T54] softirqs last disabled at (673770): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.221144][ T54] ---[ end trace 0000000000000000 ]--- [ 94.253547][ T4722] Bluetooth: hci1: command tx timeout [ 94.320036][ C1] ------------[ cut here ]------------ [ 94.320046][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 94.320078][ C1] Modules linked in: [ 94.320089][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 94.320101][ C1] Tainted: [W]=WARN [ 94.320105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.320110][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.320119][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.320129][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.320139][ C1] sp : ffff80008edc6ef0 [ 94.320142][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000c9eec090 [ 94.320155][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.320166][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 94.320178][ C1] x20: ffff000121810000 x19: ffff0000c9eec000 x18: 1fffe00035bb1028 [ 94.320189][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 94.320201][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.320211][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 94.320222][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.320233][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.320244][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 94.320255][ C1] Call trace: [ 94.320258][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.320271][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.320282][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.320293][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.320305][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.320316][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.320325][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.320334][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.320343][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.320355][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.320363][ C1] tasklet_action_common+0x1dc/0x278 [ 94.320373][ C1] tasklet_action+0x68/0x8c [ 94.320381][ C1] handle_softirqs+0x2ec/0xd98 [ 94.320390][ C1] run_ksoftirqd+0x70/0xbc [ 94.320398][ C1] smpboot_thread_fn+0x4e4/0x97c [ 94.320407][ C1] kthread+0x304/0x3d4 [ 94.320416][ C1] ret_from_fork+0x10/0x20 [ 94.320425][ C1] irq event stamp: 20803841 [ 94.320428][ C1] hardirqs last enabled at (20803840): [] kcov_remote_start+0x190/0x560 [ 94.320440][ C1] hardirqs last disabled at (20803841): [] el1_brk64+0x20/0x54 [ 94.320451][ C1] softirqs last enabled at (20803324): [] handle_softirqs+0xc28/0xd98 [ 94.320460][ C1] softirqs last disabled at (20803327): [] run_ksoftirqd+0x70/0xbc [ 94.320469][ C1] ---[ end trace 0000000000000000 ]--- [ 94.321614][ T54] ------------[ cut here ]------------ [ 94.321621][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 94.321645][ T54] Modules linked in: [ 94.321652][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 94.321661][ T54] Tainted: [W]=WARN [ 94.321664][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.321669][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 94.321681][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.321688][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.321697][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.321706][ T54] sp : ffff800090336ed0 [ 94.321709][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0000c9eed890 [ 94.321720][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.321730][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 94.321741][ T54] x20: ffff000121810000 x19: ffff0000c9eed800 x18: 1fffe00035bb1028 [ 94.321751][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.321762][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.321771][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.321782][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.321791][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.321801][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 94.321811][ T54] Call trace: [ 94.321813][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.321824][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.321841][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.321852][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.321863][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 94.321872][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.321880][ T54] ieee80211_iface_work+0x600/0xd3c [ 94.321888][ T54] cfg80211_wiphy_work+0x278/0x588 [ 94.321898][ T54] process_scheduled_works+0x91c/0x1250 [ 94.321907][ T54] worker_thread+0x798/0xbd0 [ 94.321916][ T54] kthread+0x304/0x3d4 [ 94.321923][ T54] ret_from_fork+0x10/0x20 [ 94.321931][ T54] irq event stamp: 685301 [ 94.321934][ T54] hardirqs last enabled at (685299): [] kcov_remote_start+0x190/0x560 [ 94.321943][ T54] hardirqs last disabled at (685301): [] el1_brk64+0x20/0x54 [ 94.321952][ T54] softirqs last enabled at (685286): [] handle_softirqs+0xc28/0xd98 [ 94.321961][ T54] softirqs last disabled at (685300): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.321972][ T54] ---[ end trace 0000000000000000 ]--- [ 94.331143][ T4722] Bluetooth: hci2: command tx timeout [ 94.422421][ C1] ------------[ cut here ]------------ [ 94.422430][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 94.422455][ C1] Modules linked in: [ 94.422465][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 94.422477][ C1] Tainted: [W]=WARN [ 94.422480][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.422485][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.422493][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.422503][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.422512][ C1] sp : ffff80008edc6ef0 [ 94.422516][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000c9eed090 [ 94.422528][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.422540][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 94.422552][ C1] x20: ffff000121810000 x19: ffff0000c9eed000 x18: 1fffe00035bb1028 [ 94.422563][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 94.422574][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.422585][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 94.422596][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.422607][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.422618][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 94.422629][ C1] Call trace: [ 94.422632][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.422644][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.422656][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.422667][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.422678][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.422689][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.422699][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.422707][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.422716][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.422729][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.422736][ C1] tasklet_action_common+0x1dc/0x278 [ 94.422747][ C1] tasklet_action+0x68/0x8c [ 94.422755][ C1] handle_softirqs+0x2ec/0xd98 [ 94.422763][ C1] run_ksoftirqd+0x70/0xbc [ 94.422771][ C1] smpboot_thread_fn+0x4e4/0x97c [ 94.422780][ C1] kthread+0x304/0x3d4 [ 94.422788][ C1] ret_from_fork+0x10/0x20 [ 94.422798][ C1] irq event stamp: 20878187 [ 94.422801][ C1] hardirqs last enabled at (20878186): [] kcov_remote_start+0x190/0x560 [ 94.422812][ C1] hardirqs last disabled at (20878187): [] el1_brk64+0x20/0x54 [ 94.422824][ C1] softirqs last enabled at (20877664): [] handle_softirqs+0xc28/0xd98 [ 94.422837][ C1] softirqs last disabled at (20877667): [] run_ksoftirqd+0x70/0xbc [ 94.422847][ C1] ---[ end trace 0000000000000000 ]--- [ 94.423925][ T13] ------------[ cut here ]------------ [ 94.423929][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 94.423947][ T13] Modules linked in: [ 94.423954][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 94.423964][ T13] Tainted: [W]=WARN [ 94.423967][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.423972][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 94.423983][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.423991][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.424000][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.424008][ T13] sp : ffff80008ed16ed0 [ 94.424011][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000c9eed490 [ 94.424022][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.424033][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 94.424043][ T13] x20: ffff000121810000 x19: ffff0000c9eed400 x18: 1fffe00035bb1028 [ 94.424054][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.424064][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.424073][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.424084][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.424093][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.424103][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 94.424113][ T13] Call trace: [ 94.424115][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.424126][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.424137][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.424147][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.424157][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 94.424166][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.424174][ T13] ieee80211_iface_work+0x600/0xd3c [ 94.424182][ T13] cfg80211_wiphy_work+0x278/0x588 [ 94.424192][ T13] process_scheduled_works+0x91c/0x1250 [ 94.424201][ T13] worker_thread+0x798/0xbd0 [ 94.424210][ T13] kthread+0x304/0x3d4 [ 94.424217][ T13] ret_from_fork+0x10/0x20 [ 94.424224][ T13] irq event stamp: 1554391 [ 94.424227][ T13] hardirqs last enabled at (1554389): [] kcov_remote_start+0x190/0x560 [ 94.424237][ T13] hardirqs last disabled at (1554391): [] el1_brk64+0x20/0x54 [ 94.424246][ T13] softirqs last enabled at (1554378): [] handle_softirqs+0xc28/0xd98 [ 94.424255][ T13] softirqs last disabled at (1554390): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.424266][ T13] ---[ end trace 0000000000000000 ]--- [ 94.524845][ C1] ------------[ cut here ]------------ [ 94.524855][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz.4.359/6371 [ 94.524885][ C1] Modules linked in: [ 94.524895][ C1] CPU: 1 UID: 0 PID: 6371 Comm: syz.4.359 Tainted: G W syzkaller #0 PREEMPT [ 94.524907][ C1] Tainted: [W]=WARN [ 94.524910][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.524915][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.524923][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.524934][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.524943][ C1] sp : ffff80008ebe7150 [ 94.524946][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d2bb6490 [ 94.524959][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.524970][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 94.524984][ C1] x20: ffff000121810000 x19: ffff0000d2bb6400 x18: 1fffe00035bb1028 [ 94.524996][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 94.525007][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.525018][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 94.525029][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.525039][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.525050][ C1] x2 : 0000000000000001 x1 : ffff0000d03d9d80 x0 : 0000000000000000 [ 94.525061][ C1] Call trace: [ 94.525064][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.525077][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.525088][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.525099][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.525111][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.525122][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.525132][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.525141][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.525150][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.525164][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.525172][ C1] tasklet_action_common+0x1dc/0x278 [ 94.525182][ C1] tasklet_action+0x68/0x8c [ 94.525190][ C1] handle_softirqs+0x2ec/0xd98 [ 94.525198][ C1] __do_softirq+0x14/0x20 [ 94.525206][ C1] ____do_softirq+0x14/0x20 [ 94.525215][ C1] call_on_irq_stack+0x30/0x48 [ 94.525223][ C1] do_softirq_own_stack+0x20/0x2c [ 94.525230][ C1] do_softirq+0x90/0xf8 [ 94.525238][ C1] __local_bh_enable_ip+0x240/0x35c [ 94.525246][ C1] fpsimd_restore_current_state+0x3a4/0x9c8 [ 94.525255][ C1] exit_to_user_mode_loop+0xe0/0x17c [ 94.525266][ C1] el0_svc+0x18c/0x260 [ 94.525276][ C1] el0t_64_sync_handler+0x44/0x104 [ 94.525286][ C1] el0t_64_sync+0x198/0x19c [ 94.525294][ C1] irq event stamp: 33149 [ 94.525297][ C1] hardirqs last enabled at (33148): [] kcov_remote_start+0x190/0x560 [ 94.525308][ C1] hardirqs last disabled at (33149): [] el1_brk64+0x20/0x54 [ 94.525318][ C1] softirqs last enabled at (32676): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 94.525328][ C1] softirqs last disabled at (32677): [] __do_softirq+0x14/0x20 [ 94.525336][ C1] ---[ end trace 0000000000000000 ]--- [ 94.526638][ T13] ------------[ cut here ]------------ [ 94.526643][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 94.526661][ T13] Modules linked in: [ 94.526667][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 94.526677][ T13] Tainted: [W]=WARN [ 94.526680][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.526684][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 94.526696][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.526703][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.526712][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.526721][ T13] sp : ffff80008ed16ed0 [ 94.526724][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000d3306090 [ 94.526735][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.526745][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 94.526756][ T13] x20: ffff000121810000 x19: ffff0000d3306000 x18: 1fffe00035bb1028 [ 94.526766][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.526776][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.526786][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.526796][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.526806][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.526815][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 94.526830][ T13] Call trace: [ 94.526833][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.526844][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.526854][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.526864][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.526875][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 94.526884][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.526892][ T13] ieee80211_iface_work+0x600/0xd3c [ 94.526900][ T13] cfg80211_wiphy_work+0x278/0x588 [ 94.526910][ T13] process_scheduled_works+0x91c/0x1250 [ 94.526919][ T13] worker_thread+0x798/0xbd0 [ 94.526928][ T13] kthread+0x304/0x3d4 [ 94.526935][ T13] ret_from_fork+0x10/0x20 [ 94.526942][ T13] irq event stamp: 1570735 [ 94.526945][ T13] hardirqs last enabled at (1570733): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 94.526956][ T13] hardirqs last disabled at (1570735): [] el1_brk64+0x20/0x54 [ 94.526966][ T13] softirqs last enabled at (1570716): [] handle_softirqs+0xc28/0xd98 [ 94.526974][ T13] softirqs last disabled at (1570734): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.526985][ T13] ---[ end trace 0000000000000000 ]--- [ 94.627274][ C1] ------------[ cut here ]------------ [ 94.627284][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 94.627308][ C1] Modules linked in: [ 94.627318][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 94.627329][ C1] Tainted: [W]=WARN [ 94.627332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.627337][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.627345][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.627355][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.627364][ C1] sp : ffff80008ebe7150 [ 94.627367][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f1cadc90 [ 94.627380][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.627391][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 94.627403][ C1] x20: ffff000121810000 x19: ffff0000f1cadc00 x18: 1fffe00035bb1028 [ 94.627414][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 94.627425][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.627436][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 94.627447][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.627458][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.627468][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 94.627479][ C1] Call trace: [ 94.627482][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.627495][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.627507][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.627518][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.627529][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.627539][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.627549][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.627558][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.627566][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.627579][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.627586][ C1] tasklet_action_common+0x1dc/0x278 [ 94.627597][ C1] tasklet_action+0x68/0x8c [ 94.627605][ C1] handle_softirqs+0x2ec/0xd98 [ 94.627613][ C1] __do_softirq+0x14/0x20 [ 94.627621][ C1] ____do_softirq+0x14/0x20 [ 94.627630][ C1] call_on_irq_stack+0x30/0x48 [ 94.627637][ C1] do_softirq_own_stack+0x20/0x2c [ 94.627645][ C1] __irq_exit_rcu+0x1ac/0x428 [ 94.627653][ C1] irq_exit_rcu+0x14/0x84 [ 94.627661][ C1] el1_interrupt+0x40/0x60 [ 94.627671][ C1] el1h_64_irq_handler+0x18/0x24 [ 94.627681][ C1] el1h_64_irq+0x6c/0x70 [ 94.627688][ C1] run_ksoftirqd+0x78/0xbc (P) [ 94.627696][ C1] smpboot_thread_fn+0x4e4/0x97c [ 94.627705][ C1] kthread+0x304/0x3d4 [ 94.627713][ C1] ret_from_fork+0x10/0x20 [ 94.627721][ C1] irq event stamp: 21028675 [ 94.627724][ C1] hardirqs last enabled at (21028674): [] kcov_remote_start+0x190/0x560 [ 94.627736][ C1] hardirqs last disabled at (21028675): [] el1_brk64+0x20/0x54 [ 94.627746][ C1] softirqs last enabled at (21028186): [] handle_softirqs+0xc28/0xd98 [ 94.627755][ C1] softirqs last disabled at (21028189): [] __do_softirq+0x14/0x20 [ 94.627764][ C1] ---[ end trace 0000000000000000 ]--- [ 94.630051][ T1159] ------------[ cut here ]------------ [ 94.630057][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 94.630074][ T1159] Modules linked in: [ 94.630081][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 94.630091][ T1159] Tainted: [W]=WARN [ 94.630093][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.630098][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 94.630110][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.630117][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.630126][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.630134][ T1159] sp : ffff800093da6ed0 [ 94.630137][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff0000d8d3d890 [ 94.630148][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.630159][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 94.630169][ T1159] x20: ffff000121810000 x19: ffff0000d8d3d800 x18: 1fffe00035bb1028 [ 94.630179][ T1159] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.630189][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.630199][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.630209][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.630218][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.630228][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 94.630237][ T1159] Call trace: [ 94.630240][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.630250][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.630261][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.630271][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.630281][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 94.630291][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.630299][ T1159] ieee80211_iface_work+0x600/0xd3c [ 94.630307][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 94.630317][ T1159] process_scheduled_works+0x91c/0x1250 [ 94.630326][ T1159] worker_thread+0x798/0xbd0 [ 94.630335][ T1159] kthread+0x304/0x3d4 [ 94.630342][ T1159] ret_from_fork+0x10/0x20 [ 94.630349][ T1159] irq event stamp: 649983 [ 94.630352][ T1159] hardirqs last enabled at (649981): [] kcov_remote_start+0x190/0x560 [ 94.630361][ T1159] hardirqs last disabled at (649983): [] el1_brk64+0x20/0x54 [ 94.630371][ T1159] softirqs last enabled at (649968): [] handle_softirqs+0xc28/0xd98 [ 94.630379][ T1159] softirqs last disabled at (649982): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.630391][ T1159] ---[ end trace 0000000000000000 ]--- [ 94.730385][ C1] ------------[ cut here ]------------ [ 94.730395][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz.9.361/6388 [ 94.730421][ C1] Modules linked in: [ 94.730431][ C1] CPU: 1 UID: 0 PID: 6388 Comm: syz.9.361 Tainted: G W syzkaller #0 PREEMPT [ 94.730443][ C1] Tainted: [W]=WARN [ 94.730446][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.730451][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.730459][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.730469][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.730479][ C1] sp : ffff80008ebe7150 [ 94.730482][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d90c8c90 [ 94.730495][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.730506][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 94.730518][ C1] x20: ffff000121810000 x19: ffff0000d90c8c00 x18: 00000000626f44a5 [ 94.730529][ C1] x17: 0000000000020010 x16: 0038dd8600000000 x15: 0000000000000000 [ 94.730540][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.730551][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 94.730562][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.730573][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.730583][ C1] x2 : 0000000000000001 x1 : ffff0000d848bb00 x0 : 0000000000000000 [ 94.730594][ C1] Call trace: [ 94.730597][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.730610][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.730622][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.730633][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.730644][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.730656][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.730666][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.730677][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.730685][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.730701][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.730709][ C1] tasklet_action_common+0x1dc/0x278 [ 94.730719][ C1] tasklet_action+0x68/0x8c [ 94.730727][ C1] handle_softirqs+0x2ec/0xd98 [ 94.730735][ C1] __do_softirq+0x14/0x20 [ 94.730744][ C1] ____do_softirq+0x14/0x20 [ 94.730753][ C1] call_on_irq_stack+0x30/0x48 [ 94.730760][ C1] do_softirq_own_stack+0x20/0x2c [ 94.730768][ C1] do_softirq+0x90/0xf8 [ 94.730776][ C1] __local_bh_enable_ip+0x240/0x35c [ 94.730784][ C1] fpsimd_restore_current_state+0x3a4/0x9c8 [ 94.730793][ C1] exit_to_user_mode_loop+0xe0/0x17c [ 94.730804][ C1] el0_svc+0x18c/0x260 [ 94.730814][ C1] el0t_64_sync_handler+0x44/0x104 [ 94.730824][ C1] el0t_64_sync+0x198/0x19c [ 94.730837][ C1] irq event stamp: 42305 [ 94.730841][ C1] hardirqs last enabled at (42304): [] kcov_remote_start+0x190/0x560 [ 94.730853][ C1] hardirqs last disabled at (42305): [] el1_brk64+0x20/0x54 [ 94.730865][ C1] softirqs last enabled at (42050): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 94.730877][ C1] softirqs last disabled at (42051): [] __do_softirq+0x14/0x20 [ 94.730885][ C1] ---[ end trace 0000000000000000 ]--- [ 94.733174][ T1159] ------------[ cut here ]------------ [ 94.733180][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 94.733199][ T1159] Modules linked in: [ 94.733207][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 94.733217][ T1159] Tainted: [W]=WARN [ 94.733219][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.733224][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 94.733238][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.733246][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.733255][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.733264][ T1159] sp : ffff800093da6ed0 [ 94.733266][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff0000d6043c90 [ 94.733278][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.733288][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 94.733299][ T1159] x20: ffff000121810000 x19: ffff0000d6043c00 x18: 1fffe00035bb1028 [ 94.733309][ T1159] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.733319][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.733329][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.733339][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.733349][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.733359][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 94.733368][ T1159] Call trace: [ 94.733371][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.733382][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.733393][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.733403][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.733413][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 94.733422][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.733430][ T1159] ieee80211_iface_work+0x600/0xd3c [ 94.733438][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 94.733448][ T1159] process_scheduled_works+0x91c/0x1250 [ 94.733457][ T1159] worker_thread+0x798/0xbd0 [ 94.733466][ T1159] kthread+0x304/0x3d4 [ 94.733474][ T1159] ret_from_fork+0x10/0x20 [ 94.733481][ T1159] irq event stamp: 664463 [ 94.733484][ T1159] hardirqs last enabled at (664461): [] kcov_remote_start+0x190/0x560 [ 94.733493][ T1159] hardirqs last disabled at (664463): [] el1_brk64+0x20/0x54 [ 94.733503][ T1159] softirqs last enabled at (664450): [] handle_softirqs+0xc28/0xd98 [ 94.733512][ T1159] softirqs last disabled at (664462): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.733523][ T1159] ---[ end trace 0000000000000000 ]--- [ 94.831997][ C1] ------------[ cut here ]------------ [ 94.832007][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 94.832031][ C1] Modules linked in: [ 94.832041][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 94.832053][ C1] Tainted: [W]=WARN [ 94.832056][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.832061][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.832069][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.832079][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.832088][ C1] sp : ffff80008edc6ef0 [ 94.832091][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000d93d0490 [ 94.832104][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.832115][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 94.832127][ C1] x20: ffff000121810000 x19: ffff0000d93d0400 x18: 1fffe00035bb1028 [ 94.832139][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 94.832150][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.832160][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 94.832172][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.832182][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.832193][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 94.832204][ C1] Call trace: [ 94.832207][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.832219][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.832231][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.832242][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.832253][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.832264][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.832274][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.832282][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.832291][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.832303][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.832311][ C1] tasklet_action_common+0x1dc/0x278 [ 94.832321][ C1] tasklet_action+0x68/0x8c [ 94.832329][ C1] handle_softirqs+0x2ec/0xd98 [ 94.832337][ C1] run_ksoftirqd+0x70/0xbc [ 94.832346][ C1] smpboot_thread_fn+0x4e4/0x97c [ 94.832355][ C1] kthread+0x304/0x3d4 [ 94.832363][ C1] ret_from_fork+0x10/0x20 [ 94.832372][ C1] irq event stamp: 21181447 [ 94.832376][ C1] hardirqs last enabled at (21181446): [] kcov_remote_start+0x190/0x560 [ 94.832387][ C1] hardirqs last disabled at (21181447): [] el1_brk64+0x20/0x54 [ 94.832399][ C1] softirqs last enabled at (21180940): [] handle_softirqs+0xc28/0xd98 [ 94.832408][ C1] softirqs last disabled at (21180943): [] run_ksoftirqd+0x70/0xbc [ 94.832417][ C1] ---[ end trace 0000000000000000 ]--- [ 94.834703][ T54] ------------[ cut here ]------------ [ 94.834707][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 94.834723][ T54] Modules linked in: [ 94.834729][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 94.834741][ T54] Tainted: [W]=WARN [ 94.834744][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.834749][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 94.834760][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.834768][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.834777][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.834785][ T54] sp : ffff800090336ed0 [ 94.834788][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0000d93d0090 [ 94.834799][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.834809][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 94.834820][ T54] x20: ffff000121810000 x19: ffff0000d93d0000 x18: 1fffe00035bb1028 [ 94.834835][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.834847][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.834858][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.834868][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.834878][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.834887][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 94.834897][ T54] Call trace: [ 94.834900][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.834910][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.834921][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.834931][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.834941][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 94.834951][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.834959][ T54] ieee80211_iface_work+0x600/0xd3c [ 94.834966][ T54] cfg80211_wiphy_work+0x278/0x588 [ 94.834977][ T54] process_scheduled_works+0x91c/0x1250 [ 94.834986][ T54] worker_thread+0x798/0xbd0 [ 94.834994][ T54] kthread+0x304/0x3d4 [ 94.835002][ T54] ret_from_fork+0x10/0x20 [ 94.835009][ T54] irq event stamp: 734697 [ 94.835012][ T54] hardirqs last enabled at (734695): [] kcov_remote_start+0x190/0x560 [ 94.835021][ T54] hardirqs last disabled at (734697): [] el1_brk64+0x20/0x54 [ 94.835031][ T54] softirqs last enabled at (734684): [] handle_softirqs+0xc28/0xd98 [ 94.835039][ T54] softirqs last disabled at (734696): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.835050][ T54] ---[ end trace 0000000000000000 ]--- [ 94.934452][ C1] ------------[ cut here ]------------ [ 94.934462][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 94.934487][ C1] Modules linked in: [ 94.934497][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 94.934509][ C1] Tainted: [W]=WARN [ 94.934512][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.934517][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.934526][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.934536][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.934545][ C1] sp : ffff80008ebe7150 [ 94.934548][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000daaff890 [ 94.934561][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.934573][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 94.934584][ C1] x20: ffff000121810000 x19: ffff0000daaff800 x18: 0000000000000000 [ 94.934596][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.934607][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.934618][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 94.934629][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.934639][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.934650][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 94.934661][ C1] Call trace: [ 94.934664][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.934677][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.934689][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.934700][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.934711][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 94.934722][ C1] ieee80211_scan_rx+0x450/0x928 [ 94.934731][ C1] ieee80211_rx_list+0x229c/0x3000 [ 94.934740][ C1] ieee80211_rx_napi+0x18c/0x370 [ 94.934749][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 94.934761][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 94.934769][ C1] tasklet_action_common+0x1dc/0x278 [ 94.934779][ C1] tasklet_action+0x68/0x8c [ 94.934787][ C1] handle_softirqs+0x2ec/0xd98 [ 94.934795][ C1] __do_softirq+0x14/0x20 [ 94.934804][ C1] ____do_softirq+0x14/0x20 [ 94.934812][ C1] call_on_irq_stack+0x30/0x48 [ 94.934820][ C1] do_softirq_own_stack+0x20/0x2c [ 94.934834][ C1] do_softirq+0x90/0xf8 [ 94.934842][ C1] __local_bh_enable_ip+0x240/0x35c [ 94.934850][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 94.934861][ C1] lock_sock_nested+0xb0/0x110 [ 94.934871][ C1] tcp_recvmsg+0x174/0x4d8 [ 94.934880][ C1] inet_recvmsg+0xb8/0xd8 [ 94.934889][ C1] sock_recvmsg+0xd4/0x170 [ 94.934898][ C1] sock_read_iter+0x1d4/0x288 [ 94.934908][ C1] vfs_read+0x498/0x8c8 [ 94.934919][ C1] ksys_read+0x12c/0x228 [ 94.934930][ C1] __arm64_sys_read+0x84/0x98 [ 94.934941][ C1] invoke_syscall+0x98/0x244 [ 94.934952][ C1] el0_svc_common+0xec/0x23c [ 94.934962][ C1] do_el0_svc+0x4c/0x5c [ 94.934972][ C1] el0_svc+0x64/0x260 [ 94.934982][ C1] el0t_64_sync_handler+0x44/0x104 [ 94.934991][ C1] el0t_64_sync+0x198/0x19c [ 94.934999][ C1] irq event stamp: 1238075 [ 94.935003][ C1] hardirqs last enabled at (1238074): [] kcov_remote_start+0x190/0x560 [ 94.935014][ C1] hardirqs last disabled at (1238075): [] el1_brk64+0x20/0x54 [ 94.935024][ C1] softirqs last enabled at (1237882): [] lock_sock_nested+0xb0/0x110 [ 94.935034][ C1] softirqs last disabled at (1237883): [] __do_softirq+0x14/0x20 [ 94.935042][ C1] ---[ end trace 0000000000000000 ]--- [ 94.936275][ T54] ------------[ cut here ]------------ [ 94.936280][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 94.936297][ T54] Modules linked in: [ 94.936303][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 94.936313][ T54] Tainted: [W]=WARN [ 94.936316][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.936320][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 94.936332][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 94.936339][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 94.936348][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 94.936357][ T54] sp : ffff800090336ed0 [ 94.936360][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0000daaffc90 [ 94.936371][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 94.936382][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 94.936392][ T54] x20: ffff000121810000 x19: ffff0000daaffc00 x18: 1fffe00035bb1028 [ 94.936402][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 94.936413][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 94.936422][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 94.936432][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 94.936442][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 94.936452][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 94.936462][ T54] Call trace: [ 94.936464][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 94.936475][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 94.936485][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 94.936495][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 94.936506][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 94.936515][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 94.936523][ T54] ieee80211_iface_work+0x600/0xd3c [ 94.936531][ T54] cfg80211_wiphy_work+0x278/0x588 [ 94.936541][ T54] process_scheduled_works+0x91c/0x1250 [ 94.936550][ T54] worker_thread+0x798/0xbd0 [ 94.936558][ T54] kthread+0x304/0x3d4 [ 94.936566][ T54] ret_from_fork+0x10/0x20 [ 94.936573][ T54] irq event stamp: 746815 [ 94.936576][ T54] hardirqs last enabled at (746813): [] kcov_remote_start+0x190/0x560 [ 94.936585][ T54] hardirqs last disabled at (746815): [] el1_brk64+0x20/0x54 [ 94.936595][ T54] softirqs last enabled at (746802): [] handle_softirqs+0xc28/0xd98 [ 94.936603][ T54] softirqs last disabled at (746814): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 94.936614][ T54] ---[ end trace 0000000000000000 ]--- [ 95.036824][ C1] ------------[ cut here ]------------ [ 95.036838][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 95.036865][ C1] Modules linked in: [ 95.036875][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 95.036886][ C1] Tainted: [W]=WARN [ 95.036889][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.036895][ C1] Workqueue: events_unbound toggle_allocation_gate [ 95.036910][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.036919][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.036929][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.036938][ C1] sp : ffff80008ebe7150 [ 95.036941][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff000121d58090 [ 95.036954][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.036965][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.036977][ C1] x20: ffff000121810000 x19: ffff000121d58000 x18: 00000000626f44a5 [ 95.036988][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 95.037000][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.037010][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 95.037021][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.037032][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.037042][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 95.037054][ C1] Call trace: [ 95.037057][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.037069][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.037081][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.037092][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.037103][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.037114][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.037124][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.037132][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.037141][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.037153][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.037161][ C1] tasklet_action_common+0x1dc/0x278 [ 95.037171][ C1] tasklet_action+0x68/0x8c [ 95.037179][ C1] handle_softirqs+0x2ec/0xd98 [ 95.037187][ C1] __do_softirq+0x14/0x20 [ 95.037196][ C1] ____do_softirq+0x14/0x20 [ 95.037204][ C1] call_on_irq_stack+0x30/0x48 [ 95.037212][ C1] do_softirq_own_stack+0x20/0x2c [ 95.037220][ C1] __irq_exit_rcu+0x1ac/0x428 [ 95.037228][ C1] irq_exit_rcu+0x14/0x84 [ 95.037236][ C1] el1_interrupt+0x40/0x60 [ 95.037246][ C1] el1h_64_irq_handler+0x18/0x24 [ 95.037256][ C1] el1h_64_irq+0x6c/0x70 [ 95.037263][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 95.037276][ C1] kick_all_cpus_sync+0x34/0x40 [ 95.037286][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 95.037295][ C1] __jump_label_update+0x31c/0x344 [ 95.037304][ C1] jump_label_update+0x428/0x4b8 [ 95.037315][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 95.037327][ C1] static_key_enable+0x24/0x38 [ 95.037338][ C1] toggle_allocation_gate+0xb8/0x28c [ 95.037348][ C1] process_scheduled_works+0x91c/0x1250 [ 95.037358][ C1] worker_thread+0x798/0xbd0 [ 95.037367][ C1] kthread+0x304/0x3d4 [ 95.037376][ C1] ret_from_fork+0x10/0x20 [ 95.037384][ C1] irq event stamp: 189367 [ 95.037387][ C1] hardirqs last enabled at (189366): [] kcov_remote_start+0x190/0x560 [ 95.037398][ C1] hardirqs last disabled at (189367): [] el1_brk64+0x20/0x54 [ 95.037408][ C1] softirqs last enabled at (188884): [] handle_softirqs+0xc28/0xd98 [ 95.037417][ C1] softirqs last disabled at (188891): [] __do_softirq+0x14/0x20 [ 95.037426][ C1] ---[ end trace 0000000000000000 ]--- [ 95.038671][ T13] ------------[ cut here ]------------ [ 95.038676][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 95.038693][ T13] Modules linked in: [ 95.038700][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 95.038710][ T13] Tainted: [W]=WARN [ 95.038713][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.038717][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 95.038728][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.038736][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.038745][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.038753][ T13] sp : ffff80008ed16ed0 [ 95.038756][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff000121d5b490 [ 95.038767][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.038778][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 95.038788][ T13] x20: ffff000121810000 x19: ffff000121d5b400 x18: 1fffe00035bb1028 [ 95.038798][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.038809][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.038818][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.038833][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.038843][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.038853][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 95.038863][ T13] Call trace: [ 95.038865][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.038876][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.038886][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.038896][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.038907][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 95.038916][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.038924][ T13] ieee80211_iface_work+0x600/0xd3c [ 95.038932][ T13] cfg80211_wiphy_work+0x278/0x588 [ 95.038942][ T13] process_scheduled_works+0x91c/0x1250 [ 95.038950][ T13] worker_thread+0x798/0xbd0 [ 95.038959][ T13] kthread+0x304/0x3d4 [ 95.038966][ T13] ret_from_fork+0x10/0x20 [ 95.038973][ T13] irq event stamp: 1610543 [ 95.038976][ T13] hardirqs last enabled at (1610541): [] kcov_remote_start+0x190/0x560 [ 95.038986][ T13] hardirqs last disabled at (1610543): [] el1_brk64+0x20/0x54 [ 95.038995][ T13] softirqs last enabled at (1610530): [] handle_softirqs+0xc28/0xd98 [ 95.039003][ T13] softirqs last disabled at (1610542): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.039014][ T13] ---[ end trace 0000000000000000 ]--- [ 95.139262][ C1] ------------[ cut here ]------------ [ 95.139272][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 95.139295][ C1] Modules linked in: [ 95.139305][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 95.139316][ C1] Tainted: [W]=WARN [ 95.139319][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.139324][ C1] Workqueue: events_unbound toggle_allocation_gate [ 95.139338][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.139346][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.139356][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.139365][ C1] sp : ffff80008ebe7150 [ 95.139368][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000c98b8890 [ 95.139381][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.139392][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.139404][ C1] x20: ffff000121810000 x19: ffff0000c98b8800 x18: 00000000626f44a5 [ 95.139415][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 95.139426][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.139437][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 95.139448][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.139458][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.139469][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 95.139480][ C1] Call trace: [ 95.139483][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.139496][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.139507][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.139518][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.139529][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.139541][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.139551][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.139560][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.139568][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.139582][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.139589][ C1] tasklet_action_common+0x1dc/0x278 [ 95.139599][ C1] tasklet_action+0x68/0x8c [ 95.139607][ C1] handle_softirqs+0x2ec/0xd98 [ 95.139616][ C1] __do_softirq+0x14/0x20 [ 95.139624][ C1] ____do_softirq+0x14/0x20 [ 95.139632][ C1] call_on_irq_stack+0x30/0x48 [ 95.139640][ C1] do_softirq_own_stack+0x20/0x2c [ 95.139648][ C1] __irq_exit_rcu+0x1ac/0x428 [ 95.139656][ C1] irq_exit_rcu+0x14/0x84 [ 95.139663][ C1] el1_interrupt+0x40/0x60 [ 95.139674][ C1] el1h_64_irq_handler+0x18/0x24 [ 95.139683][ C1] el1h_64_irq+0x6c/0x70 [ 95.139691][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 95.139704][ C1] kick_all_cpus_sync+0x34/0x40 [ 95.139714][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 95.139723][ C1] __jump_label_update+0x31c/0x344 [ 95.139732][ C1] jump_label_update+0x428/0x4b8 [ 95.139743][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 95.139754][ C1] static_key_enable+0x24/0x38 [ 95.139765][ C1] toggle_allocation_gate+0xb8/0x28c [ 95.139776][ C1] process_scheduled_works+0x91c/0x1250 [ 95.139786][ C1] worker_thread+0x798/0xbd0 [ 95.139795][ C1] kthread+0x304/0x3d4 [ 95.139803][ C1] ret_from_fork+0x10/0x20 [ 95.139811][ C1] irq event stamp: 190631 [ 95.139815][ C1] hardirqs last enabled at (190630): [] kcov_remote_start+0x190/0x560 [ 95.139830][ C1] hardirqs last disabled at (190631): [] el1_brk64+0x20/0x54 [ 95.139842][ C1] softirqs last enabled at (190144): [] handle_softirqs+0xc28/0xd98 [ 95.139851][ C1] softirqs last disabled at (190151): [] __do_softirq+0x14/0x20 [ 95.139861][ C1] ---[ end trace 0000000000000000 ]--- [ 95.141095][ T13] ------------[ cut here ]------------ [ 95.141100][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 95.141117][ T13] Modules linked in: [ 95.141123][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 95.141133][ T13] Tainted: [W]=WARN [ 95.141136][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.141140][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 95.141152][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.141159][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.141168][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.141176][ T13] sp : ffff80008ed16ed0 [ 95.141179][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000c98b8c90 [ 95.141190][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.141201][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 95.141211][ T13] x20: ffff000121810000 x19: ffff0000c98b8c00 x18: 1fffe00035bb1028 [ 95.141221][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.141232][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.141241][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.141251][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.141261][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.141271][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 95.141280][ T13] Call trace: [ 95.141283][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.141293][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.141304][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.141314][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.141324][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 95.141334][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.141342][ T13] ieee80211_iface_work+0x600/0xd3c [ 95.141349][ T13] cfg80211_wiphy_work+0x278/0x588 [ 95.141359][ T13] process_scheduled_works+0x91c/0x1250 [ 95.141368][ T13] worker_thread+0x798/0xbd0 [ 95.141377][ T13] kthread+0x304/0x3d4 [ 95.141384][ T13] ret_from_fork+0x10/0x20 [ 95.141392][ T13] irq event stamp: 1619319 [ 95.141394][ T13] hardirqs last enabled at (1619317): [] kcov_remote_start+0x190/0x560 [ 95.141404][ T13] hardirqs last disabled at (1619319): [] el1_brk64+0x20/0x54 [ 95.141413][ T13] softirqs last enabled at (1619304): [] handle_softirqs+0xc28/0xd98 [ 95.141422][ T13] softirqs last disabled at (1619318): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.141433][ T13] ---[ end trace 0000000000000000 ]--- [ 95.241615][ C1] ------------[ cut here ]------------ [ 95.241624][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 95.241647][ C1] Modules linked in: [ 95.241657][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 95.241668][ C1] Tainted: [W]=WARN [ 95.241671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.241676][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 95.241688][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.241696][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.241705][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.241715][ C1] sp : ffff80008ebe7150 [ 95.241718][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0001219d5490 [ 95.241730][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.241742][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.241753][ C1] x20: ffff000121810000 x19: ffff0001219d5400 x18: 00000000af4c3efd [ 95.241765][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 95.241776][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.241787][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 95.241798][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.241808][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.241819][ C1] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 95.241836][ C1] Call trace: [ 95.241839][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.241852][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.241866][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.241877][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.241888][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.241899][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.241908][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.241917][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.241926][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.241938][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.241946][ C1] tasklet_action_common+0x1dc/0x278 [ 95.241956][ C1] tasklet_action+0x68/0x8c [ 95.241964][ C1] handle_softirqs+0x2ec/0xd98 [ 95.241972][ C1] __do_softirq+0x14/0x20 [ 95.241980][ C1] ____do_softirq+0x14/0x20 [ 95.241989][ C1] call_on_irq_stack+0x30/0x48 [ 95.241997][ C1] do_softirq_own_stack+0x20/0x2c [ 95.242004][ C1] __irq_exit_rcu+0x1ac/0x428 [ 95.242012][ C1] irq_exit_rcu+0x14/0x84 [ 95.242020][ C1] el1_interrupt+0x40/0x60 [ 95.242030][ C1] el1h_64_irq_handler+0x18/0x24 [ 95.242040][ C1] el1h_64_irq+0x6c/0x70 [ 95.242047][ C1] kasan_quarantine_put+0xc0/0x1c4 (P) [ 95.242059][ C1] __kasan_slab_free+0x8c/0xa4 [ 95.242067][ C1] kfree+0x188/0x698 [ 95.242075][ C1] skb_free_head+0x70/0x120 [ 95.242085][ C1] skb_release_data+0x6f4/0x8b4 [ 95.242095][ C1] skb_release_all+0x60/0x7c [ 95.242104][ C1] consume_skb+0x80/0xf4 [ 95.242113][ C1] nsim_dev_trap_report_work+0x678/0x9cc [ 95.242121][ C1] process_scheduled_works+0x91c/0x1250 [ 95.242131][ C1] worker_thread+0x798/0xbd0 [ 95.242140][ C1] kthread+0x304/0x3d4 [ 95.242149][ C1] ret_from_fork+0x10/0x20 [ 95.242157][ C1] irq event stamp: 1631389 [ 95.242160][ C1] hardirqs last enabled at (1631388): [] kcov_remote_start+0x190/0x560 [ 95.242171][ C1] hardirqs last disabled at (1631389): [] el1_brk64+0x20/0x54 [ 95.242181][ C1] softirqs last enabled at (1630914): [] handle_softirqs+0xc28/0xd98 [ 95.242190][ C1] softirqs last disabled at (1630921): [] __do_softirq+0x14/0x20 [ 95.242200][ C1] ---[ end trace 0000000000000000 ]--- [ 95.245419][ T13] ------------[ cut here ]------------ [ 95.245423][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 95.245441][ T13] Modules linked in: [ 95.245447][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 95.245457][ T13] Tainted: [W]=WARN [ 95.245459][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.245464][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 95.245475][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.245483][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.245491][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.245500][ T13] sp : ffff80008ed16ed0 [ 95.245503][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0001219d7090 [ 95.245514][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.245525][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 95.245536][ T13] x20: ffff000121810000 x19: ffff0001219d7000 x18: 00000000738a7491 [ 95.245546][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.245557][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.245566][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.245577][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.245586][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.245596][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 95.245606][ T13] Call trace: [ 95.245609][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.245619][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.245630][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.245640][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.245651][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 95.245660][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.245668][ T13] ieee80211_iface_work+0x600/0xd3c [ 95.245676][ T13] cfg80211_wiphy_work+0x278/0x588 [ 95.245687][ T13] process_scheduled_works+0x91c/0x1250 [ 95.245695][ T13] worker_thread+0x798/0xbd0 [ 95.245704][ T13] kthread+0x304/0x3d4 [ 95.245712][ T13] ret_from_fork+0x10/0x20 [ 95.245719][ T13] irq event stamp: 1638223 [ 95.245722][ T13] hardirqs last enabled at (1638221): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 95.245734][ T13] hardirqs last disabled at (1638223): [] el1_brk64+0x20/0x54 [ 95.245743][ T13] softirqs last enabled at (1638206): [] handle_softirqs+0xc28/0xd98 [ 95.245752][ T13] softirqs last disabled at (1638222): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.245763][ T13] ---[ end trace 0000000000000000 ]--- [ 95.344045][ C1] ------------[ cut here ]------------ [ 95.344055][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 95.344078][ C1] Modules linked in: [ 95.344089][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 95.344100][ C1] Tainted: [W]=WARN [ 95.344103][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.344108][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.344117][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.344126][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.344136][ C1] sp : ffff80008ebe7150 [ 95.344139][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0001219d6c90 [ 95.344152][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.344163][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.344175][ C1] x20: ffff000121810000 x19: ffff0001219d6c00 x18: 0000000000000000 [ 95.344187][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.344198][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.344209][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 95.344220][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.344231][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.344241][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 95.344253][ C1] Call trace: [ 95.344256][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.344269][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.344280][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.344291][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.344302][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.344313][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.344323][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.344332][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.344340][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.344353][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.344361][ C1] tasklet_action_common+0x1dc/0x278 [ 95.344371][ C1] tasklet_action+0x68/0x8c [ 95.344379][ C1] handle_softirqs+0x2ec/0xd98 [ 95.344387][ C1] __do_softirq+0x14/0x20 [ 95.344396][ C1] ____do_softirq+0x14/0x20 [ 95.344404][ C1] call_on_irq_stack+0x30/0x48 [ 95.344412][ C1] do_softirq_own_stack+0x20/0x2c [ 95.344420][ C1] do_softirq+0x90/0xf8 [ 95.344428][ C1] __local_bh_enable_ip+0x240/0x35c [ 95.344436][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 95.344447][ C1] lock_sock_nested+0xb0/0x110 [ 95.344457][ C1] tcp_recvmsg+0x174/0x4d8 [ 95.344466][ C1] inet_recvmsg+0xb8/0xd8 [ 95.344475][ C1] sock_recvmsg+0xd4/0x170 [ 95.344484][ C1] sock_read_iter+0x1d4/0x288 [ 95.344494][ C1] vfs_read+0x498/0x8c8 [ 95.344505][ C1] ksys_read+0x12c/0x228 [ 95.344516][ C1] __arm64_sys_read+0x84/0x98 [ 95.344527][ C1] invoke_syscall+0x98/0x244 [ 95.344538][ C1] el0_svc_common+0xec/0x23c [ 95.344548][ C1] do_el0_svc+0x4c/0x5c [ 95.344558][ C1] el0_svc+0x64/0x260 [ 95.344567][ C1] el0t_64_sync_handler+0x44/0x104 [ 95.344577][ C1] el0t_64_sync+0x198/0x19c [ 95.344585][ C1] irq event stamp: 1293979 [ 95.344589][ C1] hardirqs last enabled at (1293978): [] kcov_remote_start+0x190/0x560 [ 95.344600][ C1] hardirqs last disabled at (1293979): [] el1_brk64+0x20/0x54 [ 95.344610][ C1] softirqs last enabled at (1293786): [] lock_sock_nested+0xb0/0x110 [ 95.344620][ C1] softirqs last disabled at (1293787): [] __do_softirq+0x14/0x20 [ 95.344628][ C1] ---[ end trace 0000000000000000 ]--- [ 95.345717][ T13] ------------[ cut here ]------------ [ 95.345721][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 95.345736][ T13] Modules linked in: [ 95.345742][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 95.345752][ T13] Tainted: [W]=WARN [ 95.345755][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.345762][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 95.345774][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.345783][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.345793][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.345801][ T13] sp : ffff80008ed16ed0 [ 95.345804][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0001219d7c90 [ 95.345815][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.345829][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 95.345840][ T13] x20: ffff000121810000 x19: ffff0001219d7c00 x18: 1fffe00035bb1028 [ 95.345851][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.345861][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.345871][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.345881][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.345891][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.345901][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 95.345911][ T13] Call trace: [ 95.345913][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.345924][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.345935][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.345945][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.345955][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 95.345965][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.345973][ T13] ieee80211_iface_work+0x600/0xd3c [ 95.345981][ T13] cfg80211_wiphy_work+0x278/0x588 [ 95.345991][ T13] process_scheduled_works+0x91c/0x1250 [ 95.346001][ T13] worker_thread+0x798/0xbd0 [ 95.346009][ T13] kthread+0x304/0x3d4 [ 95.346017][ T13] ret_from_fork+0x10/0x20 [ 95.346024][ T13] irq event stamp: 1640675 [ 95.346027][ T13] hardirqs last enabled at (1640673): [] kcov_remote_start+0x190/0x560 [ 95.346037][ T13] hardirqs last disabled at (1640675): [] el1_brk64+0x20/0x54 [ 95.346047][ T13] softirqs last enabled at (1640660): [] handle_softirqs+0xc28/0xd98 [ 95.346055][ T13] softirqs last disabled at (1640674): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.346067][ T13] ---[ end trace 0000000000000000 ]--- [ 95.446421][ C1] ------------[ cut here ]------------ [ 95.446431][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 95.446454][ C1] Modules linked in: [ 95.446464][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 95.446475][ C1] Tainted: [W]=WARN [ 95.446478][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.446483][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.446492][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.446502][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.446511][ C1] sp : ffff80008ebe7150 [ 95.446514][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f4543490 [ 95.446527][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.446539][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.446550][ C1] x20: ffff000121810000 x19: ffff0000f4543400 x18: 1fffe00035bb1028 [ 95.446562][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 95.446573][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.446584][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 95.446595][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.446606][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.446617][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 95.446628][ C1] Call trace: [ 95.446631][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.446644][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.446656][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.446667][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.446678][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.446688][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.446698][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.446707][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.446715][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.446728][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.446736][ C1] tasklet_action_common+0x1dc/0x278 [ 95.446746][ C1] tasklet_action+0x68/0x8c [ 95.446754][ C1] handle_softirqs+0x2ec/0xd98 [ 95.446762][ C1] __do_softirq+0x14/0x20 [ 95.446771][ C1] ____do_softirq+0x14/0x20 [ 95.446779][ C1] call_on_irq_stack+0x30/0x48 [ 95.446787][ C1] do_softirq_own_stack+0x20/0x2c [ 95.446794][ C1] __irq_exit_rcu+0x1ac/0x428 [ 95.446802][ C1] irq_exit_rcu+0x14/0x84 [ 95.446810][ C1] el1_interrupt+0x40/0x60 [ 95.446821][ C1] el1h_64_irq_handler+0x18/0x24 [ 95.446836][ C1] el1h_64_irq+0x6c/0x70 [ 95.446844][ C1] run_ksoftirqd+0x78/0xbc (P) [ 95.446852][ C1] smpboot_thread_fn+0x4e4/0x97c [ 95.446861][ C1] kthread+0x304/0x3d4 [ 95.446870][ C1] ret_from_fork+0x10/0x20 [ 95.446878][ C1] irq event stamp: 21710911 [ 95.446881][ C1] hardirqs last enabled at (21710910): [] kcov_remote_start+0x190/0x560 [ 95.446893][ C1] hardirqs last disabled at (21710911): [] el1_brk64+0x20/0x54 [ 95.446903][ C1] softirqs last enabled at (21710430): [] handle_softirqs+0xc28/0xd98 [ 95.446912][ C1] softirqs last disabled at (21710433): [] __do_softirq+0x14/0x20 [ 95.446921][ C1] ---[ end trace 0000000000000000 ]--- [ 95.448134][ T54] ------------[ cut here ]------------ [ 95.448139][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 95.448156][ T54] Modules linked in: [ 95.448163][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 95.448173][ T54] Tainted: [W]=WARN [ 95.448176][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.448180][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 95.448192][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.448200][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.448209][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.448217][ T54] sp : ffff800090336ed0 [ 95.448220][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0000f4541890 [ 95.448232][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.448242][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 95.448253][ T54] x20: ffff000121810000 x19: ffff0000f4541800 x18: 1fffe00035bb1028 [ 95.448264][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.448274][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.448284][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.448294][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.448304][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.448314][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 95.448324][ T54] Call trace: [ 95.448326][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.448337][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.448347][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.448358][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.448368][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 95.448377][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.448385][ T54] ieee80211_iface_work+0x600/0xd3c [ 95.448393][ T54] cfg80211_wiphy_work+0x278/0x588 [ 95.448403][ T54] process_scheduled_works+0x91c/0x1250 [ 95.448412][ T54] worker_thread+0x798/0xbd0 [ 95.448421][ T54] kthread+0x304/0x3d4 [ 95.448428][ T54] ret_from_fork+0x10/0x20 [ 95.448436][ T54] irq event stamp: 932037 [ 95.448438][ T54] hardirqs last enabled at (932035): [] kcov_remote_start+0x190/0x560 [ 95.448448][ T54] hardirqs last disabled at (932037): [] el1_brk64+0x20/0x54 [ 95.448458][ T54] softirqs last enabled at (932024): [] handle_softirqs+0xc28/0xd98 [ 95.448466][ T54] softirqs last disabled at (932036): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.448477][ T54] ---[ end trace 0000000000000000 ]--- [ 95.548870][ C1] ------------[ cut here ]------------ [ 95.548880][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 95.548904][ C1] Modules linked in: [ 95.548914][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 95.548925][ C1] Tainted: [W]=WARN [ 95.548928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.548934][ C1] Workqueue: events_unbound toggle_allocation_gate [ 95.548948][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.548957][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.548967][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.548976][ C1] sp : ffff80008ebe7150 [ 95.548979][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0001219cec90 [ 95.548992][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.549004][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.549015][ C1] x20: ffff000121810000 x19: ffff0001219cec00 x18: 00000000626f44a5 [ 95.549027][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 95.549038][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.549049][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 95.549060][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.549071][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.549082][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 95.549093][ C1] Call trace: [ 95.549096][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.549109][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.549120][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.549131][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.549143][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.549153][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.549163][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.549172][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.549180][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.549193][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.549201][ C1] tasklet_action_common+0x1dc/0x278 [ 95.549211][ C1] tasklet_action+0x68/0x8c [ 95.549219][ C1] handle_softirqs+0x2ec/0xd98 [ 95.549227][ C1] __do_softirq+0x14/0x20 [ 95.549235][ C1] ____do_softirq+0x14/0x20 [ 95.549244][ C1] call_on_irq_stack+0x30/0x48 [ 95.549252][ C1] do_softirq_own_stack+0x20/0x2c [ 95.549260][ C1] __irq_exit_rcu+0x1ac/0x428 [ 95.549268][ C1] irq_exit_rcu+0x14/0x84 [ 95.549275][ C1] el1_interrupt+0x40/0x60 [ 95.549286][ C1] el1h_64_irq_handler+0x18/0x24 [ 95.549295][ C1] el1h_64_irq+0x6c/0x70 [ 95.549303][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 95.549315][ C1] kick_all_cpus_sync+0x34/0x40 [ 95.549326][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 95.549335][ C1] __jump_label_update+0x31c/0x344 [ 95.549344][ C1] jump_label_update+0x428/0x4b8 [ 95.549355][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 95.549367][ C1] static_key_enable+0x24/0x38 [ 95.549377][ C1] toggle_allocation_gate+0xb8/0x28c [ 95.549388][ C1] process_scheduled_works+0x91c/0x1250 [ 95.549398][ C1] worker_thread+0x798/0xbd0 [ 95.549408][ C1] kthread+0x304/0x3d4 [ 95.549416][ C1] ret_from_fork+0x10/0x20 [ 95.549424][ C1] irq event stamp: 195165 [ 95.549428][ C1] hardirqs last enabled at (195164): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 95.549440][ C1] hardirqs last disabled at (195165): [] el1_brk64+0x20/0x54 [ 95.549450][ C1] softirqs last enabled at (194674): [] handle_softirqs+0xc28/0xd98 [ 95.549459][ C1] softirqs last disabled at (194677): [] __do_softirq+0x14/0x20 [ 95.549468][ C1] ---[ end trace 0000000000000000 ]--- [ 95.552605][ T54] ------------[ cut here ]------------ [ 95.552612][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 95.552636][ T54] Modules linked in: [ 95.552643][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 95.552653][ T54] Tainted: [W]=WARN [ 95.552656][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.552661][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 95.552675][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.552683][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.552692][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.552701][ T54] sp : ffff800090336ed0 [ 95.552704][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0001219cf090 [ 95.552715][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.552726][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 95.552736][ T54] x20: ffff000121810000 x19: ffff0001219cf000 x18: 1fffe00035bb1028 [ 95.552746][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.552757][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.552766][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.552777][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.552787][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.552796][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 95.552806][ T54] Call trace: [ 95.552809][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.552820][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.552835][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.552845][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.552856][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 95.552866][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.552875][ T54] ieee80211_iface_work+0x600/0xd3c [ 95.552883][ T54] cfg80211_wiphy_work+0x278/0x588 [ 95.552893][ T54] process_scheduled_works+0x91c/0x1250 [ 95.552902][ T54] worker_thread+0x798/0xbd0 [ 95.552911][ T54] kthread+0x304/0x3d4 [ 95.552918][ T54] ret_from_fork+0x10/0x20 [ 95.552926][ T54] irq event stamp: 939981 [ 95.552929][ T54] hardirqs last enabled at (939979): [] kcov_remote_start+0x190/0x560 [ 95.552939][ T54] hardirqs last disabled at (939981): [] el1_brk64+0x20/0x54 [ 95.552949][ T54] softirqs last enabled at (939966): [] handle_softirqs+0xc28/0xd98 [ 95.552957][ T54] softirqs last disabled at (939980): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.552969][ T54] ---[ end trace 0000000000000000 ]--- [ 95.651221][ C1] ------------[ cut here ]------------ [ 95.651231][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 95.651256][ C1] Modules linked in: [ 95.651265][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 95.651277][ C1] Tainted: [W]=WARN [ 95.651281][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.651286][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.651294][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.651304][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.651313][ C1] sp : ffff80008ebe7150 [ 95.651317][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0001219cf890 [ 95.651330][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.651341][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.651353][ C1] x20: ffff000121810000 x19: ffff0001219cf800 x18: 0000000000000000 [ 95.651365][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 95.651376][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.651387][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 95.651398][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.651409][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.651420][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 95.651431][ C1] Call trace: [ 95.651434][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.651446][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.651458][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.651469][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.651480][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.651491][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.651501][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.651510][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.651518][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.651531][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.651539][ C1] tasklet_action_common+0x1dc/0x278 [ 95.651549][ C1] tasklet_action+0x68/0x8c [ 95.651558][ C1] handle_softirqs+0x2ec/0xd98 [ 95.651566][ C1] __do_softirq+0x14/0x20 [ 95.651574][ C1] ____do_softirq+0x14/0x20 [ 95.651583][ C1] call_on_irq_stack+0x30/0x48 [ 95.651591][ C1] do_softirq_own_stack+0x20/0x2c [ 95.651599][ C1] do_softirq+0x90/0xf8 [ 95.651606][ C1] __local_bh_enable_ip+0x240/0x35c [ 95.651614][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 95.651626][ C1] release_sock+0x150/0x228 [ 95.651638][ C1] tcp_recvmsg+0x19c/0x4d8 [ 95.651647][ C1] inet_recvmsg+0xb8/0xd8 [ 95.651656][ C1] sock_recvmsg+0xd4/0x170 [ 95.651664][ C1] sock_read_iter+0x1d4/0x288 [ 95.651674][ C1] vfs_read+0x498/0x8c8 [ 95.651686][ C1] ksys_read+0x12c/0x228 [ 95.651696][ C1] __arm64_sys_read+0x84/0x98 [ 95.651707][ C1] invoke_syscall+0x98/0x244 [ 95.651718][ C1] el0_svc_common+0xec/0x23c [ 95.651729][ C1] do_el0_svc+0x4c/0x5c [ 95.651739][ C1] el0_svc+0x64/0x260 [ 95.651748][ C1] el0t_64_sync_handler+0x44/0x104 [ 95.651758][ C1] el0t_64_sync+0x198/0x19c [ 95.651766][ C1] irq event stamp: 1330163 [ 95.651770][ C1] hardirqs last enabled at (1330162): [] kcov_remote_start+0x190/0x560 [ 95.651781][ C1] hardirqs last disabled at (1330163): [] el1_brk64+0x20/0x54 [ 95.651792][ C1] softirqs last enabled at (1329684): [] release_sock+0x150/0x228 [ 95.651803][ C1] softirqs last disabled at (1329685): [] __do_softirq+0x14/0x20 [ 95.651812][ C1] ---[ end trace 0000000000000000 ]--- [ 95.654000][ T54] ------------[ cut here ]------------ [ 95.654004][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 95.654021][ T54] Modules linked in: [ 95.654027][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 95.654036][ T54] Tainted: [W]=WARN [ 95.654039][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.654043][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 95.654057][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.654066][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.654076][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.654085][ T54] sp : ffff800090336ed0 [ 95.654088][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0001219cdc90 [ 95.654099][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.654109][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 95.654120][ T54] x20: ffff000121810000 x19: ffff0001219cdc00 x18: 1fffe00035bb1028 [ 95.654131][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.654141][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.654151][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.654161][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.654171][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.654181][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 95.654191][ T54] Call trace: [ 95.654194][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.654204][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.654215][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.654225][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.654236][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 95.654245][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.654253][ T54] ieee80211_iface_work+0x600/0xd3c [ 95.654261][ T54] cfg80211_wiphy_work+0x278/0x588 [ 95.654272][ T54] process_scheduled_works+0x91c/0x1250 [ 95.654281][ T54] worker_thread+0x798/0xbd0 [ 95.654289][ T54] kthread+0x304/0x3d4 [ 95.654297][ T54] ret_from_fork+0x10/0x20 [ 95.654305][ T54] irq event stamp: 946493 [ 95.654307][ T54] hardirqs last enabled at (946491): [] kcov_remote_start+0x190/0x560 [ 95.654317][ T54] hardirqs last disabled at (946493): [] el1_brk64+0x20/0x54 [ 95.654327][ T54] softirqs last enabled at (946480): [] handle_softirqs+0xc28/0xd98 [ 95.654335][ T54] softirqs last disabled at (946492): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.654347][ T54] ---[ end trace 0000000000000000 ]--- [ 95.753628][ C1] ------------[ cut here ]------------ [ 95.753638][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 95.753662][ C1] Modules linked in: [ 95.753672][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 95.753683][ C1] Tainted: [W]=WARN [ 95.753687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.753692][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.753700][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.753710][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.753719][ C1] sp : ffff80008ebe7150 [ 95.753722][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0001219ce090 [ 95.753735][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.753747][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.753758][ C1] x20: ffff000121810000 x19: ffff0001219ce000 x18: 0000000000000000 [ 95.753770][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.753781][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.753792][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 95.753803][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.753814][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.753830][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 95.753842][ C1] Call trace: [ 95.753846][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.753859][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.753872][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.753884][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.753895][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.753906][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.753916][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.753925][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.753933][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.753945][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.753953][ C1] tasklet_action_common+0x1dc/0x278 [ 95.753964][ C1] tasklet_action+0x68/0x8c [ 95.753972][ C1] handle_softirqs+0x2ec/0xd98 [ 95.753980][ C1] __do_softirq+0x14/0x20 [ 95.753989][ C1] ____do_softirq+0x14/0x20 [ 95.753997][ C1] call_on_irq_stack+0x30/0x48 [ 95.754005][ C1] do_softirq_own_stack+0x20/0x2c [ 95.754013][ C1] do_softirq+0x90/0xf8 [ 95.754021][ C1] __local_bh_enable_ip+0x240/0x35c [ 95.754029][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 95.754040][ C1] lock_sock_nested+0xb0/0x110 [ 95.754050][ C1] tcp_recvmsg+0x174/0x4d8 [ 95.754059][ C1] inet_recvmsg+0xb8/0xd8 [ 95.754067][ C1] sock_recvmsg+0xd4/0x170 [ 95.754077][ C1] sock_read_iter+0x1d4/0x288 [ 95.754086][ C1] vfs_read+0x498/0x8c8 [ 95.754098][ C1] ksys_read+0x12c/0x228 [ 95.754109][ C1] __arm64_sys_read+0x84/0x98 [ 95.754120][ C1] invoke_syscall+0x98/0x244 [ 95.754131][ C1] el0_svc_common+0xec/0x23c [ 95.754141][ C1] do_el0_svc+0x4c/0x5c [ 95.754151][ C1] el0_svc+0x64/0x260 [ 95.754160][ C1] el0t_64_sync_handler+0x44/0x104 [ 95.754170][ C1] el0t_64_sync+0x198/0x19c [ 95.754179][ C1] irq event stamp: 1343099 [ 95.754182][ C1] hardirqs last enabled at (1343098): [] kcov_remote_start+0x190/0x560 [ 95.754193][ C1] hardirqs last disabled at (1343099): [] el1_brk64+0x20/0x54 [ 95.754203][ C1] softirqs last enabled at (1342902): [] lock_sock_nested+0xb0/0x110 [ 95.754213][ C1] softirqs last disabled at (1342903): [] __do_softirq+0x14/0x20 [ 95.754222][ C1] ---[ end trace 0000000000000000 ]--- [ 95.756482][ T54] ------------[ cut here ]------------ [ 95.756486][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 95.756511][ T54] Modules linked in: [ 95.756518][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 95.756532][ T54] Tainted: [W]=WARN [ 95.756535][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.756540][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 95.756551][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.756559][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.756568][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.756577][ T54] sp : ffff800090336ed0 [ 95.756580][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff000121462890 [ 95.756591][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.756602][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 95.756612][ T54] x20: ffff000121810000 x19: ffff000121462800 x18: 1fffe00035bb1028 [ 95.756623][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.756633][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.756643][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.756654][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.756664][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.756674][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 95.756684][ T54] Call trace: [ 95.756686][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.756697][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.756708][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.756718][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.756729][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 95.756738][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.756746][ T54] ieee80211_iface_work+0x600/0xd3c [ 95.756754][ T54] cfg80211_wiphy_work+0x278/0x588 [ 95.756764][ T54] process_scheduled_works+0x91c/0x1250 [ 95.756773][ T54] worker_thread+0x798/0xbd0 [ 95.756782][ T54] kthread+0x304/0x3d4 [ 95.756790][ T54] ret_from_fork+0x10/0x20 [ 95.756797][ T54] irq event stamp: 959913 [ 95.756800][ T54] hardirqs last enabled at (959911): [] kcov_remote_start+0x190/0x560 [ 95.756810][ T54] hardirqs last disabled at (959913): [] el1_brk64+0x20/0x54 [ 95.756819][ T54] softirqs last enabled at (959900): [] handle_softirqs+0xc28/0xd98 [ 95.756833][ T54] softirqs last disabled at (959912): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.756845][ T54] ---[ end trace 0000000000000000 ]--- [ 95.856018][ C1] ------------[ cut here ]------------ [ 95.856028][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 95.856053][ C1] Modules linked in: [ 95.856062][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 95.856076][ C1] Tainted: [W]=WARN [ 95.856079][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.856084][ C1] Workqueue: events_unbound toggle_allocation_gate [ 95.856098][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.856107][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.856116][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.856126][ C1] sp : ffff80008ebe7150 [ 95.856129][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff000121fcd490 [ 95.856141][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.856153][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.856165][ C1] x20: ffff000121810000 x19: ffff000121fcd400 x18: 00000000626f44a5 [ 95.856177][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 95.856188][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.856199][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 95.856210][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.856221][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.856231][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 95.856243][ C1] Call trace: [ 95.856246][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.856258][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.856270][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.856281][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.856292][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.856303][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.856313][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.856322][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.856330][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.856342][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.856350][ C1] tasklet_action_common+0x1dc/0x278 [ 95.856360][ C1] tasklet_action+0x68/0x8c [ 95.856368][ C1] handle_softirqs+0x2ec/0xd98 [ 95.856377][ C1] __do_softirq+0x14/0x20 [ 95.856385][ C1] ____do_softirq+0x14/0x20 [ 95.856393][ C1] call_on_irq_stack+0x30/0x48 [ 95.856401][ C1] do_softirq_own_stack+0x20/0x2c [ 95.856409][ C1] __irq_exit_rcu+0x1ac/0x428 [ 95.856417][ C1] irq_exit_rcu+0x14/0x84 [ 95.856425][ C1] el1_interrupt+0x40/0x60 [ 95.856436][ C1] el1h_64_irq_handler+0x18/0x24 [ 95.856445][ C1] el1h_64_irq+0x6c/0x70 [ 95.856453][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 95.856465][ C1] kick_all_cpus_sync+0x34/0x40 [ 95.856476][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 95.856485][ C1] __jump_label_update+0x31c/0x344 [ 95.856494][ C1] jump_label_update+0x428/0x4b8 [ 95.856505][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 95.856517][ C1] static_key_enable+0x24/0x38 [ 95.856527][ C1] toggle_allocation_gate+0xb8/0x28c [ 95.856538][ C1] process_scheduled_works+0x91c/0x1250 [ 95.856548][ C1] worker_thread+0x798/0xbd0 [ 95.856558][ C1] kthread+0x304/0x3d4 [ 95.856566][ C1] ret_from_fork+0x10/0x20 [ 95.856574][ C1] irq event stamp: 198661 [ 95.856577][ C1] hardirqs last enabled at (198660): [] kcov_remote_start+0x190/0x560 [ 95.856588][ C1] hardirqs last disabled at (198661): [] el1_brk64+0x20/0x54 [ 95.856599][ C1] softirqs last enabled at (198180): [] handle_softirqs+0xc28/0xd98 [ 95.856608][ C1] softirqs last disabled at (198187): [] __do_softirq+0x14/0x20 [ 95.856617][ C1] ---[ end trace 0000000000000000 ]--- [ 95.858890][ T1159] ------------[ cut here ]------------ [ 95.858895][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 95.858911][ T1159] Modules linked in: [ 95.858917][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 95.858927][ T1159] Tainted: [W]=WARN [ 95.858930][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.858935][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 95.858949][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.858957][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.858966][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.858975][ T1159] sp : ffff800093da6ed0 [ 95.858977][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff0000d9997890 [ 95.858989][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.859000][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 95.859010][ T1159] x20: ffff000121810000 x19: ffff0000d9997800 x18: 1fffe00035bb1028 [ 95.859021][ T1159] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.859032][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.859041][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.859052][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.859061][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.859072][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 95.859082][ T1159] Call trace: [ 95.859084][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.859095][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.859106][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.859116][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.859127][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 95.859136][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.859144][ T1159] ieee80211_iface_work+0x600/0xd3c [ 95.859152][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 95.859162][ T1159] process_scheduled_works+0x91c/0x1250 [ 95.859171][ T1159] worker_thread+0x798/0xbd0 [ 95.859180][ T1159] kthread+0x304/0x3d4 [ 95.859187][ T1159] ret_from_fork+0x10/0x20 [ 95.859194][ T1159] irq event stamp: 712323 [ 95.859197][ T1159] hardirqs last enabled at (712322): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 95.859208][ T1159] hardirqs last disabled at (712323): [] el1_brk64+0x20/0x54 [ 95.859218][ T1159] softirqs last enabled at (712306): [] handle_softirqs+0xc28/0xd98 [ 95.859227][ T1159] softirqs last disabled at (712318): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.859238][ T1159] ---[ end trace 0000000000000000 ]--- [ 95.958428][ C1] ------------[ cut here ]------------ [ 95.958437][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 95.958460][ C1] Modules linked in: [ 95.958470][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 95.958481][ C1] Tainted: [W]=WARN [ 95.958484][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.958490][ C1] Workqueue: bat_events batadv_tt_purge [ 95.958502][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.958510][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.958520][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.958529][ C1] sp : ffff80008ebe7150 [ 95.958532][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff000121d5e890 [ 95.958545][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.958556][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 95.958568][ C1] x20: ffff000121810000 x19: ffff000121d5e800 x18: 1fffe00035bb1028 [ 95.958580][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 95.958591][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.958602][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 95.958613][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.958624][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.958635][ C1] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 95.958646][ C1] Call trace: [ 95.958649][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.958661][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.958673][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.958684][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.958695][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 95.958706][ C1] ieee80211_scan_rx+0x450/0x928 [ 95.958716][ C1] ieee80211_rx_list+0x229c/0x3000 [ 95.958725][ C1] ieee80211_rx_napi+0x18c/0x370 [ 95.958733][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 95.958746][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 95.958753][ C1] tasklet_action_common+0x1dc/0x278 [ 95.958764][ C1] tasklet_action+0x68/0x8c [ 95.958772][ C1] handle_softirqs+0x2ec/0xd98 [ 95.958780][ C1] __do_softirq+0x14/0x20 [ 95.958789][ C1] ____do_softirq+0x14/0x20 [ 95.958797][ C1] call_on_irq_stack+0x30/0x48 [ 95.958805][ C1] do_softirq_own_stack+0x20/0x2c [ 95.958813][ C1] do_softirq+0x90/0xf8 [ 95.958822][ C1] __local_bh_enable_ip+0x240/0x35c [ 95.958834][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 95.958846][ C1] batadv_tt_local_purge+0x274/0x2f0 [ 95.958856][ C1] batadv_tt_purge+0x44/0x7b4 [ 95.958867][ C1] process_scheduled_works+0x91c/0x1250 [ 95.958877][ C1] worker_thread+0x798/0xbd0 [ 95.958886][ C1] kthread+0x304/0x3d4 [ 95.958895][ C1] ret_from_fork+0x10/0x20 [ 95.958903][ C1] irq event stamp: 1726369 [ 95.958906][ C1] hardirqs last enabled at (1726368): [] kcov_remote_start+0x190/0x560 [ 95.958918][ C1] hardirqs last disabled at (1726369): [] el1_brk64+0x20/0x54 [ 95.958928][ C1] softirqs last enabled at (1725858): [] batadv_tt_local_purge+0x274/0x2f0 [ 95.958940][ C1] softirqs last disabled at (1725859): [] __do_softirq+0x14/0x20 [ 95.958948][ C1] ---[ end trace 0000000000000000 ]--- [ 95.960257][ T54] ------------[ cut here ]------------ [ 95.960263][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 95.960279][ T54] Modules linked in: [ 95.960285][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 95.960295][ T54] Tainted: [W]=WARN [ 95.960297][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.960302][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 95.960316][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.960324][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 95.960333][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 95.960342][ T54] sp : ffff800090336ed0 [ 95.960345][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff000121d5f890 [ 95.960356][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 95.960366][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 95.960376][ T54] x20: ffff000121810000 x19: ffff000121d5f800 x18: 1fffe00035bb1028 [ 95.960387][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 95.960397][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 95.960407][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 95.960417][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 95.960426][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 95.960436][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 95.960446][ T54] Call trace: [ 95.960448][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 95.960459][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 95.960469][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 95.960479][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 95.960490][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 95.960499][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 95.960508][ T54] ieee80211_iface_work+0x600/0xd3c [ 95.960515][ T54] cfg80211_wiphy_work+0x278/0x588 [ 95.960525][ T54] process_scheduled_works+0x91c/0x1250 [ 95.960534][ T54] worker_thread+0x798/0xbd0 [ 95.960543][ T54] kthread+0x304/0x3d4 [ 95.960550][ T54] ret_from_fork+0x10/0x20 [ 95.960558][ T54] irq event stamp: 986473 [ 95.960560][ T54] hardirqs last enabled at (986471): [] kcov_remote_start+0x190/0x560 [ 95.960570][ T54] hardirqs last disabled at (986473): [] el1_brk64+0x20/0x54 [ 95.960580][ T54] softirqs last enabled at (986460): [] handle_softirqs+0xc28/0xd98 [ 95.960588][ T54] softirqs last disabled at (986472): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 95.960600][ T54] ---[ end trace 0000000000000000 ]--- [ 96.060808][ C1] ------------[ cut here ]------------ [ 96.060818][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 96.060848][ C1] Modules linked in: [ 96.060859][ C1] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 96.060871][ C1] Tainted: [W]=WARN [ 96.060874][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.060879][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 96.060891][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.060899][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.060909][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.060918][ C1] sp : ffff80008ebe7150 [ 96.060922][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f2d3b490 [ 96.060934][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.060946][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 96.060958][ C1] x20: ffff000121810000 x19: ffff0000f2d3b400 x18: 00000000874e912e [ 96.060969][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 96.060981][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.060991][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000303 [ 96.061003][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.061013][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.061024][ C1] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 96.061035][ C1] Call trace: [ 96.061038][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.061051][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.061063][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.061073][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.061085][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.061096][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.061106][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.061114][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.061123][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.061136][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.061144][ C1] tasklet_action_common+0x1dc/0x278 [ 96.061154][ C1] tasklet_action+0x68/0x8c [ 96.061162][ C1] handle_softirqs+0x2ec/0xd98 [ 96.061170][ C1] __do_softirq+0x14/0x20 [ 96.061179][ C1] ____do_softirq+0x14/0x20 [ 96.061188][ C1] call_on_irq_stack+0x30/0x48 [ 96.061195][ C1] do_softirq_own_stack+0x20/0x2c [ 96.061203][ C1] do_softirq+0x90/0xf8 [ 96.061211][ C1] __local_bh_enable_ip+0x240/0x35c [ 96.061219][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 96.061230][ C1] nsim_dev_trap_report_work+0x670/0x9cc [ 96.061238][ C1] process_scheduled_works+0x91c/0x1250 [ 96.061248][ C1] worker_thread+0x798/0xbd0 [ 96.061258][ C1] kthread+0x304/0x3d4 [ 96.061266][ C1] ret_from_fork+0x10/0x20 [ 96.061274][ C1] irq event stamp: 991747 [ 96.061277][ C1] hardirqs last enabled at (991746): [] kcov_remote_start+0x190/0x560 [ 96.061288][ C1] hardirqs last disabled at (991747): [] el1_brk64+0x20/0x54 [ 96.061299][ C1] softirqs last enabled at (991226): [] nsim_dev_trap_report_work+0x670/0x9cc [ 96.061309][ C1] softirqs last disabled at (991227): [] __do_softirq+0x14/0x20 [ 96.061317][ C1] ---[ end trace 0000000000000000 ]--- [ 96.062420][ T54] ------------[ cut here ]------------ [ 96.062424][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 96.062439][ T54] Modules linked in: [ 96.062444][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 96.062454][ T54] Tainted: [W]=WARN [ 96.062456][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.062461][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 96.062472][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.062479][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.062488][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.062496][ T54] sp : ffff800090336ed0 [ 96.062499][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0000f2d39c90 [ 96.062510][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.062520][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 96.062531][ T54] x20: ffff000121810000 x19: ffff0000f2d39c00 x18: 00000000f9abdd20 [ 96.062541][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.062551][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.062561][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.062571][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.062581][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.062590][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 96.062600][ T54] Call trace: [ 96.062603][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.062613][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.062624][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.062634][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.062644][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 96.062654][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.062662][ T54] ieee80211_iface_work+0x600/0xd3c [ 96.062670][ T54] cfg80211_wiphy_work+0x278/0x588 [ 96.062680][ T54] process_scheduled_works+0x91c/0x1250 [ 96.062689][ T54] worker_thread+0x798/0xbd0 [ 96.062697][ T54] kthread+0x304/0x3d4 [ 96.062705][ T54] ret_from_fork+0x10/0x20 [ 96.062713][ T54] irq event stamp: 993575 [ 96.062715][ T54] hardirqs last enabled at (993573): [] kcov_remote_start+0x190/0x560 [ 96.062725][ T54] hardirqs last disabled at (993575): [] el1_brk64+0x20/0x54 [ 96.062734][ T54] softirqs last enabled at (993562): [] handle_softirqs+0xc28/0xd98 [ 96.062743][ T54] softirqs last disabled at (993574): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.062754][ T54] ---[ end trace 0000000000000000 ]--- [ 96.163228][ C1] ------------[ cut here ]------------ [ 96.163237][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syslogd/4330 [ 96.163261][ C1] Modules linked in: [ 96.163271][ C1] CPU: 1 UID: 0 PID: 4330 Comm: syslogd Tainted: G W syzkaller #0 PREEMPT [ 96.163282][ C1] Tainted: [W]=WARN [ 96.163285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.163290][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.163298][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.163308][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.163317][ C1] sp : ffff80008ebe7150 [ 96.163320][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f2d3b090 [ 96.163333][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.163345][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 96.163356][ C1] x20: ffff000121810000 x19: ffff0000f2d3b000 x18: 1fffe00035bb1028 [ 96.163368][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 96.163379][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.163389][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 96.163400][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.163411][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.163422][ C1] x2 : 0000000000000001 x1 : ffff0000d30cd880 x0 : 0000000000000000 [ 96.163433][ C1] Call trace: [ 96.163436][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.163448][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.163460][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.163471][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.163482][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.163492][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.163502][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.163514][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.163523][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.163535][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.163543][ C1] tasklet_action_common+0x1dc/0x278 [ 96.163553][ C1] tasklet_action+0x68/0x8c [ 96.163561][ C1] handle_softirqs+0x2ec/0xd98 [ 96.163569][ C1] __do_softirq+0x14/0x20 [ 96.163578][ C1] ____do_softirq+0x14/0x20 [ 96.163586][ C1] call_on_irq_stack+0x30/0x48 [ 96.163594][ C1] do_softirq_own_stack+0x20/0x2c [ 96.163602][ C1] do_softirq+0x90/0xf8 [ 96.163609][ C1] __local_bh_enable_ip+0x240/0x35c [ 96.163617][ C1] fpsimd_restore_current_state+0x3a4/0x9c8 [ 96.163626][ C1] exit_to_user_mode_loop+0xe0/0x17c [ 96.163637][ C1] el0_svc+0x18c/0x260 [ 96.163647][ C1] el0t_64_sync_handler+0x44/0x104 [ 96.163657][ C1] el0t_64_sync+0x198/0x19c [ 96.163665][ C1] irq event stamp: 159219 [ 96.163668][ C1] hardirqs last enabled at (159218): [] kcov_remote_start+0x190/0x560 [ 96.163679][ C1] hardirqs last disabled at (159219): [] el1_brk64+0x20/0x54 [ 96.163689][ C1] softirqs last enabled at (158708): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 96.163699][ C1] softirqs last disabled at (158709): [] __do_softirq+0x14/0x20 [ 96.163708][ C1] ---[ end trace 0000000000000000 ]--- [ 96.165144][ T1159] ------------[ cut here ]------------ [ 96.165150][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 96.165167][ T1159] Modules linked in: [ 96.165174][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 96.165183][ T1159] Tainted: [W]=WARN [ 96.165186][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.165191][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 96.165204][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.165211][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.165220][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.165228][ T1159] sp : ffff800093da6ed0 [ 96.165231][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff0000f2868890 [ 96.165243][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.165253][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 96.165263][ T1159] x20: ffff000121810000 x19: ffff0000f2868800 x18: 1fffe00035bb1028 [ 96.165274][ T1159] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.165284][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.165294][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.165304][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.165313][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.165323][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 96.165333][ T1159] Call trace: [ 96.165335][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.165346][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.165357][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.165367][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.165377][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 96.165386][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.165395][ T1159] ieee80211_iface_work+0x600/0xd3c [ 96.165403][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 96.165413][ T1159] process_scheduled_works+0x91c/0x1250 [ 96.165422][ T1159] worker_thread+0x798/0xbd0 [ 96.165431][ T1159] kthread+0x304/0x3d4 [ 96.165438][ T1159] ret_from_fork+0x10/0x20 [ 96.165446][ T1159] irq event stamp: 727513 [ 96.165448][ T1159] hardirqs last enabled at (727511): [] kcov_remote_start+0x190/0x560 [ 96.165458][ T1159] hardirqs last disabled at (727513): [] el1_brk64+0x20/0x54 [ 96.165467][ T1159] softirqs last enabled at (727500): [] handle_softirqs+0xc28/0xd98 [ 96.165476][ T1159] softirqs last disabled at (727512): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.165487][ T1159] ---[ end trace 0000000000000000 ]--- [ 96.265673][ C1] ------------[ cut here ]------------ [ 96.265684][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/5832 [ 96.265708][ C1] Modules linked in: [ 96.265718][ C1] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 96.265729][ C1] Tainted: [W]=WARN [ 96.265736][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.265741][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.265750][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.265762][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.265773][ C1] sp : ffff80008ebe7150 [ 96.265777][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f2868490 [ 96.265790][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.265802][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 96.265814][ C1] x20: ffff000121810000 x19: ffff0000f2868400 x18: 00000000626f44a5 [ 96.265830][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.265842][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.265854][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 96.265865][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.265876][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.265887][ C1] x2 : 0000000000000001 x1 : ffff0000c8110000 x0 : 0000000000000000 [ 96.265898][ C1] Call trace: [ 96.265901][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.265914][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.265926][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.265937][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.265948][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.265959][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.265969][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.265978][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.265986][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.265999][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.266007][ C1] tasklet_action_common+0x1dc/0x278 [ 96.266017][ C1] tasklet_action+0x68/0x8c [ 96.266025][ C1] handle_softirqs+0x2ec/0xd98 [ 96.266033][ C1] __do_softirq+0x14/0x20 [ 96.266042][ C1] ____do_softirq+0x14/0x20 [ 96.266050][ C1] call_on_irq_stack+0x30/0x48 [ 96.266058][ C1] do_softirq_own_stack+0x20/0x2c [ 96.266066][ C1] do_softirq+0x90/0xf8 [ 96.266074][ C1] __local_bh_enable_ip+0x240/0x35c [ 96.266082][ C1] fpsimd_restore_current_state+0x3a4/0x9c8 [ 96.266091][ C1] exit_to_user_mode_loop+0xe0/0x17c [ 96.266102][ C1] el0_svc+0x18c/0x260 [ 96.266112][ C1] el0t_64_sync_handler+0x44/0x104 [ 96.266122][ C1] el0t_64_sync+0x198/0x19c [ 96.266130][ C1] irq event stamp: 238211 [ 96.266134][ C1] hardirqs last enabled at (238210): [] kcov_remote_start+0x190/0x560 [ 96.266145][ C1] hardirqs last disabled at (238211): [] el1_brk64+0x20/0x54 [ 96.266155][ C1] softirqs last enabled at (238016): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 96.266165][ C1] softirqs last disabled at (238017): [] __do_softirq+0x14/0x20 [ 96.266174][ C1] ---[ end trace 0000000000000000 ]--- [ 96.267356][ T13] ------------[ cut here ]------------ [ 96.267362][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 96.267379][ T13] Modules linked in: [ 96.267386][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 96.267396][ T13] Tainted: [W]=WARN [ 96.267399][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.267403][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 96.267415][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.267423][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.267432][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.267441][ T13] sp : ffff80008ed16ed0 [ 96.267444][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f2868090 [ 96.267455][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.267466][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 96.267476][ T13] x20: ffff000121810000 x19: ffff0000f2868000 x18: 1fffe00035bb1028 [ 96.267487][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.267497][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.267507][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.267517][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.267527][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.267537][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 96.267547][ T13] Call trace: [ 96.267550][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.267560][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.267571][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.267581][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.267591][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 96.267601][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.267609][ T13] ieee80211_iface_work+0x600/0xd3c [ 96.267617][ T13] cfg80211_wiphy_work+0x278/0x588 [ 96.267627][ T13] process_scheduled_works+0x91c/0x1250 [ 96.267636][ T13] worker_thread+0x798/0xbd0 [ 96.267645][ T13] kthread+0x304/0x3d4 [ 96.267653][ T13] ret_from_fork+0x10/0x20 [ 96.267660][ T13] irq event stamp: 2232697 [ 96.267663][ T13] hardirqs last enabled at (2232695): [] kcov_remote_start+0x190/0x560 [ 96.267672][ T13] hardirqs last disabled at (2232697): [] el1_brk64+0x20/0x54 [ 96.267682][ T13] softirqs last enabled at (2232684): [] handle_softirqs+0xc28/0xd98 [ 96.267690][ T13] softirqs last disabled at (2232696): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.267702][ T13] ---[ end trace 0000000000000000 ]--- [ 96.368040][ C1] ------------[ cut here ]------------ [ 96.368051][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 96.368084][ C1] Modules linked in: [ 96.368095][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 96.368107][ C1] Tainted: [W]=WARN [ 96.368111][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.368116][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.368125][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.368135][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.368145][ C1] sp : ffff80008edc6ef0 [ 96.368148][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff000101358c90 [ 96.368161][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.368173][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 96.368185][ C1] x20: ffff000121810000 x19: ffff000101358c00 x18: 1fffe00035bb1028 [ 96.368196][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 96.368208][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.368218][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 96.368230][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.368241][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.368252][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 96.368263][ C1] Call trace: [ 96.368266][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.368279][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.368291][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.368302][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.368314][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.368327][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.368336][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.368347][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.368356][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.368368][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.368376][ C1] tasklet_action_common+0x1dc/0x278 [ 96.368387][ C1] tasklet_action+0x68/0x8c [ 96.368395][ C1] handle_softirqs+0x2ec/0xd98 [ 96.368403][ C1] run_ksoftirqd+0x70/0xbc [ 96.368411][ C1] smpboot_thread_fn+0x4e4/0x97c [ 96.368420][ C1] kthread+0x304/0x3d4 [ 96.368429][ C1] ret_from_fork+0x10/0x20 [ 96.368438][ C1] irq event stamp: 22346677 [ 96.368442][ C1] hardirqs last enabled at (22346676): [] kcov_remote_start+0x190/0x560 [ 96.368453][ C1] hardirqs last disabled at (22346677): [] el1_brk64+0x20/0x54 [ 96.368465][ C1] softirqs last enabled at (22346154): [] handle_softirqs+0xc28/0xd98 [ 96.368474][ C1] softirqs last disabled at (22346157): [] run_ksoftirqd+0x70/0xbc [ 96.368483][ C1] ---[ end trace 0000000000000000 ]--- [ 96.369770][ T1159] ------------[ cut here ]------------ [ 96.369775][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 96.369791][ T1159] Modules linked in: [ 96.369798][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 96.369808][ T1159] Tainted: [W]=WARN [ 96.369810][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.369815][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 96.369830][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.369838][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.369848][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.369857][ T1159] sp : ffff800093da6ed0 [ 96.369860][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff000101325090 [ 96.369871][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.369881][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 96.369892][ T1159] x20: ffff000121810000 x19: ffff000101325000 x18: 1fffe00035bb1028 [ 96.369902][ T1159] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.369912][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.369922][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.369932][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.369942][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.369951][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 96.369961][ T1159] Call trace: [ 96.369964][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.369975][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.369985][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.369995][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.370006][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 96.370015][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.370023][ T1159] ieee80211_iface_work+0x600/0xd3c [ 96.370031][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 96.370041][ T1159] process_scheduled_works+0x91c/0x1250 [ 96.370050][ T1159] worker_thread+0x798/0xbd0 [ 96.370059][ T1159] kthread+0x304/0x3d4 [ 96.370066][ T1159] ret_from_fork+0x10/0x20 [ 96.370073][ T1159] irq event stamp: 746827 [ 96.370076][ T1159] hardirqs last enabled at (746825): [] kcov_remote_start+0x190/0x560 [ 96.370086][ T1159] hardirqs last disabled at (746827): [] el1_brk64+0x20/0x54 [ 96.370096][ T1159] softirqs last enabled at (746810): [] handle_softirqs+0xc28/0xd98 [ 96.370104][ T1159] softirqs last disabled at (746826): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.370116][ T1159] ---[ end trace 0000000000000000 ]--- [ 96.470411][ C1] ------------[ cut here ]------------ [ 96.470422][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 96.470446][ C1] Modules linked in: [ 96.470456][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 96.470467][ C1] Tainted: [W]=WARN [ 96.470471][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.470476][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.470484][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.470494][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.470503][ C1] sp : ffff80008edc6ef0 [ 96.470506][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff000101324890 [ 96.470519][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.470531][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 96.470543][ C1] x20: ffff000121810000 x19: ffff000101324800 x18: 1fffe00035bb1028 [ 96.470554][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 96.470566][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.470576][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 96.470588][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.470598][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.470609][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 96.470620][ C1] Call trace: [ 96.470623][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.470636][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.470648][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.470659][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.470670][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.470681][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.470691][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.470700][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.470708][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.470720][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.470728][ C1] tasklet_action_common+0x1dc/0x278 [ 96.470739][ C1] tasklet_action+0x68/0x8c [ 96.470747][ C1] handle_softirqs+0x2ec/0xd98 [ 96.470755][ C1] run_ksoftirqd+0x70/0xbc [ 96.470764][ C1] smpboot_thread_fn+0x4e4/0x97c [ 96.470772][ C1] kthread+0x304/0x3d4 [ 96.470781][ C1] ret_from_fork+0x10/0x20 [ 96.470790][ C1] irq event stamp: 22437071 [ 96.470793][ C1] hardirqs last enabled at (22437070): [] kcov_remote_start+0x190/0x560 [ 96.470805][ C1] hardirqs last disabled at (22437071): [] el1_brk64+0x20/0x54 [ 96.470816][ C1] softirqs last enabled at (22436572): [] handle_softirqs+0xc28/0xd98 [ 96.470828][ C1] softirqs last disabled at (22436575): [] run_ksoftirqd+0x70/0xbc [ 96.470840][ C1] ---[ end trace 0000000000000000 ]--- [ 96.471953][ T13] ------------[ cut here ]------------ [ 96.471958][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 96.471977][ T13] Modules linked in: [ 96.471984][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 96.471996][ T13] Tainted: [W]=WARN [ 96.471999][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.472004][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 96.472020][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.472029][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.472038][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.472047][ T13] sp : ffff80008ed16ed0 [ 96.472050][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff000101324090 [ 96.472061][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.472072][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 96.472083][ T13] x20: ffff000121810000 x19: ffff000101324000 x18: 1fffe00035bb1028 [ 96.472093][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.472104][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.472114][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.472124][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.472134][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.472144][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 96.472154][ T13] Call trace: [ 96.472157][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.472167][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.472178][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.472188][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.472198][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 96.472208][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.472216][ T13] ieee80211_iface_work+0x600/0xd3c [ 96.472224][ T13] cfg80211_wiphy_work+0x278/0x588 [ 96.472234][ T13] process_scheduled_works+0x91c/0x1250 [ 96.472243][ T13] worker_thread+0x798/0xbd0 [ 96.472252][ T13] kthread+0x304/0x3d4 [ 96.472260][ T13] ret_from_fork+0x10/0x20 [ 96.472267][ T13] irq event stamp: 2252103 [ 96.472270][ T13] hardirqs last enabled at (2252101): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 96.472281][ T13] hardirqs last disabled at (2252103): [] el1_brk64+0x20/0x54 [ 96.472291][ T13] softirqs last enabled at (2252086): [] handle_softirqs+0xc28/0xd98 [ 96.472299][ T13] softirqs last disabled at (2252102): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.472310][ T13] ---[ end trace 0000000000000000 ]--- [ 96.572792][ C1] ------------[ cut here ]------------ [ 96.572803][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 96.572832][ C1] Modules linked in: [ 96.572843][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 96.572855][ C1] Tainted: [W]=WARN [ 96.572858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.572862][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.572871][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.572881][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.572890][ C1] sp : ffff80008edc6ef0 [ 96.572893][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0001216c6090 [ 96.572906][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.572918][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 96.572930][ C1] x20: ffff000121810000 x19: ffff0001216c6000 x18: 00000000626f44a5 [ 96.572941][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 96.572953][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.572963][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 96.572975][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.572985][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.572996][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 96.573007][ C1] Call trace: [ 96.573010][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.573023][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.573035][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.573046][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.573057][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.573068][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.573078][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.573087][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.573095][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.573108][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.573115][ C1] tasklet_action_common+0x1dc/0x278 [ 96.573126][ C1] tasklet_action+0x68/0x8c [ 96.573134][ C1] handle_softirqs+0x2ec/0xd98 [ 96.573142][ C1] run_ksoftirqd+0x70/0xbc [ 96.573150][ C1] smpboot_thread_fn+0x4e4/0x97c [ 96.573159][ C1] kthread+0x304/0x3d4 [ 96.573167][ C1] ret_from_fork+0x10/0x20 [ 96.573177][ C1] irq event stamp: 22532063 [ 96.573180][ C1] hardirqs last enabled at (22532062): [] kcov_remote_start+0x190/0x560 [ 96.573192][ C1] hardirqs last disabled at (22532063): [] el1_brk64+0x20/0x54 [ 96.573203][ C1] softirqs last enabled at (22531540): [] handle_softirqs+0xc28/0xd98 [ 96.573212][ C1] softirqs last disabled at (22531543): [] run_ksoftirqd+0x70/0xbc [ 96.573221][ C1] ---[ end trace 0000000000000000 ]--- [ 96.574324][ T13] ------------[ cut here ]------------ [ 96.574328][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 96.574344][ T13] Modules linked in: [ 96.574350][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 96.574360][ T13] Tainted: [W]=WARN [ 96.574362][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.574367][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 96.574383][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.574392][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.574402][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.574411][ T13] sp : ffff80008ed16ed0 [ 96.574414][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0001216c5890 [ 96.574425][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.574436][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 96.574446][ T13] x20: ffff000121810000 x19: ffff0001216c5800 x18: 1fffe00035bb1028 [ 96.574457][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.574467][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.574477][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.574488][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.574497][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.574507][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 96.574517][ T13] Call trace: [ 96.574520][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.574531][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.574541][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.574552][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.574562][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 96.574572][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.574580][ T13] ieee80211_iface_work+0x600/0xd3c [ 96.574588][ T13] cfg80211_wiphy_work+0x278/0x588 [ 96.574598][ T13] process_scheduled_works+0x91c/0x1250 [ 96.574607][ T13] worker_thread+0x798/0xbd0 [ 96.574616][ T13] kthread+0x304/0x3d4 [ 96.574623][ T13] ret_from_fork+0x10/0x20 [ 96.574630][ T13] irq event stamp: 2263445 [ 96.574633][ T13] hardirqs last enabled at (2263443): [] kcov_remote_start+0x190/0x560 [ 96.574643][ T13] hardirqs last disabled at (2263445): [] el1_brk64+0x20/0x54 [ 96.574652][ T13] softirqs last enabled at (2263432): [] handle_softirqs+0xc28/0xd98 [ 96.574661][ T13] softirqs last disabled at (2263444): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.574672][ T13] ---[ end trace 0000000000000000 ]--- [ 96.675258][ C1] ------------[ cut here ]------------ [ 96.675268][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 96.675292][ C1] Modules linked in: [ 96.675302][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 96.675313][ C1] Tainted: [W]=WARN [ 96.675316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.675322][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.675330][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.675340][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.675349][ C1] sp : ffff80008ebe7150 [ 96.675352][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d99c1c90 [ 96.675365][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.675377][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 96.675388][ C1] x20: ffff000121810000 x19: ffff0000d99c1c00 x18: 0000000000000000 [ 96.675400][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.675411][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.675422][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 96.675433][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.675444][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.675455][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 96.675466][ C1] Call trace: [ 96.675469][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.675482][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.675494][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.675505][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.675516][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.675526][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.675536][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.675545][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.675554][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.675566][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.675574][ C1] tasklet_action_common+0x1dc/0x278 [ 96.675584][ C1] tasklet_action+0x68/0x8c [ 96.675592][ C1] handle_softirqs+0x2ec/0xd98 [ 96.675600][ C1] __do_softirq+0x14/0x20 [ 96.675609][ C1] ____do_softirq+0x14/0x20 [ 96.675617][ C1] call_on_irq_stack+0x30/0x48 [ 96.675625][ C1] do_softirq_own_stack+0x20/0x2c [ 96.675633][ C1] do_softirq+0x90/0xf8 [ 96.675641][ C1] __local_bh_enable_ip+0x240/0x35c [ 96.675649][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 96.675660][ C1] lock_sock_nested+0xb0/0x110 [ 96.675670][ C1] tcp_recvmsg+0x174/0x4d8 [ 96.675679][ C1] inet_recvmsg+0xb8/0xd8 [ 96.675688][ C1] sock_recvmsg+0xd4/0x170 [ 96.675697][ C1] sock_read_iter+0x1d4/0x288 [ 96.675707][ C1] vfs_read+0x498/0x8c8 [ 96.675719][ C1] ksys_read+0x12c/0x228 [ 96.675729][ C1] __arm64_sys_read+0x84/0x98 [ 96.675740][ C1] invoke_syscall+0x98/0x244 [ 96.675751][ C1] el0_svc_common+0xec/0x23c [ 96.675761][ C1] do_el0_svc+0x4c/0x5c [ 96.675772][ C1] el0_svc+0x64/0x260 [ 96.675781][ C1] el0t_64_sync_handler+0x44/0x104 [ 96.675791][ C1] el0t_64_sync+0x198/0x19c [ 96.675799][ C1] irq event stamp: 1446897 [ 96.675802][ C1] hardirqs last enabled at (1446896): [] kcov_remote_start+0x190/0x560 [ 96.675813][ C1] hardirqs last disabled at (1446897): [] el1_brk64+0x20/0x54 [ 96.675824][ C1] softirqs last enabled at (1446704): [] lock_sock_nested+0xb0/0x110 [ 96.675839][ C1] softirqs last disabled at (1446705): [] __do_softirq+0x14/0x20 [ 96.675849][ C1] ---[ end trace 0000000000000000 ]--- [ 96.676941][ T13] ------------[ cut here ]------------ [ 96.676945][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 96.676961][ T13] Modules linked in: [ 96.676967][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 96.676976][ T13] Tainted: [W]=WARN [ 96.676979][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.676986][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 96.676997][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.677005][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.677014][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.677022][ T13] sp : ffff80008ed16ed0 [ 96.677025][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000fd072c90 [ 96.677036][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.677047][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 96.677058][ T13] x20: ffff000121810000 x19: ffff0000fd072c00 x18: 1fffe00035bb1028 [ 96.677068][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.677079][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.677088][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.677099][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.677108][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.677118][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 96.677128][ T13] Call trace: [ 96.677131][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.677141][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.677152][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.677162][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.677173][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 96.677182][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.677191][ T13] ieee80211_iface_work+0x600/0xd3c [ 96.677198][ T13] cfg80211_wiphy_work+0x278/0x588 [ 96.677209][ T13] process_scheduled_works+0x91c/0x1250 [ 96.677218][ T13] worker_thread+0x798/0xbd0 [ 96.677227][ T13] kthread+0x304/0x3d4 [ 96.677234][ T13] ret_from_fork+0x10/0x20 [ 96.677242][ T13] irq event stamp: 2267539 [ 96.677244][ T13] hardirqs last enabled at (2267538): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 96.677256][ T13] hardirqs last disabled at (2267539): [] el1_brk64+0x20/0x54 [ 96.677265][ T13] softirqs last enabled at (2267522): [] handle_softirqs+0xc28/0xd98 [ 96.677274][ T13] softirqs last disabled at (2267534): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.677285][ T13] ---[ end trace 0000000000000000 ]--- [ 96.777659][ C1] ------------[ cut here ]------------ [ 96.777669][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 96.777694][ C1] Modules linked in: [ 96.777704][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 96.777715][ C1] Tainted: [W]=WARN [ 96.777719][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.777724][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.777733][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.777742][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.777752][ C1] sp : ffff80008ebe7150 [ 96.777755][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff00012209b090 [ 96.777768][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.777780][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 96.777792][ C1] x20: ffff000121810000 x19: ffff00012209b000 x18: 0000000000000000 [ 96.777803][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.777814][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.777831][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 96.777843][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.777855][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.777866][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 96.777878][ C1] Call trace: [ 96.777881][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.777893][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.777905][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.777916][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.777927][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.777938][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.777948][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.777956][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.777965][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.777977][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.777985][ C1] tasklet_action_common+0x1dc/0x278 [ 96.777996][ C1] tasklet_action+0x68/0x8c [ 96.778004][ C1] handle_softirqs+0x2ec/0xd98 [ 96.778012][ C1] __do_softirq+0x14/0x20 [ 96.778021][ C1] ____do_softirq+0x14/0x20 [ 96.778030][ C1] call_on_irq_stack+0x30/0x48 [ 96.778037][ C1] do_softirq_own_stack+0x20/0x2c [ 96.778045][ C1] do_softirq+0x90/0xf8 [ 96.778053][ C1] __local_bh_enable_ip+0x240/0x35c [ 96.778061][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 96.778073][ C1] lock_sock_nested+0xb0/0x110 [ 96.778083][ C1] tcp_recvmsg+0x174/0x4d8 [ 96.778092][ C1] inet_recvmsg+0xb8/0xd8 [ 96.778101][ C1] sock_recvmsg+0xd4/0x170 [ 96.778110][ C1] sock_read_iter+0x1d4/0x288 [ 96.778120][ C1] vfs_read+0x498/0x8c8 [ 96.778131][ C1] ksys_read+0x12c/0x228 [ 96.778142][ C1] __arm64_sys_read+0x84/0x98 [ 96.778153][ C1] invoke_syscall+0x98/0x244 [ 96.778164][ C1] el0_svc_common+0xec/0x23c [ 96.778174][ C1] do_el0_svc+0x4c/0x5c [ 96.778184][ C1] el0_svc+0x64/0x260 [ 96.778194][ C1] el0t_64_sync_handler+0x44/0x104 [ 96.778204][ C1] el0t_64_sync+0x198/0x19c [ 96.778212][ C1] irq event stamp: 1461669 [ 96.778215][ C1] hardirqs last enabled at (1461668): [] kcov_remote_start+0x190/0x560 [ 96.778226][ C1] hardirqs last disabled at (1461669): [] el1_brk64+0x20/0x54 [ 96.778237][ C1] softirqs last enabled at (1461476): [] lock_sock_nested+0xb0/0x110 [ 96.778246][ C1] softirqs last disabled at (1461477): [] __do_softirq+0x14/0x20 [ 96.778255][ C1] ---[ end trace 0000000000000000 ]--- [ 96.779525][ T54] ------------[ cut here ]------------ [ 96.779531][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 96.779555][ T54] Modules linked in: [ 96.779562][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 96.779572][ T54] Tainted: [W]=WARN [ 96.779574][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.779579][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 96.779591][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.779599][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.779608][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.779616][ T54] sp : ffff800090336ed0 [ 96.779619][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff000122098090 [ 96.779630][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.779641][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 96.779652][ T54] x20: ffff000121810000 x19: ffff000122098000 x18: 1fffe00035bb1028 [ 96.779662][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.779672][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.779682][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.779692][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.779702][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.779712][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 96.779721][ T54] Call trace: [ 96.779724][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.779735][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.779745][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.779756][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.779766][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 96.779775][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.779783][ T54] ieee80211_iface_work+0x600/0xd3c [ 96.779791][ T54] cfg80211_wiphy_work+0x278/0x588 [ 96.779801][ T54] process_scheduled_works+0x91c/0x1250 [ 96.779810][ T54] worker_thread+0x798/0xbd0 [ 96.779819][ T54] kthread+0x304/0x3d4 [ 96.779831][ T54] ret_from_fork+0x10/0x20 [ 96.779839][ T54] irq event stamp: 1012417 [ 96.779842][ T54] hardirqs last enabled at (1012415): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 96.779853][ T54] hardirqs last disabled at (1012417): [] el1_brk64+0x20/0x54 [ 96.779863][ T54] softirqs last enabled at (1012398): [] handle_softirqs+0xc28/0xd98 [ 96.779872][ T54] softirqs last disabled at (1012416): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.779884][ T54] ---[ end trace 0000000000000000 ]--- [ 96.880027][ C1] ------------[ cut here ]------------ [ 96.880038][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 96.880063][ C1] Modules linked in: [ 96.880074][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 96.880085][ C1] Tainted: [W]=WARN [ 96.880089][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.880094][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 96.880106][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.880114][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.880124][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.880134][ C1] sp : ffff80008ebe7150 [ 96.880137][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff000122099c90 [ 96.880150][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.880162][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 96.880174][ C1] x20: ffff000121810000 x19: ffff000122099c00 x18: 000000007ddbf87f [ 96.880186][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 96.880197][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.880208][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000303 [ 96.880220][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.880230][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.880241][ C1] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 96.880252][ C1] Call trace: [ 96.880256][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.880268][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.880280][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.880291][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.880303][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.880313][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.880323][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.880332][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.880341][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.880354][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.880362][ C1] tasklet_action_common+0x1dc/0x278 [ 96.880372][ C1] tasklet_action+0x68/0x8c [ 96.880380][ C1] handle_softirqs+0x2ec/0xd98 [ 96.880388][ C1] __do_softirq+0x14/0x20 [ 96.880397][ C1] ____do_softirq+0x14/0x20 [ 96.880405][ C1] call_on_irq_stack+0x30/0x48 [ 96.880413][ C1] do_softirq_own_stack+0x20/0x2c [ 96.880421][ C1] do_softirq+0x90/0xf8 [ 96.880428][ C1] __local_bh_enable_ip+0x240/0x35c [ 96.880437][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 96.880448][ C1] nsim_dev_trap_report_work+0x670/0x9cc [ 96.880456][ C1] process_scheduled_works+0x91c/0x1250 [ 96.880466][ C1] worker_thread+0x798/0xbd0 [ 96.880476][ C1] kthread+0x304/0x3d4 [ 96.880484][ C1] ret_from_fork+0x10/0x20 [ 96.880492][ C1] irq event stamp: 2277041 [ 96.880496][ C1] hardirqs last enabled at (2277040): [] kcov_remote_start+0x190/0x560 [ 96.880507][ C1] hardirqs last disabled at (2277041): [] el1_brk64+0x20/0x54 [ 96.880518][ C1] softirqs last enabled at (2276526): [] nsim_dev_trap_report_work+0x670/0x9cc [ 96.880527][ C1] softirqs last disabled at (2276527): [] __do_softirq+0x14/0x20 [ 96.880536][ C1] ---[ end trace 0000000000000000 ]--- [ 96.883589][ T13] ------------[ cut here ]------------ [ 96.883594][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 96.883610][ T13] Modules linked in: [ 96.883616][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 96.883626][ T13] Tainted: [W]=WARN [ 96.883629][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.883633][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 96.883644][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.883652][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.883661][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.883670][ T13] sp : ffff80008ed16ed0 [ 96.883672][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff000122099490 [ 96.883683][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.883694][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 96.883704][ T13] x20: ffff000121810000 x19: ffff000122099400 x18: 00000000e4621e73 [ 96.883715][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.883725][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.883735][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.883745][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.883755][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.883765][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 96.883774][ T13] Call trace: [ 96.883777][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.883787][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.883798][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.883808][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.883819][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 96.883831][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.883840][ T13] ieee80211_iface_work+0x600/0xd3c [ 96.883849][ T13] cfg80211_wiphy_work+0x278/0x588 [ 96.883859][ T13] process_scheduled_works+0x91c/0x1250 [ 96.883868][ T13] worker_thread+0x798/0xbd0 [ 96.883877][ T13] kthread+0x304/0x3d4 [ 96.883884][ T13] ret_from_fork+0x10/0x20 [ 96.883892][ T13] irq event stamp: 2283369 [ 96.883894][ T13] hardirqs last enabled at (2283367): [] kcov_remote_start+0x190/0x560 [ 96.883904][ T13] hardirqs last disabled at (2283369): [] el1_brk64+0x20/0x54 [ 96.883914][ T13] softirqs last enabled at (2283356): [] handle_softirqs+0xc28/0xd98 [ 96.883922][ T13] softirqs last disabled at (2283368): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.883934][ T13] ---[ end trace 0000000000000000 ]--- [ 96.982415][ C1] ------------[ cut here ]------------ [ 96.982424][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 96.982448][ C1] Modules linked in: [ 96.982457][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 96.982468][ C1] Tainted: [W]=WARN [ 96.982472][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.982477][ C1] Workqueue: bat_events batadv_tt_purge [ 96.982489][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.982497][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.982507][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.982516][ C1] sp : ffff80008ebe7150 [ 96.982519][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d65fec90 [ 96.982532][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.982543][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 96.982555][ C1] x20: ffff000121810000 x19: ffff0000d65fec00 x18: 1fffe00035bb1028 [ 96.982567][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 96.982578][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.982589][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 96.982600][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.982611][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.982621][ C1] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 96.982632][ C1] Call trace: [ 96.982636][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.982648][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.982660][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.982671][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.982683][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 96.982693][ C1] ieee80211_scan_rx+0x450/0x928 [ 96.982703][ C1] ieee80211_rx_list+0x229c/0x3000 [ 96.982712][ C1] ieee80211_rx_napi+0x18c/0x370 [ 96.982721][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 96.982733][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 96.982741][ C1] tasklet_action_common+0x1dc/0x278 [ 96.982751][ C1] tasklet_action+0x68/0x8c [ 96.982760][ C1] handle_softirqs+0x2ec/0xd98 [ 96.982768][ C1] __do_softirq+0x14/0x20 [ 96.982776][ C1] ____do_softirq+0x14/0x20 [ 96.982784][ C1] call_on_irq_stack+0x30/0x48 [ 96.982792][ C1] do_softirq_own_stack+0x20/0x2c [ 96.982800][ C1] do_softirq+0x90/0xf8 [ 96.982808][ C1] __local_bh_enable_ip+0x240/0x35c [ 96.982816][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 96.982831][ C1] batadv_tt_local_purge+0x274/0x2f0 [ 96.982842][ C1] batadv_tt_purge+0x44/0x7b4 [ 96.982853][ C1] process_scheduled_works+0x91c/0x1250 [ 96.982863][ C1] worker_thread+0x798/0xbd0 [ 96.982872][ C1] kthread+0x304/0x3d4 [ 96.982881][ C1] ret_from_fork+0x10/0x20 [ 96.982889][ C1] irq event stamp: 2436029 [ 96.982892][ C1] hardirqs last enabled at (2436028): [] kcov_remote_start+0x190/0x560 [ 96.982903][ C1] hardirqs last disabled at (2436029): [] el1_brk64+0x20/0x54 [ 96.982914][ C1] softirqs last enabled at (2435514): [] batadv_tt_local_purge+0x274/0x2f0 [ 96.982925][ C1] softirqs last disabled at (2435515): [] __do_softirq+0x14/0x20 [ 96.982933][ C1] ---[ end trace 0000000000000000 ]--- [ 96.990103][ T54] ------------[ cut here ]------------ [ 96.990109][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 96.990125][ T54] Modules linked in: [ 96.990131][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 96.990141][ T54] Tainted: [W]=WARN [ 96.990143][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.990148][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 96.990159][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.990167][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 96.990176][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 96.990184][ T54] sp : ffff800090336ed0 [ 96.990187][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0000d65fe490 [ 96.990198][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 96.990208][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 96.990219][ T54] x20: ffff000121810000 x19: ffff0000d65fe400 x18: 1fffe00035bb1028 [ 96.990229][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 96.990239][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 96.990249][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 96.990259][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 96.990269][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 96.990278][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 96.990288][ T54] Call trace: [ 96.990290][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 96.990301][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 96.990311][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 96.990322][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 96.990332][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 96.990341][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 96.990349][ T54] ieee80211_iface_work+0x600/0xd3c [ 96.990357][ T54] cfg80211_wiphy_work+0x278/0x588 [ 96.990367][ T54] process_scheduled_works+0x91c/0x1250 [ 96.990376][ T54] worker_thread+0x798/0xbd0 [ 96.990385][ T54] kthread+0x304/0x3d4 [ 96.990392][ T54] ret_from_fork+0x10/0x20 [ 96.990399][ T54] irq event stamp: 1036415 [ 96.990402][ T54] hardirqs last enabled at (1036413): [] kcov_remote_start+0x190/0x560 [ 96.990412][ T54] hardirqs last disabled at (1036415): [] el1_brk64+0x20/0x54 [ 96.990421][ T54] softirqs last enabled at (1036400): [] handle_softirqs+0xc28/0xd98 [ 96.990430][ T54] softirqs last disabled at (1036414): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 96.990441][ T54] ---[ end trace 0000000000000000 ]--- [ 97.084908][ C1] ------------[ cut here ]------------ [ 97.084918][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 97.084950][ C1] Modules linked in: [ 97.084961][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 97.084973][ C1] Tainted: [W]=WARN [ 97.084976][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.084981][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.084990][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.085000][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.085010][ C1] sp : ffff80008ebe7150 [ 97.085013][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d65fc890 [ 97.085026][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.085037][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 97.085049][ C1] x20: ffff000121810000 x19: ffff0000d65fc800 x18: 00000000626f44a5 [ 97.085061][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.085072][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.085083][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 97.085094][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.085104][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.085115][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 97.085126][ C1] Call trace: [ 97.085129][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.085142][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.085154][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.085165][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.085176][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 97.085187][ C1] ieee80211_scan_rx+0x450/0x928 [ 97.085197][ C1] ieee80211_rx_list+0x229c/0x3000 [ 97.085206][ C1] ieee80211_rx_napi+0x18c/0x370 [ 97.085215][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 97.085227][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 97.085235][ C1] tasklet_action_common+0x1dc/0x278 [ 97.085246][ C1] tasklet_action+0x68/0x8c [ 97.085254][ C1] handle_softirqs+0x2ec/0xd98 [ 97.085262][ C1] __do_softirq+0x14/0x20 [ 97.085271][ C1] ____do_softirq+0x14/0x20 [ 97.085280][ C1] call_on_irq_stack+0x30/0x48 [ 97.085287][ C1] do_softirq_own_stack+0x20/0x2c [ 97.085295][ C1] do_softirq+0x90/0xf8 [ 97.085303][ C1] __local_bh_enable_ip+0x240/0x35c [ 97.085311][ C1] fpsimd_restore_current_state+0x3a4/0x9c8 [ 97.085320][ C1] exit_to_user_mode_loop+0xe0/0x17c [ 97.085331][ C1] el0_svc+0x18c/0x260 [ 97.085342][ C1] el0t_64_sync_handler+0x44/0x104 [ 97.085352][ C1] el0t_64_sync+0x198/0x19c [ 97.085360][ C1] irq event stamp: 1498793 [ 97.085363][ C1] hardirqs last enabled at (1498792): [] kcov_remote_start+0x190/0x560 [ 97.085374][ C1] hardirqs last disabled at (1498793): [] el1_brk64+0x20/0x54 [ 97.085385][ C1] softirqs last enabled at (1498596): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 97.085395][ C1] softirqs last disabled at (1498597): [] __do_softirq+0x14/0x20 [ 97.085403][ C1] ---[ end trace 0000000000000000 ]--- [ 97.086622][ T54] ------------[ cut here ]------------ [ 97.086627][ T54] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:3/54 [ 97.086645][ T54] Modules linked in: [ 97.086651][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT [ 97.086661][ T54] Tainted: [W]=WARN [ 97.086664][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.086669][ T54] Workqueue: events_unbound cfg80211_wiphy_work [ 97.086681][ T54] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.086688][ T54] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.086697][ T54] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.086706][ T54] sp : ffff800090336ed0 [ 97.086709][ T54] x29: ffff800090336f20 x28: 1ffff00011173571 x27: ffff0000d65fcc90 [ 97.086720][ T54] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.086731][ T54] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800090336fe0 [ 97.086741][ T54] x20: ffff000121810000 x19: ffff0000d65fcc00 x18: 1fffe00035bb1028 [ 97.086752][ T54] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.086762][ T54] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.086772][ T54] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 97.086782][ T54] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.086792][ T54] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.086802][ T54] x2 : 0000000000000001 x1 : ffff0000c2f01d80 x0 : 0000000000000000 [ 97.086812][ T54] Call trace: [ 97.086815][ T54] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.086829][ T54] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.086840][ T54] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.086851][ T54] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.086861][ T54] ieee80211_bss_info_update+0x5d0/0x944 [ 97.086871][ T54] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 97.086879][ T54] ieee80211_iface_work+0x600/0xd3c [ 97.086887][ T54] cfg80211_wiphy_work+0x278/0x588 [ 97.086897][ T54] process_scheduled_works+0x91c/0x1250 [ 97.086906][ T54] worker_thread+0x798/0xbd0 [ 97.086914][ T54] kthread+0x304/0x3d4 [ 97.086922][ T54] ret_from_fork+0x10/0x20 [ 97.086930][ T54] irq event stamp: 1042495 [ 97.086933][ T54] hardirqs last enabled at (1042493): [] kcov_remote_start+0x190/0x560 [ 97.086942][ T54] hardirqs last disabled at (1042495): [] el1_brk64+0x20/0x54 [ 97.086952][ T54] softirqs last enabled at (1042482): [] handle_softirqs+0xc28/0xd98 [ 97.086960][ T54] softirqs last disabled at (1042494): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 97.086972][ T54] ---[ end trace 0000000000000000 ]--- [ 97.187257][ C1] ------------[ cut here ]------------ [ 97.187269][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 97.187296][ C1] Modules linked in: [ 97.187305][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 97.187317][ C1] Tainted: [W]=WARN [ 97.187320][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.187326][ C1] Workqueue: events_unbound toggle_allocation_gate [ 97.187341][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.187349][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.187359][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.187368][ C1] sp : ffff80008ebe7150 [ 97.187371][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fd1d6890 [ 97.187384][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.187396][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 97.187408][ C1] x20: ffff000121810000 x19: ffff0000fd1d6800 x18: 00000000626f44a5 [ 97.187419][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 97.187431][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.187441][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 97.187452][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.187463][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.187474][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 97.187485][ C1] Call trace: [ 97.187488][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.187501][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.187513][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.187524][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.187535][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 97.187547][ C1] ieee80211_scan_rx+0x450/0x928 [ 97.187557][ C1] ieee80211_rx_list+0x229c/0x3000 [ 97.187566][ C1] ieee80211_rx_napi+0x18c/0x370 [ 97.187575][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 97.187588][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 97.187596][ C1] tasklet_action_common+0x1dc/0x278 [ 97.187606][ C1] tasklet_action+0x68/0x8c [ 97.187614][ C1] handle_softirqs+0x2ec/0xd98 [ 97.187622][ C1] __do_softirq+0x14/0x20 [ 97.187631][ C1] ____do_softirq+0x14/0x20 [ 97.187640][ C1] call_on_irq_stack+0x30/0x48 [ 97.187647][ C1] do_softirq_own_stack+0x20/0x2c [ 97.187655][ C1] __irq_exit_rcu+0x1ac/0x428 [ 97.187663][ C1] irq_exit_rcu+0x14/0x84 [ 97.187671][ C1] el1_interrupt+0x40/0x60 [ 97.187682][ C1] el1h_64_irq_handler+0x18/0x24 [ 97.187691][ C1] el1h_64_irq+0x6c/0x70 [ 97.187699][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 97.187712][ C1] kick_all_cpus_sync+0x34/0x40 [ 97.187722][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 97.187731][ C1] __jump_label_update+0x31c/0x344 [ 97.187740][ C1] jump_label_update+0x428/0x4b8 [ 97.187751][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 97.187763][ C1] static_key_enable+0x24/0x38 [ 97.187774][ C1] toggle_allocation_gate+0xb8/0x28c [ 97.187785][ C1] process_scheduled_works+0x91c/0x1250 [ 97.187794][ C1] worker_thread+0x798/0xbd0 [ 97.187804][ C1] kthread+0x304/0x3d4 [ 97.187812][ C1] ret_from_fork+0x10/0x20 [ 97.187820][ C1] irq event stamp: 209335 [ 97.187823][ C1] hardirqs last enabled at (209334): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 97.187840][ C1] hardirqs last disabled at (209335): [] el1_brk64+0x20/0x54 [ 97.187850][ C1] softirqs last enabled at (208850): [] handle_softirqs+0xc28/0xd98 [ 97.187860][ C1] softirqs last disabled at (208857): [] __do_softirq+0x14/0x20 [ 97.187868][ C1] ---[ end trace 0000000000000000 ]--- [ 97.188967][ T13] ------------[ cut here ]------------ [ 97.188971][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 97.188986][ T13] Modules linked in: [ 97.188991][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 97.189001][ T13] Tainted: [W]=WARN [ 97.189004][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.189008][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 97.189019][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.189027][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.189036][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.189045][ T13] sp : ffff80008ed16ed0 [ 97.189047][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000fd1d7890 [ 97.189059][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.189069][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 97.189080][ T13] x20: ffff000121810000 x19: ffff0000fd1d7800 x18: 1fffe00035bb1028 [ 97.189090][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.189101][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.189110][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 97.189121][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.189131][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.189141][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 97.189151][ T13] Call trace: [ 97.189153][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.189164][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.189174][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.189184][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.189195][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 97.189204][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 97.189212][ T13] ieee80211_iface_work+0x600/0xd3c [ 97.189220][ T13] cfg80211_wiphy_work+0x278/0x588 [ 97.189230][ T13] process_scheduled_works+0x91c/0x1250 [ 97.189239][ T13] worker_thread+0x798/0xbd0 [ 97.189248][ T13] kthread+0x304/0x3d4 [ 97.189255][ T13] ret_from_fork+0x10/0x20 [ 97.189263][ T13] irq event stamp: 2567653 [ 97.189266][ T13] hardirqs last enabled at (2567651): [] kcov_remote_start+0x190/0x560 [ 97.189276][ T13] hardirqs last disabled at (2567653): [] el1_brk64+0x20/0x54 [ 97.189285][ T13] softirqs last enabled at (2567640): [] handle_softirqs+0xc28/0xd98 [ 97.189294][ T13] softirqs last disabled at (2567652): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 97.189305][ T13] ---[ end trace 0000000000000000 ]--- [ 97.290063][ C1] ------------[ cut here ]------------ [ 97.290074][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: udevd/4703 [ 97.290101][ C1] Modules linked in: [ 97.290111][ C1] CPU: 1 UID: 0 PID: 4703 Comm: udevd Tainted: G W syzkaller #0 PREEMPT [ 97.290123][ C1] Tainted: [W]=WARN [ 97.290126][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.290131][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.290140][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.290150][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.290159][ C1] sp : ffff80008ebe7150 [ 97.290163][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d5f3a890 [ 97.290176][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.290187][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 97.290199][ C1] x20: ffff000121810000 x19: ffff0000d5f3a800 x18: 1fffe00035bac428 [ 97.290211][ C1] x17: 0000000000120020 x16: 0048dd8600000000 x15: 0000000000000000 [ 97.290222][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.290233][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 97.290244][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.290255][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.290266][ C1] x2 : 0000000000000001 x1 : ffff0000c56ad880 x0 : 0000000000000000 [ 97.290277][ C1] Call trace: [ 97.290281][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.290293][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.290305][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.290316][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.290327][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 97.290338][ C1] ieee80211_scan_rx+0x450/0x928 [ 97.290348][ C1] ieee80211_rx_list+0x229c/0x3000 [ 97.290357][ C1] ieee80211_rx_napi+0x18c/0x370 [ 97.290366][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 97.290378][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 97.290386][ C1] tasklet_action_common+0x1dc/0x278 [ 97.290397][ C1] tasklet_action+0x68/0x8c [ 97.290405][ C1] handle_softirqs+0x2ec/0xd98 [ 97.290413][ C1] __do_softirq+0x14/0x20 [ 97.290422][ C1] ____do_softirq+0x14/0x20 [ 97.290431][ C1] call_on_irq_stack+0x30/0x48 [ 97.290439][ C1] do_softirq_own_stack+0x20/0x2c [ 97.290447][ C1] do_softirq+0x90/0xf8 [ 97.290454][ C1] __local_bh_enable_ip+0x240/0x35c [ 97.290463][ C1] fpsimd_restore_current_state+0x3a4/0x9c8 [ 97.290472][ C1] exit_to_user_mode_loop+0xe0/0x17c [ 97.290483][ C1] el0_svc+0x18c/0x260 [ 97.290493][ C1] el0t_64_sync_handler+0x44/0x104 [ 97.290503][ C1] el0t_64_sync+0x198/0x19c [ 97.290511][ C1] irq event stamp: 806781 [ 97.290514][ C1] hardirqs last enabled at (806780): [] kcov_remote_start+0x190/0x560 [ 97.290525][ C1] hardirqs last disabled at (806781): [] el1_brk64+0x20/0x54 [ 97.290536][ C1] softirqs last enabled at (806556): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 97.290546][ C1] softirqs last disabled at (806557): [] __do_softirq+0x14/0x20 [ 97.290555][ C1] ---[ end trace 0000000000000000 ]--- [ 97.297116][ T6305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.298577][ T12] ------------[ cut here ]------------ [ 97.298583][ T12] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:0/12 [ 97.298603][ T12] Modules linked in: [ 97.298611][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT [ 97.298621][ T12] Tainted: [W]=WARN [ 97.298624][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.298629][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 97.298642][ T12] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.298649][ T12] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.298658][ T12] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.298667][ T12] sp : ffff80008ed06ed0 [ 97.298670][ T12] x29: ffff80008ed06f20 x28: 1ffff00011173571 x27: ffff0000fd175090 [ 97.298681][ T12] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.298692][ T12] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed06fe0 [ 97.298703][ T12] x20: ffff000121810000 x19: ffff0000fd175000 x18: 1fffe00035bb1028 [ 97.298713][ T12] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.298724][ T12] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.298734][ T12] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 97.298744][ T12] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.298754][ T12] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.298763][ T12] x2 : 0000000000000001 x1 : ffff0000c1a00000 x0 : 0000000000000000 [ 97.298774][ T12] Call trace: [ 97.298776][ T12] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.298787][ T12] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.298798][ T12] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.298809][ T12] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.298819][ T12] ieee80211_bss_info_update+0x5d0/0x944 [ 97.298836][ T12] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 97.298845][ T12] ieee80211_iface_work+0x600/0xd3c [ 97.298853][ T12] cfg80211_wiphy_work+0x278/0x588 [ 97.298863][ T12] process_scheduled_works+0x91c/0x1250 [ 97.298873][ T12] worker_thread+0x798/0xbd0 [ 97.298882][ T12] kthread+0x304/0x3d4 [ 97.298890][ T12] ret_from_fork+0x10/0x20 [ 97.298898][ T12] irq event stamp: 1800393 [ 97.298901][ T12] hardirqs last enabled at (1800391): [] kcov_remote_start+0x190/0x560 [ 97.298911][ T12] hardirqs last disabled at (1800393): [] el1_brk64+0x20/0x54 [ 97.298922][ T12] softirqs last enabled at (1800376): [] handle_softirqs+0xc28/0xd98 [ 97.298930][ T12] softirqs last disabled at (1800392): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 97.298942][ T12] ---[ end trace 0000000000000000 ]--- [ 97.392052][ C1] ------------[ cut here ]------------ [ 97.392063][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 97.392087][ C1] Modules linked in: [ 97.392097][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 97.392108][ C1] Tainted: [W]=WARN [ 97.392112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.392117][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.392125][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.392135][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.392144][ C1] sp : ffff80008ebe7150 [ 97.392148][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fd177c90 [ 97.392160][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.392172][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 97.392183][ C1] x20: ffff000121810000 x19: ffff0000fd177c00 x18: 0000000000000000 [ 97.392195][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 97.392206][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.392217][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 97.392228][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.392239][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.392250][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 97.392261][ C1] Call trace: [ 97.392264][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.392277][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.392289][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.392300][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.392311][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 97.392322][ C1] ieee80211_scan_rx+0x450/0x928 [ 97.392332][ C1] ieee80211_rx_list+0x229c/0x3000 [ 97.392341][ C1] ieee80211_rx_napi+0x18c/0x370 [ 97.392349][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 97.392362][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 97.392369][ C1] tasklet_action_common+0x1dc/0x278 [ 97.392380][ C1] tasklet_action+0x68/0x8c [ 97.392388][ C1] handle_softirqs+0x2ec/0xd98 [ 97.392396][ C1] __do_softirq+0x14/0x20 [ 97.392404][ C1] ____do_softirq+0x14/0x20 [ 97.392413][ C1] call_on_irq_stack+0x30/0x48 [ 97.392420][ C1] do_softirq_own_stack+0x20/0x2c [ 97.392428][ C1] do_softirq+0x90/0xf8 [ 97.392436][ C1] __local_bh_enable_ip+0x240/0x35c [ 97.392444][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 97.392455][ C1] lock_sock_nested+0xb0/0x110 [ 97.392465][ C1] tcp_recvmsg+0x174/0x4d8 [ 97.392474][ C1] inet_recvmsg+0xb8/0xd8 [ 97.392483][ C1] sock_recvmsg+0xd4/0x170 [ 97.392492][ C1] sock_read_iter+0x1d4/0x288 [ 97.392502][ C1] vfs_read+0x498/0x8c8 [ 97.392514][ C1] ksys_read+0x12c/0x228 [ 97.392524][ C1] __arm64_sys_read+0x84/0x98 [ 97.392535][ C1] invoke_syscall+0x98/0x244 [ 97.392546][ C1] el0_svc_common+0xec/0x23c [ 97.392556][ C1] do_el0_svc+0x4c/0x5c [ 97.392566][ C1] el0_svc+0x64/0x260 [ 97.392576][ C1] el0t_64_sync_handler+0x44/0x104 [ 97.392585][ C1] el0t_64_sync+0x198/0x19c [ 97.392594][ C1] irq event stamp: 1534967 [ 97.392597][ C1] hardirqs last enabled at (1534966): [] kcov_remote_start+0x190/0x560 [ 97.392609][ C1] hardirqs last disabled at (1534967): [] el1_brk64+0x20/0x54 [ 97.392619][ C1] softirqs last enabled at (1534488): [] lock_sock_nested+0xb0/0x110 [ 97.392628][ C1] softirqs last disabled at (1534489): [] __do_softirq+0x14/0x20 [ 97.392637][ C1] ---[ end trace 0000000000000000 ]--- [ 97.393727][ T13] ------------[ cut here ]------------ [ 97.393731][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 97.393746][ T13] Modules linked in: [ 97.393752][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 97.393762][ T13] Tainted: [W]=WARN [ 97.393764][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.393769][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 97.393783][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.393790][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.393799][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.393808][ T13] sp : ffff80008ed16ed0 [ 97.393811][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f32e5490 [ 97.393822][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.393837][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 97.393850][ T13] x20: ffff000121810000 x19: ffff0000f32e5400 x18: 1fffe00035bb1028 [ 97.393861][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.393871][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.393881][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 97.393891][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.393901][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.393911][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 97.393921][ T13] Call trace: [ 97.393923][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.393934][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.393945][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.393955][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.393965][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 97.393975][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 97.393983][ T13] ieee80211_iface_work+0x600/0xd3c [ 97.393991][ T13] cfg80211_wiphy_work+0x278/0x588 [ 97.394001][ T13] process_scheduled_works+0x91c/0x1250 [ 97.394011][ T13] worker_thread+0x798/0xbd0 [ 97.394019][ T13] kthread+0x304/0x3d4 [ 97.394027][ T13] ret_from_fork+0x10/0x20 [ 97.394034][ T13] irq event stamp: 2591371 [ 97.394037][ T13] hardirqs last enabled at (2591370): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 97.394048][ T13] hardirqs last disabled at (2591371): [] el1_brk64+0x20/0x54 [ 97.394057][ T13] softirqs last enabled at (2591356): [] handle_softirqs+0xc28/0xd98 [ 97.394066][ T13] softirqs last disabled at (2591368): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 97.394077][ T13] ---[ end trace 0000000000000000 ]--- [ 97.494447][ C1] ------------[ cut here ]------------ [ 97.494458][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 97.494485][ C1] Modules linked in: [ 97.494496][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 97.494508][ C1] Tainted: [W]=WARN [ 97.494512][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.494517][ C1] Workqueue: events_unbound toggle_allocation_gate [ 97.494532][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.494540][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.494550][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.494559][ C1] sp : ffff80008ebe7150 [ 97.494562][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f32e7890 [ 97.494575][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.494587][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 97.494598][ C1] x20: ffff000121810000 x19: ffff0000f32e7800 x18: 00000000626f44a5 [ 97.494610][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 97.494621][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.494632][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 97.494643][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.494654][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.494665][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 97.494676][ C1] Call trace: [ 97.494679][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.494692][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.494703][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.494715][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.494726][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 97.494737][ C1] ieee80211_scan_rx+0x450/0x928 [ 97.494746][ C1] ieee80211_rx_list+0x229c/0x3000 [ 97.494755][ C1] ieee80211_rx_napi+0x18c/0x370 [ 97.494764][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 97.494776][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 97.494784][ C1] tasklet_action_common+0x1dc/0x278 [ 97.494794][ C1] tasklet_action+0x68/0x8c [ 97.494802][ C1] handle_softirqs+0x2ec/0xd98 [ 97.494810][ C1] __do_softirq+0x14/0x20 [ 97.494819][ C1] ____do_softirq+0x14/0x20 [ 97.494832][ C1] call_on_irq_stack+0x30/0x48 [ 97.494840][ C1] do_softirq_own_stack+0x20/0x2c [ 97.494848][ C1] __irq_exit_rcu+0x1ac/0x428 [ 97.494856][ C1] irq_exit_rcu+0x14/0x84 [ 97.494864][ C1] el1_interrupt+0x40/0x60 [ 97.494874][ C1] el1h_64_irq_handler+0x18/0x24 [ 97.494883][ C1] el1h_64_irq+0x6c/0x70 [ 97.494891][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 97.494903][ C1] kick_all_cpus_sync+0x34/0x40 [ 97.494914][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 97.494923][ C1] __jump_label_update+0x31c/0x344 [ 97.494932][ C1] jump_label_update+0x428/0x4b8 [ 97.494943][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 97.494955][ C1] static_key_enable+0x24/0x38 [ 97.494966][ C1] toggle_allocation_gate+0xb8/0x28c [ 97.494977][ C1] process_scheduled_works+0x91c/0x1250 [ 97.494986][ C1] worker_thread+0x798/0xbd0 [ 97.494996][ C1] kthread+0x304/0x3d4 [ 97.495004][ C1] ret_from_fork+0x10/0x20 [ 97.495012][ C1] irq event stamp: 211911 [ 97.495016][ C1] hardirqs last enabled at (211910): [] kcov_remote_start+0x190/0x560 [ 97.495026][ C1] hardirqs last disabled at (211911): [] el1_brk64+0x20/0x54 [ 97.495037][ C1] softirqs last enabled at (211428): [] handle_softirqs+0xc28/0xd98 [ 97.495046][ C1] softirqs last disabled at (211435): [] __do_softirq+0x14/0x20 [ 97.495055][ C1] ---[ end trace 0000000000000000 ]--- [ 97.496163][ T13] ------------[ cut here ]------------ [ 97.496167][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 97.496182][ T13] Modules linked in: [ 97.496188][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 97.496197][ T13] Tainted: [W]=WARN [ 97.496200][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.496204][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 97.496215][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.496225][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.496235][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.496244][ T13] sp : ffff80008ed16ed0 [ 97.496247][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f32e7090 [ 97.496258][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.496269][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 97.496279][ T13] x20: ffff000121810000 x19: ffff0000f32e7000 x18: 1fffe00035bb1028 [ 97.496290][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.496300][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.496310][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 97.496320][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.496330][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.496340][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 97.496350][ T13] Call trace: [ 97.496353][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.496363][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.496374][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.496384][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.496395][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 97.496404][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 97.496413][ T13] ieee80211_iface_work+0x600/0xd3c [ 97.496421][ T13] cfg80211_wiphy_work+0x278/0x588 [ 97.496431][ T13] process_scheduled_works+0x91c/0x1250 [ 97.496440][ T13] worker_thread+0x798/0xbd0 [ 97.496448][ T13] kthread+0x304/0x3d4 [ 97.496456][ T13] ret_from_fork+0x10/0x20 [ 97.496463][ T13] irq event stamp: 2600277 [ 97.496466][ T13] hardirqs last enabled at (2600275): [] kcov_remote_start+0x190/0x560 [ 97.496476][ T13] hardirqs last disabled at (2600277): [] el1_brk64+0x20/0x54 [ 97.496485][ T13] softirqs last enabled at (2600264): [] handle_softirqs+0xc28/0xd98 [ 97.496494][ T13] softirqs last disabled at (2600276): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 97.496505][ T13] ---[ end trace 0000000000000000 ]--- [ 97.596836][ C1] ------------[ cut here ]------------ [ 97.596846][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 97.596876][ C1] Modules linked in: [ 97.596886][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 97.596898][ C1] Tainted: [W]=WARN [ 97.596901][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.596906][ C1] Workqueue: events_unbound toggle_allocation_gate [ 97.596920][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.596928][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.596938][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.596947][ C1] sp : ffff80008ebe7150 [ 97.596950][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f32e6c90 [ 97.596963][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.596975][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 97.596986][ C1] x20: ffff000121810000 x19: ffff0000f32e6c00 x18: 00000000626f44a5 [ 97.596998][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 97.597009][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.597020][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 97.597031][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.597042][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.597053][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 97.597064][ C1] Call trace: [ 97.597067][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.597080][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.597091][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.597102][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.597114][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 97.597125][ C1] ieee80211_scan_rx+0x450/0x928 [ 97.597134][ C1] ieee80211_rx_list+0x229c/0x3000 [ 97.597143][ C1] ieee80211_rx_napi+0x18c/0x370 [ 97.597152][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 97.597164][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 97.597172][ C1] tasklet_action_common+0x1dc/0x278 [ 97.597182][ C1] tasklet_action+0x68/0x8c [ 97.597190][ C1] handle_softirqs+0x2ec/0xd98 [ 97.597198][ C1] __do_softirq+0x14/0x20 [ 97.597207][ C1] ____do_softirq+0x14/0x20 [ 97.597215][ C1] call_on_irq_stack+0x30/0x48 [ 97.597223][ C1] do_softirq_own_stack+0x20/0x2c [ 97.597231][ C1] __irq_exit_rcu+0x1ac/0x428 [ 97.597239][ C1] irq_exit_rcu+0x14/0x84 [ 97.597247][ C1] el1_interrupt+0x40/0x60 [ 97.597257][ C1] el1h_64_irq_handler+0x18/0x24 [ 97.597267][ C1] el1h_64_irq+0x6c/0x70 [ 97.597275][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 97.597287][ C1] kick_all_cpus_sync+0x34/0x40 [ 97.597298][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 97.597307][ C1] __jump_label_update+0x31c/0x344 [ 97.597316][ C1] jump_label_update+0x428/0x4b8 [ 97.597327][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 97.597339][ C1] static_key_enable+0x24/0x38 [ 97.597349][ C1] toggle_allocation_gate+0xb8/0x28c [ 97.597360][ C1] process_scheduled_works+0x91c/0x1250 [ 97.597370][ C1] worker_thread+0x798/0xbd0 [ 97.597379][ C1] kthread+0x304/0x3d4 [ 97.597387][ C1] ret_from_fork+0x10/0x20 [ 97.597395][ C1] irq event stamp: 212805 [ 97.597399][ C1] hardirqs last enabled at (212804): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 97.597411][ C1] hardirqs last disabled at (212805): [] el1_brk64+0x20/0x54 [ 97.597421][ C1] softirqs last enabled at (212322): [] handle_softirqs+0xc28/0xd98 [ 97.597430][ C1] softirqs last disabled at (212329): [] __do_softirq+0x14/0x20 [ 97.597438][ C1] ---[ end trace 0000000000000000 ]--- [ 97.598490][ T13] ------------[ cut here ]------------ [ 97.598493][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 97.598510][ T13] Modules linked in: [ 97.598516][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 97.598525][ T13] Tainted: [W]=WARN [ 97.598528][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.598533][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 97.598544][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.598552][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.598560][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.598569][ T13] sp : ffff80008ed16ed0 [ 97.598572][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f32e5c90 [ 97.598583][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.598594][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 97.598605][ T13] x20: ffff000121810000 x19: ffff0000f32e5c00 x18: 00000000626f44a5 [ 97.598615][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.598626][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.598636][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 97.598646][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.598656][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.598666][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 97.598676][ T13] Call trace: [ 97.598679][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.598689][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.598700][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.598710][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.598721][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 97.598730][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 97.598738][ T13] ieee80211_iface_work+0x600/0xd3c [ 97.598746][ T13] cfg80211_wiphy_work+0x278/0x588 [ 97.598756][ T13] process_scheduled_works+0x91c/0x1250 [ 97.598765][ T13] worker_thread+0x798/0xbd0 [ 97.598774][ T13] kthread+0x304/0x3d4 [ 97.598781][ T13] ret_from_fork+0x10/0x20 [ 97.598789][ T13] irq event stamp: 2604439 [ 97.598792][ T13] hardirqs last enabled at (2604437): [] kcov_remote_start+0x190/0x560 [ 97.598802][ T13] hardirqs last disabled at (2604439): [] el1_brk64+0x20/0x54 [ 97.598811][ T13] softirqs last enabled at (2604426): [] handle_softirqs+0xc28/0xd98 [ 97.598820][ T13] softirqs last disabled at (2604438): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 97.598836][ T13] ---[ end trace 0000000000000000 ]--- [ 97.699220][ C1] ------------[ cut here ]------------ [ 97.699231][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 97.699255][ C1] Modules linked in: [ 97.699265][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 97.699276][ C1] Tainted: [W]=WARN [ 97.699279][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.699285][ C1] Workqueue: bat_events batadv_tt_purge [ 97.699297][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.699305][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.699315][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.699324][ C1] sp : ffff80008ebe7150 [ 97.699328][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fd2c2490 [ 97.699340][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.699352][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 97.699363][ C1] x20: ffff000121810000 x19: ffff0000fd2c2400 x18: 1fffe00035bb1028 [ 97.699375][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 97.699387][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.699397][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 97.699409][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.699419][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.699430][ C1] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 97.699441][ C1] Call trace: [ 97.699444][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.699457][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.699469][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.699480][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.699491][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 97.699502][ C1] ieee80211_scan_rx+0x450/0x928 [ 97.699511][ C1] ieee80211_rx_list+0x229c/0x3000 [ 97.699520][ C1] ieee80211_rx_napi+0x18c/0x370 [ 97.699529][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 97.699541][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 97.699549][ C1] tasklet_action_common+0x1dc/0x278 [ 97.699559][ C1] tasklet_action+0x68/0x8c [ 97.699568][ C1] handle_softirqs+0x2ec/0xd98 [ 97.699576][ C1] __do_softirq+0x14/0x20 [ 97.699584][ C1] ____do_softirq+0x14/0x20 [ 97.699593][ C1] call_on_irq_stack+0x30/0x48 [ 97.699600][ C1] do_softirq_own_stack+0x20/0x2c [ 97.699608][ C1] do_softirq+0x90/0xf8 [ 97.699616][ C1] __local_bh_enable_ip+0x240/0x35c [ 97.699624][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 97.699635][ C1] batadv_tt_local_purge+0x274/0x2f0 [ 97.699646][ C1] batadv_tt_purge+0x44/0x7b4 [ 97.699655][ C1] process_scheduled_works+0x91c/0x1250 [ 97.699665][ C1] worker_thread+0x798/0xbd0 [ 97.699675][ C1] kthread+0x304/0x3d4 [ 97.699683][ C1] ret_from_fork+0x10/0x20 [ 97.699691][ C1] irq event stamp: 2630471 [ 97.699695][ C1] hardirqs last enabled at (2630470): [] kcov_remote_start+0x190/0x560 [ 97.699706][ C1] hardirqs last disabled at (2630471): [] el1_brk64+0x20/0x54 [ 97.699716][ C1] softirqs last enabled at (2629944): [] batadv_tt_local_purge+0x274/0x2f0 [ 97.699727][ C1] softirqs last disabled at (2629945): [] __do_softirq+0x14/0x20 [ 97.699736][ C1] ---[ end trace 0000000000000000 ]--- [ 97.748485][ T3847] ------------[ cut here ]------------ [ 97.748494][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 97.748516][ T3847] Modules linked in: [ 97.748524][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 97.748534][ T3847] Tainted: [W]=WARN [ 97.748537][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.748542][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 97.748554][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.748561][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.748570][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.748579][ T3847] sp : ffff80009a056ed0 [ 97.748582][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000fd2c1c90 [ 97.748593][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.748603][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 97.748614][ T3847] x20: ffff000121810000 x19: ffff0000fd2c1c00 x18: 000000007ace4c24 [ 97.748624][ T3847] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.748635][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.748644][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 97.748654][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.748664][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.748673][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 97.748683][ T3847] Call trace: [ 97.748686][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.748697][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.748708][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.748718][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.748728][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 97.748738][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 97.748746][ T3847] ieee80211_iface_work+0x600/0xd3c [ 97.748754][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 97.748764][ T3847] process_scheduled_works+0x91c/0x1250 [ 97.748773][ T3847] worker_thread+0x798/0xbd0 [ 97.748782][ T3847] kthread+0x304/0x3d4 [ 97.748790][ T3847] ret_from_fork+0x10/0x20 [ 97.748798][ T3847] irq event stamp: 1181483 [ 97.748800][ T3847] hardirqs last enabled at (1181481): [] kcov_remote_start+0x190/0x560 [ 97.748811][ T3847] hardirqs last disabled at (1181483): [] el1_brk64+0x20/0x54 [ 97.748822][ T3847] softirqs last enabled at (1181468): [] handle_softirqs+0xc28/0xd98 [ 97.748835][ T3847] softirqs last disabled at (1181482): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 97.748848][ T3847] ---[ end trace 0000000000000000 ]--- [ 97.801592][ C1] ------------[ cut here ]------------ [ 97.801602][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 97.801630][ C1] Modules linked in: [ 97.801640][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 97.801652][ C1] Tainted: [W]=WARN [ 97.801656][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.801661][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.801670][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.801680][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.801689][ C1] sp : ffff80008edc6ef0 [ 97.801693][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000fd2c2090 [ 97.801706][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.801718][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 97.801730][ C1] x20: ffff000121810000 x19: ffff0000fd2c2000 x18: 1fffe00035bb1028 [ 97.801742][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 97.801753][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.801764][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 97.801776][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.801787][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.801798][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 97.801809][ C1] Call trace: [ 97.801812][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.801825][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.801843][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.801856][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.801869][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 97.801881][ C1] ieee80211_scan_rx+0x450/0x928 [ 97.801892][ C1] ieee80211_rx_list+0x229c/0x3000 [ 97.801901][ C1] ieee80211_rx_napi+0x18c/0x370 [ 97.801910][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 97.801922][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 97.801930][ C1] tasklet_action_common+0x1dc/0x278 [ 97.801941][ C1] tasklet_action+0x68/0x8c [ 97.801949][ C1] handle_softirqs+0x2ec/0xd98 [ 97.801957][ C1] run_ksoftirqd+0x70/0xbc [ 97.801965][ C1] smpboot_thread_fn+0x4e4/0x97c [ 97.801974][ C1] kthread+0x304/0x3d4 [ 97.801982][ C1] ret_from_fork+0x10/0x20 [ 97.801991][ C1] irq event stamp: 23483787 [ 97.801995][ C1] hardirqs last enabled at (23483786): [] kcov_remote_start+0x190/0x560 [ 97.802006][ C1] hardirqs last disabled at (23483787): [] el1_brk64+0x20/0x54 [ 97.802018][ C1] softirqs last enabled at (23483264): [] handle_softirqs+0xc28/0xd98 [ 97.802027][ C1] softirqs last disabled at (23483269): [] run_ksoftirqd+0x70/0xbc [ 97.802036][ C1] ---[ end trace 0000000000000000 ]--- [ 97.803090][ T1159] ------------[ cut here ]------------ [ 97.803094][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 97.803109][ T1159] Modules linked in: [ 97.803115][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 97.803124][ T1159] Tainted: [W]=WARN [ 97.803127][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.803132][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 97.803143][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.803151][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.803160][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.803168][ T1159] sp : ffff800093da6ed0 [ 97.803171][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff0000d91c1c90 [ 97.803182][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.803193][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 97.803203][ T1159] x20: ffff000121810000 x19: ffff0000d91c1c00 x18: 1fffe00035bb1028 [ 97.803214][ T1159] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.803224][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.803234][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 97.803244][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.803254][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.803265][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 97.803275][ T1159] Call trace: [ 97.803277][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.803288][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.803299][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.803309][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.803319][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 97.803329][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 97.803337][ T1159] ieee80211_iface_work+0x600/0xd3c [ 97.803345][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 97.803355][ T1159] process_scheduled_works+0x91c/0x1250 [ 97.803364][ T1159] worker_thread+0x798/0xbd0 [ 97.803372][ T1159] kthread+0x304/0x3d4 [ 97.803380][ T1159] ret_from_fork+0x10/0x20 [ 97.803387][ T1159] irq event stamp: 831123 [ 97.803390][ T1159] hardirqs last enabled at (831122): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 97.803402][ T1159] hardirqs last disabled at (831123): [] el1_brk64+0x20/0x54 [ 97.803411][ T1159] softirqs last enabled at (831106): [] handle_softirqs+0xc28/0xd98 [ 97.803420][ T1159] softirqs last disabled at (831118): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 97.803431][ T1159] ---[ end trace 0000000000000000 ]--- [ 97.904046][ C1] ------------[ cut here ]------------ [ 97.904056][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 97.904086][ C1] Modules linked in: [ 97.904096][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 97.904108][ C1] Tainted: [W]=WARN [ 97.904111][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.904117][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.904125][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.904135][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.904144][ C1] sp : ffff80008ebe7150 [ 97.904147][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f2879c90 [ 97.904160][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.904172][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 97.904183][ C1] x20: ffff000121810000 x19: ffff0000f2879c00 x18: 0000000000000000 [ 97.904195][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.904206][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.904217][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 97.904228][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.904239][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.904250][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 97.904261][ C1] Call trace: [ 97.904264][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.904277][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.904288][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.904300][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.904311][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 97.904322][ C1] ieee80211_scan_rx+0x450/0x928 [ 97.904332][ C1] ieee80211_rx_list+0x229c/0x3000 [ 97.904341][ C1] ieee80211_rx_napi+0x18c/0x370 [ 97.904349][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 97.904362][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 97.904370][ C1] tasklet_action_common+0x1dc/0x278 [ 97.904380][ C1] tasklet_action+0x68/0x8c [ 97.904388][ C1] handle_softirqs+0x2ec/0xd98 [ 97.904396][ C1] __do_softirq+0x14/0x20 [ 97.904405][ C1] ____do_softirq+0x14/0x20 [ 97.904413][ C1] call_on_irq_stack+0x30/0x48 [ 97.904421][ C1] do_softirq_own_stack+0x20/0x2c [ 97.904429][ C1] do_softirq+0x90/0xf8 [ 97.904436][ C1] __local_bh_enable_ip+0x240/0x35c [ 97.904444][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 97.904455][ C1] lock_sock_nested+0xb0/0x110 [ 97.904465][ C1] tcp_recvmsg+0x174/0x4d8 [ 97.904474][ C1] inet_recvmsg+0xb8/0xd8 [ 97.904483][ C1] sock_recvmsg+0xd4/0x170 [ 97.904493][ C1] sock_read_iter+0x1d4/0x288 [ 97.904502][ C1] vfs_read+0x498/0x8c8 [ 97.904514][ C1] ksys_read+0x12c/0x228 [ 97.904525][ C1] __arm64_sys_read+0x84/0x98 [ 97.904536][ C1] invoke_syscall+0x98/0x244 [ 97.904547][ C1] el0_svc_common+0xec/0x23c [ 97.904557][ C1] do_el0_svc+0x4c/0x5c [ 97.904567][ C1] el0_svc+0x64/0x260 [ 97.904576][ C1] el0t_64_sync_handler+0x44/0x104 [ 97.904586][ C1] el0t_64_sync+0x198/0x19c [ 97.904594][ C1] irq event stamp: 1584475 [ 97.904598][ C1] hardirqs last enabled at (1584474): [] kcov_remote_start+0x190/0x560 [ 97.904609][ C1] hardirqs last disabled at (1584475): [] el1_brk64+0x20/0x54 [ 97.904620][ C1] softirqs last enabled at (1584278): [] lock_sock_nested+0xb0/0x110 [ 97.904629][ C1] softirqs last disabled at (1584279): [] __do_softirq+0x14/0x20 [ 97.904638][ C1] ---[ end trace 0000000000000000 ]--- [ 97.905726][ T1159] ------------[ cut here ]------------ [ 97.905730][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 97.905746][ T1159] Modules linked in: [ 97.905751][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 97.905761][ T1159] Tainted: [W]=WARN [ 97.905764][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.905769][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 97.905783][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.905791][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 97.905800][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 97.905808][ T1159] sp : ffff800093da6ed0 [ 97.905811][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff0000f287a490 [ 97.905822][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 97.905838][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 97.905850][ T1159] x20: ffff000121810000 x19: ffff0000f287a400 x18: 1fffe00035bb1028 [ 97.905861][ T1159] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 97.905871][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 97.905881][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 97.905892][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 97.905901][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 97.905911][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 97.905921][ T1159] Call trace: [ 97.905924][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 97.905935][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 97.905945][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 97.905955][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 97.905966][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 97.905975][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 97.905984][ T1159] ieee80211_iface_work+0x600/0xd3c [ 97.905992][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 97.906002][ T1159] process_scheduled_works+0x91c/0x1250 [ 97.906012][ T1159] worker_thread+0x798/0xbd0 [ 97.906020][ T1159] kthread+0x304/0x3d4 [ 97.906028][ T1159] ret_from_fork+0x10/0x20 [ 97.906036][ T1159] irq event stamp: 832949 [ 97.906039][ T1159] hardirqs last enabled at (832947): [] kcov_remote_start+0x190/0x560 [ 97.906048][ T1159] hardirqs last disabled at (832949): [] el1_brk64+0x20/0x54 [ 97.906058][ T1159] softirqs last enabled at (832936): [] handle_softirqs+0xc28/0xd98 [ 97.906066][ T1159] softirqs last disabled at (832948): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 97.906078][ T1159] ---[ end trace 0000000000000000 ]--- [ 98.006430][ C1] ------------[ cut here ]------------ [ 98.006440][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 98.006465][ C1] Modules linked in: [ 98.006475][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 98.006487][ C1] Tainted: [W]=WARN [ 98.006492][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.006498][ C1] Workqueue: events_unbound toggle_allocation_gate [ 98.006513][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.006522][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.006532][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.006542][ C1] sp : ffff80008ebe7150 [ 98.006545][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f3197890 [ 98.006559][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.006570][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 98.006582][ C1] x20: ffff000121810000 x19: ffff0000f3197800 x18: 00000000626f44a5 [ 98.006594][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 98.006605][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.006616][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 98.006628][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.006639][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.006650][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 98.006661][ C1] Call trace: [ 98.006664][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.006677][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.006688][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.006700][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.006711][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 98.006722][ C1] ieee80211_scan_rx+0x450/0x928 [ 98.006732][ C1] ieee80211_rx_list+0x229c/0x3000 [ 98.006741][ C1] ieee80211_rx_napi+0x18c/0x370 [ 98.006749][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 98.006762][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 98.006770][ C1] tasklet_action_common+0x1dc/0x278 [ 98.006780][ C1] tasklet_action+0x68/0x8c [ 98.006788][ C1] handle_softirqs+0x2ec/0xd98 [ 98.006796][ C1] __do_softirq+0x14/0x20 [ 98.006804][ C1] ____do_softirq+0x14/0x20 [ 98.006813][ C1] call_on_irq_stack+0x30/0x48 [ 98.006821][ C1] do_softirq_own_stack+0x20/0x2c [ 98.006832][ C1] __irq_exit_rcu+0x1ac/0x428 [ 98.006841][ C1] irq_exit_rcu+0x14/0x84 [ 98.006849][ C1] el1_interrupt+0x40/0x60 [ 98.006859][ C1] el1h_64_irq_handler+0x18/0x24 [ 98.006869][ C1] el1h_64_irq+0x6c/0x70 [ 98.006877][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 98.006889][ C1] kick_all_cpus_sync+0x34/0x40 [ 98.006900][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 98.006909][ C1] __jump_label_update+0x31c/0x344 [ 98.006918][ C1] jump_label_update+0x428/0x4b8 [ 98.006929][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 98.006940][ C1] static_key_enable+0x24/0x38 [ 98.006951][ C1] toggle_allocation_gate+0xb8/0x28c [ 98.006962][ C1] process_scheduled_works+0x91c/0x1250 [ 98.006973][ C1] worker_thread+0x798/0xbd0 [ 98.006982][ C1] kthread+0x304/0x3d4 [ 98.006991][ C1] ret_from_fork+0x10/0x20 [ 98.006998][ C1] irq event stamp: 215993 [ 98.007002][ C1] hardirqs last enabled at (215992): [] kcov_remote_start+0x190/0x560 [ 98.007013][ C1] hardirqs last disabled at (215993): [] el1_brk64+0x20/0x54 [ 98.007024][ C1] softirqs last enabled at (215512): [] handle_softirqs+0xc28/0xd98 [ 98.007033][ C1] softirqs last disabled at (215519): [] __do_softirq+0x14/0x20 [ 98.007042][ C1] ---[ end trace 0000000000000000 ]--- [ 98.008146][ T3847] ------------[ cut here ]------------ [ 98.008150][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 98.008166][ T3847] Modules linked in: [ 98.008172][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 98.008182][ T3847] Tainted: [W]=WARN [ 98.008185][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.008189][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 98.008203][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.008211][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.008220][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.008229][ T3847] sp : ffff80009a056ed0 [ 98.008232][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000f3197490 [ 98.008243][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.008254][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 98.008264][ T3847] x20: ffff000121810000 x19: ffff0000f3197400 x18: 1fffe00035bb1028 [ 98.008275][ T3847] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 98.008286][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.008296][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 98.008306][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.008316][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.008326][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 98.008336][ T3847] Call trace: [ 98.008339][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.008349][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.008360][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.008370][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.008381][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 98.008390][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 98.008398][ T3847] ieee80211_iface_work+0x600/0xd3c [ 98.008406][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 98.008416][ T3847] process_scheduled_works+0x91c/0x1250 [ 98.008425][ T3847] worker_thread+0x798/0xbd0 [ 98.008433][ T3847] kthread+0x304/0x3d4 [ 98.008441][ T3847] ret_from_fork+0x10/0x20 [ 98.008448][ T3847] irq event stamp: 1206185 [ 98.008451][ T3847] hardirqs last enabled at (1206183): [] kcov_remote_start+0x190/0x560 [ 98.008460][ T3847] hardirqs last disabled at (1206185): [] el1_brk64+0x20/0x54 [ 98.008470][ T3847] softirqs last enabled at (1206172): [] handle_softirqs+0xc28/0xd98 [ 98.008478][ T3847] softirqs last disabled at (1206184): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 98.008489][ T3847] ---[ end trace 0000000000000000 ]--- [ 98.108799][ C1] ------------[ cut here ]------------ [ 98.108809][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 98.108842][ C1] Modules linked in: [ 98.108852][ C1] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 98.108864][ C1] Tainted: [W]=WARN [ 98.108868][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.108873][ C1] Workqueue: bat_events batadv_tt_purge [ 98.108885][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.108894][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.108904][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.108913][ C1] sp : ffff80008ebe7150 [ 98.108916][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff000122068490 [ 98.108929][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.108940][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 98.108952][ C1] x20: ffff000121810000 x19: ffff000122068400 x18: 1fffe00035bb1028 [ 98.108963][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 98.108975][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.108985][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 98.108996][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.109007][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.109018][ C1] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 98.109029][ C1] Call trace: [ 98.109032][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.109045][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.109056][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.109067][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.109079][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 98.109089][ C1] ieee80211_scan_rx+0x450/0x928 [ 98.109099][ C1] ieee80211_rx_list+0x229c/0x3000 [ 98.109108][ C1] ieee80211_rx_napi+0x18c/0x370 [ 98.109117][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 98.109129][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 98.109137][ C1] tasklet_action_common+0x1dc/0x278 [ 98.109147][ C1] tasklet_action+0x68/0x8c [ 98.109155][ C1] handle_softirqs+0x2ec/0xd98 [ 98.109164][ C1] __do_softirq+0x14/0x20 [ 98.109172][ C1] ____do_softirq+0x14/0x20 [ 98.109181][ C1] call_on_irq_stack+0x30/0x48 [ 98.109188][ C1] do_softirq_own_stack+0x20/0x2c [ 98.109196][ C1] __irq_exit_rcu+0x1ac/0x428 [ 98.109204][ C1] irq_exit_rcu+0x14/0x84 [ 98.109212][ C1] el1_interrupt+0x40/0x60 [ 98.109223][ C1] el1h_64_irq_handler+0x18/0x24 [ 98.109233][ C1] el1h_64_irq+0x6c/0x70 [ 98.109240][ C1] __local_bh_enable_ip+0x1f0/0x35c (P) [ 98.109249][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 98.109259][ C1] batadv_tt_local_purge+0x274/0x2f0 [ 98.109269][ C1] batadv_tt_purge+0x44/0x7b4 [ 98.109279][ C1] process_scheduled_works+0x91c/0x1250 [ 98.109289][ C1] worker_thread+0x798/0xbd0 [ 98.109298][ C1] kthread+0x304/0x3d4 [ 98.109307][ C1] ret_from_fork+0x10/0x20 [ 98.109315][ C1] irq event stamp: 1260495 [ 98.109318][ C1] hardirqs last enabled at (1260494): [] kcov_remote_start+0x190/0x560 [ 98.109330][ C1] hardirqs last disabled at (1260495): [] el1_brk64+0x20/0x54 [ 98.109340][ C1] softirqs last enabled at (1260024): [] handle_softirqs+0xc28/0xd98 [ 98.109350][ C1] softirqs last disabled at (1260027): [] __do_softirq+0x14/0x20 [ 98.109358][ C1] ---[ end trace 0000000000000000 ]--- [ 98.110514][ T1159] ------------[ cut here ]------------ [ 98.110519][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 98.110534][ T1159] Modules linked in: [ 98.110540][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 98.110549][ T1159] Tainted: [W]=WARN [ 98.110552][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.110559][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 98.110571][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.110579][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.110589][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.110597][ T1159] sp : ffff800093da6ed0 [ 98.110600][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff000122068890 [ 98.110611][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.110622][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 98.110632][ T1159] x20: ffff000121810000 x19: ffff000122068800 x18: 1fffe00035bb1028 [ 98.110643][ T1159] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 98.110653][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.110663][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 98.110673][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.110682][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.110692][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 98.110702][ T1159] Call trace: [ 98.110704][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.110715][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.110726][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.110736][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.110746][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 98.110756][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 98.110764][ T1159] ieee80211_iface_work+0x600/0xd3c [ 98.110771][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 98.110782][ T1159] process_scheduled_works+0x91c/0x1250 [ 98.110791][ T1159] worker_thread+0x798/0xbd0 [ 98.110799][ T1159] kthread+0x304/0x3d4 [ 98.110807][ T1159] ret_from_fork+0x10/0x20 [ 98.110814][ T1159] irq event stamp: 874551 [ 98.110817][ T1159] hardirqs last enabled at (874549): [] kcov_remote_start+0x190/0x560 [ 98.110829][ T1159] hardirqs last disabled at (874551): [] el1_brk64+0x20/0x54 [ 98.110840][ T1159] softirqs last enabled at (874538): [] handle_softirqs+0xc28/0xd98 [ 98.110849][ T1159] softirqs last disabled at (874550): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 98.110860][ T1159] ---[ end trace 0000000000000000 ]--- [ 98.211254][ C1] ------------[ cut here ]------------ [ 98.211264][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 98.211291][ C1] Modules linked in: [ 98.211301][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 98.211313][ C1] Tainted: [W]=WARN [ 98.211316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.211321][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.211330][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.211340][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.211349][ C1] sp : ffff80008ebe7150 [ 98.211353][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f4b52890 [ 98.211365][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.211377][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 98.211388][ C1] x20: ffff000121810000 x19: ffff0000f4b52800 x18: 0000000000000000 [ 98.211400][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 98.211411][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.211422][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 98.211433][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.211444][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.211455][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 98.211466][ C1] Call trace: [ 98.211469][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.211481][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.211493][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.211504][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.211516][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 98.211526][ C1] ieee80211_scan_rx+0x450/0x928 [ 98.211536][ C1] ieee80211_rx_list+0x229c/0x3000 [ 98.211545][ C1] ieee80211_rx_napi+0x18c/0x370 [ 98.211554][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 98.211566][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 98.211574][ C1] tasklet_action_common+0x1dc/0x278 [ 98.211585][ C1] tasklet_action+0x68/0x8c [ 98.211593][ C1] handle_softirqs+0x2ec/0xd98 [ 98.211601][ C1] __do_softirq+0x14/0x20 [ 98.211610][ C1] ____do_softirq+0x14/0x20 [ 98.211619][ C1] call_on_irq_stack+0x30/0x48 [ 98.211626][ C1] do_softirq_own_stack+0x20/0x2c [ 98.211634][ C1] do_softirq+0x90/0xf8 [ 98.211642][ C1] __local_bh_enable_ip+0x240/0x35c [ 98.211650][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 98.211661][ C1] lock_sock_nested+0xb0/0x110 [ 98.211671][ C1] tcp_recvmsg+0x174/0x4d8 [ 98.211680][ C1] inet_recvmsg+0xb8/0xd8 [ 98.211689][ C1] sock_recvmsg+0xd4/0x170 [ 98.211698][ C1] sock_read_iter+0x1d4/0x288 [ 98.211708][ C1] vfs_read+0x498/0x8c8 [ 98.211720][ C1] ksys_read+0x12c/0x228 [ 98.211730][ C1] __arm64_sys_read+0x84/0x98 [ 98.211741][ C1] invoke_syscall+0x98/0x244 [ 98.211752][ C1] el0_svc_common+0xec/0x23c [ 98.211763][ C1] do_el0_svc+0x4c/0x5c [ 98.211773][ C1] el0_svc+0x64/0x260 [ 98.211782][ C1] el0t_64_sync_handler+0x44/0x104 [ 98.211792][ C1] el0t_64_sync+0x198/0x19c [ 98.211800][ C1] irq event stamp: 1621093 [ 98.211803][ C1] hardirqs last enabled at (1621092): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 98.211816][ C1] hardirqs last disabled at (1621093): [] el1_brk64+0x20/0x54 [ 98.211830][ C1] softirqs last enabled at (1620892): [] lock_sock_nested+0xb0/0x110 [ 98.211840][ C1] softirqs last disabled at (1620893): [] __do_softirq+0x14/0x20 [ 98.211850][ C1] ---[ end trace 0000000000000000 ]--- [ 98.212927][ T13] ------------[ cut here ]------------ [ 98.212931][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 98.212946][ T13] Modules linked in: [ 98.212952][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 98.212961][ T13] Tainted: [W]=WARN [ 98.212963][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.212968][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 98.212979][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.212989][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.212998][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.213006][ T13] sp : ffff80008ed16ed0 [ 98.213009][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f4b52c90 [ 98.213020][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.213031][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 98.213041][ T13] x20: ffff000121810000 x19: ffff0000f4b52c00 x18: 1fffe00035bb1028 [ 98.213052][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 98.213062][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.213072][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 98.213082][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.213092][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.213102][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 98.213112][ T13] Call trace: [ 98.213115][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.213125][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.213136][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.213146][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.213156][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 98.213166][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 98.213174][ T13] ieee80211_iface_work+0x600/0xd3c [ 98.213182][ T13] cfg80211_wiphy_work+0x278/0x588 [ 98.213192][ T13] process_scheduled_works+0x91c/0x1250 [ 98.213201][ T13] worker_thread+0x798/0xbd0 [ 98.213210][ T13] kthread+0x304/0x3d4 [ 98.213218][ T13] ret_from_fork+0x10/0x20 [ 98.213225][ T13] irq event stamp: 2748167 [ 98.213228][ T13] hardirqs last enabled at (2748165): [] kcov_remote_start+0x190/0x560 [ 98.213238][ T13] hardirqs last disabled at (2748167): [] el1_brk64+0x20/0x54 [ 98.213248][ T13] softirqs last enabled at (2748154): [] handle_softirqs+0xc28/0xd98 [ 98.213256][ T13] softirqs last disabled at (2748166): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 98.213268][ T13] ---[ end trace 0000000000000000 ]--- [ 98.313628][ C1] ------------[ cut here ]------------ [ 98.313638][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 98.313662][ C1] Modules linked in: [ 98.313672][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 98.313684][ C1] Tainted: [W]=WARN [ 98.313687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.313692][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.313700][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.313710][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.313719][ C1] sp : ffff80008ebe7150 [ 98.313722][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f73a9890 [ 98.313735][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.313747][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 98.313758][ C1] x20: ffff000121810000 x19: ffff0000f73a9800 x18: 0000000000000000 [ 98.313770][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 98.313781][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.313792][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 98.313803][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.313814][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.313825][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 98.313845][ C1] Call trace: [ 98.313849][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.313866][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.313879][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.313890][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.313901][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 98.313912][ C1] ieee80211_scan_rx+0x450/0x928 [ 98.313922][ C1] ieee80211_rx_list+0x229c/0x3000 [ 98.313931][ C1] ieee80211_rx_napi+0x18c/0x370 [ 98.313939][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 98.313952][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 98.313960][ C1] tasklet_action_common+0x1dc/0x278 [ 98.313970][ C1] tasklet_action+0x68/0x8c [ 98.313978][ C1] handle_softirqs+0x2ec/0xd98 [ 98.313986][ C1] __do_softirq+0x14/0x20 [ 98.313995][ C1] ____do_softirq+0x14/0x20 [ 98.314003][ C1] call_on_irq_stack+0x30/0x48 [ 98.314011][ C1] do_softirq_own_stack+0x20/0x2c [ 98.314019][ C1] do_softirq+0x90/0xf8 [ 98.314026][ C1] __local_bh_enable_ip+0x240/0x35c [ 98.314035][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 98.314046][ C1] lock_sock_nested+0xb0/0x110 [ 98.314056][ C1] tcp_recvmsg+0x174/0x4d8 [ 98.314065][ C1] inet_recvmsg+0xb8/0xd8 [ 98.314074][ C1] sock_recvmsg+0xd4/0x170 [ 98.314083][ C1] sock_read_iter+0x1d4/0x288 [ 98.314093][ C1] vfs_read+0x498/0x8c8 [ 98.314105][ C1] ksys_read+0x12c/0x228 [ 98.314115][ C1] __arm64_sys_read+0x84/0x98 [ 98.314127][ C1] invoke_syscall+0x98/0x244 [ 98.314138][ C1] el0_svc_common+0xec/0x23c [ 98.314148][ C1] do_el0_svc+0x4c/0x5c [ 98.314158][ C1] el0_svc+0x64/0x260 [ 98.314169][ C1] el0t_64_sync_handler+0x44/0x104 [ 98.314179][ C1] el0t_64_sync+0x198/0x19c [ 98.314188][ C1] irq event stamp: 1632217 [ 98.314192][ C1] hardirqs last enabled at (1632216): [] kcov_remote_start+0x190/0x560 [ 98.314203][ C1] hardirqs last disabled at (1632217): [] el1_brk64+0x20/0x54 [ 98.314214][ C1] softirqs last enabled at (1632024): [] lock_sock_nested+0xb0/0x110 [ 98.314223][ C1] softirqs last disabled at (1632025): [] __do_softirq+0x14/0x20 [ 98.314232][ C1] ---[ end trace 0000000000000000 ]--- [ 98.315375][ T13] ------------[ cut here ]------------ [ 98.315379][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 98.315397][ T13] Modules linked in: [ 98.315404][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 98.315415][ T13] Tainted: [W]=WARN [ 98.315418][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.315423][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 98.315435][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.315442][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.315451][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.315460][ T13] sp : ffff80008ed16ed0 [ 98.315463][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f73a9090 [ 98.315474][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.315485][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 98.315495][ T13] x20: ffff000121810000 x19: ffff0000f73a9000 x18: 1fffe00035bb1028 [ 98.315506][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 98.315516][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.315526][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 98.315536][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.315546][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.315556][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 98.315566][ T13] Call trace: [ 98.315568][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.315579][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.315589][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.315600][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.315610][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 98.315619][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 98.315627][ T13] ieee80211_iface_work+0x600/0xd3c [ 98.315635][ T13] cfg80211_wiphy_work+0x278/0x588 [ 98.315645][ T13] process_scheduled_works+0x91c/0x1250 [ 98.315654][ T13] worker_thread+0x798/0xbd0 [ 98.315663][ T13] kthread+0x304/0x3d4 [ 98.315671][ T13] ret_from_fork+0x10/0x20 [ 98.315678][ T13] irq event stamp: 2750001 [ 98.315681][ T13] hardirqs last enabled at (2749999): [] kcov_remote_start+0x190/0x560 [ 98.315690][ T13] hardirqs last disabled at (2750001): [] el1_brk64+0x20/0x54 [ 98.315700][ T13] softirqs last enabled at (2749986): [] handle_softirqs+0xc28/0xd98 [ 98.315708][ T13] softirqs last disabled at (2750000): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 98.315719][ T13] ---[ end trace 0000000000000000 ]--- [ 98.416007][ C1] ------------[ cut here ]------------ [ 98.416018][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 98.416044][ C1] Modules linked in: [ 98.416054][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 98.416066][ C1] Tainted: [W]=WARN [ 98.416069][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.416075][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 98.416086][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.416095][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.416105][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.416114][ C1] sp : ffff80008ebe7150 [ 98.416118][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000ccb90c90 [ 98.416130][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.416142][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 98.416154][ C1] x20: ffff000121810000 x19: ffff0000ccb90c00 x18: 00000000e6da1e89 [ 98.416166][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 98.416177][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.416188][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000303 [ 98.416199][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.416210][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.416221][ C1] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 98.416232][ C1] Call trace: [ 98.416235][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.416248][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.416259][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.416271][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.416282][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 98.416293][ C1] ieee80211_scan_rx+0x450/0x928 [ 98.416302][ C1] ieee80211_rx_list+0x229c/0x3000 [ 98.416312][ C1] ieee80211_rx_napi+0x18c/0x370 [ 98.416320][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 98.416333][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 98.416341][ C1] tasklet_action_common+0x1dc/0x278 [ 98.416351][ C1] tasklet_action+0x68/0x8c [ 98.416359][ C1] handle_softirqs+0x2ec/0xd98 [ 98.416367][ C1] __do_softirq+0x14/0x20 [ 98.416375][ C1] ____do_softirq+0x14/0x20 [ 98.416384][ C1] call_on_irq_stack+0x30/0x48 [ 98.416392][ C1] do_softirq_own_stack+0x20/0x2c [ 98.416400][ C1] do_softirq+0x90/0xf8 [ 98.416407][ C1] __local_bh_enable_ip+0x240/0x35c [ 98.416416][ C1] __alloc_skb+0x1c8/0x610 [ 98.416426][ C1] nsim_dev_trap_report_work+0x204/0x9cc [ 98.416435][ C1] process_scheduled_works+0x91c/0x1250 [ 98.416445][ C1] worker_thread+0x798/0xbd0 [ 98.416454][ C1] kthread+0x304/0x3d4 [ 98.416463][ C1] ret_from_fork+0x10/0x20 [ 98.416471][ C1] irq event stamp: 2752915 [ 98.416474][ C1] hardirqs last enabled at (2752914): [] kcov_remote_start+0x190/0x560 [ 98.416486][ C1] hardirqs last disabled at (2752915): [] el1_brk64+0x20/0x54 [ 98.416497][ C1] softirqs last enabled at (2752412): [] __alloc_skb+0x1c0/0x610 [ 98.416507][ C1] softirqs last disabled at (2752413): [] __do_softirq+0x14/0x20 [ 98.416516][ C1] ---[ end trace 0000000000000000 ]--- [ 98.425055][ T13] ------------[ cut here ]------------ [ 98.425062][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 98.425080][ T13] Modules linked in: [ 98.425087][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 98.425096][ T13] Tainted: [W]=WARN [ 98.425099][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.425103][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 98.425115][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.425123][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.425131][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.425140][ T13] sp : ffff80008ed16ed0 [ 98.425143][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000ccb92890 [ 98.425154][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.425165][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 98.425175][ T13] x20: ffff000121810000 x19: ffff0000ccb92800 x18: 00000000b7a3c5cb [ 98.425186][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 98.425196][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.425205][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 98.425215][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.425225][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.425235][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 98.425244][ T13] Call trace: [ 98.425247][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.425258][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.425268][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.425278][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.425289][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 98.425298][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 98.425306][ T13] ieee80211_iface_work+0x600/0xd3c [ 98.425314][ T13] cfg80211_wiphy_work+0x278/0x588 [ 98.425324][ T13] process_scheduled_works+0x91c/0x1250 [ 98.425334][ T13] worker_thread+0x798/0xbd0 [ 98.425342][ T13] kthread+0x304/0x3d4 [ 98.425350][ T13] ret_from_fork+0x10/0x20 [ 98.425357][ T13] irq event stamp: 2772171 [ 98.425360][ T13] hardirqs last enabled at (2772169): [] kcov_remote_start+0x190/0x560 [ 98.425369][ T13] hardirqs last disabled at (2772171): [] el1_brk64+0x20/0x54 [ 98.425379][ T13] softirqs last enabled at (2772158): [] handle_softirqs+0xc28/0xd98 [ 98.425387][ T13] softirqs last disabled at (2772170): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 98.425399][ T13] ---[ end trace 0000000000000000 ]--- [ 98.518450][ C1] ------------[ cut here ]------------ [ 98.518459][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:9/3299 [ 98.518485][ C1] Modules linked in: [ 98.518496][ C1] CPU: 1 UID: 0 PID: 3299 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT [ 98.518507][ C1] Tainted: [W]=WARN [ 98.518510][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.518516][ C1] Workqueue: events_unbound toggle_allocation_gate [ 98.518530][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.518539][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.518548][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.518558][ C1] sp : ffff80008ebe7150 [ 98.518561][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000ccb92490 [ 98.518574][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.518586][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 98.518598][ C1] x20: ffff000121810000 x19: ffff0000ccb92400 x18: 00000000626f44a5 [ 98.518609][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 98.518621][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.518631][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 98.518643][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.518653][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.518664][ C1] x2 : 0000000000000001 x1 : ffff0000cfb98000 x0 : 0000000000000000 [ 98.518675][ C1] Call trace: [ 98.518678][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.518691][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.518702][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.518713][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.518725][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 98.518735][ C1] ieee80211_scan_rx+0x450/0x928 [ 98.518745][ C1] ieee80211_rx_list+0x229c/0x3000 [ 98.518754][ C1] ieee80211_rx_napi+0x18c/0x370 [ 98.518763][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 98.518775][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 98.518783][ C1] tasklet_action_common+0x1dc/0x278 [ 98.518793][ C1] tasklet_action+0x68/0x8c [ 98.518801][ C1] handle_softirqs+0x2ec/0xd98 [ 98.518810][ C1] __do_softirq+0x14/0x20 [ 98.518818][ C1] ____do_softirq+0x14/0x20 [ 98.518832][ C1] call_on_irq_stack+0x30/0x48 [ 98.518840][ C1] do_softirq_own_stack+0x20/0x2c [ 98.518848][ C1] __irq_exit_rcu+0x1ac/0x428 [ 98.518856][ C1] irq_exit_rcu+0x14/0x84 [ 98.518864][ C1] el1_interrupt+0x40/0x60 [ 98.518874][ C1] el1h_64_irq_handler+0x18/0x24 [ 98.518884][ C1] el1h_64_irq+0x6c/0x70 [ 98.518891][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 98.518904][ C1] kick_all_cpus_sync+0x34/0x40 [ 98.518914][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 98.518923][ C1] __jump_label_update+0x31c/0x344 [ 98.518932][ C1] jump_label_update+0x428/0x4b8 [ 98.518943][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 98.518955][ C1] static_key_enable+0x24/0x38 [ 98.518966][ C1] toggle_allocation_gate+0xb8/0x28c [ 98.518976][ C1] process_scheduled_works+0x91c/0x1250 [ 98.518986][ C1] worker_thread+0x798/0xbd0 [ 98.518996][ C1] kthread+0x304/0x3d4 [ 98.519004][ C1] ret_from_fork+0x10/0x20 [ 98.519012][ C1] irq event stamp: 220871 [ 98.519015][ C1] hardirqs last enabled at (220870): [] kcov_remote_start+0x190/0x560 [ 98.519026][ C1] hardirqs last disabled at (220871): [] el1_brk64+0x20/0x54 [ 98.519037][ C1] softirqs last enabled at (220390): [] handle_softirqs+0xc28/0xd98 [ 98.519046][ C1] softirqs last disabled at (220393): [] __do_softirq+0x14/0x20 [ 98.519054][ C1] ---[ end trace 0000000000000000 ]--- [ 98.520881][ T3847] ------------[ cut here ]------------ [ 98.520887][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 98.520903][ T3847] Modules linked in: [ 98.520910][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 98.520920][ T3847] Tainted: [W]=WARN [ 98.520923][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.520927][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 98.520939][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.520946][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.520955][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.520964][ T3847] sp : ffff80009a056ed0 [ 98.520967][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000ccb92090 [ 98.520978][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.520988][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 98.520999][ T3847] x20: ffff000121810000 x19: ffff0000ccb92000 x18: 1fffe00035bb1028 [ 98.521009][ T3847] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 98.521019][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.521029][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 98.521039][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.521049][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.521059][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 98.521069][ T3847] Call trace: [ 98.521071][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.521082][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.521092][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.521102][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.521113][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 98.521122][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 98.521130][ T3847] ieee80211_iface_work+0x600/0xd3c [ 98.521138][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 98.521148][ T3847] process_scheduled_works+0x91c/0x1250 [ 98.521157][ T3847] worker_thread+0x798/0xbd0 [ 98.521166][ T3847] kthread+0x304/0x3d4 [ 98.521173][ T3847] ret_from_fork+0x10/0x20 [ 98.521181][ T3847] irq event stamp: 1389679 [ 98.521183][ T3847] hardirqs last enabled at (1389677): [] kcov_remote_start+0x190/0x560 [ 98.521193][ T3847] hardirqs last disabled at (1389679): [] el1_brk64+0x20/0x54 [ 98.521202][ T3847] softirqs last enabled at (1389664): [] handle_softirqs+0xc28/0xd98 [ 98.521211][ T3847] softirqs last disabled at (1389678): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 98.521222][ T3847] ---[ end trace 0000000000000000 ]--- [ 98.620843][ C1] ------------[ cut here ]------------ [ 98.620853][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 98.620886][ C1] Modules linked in: [ 98.620897][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 98.620909][ C1] Tainted: [W]=WARN [ 98.620912][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.620917][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.620926][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.620936][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.620945][ C1] sp : ffff80008ebe7150 [ 98.620949][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d7a49890 [ 98.620962][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.620974][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 98.620985][ C1] x20: ffff000121810000 x19: ffff0000d7a49800 x18: 0000000000000000 [ 98.620997][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 98.621008][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.621019][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 98.621030][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.621041][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.621052][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 98.621063][ C1] Call trace: [ 98.621066][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.621079][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.621091][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.621102][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.621113][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 98.621124][ C1] ieee80211_scan_rx+0x450/0x928 [ 98.621134][ C1] ieee80211_rx_list+0x229c/0x3000 [ 98.621144][ C1] ieee80211_rx_napi+0x18c/0x370 [ 98.621152][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 98.621165][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 98.621173][ C1] tasklet_action_common+0x1dc/0x278 [ 98.621184][ C1] tasklet_action+0x68/0x8c [ 98.621192][ C1] handle_softirqs+0x2ec/0xd98 [ 98.621200][ C1] __do_softirq+0x14/0x20 [ 98.621209][ C1] ____do_softirq+0x14/0x20 [ 98.621218][ C1] call_on_irq_stack+0x30/0x48 [ 98.621226][ C1] do_softirq_own_stack+0x20/0x2c [ 98.621234][ C1] do_softirq+0x90/0xf8 [ 98.621241][ C1] __local_bh_enable_ip+0x240/0x35c [ 98.621250][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 98.621261][ C1] release_sock+0x150/0x228 [ 98.621273][ C1] tcp_recvmsg+0x19c/0x4d8 [ 98.621282][ C1] inet_recvmsg+0xb8/0xd8 [ 98.621291][ C1] sock_recvmsg+0xd4/0x170 [ 98.621300][ C1] sock_read_iter+0x1d4/0x288 [ 98.621309][ C1] vfs_read+0x498/0x8c8 [ 98.621321][ C1] ksys_read+0x12c/0x228 [ 98.621332][ C1] __arm64_sys_read+0x84/0x98 [ 98.621343][ C1] invoke_syscall+0x98/0x244 [ 98.621354][ C1] el0_svc_common+0xec/0x23c [ 98.621364][ C1] do_el0_svc+0x4c/0x5c [ 98.621374][ C1] el0_svc+0x64/0x260 [ 98.621383][ C1] el0t_64_sync_handler+0x44/0x104 [ 98.621393][ C1] el0t_64_sync+0x198/0x19c [ 98.621401][ C1] irq event stamp: 1668601 [ 98.621405][ C1] hardirqs last enabled at (1668600): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 98.621417][ C1] hardirqs last disabled at (1668601): [] el1_brk64+0x20/0x54 [ 98.621427][ C1] softirqs last enabled at (1668084): [] release_sock+0x150/0x228 [ 98.621439][ C1] softirqs last disabled at (1668085): [] __do_softirq+0x14/0x20 [ 98.621448][ C1] ---[ end trace 0000000000000000 ]--- [ 98.622502][ T13] ------------[ cut here ]------------ [ 98.622506][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 98.622521][ T13] Modules linked in: [ 98.622526][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 98.622536][ T13] Tainted: [W]=WARN [ 98.622539][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.622545][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 98.622559][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.622569][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.622578][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.622586][ T13] sp : ffff80008ed16ed0 [ 98.622589][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000d7a49490 [ 98.622600][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.622611][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 98.622622][ T13] x20: ffff000121810000 x19: ffff0000d7a49400 x18: 1fffe00035bb1028 [ 98.622632][ T13] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 98.622643][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.622653][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 98.622663][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.622673][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.622683][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 98.622693][ T13] Call trace: [ 98.622695][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.622706][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.622717][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.622727][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.622737][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 98.622747][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 98.622755][ T13] ieee80211_iface_work+0x600/0xd3c [ 98.622763][ T13] cfg80211_wiphy_work+0x278/0x588 [ 98.622773][ T13] process_scheduled_works+0x91c/0x1250 [ 98.622783][ T13] worker_thread+0x798/0xbd0 [ 98.622791][ T13] kthread+0x304/0x3d4 [ 98.622799][ T13] ret_from_fork+0x10/0x20 [ 98.622807][ T13] irq event stamp: 2773977 [ 98.622809][ T13] hardirqs last enabled at (2773975): [] kcov_remote_start+0x190/0x560 [ 98.622820][ T13] hardirqs last disabled at (2773977): [] el1_brk64+0x20/0x54 [ 98.622833][ T13] softirqs last enabled at (2773964): [] handle_softirqs+0xc28/0xd98 [ 98.622842][ T13] softirqs last disabled at (2773976): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 98.622853][ T13] ---[ end trace 0000000000000000 ]--- [ 98.723249][ C1] ------------[ cut here ]------------ [ 98.723259][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 98.723285][ C1] Modules linked in: [ 98.723295][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 98.723307][ C1] Tainted: [W]=WARN [ 98.723310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.723315][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.723324][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.723333][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.723343][ C1] sp : ffff80008ebe7150 [ 98.723346][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fabe6890 [ 98.723359][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 98.723370][ C1] x23: ffff800088b9a000 [ 98.723378][ C0] Modules linked in: [ 98.723402][ C0] CPU: 0 UID: 0 PID: 6395 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 PREEMPT [ 98.723415][ C0] Tainted: [W]=WARN [ 98.723419][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.723424][ C0] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.723433][ C0] pc : __cfg80211_bss_update+0x1060/0x1608 [ 98.723447][ C0] lr : __cfg80211_bss_update+0x1600/0x1608 [ 98.723457][ C0] sp : ffff80008ebd7150 [ 98.723461][ C0] x29: ffff80008ebd71a0 x28: 1ffff00011173571 x27: ffff000101c42090 [ 98.723474][ C0] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 98.723486][ C0] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebd7260 [ 98.723498][ C0] x20: ffff000121870000 x19: ffff000101c42000 x18: 0000000000000000 [ 98.723510][ C0] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 98.723521][ C0] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 98.723532][ C0] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000301 [ 98.723544][ C0] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 98.723555][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 98.723566][ C0] x2 : 0000000000000001 x1 : ffff0000cef35880 x0 : 0000000000000000 [ 98.723578][ C0] Call trace: [ 98.723581][ C0] __cfg80211_bss_update+0x1060/0x1608 (P) [ 98.723594][ C0] cfg80211_inform_single_bss_data+0x980/0x19dc [ 98.723606][ C0] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 98.723618][ C0] cfg80211_inform_bss_frame_data+0x348/0x838 [ 98.723629][ C0] ieee80211_bss_info_update+0x5d0/0x944 [ 98.723642][ C0] ieee80211_scan_rx+0x450/0x928 [ 98.723652][ C0] ieee80211_rx_list+0x229c/0x3000 [ 98.723661][ C0] ieee80211_rx_napi+0x18c/0x370 [ 98.723669][ C0] ieee80211_handle_queued_frames+0xc8/0x17c [ 98.723682][ C0] ieee80211_tasklet_handler+0x20/0x30 [ 98.723690][ C0] tasklet_action_common+0x1dc/0x278 [ 98.723700][ C0] tasklet_action+0x68/0x8c [ 98.723709][ C0] handle_softirqs+0x2ec/0xd98 [ 98.723717][ C0] __do_softirq+0x14/0x20 [ 98.723726][ C0] ____do_softirq+0x14/0x20 [ 98.723734][ C0] call_on_irq_stack+0x30/0x48 [ 98.723742][ C0] do_softirq_own_stack+0x20/0x2c [ 98.723750][ C0] __irq_exit_rcu+0x1ac/0x428 [ 98.723758][ C0] irq_exit_rcu+0x14/0x84 [ 98.723766][ C0] el1_interrupt+0x40/0x60 [ 98.723777][ C0] el1h_64_irq_handler+0x18/0x24 [ 98.723787][ C0] el1h_64_irq+0x6c/0x70 [ 98.723794][ C0] memcg1_uncharge_batch+0xc0/0xe0 (P) [ 98.723804][ C0] uncharge_batch+0x1d4/0x2ec [ 98.723820][ C0] __mem_cgroup_uncharge_folios+0x150/0x1c8 [ 98.723832][ C0] folios_put_refs+0x7d8/0x8dc [ 98.723843][ C0] free_pages_and_swap_cache+0x240/0x3e8 [ 98.723852][ C0] tlb_flush_mmu+0xfc/0x34c [ 98.723862][ C0] tlb_finish_mmu+0xf0/0x220 [ 98.723871][ C0] exit_mmap+0x3b4/0xad4 [ 98.723880][ C0] __mmput+0xe0/0x2e8 [ 98.723888][ C0] mmput+0x70/0xa8 [ 98.723895][ C0] exit_mm+0x1ac/0x264 [ 98.723906][ C0] do_exit+0x524/0x1a74 [ 98.723916][ C0] do_group_exit+0x198/0x238 [ 98.723927][ C0] pid_child_should_wake+0x0/0x104 [ 98.723938][ C0] invoke_syscall+0x98/0x244 [ 98.723949][ C0] el0_svc_common+0xec/0x23c [ 98.723959][ C0] do_el0_svc+0x4c/0x5c [ 98.723969][ C0] el0_svc+0x64/0x260 [ 98.723979][ C0] el0t_64_sync_handler+0x44/0x104 [ 98.723988][ C0] el0t_64_sync+0x198/0x19c [ 98.723997][ C0] irq event stamp: 2317 [ 98.724000][ C0] hardirqs last enabled at (2316): [] kcov_remote_start+0x190/0x560 [ 98.724011][ C0] hardirqs last disabled at (2317): [] el1_brk64+0x20/0x54 [ 98.724022][ C0] softirqs last enabled at (1430): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 98.724032][ C0] softirqs last disabled at (2099): [] __do_softirq+0x14/0x20 [ 98.724041][ C0] ---[ end trace 0000000000000000 ]--- [ 98.756130][ T4716] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 99.045538][ C1] x22: ffff000121810190 x21: ffff80008ebe7260 [ 99.046678][ C1] x20: ffff000121810000 x19: ffff0000fabe6800 x18: 0000000000000000 [ 99.048112][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 99.049616][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.051117][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 99.052663][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.054181][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.055611][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 99.057126][ C1] Call trace: [ 99.057750][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.058862][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.060040][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.061117][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.062250][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.063327][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.064237][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.065185][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.066117][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.067213][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.068226][ C1] tasklet_action_common+0x1dc/0x278 [ 99.069218][ C1] tasklet_action+0x68/0x8c [ 99.070048][ C1] handle_softirqs+0x2ec/0xd98 [ 99.070941][ C1] __do_softirq+0x14/0x20 [ 99.071749][ C1] ____do_softirq+0x14/0x20 [ 99.072563][ C1] call_on_irq_stack+0x30/0x48 [ 99.073423][ C1] do_softirq_own_stack+0x20/0x2c [ 99.074343][ C1] do_softirq+0x90/0xf8 [ 99.075131][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.076081][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 99.076994][ C1] lock_sock_nested+0xb0/0x110 [ 99.077885][ C1] tcp_recvmsg+0x174/0x4d8 [ 99.078739][ C1] inet_recvmsg+0xb8/0xd8 [ 99.079535][ C1] sock_recvmsg+0xd4/0x170 [ 99.080368][ C1] sock_read_iter+0x1d4/0x288 [ 99.081278][ C1] vfs_read+0x498/0x8c8 [ 99.082060][ C1] ksys_read+0x12c/0x228 [ 99.082859][ C1] __arm64_sys_read+0x84/0x98 [ 99.083716][ C1] invoke_syscall+0x98/0x244 [ 99.084576][ C1] el0_svc_common+0xec/0x23c [ 99.085411][ C1] do_el0_svc+0x4c/0x5c [ 99.086179][ C1] el0_svc+0x64/0x260 [ 99.086903][ C1] el0t_64_sync_handler+0x44/0x104 [ 99.087853][ C1] el0t_64_sync+0x198/0x19c [ 99.088725][ C1] irq event stamp: 1682627 [ 99.089606][ C1] hardirqs last enabled at (1682626): [] kcov_remote_start+0x190/0x560 [ 99.091480][ C1] hardirqs last disabled at (1682627): [] el1_brk64+0x20/0x54 [ 99.093237][ C1] softirqs last enabled at (1682434): [] lock_sock_nested+0xb0/0x110 [ 99.095192][ C1] softirqs last disabled at (1682435): [] __do_softirq+0x14/0x20 [ 99.097009][ C1] ---[ end trace 0000000000000000 ]--- [ 99.099266][ C1] ------------[ cut here ]------------ [ 99.099274][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: napi/wg1-0/6052 [ 99.102111][ C1] Modules linked in: [ 99.102808][ C1] CPU: 1 UID: 0 PID: 6052 Comm: napi/wg1-0 Tainted: G W syzkaller #0 PREEMPT [ 99.104570][ C1] Tainted: [W]=WARN [ 99.105234][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.107009][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.108376][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.109462][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.110635][ C1] sp : ffff80008ebe7150 [ 99.111465][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fabe6090 [ 99.113136][ C1] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 99.114674][ C1] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebe7260 [ 99.116252][ C1] x20: ffff000121870000 x19: ffff0000fabe6000 x18: 00000000b0f123bd [ 99.117808][ C1] x17: 0000000000420056 x16: 0050000000000000 x15: 0000000000000000 [ 99.119354][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.120890][ C1] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000302 [ 99.122397][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.123890][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.125373][ C1] x2 : 0000000000000001 x1 : ffff0000cbc7bb00 x0 : 0000000000000000 [ 99.126934][ C1] Call trace: [ 99.127534][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.128619][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.129786][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.130878][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.132019][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.133113][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.134069][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.135117][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.136134][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.137276][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.138347][ C1] tasklet_action_common+0x1dc/0x278 [ 99.139292][ C1] tasklet_action+0x68/0x8c [ 99.140104][ C1] handle_softirqs+0x2ec/0xd98 [ 99.141034][ C1] __do_softirq+0x14/0x20 [ 99.141831][ C1] ____do_softirq+0x14/0x20 [ 99.142679][ C1] call_on_irq_stack+0x30/0x48 [ 99.143562][ C1] do_softirq_own_stack+0x20/0x2c [ 99.144501][ C1] do_softirq+0x90/0xf8 [ 99.145326][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.146321][ C1] napi_threaded_poll_loop+0x464/0x680 [ 99.147372][ C1] napi_threaded_poll+0x2c4/0x438 [ 99.148319][ C1] kthread+0x304/0x3d4 [ 99.149074][ C1] ret_from_fork+0x10/0x20 [ 99.149873][ C1] irq event stamp: 531 [ 99.150640][ C1] hardirqs last enabled at (530): [] kcov_remote_start+0x190/0x560 [ 99.152446][ C1] hardirqs last disabled at (531): [] el1_brk64+0x20/0x54 [ 99.154114][ C1] softirqs last enabled at (230): [] napi_threaded_poll_loop+0x45c/0x680 [ 99.155995][ C1] softirqs last disabled at (231): [] __do_softirq+0x14/0x20 [ 99.157654][ C1] ---[ end trace 0000000000000000 ]--- [ 99.158970][ C1] ------------[ cut here ]------------ [ 99.158976][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: napi/wg1-0/6052 [ 99.162029][ C1] Modules linked in: [ 99.162779][ C1] CPU: 1 UID: 0 PID: 6052 Comm: napi/wg1-0 Tainted: G W syzkaller #0 PREEMPT [ 99.164730][ C1] Tainted: [W]=WARN [ 99.165457][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.167373][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.168886][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.170004][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.171137][ C1] sp : ffff80008ebe7150 [ 99.171921][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fabe6490 [ 99.173513][ C1] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 99.175074][ C1] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebe7260 [ 99.176632][ C1] x20: ffff000121870000 x19: ffff0000fabe6400 x18: 00000000b0f123bd [ 99.178180][ C1] x17: 0000000000420056 x16: 0050000000000000 x15: 0000000000000000 [ 99.179687][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.181165][ C1] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000302 [ 99.182708][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.184220][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.185769][ C1] x2 : 0000000000000001 x1 : ffff0000cbc7bb00 x0 : 0000000000000000 [ 99.187286][ C1] Call trace: [ 99.187889][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.188998][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.190178][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.191241][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.192413][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.193517][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.194484][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.195472][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.196403][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.197549][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.198596][ C1] tasklet_action_common+0x1dc/0x278 [ 99.199594][ C1] tasklet_action+0x68/0x8c [ 99.200468][ C1] handle_softirqs+0x2ec/0xd98 [ 99.201383][ C1] __do_softirq+0x14/0x20 [ 99.202255][ C1] ____do_softirq+0x14/0x20 [ 99.203138][ C1] call_on_irq_stack+0x30/0x48 [ 99.204039][ C1] do_softirq_own_stack+0x20/0x2c [ 99.205011][ C1] do_softirq+0x90/0xf8 [ 99.205824][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.206864][ C1] napi_threaded_poll_loop+0x464/0x680 [ 99.207950][ C1] napi_threaded_poll+0x2c4/0x438 [ 99.208885][ C1] kthread+0x304/0x3d4 [ 99.209675][ C1] ret_from_fork+0x10/0x20 [ 99.210514][ C1] irq event stamp: 557 [ 99.211261][ C1] hardirqs last enabled at (556): [] kcov_remote_start+0x190/0x560 [ 99.213080][ C1] hardirqs last disabled at (557): [] el1_brk64+0x20/0x54 [ 99.214722][ C1] softirqs last enabled at (230): [] napi_threaded_poll_loop+0x45c/0x680 [ 99.216570][ C1] softirqs last disabled at (231): [] __do_softirq+0x14/0x20 [ 99.218257][ C1] ---[ end trace 0000000000000000 ]--- [ 99.219576][ C1] ------------[ cut here ]------------ [ 99.219581][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: napi/wg1-0/6052 [ 99.222157][ C1] Modules linked in: [ 99.222808][ C1] CPU: 1 UID: 0 PID: 6052 Comm: napi/wg1-0 Tainted: G W syzkaller #0 PREEMPT [ 99.224548][ C1] Tainted: [W]=WARN [ 99.225158][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.226733][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.228038][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.229019][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.230083][ C1] sp : ffff80008ebe7150 [ 99.230838][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fabe4490 [ 99.232354][ C1] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 99.233922][ C1] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebe7260 [ 99.235522][ C1] x20: ffff000121870000 x19: ffff0000fabe4400 x18: 00000000b0f123bd [ 99.237075][ C1] x17: 0000000000420056 x16: 0050000000000000 x15: 0000000000000000 [ 99.238567][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.240101][ C1] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000302 [ 99.241604][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.243154][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.244657][ C1] x2 : 0000000000000001 x1 : ffff0000cbc7bb00 x0 : 0000000000000000 [ 99.246212][ C1] Call trace: [ 99.246869][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.248041][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.249294][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.250409][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.251618][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.252714][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.253668][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.254668][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.255622][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.256865][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.257956][ C1] tasklet_action_common+0x1dc/0x278 [ 99.259055][ C1] tasklet_action+0x68/0x8c [ 99.259917][ C1] handle_softirqs+0x2ec/0xd98 [ 99.260896][ C1] __do_softirq+0x14/0x20 [ 99.261756][ C1] ____do_softirq+0x14/0x20 [ 99.262644][ C1] call_on_irq_stack+0x30/0x48 [ 99.263578][ C1] do_softirq_own_stack+0x20/0x2c [ 99.264568][ C1] do_softirq+0x90/0xf8 [ 99.265394][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.266418][ C1] napi_threaded_poll_loop+0x464/0x680 [ 99.267499][ C1] napi_threaded_poll+0x2c4/0x438 [ 99.268469][ C1] kthread+0x304/0x3d4 [ 99.269261][ C1] ret_from_fork+0x10/0x20 [ 99.270138][ C1] irq event stamp: 581 [ 99.270929][ C1] hardirqs last enabled at (580): [] kcov_remote_start+0x190/0x560 [ 99.272790][ C1] hardirqs last disabled at (581): [] el1_brk64+0x20/0x54 [ 99.274498][ C1] softirqs last enabled at (230): [] napi_threaded_poll_loop+0x45c/0x680 [ 99.276421][ C1] softirqs last disabled at (231): [] __do_softirq+0x14/0x20 [ 99.278121][ C1] ---[ end trace 0000000000000000 ]--- [ 99.279432][ C1] ------------[ cut here ]------------ [ 99.279437][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: napi/wg1-0/6052 [ 99.282283][ C1] Modules linked in: [ 99.283065][ C1] CPU: 1 UID: 0 PID: 6052 Comm: napi/wg1-0 Tainted: G W syzkaller #0 PREEMPT [ 99.284964][ C1] Tainted: [W]=WARN [ 99.285677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.287511][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.288941][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.290010][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.291115][ C1] sp : ffff80008ebe7150 [ 99.291890][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fabe5490 [ 99.293392][ C1] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 99.294928][ C1] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebe7260 [ 99.296468][ C1] x20: ffff000121870000 x19: ffff0000fabe5400 x18: 00000000b0f123bd [ 99.297978][ C1] x17: 0000000000420056 x16: 0050000000000000 x15: 0000000000000000 [ 99.299538][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.301063][ C1] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000302 [ 99.302596][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.304170][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.305653][ C1] x2 : 0000000000000001 x1 : ffff0000cbc7bb00 x0 : 0000000000000000 [ 99.307158][ C1] Call trace: [ 99.307749][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.308857][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.310039][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.311110][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.312298][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.313390][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.314307][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.315271][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.316203][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.317345][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.318387][ C1] tasklet_action_common+0x1dc/0x278 [ 99.319393][ C1] tasklet_action+0x68/0x8c [ 99.320291][ C1] handle_softirqs+0x2ec/0xd98 [ 99.321197][ C1] __do_softirq+0x14/0x20 [ 99.322026][ C1] ____do_softirq+0x14/0x20 [ 99.322877][ C1] call_on_irq_stack+0x30/0x48 [ 99.323752][ C1] do_softirq_own_stack+0x20/0x2c [ 99.324685][ C1] do_softirq+0x90/0xf8 [ 99.325467][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.326445][ C1] napi_threaded_poll_loop+0x464/0x680 [ 99.327489][ C1] napi_threaded_poll+0x2c4/0x438 [ 99.328444][ C1] kthread+0x304/0x3d4 [ 99.329222][ C1] ret_from_fork+0x10/0x20 [ 99.330079][ C1] irq event stamp: 605 [ 99.330847][ C1] hardirqs last enabled at (604): [] kcov_remote_start+0x190/0x560 [ 99.332718][ C1] hardirqs last disabled at (605): [] el1_brk64+0x20/0x54 [ 99.334272][ C1] softirqs last enabled at (230): [] napi_threaded_poll_loop+0x45c/0x680 [ 99.336145][ C1] softirqs last disabled at (231): [] __do_softirq+0x14/0x20 [ 99.337812][ C1] ---[ end trace 0000000000000000 ]--- [ 99.339151][ C1] ------------[ cut here ]------------ [ 99.339156][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: napi/wg1-0/6052 [ 99.341782][ C1] Modules linked in: [ 99.342396][ C1] CPU: 1 UID: 0 PID: 6052 Comm: napi/wg1-0 Tainted: G W syzkaller #0 PREEMPT [ 99.344086][ C1] Tainted: [W]=WARN [ 99.344678][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.346300][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.347557][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.348616][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.349658][ C1] sp : ffff80008ebe7150 [ 99.350405][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fabe4c90 [ 99.351861][ C1] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 99.353366][ C1] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebe7260 [ 99.354928][ C1] x20: ffff000121870000 x19: ffff0000fabe4c00 x18: 00000000b0f123bd [ 99.356462][ C1] x17: 0000000000420056 x16: 0050000000000000 x15: 0000000000000000 [ 99.358006][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.359569][ C1] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000302 [ 99.361109][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.362620][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.364142][ C1] x2 : 0000000000000001 x1 : ffff0000cbc7bb00 x0 : 0000000000000000 [ 99.365663][ C1] Call trace: [ 99.366264][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.367353][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.368526][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.369552][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.370661][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.371705][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.372622][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.373546][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.374460][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.375579][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.376591][ C1] tasklet_action_common+0x1dc/0x278 [ 99.377576][ C1] tasklet_action+0x68/0x8c [ 99.378388][ C1] handle_softirqs+0x2ec/0xd98 [ 99.379243][ C1] __do_softirq+0x14/0x20 [ 99.380024][ C1] ____do_softirq+0x14/0x20 [ 99.380844][ C1] call_on_irq_stack+0x30/0x48 [ 99.381719][ C1] do_softirq_own_stack+0x20/0x2c [ 99.382653][ C1] do_softirq+0x90/0xf8 [ 99.383419][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.384366][ C1] napi_threaded_poll_loop+0x464/0x680 [ 99.385395][ C1] napi_threaded_poll+0x2c4/0x438 [ 99.386338][ C1] kthread+0x304/0x3d4 [ 99.387096][ C1] ret_from_fork+0x10/0x20 [ 99.387904][ C1] irq event stamp: 629 [ 99.388634][ C1] hardirqs last enabled at (628): [] kcov_remote_start+0x190/0x560 [ 99.390369][ C1] hardirqs last disabled at (629): [] el1_brk64+0x20/0x54 [ 99.392013][ C1] softirqs last enabled at (230): [] napi_threaded_poll_loop+0x45c/0x680 [ 99.393857][ C1] softirqs last disabled at (231): [] __do_softirq+0x14/0x20 [ 99.395543][ C1] ---[ end trace 0000000000000000 ]--- [ 99.396883][ C1] ------------[ cut here ]------------ [ 99.396889][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: napi/wg1-0/6052 [ 99.399643][ C1] Modules linked in: [ 99.400360][ C1] CPU: 1 UID: 0 PID: 6052 Comm: napi/wg1-0 Tainted: G W syzkaller #0 PREEMPT [ 99.402169][ C1] Tainted: [W]=WARN [ 99.402873][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.404700][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.406206][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.407329][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.408440][ C1] sp : ffff80008ebe7150 [ 99.409212][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fabe5090 [ 99.410736][ C1] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 99.412290][ C1] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebe7260 [ 99.413875][ C1] x20: ffff000121870000 x19: ffff0000fabe5000 x18: 00000000b0f123bd [ 99.415445][ C1] x17: 0000000000420056 x16: 0050000000000000 x15: 0000000000000000 [ 99.417036][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.418525][ C1] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000302 [ 99.420083][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.421630][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.423245][ C1] x2 : 0000000000000001 x1 : ffff0000cbc7bb00 x0 : 0000000000000000 [ 99.424734][ C1] Call trace: [ 99.425384][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.426500][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.427711][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.428783][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.429918][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.430999][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.431964][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.432967][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.433904][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.435081][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.436116][ C1] tasklet_action_common+0x1dc/0x278 [ 99.437107][ C1] tasklet_action+0x68/0x8c [ 99.437944][ C1] handle_softirqs+0x2ec/0xd98 [ 99.438807][ C1] __do_softirq+0x14/0x20 [ 99.439671][ C1] ____do_softirq+0x14/0x20 [ 99.440527][ C1] call_on_irq_stack+0x30/0x48 [ 99.441406][ C1] do_softirq_own_stack+0x20/0x2c [ 99.442350][ C1] do_softirq+0x90/0xf8 [ 99.443122][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.444112][ C1] napi_threaded_poll_loop+0x464/0x680 [ 99.445166][ C1] napi_threaded_poll+0x2c4/0x438 [ 99.446115][ C1] kthread+0x304/0x3d4 [ 99.446888][ C1] ret_from_fork+0x10/0x20 [ 99.447720][ C1] irq event stamp: 653 [ 99.448483][ C1] hardirqs last enabled at (652): [] kcov_remote_start+0x190/0x560 [ 99.450285][ C1] hardirqs last disabled at (653): [] el1_brk64+0x20/0x54 [ 99.451911][ C1] softirqs last enabled at (230): [] napi_threaded_poll_loop+0x45c/0x680 [ 99.453735][ C1] softirqs last disabled at (231): [] __do_softirq+0x14/0x20 [ 99.455361][ C1] ---[ end trace 0000000000000000 ]--- [ 99.456646][ C1] ------------[ cut here ]------------ [ 99.456651][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: napi/wg1-0/6052 [ 99.459297][ C1] Modules linked in: [ 99.460014][ C1] CPU: 1 UID: 0 PID: 6052 Comm: napi/wg1-0 Tainted: G W syzkaller #0 PREEMPT [ 99.461899][ C1] Tainted: [W]=WARN [ 99.462745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.464555][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.465960][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.467050][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.468139][ C1] sp : ffff80008ebe7150 [ 99.468897][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff00012207ec90 [ 99.470363][ C1] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 99.471856][ C1] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebe7260 [ 99.473348][ C1] x20: ffff000121870000 x19: ffff00012207ec00 x18: 00000000b0f123bd [ 99.474885][ C1] x17: 0000000000420056 x16: 0050000000000000 x15: 0000000000000000 [ 99.476426][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.477965][ C1] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000302 [ 99.479496][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.481041][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.482612][ C1] x2 : 0000000000000001 x1 : ffff0000cbc7bb00 x0 : 0000000000000000 [ 99.484155][ C1] Call trace: [ 99.484768][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.485885][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.487126][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.488174][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.489309][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.490357][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.491299][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.492266][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.493168][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.494264][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.495227][ C1] tasklet_action_common+0x1dc/0x278 [ 99.496176][ C1] tasklet_action+0x68/0x8c [ 99.497001][ C1] handle_softirqs+0x2ec/0xd98 [ 99.497856][ C1] __do_softirq+0x14/0x20 [ 99.498675][ C1] ____do_softirq+0x14/0x20 [ 99.499535][ C1] call_on_irq_stack+0x30/0x48 [ 99.500416][ C1] do_softirq_own_stack+0x20/0x2c [ 99.501317][ C1] do_softirq+0x90/0xf8 [ 99.502067][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.503013][ C1] napi_threaded_poll_loop+0x464/0x680 [ 99.504015][ C1] napi_threaded_poll+0x2c4/0x438 [ 99.504947][ C1] kthread+0x304/0x3d4 [ 99.505697][ C1] ret_from_fork+0x10/0x20 [ 99.506525][ C1] irq event stamp: 681 [ 99.507232][ C1] hardirqs last enabled at (680): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 99.509092][ C1] hardirqs last disabled at (681): [] el1_brk64+0x20/0x54 [ 99.510708][ C1] softirqs last enabled at (230): [] napi_threaded_poll_loop+0x45c/0x680 [ 99.512655][ C1] softirqs last disabled at (231): [] __do_softirq+0x14/0x20 [ 99.514350][ C1] ---[ end trace 0000000000000000 ]--- [ 99.515642][ C1] ------------[ cut here ]------------ [ 99.515647][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: napi/wg1-0/6052 [ 99.518233][ C1] Modules linked in: [ 99.518920][ C1] CPU: 1 UID: 0 PID: 6052 Comm: napi/wg1-0 Tainted: G W syzkaller #0 PREEMPT [ 99.520908][ C1] Tainted: [W]=WARN [ 99.521621][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.523525][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.524998][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.526130][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.527242][ C1] sp : ffff80008ebe7150 [ 99.528034][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff00012207e090 [ 99.529558][ C1] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 99.531089][ C1] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebe7260 [ 99.532607][ C1] x20: ffff000121870000 x19: ffff00012207e000 x18: 00000000b0f123bd [ 99.534150][ C1] x17: 0000000000420056 x16: 0050000000000000 x15: 0000000000000000 [ 99.535650][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.537155][ C1] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000302 [ 99.538698][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.540231][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.541601][ C1] x2 : 0000000000000001 x1 : ffff0000cbc7bb00 x0 : 0000000000000000 [ 99.543062][ C1] Call trace: [ 99.543641][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.544730][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.545909][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.546961][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.548052][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.549102][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.550019][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.550978][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.551887][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.552999][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.554015][ C1] tasklet_action_common+0x1dc/0x278 [ 99.554985][ C1] tasklet_action+0x68/0x8c [ 99.555821][ C1] handle_softirqs+0x2ec/0xd98 [ 99.556692][ C1] __do_softirq+0x14/0x20 [ 99.557501][ C1] ____do_softirq+0x14/0x20 [ 99.558350][ C1] call_on_irq_stack+0x30/0x48 [ 99.559230][ C1] do_softirq_own_stack+0x20/0x2c [ 99.560152][ C1] do_softirq+0x90/0xf8 [ 99.560939][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.561906][ C1] napi_threaded_poll_loop+0x464/0x680 [ 99.562964][ C1] napi_threaded_poll+0x2c4/0x438 [ 99.563934][ C1] kthread+0x304/0x3d4 [ 99.564711][ C1] ret_from_fork+0x10/0x20 [ 99.565581][ C1] irq event stamp: 705 [ 99.566294][ C1] hardirqs last enabled at (704): [] kcov_remote_start+0x190/0x560 [ 99.568013][ C1] hardirqs last disabled at (705): [] el1_brk64+0x20/0x54 [ 99.569603][ C1] softirqs last enabled at (230): [] napi_threaded_poll_loop+0x45c/0x680 [ 99.571496][ C1] softirqs last disabled at (231): [] __do_softirq+0x14/0x20 [ 99.573169][ C1] ---[ end trace 0000000000000000 ]--- [ 99.574459][ C1] ------------[ cut here ]------------ [ 99.574464][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: napi/wg1-0/6052 [ 99.577057][ C1] Modules linked in: [ 99.577690][ C1] CPU: 1 UID: 0 PID: 6052 Comm: napi/wg1-0 Tainted: G W syzkaller #0 PREEMPT [ 99.579472][ C1] Tainted: [W]=WARN [ 99.580171][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.582049][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.583451][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.584581][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.585649][ C1] sp : ffff80008ebe7150 [ 99.586416][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff00012207d890 [ 99.587931][ C1] x26: dfff800000000000 x25: ffff000121870190 x24: 0000000000000001 [ 99.589439][ C1] x23: ffff800088b9a000 x22: ffff000121870190 x21: ffff80008ebe7260 [ 99.590970][ C1] x20: ffff000121870000 x19: ffff00012207d800 x18: 00000000b0f123bd [ 99.592423][ C1] x17: 0000000000420056 x16: 0050000000000000 x15: 0000000000000000 [ 99.593840][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.595287][ C1] x11: 0000000000000000 x10: ffff60001af2e90a x9 : 0000000000000302 [ 99.596755][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.598258][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.599748][ C1] x2 : 0000000000000001 x1 : ffff0000cbc7bb00 x0 : 0000000000000000 [ 99.601242][ C1] Call trace: [ 99.601850][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.602934][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.604119][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.605193][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.606362][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.607444][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.608387][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.609385][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.610348][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.611494][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.612527][ C1] tasklet_action_common+0x1dc/0x278 [ 99.613537][ C1] tasklet_action+0x68/0x8c [ 99.614368][ C1] handle_softirqs+0x2ec/0xd98 [ 99.615262][ C1] __do_softirq+0x14/0x20 [ 99.616109][ C1] ____do_softirq+0x14/0x20 [ 99.616954][ C1] call_on_irq_stack+0x30/0x48 [ 99.617835][ C1] do_softirq_own_stack+0x20/0x2c [ 99.618761][ C1] do_softirq+0x90/0xf8 [ 99.619504][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.620478][ C1] napi_threaded_poll_loop+0x464/0x680 [ 99.621516][ C1] napi_threaded_poll+0x2c4/0x438 [ 99.622475][ C1] kthread+0x304/0x3d4 [ 99.623242][ C1] ret_from_fork+0x10/0x20 [ 99.624085][ C1] irq event stamp: 729 [ 99.624834][ C1] hardirqs last enabled at (728): [] kcov_remote_start+0x190/0x560 [ 99.626636][ C1] hardirqs last disabled at (729): [] el1_brk64+0x20/0x54 [ 99.628253][ C1] softirqs last enabled at (230): [] napi_threaded_poll_loop+0x45c/0x680 [ 99.630100][ C1] softirqs last disabled at (231): [] __do_softirq+0x14/0x20 [ 99.631744][ C1] ---[ end trace 0000000000000000 ]--- [ 99.633895][ T3299] ------------[ cut here ]------------ [ 99.633904][ T3299] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#0: kworker/u8:9/3299 [ 99.634379][ C1] ------------[ cut here ]------------ [ 99.634386][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz.8.353/6305 [ 99.634406][ C1] Modules linked in: [ 99.634414][ C1] CPU: 1 UID: 0 PID: 6305 Comm: syz.8.353 Tainted: G W syzkaller #0 PREEMPT [ 99.634425][ C1] Tainted: [W]=WARN [ 99.634428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.634433][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.634441][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.634451][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.634460][ C1] sp : ffff80008ebe7150 [ 99.634463][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff00012207dc90 [ 99.634476][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.634487][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 99.634499][ C1] x20: ffff000121810000 x19: ffff00012207dc00 x18: 1fffe0001ebf241b [ 99.634510][ C1] x17: 0000000000320040 x16: 0043040000000000 x15: 0000000000000000 [ 99.634522][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.634532][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 99.634544][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.634554][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.634565][ C1] x2 : 0000000000000001 x1 : ffff0000d8309d80 x0 : 0000000000000000 [ 99.634576][ C1] Call trace: [ 99.634579][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.634591][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.634602][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.634613][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.634625][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.634635][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.634645][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.634653][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.634662][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.634674][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.634682][ C1] tasklet_action_common+0x1dc/0x278 [ 99.634691][ C1] tasklet_action+0x68/0x8c [ 99.634699][ C1] handle_softirqs+0x2ec/0xd98 [ 99.634707][ C1] __do_softirq+0x14/0x20 [ 99.634715][ C1] ____do_softirq+0x14/0x20 [ 99.634723][ C1] call_on_irq_stack+0x30/0x48 [ 99.634730][ C1] do_softirq_own_stack+0x20/0x2c [ 99.634738][ C1] do_softirq+0x90/0xf8 [ 99.634746][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.634754][ C1] __alloc_skb+0x1c8/0x610 [ 99.634763][ C1] alloc_uevent_skb+0x78/0x1ec [ 99.634775][ C1] kobject_uevent_net_broadcast+0x2d4/0x53c [ 99.634787][ C1] kobject_uevent_env+0x518/0x944 [ 99.634797][ C1] kobject_uevent+0x2c/0x3c [ 99.634808][ C1] device_del+0x5f8/0x71c [ 99.634818][ C1] nfc_remove_device+0xb0/0xcc [ 99.634834][ C1] nci_unregister_device+0x208/0x248 [ 99.634845][ C1] virtual_ncidev_close+0x5c/0xa0 [ 99.634854][ C1] __fput+0x338/0x74c [ 99.634864][ C1] ____fput+0x20/0x30 [ 99.634872][ C1] task_work_run+0x1cc/0x25c [ 99.634883][ C1] exit_to_user_mode_loop+0x10c/0x17c [ 99.634894][ C1] el0_svc+0x18c/0x260 [ 99.634903][ C1] el0t_64_sync_handler+0x44/0x104 [ 99.634913][ C1] el0t_64_sync+0x198/0x19c [ 99.634921][ C1] irq event stamp: 6137 [ 99.634924][ C1] hardirqs last enabled at (6136): [] kcov_remote_start+0x190/0x560 [ 99.634934][ C1] hardirqs last disabled at (6137): [] el1_brk64+0x20/0x54 [ 99.634944][ C1] softirqs last enabled at (5784): [] __alloc_skb+0x1c0/0x610 [ 99.634954][ C1] softirqs last disabled at (5785): [] __do_softirq+0x14/0x20 [ 99.634963][ C1] ---[ end trace 0000000000000000 ]--- [ 99.644735][ C1] ------------[ cut here ]------------ [ 99.644743][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:0/12 [ 99.644764][ C1] Modules linked in: [ 99.644772][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT [ 99.644783][ C1] Tainted: [W]=WARN [ 99.644786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.644790][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 99.644803][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.644811][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.644821][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.644834][ C1] sp : ffff80008ebe7150 [ 99.644837][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff00012207c490 [ 99.644849][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.644860][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 99.644872][ C1] x20: ffff000121810000 x19: ffff00012207c400 x18: 00000000ffffffff [ 99.644884][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 99.644895][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.644905][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 99.644916][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.644927][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.644938][ C1] x2 : 0000000000000001 x1 : ffff0000c1a00000 x0 : 0000000000000000 [ 99.644949][ C1] Call trace: [ 99.644951][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.644963][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.644974][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.644985][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.644996][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.645007][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.645016][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.645025][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.645033][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.645045][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.645053][ C1] tasklet_action_common+0x1dc/0x278 [ 99.645062][ C1] tasklet_action+0x68/0x8c [ 99.645070][ C1] handle_softirqs+0x2ec/0xd98 [ 99.645078][ C1] __do_softirq+0x14/0x20 [ 99.645086][ C1] ____do_softirq+0x14/0x20 [ 99.645094][ C1] call_on_irq_stack+0x30/0x48 [ 99.645101][ C1] do_softirq_own_stack+0x20/0x2c [ 99.645109][ C1] __irq_exit_rcu+0x1ac/0x428 [ 99.645117][ C1] irq_exit_rcu+0x14/0x84 [ 99.645125][ C1] el1_interrupt+0x40/0x60 [ 99.645135][ C1] el1h_64_irq_handler+0x18/0x24 [ 99.645144][ C1] el1h_64_irq+0x6c/0x70 [ 99.645152][ C1] write_comp_data+0x7c/0x84 (P) [ 99.645161][ C1] ieee80211_sta_get_rates+0x290/0x4c0 [ 99.645169][ C1] ieee80211_ibss_rx_queued_mgmt+0xf70/0x2548 [ 99.645178][ C1] ieee80211_iface_work+0x600/0xd3c [ 99.645187][ C1] cfg80211_wiphy_work+0x278/0x588 [ 99.645198][ C1] process_scheduled_works+0x91c/0x1250 [ 99.645208][ C1] worker_thread+0x798/0xbd0 [ 99.645217][ C1] kthread+0x304/0x3d4 [ 99.645225][ C1] ret_from_fork+0x10/0x20 [ 99.645233][ C1] irq event stamp: 1810313 [ 99.645236][ C1] hardirqs last enabled at (1810312): [] kcov_remote_start+0x190/0x560 [ 99.645246][ C1] hardirqs last disabled at (1810313): [] el1_brk64+0x20/0x54 [ 99.645256][ C1] softirqs last enabled at (1809826): [] cfg80211_put_bss+0x1d4/0x228 [ 99.645268][ C1] softirqs last disabled at (1809847): [] __do_softirq+0x14/0x20 [ 99.645277][ C1] ---[ end trace 0000000000000000 ]--- [ 99.645822][ T12] ------------[ cut here ]------------ [ 99.645829][ T12] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:0/12 [ 99.645847][ T12] Modules linked in: [ 99.645853][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT [ 99.645863][ T12] Tainted: [W]=WARN [ 99.645866][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.645870][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 99.645881][ T12] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.645889][ T12] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.645898][ T12] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.645906][ T12] sp : ffff80008ed06ed0 [ 99.645909][ T12] x29: ffff80008ed06f20 x28: 1ffff00011173571 x27: ffff00012207c890 [ 99.645920][ T12] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.645931][ T12] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed06fe0 [ 99.645941][ T12] x20: ffff000121810000 x19: ffff00012207c800 x18: 00000000ffffffff [ 99.645952][ T12] x17: ffff800084d32800 x16: ffff800084d274c0 x15: 0000000000000000 [ 99.645962][ T12] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.645972][ T12] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 99.645982][ T12] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.645991][ T12] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.646001][ T12] x2 : 0000000000000001 x1 : ffff0000c1a00000 x0 : 0000000000000000 [ 99.646011][ T12] Call trace: [ 99.646013][ T12] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.646024][ T12] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.646035][ T12] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.646045][ T12] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.646055][ T12] ieee80211_bss_info_update+0x5d0/0x944 [ 99.646065][ T12] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 99.646073][ T12] ieee80211_iface_work+0x600/0xd3c [ 99.646080][ T12] cfg80211_wiphy_work+0x278/0x588 [ 99.646091][ T12] process_scheduled_works+0x91c/0x1250 [ 99.646099][ T12] worker_thread+0x798/0xbd0 [ 99.646108][ T12] kthread+0x304/0x3d4 [ 99.646115][ T12] ret_from_fork+0x10/0x20 [ 99.646122][ T12] irq event stamp: 1810717 [ 99.646125][ T12] hardirqs last enabled at (1810715): [] kcov_remote_start+0x190/0x560 [ 99.646135][ T12] hardirqs last disabled at (1810717): [] el1_brk64+0x20/0x54 [ 99.646144][ T12] softirqs last enabled at (1810700): [] ieee80211_ibss_work+0x2d0/0xd9c [ 99.646152][ T12] softirqs last disabled at (1810716): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 99.646164][ T12] ---[ end trace 0000000000000000 ]--- [ 99.646388][ T12] ------------[ cut here ]------------ [ 99.646391][ T12] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:0/12 [ 99.646404][ T12] Modules linked in: [ 99.646408][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT [ 99.646417][ T12] Tainted: [W]=WARN [ 99.646420][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.646424][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 99.646435][ T12] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.646442][ T12] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.646451][ T12] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.646459][ T12] sp : ffff80008ed06ed0 [ 99.646462][ T12] x29: ffff80008ed06f20 x28: 1ffff00011173571 x27: ffff0000cf7b8090 [ 99.646473][ T12] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.646483][ T12] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed06fe0 [ 99.646494][ T12] x20: ffff000121810000 x19: ffff0000cf7b8000 x18: 00000000ffffffff [ 99.646504][ T12] x17: ffff800084d32800 x16: ffff800084d274c0 x15: 0000000000000000 [ 99.646514][ T12] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.646524][ T12] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 99.646534][ T12] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.646543][ T12] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.646553][ T12] x2 : 0000000000000001 x1 : ffff0000c1a00000 x0 : 0000000000000000 [ 99.646563][ T12] Call trace: [ 99.646565][ T12] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.646575][ T12] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.646586][ T12] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.646596][ T12] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.646606][ T12] ieee80211_bss_info_update+0x5d0/0x944 [ 99.646616][ T12] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 99.646624][ T12] ieee80211_iface_work+0x600/0xd3c [ 99.646631][ T12] cfg80211_wiphy_work+0x278/0x588 [ 99.646646][ T12] process_scheduled_works+0x91c/0x1250 [ 99.646656][ T12] worker_thread+0x798/0xbd0 [ 99.646667][ T12] kthread+0x304/0x3d4 [ 99.646674][ T12] ret_from_fork+0x10/0x20 [ 99.646681][ T12] irq event stamp: 1810745 [ 99.646684][ T12] hardirqs last enabled at (1810743): [] kcov_remote_start+0x190/0x560 [ 99.646693][ T12] hardirqs last disabled at (1810745): [] el1_brk64+0x20/0x54 [ 99.646702][ T12] softirqs last enabled at (1810724): [] cfg80211_inform_single_bss_data+0xa58/0x19dc [ 99.646714][ T12] softirqs last disabled at (1810744): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 99.646725][ T12] ---[ end trace 0000000000000000 ]--- [ 99.646950][ T12] ------------[ cut here ]------------ [ 99.646952][ T12] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:0/12 [ 99.646965][ T12] Modules linked in: [ 99.646970][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT [ 99.646979][ T12] Tainted: [W]=WARN [ 99.646981][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.646985][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 99.646996][ T12] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.647003][ T12] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.647012][ T12] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.647020][ T12] sp : ffff80008ed06ed0 [ 99.647023][ T12] x29: ffff80008ed06f20 x28: 1ffff00011173571 x27: ffff0000cf7bb490 [ 99.647034][ T12] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.647045][ T12] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed06fe0 [ 99.647055][ T12] x20: ffff000121810000 x19: ffff0000cf7bb400 x18: 00000000ffffffff [ 99.647066][ T12] x17: ffff800084d32800 x16: ffff800084d274c0 x15: 0000000000000000 [ 99.647076][ T12] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.647086][ T12] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 99.647096][ T12] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.647106][ T12] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.647115][ T12] x2 : 0000000000000001 x1 : ffff0000c1a00000 x0 : 0000000000000000 [ 99.647125][ T12] Call trace: [ 99.647127][ T12] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.647138][ T12] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.647148][ T12] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.647158][ T12] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.647169][ T12] ieee80211_bss_info_update+0x5d0/0x944 [ 99.647178][ T12] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 99.647186][ T12] ieee80211_iface_work+0x600/0xd3c [ 99.647193][ T12] cfg80211_wiphy_work+0x278/0x588 [ 99.647204][ T12] process_scheduled_works+0x91c/0x1250 [ 99.647212][ T12] worker_thread+0x798/0xbd0 [ 99.647221][ T12] kthread+0x304/0x3d4 [ 99.647228][ T12] ret_from_fork+0x10/0x20 [ 99.647235][ T12] irq event stamp: 1810773 [ 99.647238][ T12] hardirqs last enabled at (1810771): [] kcov_remote_start+0x190/0x560 [ 99.647247][ T12] hardirqs last disabled at (1810773): [] el1_brk64+0x20/0x54 [ 99.647256][ T12] softirqs last enabled at (1810752): [] cfg80211_inform_single_bss_data+0xa58/0x19dc [ 99.647267][ T12] softirqs last disabled at (1810772): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 99.647279][ T12] ---[ end trace 0000000000000000 ]--- [ 99.747309][ C1] ------------[ cut here ]------------ [ 99.747317][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 99.747341][ C1] Modules linked in: [ 99.747352][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 99.747363][ C1] Tainted: [W]=WARN [ 99.747366][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.747371][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.747379][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.747389][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.747399][ C1] sp : ffff80008ebe7150 [ 99.747402][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f4a53c90 [ 99.747418][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.747430][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 99.747443][ C1] x20: ffff000121810000 x19: ffff0000f4a53c00 x18: 0000000000000000 [ 99.747455][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 99.747467][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.747477][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 99.747488][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.747499][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.747510][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 99.747520][ C1] Call trace: [ 99.747524][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.747536][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.747548][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.747559][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.747570][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.747581][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.747590][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.747599][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.747608][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.747620][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.747628][ C1] tasklet_action_common+0x1dc/0x278 [ 99.747638][ C1] tasklet_action+0x68/0x8c [ 99.747646][ C1] handle_softirqs+0x2ec/0xd98 [ 99.747654][ C1] __do_softirq+0x14/0x20 [ 99.747663][ C1] ____do_softirq+0x14/0x20 [ 99.747671][ C1] call_on_irq_stack+0x30/0x48 [ 99.747679][ C1] do_softirq_own_stack+0x20/0x2c [ 99.747687][ C1] do_softirq+0x90/0xf8 [ 99.747694][ C1] __local_bh_enable_ip+0x240/0x35c [ 99.747703][ C1] fpsimd_restore_current_state+0x3a4/0x9c8 [ 99.747712][ C1] exit_to_user_mode_loop+0xe0/0x17c [ 99.747722][ C1] el0_svc+0x18c/0x260 [ 99.747732][ C1] el0t_64_sync_handler+0x44/0x104 [ 99.747742][ C1] el0t_64_sync+0x198/0x19c [ 99.747750][ C1] irq event stamp: 1683063 [ 99.747753][ C1] hardirqs last enabled at (1683062): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 99.747766][ C1] hardirqs last disabled at (1683063): [] el1_brk64+0x20/0x54 [ 99.747776][ C1] softirqs last enabled at (1682864): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 99.747786][ C1] softirqs last disabled at (1682865): [] __do_softirq+0x14/0x20 [ 99.747794][ C1] ---[ end trace 0000000000000000 ]--- [ 99.748385][ T3847] ------------[ cut here ]------------ [ 99.748389][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 99.748406][ T3847] Modules linked in: [ 99.748411][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 99.748421][ T3847] Tainted: [W]=WARN [ 99.748424][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.748428][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 99.748439][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.748447][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.748456][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.748464][ T3847] sp : ffff80009a056ed0 [ 99.748467][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000f4a53090 [ 99.748478][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.748489][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 99.748499][ T3847] x20: ffff000121810000 x19: ffff0000f4a53000 x18: 1fffe00035bb1028 [ 99.748510][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 99.748520][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.748530][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 99.748540][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.748549][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.748559][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 99.748569][ T3847] Call trace: [ 99.748572][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.748582][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.748593][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.748603][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.748613][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 99.748622][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 99.748631][ T3847] ieee80211_iface_work+0x600/0xd3c [ 99.748638][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 99.748648][ T3847] process_scheduled_works+0x91c/0x1250 [ 99.748658][ T3847] worker_thread+0x798/0xbd0 [ 99.748666][ T3847] kthread+0x304/0x3d4 [ 99.748674][ T3847] ret_from_fork+0x10/0x20 [ 99.748681][ T3847] irq event stamp: 1407699 [ 99.748684][ T3847] hardirqs last enabled at (1407697): [] kcov_remote_start+0x190/0x560 [ 99.748694][ T3847] hardirqs last disabled at (1407699): [] el1_brk64+0x20/0x54 [ 99.748703][ T3847] softirqs last enabled at (1407686): [] ieee80211_ibss_work+0x2d0/0xd9c [ 99.748712][ T3847] softirqs last disabled at (1407698): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 99.748723][ T3847] ---[ end trace 0000000000000000 ]--- [ 99.849708][ C1] ------------[ cut here ]------------ [ 99.849717][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 99.849743][ C1] Modules linked in: [ 99.849754][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 99.849766][ C1] Tainted: [W]=WARN [ 99.849769][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.849774][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.849783][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.849792][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.849802][ C1] sp : ffff80008edc6ef0 [ 99.849805][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff000122e7dc90 [ 99.849818][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.849836][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 99.849847][ C1] x20: ffff000121810000 x19: ffff000122e7dc00 x18: 0000000000000000 [ 99.849859][ C1] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 99.849870][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.849880][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 99.849892][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.849902][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.849913][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 99.849924][ C1] Call trace: [ 99.849927][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.849940][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.849952][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.849963][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.849974][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.849985][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.849995][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.850003][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.850012][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.850024][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.850032][ C1] tasklet_action_common+0x1dc/0x278 [ 99.850042][ C1] tasklet_action+0x68/0x8c [ 99.850050][ C1] handle_softirqs+0x2ec/0xd98 [ 99.850058][ C1] run_ksoftirqd+0x70/0xbc [ 99.850067][ C1] smpboot_thread_fn+0x4e4/0x97c [ 99.850076][ C1] kthread+0x304/0x3d4 [ 99.850084][ C1] ret_from_fork+0x10/0x20 [ 99.850093][ C1] irq event stamp: 24352867 [ 99.850097][ C1] hardirqs last enabled at (24352866): [] kcov_remote_start+0x190/0x560 [ 99.850108][ C1] hardirqs last disabled at (24352867): [] el1_brk64+0x20/0x54 [ 99.850120][ C1] softirqs last enabled at (24352658): [] handle_softirqs+0xc28/0xd98 [ 99.850129][ C1] softirqs last disabled at (24352667): [] run_ksoftirqd+0x70/0xbc [ 99.850139][ C1] ---[ end trace 0000000000000000 ]--- [ 99.850825][ T13] ------------[ cut here ]------------ [ 99.850835][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 99.850864][ T13] Modules linked in: [ 99.850872][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 99.850883][ T13] Tainted: [W]=WARN [ 99.850886][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.850890][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 99.850903][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.850910][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.850920][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.850928][ T13] sp : ffff80008ed16ed0 [ 99.850931][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000d7439890 [ 99.850943][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.850953][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 99.850964][ T13] x20: ffff000121810000 x19: ffff0000d7439800 x18: 1fffe00035bb1028 [ 99.850974][ T13] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 99.850984][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.850994][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 99.851004][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.851014][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.851024][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 99.851034][ T13] Call trace: [ 99.851036][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.851047][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.851058][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.851068][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.851079][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 99.851088][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 99.851097][ T13] ieee80211_iface_work+0x600/0xd3c [ 99.851104][ T13] cfg80211_wiphy_work+0x278/0x588 [ 99.851115][ T13] process_scheduled_works+0x91c/0x1250 [ 99.851124][ T13] worker_thread+0x798/0xbd0 [ 99.851133][ T13] kthread+0x304/0x3d4 [ 99.851140][ T13] ret_from_fork+0x10/0x20 [ 99.851147][ T13] irq event stamp: 2789329 [ 99.851150][ T13] hardirqs last enabled at (2789327): [] kcov_remote_start+0x190/0x560 [ 99.851160][ T13] hardirqs last disabled at (2789329): [] el1_brk64+0x20/0x54 [ 99.851170][ T13] softirqs last enabled at (2789316): [] ieee80211_ibss_work+0x2d0/0xd9c [ 99.851178][ T13] softirqs last disabled at (2789328): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 99.851190][ T13] ---[ end trace 0000000000000000 ]--- [ 99.952054][ C1] ------------[ cut here ]------------ [ 99.952063][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 99.952089][ C1] Modules linked in: [ 99.952100][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 99.952112][ C1] Tainted: [W]=WARN [ 99.952115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.952121][ C1] Workqueue: events jump_label_update_timeout [ 99.952136][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.952144][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.952154][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.952164][ C1] sp : ffff80008ebe7150 [ 99.952167][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d743b890 [ 99.952180][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.952191][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 99.952203][ C1] x20: ffff000121810000 x19: ffff0000d743b800 x18: 1fffe00035bb1028 [ 99.952215][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 99.952227][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.952237][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 99.952249][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.952259][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.952270][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 99.952281][ C1] Call trace: [ 99.952284][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.952297][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.952309][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.952320][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.952331][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 99.952342][ C1] ieee80211_scan_rx+0x450/0x928 [ 99.952352][ C1] ieee80211_rx_list+0x229c/0x3000 [ 99.952361][ C1] ieee80211_rx_napi+0x18c/0x370 [ 99.952370][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 99.952383][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 99.952391][ C1] tasklet_action_common+0x1dc/0x278 [ 99.952401][ C1] tasklet_action+0x68/0x8c [ 99.952410][ C1] handle_softirqs+0x2ec/0xd98 [ 99.952418][ C1] __do_softirq+0x14/0x20 [ 99.952427][ C1] ____do_softirq+0x14/0x20 [ 99.952436][ C1] call_on_irq_stack+0x30/0x48 [ 99.952444][ C1] do_softirq_own_stack+0x20/0x2c [ 99.952452][ C1] __irq_exit_rcu+0x1ac/0x428 [ 99.952460][ C1] irq_exit_rcu+0x14/0x84 [ 99.952469][ C1] el1_interrupt+0x40/0x60 [ 99.952479][ C1] el1h_64_irq_handler+0x18/0x24 [ 99.952489][ C1] el1h_64_irq+0x6c/0x70 [ 99.952497][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 99.952509][ C1] kick_all_cpus_sync+0x34/0x40 [ 99.952521][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 99.952530][ C1] __jump_label_update+0x31c/0x344 [ 99.952538][ C1] jump_label_update+0x428/0x4b8 [ 99.952549][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 99.952558][ C1] jump_label_update_timeout+0x28/0x3c [ 99.952569][ C1] process_scheduled_works+0x91c/0x1250 [ 99.952579][ C1] worker_thread+0x798/0xbd0 [ 99.952589][ C1] kthread+0x304/0x3d4 [ 99.952598][ C1] ret_from_fork+0x10/0x20 [ 99.952605][ C1] irq event stamp: 3145883 [ 99.952609][ C1] hardirqs last enabled at (3145882): [] kcov_remote_start+0x190/0x560 [ 99.952620][ C1] hardirqs last disabled at (3145883): [] el1_brk64+0x20/0x54 [ 99.952631][ C1] softirqs last enabled at (3145398): [] handle_softirqs+0xc28/0xd98 [ 99.952640][ C1] softirqs last disabled at (3145417): [] __do_softirq+0x14/0x20 [ 99.952649][ C1] ---[ end trace 0000000000000000 ]--- [ 99.953214][ T3847] ------------[ cut here ]------------ [ 99.953219][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 99.953234][ T3847] Modules linked in: [ 99.953240][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 99.953250][ T3847] Tainted: [W]=WARN [ 99.953253][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.953258][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 99.953269][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 99.953277][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 99.953286][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 99.953295][ T3847] sp : ffff80009a056ed0 [ 99.953298][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000d743bc90 [ 99.953309][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 99.953320][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 99.953331][ T3847] x20: ffff000121810000 x19: ffff0000d743bc00 x18: 1fffe00035bb1028 [ 99.953342][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 99.953352][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 99.953362][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 99.953373][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 99.953383][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 99.953393][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 99.953403][ T3847] Call trace: [ 99.953406][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 99.953416][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 99.953427][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 99.953438][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 99.953448][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 99.953458][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 99.953467][ T3847] ieee80211_iface_work+0x600/0xd3c [ 99.953475][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 99.953485][ T3847] process_scheduled_works+0x91c/0x1250 [ 99.953494][ T3847] worker_thread+0x798/0xbd0 [ 99.953503][ T3847] kthread+0x304/0x3d4 [ 99.953511][ T3847] ret_from_fork+0x10/0x20 [ 99.953518][ T3847] irq event stamp: 1411487 [ 99.953521][ T3847] hardirqs last enabled at (1411485): [] kcov_remote_start+0x190/0x560 [ 99.953531][ T3847] hardirqs last disabled at (1411487): [] el1_brk64+0x20/0x54 [ 99.953541][ T3847] softirqs last enabled at (1411474): [] ieee80211_ibss_work+0x2d0/0xd9c [ 99.953549][ T3847] softirqs last disabled at (1411486): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 99.953561][ T3847] ---[ end trace 0000000000000000 ]--- [ 100.054410][ C1] ------------[ cut here ]------------ [ 100.054419][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 100.054445][ C1] Modules linked in: [ 100.054455][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 100.054467][ C1] Tainted: [W]=WARN [ 100.054471][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.054477][ C1] Workqueue: events jump_label_update_timeout [ 100.054492][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.054501][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.054511][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.054520][ C1] sp : ffff80008ebe7150 [ 100.054524][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d7439490 [ 100.054537][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.054548][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 100.054561][ C1] x20: ffff000121810000 x19: ffff0000d7439400 x18: 1fffe00035bb1028 [ 100.054573][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.054587][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.054598][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.054610][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.054621][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.054632][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 100.054643][ C1] Call trace: [ 100.054647][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.054659][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.054671][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.054682][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.054694][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.054705][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.054715][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.054724][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.054733][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.054745][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.054753][ C1] tasklet_action_common+0x1dc/0x278 [ 100.054764][ C1] tasklet_action+0x68/0x8c [ 100.054772][ C1] handle_softirqs+0x2ec/0xd98 [ 100.054781][ C1] __do_softirq+0x14/0x20 [ 100.054789][ C1] ____do_softirq+0x14/0x20 [ 100.054798][ C1] call_on_irq_stack+0x30/0x48 [ 100.054806][ C1] do_softirq_own_stack+0x20/0x2c [ 100.054815][ C1] __irq_exit_rcu+0x1ac/0x428 [ 100.054823][ C1] irq_exit_rcu+0x14/0x84 [ 100.054837][ C1] el1_interrupt+0x40/0x60 [ 100.054848][ C1] el1h_64_irq_handler+0x18/0x24 [ 100.054858][ C1] el1h_64_irq+0x6c/0x70 [ 100.054866][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 100.054878][ C1] kick_all_cpus_sync+0x34/0x40 [ 100.054889][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 100.054898][ C1] __jump_label_update+0x31c/0x344 [ 100.054906][ C1] jump_label_update+0x428/0x4b8 [ 100.054918][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 100.054927][ C1] jump_label_update_timeout+0x28/0x3c [ 100.054938][ C1] process_scheduled_works+0x91c/0x1250 [ 100.054948][ C1] worker_thread+0x798/0xbd0 [ 100.054958][ C1] kthread+0x304/0x3d4 [ 100.054967][ C1] ret_from_fork+0x10/0x20 [ 100.054975][ C1] irq event stamp: 3147185 [ 100.054979][ C1] hardirqs last enabled at (3147184): [] kcov_remote_start+0x190/0x560 [ 100.054990][ C1] hardirqs last disabled at (3147185): [] el1_brk64+0x20/0x54 [ 100.055001][ C1] softirqs last enabled at (3146684): [] handle_softirqs+0xc28/0xd98 [ 100.055010][ C1] softirqs last disabled at (3146721): [] __do_softirq+0x14/0x20 [ 100.055019][ C1] ---[ end trace 0000000000000000 ]--- [ 100.055591][ T13] ------------[ cut here ]------------ [ 100.055595][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 100.055611][ T13] Modules linked in: [ 100.055617][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 100.055627][ T13] Tainted: [W]=WARN [ 100.055630][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.055635][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 100.055646][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.055654][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.055663][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.055672][ T13] sp : ffff80008ed16ed0 [ 100.055675][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000d743a090 [ 100.055686][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.055697][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 100.055708][ T13] x20: ffff000121810000 x19: ffff0000d743a000 x18: 1fffe00035bb1028 [ 100.055719][ T13] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.055729][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.055740][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.055750][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.055760][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.055770][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 100.055781][ T13] Call trace: [ 100.055784][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.055794][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.055805][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.055816][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.055833][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 100.055843][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.055853][ T13] ieee80211_iface_work+0x600/0xd3c [ 100.055861][ T13] cfg80211_wiphy_work+0x278/0x588 [ 100.055872][ T13] process_scheduled_works+0x91c/0x1250 [ 100.055882][ T13] worker_thread+0x798/0xbd0 [ 100.055890][ T13] kthread+0x304/0x3d4 [ 100.055898][ T13] ret_from_fork+0x10/0x20 [ 100.055906][ T13] irq event stamp: 2793101 [ 100.055909][ T13] hardirqs last enabled at (2793099): [] kcov_remote_start+0x190/0x560 [ 100.055919][ T13] hardirqs last disabled at (2793101): [] el1_brk64+0x20/0x54 [ 100.055929][ T13] softirqs last enabled at (2793088): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.055937][ T13] softirqs last disabled at (2793100): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.055948][ T13] ---[ end trace 0000000000000000 ]--- [ 100.156838][ C1] ------------[ cut here ]------------ [ 100.156847][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 100.156876][ C1] Modules linked in: [ 100.156887][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 100.156899][ C1] Tainted: [W]=WARN [ 100.156903][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.156909][ C1] Workqueue: events jump_label_update_timeout [ 100.156923][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.156932][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.156942][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.156952][ C1] sp : ffff80008ebe7150 [ 100.156955][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d7439c90 [ 100.156968][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.156980][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 100.156992][ C1] x20: ffff000121810000 x19: ffff0000d7439c00 x18: 1fffe00035bb1028 [ 100.157004][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.157015][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.157026][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.157037][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.157048][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.157059][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 100.157071][ C1] Call trace: [ 100.157074][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.157087][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.157098][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.157110][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.157121][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.157132][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.157142][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.157151][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.157160][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.157173][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.157181][ C1] tasklet_action_common+0x1dc/0x278 [ 100.157191][ C1] tasklet_action+0x68/0x8c [ 100.157199][ C1] handle_softirqs+0x2ec/0xd98 [ 100.157208][ C1] __do_softirq+0x14/0x20 [ 100.157216][ C1] ____do_softirq+0x14/0x20 [ 100.157225][ C1] call_on_irq_stack+0x30/0x48 [ 100.157233][ C1] do_softirq_own_stack+0x20/0x2c [ 100.157241][ C1] __irq_exit_rcu+0x1ac/0x428 [ 100.157249][ C1] irq_exit_rcu+0x14/0x84 [ 100.157257][ C1] el1_interrupt+0x40/0x60 [ 100.157268][ C1] el1h_64_irq_handler+0x18/0x24 [ 100.157278][ C1] el1h_64_irq+0x6c/0x70 [ 100.157286][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 100.157299][ C1] kick_all_cpus_sync+0x34/0x40 [ 100.157309][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 100.157319][ C1] __jump_label_update+0x31c/0x344 [ 100.157327][ C1] jump_label_update+0x428/0x4b8 [ 100.157338][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 100.157347][ C1] jump_label_update_timeout+0x28/0x3c [ 100.157358][ C1] process_scheduled_works+0x91c/0x1250 [ 100.157368][ C1] worker_thread+0x798/0xbd0 [ 100.157378][ C1] kthread+0x304/0x3d4 [ 100.157386][ C1] ret_from_fork+0x10/0x20 [ 100.157394][ C1] irq event stamp: 3148461 [ 100.157398][ C1] hardirqs last enabled at (3148460): [] kcov_remote_start+0x190/0x560 [ 100.157409][ C1] hardirqs last disabled at (3148461): [] el1_brk64+0x20/0x54 [ 100.157419][ C1] softirqs last enabled at (3147946): [] handle_softirqs+0xc28/0xd98 [ 100.157429][ C1] softirqs last disabled at (3147995): [] __do_softirq+0x14/0x20 [ 100.157438][ C1] ---[ end trace 0000000000000000 ]--- [ 100.158004][ T3847] ------------[ cut here ]------------ [ 100.158009][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 100.158024][ T3847] Modules linked in: [ 100.158030][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 100.158040][ T3847] Tainted: [W]=WARN [ 100.158042][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.158047][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 100.158058][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.158066][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.158075][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.158084][ T3847] sp : ffff80009a056ed0 [ 100.158087][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000daafc490 [ 100.158098][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.158109][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 100.158120][ T3847] x20: ffff000121810000 x19: ffff0000daafc400 x18: 1fffe00035bb1028 [ 100.158131][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.158141][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.158151][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.158161][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.158171][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.158182][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 100.158192][ T3847] Call trace: [ 100.158194][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.158205][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.158216][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.158227][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.158237][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 100.158247][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.158255][ T3847] ieee80211_iface_work+0x600/0xd3c [ 100.158263][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 100.158274][ T3847] process_scheduled_works+0x91c/0x1250 [ 100.158283][ T3847] worker_thread+0x798/0xbd0 [ 100.158291][ T3847] kthread+0x304/0x3d4 [ 100.158299][ T3847] ret_from_fork+0x10/0x20 [ 100.158306][ T3847] irq event stamp: 1415277 [ 100.158309][ T3847] hardirqs last enabled at (1415276): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 100.158320][ T3847] hardirqs last disabled at (1415277): [] el1_brk64+0x20/0x54 [ 100.158330][ T3847] softirqs last enabled at (1415260): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.158338][ T3847] softirqs last disabled at (1415272): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.158350][ T3847] ---[ end trace 0000000000000000 ]--- [ 100.259253][ C1] ------------[ cut here ]------------ [ 100.259261][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 100.259284][ C1] Modules linked in: [ 100.259294][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 100.259306][ C1] Tainted: [W]=WARN [ 100.259309][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.259314][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.259323][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.259333][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.259342][ C1] sp : ffff80008edc6ef0 [ 100.259345][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff000122d0c490 [ 100.259358][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.259370][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 100.259381][ C1] x20: ffff000121810000 x19: ffff000122d0c400 x18: 1fffe00035bb1028 [ 100.259393][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.259405][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.259416][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.259427][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.259438][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.259449][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 100.259460][ C1] Call trace: [ 100.259464][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.259476][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.259488][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.259499][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.259511][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.259522][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.259532][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.259541][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.259550][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.259562][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.259570][ C1] tasklet_action_common+0x1dc/0x278 [ 100.259580][ C1] tasklet_action+0x68/0x8c [ 100.259589][ C1] handle_softirqs+0x2ec/0xd98 [ 100.259597][ C1] run_ksoftirqd+0x70/0xbc [ 100.259606][ C1] smpboot_thread_fn+0x4e4/0x97c [ 100.259614][ C1] kthread+0x304/0x3d4 [ 100.259623][ C1] ret_from_fork+0x10/0x20 [ 100.259632][ C1] irq event stamp: 24353121 [ 100.259636][ C1] hardirqs last enabled at (24353120): [] kcov_remote_start+0x190/0x560 [ 100.259647][ C1] hardirqs last disabled at (24353121): [] el1_brk64+0x20/0x54 [ 100.259659][ C1] softirqs last enabled at (24352918): [] handle_softirqs+0xc28/0xd98 [ 100.259668][ C1] softirqs last disabled at (24352925): [] run_ksoftirqd+0x70/0xbc [ 100.259678][ C1] ---[ end trace 0000000000000000 ]--- [ 100.260205][ T13] ------------[ cut here ]------------ [ 100.260209][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 100.260223][ T13] Modules linked in: [ 100.260229][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 100.260238][ T13] Tainted: [W]=WARN [ 100.260241][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.260246][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 100.260257][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.260265][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.260274][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.260283][ T13] sp : ffff80008ed16ed0 [ 100.260286][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f68cf090 [ 100.260297][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.260307][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 100.260318][ T13] x20: ffff000121810000 x19: ffff0000f68cf000 x18: 1fffe00035bb1028 [ 100.260329][ T13] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.260339][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.260349][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.260360][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.260370][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.260380][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 100.260390][ T13] Call trace: [ 100.260393][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.260403][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.260414][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.260425][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.260435][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 100.260445][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.260453][ T13] ieee80211_iface_work+0x600/0xd3c [ 100.260461][ T13] cfg80211_wiphy_work+0x278/0x588 [ 100.260472][ T13] process_scheduled_works+0x91c/0x1250 [ 100.260481][ T13] worker_thread+0x798/0xbd0 [ 100.260490][ T13] kthread+0x304/0x3d4 [ 100.260498][ T13] ret_from_fork+0x10/0x20 [ 100.260505][ T13] irq event stamp: 2797173 [ 100.260508][ T13] hardirqs last enabled at (2797171): [] kcov_remote_start+0x190/0x560 [ 100.260518][ T13] hardirqs last disabled at (2797173): [] el1_brk64+0x20/0x54 [ 100.260528][ T13] softirqs last enabled at (2797160): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.260536][ T13] softirqs last disabled at (2797172): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.260548][ T13] ---[ end trace 0000000000000000 ]--- [ 100.361640][ C1] ------------[ cut here ]------------ [ 100.361650][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 100.361673][ C1] Modules linked in: [ 100.361683][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 100.361695][ C1] Tainted: [W]=WARN [ 100.361698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.361703][ C1] Workqueue: events jump_label_update_timeout [ 100.361718][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.361726][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.361736][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.361746][ C1] sp : ffff80008ebe7150 [ 100.361749][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f68cc090 [ 100.361762][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.361773][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 100.361785][ C1] x20: ffff000121810000 x19: ffff0000f68cc000 x18: 1fffe00035bb1028 [ 100.361797][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.361809][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.361820][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.361835][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.361847][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.361858][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 100.361869][ C1] Call trace: [ 100.361873][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.361886][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.361897][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.361908][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.361920][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.361931][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.361941][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.361950][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.361959][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.361971][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.361980][ C1] tasklet_action_common+0x1dc/0x278 [ 100.361990][ C1] tasklet_action+0x68/0x8c [ 100.361998][ C1] handle_softirqs+0x2ec/0xd98 [ 100.362006][ C1] __do_softirq+0x14/0x20 [ 100.362015][ C1] ____do_softirq+0x14/0x20 [ 100.362024][ C1] call_on_irq_stack+0x30/0x48 [ 100.362032][ C1] do_softirq_own_stack+0x20/0x2c [ 100.362040][ C1] __irq_exit_rcu+0x1ac/0x428 [ 100.362048][ C1] irq_exit_rcu+0x14/0x84 [ 100.362056][ C1] el1_interrupt+0x40/0x60 [ 100.362067][ C1] el1h_64_irq_handler+0x18/0x24 [ 100.362077][ C1] el1h_64_irq+0x6c/0x70 [ 100.362085][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 100.362097][ C1] kick_all_cpus_sync+0x34/0x40 [ 100.362108][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 100.362117][ C1] __jump_label_update+0x31c/0x344 [ 100.362125][ C1] jump_label_update+0x428/0x4b8 [ 100.362137][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 100.362145][ C1] jump_label_update_timeout+0x28/0x3c [ 100.362156][ C1] process_scheduled_works+0x91c/0x1250 [ 100.362167][ C1] worker_thread+0x798/0xbd0 [ 100.362176][ C1] kthread+0x304/0x3d4 [ 100.362184][ C1] ret_from_fork+0x10/0x20 [ 100.362193][ C1] irq event stamp: 3150829 [ 100.362196][ C1] hardirqs last enabled at (3150828): [] kcov_remote_start+0x190/0x560 [ 100.362207][ C1] hardirqs last disabled at (3150829): [] el1_brk64+0x20/0x54 [ 100.362218][ C1] softirqs last enabled at (3150340): [] handle_softirqs+0xc28/0xd98 [ 100.362227][ C1] softirqs last disabled at (3150359): [] __do_softirq+0x14/0x20 [ 100.362236][ C1] ---[ end trace 0000000000000000 ]--- [ 100.362773][ T13] ------------[ cut here ]------------ [ 100.362777][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 100.362793][ T13] Modules linked in: [ 100.362798][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 100.362808][ T13] Tainted: [W]=WARN [ 100.362811][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.362816][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 100.362832][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.362840][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.362849][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.362859][ T13] sp : ffff80008ed16ed0 [ 100.362862][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff000122e87090 [ 100.362875][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.362886][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 100.362897][ T13] x20: ffff000121810000 x19: ffff000122e87000 x18: 1fffe00035bb1028 [ 100.362908][ T13] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.362918][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.362928][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.362938][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.362949][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.362959][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 100.362969][ T13] Call trace: [ 100.362972][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.362983][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.362993][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.363004][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.363015][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 100.363024][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.363033][ T13] ieee80211_iface_work+0x600/0xd3c [ 100.363041][ T13] cfg80211_wiphy_work+0x278/0x588 [ 100.363051][ T13] process_scheduled_works+0x91c/0x1250 [ 100.363061][ T13] worker_thread+0x798/0xbd0 [ 100.363069][ T13] kthread+0x304/0x3d4 [ 100.363077][ T13] ret_from_fork+0x10/0x20 [ 100.363085][ T13] irq event stamp: 2798775 [ 100.363088][ T13] hardirqs last enabled at (2798773): [] kcov_remote_start+0x190/0x560 [ 100.363098][ T13] hardirqs last disabled at (2798775): [] el1_brk64+0x20/0x54 [ 100.363108][ T13] softirqs last enabled at (2798760): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.363116][ T13] softirqs last disabled at (2798774): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.363128][ T13] ---[ end trace 0000000000000000 ]--- [ 100.464050][ C1] ------------[ cut here ]------------ [ 100.464060][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 100.464085][ C1] Modules linked in: [ 100.464095][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 100.464107][ C1] Tainted: [W]=WARN [ 100.464110][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.464116][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.464125][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.464135][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.464144][ C1] sp : ffff80008edc6ef0 [ 100.464148][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff000122e87890 [ 100.464161][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.464173][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 100.464185][ C1] x20: ffff000121810000 x19: ffff000122e87800 x18: 1fffe00035bb1028 [ 100.464197][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.464208][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.464219][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.464231][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.464242][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.464253][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 100.464264][ C1] Call trace: [ 100.464267][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.464280][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.464292][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.464304][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.464315][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.464326][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.464336][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.464345][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.464353][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.464366][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.464374][ C1] tasklet_action_common+0x1dc/0x278 [ 100.464384][ C1] tasklet_action+0x68/0x8c [ 100.464393][ C1] handle_softirqs+0x2ec/0xd98 [ 100.464401][ C1] run_ksoftirqd+0x70/0xbc [ 100.464410][ C1] smpboot_thread_fn+0x4e4/0x97c [ 100.464418][ C1] kthread+0x304/0x3d4 [ 100.464427][ C1] ret_from_fork+0x10/0x20 [ 100.464436][ C1] irq event stamp: 24353399 [ 100.464440][ C1] hardirqs last enabled at (24353398): [] kcov_remote_start+0x190/0x560 [ 100.464451][ C1] hardirqs last disabled at (24353399): [] el1_brk64+0x20/0x54 [ 100.464463][ C1] softirqs last enabled at (24353198): [] handle_softirqs+0xc28/0xd98 [ 100.464472][ C1] softirqs last disabled at (24353203): [] run_ksoftirqd+0x70/0xbc [ 100.464482][ C1] ---[ end trace 0000000000000000 ]--- [ 100.465028][ T3847] ------------[ cut here ]------------ [ 100.465032][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 100.465047][ T3847] Modules linked in: [ 100.465053][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 100.465063][ T3847] Tainted: [W]=WARN [ 100.465066][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.465070][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 100.465082][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.465090][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.465099][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.465108][ T3847] sp : ffff80009a056ed0 [ 100.465111][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff000122e87c90 [ 100.465122][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.465133][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 100.465143][ T3847] x20: ffff000121810000 x19: ffff000122e87c00 x18: 1fffe00035bb1028 [ 100.465154][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.465165][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.465175][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.465185][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.465195][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.465205][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 100.465215][ T3847] Call trace: [ 100.465218][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.465229][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.465240][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.465250][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.465261][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 100.465271][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.465279][ T3847] ieee80211_iface_work+0x600/0xd3c [ 100.465287][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 100.465297][ T3847] process_scheduled_works+0x91c/0x1250 [ 100.465307][ T3847] worker_thread+0x798/0xbd0 [ 100.465315][ T3847] kthread+0x304/0x3d4 [ 100.465323][ T3847] ret_from_fork+0x10/0x20 [ 100.465330][ T3847] irq event stamp: 1429137 [ 100.465333][ T3847] hardirqs last enabled at (1429135): [] kcov_remote_start+0x190/0x560 [ 100.465343][ T3847] hardirqs last disabled at (1429137): [] el1_brk64+0x20/0x54 [ 100.465353][ T3847] softirqs last enabled at (1429124): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.465361][ T3847] softirqs last disabled at (1429136): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.465373][ T3847] ---[ end trace 0000000000000000 ]--- [ 100.566443][ C1] ------------[ cut here ]------------ [ 100.566453][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 100.566476][ C1] Modules linked in: [ 100.566486][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 100.566498][ C1] Tainted: [W]=WARN [ 100.566501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.566507][ C1] Workqueue: events jump_label_update_timeout [ 100.566521][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.566530][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.566540][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.566550][ C1] sp : ffff80008ebe7150 [ 100.566553][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff000122e85c90 [ 100.566566][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.566577][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 100.566589][ C1] x20: ffff000121810000 x19: ffff000122e85c00 x18: 1fffe00035bb1028 [ 100.566601][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.566613][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.566624][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.566635][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.566646][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.566657][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 100.566669][ C1] Call trace: [ 100.566672][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.566685][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.566696][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.566708][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.566719][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.566730][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.566740][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.566749][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.566758][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.566770][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.566779][ C1] tasklet_action_common+0x1dc/0x278 [ 100.566789][ C1] tasklet_action+0x68/0x8c [ 100.566797][ C1] handle_softirqs+0x2ec/0xd98 [ 100.566805][ C1] __do_softirq+0x14/0x20 [ 100.566814][ C1] ____do_softirq+0x14/0x20 [ 100.566823][ C1] call_on_irq_stack+0x30/0x48 [ 100.566834][ C1] do_softirq_own_stack+0x20/0x2c [ 100.566843][ C1] __irq_exit_rcu+0x1ac/0x428 [ 100.566852][ C1] irq_exit_rcu+0x14/0x84 [ 100.566860][ C1] el1_interrupt+0x40/0x60 [ 100.566870][ C1] el1h_64_irq_handler+0x18/0x24 [ 100.566880][ C1] el1h_64_irq+0x6c/0x70 [ 100.566888][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 100.566901][ C1] kick_all_cpus_sync+0x34/0x40 [ 100.566912][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 100.566921][ C1] __jump_label_update+0x31c/0x344 [ 100.566929][ C1] jump_label_update+0x428/0x4b8 [ 100.566940][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 100.566949][ C1] jump_label_update_timeout+0x28/0x3c [ 100.566960][ C1] process_scheduled_works+0x91c/0x1250 [ 100.566970][ C1] worker_thread+0x798/0xbd0 [ 100.566980][ C1] kthread+0x304/0x3d4 [ 100.566988][ C1] ret_from_fork+0x10/0x20 [ 100.566996][ C1] irq event stamp: 3153021 [ 100.567000][ C1] hardirqs last enabled at (3153020): [] kcov_remote_start+0x190/0x560 [ 100.567011][ C1] hardirqs last disabled at (3153021): [] el1_brk64+0x20/0x54 [ 100.567022][ C1] softirqs last enabled at (3152506): [] handle_softirqs+0xc28/0xd98 [ 100.567031][ C1] softirqs last disabled at (3152551): [] __do_softirq+0x14/0x20 [ 100.567040][ C1] ---[ end trace 0000000000000000 ]--- [ 100.567587][ T1159] ------------[ cut here ]------------ [ 100.567591][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 100.567606][ T1159] Modules linked in: [ 100.567612][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 100.567621][ T1159] Tainted: [W]=WARN [ 100.567624][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.567629][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 100.567640][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.567648][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.567657][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.567666][ T1159] sp : ffff800093da6ed0 [ 100.567668][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff000122e85490 [ 100.567680][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.567690][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 100.567701][ T1159] x20: ffff000121810000 x19: ffff000122e85400 x18: 1fffe00035bb1028 [ 100.567712][ T1159] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.567722][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.567732][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.567743][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.567753][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.567763][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 100.567773][ T1159] Call trace: [ 100.567776][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.567786][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.567797][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.567808][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.567818][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 100.567831][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.567840][ T1159] ieee80211_iface_work+0x600/0xd3c [ 100.567849][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 100.567860][ T1159] process_scheduled_works+0x91c/0x1250 [ 100.567870][ T1159] worker_thread+0x798/0xbd0 [ 100.567879][ T1159] kthread+0x304/0x3d4 [ 100.567886][ T1159] ret_from_fork+0x10/0x20 [ 100.567894][ T1159] irq event stamp: 896503 [ 100.567897][ T1159] hardirqs last enabled at (896501): [] kcov_remote_start+0x190/0x560 [ 100.567907][ T1159] hardirqs last disabled at (896503): [] el1_brk64+0x20/0x54 [ 100.567917][ T1159] softirqs last enabled at (896490): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.567925][ T1159] softirqs last disabled at (896502): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.567937][ T1159] ---[ end trace 0000000000000000 ]--- [ 100.668851][ C1] ------------[ cut here ]------------ [ 100.668863][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 100.668892][ C1] Modules linked in: [ 100.668903][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 100.668914][ C1] Tainted: [W]=WARN [ 100.668918][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.668924][ C1] Workqueue: events jump_label_update_timeout [ 100.668939][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.668947][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.668957][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.668967][ C1] sp : ffff80008ebe7150 [ 100.668970][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0001230e2090 [ 100.668983][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.668994][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 100.669006][ C1] x20: ffff000121810000 x19: ffff0001230e2000 x18: 1fffe00035bb1028 [ 100.669018][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.669030][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.669041][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.669052][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.669063][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.669074][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 100.669086][ C1] Call trace: [ 100.669089][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.669102][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.669113][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.669125][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.669136][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.669147][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.669157][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.669166][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.669175][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.669187][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.669195][ C1] tasklet_action_common+0x1dc/0x278 [ 100.669206][ C1] tasklet_action+0x68/0x8c [ 100.669214][ C1] handle_softirqs+0x2ec/0xd98 [ 100.669222][ C1] __do_softirq+0x14/0x20 [ 100.669231][ C1] ____do_softirq+0x14/0x20 [ 100.669240][ C1] call_on_irq_stack+0x30/0x48 [ 100.669248][ C1] do_softirq_own_stack+0x20/0x2c [ 100.669256][ C1] __irq_exit_rcu+0x1ac/0x428 [ 100.669264][ C1] irq_exit_rcu+0x14/0x84 [ 100.669272][ C1] el1_interrupt+0x40/0x60 [ 100.669283][ C1] el1h_64_irq_handler+0x18/0x24 [ 100.669293][ C1] el1h_64_irq+0x6c/0x70 [ 100.669301][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 100.669313][ C1] kick_all_cpus_sync+0x34/0x40 [ 100.669324][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 100.669333][ C1] __jump_label_update+0x31c/0x344 [ 100.669342][ C1] jump_label_update+0x428/0x4b8 [ 100.669353][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 100.669361][ C1] jump_label_update_timeout+0x28/0x3c [ 100.669373][ C1] process_scheduled_works+0x91c/0x1250 [ 100.669383][ C1] worker_thread+0x798/0xbd0 [ 100.669393][ C1] kthread+0x304/0x3d4 [ 100.669402][ C1] ret_from_fork+0x10/0x20 [ 100.669410][ C1] irq event stamp: 3154239 [ 100.669413][ C1] hardirqs last enabled at (3154238): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 100.669426][ C1] hardirqs last disabled at (3154239): [] el1_brk64+0x20/0x54 [ 100.669437][ C1] softirqs last enabled at (3153708): [] handle_softirqs+0xc28/0xd98 [ 100.669446][ C1] softirqs last disabled at (3153765): [] __do_softirq+0x14/0x20 [ 100.669455][ C1] ---[ end trace 0000000000000000 ]--- [ 100.670101][ T1159] ------------[ cut here ]------------ [ 100.670106][ T1159] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:6/1159 [ 100.670125][ T1159] Modules linked in: [ 100.670133][ T1159] CPU: 1 UID: 0 PID: 1159 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT [ 100.670143][ T1159] Tainted: [W]=WARN [ 100.670146][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.670150][ T1159] Workqueue: events_unbound cfg80211_wiphy_work [ 100.670162][ T1159] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.670169][ T1159] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.670178][ T1159] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.670187][ T1159] sp : ffff800093da6ed0 [ 100.670190][ T1159] x29: ffff800093da6f20 x28: 1ffff00011173571 x27: ffff0001230e2490 [ 100.670201][ T1159] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.670212][ T1159] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800093da6fe0 [ 100.670222][ T1159] x20: ffff000121810000 x19: ffff0001230e2400 x18: 1fffe00035bb1028 [ 100.670233][ T1159] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.670243][ T1159] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.670253][ T1159] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.670263][ T1159] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.670273][ T1159] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.670283][ T1159] x2 : 0000000000000001 x1 : ffff0000c8553b00 x0 : 0000000000000000 [ 100.670293][ T1159] Call trace: [ 100.670295][ T1159] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.670306][ T1159] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.670317][ T1159] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.670327][ T1159] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.670338][ T1159] ieee80211_bss_info_update+0x5d0/0x944 [ 100.670347][ T1159] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.670356][ T1159] ieee80211_iface_work+0x600/0xd3c [ 100.670364][ T1159] cfg80211_wiphy_work+0x278/0x588 [ 100.670374][ T1159] process_scheduled_works+0x91c/0x1250 [ 100.670383][ T1159] worker_thread+0x798/0xbd0 [ 100.670392][ T1159] kthread+0x304/0x3d4 [ 100.670400][ T1159] ret_from_fork+0x10/0x20 [ 100.670407][ T1159] irq event stamp: 898165 [ 100.670410][ T1159] hardirqs last enabled at (898163): [] kcov_remote_start+0x190/0x560 [ 100.670420][ T1159] hardirqs last disabled at (898165): [] el1_brk64+0x20/0x54 [ 100.670430][ T1159] softirqs last enabled at (898150): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.670439][ T1159] softirqs last disabled at (898164): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.670450][ T1159] ---[ end trace 0000000000000000 ]--- [ 100.771232][ C1] ------------[ cut here ]------------ [ 100.771242][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 100.771265][ C1] Modules linked in: [ 100.771275][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 100.771287][ C1] Tainted: [W]=WARN [ 100.771290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.771295][ C1] Workqueue: events jump_label_update_timeout [ 100.771310][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.771318][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.771328][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.771337][ C1] sp : ffff80008ebe7150 [ 100.771341][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fc4ff890 [ 100.771353][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.771365][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 100.771377][ C1] x20: ffff000121810000 x19: ffff0000fc4ff800 x18: 1fffe00035bb1028 [ 100.771389][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.771403][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.771414][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.771425][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.771436][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.771447][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 100.771459][ C1] Call trace: [ 100.771462][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.771474][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.771486][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.771498][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.771509][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.771520][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.771530][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.771539][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.771548][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.771560][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.771568][ C1] tasklet_action_common+0x1dc/0x278 [ 100.771578][ C1] tasklet_action+0x68/0x8c [ 100.771586][ C1] handle_softirqs+0x2ec/0xd98 [ 100.771595][ C1] __do_softirq+0x14/0x20 [ 100.771603][ C1] ____do_softirq+0x14/0x20 [ 100.771612][ C1] call_on_irq_stack+0x30/0x48 [ 100.771620][ C1] do_softirq_own_stack+0x20/0x2c [ 100.771628][ C1] __irq_exit_rcu+0x1ac/0x428 [ 100.771637][ C1] irq_exit_rcu+0x14/0x84 [ 100.771645][ C1] el1_interrupt+0x40/0x60 [ 100.771656][ C1] el1h_64_irq_handler+0x18/0x24 [ 100.771665][ C1] el1h_64_irq+0x6c/0x70 [ 100.771673][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 100.771686][ C1] kick_all_cpus_sync+0x34/0x40 [ 100.771696][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 100.771706][ C1] __jump_label_update+0x31c/0x344 [ 100.771714][ C1] jump_label_update+0x428/0x4b8 [ 100.771725][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 100.771734][ C1] jump_label_update_timeout+0x28/0x3c [ 100.771746][ C1] process_scheduled_works+0x91c/0x1250 [ 100.771756][ C1] worker_thread+0x798/0xbd0 [ 100.771765][ C1] kthread+0x304/0x3d4 [ 100.771774][ C1] ret_from_fork+0x10/0x20 [ 100.771782][ C1] irq event stamp: 3155615 [ 100.771786][ C1] hardirqs last enabled at (3155614): [] kcov_remote_start+0x190/0x560 [ 100.771797][ C1] hardirqs last disabled at (3155615): [] el1_brk64+0x20/0x54 [ 100.771807][ C1] softirqs last enabled at (3155124): [] handle_softirqs+0xc28/0xd98 [ 100.771816][ C1] softirqs last disabled at (3155143): [] __do_softirq+0x14/0x20 [ 100.771828][ C1] ---[ end trace 0000000000000000 ]--- [ 100.772402][ T13] ------------[ cut here ]------------ [ 100.772407][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 100.772423][ T13] Modules linked in: [ 100.772430][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 100.772439][ T13] Tainted: [W]=WARN [ 100.772442][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.772447][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 100.772458][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.772466][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.772475][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.772484][ T13] sp : ffff80008ed16ed0 [ 100.772487][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000fc4ffc90 [ 100.772499][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.772510][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 100.772521][ T13] x20: ffff000121810000 x19: ffff0000fc4ffc00 x18: 1fffe00035bb1028 [ 100.772531][ T13] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.772542][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.772552][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.772562][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.772572][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.772582][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 100.772593][ T13] Call trace: [ 100.772595][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.772606][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.772617][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.772627][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.772638][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 100.772648][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.772656][ T13] ieee80211_iface_work+0x600/0xd3c [ 100.772664][ T13] cfg80211_wiphy_work+0x278/0x588 [ 100.772675][ T13] process_scheduled_works+0x91c/0x1250 [ 100.772684][ T13] worker_thread+0x798/0xbd0 [ 100.772693][ T13] kthread+0x304/0x3d4 [ 100.772701][ T13] ret_from_fork+0x10/0x20 [ 100.772708][ T13] irq event stamp: 2802109 [ 100.772711][ T13] hardirqs last enabled at (2802107): [] kcov_remote_start+0x190/0x560 [ 100.772721][ T13] hardirqs last disabled at (2802109): [] el1_brk64+0x20/0x54 [ 100.772731][ T13] softirqs last enabled at (2802096): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.772740][ T13] softirqs last disabled at (2802108): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.772751][ T13] ---[ end trace 0000000000000000 ]--- [ 100.873626][ C1] ------------[ cut here ]------------ [ 100.873637][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 100.873663][ C1] Modules linked in: [ 100.873674][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 100.873686][ C1] Tainted: [W]=WARN [ 100.873689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.873695][ C1] Workqueue: events jump_label_update_timeout [ 100.873708][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.873717][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.873727][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.873736][ C1] sp : ffff80008ebe7150 [ 100.873740][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fc4fd890 [ 100.873752][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.873764][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 100.873776][ C1] x20: ffff000121810000 x19: ffff0000fc4fd800 x18: 1fffe00035bb1028 [ 100.873788][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.873799][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.873810][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.873822][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.873837][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.873850][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 100.873861][ C1] Call trace: [ 100.873864][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.873877][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.873889][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.873900][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.873912][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.873923][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.873932][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.873942][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.873950][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.873963][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.873971][ C1] tasklet_action_common+0x1dc/0x278 [ 100.873981][ C1] tasklet_action+0x68/0x8c [ 100.873989][ C1] handle_softirqs+0x2ec/0xd98 [ 100.873998][ C1] __do_softirq+0x14/0x20 [ 100.874006][ C1] ____do_softirq+0x14/0x20 [ 100.874015][ C1] call_on_irq_stack+0x30/0x48 [ 100.874023][ C1] do_softirq_own_stack+0x20/0x2c [ 100.874031][ C1] __irq_exit_rcu+0x1ac/0x428 [ 100.874040][ C1] irq_exit_rcu+0x14/0x84 [ 100.874048][ C1] el1_interrupt+0x40/0x60 [ 100.874058][ C1] el1h_64_irq_handler+0x18/0x24 [ 100.874068][ C1] el1h_64_irq+0x6c/0x70 [ 100.874076][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 100.874088][ C1] kick_all_cpus_sync+0x34/0x40 [ 100.874099][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 100.874108][ C1] __jump_label_update+0x31c/0x344 [ 100.874116][ C1] jump_label_update+0x428/0x4b8 [ 100.874127][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 100.874136][ C1] jump_label_update_timeout+0x28/0x3c [ 100.874147][ C1] process_scheduled_works+0x91c/0x1250 [ 100.874158][ C1] worker_thread+0x798/0xbd0 [ 100.874167][ C1] kthread+0x304/0x3d4 [ 100.874176][ C1] ret_from_fork+0x10/0x20 [ 100.874184][ C1] irq event stamp: 3156889 [ 100.874187][ C1] hardirqs last enabled at (3156888): [] kcov_remote_start+0x190/0x560 [ 100.874198][ C1] hardirqs last disabled at (3156889): [] el1_brk64+0x20/0x54 [ 100.874209][ C1] softirqs last enabled at (3156382): [] handle_softirqs+0xc28/0xd98 [ 100.874218][ C1] softirqs last disabled at (3156413): [] __do_softirq+0x14/0x20 [ 100.874227][ C1] ---[ end trace 0000000000000000 ]--- [ 100.874782][ T3847] ------------[ cut here ]------------ [ 100.874786][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 100.874802][ T3847] Modules linked in: [ 100.874807][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 100.874817][ T3847] Tainted: [W]=WARN [ 100.874820][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.874825][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 100.874841][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.874849][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.874859][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.874868][ T3847] sp : ffff80009a056ed0 [ 100.874871][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000fc4fe490 [ 100.874882][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.874893][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 100.874904][ T3847] x20: ffff000121810000 x19: ffff0000fc4fe400 x18: 1fffe00035bb1028 [ 100.874915][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.874925][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.874935][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.874946][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.874956][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.874966][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 100.874976][ T3847] Call trace: [ 100.874979][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.874989][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.875000][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.875011][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.875021][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 100.875031][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.875039][ T3847] ieee80211_iface_work+0x600/0xd3c [ 100.875047][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 100.875058][ T3847] process_scheduled_works+0x91c/0x1250 [ 100.875067][ T3847] worker_thread+0x798/0xbd0 [ 100.875075][ T3847] kthread+0x304/0x3d4 [ 100.875083][ T3847] ret_from_fork+0x10/0x20 [ 100.875090][ T3847] irq event stamp: 1438813 [ 100.875093][ T3847] hardirqs last enabled at (1438811): [] kcov_remote_start+0x190/0x560 [ 100.875103][ T3847] hardirqs last disabled at (1438813): [] el1_brk64+0x20/0x54 [ 100.875112][ T3847] softirqs last enabled at (1438800): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.875121][ T3847] softirqs last disabled at (1438812): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.875132][ T3847] ---[ end trace 0000000000000000 ]--- [ 100.976030][ C1] ------------[ cut here ]------------ [ 100.976039][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 100.976062][ C1] Modules linked in: [ 100.976071][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 100.976083][ C1] Tainted: [W]=WARN [ 100.976086][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.976091][ C1] Workqueue: events jump_label_update_timeout [ 100.976105][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.976114][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.976125][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.976135][ C1] sp : ffff80008ebe7150 [ 100.976139][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f4896c90 [ 100.976152][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.976164][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 100.976176][ C1] x20: ffff000121810000 x19: ffff0000f4896c00 x18: 1fffe00035bb1028 [ 100.976188][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 100.976199][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.976210][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 100.976221][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.976232][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.976244][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 100.976255][ C1] Call trace: [ 100.976258][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.976271][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.976282][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.976294][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.976305][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 100.976316][ C1] ieee80211_scan_rx+0x450/0x928 [ 100.976326][ C1] ieee80211_rx_list+0x229c/0x3000 [ 100.976335][ C1] ieee80211_rx_napi+0x18c/0x370 [ 100.976344][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 100.976357][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 100.976365][ C1] tasklet_action_common+0x1dc/0x278 [ 100.976375][ C1] tasklet_action+0x68/0x8c [ 100.976383][ C1] handle_softirqs+0x2ec/0xd98 [ 100.976391][ C1] __do_softirq+0x14/0x20 [ 100.976400][ C1] ____do_softirq+0x14/0x20 [ 100.976408][ C1] call_on_irq_stack+0x30/0x48 [ 100.976416][ C1] do_softirq_own_stack+0x20/0x2c [ 100.976424][ C1] __irq_exit_rcu+0x1ac/0x428 [ 100.976432][ C1] irq_exit_rcu+0x14/0x84 [ 100.976440][ C1] el1_interrupt+0x40/0x60 [ 100.976451][ C1] el1h_64_irq_handler+0x18/0x24 [ 100.976461][ C1] el1h_64_irq+0x6c/0x70 [ 100.976469][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 100.976481][ C1] kick_all_cpus_sync+0x34/0x40 [ 100.976492][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 100.976501][ C1] __jump_label_update+0x31c/0x344 [ 100.976509][ C1] jump_label_update+0x428/0x4b8 [ 100.976521][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 100.976529][ C1] jump_label_update_timeout+0x28/0x3c [ 100.976541][ C1] process_scheduled_works+0x91c/0x1250 [ 100.976551][ C1] worker_thread+0x798/0xbd0 [ 100.976560][ C1] kthread+0x304/0x3d4 [ 100.976569][ C1] ret_from_fork+0x10/0x20 [ 100.976577][ C1] irq event stamp: 3158145 [ 100.976580][ C1] hardirqs last enabled at (3158144): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 100.976592][ C1] hardirqs last disabled at (3158145): [] el1_brk64+0x20/0x54 [ 100.976603][ C1] softirqs last enabled at (3157634): [] handle_softirqs+0xc28/0xd98 [ 100.976612][ C1] softirqs last disabled at (3157665): [] __do_softirq+0x14/0x20 [ 100.976621][ C1] ---[ end trace 0000000000000000 ]--- [ 100.977215][ T13] ------------[ cut here ]------------ [ 100.977220][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 100.977235][ T13] Modules linked in: [ 100.977241][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 100.977251][ T13] Tainted: [W]=WARN [ 100.977254][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.977259][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 100.977270][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.977278][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 100.977288][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 100.977297][ T13] sp : ffff80008ed16ed0 [ 100.977300][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f4894c90 [ 100.977311][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 100.977322][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 100.977333][ T13] x20: ffff000121810000 x19: ffff0000f4894c00 x18: 1fffe00035bb1028 [ 100.977344][ T13] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 100.977355][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 100.977365][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 100.977376][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 100.977386][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 100.977396][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 100.977406][ T13] Call trace: [ 100.977409][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 100.977420][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 100.977431][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 100.977441][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 100.977452][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 100.977462][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 100.977469][ T13] ieee80211_iface_work+0x600/0xd3c [ 100.977477][ T13] cfg80211_wiphy_work+0x278/0x588 [ 100.977488][ T13] process_scheduled_works+0x91c/0x1250 [ 100.977497][ T13] worker_thread+0x798/0xbd0 [ 100.977506][ T13] kthread+0x304/0x3d4 [ 100.977514][ T13] ret_from_fork+0x10/0x20 [ 100.977521][ T13] irq event stamp: 2805953 [ 100.977524][ T13] hardirqs last enabled at (2805951): [] kcov_remote_start+0x190/0x560 [ 100.977534][ T13] hardirqs last disabled at (2805953): [] el1_brk64+0x20/0x54 [ 100.977544][ T13] softirqs last enabled at (2805940): [] ieee80211_ibss_work+0x2d0/0xd9c [ 100.977552][ T13] softirqs last disabled at (2805952): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 100.977564][ T13] ---[ end trace 0000000000000000 ]--- [ 101.078466][ C1] ------------[ cut here ]------------ [ 101.078476][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 101.078499][ C1] Modules linked in: [ 101.078508][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 101.078520][ C1] Tainted: [W]=WARN [ 101.078523][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.078528][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.078537][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.078547][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.078556][ C1] sp : ffff80008ebe7150 [ 101.078559][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f4895090 [ 101.078572][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.078584][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 101.078596][ C1] x20: ffff000121810000 x19: ffff0000f4895000 x18: 0000000000000000 [ 101.078607][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 101.078619][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.078630][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 101.078642][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.078652][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.078664][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 101.078675][ C1] Call trace: [ 101.078678][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.078691][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.078703][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.078714][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.078726][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 101.078737][ C1] ieee80211_scan_rx+0x450/0x928 [ 101.078747][ C1] ieee80211_rx_list+0x229c/0x3000 [ 101.078756][ C1] ieee80211_rx_napi+0x18c/0x370 [ 101.078765][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 101.078777][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 101.078785][ C1] tasklet_action_common+0x1dc/0x278 [ 101.078796][ C1] tasklet_action+0x68/0x8c [ 101.078804][ C1] handle_softirqs+0x2ec/0xd98 [ 101.078812][ C1] __do_softirq+0x14/0x20 [ 101.078824][ C1] ____do_softirq+0x14/0x20 [ 101.078838][ C1] call_on_irq_stack+0x30/0x48 [ 101.078846][ C1] do_softirq_own_stack+0x20/0x2c [ 101.078855][ C1] do_softirq+0x90/0xf8 [ 101.078863][ C1] __local_bh_enable_ip+0x240/0x35c [ 101.078872][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 101.078883][ C1] lock_sock_nested+0xb0/0x110 [ 101.078894][ C1] tcp_recvmsg+0x174/0x4d8 [ 101.078903][ C1] inet_recvmsg+0xb8/0xd8 [ 101.078912][ C1] sock_recvmsg+0xd4/0x170 [ 101.078921][ C1] sock_read_iter+0x1d4/0x288 [ 101.078931][ C1] vfs_read+0x498/0x8c8 [ 101.078943][ C1] ksys_read+0x12c/0x228 [ 101.078954][ C1] __arm64_sys_read+0x84/0x98 [ 101.078965][ C1] invoke_syscall+0x98/0x244 [ 101.078976][ C1] el0_svc_common+0xec/0x23c [ 101.078987][ C1] do_el0_svc+0x4c/0x5c [ 101.078997][ C1] el0_svc+0x64/0x260 [ 101.079007][ C1] el0t_64_sync_handler+0x44/0x104 [ 101.079017][ C1] el0t_64_sync+0x198/0x19c [ 101.079025][ C1] irq event stamp: 1717457 [ 101.079029][ C1] hardirqs last enabled at (1717456): [] kcov_remote_start+0x190/0x560 [ 101.079040][ C1] hardirqs last disabled at (1717457): [] el1_brk64+0x20/0x54 [ 101.079051][ C1] softirqs last enabled at (1717260): [] lock_sock_nested+0xb0/0x110 [ 101.079060][ C1] softirqs last disabled at (1717261): [] __do_softirq+0x14/0x20 [ 101.079069][ C1] ---[ end trace 0000000000000000 ]--- [ 101.079696][ T13] ------------[ cut here ]------------ [ 101.079700][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 101.079716][ T13] Modules linked in: [ 101.079722][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 101.079732][ T13] Tainted: [W]=WARN [ 101.079735][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.079740][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 101.079751][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.079759][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.079768][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.079776][ T13] sp : ffff80008ed16ed0 [ 101.079779][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f4895890 [ 101.079791][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.079801][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 101.079812][ T13] x20: ffff000121810000 x19: ffff0000f4895800 x18: 1fffe00035bb1028 [ 101.079823][ T13] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 101.079838][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.079849][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 101.079859][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.079869][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.079879][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 101.079889][ T13] Call trace: [ 101.079892][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.079903][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.079913][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.079924][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.079934][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 101.079944][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 101.079952][ T13] ieee80211_iface_work+0x600/0xd3c [ 101.079960][ T13] cfg80211_wiphy_work+0x278/0x588 [ 101.079970][ T13] process_scheduled_works+0x91c/0x1250 [ 101.079980][ T13] worker_thread+0x798/0xbd0 [ 101.079988][ T13] kthread+0x304/0x3d4 [ 101.079997][ T13] ret_from_fork+0x10/0x20 [ 101.080004][ T13] irq event stamp: 2806333 [ 101.080007][ T13] hardirqs last enabled at (2806331): [] kcov_remote_start+0x190/0x560 [ 101.080016][ T13] hardirqs last disabled at (2806333): [] el1_brk64+0x20/0x54 [ 101.080026][ T13] softirqs last enabled at (2806318): [] ieee80211_ibss_work+0x2d0/0xd9c [ 101.080034][ T13] softirqs last disabled at (2806332): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 101.080046][ T13] ---[ end trace 0000000000000000 ]--- [ 101.180806][ C1] ------------[ cut here ]------------ [ 101.180815][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 101.180854][ C1] Modules linked in: [ 101.180867][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 101.180880][ C1] Tainted: [W]=WARN [ 101.180884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.180890][ C1] Workqueue: events jump_label_update_timeout [ 101.180906][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.180915][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.180925][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.180935][ C1] sp : ffff80008ebe7150 [ 101.180939][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f4894090 [ 101.180952][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.180964][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 101.180976][ C1] x20: ffff000121810000 x19: ffff0000f4894000 x18: 1fffe00035bb1028 [ 101.180988][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 101.180999][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.181010][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 101.181022][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.181033][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.181044][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 101.181056][ C1] Call trace: [ 101.181059][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.181071][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.181083][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.181094][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.181106][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 101.181117][ C1] ieee80211_scan_rx+0x450/0x928 [ 101.181127][ C1] ieee80211_rx_list+0x229c/0x3000 [ 101.181136][ C1] ieee80211_rx_napi+0x18c/0x370 [ 101.181144][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 101.181157][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 101.181165][ C1] tasklet_action_common+0x1dc/0x278 [ 101.181175][ C1] tasklet_action+0x68/0x8c [ 101.181183][ C1] handle_softirqs+0x2ec/0xd98 [ 101.181192][ C1] __do_softirq+0x14/0x20 [ 101.181200][ C1] ____do_softirq+0x14/0x20 [ 101.181209][ C1] call_on_irq_stack+0x30/0x48 [ 101.181217][ C1] do_softirq_own_stack+0x20/0x2c [ 101.181225][ C1] __irq_exit_rcu+0x1ac/0x428 [ 101.181233][ C1] irq_exit_rcu+0x14/0x84 [ 101.181241][ C1] el1_interrupt+0x40/0x60 [ 101.181252][ C1] el1h_64_irq_handler+0x18/0x24 [ 101.181262][ C1] el1h_64_irq+0x6c/0x70 [ 101.181270][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 101.181282][ C1] kick_all_cpus_sync+0x34/0x40 [ 101.181293][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 101.181302][ C1] __jump_label_update+0x31c/0x344 [ 101.181310][ C1] jump_label_update+0x428/0x4b8 [ 101.181322][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 101.181330][ C1] jump_label_update_timeout+0x28/0x3c [ 101.181342][ C1] process_scheduled_works+0x91c/0x1250 [ 101.181352][ C1] worker_thread+0x798/0xbd0 [ 101.181362][ C1] kthread+0x304/0x3d4 [ 101.181370][ C1] ret_from_fork+0x10/0x20 [ 101.181378][ C1] irq event stamp: 3160355 [ 101.181382][ C1] hardirqs last enabled at (3160354): [] kcov_remote_start+0x190/0x560 [ 101.181393][ C1] hardirqs last disabled at (3160355): [] el1_brk64+0x20/0x54 [ 101.181404][ C1] softirqs last enabled at (3159886): [] handle_softirqs+0xc28/0xd98 [ 101.181413][ C1] softirqs last disabled at (3159891): [] __do_softirq+0x14/0x20 [ 101.181422][ C1] ---[ end trace 0000000000000000 ]--- [ 101.190747][ T3847] ------------[ cut here ]------------ [ 101.190754][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 101.190770][ T3847] Modules linked in: [ 101.190777][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 101.190786][ T3847] Tainted: [W]=WARN [ 101.190789][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.190794][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 101.190805][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.190813][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.190822][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.190835][ T3847] sp : ffff80009a056ed0 [ 101.190838][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000f4894490 [ 101.190850][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.190862][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 101.190874][ T3847] x20: ffff000121810000 x19: ffff0000f4894400 x18: 00000000896346d8 [ 101.190884][ T3847] x17: 000000005b49afd4 x16: dfff800000000000 x15: 0000000000000000 [ 101.190895][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.190904][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 101.190915][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.190925][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.190934][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 101.190944][ T3847] Call trace: [ 101.190947][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.190958][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.190968][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.190979][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.190989][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 101.190999][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 101.191007][ T3847] ieee80211_iface_work+0x600/0xd3c [ 101.191015][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 101.191025][ T3847] process_scheduled_works+0x91c/0x1250 [ 101.191035][ T3847] worker_thread+0x798/0xbd0 [ 101.191043][ T3847] kthread+0x304/0x3d4 [ 101.191051][ T3847] ret_from_fork+0x10/0x20 [ 101.191059][ T3847] irq event stamp: 1465541 [ 101.191062][ T3847] hardirqs last enabled at (1465539): [] kcov_remote_start+0x190/0x560 [ 101.191072][ T3847] hardirqs last disabled at (1465541): [] el1_brk64+0x20/0x54 [ 101.191081][ T3847] softirqs last enabled at (1465526): [] ieee80211_ibss_work+0x2d0/0xd9c [ 101.191090][ T3847] softirqs last disabled at (1465540): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 101.191101][ T3847] ---[ end trace 0000000000000000 ]--- [ 101.283231][ C1] ------------[ cut here ]------------ [ 101.283240][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 101.283263][ C1] Modules linked in: [ 101.283273][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 101.283285][ C1] Tainted: [W]=WARN [ 101.283288][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.283294][ C1] Workqueue: events jump_label_update_timeout [ 101.283308][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.283317][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.283327][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.283336][ C1] sp : ffff80008ebe7150 [ 101.283339][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f4897c90 [ 101.283352][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.283364][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 101.283376][ C1] x20: ffff000121810000 x19: ffff0000f4897c00 x18: 1fffe00035bb1028 [ 101.283388][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 101.283399][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.283410][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 101.283422][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.283433][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.283444][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 101.283455][ C1] Call trace: [ 101.283458][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.283471][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.283482][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.283494][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.283505][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 101.283516][ C1] ieee80211_scan_rx+0x450/0x928 [ 101.283526][ C1] ieee80211_rx_list+0x229c/0x3000 [ 101.283535][ C1] ieee80211_rx_napi+0x18c/0x370 [ 101.283544][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 101.283556][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 101.283565][ C1] tasklet_action_common+0x1dc/0x278 [ 101.283575][ C1] tasklet_action+0x68/0x8c [ 101.283583][ C1] handle_softirqs+0x2ec/0xd98 [ 101.283591][ C1] __do_softirq+0x14/0x20 [ 101.283600][ C1] ____do_softirq+0x14/0x20 [ 101.283608][ C1] call_on_irq_stack+0x30/0x48 [ 101.283616][ C1] do_softirq_own_stack+0x20/0x2c [ 101.283624][ C1] __irq_exit_rcu+0x1ac/0x428 [ 101.283633][ C1] irq_exit_rcu+0x14/0x84 [ 101.283641][ C1] el1_interrupt+0x40/0x60 [ 101.283652][ C1] el1h_64_irq_handler+0x18/0x24 [ 101.283661][ C1] el1h_64_irq+0x6c/0x70 [ 101.283669][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 101.283682][ C1] kick_all_cpus_sync+0x34/0x40 [ 101.283693][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 101.283702][ C1] __jump_label_update+0x31c/0x344 [ 101.283710][ C1] jump_label_update+0x428/0x4b8 [ 101.283721][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 101.283730][ C1] jump_label_update_timeout+0x28/0x3c [ 101.283741][ C1] process_scheduled_works+0x91c/0x1250 [ 101.283751][ C1] worker_thread+0x798/0xbd0 [ 101.283761][ C1] kthread+0x304/0x3d4 [ 101.283769][ C1] ret_from_fork+0x10/0x20 [ 101.283777][ C1] irq event stamp: 3161535 [ 101.283781][ C1] hardirqs last enabled at (3161534): [] kcov_remote_start+0x190/0x560 [ 101.283792][ C1] hardirqs last disabled at (3161535): [] el1_brk64+0x20/0x54 [ 101.283802][ C1] softirqs last enabled at (3161042): [] handle_softirqs+0xc28/0xd98 [ 101.283812][ C1] softirqs last disabled at (3161069): [] __do_softirq+0x14/0x20 [ 101.283820][ C1] ---[ end trace 0000000000000000 ]--- [ 101.285474][ T13] ------------[ cut here ]------------ [ 101.285478][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 101.285493][ T13] Modules linked in: [ 101.285498][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 101.285508][ T13] Tainted: [W]=WARN [ 101.285511][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.285516][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 101.285527][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.285535][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.285544][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.285552][ T13] sp : ffff80008ed16ed0 [ 101.285555][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f4897890 [ 101.285567][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.285577][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 101.285588][ T13] x20: ffff000121810000 x19: ffff0000f4897800 x18: 1fffe00035bb1028 [ 101.285599][ T13] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 101.285609][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.285619][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 101.285629][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.285640][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.285650][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 101.285660][ T13] Call trace: [ 101.285662][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.285673][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.285684][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.285695][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.285705][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 101.285715][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 101.285723][ T13] ieee80211_iface_work+0x600/0xd3c [ 101.285731][ T13] cfg80211_wiphy_work+0x278/0x588 [ 101.285742][ T13] process_scheduled_works+0x91c/0x1250 [ 101.285751][ T13] worker_thread+0x798/0xbd0 [ 101.285759][ T13] kthread+0x304/0x3d4 [ 101.285767][ T13] ret_from_fork+0x10/0x20 [ 101.285774][ T13] irq event stamp: 2816353 [ 101.285777][ T13] hardirqs last enabled at (2816351): [] kcov_remote_start+0x190/0x560 [ 101.285787][ T13] hardirqs last disabled at (2816353): [] el1_brk64+0x20/0x54 [ 101.285797][ T13] softirqs last enabled at (2816338): [] ieee80211_ibss_work+0x2d0/0xd9c [ 101.285805][ T13] softirqs last disabled at (2816352): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 101.285817][ T13] ---[ end trace 0000000000000000 ]--- [ 101.385671][ C1] ------------[ cut here ]------------ [ 101.385680][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 101.385705][ C1] Modules linked in: [ 101.385715][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 101.385727][ C1] Tainted: [W]=WARN [ 101.385730][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.385736][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.385745][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.385755][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.385764][ C1] sp : ffff80008edc6ef0 [ 101.385768][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0001230f6890 [ 101.385781][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.385793][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 101.385805][ C1] x20: ffff000121810000 x19: ffff0001230f6800 x18: 1fffe00035bb1028 [ 101.385817][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 101.385833][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.385845][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 101.385857][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.385870][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.385882][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 101.385893][ C1] Call trace: [ 101.385896][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.385909][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.385921][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.385933][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.385944][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 101.385955][ C1] ieee80211_scan_rx+0x450/0x928 [ 101.385965][ C1] ieee80211_rx_list+0x229c/0x3000 [ 101.385974][ C1] ieee80211_rx_napi+0x18c/0x370 [ 101.385983][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 101.385996][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 101.386004][ C1] tasklet_action_common+0x1dc/0x278 [ 101.386014][ C1] tasklet_action+0x68/0x8c [ 101.386023][ C1] handle_softirqs+0x2ec/0xd98 [ 101.386031][ C1] run_ksoftirqd+0x70/0xbc [ 101.386040][ C1] smpboot_thread_fn+0x4e4/0x97c [ 101.386048][ C1] kthread+0x304/0x3d4 [ 101.386057][ C1] ret_from_fork+0x10/0x20 [ 101.386066][ C1] irq event stamp: 24353717 [ 101.386070][ C1] hardirqs last enabled at (24353716): [] kcov_remote_start+0x190/0x560 [ 101.386081][ C1] hardirqs last disabled at (24353717): [] el1_brk64+0x20/0x54 [ 101.386093][ C1] softirqs last enabled at (24353508): [] handle_softirqs+0xc28/0xd98 [ 101.386103][ C1] softirqs last disabled at (24353513): [] run_ksoftirqd+0x70/0xbc [ 101.386112][ C1] ---[ end trace 0000000000000000 ]--- [ 101.386635][ T40] ------------[ cut here ]------------ [ 101.386639][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 101.386654][ T40] Modules linked in: [ 101.386659][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 101.386669][ T40] Tainted: [W]=WARN [ 101.386672][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.386677][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 101.386689][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.386696][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.386706][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.386714][ T40] sp : ffff80008efe6ed0 [ 101.386718][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0001230f6c90 [ 101.386729][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.386740][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 101.386751][ T40] x20: ffff000121810000 x19: ffff0001230f6c00 x18: 1fffe00035bb1028 [ 101.386762][ T40] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 101.386772][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.386783][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 101.386793][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.386803][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.386814][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 101.386824][ T40] Call trace: [ 101.386830][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.386841][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.386852][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.386862][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.386873][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 101.386883][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 101.386891][ T40] ieee80211_iface_work+0x600/0xd3c [ 101.386899][ T40] cfg80211_wiphy_work+0x278/0x588 [ 101.386910][ T40] process_scheduled_works+0x91c/0x1250 [ 101.386919][ T40] worker_thread+0x798/0xbd0 [ 101.386928][ T40] kthread+0x304/0x3d4 [ 101.386935][ T40] ret_from_fork+0x10/0x20 [ 101.386943][ T40] irq event stamp: 231937 [ 101.386946][ T40] hardirqs last enabled at (231935): [] kcov_remote_start+0x190/0x560 [ 101.386955][ T40] hardirqs last disabled at (231937): [] el1_brk64+0x20/0x54 [ 101.386965][ T40] softirqs last enabled at (231924): [] ieee80211_ibss_work+0x2d0/0xd9c [ 101.386974][ T40] softirqs last disabled at (231936): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 101.386985][ T40] ---[ end trace 0000000000000000 ]--- [ 101.488024][ C1] ------------[ cut here ]------------ [ 101.488034][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 101.488058][ C1] Modules linked in: [ 101.488068][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 101.488080][ C1] Tainted: [W]=WARN [ 101.488084][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.488089][ C1] Workqueue: events jump_label_update_timeout [ 101.488104][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.488113][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.488123][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.488133][ C1] sp : ffff80008ebe7150 [ 101.488136][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fbb10890 [ 101.488149][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.488160][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 101.488172][ C1] x20: ffff000121810000 x19: ffff0000fbb10800 x18: 1fffe00035bb1028 [ 101.488185][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 101.488196][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.488207][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 101.488218][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.488230][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.488241][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 101.488252][ C1] Call trace: [ 101.488255][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.488269][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.488281][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.488293][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.488304][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 101.488315][ C1] ieee80211_scan_rx+0x450/0x928 [ 101.488325][ C1] ieee80211_rx_list+0x229c/0x3000 [ 101.488334][ C1] ieee80211_rx_napi+0x18c/0x370 [ 101.488343][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 101.488356][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 101.488364][ C1] tasklet_action_common+0x1dc/0x278 [ 101.488374][ C1] tasklet_action+0x68/0x8c [ 101.488382][ C1] handle_softirqs+0x2ec/0xd98 [ 101.488391][ C1] __do_softirq+0x14/0x20 [ 101.488400][ C1] ____do_softirq+0x14/0x20 [ 101.488409][ C1] call_on_irq_stack+0x30/0x48 [ 101.488417][ C1] do_softirq_own_stack+0x20/0x2c [ 101.488425][ C1] __irq_exit_rcu+0x1ac/0x428 [ 101.488433][ C1] irq_exit_rcu+0x14/0x84 [ 101.488441][ C1] el1_interrupt+0x40/0x60 [ 101.488452][ C1] el1h_64_irq_handler+0x18/0x24 [ 101.488462][ C1] el1h_64_irq+0x6c/0x70 [ 101.488470][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 101.488482][ C1] kick_all_cpus_sync+0x34/0x40 [ 101.488493][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 101.488503][ C1] __jump_label_update+0x31c/0x344 [ 101.488511][ C1] jump_label_update+0x428/0x4b8 [ 101.488523][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 101.488531][ C1] jump_label_update_timeout+0x28/0x3c [ 101.488543][ C1] process_scheduled_works+0x91c/0x1250 [ 101.488553][ C1] worker_thread+0x798/0xbd0 [ 101.488563][ C1] kthread+0x304/0x3d4 [ 101.488571][ C1] ret_from_fork+0x10/0x20 [ 101.488579][ C1] irq event stamp: 3163775 [ 101.488583][ C1] hardirqs last enabled at (3163774): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 101.488595][ C1] hardirqs last disabled at (3163775): [] el1_brk64+0x20/0x54 [ 101.488606][ C1] softirqs last enabled at (3163254): [] handle_softirqs+0xc28/0xd98 [ 101.488616][ C1] softirqs last disabled at (3163311): [] __do_softirq+0x14/0x20 [ 101.488625][ C1] ---[ end trace 0000000000000000 ]--- [ 101.489263][ T40] ------------[ cut here ]------------ [ 101.489268][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 101.489283][ T40] Modules linked in: [ 101.489289][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 101.489299][ T40] Tainted: [W]=WARN [ 101.489302][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.489306][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 101.489318][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.489326][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.489335][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.489343][ T40] sp : ffff80008efe6ed0 [ 101.489346][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0000fbb13c90 [ 101.489358][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.489368][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 101.489379][ T40] x20: ffff000121810000 x19: ffff0000fbb13c00 x18: 1fffe00035bb1028 [ 101.489390][ T40] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 101.489400][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.489410][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 101.489420][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.489430][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.489440][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 101.489450][ T40] Call trace: [ 101.489453][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.489463][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.489474][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.489484][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.489495][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 101.489504][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 101.489513][ T40] ieee80211_iface_work+0x600/0xd3c [ 101.489521][ T40] cfg80211_wiphy_work+0x278/0x588 [ 101.489531][ T40] process_scheduled_works+0x91c/0x1250 [ 101.489540][ T40] worker_thread+0x798/0xbd0 [ 101.489549][ T40] kthread+0x304/0x3d4 [ 101.489557][ T40] ret_from_fork+0x10/0x20 [ 101.489564][ T40] irq event stamp: 232335 [ 101.489567][ T40] hardirqs last enabled at (232333): [] kcov_remote_start+0x190/0x560 [ 101.489577][ T40] hardirqs last disabled at (232335): [] el1_brk64+0x20/0x54 [ 101.489587][ T40] softirqs last enabled at (232322): [] ieee80211_ibss_work+0x2d0/0xd9c [ 101.489595][ T40] softirqs last disabled at (232334): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 101.489607][ T40] ---[ end trace 0000000000000000 ]--- [ 101.590440][ C1] ------------[ cut here ]------------ [ 101.590450][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 101.590475][ C1] Modules linked in: [ 101.590486][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 101.590497][ C1] Tainted: [W]=WARN [ 101.590501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.590506][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.590515][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.590525][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.590535][ C1] sp : ffff80008ebe7150 [ 101.590538][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fbb13090 [ 101.590551][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.590563][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 101.590575][ C1] x20: ffff000121810000 x19: ffff0000fbb13000 x18: 0000000000000000 [ 101.590587][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 101.590598][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.590609][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 101.590621][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.590632][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.590643][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 101.590655][ C1] Call trace: [ 101.590658][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.590671][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.590683][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.590694][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.590706][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 101.590716][ C1] ieee80211_scan_rx+0x450/0x928 [ 101.590726][ C1] ieee80211_rx_list+0x229c/0x3000 [ 101.590735][ C1] ieee80211_rx_napi+0x18c/0x370 [ 101.590744][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 101.590757][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 101.590765][ C1] tasklet_action_common+0x1dc/0x278 [ 101.590776][ C1] tasklet_action+0x68/0x8c [ 101.590784][ C1] handle_softirqs+0x2ec/0xd98 [ 101.590792][ C1] __do_softirq+0x14/0x20 [ 101.590801][ C1] ____do_softirq+0x14/0x20 [ 101.590810][ C1] call_on_irq_stack+0x30/0x48 [ 101.590818][ C1] do_softirq_own_stack+0x20/0x2c [ 101.590832][ C1] do_softirq+0x90/0xf8 [ 101.590840][ C1] __local_bh_enable_ip+0x240/0x35c [ 101.590849][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 101.590860][ C1] lock_sock_nested+0xb0/0x110 [ 101.590871][ C1] tcp_recvmsg+0x174/0x4d8 [ 101.590880][ C1] inet_recvmsg+0xb8/0xd8 [ 101.590889][ C1] sock_recvmsg+0xd4/0x170 [ 101.590899][ C1] sock_read_iter+0x1d4/0x288 [ 101.590909][ C1] vfs_read+0x498/0x8c8 [ 101.590921][ C1] ksys_read+0x12c/0x228 [ 101.590931][ C1] __arm64_sys_read+0x84/0x98 [ 101.590943][ C1] invoke_syscall+0x98/0x244 [ 101.590954][ C1] el0_svc_common+0xec/0x23c [ 101.590964][ C1] do_el0_svc+0x4c/0x5c [ 101.590975][ C1] el0_svc+0x64/0x260 [ 101.590984][ C1] el0t_64_sync_handler+0x44/0x104 [ 101.590994][ C1] el0t_64_sync+0x198/0x19c [ 101.591002][ C1] irq event stamp: 1730567 [ 101.591006][ C1] hardirqs last enabled at (1730566): [] kcov_remote_start+0x190/0x560 [ 101.591018][ C1] hardirqs last disabled at (1730567): [] el1_brk64+0x20/0x54 [ 101.591028][ C1] softirqs last enabled at (1730374): [] lock_sock_nested+0xb0/0x110 [ 101.591038][ C1] softirqs last disabled at (1730375): [] __do_softirq+0x14/0x20 [ 101.591047][ C1] ---[ end trace 0000000000000000 ]--- [ 101.591584][ T40] ------------[ cut here ]------------ [ 101.591588][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 101.591603][ T40] Modules linked in: [ 101.591609][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 101.591618][ T40] Tainted: [W]=WARN [ 101.591621][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.591626][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 101.591637][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.591645][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.591654][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.591663][ T40] sp : ffff80008efe6ed0 [ 101.591666][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0000fbb12890 [ 101.591677][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.591688][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 101.591698][ T40] x20: ffff000121810000 x19: ffff0000fbb12800 x18: 1fffe00035bb1028 [ 101.591709][ T40] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 101.591719][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.591730][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 101.591740][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.591750][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.591760][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 101.591771][ T40] Call trace: [ 101.591773][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.591784][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.591795][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.591805][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.591816][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 101.591830][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 101.591839][ T40] ieee80211_iface_work+0x600/0xd3c [ 101.591848][ T40] cfg80211_wiphy_work+0x278/0x588 [ 101.591860][ T40] process_scheduled_works+0x91c/0x1250 [ 101.591869][ T40] worker_thread+0x798/0xbd0 [ 101.591878][ T40] kthread+0x304/0x3d4 [ 101.591886][ T40] ret_from_fork+0x10/0x20 [ 101.591893][ T40] irq event stamp: 232729 [ 101.591896][ T40] hardirqs last enabled at (232727): [] kcov_remote_start+0x190/0x560 [ 101.591906][ T40] hardirqs last disabled at (232729): [] el1_brk64+0x20/0x54 [ 101.591916][ T40] softirqs last enabled at (232716): [] ieee80211_ibss_work+0x2d0/0xd9c [ 101.591924][ T40] softirqs last disabled at (232728): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 101.591936][ T40] ---[ end trace 0000000000000000 ]--- [ 101.692861][ C1] ------------[ cut here ]------------ [ 101.692871][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 101.692899][ C1] Modules linked in: [ 101.692910][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 101.692922][ C1] Tainted: [W]=WARN [ 101.692925][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.692930][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.692939][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.692949][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.692958][ C1] sp : ffff80008ebe7150 [ 101.692962][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000fbb13490 [ 101.692975][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.692987][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 101.692999][ C1] x20: ffff000121810000 x19: ffff0000fbb13400 x18: 0000000000000000 [ 101.693010][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 101.693022][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.693033][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 101.693044][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.693055][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.693066][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 101.693077][ C1] Call trace: [ 101.693081][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.693093][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.693105][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.693116][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.693128][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 101.693139][ C1] ieee80211_scan_rx+0x450/0x928 [ 101.693148][ C1] ieee80211_rx_list+0x229c/0x3000 [ 101.693157][ C1] ieee80211_rx_napi+0x18c/0x370 [ 101.693166][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 101.693179][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 101.693187][ C1] tasklet_action_common+0x1dc/0x278 [ 101.693198][ C1] tasklet_action+0x68/0x8c [ 101.693206][ C1] handle_softirqs+0x2ec/0xd98 [ 101.693214][ C1] __do_softirq+0x14/0x20 [ 101.693223][ C1] ____do_softirq+0x14/0x20 [ 101.693232][ C1] call_on_irq_stack+0x30/0x48 [ 101.693240][ C1] do_softirq_own_stack+0x20/0x2c [ 101.693248][ C1] do_softirq+0x90/0xf8 [ 101.693256][ C1] __local_bh_enable_ip+0x240/0x35c [ 101.693264][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 101.693276][ C1] lock_sock_nested+0xb0/0x110 [ 101.693286][ C1] tcp_recvmsg+0x174/0x4d8 [ 101.693295][ C1] inet_recvmsg+0xb8/0xd8 [ 101.693305][ C1] sock_recvmsg+0xd4/0x170 [ 101.693314][ C1] sock_read_iter+0x1d4/0x288 [ 101.693324][ C1] vfs_read+0x498/0x8c8 [ 101.693336][ C1] ksys_read+0x12c/0x228 [ 101.693347][ C1] __arm64_sys_read+0x84/0x98 [ 101.693358][ C1] invoke_syscall+0x98/0x244 [ 101.693369][ C1] el0_svc_common+0xec/0x23c [ 101.693379][ C1] do_el0_svc+0x4c/0x5c [ 101.693390][ C1] el0_svc+0x64/0x260 [ 101.693399][ C1] el0t_64_sync_handler+0x44/0x104 [ 101.693409][ C1] el0t_64_sync+0x198/0x19c [ 101.693417][ C1] irq event stamp: 1733413 [ 101.693421][ C1] hardirqs last enabled at (1733412): [] kcov_remote_start+0x190/0x560 [ 101.693433][ C1] hardirqs last disabled at (1733413): [] el1_brk64+0x20/0x54 [ 101.693443][ C1] softirqs last enabled at (1733220): [] lock_sock_nested+0xb0/0x110 [ 101.693453][ C1] softirqs last disabled at (1733221): [] __do_softirq+0x14/0x20 [ 101.693461][ C1] ---[ end trace 0000000000000000 ]--- [ 101.694022][ T3847] ------------[ cut here ]------------ [ 101.694027][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 101.694042][ T3847] Modules linked in: [ 101.694048][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 101.694058][ T3847] Tainted: [W]=WARN [ 101.694061][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.694066][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 101.694078][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.694085][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.694094][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.694103][ T3847] sp : ffff80009a056ed0 [ 101.694106][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000fbb12090 [ 101.694118][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.694128][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 101.694139][ T3847] x20: ffff000121810000 x19: ffff0000fbb12000 x18: 1fffe00035bb1028 [ 101.694150][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 101.694160][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.694170][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 101.694180][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.694190][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.694200][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 101.694210][ T3847] Call trace: [ 101.694213][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.694224][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.694235][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.694245][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.694256][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 101.694266][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 101.694274][ T3847] ieee80211_iface_work+0x600/0xd3c [ 101.694282][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 101.694293][ T3847] process_scheduled_works+0x91c/0x1250 [ 101.694303][ T3847] worker_thread+0x798/0xbd0 [ 101.694311][ T3847] kthread+0x304/0x3d4 [ 101.694319][ T3847] ret_from_fork+0x10/0x20 [ 101.694326][ T3847] irq event stamp: 1487679 [ 101.694330][ T3847] hardirqs last enabled at (1487677): [] kcov_remote_start+0x190/0x560 [ 101.694339][ T3847] hardirqs last disabled at (1487679): [] el1_brk64+0x20/0x54 [ 101.694349][ T3847] softirqs last enabled at (1487666): [] ieee80211_ibss_work+0x2d0/0xd9c [ 101.694357][ T3847] softirqs last disabled at (1487678): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 101.694369][ T3847] ---[ end trace 0000000000000000 ]--- [ 101.795243][ C1] ------------[ cut here ]------------ [ 101.795253][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 101.795277][ C1] Modules linked in: [ 101.795286][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 101.795298][ C1] Tainted: [W]=WARN [ 101.795301][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.795306][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.795315][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.795325][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.795334][ C1] sp : ffff80008edc6ef0 [ 101.795338][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000f2dd7090 [ 101.795351][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.795363][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 101.795375][ C1] x20: ffff000121810000 x19: ffff0000f2dd7000 x18: 1fffe00035bb1028 [ 101.795386][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 101.795398][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.795409][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 101.795420][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.795431][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.795442][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 101.795454][ C1] Call trace: [ 101.795457][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.795470][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.795482][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.795493][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.795505][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 101.795515][ C1] ieee80211_scan_rx+0x450/0x928 [ 101.795525][ C1] ieee80211_rx_list+0x229c/0x3000 [ 101.795534][ C1] ieee80211_rx_napi+0x18c/0x370 [ 101.795543][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 101.795556][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 101.795564][ C1] tasklet_action_common+0x1dc/0x278 [ 101.795574][ C1] tasklet_action+0x68/0x8c [ 101.795583][ C1] handle_softirqs+0x2ec/0xd98 [ 101.795591][ C1] run_ksoftirqd+0x70/0xbc [ 101.795600][ C1] smpboot_thread_fn+0x4e4/0x97c [ 101.795609][ C1] kthread+0x304/0x3d4 [ 101.795617][ C1] ret_from_fork+0x10/0x20 [ 101.795627][ C1] irq event stamp: 24353993 [ 101.795630][ C1] hardirqs last enabled at (24353992): [] kcov_remote_start+0x190/0x560 [ 101.795642][ C1] hardirqs last disabled at (24353993): [] el1_brk64+0x20/0x54 [ 101.795654][ C1] softirqs last enabled at (24353796): [] handle_softirqs+0xc28/0xd98 [ 101.795663][ C1] softirqs last disabled at (24353803): [] run_ksoftirqd+0x70/0xbc [ 101.795673][ C1] ---[ end trace 0000000000000000 ]--- [ 101.796219][ T3847] ------------[ cut here ]------------ [ 101.796223][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 101.796239][ T3847] Modules linked in: [ 101.796245][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 101.796255][ T3847] Tainted: [W]=WARN [ 101.796258][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.796262][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 101.796274][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.796282][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.796291][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.796300][ T3847] sp : ffff80009a056ed0 [ 101.796303][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000f2dd6c90 [ 101.796315][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.796325][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 101.796336][ T3847] x20: ffff000121810000 x19: ffff0000f2dd6c00 x18: 1fffe00035bb1028 [ 101.796347][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 101.796358][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.796367][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 101.796378][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.796388][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.796398][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 101.796408][ T3847] Call trace: [ 101.796411][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.796422][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.796432][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.796443][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.796453][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 101.796463][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 101.796472][ T3847] ieee80211_iface_work+0x600/0xd3c [ 101.796480][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 101.796490][ T3847] process_scheduled_works+0x91c/0x1250 [ 101.796499][ T3847] worker_thread+0x798/0xbd0 [ 101.796508][ T3847] kthread+0x304/0x3d4 [ 101.796516][ T3847] ret_from_fork+0x10/0x20 [ 101.796523][ T3847] irq event stamp: 1490237 [ 101.796526][ T3847] hardirqs last enabled at (1490235): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 101.796538][ T3847] hardirqs last disabled at (1490237): [] el1_brk64+0x20/0x54 [ 101.796548][ T3847] softirqs last enabled at (1490220): [] ieee80211_ibss_work+0x2d0/0xd9c [ 101.796556][ T3847] softirqs last disabled at (1490236): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 101.796567][ T3847] ---[ end trace 0000000000000000 ]--- [ 101.897641][ C1] ------------[ cut here ]------------ [ 101.897650][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 101.897674][ C1] Modules linked in: [ 101.897684][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 101.897695][ C1] Tainted: [W]=WARN [ 101.897699][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.897704][ C1] Workqueue: events jump_label_update_timeout [ 101.897719][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.897727][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.897737][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.897747][ C1] sp : ffff80008ebe7150 [ 101.897750][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f2d1d090 [ 101.897763][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.897775][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 101.897787][ C1] x20: ffff000121810000 x19: ffff0000f2d1d000 x18: 1fffe00035bb1028 [ 101.897799][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 101.897810][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.897821][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 101.897836][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.897848][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.897859][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 101.897871][ C1] Call trace: [ 101.897874][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.897887][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.897898][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.897910][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.897921][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 101.897932][ C1] ieee80211_scan_rx+0x450/0x928 [ 101.897942][ C1] ieee80211_rx_list+0x229c/0x3000 [ 101.897951][ C1] ieee80211_rx_napi+0x18c/0x370 [ 101.897960][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 101.897973][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 101.897981][ C1] tasklet_action_common+0x1dc/0x278 [ 101.897991][ C1] tasklet_action+0x68/0x8c [ 101.897999][ C1] handle_softirqs+0x2ec/0xd98 [ 101.898008][ C1] __do_softirq+0x14/0x20 [ 101.898016][ C1] ____do_softirq+0x14/0x20 [ 101.898025][ C1] call_on_irq_stack+0x30/0x48 [ 101.898033][ C1] do_softirq_own_stack+0x20/0x2c [ 101.898041][ C1] __irq_exit_rcu+0x1ac/0x428 [ 101.898049][ C1] irq_exit_rcu+0x14/0x84 [ 101.898057][ C1] el1_interrupt+0x40/0x60 [ 101.898068][ C1] el1h_64_irq_handler+0x18/0x24 [ 101.898078][ C1] el1h_64_irq+0x6c/0x70 [ 101.898086][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 101.898099][ C1] kick_all_cpus_sync+0x34/0x40 [ 101.898110][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 101.898119][ C1] __jump_label_update+0x31c/0x344 [ 101.898128][ C1] jump_label_update+0x428/0x4b8 [ 101.898139][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 101.898147][ C1] jump_label_update_timeout+0x28/0x3c [ 101.898159][ C1] process_scheduled_works+0x91c/0x1250 [ 101.898169][ C1] worker_thread+0x798/0xbd0 [ 101.898179][ C1] kthread+0x304/0x3d4 [ 101.898187][ C1] ret_from_fork+0x10/0x20 [ 101.898195][ C1] irq event stamp: 3168387 [ 101.898199][ C1] hardirqs last enabled at (3168386): [] kcov_remote_start+0x190/0x560 [ 101.898210][ C1] hardirqs last disabled at (3168387): [] el1_brk64+0x20/0x54 [ 101.898221][ C1] softirqs last enabled at (3167872): [] handle_softirqs+0xc28/0xd98 [ 101.898231][ C1] softirqs last disabled at (3167921): [] __do_softirq+0x14/0x20 [ 101.898239][ C1] ---[ end trace 0000000000000000 ]--- [ 101.898760][ T3847] ------------[ cut here ]------------ [ 101.898763][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 101.898777][ T3847] Modules linked in: [ 101.898783][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 101.898793][ T3847] Tainted: [W]=WARN [ 101.898796][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.898800][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 101.898811][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 101.898819][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 101.898833][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 101.898843][ T3847] sp : ffff80009a056ed0 [ 101.898847][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000f2d1c490 [ 101.898858][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 101.898869][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 101.898880][ T3847] x20: ffff000121810000 x19: ffff0000f2d1c400 x18: 1fffe00035bb1028 [ 101.898891][ T3847] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 101.898901][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 101.898911][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 101.898921][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 101.898931][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 101.898941][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 101.898951][ T3847] Call trace: [ 101.898954][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 101.898965][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 101.898975][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 101.898986][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 101.898996][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 101.899006][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 101.899014][ T3847] ieee80211_iface_work+0x600/0xd3c [ 101.899022][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 101.899033][ T3847] process_scheduled_works+0x91c/0x1250 [ 101.899042][ T3847] worker_thread+0x798/0xbd0 [ 101.899050][ T3847] kthread+0x304/0x3d4 [ 101.899058][ T3847] ret_from_fork+0x10/0x20 [ 101.899065][ T3847] irq event stamp: 1490613 [ 101.899068][ T3847] hardirqs last enabled at (1490611): [] kcov_remote_start+0x190/0x560 [ 101.899078][ T3847] hardirqs last disabled at (1490613): [] el1_brk64+0x20/0x54 [ 101.899088][ T3847] softirqs last enabled at (1490600): [] ieee80211_ibss_work+0x2d0/0xd9c [ 101.899096][ T3847] softirqs last disabled at (1490612): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 101.899108][ T3847] ---[ end trace 0000000000000000 ]--- [ 102.000036][ C1] ------------[ cut here ]------------ [ 102.000046][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 102.000071][ C1] Modules linked in: [ 102.000082][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 102.000094][ C1] Tainted: [W]=WARN [ 102.000097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.000103][ C1] Workqueue: events jump_label_update_timeout [ 102.000118][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.000127][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.000137][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.000146][ C1] sp : ffff80008ebe7150 [ 102.000150][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f2d1c890 [ 102.000163][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.000175][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 102.000187][ C1] x20: ffff000121810000 x19: ffff0000f2d1c800 x18: 1fffe00035bb1028 [ 102.000199][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.000211][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.000222][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 102.000233][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.000244][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.000255][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 102.000267][ C1] Call trace: [ 102.000270][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.000283][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.000294][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.000306][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.000318][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.000329][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.000339][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.000348][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.000357][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.000369][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.000378][ C1] tasklet_action_common+0x1dc/0x278 [ 102.000388][ C1] tasklet_action+0x68/0x8c [ 102.000396][ C1] handle_softirqs+0x2ec/0xd98 [ 102.000404][ C1] __do_softirq+0x14/0x20 [ 102.000413][ C1] ____do_softirq+0x14/0x20 [ 102.000422][ C1] call_on_irq_stack+0x30/0x48 [ 102.000430][ C1] do_softirq_own_stack+0x20/0x2c [ 102.000438][ C1] __irq_exit_rcu+0x1ac/0x428 [ 102.000447][ C1] irq_exit_rcu+0x14/0x84 [ 102.000455][ C1] el1_interrupt+0x40/0x60 [ 102.000466][ C1] el1h_64_irq_handler+0x18/0x24 [ 102.000476][ C1] el1h_64_irq+0x6c/0x70 [ 102.000483][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 102.000496][ C1] kick_all_cpus_sync+0x34/0x40 [ 102.000507][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 102.000516][ C1] __jump_label_update+0x31c/0x344 [ 102.000524][ C1] jump_label_update+0x428/0x4b8 [ 102.000536][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 102.000545][ C1] jump_label_update_timeout+0x28/0x3c [ 102.000556][ C1] process_scheduled_works+0x91c/0x1250 [ 102.000566][ C1] worker_thread+0x798/0xbd0 [ 102.000576][ C1] kthread+0x304/0x3d4 [ 102.000584][ C1] ret_from_fork+0x10/0x20 [ 102.000592][ C1] irq event stamp: 3169623 [ 102.000596][ C1] hardirqs last enabled at (3169622): [] kcov_remote_start+0x190/0x560 [ 102.000607][ C1] hardirqs last disabled at (3169623): [] el1_brk64+0x20/0x54 [ 102.000618][ C1] softirqs last enabled at (3169148): [] handle_softirqs+0xc28/0xd98 [ 102.000627][ C1] softirqs last disabled at (3169155): [] __do_softirq+0x14/0x20 [ 102.000636][ C1] ---[ end trace 0000000000000000 ]--- [ 102.001200][ T3847] ------------[ cut here ]------------ [ 102.001204][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 102.001223][ T3847] Modules linked in: [ 102.001231][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 102.001241][ T3847] Tainted: [W]=WARN [ 102.001244][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.001248][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 102.001260][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.001268][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.001277][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.001286][ T3847] sp : ffff80009a056ed0 [ 102.001289][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000f2ca8890 [ 102.001301][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.001311][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 102.001322][ T3847] x20: ffff000121810000 x19: ffff0000f2ca8800 x18: 1fffe00035bb1028 [ 102.001333][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 102.001343][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.001353][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.001363][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.001373][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.001383][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 102.001393][ T3847] Call trace: [ 102.001396][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.001407][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.001418][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.001428][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.001438][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 102.001448][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.001457][ T3847] ieee80211_iface_work+0x600/0xd3c [ 102.001465][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 102.001475][ T3847] process_scheduled_works+0x91c/0x1250 [ 102.001484][ T3847] worker_thread+0x798/0xbd0 [ 102.001493][ T3847] kthread+0x304/0x3d4 [ 102.001501][ T3847] ret_from_fork+0x10/0x20 [ 102.001508][ T3847] irq event stamp: 1490993 [ 102.001511][ T3847] hardirqs last enabled at (1490991): [] kcov_remote_start+0x190/0x560 [ 102.001520][ T3847] hardirqs last disabled at (1490993): [] el1_brk64+0x20/0x54 [ 102.001530][ T3847] softirqs last enabled at (1490980): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.001538][ T3847] softirqs last disabled at (1490992): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.001550][ T3847] ---[ end trace 0000000000000000 ]--- [ 102.102449][ C1] ------------[ cut here ]------------ [ 102.102459][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 102.102482][ C1] Modules linked in: [ 102.102492][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 102.102504][ C1] Tainted: [W]=WARN [ 102.102507][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.102512][ C1] Workqueue: events jump_label_update_timeout [ 102.102527][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.102536][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.102546][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.102555][ C1] sp : ffff80008ebe7150 [ 102.102558][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f2ca8490 [ 102.102571][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.102583][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 102.102595][ C1] x20: ffff000121810000 x19: ffff0000f2ca8400 x18: 1fffe00035bb1028 [ 102.102607][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.102618][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.102629][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 102.102640][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.102651][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.102662][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 102.102674][ C1] Call trace: [ 102.102677][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.102690][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.102702][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.102713][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.102725][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.102735][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.102745][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.102755][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.102763][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.102776][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.102784][ C1] tasklet_action_common+0x1dc/0x278 [ 102.102794][ C1] tasklet_action+0x68/0x8c [ 102.102803][ C1] handle_softirqs+0x2ec/0xd98 [ 102.102811][ C1] __do_softirq+0x14/0x20 [ 102.102820][ C1] ____do_softirq+0x14/0x20 [ 102.102833][ C1] call_on_irq_stack+0x30/0x48 [ 102.102841][ C1] do_softirq_own_stack+0x20/0x2c [ 102.102849][ C1] __irq_exit_rcu+0x1ac/0x428 [ 102.102858][ C1] irq_exit_rcu+0x14/0x84 [ 102.102866][ C1] el1_interrupt+0x40/0x60 [ 102.102876][ C1] el1h_64_irq_handler+0x18/0x24 [ 102.102886][ C1] el1h_64_irq+0x6c/0x70 [ 102.102894][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 102.102907][ C1] kick_all_cpus_sync+0x34/0x40 [ 102.102918][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 102.102927][ C1] __jump_label_update+0x31c/0x344 [ 102.102935][ C1] jump_label_update+0x428/0x4b8 [ 102.102947][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 102.102955][ C1] jump_label_update_timeout+0x28/0x3c [ 102.102967][ C1] process_scheduled_works+0x91c/0x1250 [ 102.102977][ C1] worker_thread+0x798/0xbd0 [ 102.102986][ C1] kthread+0x304/0x3d4 [ 102.102995][ C1] ret_from_fork+0x10/0x20 [ 102.103003][ C1] irq event stamp: 3170855 [ 102.103006][ C1] hardirqs last enabled at (3170854): [] kcov_remote_start+0x190/0x560 [ 102.103017][ C1] hardirqs last disabled at (3170855): [] el1_brk64+0x20/0x54 [ 102.103028][ C1] softirqs last enabled at (3170310): [] handle_softirqs+0xc28/0xd98 [ 102.103037][ C1] softirqs last disabled at (3170381): [] __do_softirq+0x14/0x20 [ 102.103046][ C1] ---[ end trace 0000000000000000 ]--- [ 102.103585][ T3847] ------------[ cut here ]------------ [ 102.103589][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 102.103604][ T3847] Modules linked in: [ 102.103610][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 102.103619][ T3847] Tainted: [W]=WARN [ 102.103622][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.103627][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 102.103638][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.103646][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.103655][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.103664][ T3847] sp : ffff80009a056ed0 [ 102.103667][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000f2ca8c90 [ 102.103678][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.103688][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 102.103699][ T3847] x20: ffff000121810000 x19: ffff0000f2ca8c00 x18: 1fffe00035bb1028 [ 102.103710][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 102.103720][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.103730][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.103740][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.103750][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.103760][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 102.103770][ T3847] Call trace: [ 102.103773][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.103784][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.103795][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.103805][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.103816][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 102.103830][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.103839][ T3847] ieee80211_iface_work+0x600/0xd3c [ 102.103847][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 102.103858][ T3847] process_scheduled_works+0x91c/0x1250 [ 102.103867][ T3847] worker_thread+0x798/0xbd0 [ 102.103876][ T3847] kthread+0x304/0x3d4 [ 102.103883][ T3847] ret_from_fork+0x10/0x20 [ 102.103891][ T3847] irq event stamp: 1491343 [ 102.103894][ T3847] hardirqs last enabled at (1491341): [] kcov_remote_start+0x190/0x560 [ 102.103903][ T3847] hardirqs last disabled at (1491343): [] el1_brk64+0x20/0x54 [ 102.103913][ T3847] softirqs last enabled at (1491330): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.103921][ T3847] softirqs last disabled at (1491342): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.103933][ T3847] ---[ end trace 0000000000000000 ]--- [ 102.204839][ C1] ------------[ cut here ]------------ [ 102.204849][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 102.204884][ C1] Modules linked in: [ 102.204894][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 102.204907][ C1] Tainted: [W]=WARN [ 102.204911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.204916][ C1] Workqueue: events jump_label_update_timeout [ 102.204931][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.204939][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.204950][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.204959][ C1] sp : ffff80008ebe7150 [ 102.204962][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f2ca9090 [ 102.204975][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.204987][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 102.204999][ C1] x20: ffff000121810000 x19: ffff0000f2ca9000 x18: 1fffe00035bb1028 [ 102.205010][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.205022][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.205033][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 102.205044][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.205055][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.205066][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 102.205077][ C1] Call trace: [ 102.205081][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.205093][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.205105][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.205117][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.205128][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.205139][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.205149][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.205158][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.205167][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.205179][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.205188][ C1] tasklet_action_common+0x1dc/0x278 [ 102.205198][ C1] tasklet_action+0x68/0x8c [ 102.205206][ C1] handle_softirqs+0x2ec/0xd98 [ 102.205214][ C1] __do_softirq+0x14/0x20 [ 102.205223][ C1] ____do_softirq+0x14/0x20 [ 102.205232][ C1] call_on_irq_stack+0x30/0x48 [ 102.205240][ C1] do_softirq_own_stack+0x20/0x2c [ 102.205248][ C1] __irq_exit_rcu+0x1ac/0x428 [ 102.205256][ C1] irq_exit_rcu+0x14/0x84 [ 102.205264][ C1] el1_interrupt+0x40/0x60 [ 102.205275][ C1] el1h_64_irq_handler+0x18/0x24 [ 102.205285][ C1] el1h_64_irq+0x6c/0x70 [ 102.205293][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 102.205305][ C1] kick_all_cpus_sync+0x34/0x40 [ 102.205316][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 102.205325][ C1] __jump_label_update+0x31c/0x344 [ 102.205333][ C1] jump_label_update+0x428/0x4b8 [ 102.205345][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 102.205353][ C1] jump_label_update_timeout+0x28/0x3c [ 102.205365][ C1] process_scheduled_works+0x91c/0x1250 [ 102.205375][ C1] worker_thread+0x798/0xbd0 [ 102.205384][ C1] kthread+0x304/0x3d4 [ 102.205393][ C1] ret_from_fork+0x10/0x20 [ 102.205401][ C1] irq event stamp: 3172095 [ 102.205404][ C1] hardirqs last enabled at (3172094): [] kcov_remote_start+0x190/0x560 [ 102.205415][ C1] hardirqs last disabled at (3172095): [] el1_brk64+0x20/0x54 [ 102.205426][ C1] softirqs last enabled at (3171590): [] handle_softirqs+0xc28/0xd98 [ 102.205435][ C1] softirqs last disabled at (3171627): [] __do_softirq+0x14/0x20 [ 102.205444][ C1] ---[ end trace 0000000000000000 ]--- [ 102.205966][ T40] ------------[ cut here ]------------ [ 102.205970][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 102.205985][ T40] Modules linked in: [ 102.205990][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 102.206000][ T40] Tainted: [W]=WARN [ 102.206003][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.206007][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 102.206019][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.206026][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.206035][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.206044][ T40] sp : ffff80008efe6ed0 [ 102.206047][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0000f2cabc90 [ 102.206058][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.206069][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 102.206079][ T40] x20: ffff000121810000 x19: ffff0000f2cabc00 x18: 1fffe00035bb1028 [ 102.206090][ T40] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.206101][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.206110][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.206121][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.206131][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.206141][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 102.206151][ T40] Call trace: [ 102.206154][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.206164][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.206175][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.206185][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.206196][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 102.206206][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.206214][ T40] ieee80211_iface_work+0x600/0xd3c [ 102.206222][ T40] cfg80211_wiphy_work+0x278/0x588 [ 102.206232][ T40] process_scheduled_works+0x91c/0x1250 [ 102.206241][ T40] worker_thread+0x798/0xbd0 [ 102.206250][ T40] kthread+0x304/0x3d4 [ 102.206257][ T40] ret_from_fork+0x10/0x20 [ 102.206265][ T40] irq event stamp: 264271 [ 102.206268][ T40] hardirqs last enabled at (264269): [] kcov_remote_start+0x190/0x560 [ 102.206277][ T40] hardirqs last disabled at (264271): [] el1_brk64+0x20/0x54 [ 102.206287][ T40] softirqs last enabled at (264258): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.206295][ T40] softirqs last disabled at (264270): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.206307][ T40] ---[ end trace 0000000000000000 ]--- [ 102.307250][ C1] ------------[ cut here ]------------ [ 102.307259][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 102.307283][ C1] Modules linked in: [ 102.307293][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 102.307305][ C1] Tainted: [W]=WARN [ 102.307308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.307314][ C1] Workqueue: events jump_label_update_timeout [ 102.307328][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.307337][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.307347][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.307356][ C1] sp : ffff80008ebe7150 [ 102.307359][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f3795090 [ 102.307372][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.307384][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 102.307396][ C1] x20: ffff000121810000 x19: ffff0000f3795000 x18: 1fffe00035bb1028 [ 102.307408][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.307419][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.307430][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 102.307441][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.307452][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.307463][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 102.307475][ C1] Call trace: [ 102.307478][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.307491][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.307503][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.307514][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.307525][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.307536][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.307546][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.307555][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.307564][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.307577][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.307585][ C1] tasklet_action_common+0x1dc/0x278 [ 102.307595][ C1] tasklet_action+0x68/0x8c [ 102.307603][ C1] handle_softirqs+0x2ec/0xd98 [ 102.307612][ C1] __do_softirq+0x14/0x20 [ 102.307620][ C1] ____do_softirq+0x14/0x20 [ 102.307629][ C1] call_on_irq_stack+0x30/0x48 [ 102.307637][ C1] do_softirq_own_stack+0x20/0x2c [ 102.307645][ C1] __irq_exit_rcu+0x1ac/0x428 [ 102.307653][ C1] irq_exit_rcu+0x14/0x84 [ 102.307661][ C1] el1_interrupt+0x40/0x60 [ 102.307672][ C1] el1h_64_irq_handler+0x18/0x24 [ 102.307682][ C1] el1h_64_irq+0x6c/0x70 [ 102.307690][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 102.307702][ C1] kick_all_cpus_sync+0x34/0x40 [ 102.307713][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 102.307722][ C1] __jump_label_update+0x31c/0x344 [ 102.307731][ C1] jump_label_update+0x428/0x4b8 [ 102.307742][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 102.307751][ C1] jump_label_update_timeout+0x28/0x3c [ 102.307762][ C1] process_scheduled_works+0x91c/0x1250 [ 102.307772][ C1] worker_thread+0x798/0xbd0 [ 102.307782][ C1] kthread+0x304/0x3d4 [ 102.307791][ C1] ret_from_fork+0x10/0x20 [ 102.307799][ C1] irq event stamp: 3174161 [ 102.307802][ C1] hardirqs last enabled at (3174160): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 102.307814][ C1] hardirqs last disabled at (3174161): [] el1_brk64+0x20/0x54 [ 102.307825][ C1] softirqs last enabled at (3173590): [] handle_softirqs+0xc28/0xd98 [ 102.307838][ C1] softirqs last disabled at (3173685): [] __do_softirq+0x14/0x20 [ 102.307848][ C1] ---[ end trace 0000000000000000 ]--- [ 102.308448][ T40] ------------[ cut here ]------------ [ 102.308452][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 102.308468][ T40] Modules linked in: [ 102.308474][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 102.308483][ T40] Tainted: [W]=WARN [ 102.308486][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.308491][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 102.308502][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.308510][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.308519][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.308528][ T40] sp : ffff80008efe6ed0 [ 102.308531][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0000f3794c90 [ 102.308543][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.308553][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 102.308564][ T40] x20: ffff000121810000 x19: ffff0000f3794c00 x18: 1fffe00035bb1028 [ 102.308575][ T40] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 102.308585][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.308595][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.308605][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.308615][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.308625][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 102.308635][ T40] Call trace: [ 102.308638][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.308649][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.308660][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.308670][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.308681][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 102.308690][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.308699][ T40] ieee80211_iface_work+0x600/0xd3c [ 102.308707][ T40] cfg80211_wiphy_work+0x278/0x588 [ 102.308717][ T40] process_scheduled_works+0x91c/0x1250 [ 102.308726][ T40] worker_thread+0x798/0xbd0 [ 102.308735][ T40] kthread+0x304/0x3d4 [ 102.308743][ T40] ret_from_fork+0x10/0x20 [ 102.308750][ T40] irq event stamp: 264661 [ 102.308753][ T40] hardirqs last enabled at (264659): [] kcov_remote_start+0x190/0x560 [ 102.308763][ T40] hardirqs last disabled at (264661): [] el1_brk64+0x20/0x54 [ 102.308773][ T40] softirqs last enabled at (264646): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.308781][ T40] softirqs last disabled at (264660): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.308793][ T40] ---[ end trace 0000000000000000 ]--- [ 102.409858][ C1] ------------[ cut here ]------------ [ 102.409868][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 102.409902][ C1] Modules linked in: [ 102.409913][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 102.409925][ C1] Tainted: [W]=WARN [ 102.409929][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.409934][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.409943][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.409954][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.409964][ C1] sp : ffff80008edc6ef0 [ 102.409967][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000c844c490 [ 102.409980][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.409992][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 102.410004][ C1] x20: ffff000121810000 x19: ffff0000c844c400 x18: 1fffe00035bb1028 [ 102.410016][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.410027][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.410038][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 102.410049][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.410060][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.410072][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 102.410083][ C1] Call trace: [ 102.410086][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.410099][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.410111][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.410122][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.410134][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.410145][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.410155][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.410164][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.410173][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.410186][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.410194][ C1] tasklet_action_common+0x1dc/0x278 [ 102.410204][ C1] tasklet_action+0x68/0x8c [ 102.410212][ C1] handle_softirqs+0x2ec/0xd98 [ 102.410221][ C1] run_ksoftirqd+0x70/0xbc [ 102.410230][ C1] smpboot_thread_fn+0x4e4/0x97c [ 102.410238][ C1] kthread+0x304/0x3d4 [ 102.410247][ C1] ret_from_fork+0x10/0x20 [ 102.410257][ C1] irq event stamp: 24354387 [ 102.410260][ C1] hardirqs last enabled at (24354386): [] kcov_remote_start+0x190/0x560 [ 102.410272][ C1] hardirqs last disabled at (24354387): [] el1_brk64+0x20/0x54 [ 102.410283][ C1] softirqs last enabled at (24354156): [] handle_softirqs+0xc28/0xd98 [ 102.410293][ C1] softirqs last disabled at (24354161): [] run_ksoftirqd+0x70/0xbc [ 102.410302][ C1] ---[ end trace 0000000000000000 ]--- [ 102.410896][ T40] ------------[ cut here ]------------ [ 102.410900][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 102.410915][ T40] Modules linked in: [ 102.410921][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 102.410930][ T40] Tainted: [W]=WARN [ 102.410933][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.410938][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 102.410949][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.410957][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.410966][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.410974][ T40] sp : ffff80008efe6ed0 [ 102.410978][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0000c844c890 [ 102.410989][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.410999][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 102.411011][ T40] x20: ffff000121810000 x19: ffff0000c844c800 x18: 1fffe00035bb1028 [ 102.411021][ T40] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 102.411032][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.411041][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.411052][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.411062][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.411072][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 102.411082][ T40] Call trace: [ 102.411084][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.411095][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.411106][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.411116][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.411127][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 102.411137][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.411145][ T40] ieee80211_iface_work+0x600/0xd3c [ 102.411153][ T40] cfg80211_wiphy_work+0x278/0x588 [ 102.411163][ T40] process_scheduled_works+0x91c/0x1250 [ 102.411173][ T40] worker_thread+0x798/0xbd0 [ 102.411182][ T40] kthread+0x304/0x3d4 [ 102.411189][ T40] ret_from_fork+0x10/0x20 [ 102.411197][ T40] irq event stamp: 265041 [ 102.411200][ T40] hardirqs last enabled at (265039): [] kcov_remote_start+0x190/0x560 [ 102.411210][ T40] hardirqs last disabled at (265041): [] el1_brk64+0x20/0x54 [ 102.411219][ T40] softirqs last enabled at (265028): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.411228][ T40] softirqs last disabled at (265040): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.411239][ T40] ---[ end trace 0000000000000000 ]--- [ 102.512008][ C1] ------------[ cut here ]------------ [ 102.512017][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 102.512044][ C1] Modules linked in: [ 102.512054][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 102.512066][ C1] Tainted: [W]=WARN [ 102.512070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.512076][ C1] Workqueue: events jump_label_update_timeout [ 102.512090][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.512099][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.512109][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.512118][ C1] sp : ffff80008ebe7150 [ 102.512122][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f217b490 [ 102.512134][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.512146][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 102.512158][ C1] x20: ffff000121810000 x19: ffff0000f217b400 x18: 1fffe00035bb1028 [ 102.512170][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.512181][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.512192][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 102.512203][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.512214][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.512225][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 102.512237][ C1] Call trace: [ 102.512240][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.512252][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.512264][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.512275][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.512287][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.512298][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.512308][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.512317][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.512326][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.512338][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.512346][ C1] tasklet_action_common+0x1dc/0x278 [ 102.512356][ C1] tasklet_action+0x68/0x8c [ 102.512365][ C1] handle_softirqs+0x2ec/0xd98 [ 102.512373][ C1] __do_softirq+0x14/0x20 [ 102.512382][ C1] ____do_softirq+0x14/0x20 [ 102.512390][ C1] call_on_irq_stack+0x30/0x48 [ 102.512398][ C1] do_softirq_own_stack+0x20/0x2c [ 102.512406][ C1] __irq_exit_rcu+0x1ac/0x428 [ 102.512415][ C1] irq_exit_rcu+0x14/0x84 [ 102.512423][ C1] el1_interrupt+0x40/0x60 [ 102.512433][ C1] el1h_64_irq_handler+0x18/0x24 [ 102.512443][ C1] el1h_64_irq+0x6c/0x70 [ 102.512451][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 102.512464][ C1] kick_all_cpus_sync+0x34/0x40 [ 102.512474][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 102.512483][ C1] __jump_label_update+0x31c/0x344 [ 102.512492][ C1] jump_label_update+0x428/0x4b8 [ 102.512503][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 102.512511][ C1] jump_label_update_timeout+0x28/0x3c [ 102.512523][ C1] process_scheduled_works+0x91c/0x1250 [ 102.512533][ C1] worker_thread+0x798/0xbd0 [ 102.512542][ C1] kthread+0x304/0x3d4 [ 102.512551][ C1] ret_from_fork+0x10/0x20 [ 102.512559][ C1] irq event stamp: 3176475 [ 102.512562][ C1] hardirqs last enabled at (3176474): [] kcov_remote_start+0x190/0x560 [ 102.512573][ C1] hardirqs last disabled at (3176475): [] el1_brk64+0x20/0x54 [ 102.512583][ C1] softirqs last enabled at (3176000): [] handle_softirqs+0xc28/0xd98 [ 102.512593][ C1] softirqs last disabled at (3176007): [] __do_softirq+0x14/0x20 [ 102.512602][ C1] ---[ end trace 0000000000000000 ]--- [ 102.513196][ T40] ------------[ cut here ]------------ [ 102.513200][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 102.513216][ T40] Modules linked in: [ 102.513221][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 102.513231][ T40] Tainted: [W]=WARN [ 102.513233][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.513238][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 102.513249][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.513257][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.513266][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.513274][ T40] sp : ffff80008efe6ed0 [ 102.513277][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0000f217bc90 [ 102.513288][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.513299][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 102.513310][ T40] x20: ffff000121810000 x19: ffff0000f217bc00 x18: 1fffe00035bb1028 [ 102.513321][ T40] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 102.513331][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.513341][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.513351][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.513361][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.513371][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 102.513381][ T40] Call trace: [ 102.513384][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.513395][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.513406][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.513416][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.513427][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 102.513436][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.513445][ T40] ieee80211_iface_work+0x600/0xd3c [ 102.513452][ T40] cfg80211_wiphy_work+0x278/0x588 [ 102.513463][ T40] process_scheduled_works+0x91c/0x1250 [ 102.513472][ T40] worker_thread+0x798/0xbd0 [ 102.513481][ T40] kthread+0x304/0x3d4 [ 102.513488][ T40] ret_from_fork+0x10/0x20 [ 102.513496][ T40] irq event stamp: 265423 [ 102.513499][ T40] hardirqs last enabled at (265421): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 102.513510][ T40] hardirqs last disabled at (265423): [] el1_brk64+0x20/0x54 [ 102.513520][ T40] softirqs last enabled at (265406): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.513528][ T40] softirqs last disabled at (265422): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.513539][ T40] ---[ end trace 0000000000000000 ]--- [ 102.614447][ C1] ------------[ cut here ]------------ [ 102.614457][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 102.614481][ C1] Modules linked in: [ 102.614491][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 102.614502][ C1] Tainted: [W]=WARN [ 102.614506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.614511][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.614520][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.614530][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.614540][ C1] sp : ffff80008edc6ef0 [ 102.614543][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000f217b890 [ 102.614556][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.614568][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 102.614580][ C1] x20: ffff000121810000 x19: ffff0000f217b800 x18: 1fffe00035bb1028 [ 102.614592][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.614604][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.614615][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 102.614626][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.614637][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.614648][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 102.614659][ C1] Call trace: [ 102.614663][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.614675][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.614687][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.614699][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.614710][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.614721][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.614731][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.614740][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.614749][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.614761][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.614770][ C1] tasklet_action_common+0x1dc/0x278 [ 102.614780][ C1] tasklet_action+0x68/0x8c [ 102.614788][ C1] handle_softirqs+0x2ec/0xd98 [ 102.614797][ C1] run_ksoftirqd+0x70/0xbc [ 102.614805][ C1] smpboot_thread_fn+0x4e4/0x97c [ 102.614814][ C1] kthread+0x304/0x3d4 [ 102.614823][ C1] ret_from_fork+0x10/0x20 [ 102.614837][ C1] irq event stamp: 24354607 [ 102.614841][ C1] hardirqs last enabled at (24354606): [] kcov_remote_start+0x190/0x560 [ 102.614852][ C1] hardirqs last disabled at (24354607): [] el1_brk64+0x20/0x54 [ 102.614864][ C1] softirqs last enabled at (24354412): [] handle_softirqs+0xc28/0xd98 [ 102.614874][ C1] softirqs last disabled at (24354417): [] run_ksoftirqd+0x70/0xbc [ 102.614884][ C1] ---[ end trace 0000000000000000 ]--- [ 102.615404][ T13] ------------[ cut here ]------------ [ 102.615407][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 102.615422][ T13] Modules linked in: [ 102.615427][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 102.615437][ T13] Tainted: [W]=WARN [ 102.615440][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.615444][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 102.615456][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.615463][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.615472][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.615481][ T13] sp : ffff80008ed16ed0 [ 102.615484][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f2179490 [ 102.615495][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.615506][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 102.615517][ T13] x20: ffff000121810000 x19: ffff0000f2179400 x18: 1fffe00035bb1028 [ 102.615527][ T13] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 102.615538][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.615547][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.615558][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.615568][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.615578][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 102.615588][ T13] Call trace: [ 102.615590][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.615601][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.615612][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.615622][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.615633][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 102.615643][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.615651][ T13] ieee80211_iface_work+0x600/0xd3c [ 102.615659][ T13] cfg80211_wiphy_work+0x278/0x588 [ 102.615669][ T13] process_scheduled_works+0x91c/0x1250 [ 102.615678][ T13] worker_thread+0x798/0xbd0 [ 102.615687][ T13] kthread+0x304/0x3d4 [ 102.615695][ T13] ret_from_fork+0x10/0x20 [ 102.615702][ T13] irq event stamp: 2847161 [ 102.615706][ T13] hardirqs last enabled at (2847159): [] kcov_remote_start+0x190/0x560 [ 102.615715][ T13] hardirqs last disabled at (2847161): [] el1_brk64+0x20/0x54 [ 102.615725][ T13] softirqs last enabled at (2847148): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.615733][ T13] softirqs last disabled at (2847160): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.615745][ T13] ---[ end trace 0000000000000000 ]--- [ 102.716860][ C1] ------------[ cut here ]------------ [ 102.716870][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: udevd/4701 [ 102.716894][ C1] Modules linked in: [ 102.716905][ C1] CPU: 1 UID: 0 PID: 4701 Comm: udevd Tainted: G W syzkaller #0 PREEMPT [ 102.716916][ C1] Tainted: [W]=WARN [ 102.716920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.716925][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.716934][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.716944][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.716954][ C1] sp : ffff80008ebe7150 [ 102.716958][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f2179c90 [ 102.716970][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.716982][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 102.716995][ C1] x20: ffff000121810000 x19: ffff0000f2179c00 x18: 0000000000000000 [ 102.717006][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.717018][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.717029][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 102.717040][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.717052][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.717063][ C1] x2 : 0000000000000001 x1 : ffff0000d3d60000 x0 : 0000000000000000 [ 102.717074][ C1] Call trace: [ 102.717077][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.717090][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.717103][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.717114][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.717125][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.717136][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.717146][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.717155][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.717164][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.717176][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.717184][ C1] tasklet_action_common+0x1dc/0x278 [ 102.717195][ C1] tasklet_action+0x68/0x8c [ 102.717203][ C1] handle_softirqs+0x2ec/0xd98 [ 102.717212][ C1] __do_softirq+0x14/0x20 [ 102.717221][ C1] ____do_softirq+0x14/0x20 [ 102.717229][ C1] call_on_irq_stack+0x30/0x48 [ 102.717237][ C1] do_softirq_own_stack+0x20/0x2c [ 102.717245][ C1] __irq_exit_rcu+0x1ac/0x428 [ 102.717254][ C1] irq_exit_rcu+0x14/0x84 [ 102.717262][ C1] el1_interrupt+0x40/0x60 [ 102.717272][ C1] el1h_64_irq_handler+0x18/0x24 [ 102.717282][ C1] el1h_64_irq+0x6c/0x70 [ 102.717290][ C1] _raw_spin_unlock_irqrestore+0x44/0x98 (P) [ 102.717301][ C1] debug_check_no_obj_freed+0x2c8/0x3a4 [ 102.717314][ C1] free_unref_folios+0x554/0x1430 [ 102.717326][ C1] folios_put_refs+0x7e0/0x8dc [ 102.717337][ C1] free_pages_and_swap_cache+0x240/0x3e8 [ 102.717346][ C1] tlb_flush_mmu+0xfc/0x34c [ 102.717356][ C1] tlb_finish_mmu+0xf0/0x220 [ 102.717365][ C1] exit_mmap+0x3b4/0xad4 [ 102.717374][ C1] __mmput+0xe0/0x2e8 [ 102.717382][ C1] mmput+0x70/0xa8 [ 102.717390][ C1] exit_mm+0x1ac/0x264 [ 102.717400][ C1] do_exit+0x524/0x1a74 [ 102.717411][ C1] do_group_exit+0x198/0x238 [ 102.717422][ C1] pid_child_should_wake+0x0/0x104 [ 102.717433][ C1] invoke_syscall+0x98/0x244 [ 102.717444][ C1] el0_svc_common+0xec/0x23c [ 102.717455][ C1] do_el0_svc+0x4c/0x5c [ 102.717465][ C1] el0_svc+0x64/0x260 [ 102.717475][ C1] el0t_64_sync_handler+0x44/0x104 [ 102.717485][ C1] el0t_64_sync+0x198/0x19c [ 102.717493][ C1] irq event stamp: 48165 [ 102.717497][ C1] hardirqs last enabled at (48164): [] kcov_remote_start+0x190/0x560 [ 102.717508][ C1] hardirqs last disabled at (48165): [] el1_brk64+0x20/0x54 [ 102.717519][ C1] softirqs last enabled at (46860): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 102.717529][ C1] softirqs last disabled at (47693): [] __do_softirq+0x14/0x20 [ 102.717538][ C1] ---[ end trace 0000000000000000 ]--- [ 102.721408][ T13] ------------[ cut here ]------------ [ 102.721415][ T13] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:1/13 [ 102.721433][ T13] Modules linked in: [ 102.721441][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT [ 102.721451][ T13] Tainted: [W]=WARN [ 102.721454][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.721459][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 102.721471][ T13] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.721478][ T13] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.721488][ T13] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.721496][ T13] sp : ffff80008ed16ed0 [ 102.721499][ T13] x29: ffff80008ed16f20 x28: 1ffff00011173571 x27: ffff0000f2179890 [ 102.721511][ T13] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.721521][ T13] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ed16fe0 [ 102.721532][ T13] x20: ffff000121810000 x19: ffff0000f2179800 x18: 1fffe00035bb1028 [ 102.721542][ T13] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 102.721553][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.721562][ T13] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.721573][ T13] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.721582][ T13] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.721592][ T13] x2 : 0000000000000001 x1 : ffff0000c1a2d880 x0 : 0000000000000000 [ 102.721602][ T13] Call trace: [ 102.721605][ T13] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.721616][ T13] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.721627][ T13] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.721638][ T13] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.721648][ T13] ieee80211_bss_info_update+0x5d0/0x944 [ 102.721658][ T13] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.721667][ T13] ieee80211_iface_work+0x600/0xd3c [ 102.721675][ T13] cfg80211_wiphy_work+0x278/0x588 [ 102.721685][ T13] process_scheduled_works+0x91c/0x1250 [ 102.721694][ T13] worker_thread+0x798/0xbd0 [ 102.721703][ T13] kthread+0x304/0x3d4 [ 102.721711][ T13] ret_from_fork+0x10/0x20 [ 102.721719][ T13] irq event stamp: 2855749 [ 102.721722][ T13] hardirqs last enabled at (2855747): [] kcov_remote_start+0x190/0x560 [ 102.721732][ T13] hardirqs last disabled at (2855749): [] el1_brk64+0x20/0x54 [ 102.721741][ T13] softirqs last enabled at (2855734): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.721750][ T13] softirqs last disabled at (2855748): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.721761][ T13] ---[ end trace 0000000000000000 ]--- [ 102.819269][ C1] ------------[ cut here ]------------ [ 102.819280][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 102.819307][ C1] Modules linked in: [ 102.819318][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 102.819330][ C1] Tainted: [W]=WARN [ 102.819333][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.819339][ C1] Workqueue: events jump_label_update_timeout [ 102.819354][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.819363][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.819373][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.819383][ C1] sp : ffff80008ebe7150 [ 102.819387][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000c9019890 [ 102.819400][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.819412][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 102.819424][ C1] x20: ffff000121810000 x19: ffff0000c9019800 x18: 1fffe00035bb1028 [ 102.819436][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.819448][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.819459][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 102.819470][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.819481][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.819492][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 102.819504][ C1] Call trace: [ 102.819507][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.819520][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.819532][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.819544][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.819555][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.819566][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.819576][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.819586][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.819594][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.819607][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.819615][ C1] tasklet_action_common+0x1dc/0x278 [ 102.819625][ C1] tasklet_action+0x68/0x8c [ 102.819634][ C1] handle_softirqs+0x2ec/0xd98 [ 102.819642][ C1] __do_softirq+0x14/0x20 [ 102.819651][ C1] ____do_softirq+0x14/0x20 [ 102.819660][ C1] call_on_irq_stack+0x30/0x48 [ 102.819668][ C1] do_softirq_own_stack+0x20/0x2c [ 102.819676][ C1] __irq_exit_rcu+0x1ac/0x428 [ 102.819684][ C1] irq_exit_rcu+0x14/0x84 [ 102.819692][ C1] el1_interrupt+0x40/0x60 [ 102.819703][ C1] el1h_64_irq_handler+0x18/0x24 [ 102.819713][ C1] el1h_64_irq+0x6c/0x70 [ 102.819721][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 102.819734][ C1] kick_all_cpus_sync+0x34/0x40 [ 102.819745][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 102.819754][ C1] __jump_label_update+0x31c/0x344 [ 102.819762][ C1] jump_label_update+0x428/0x4b8 [ 102.819774][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 102.819782][ C1] jump_label_update_timeout+0x28/0x3c [ 102.819794][ C1] process_scheduled_works+0x91c/0x1250 [ 102.819804][ C1] worker_thread+0x798/0xbd0 [ 102.819813][ C1] kthread+0x304/0x3d4 [ 102.819822][ C1] ret_from_fork+0x10/0x20 [ 102.819834][ C1] irq event stamp: 3179357 [ 102.819838][ C1] hardirqs last enabled at (3179356): [] kcov_remote_start+0x190/0x560 [ 102.819850][ C1] hardirqs last disabled at (3179357): [] el1_brk64+0x20/0x54 [ 102.819861][ C1] softirqs last enabled at (3178880): [] handle_softirqs+0xc28/0xd98 [ 102.819871][ C1] softirqs last disabled at (3178887): [] __do_softirq+0x14/0x20 [ 102.819880][ C1] ---[ end trace 0000000000000000 ]--- [ 102.829449][ T40] ------------[ cut here ]------------ [ 102.829453][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 102.829471][ T40] Modules linked in: [ 102.829477][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 102.829487][ T40] Tainted: [W]=WARN [ 102.829490][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.829495][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 102.829507][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.829515][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.829524][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.829533][ T40] sp : ffff80008efe6ed0 [ 102.829536][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0000f38acc90 [ 102.829548][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.829558][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 102.829569][ T40] x20: ffff000121810000 x19: ffff0000f38acc00 x18: 1fffe00035bb1028 [ 102.829580][ T40] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 102.829590][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.829600][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.829610][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.829621][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.829631][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 102.829641][ T40] Call trace: [ 102.829644][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.829655][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.829666][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.829676][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.829687][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 102.829697][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.829706][ T40] ieee80211_iface_work+0x600/0xd3c [ 102.829714][ T40] cfg80211_wiphy_work+0x278/0x588 [ 102.829725][ T40] process_scheduled_works+0x91c/0x1250 [ 102.829734][ T40] worker_thread+0x798/0xbd0 [ 102.829743][ T40] kthread+0x304/0x3d4 [ 102.829752][ T40] ret_from_fork+0x10/0x20 [ 102.829759][ T40] irq event stamp: 272915 [ 102.829762][ T40] hardirqs last enabled at (272913): [] kcov_remote_start+0x190/0x560 [ 102.829772][ T40] hardirqs last disabled at (272915): [] el1_brk64+0x20/0x54 [ 102.829782][ T40] softirqs last enabled at (272902): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.829790][ T40] softirqs last disabled at (272914): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.829802][ T40] ---[ end trace 0000000000000000 ]--- [ 102.921730][ C1] ------------[ cut here ]------------ [ 102.921742][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 102.921770][ C1] Modules linked in: [ 102.921781][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 102.921793][ C1] Tainted: [W]=WARN [ 102.921796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.921803][ C1] Workqueue: events jump_label_update_timeout [ 102.921818][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.921832][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.921843][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.921852][ C1] sp : ffff80008ebe7150 [ 102.921856][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f38ae490 [ 102.921869][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.921881][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 102.921893][ C1] x20: ffff000121810000 x19: ffff0000f38ae400 x18: 1fffe00035bb1028 [ 102.921905][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 102.921917][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.921928][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 102.921939][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.921951][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.921962][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 102.921973][ C1] Call trace: [ 102.921977][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.921990][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.922002][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.922013][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.922025][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 102.922036][ C1] ieee80211_scan_rx+0x450/0x928 [ 102.922046][ C1] ieee80211_rx_list+0x229c/0x3000 [ 102.922055][ C1] ieee80211_rx_napi+0x18c/0x370 [ 102.922064][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 102.922077][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 102.922085][ C1] tasklet_action_common+0x1dc/0x278 [ 102.922096][ C1] tasklet_action+0x68/0x8c [ 102.922104][ C1] handle_softirqs+0x2ec/0xd98 [ 102.922113][ C1] __do_softirq+0x14/0x20 [ 102.922121][ C1] ____do_softirq+0x14/0x20 [ 102.922130][ C1] call_on_irq_stack+0x30/0x48 [ 102.922139][ C1] do_softirq_own_stack+0x20/0x2c [ 102.922147][ C1] __irq_exit_rcu+0x1ac/0x428 [ 102.922155][ C1] irq_exit_rcu+0x14/0x84 [ 102.922163][ C1] el1_interrupt+0x40/0x60 [ 102.922175][ C1] el1h_64_irq_handler+0x18/0x24 [ 102.922184][ C1] el1h_64_irq+0x6c/0x70 [ 102.922192][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 102.922205][ C1] kick_all_cpus_sync+0x34/0x40 [ 102.922216][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 102.922226][ C1] __jump_label_update+0x31c/0x344 [ 102.922234][ C1] jump_label_update+0x428/0x4b8 [ 102.922245][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 102.922254][ C1] jump_label_update_timeout+0x28/0x3c [ 102.922265][ C1] process_scheduled_works+0x91c/0x1250 [ 102.922275][ C1] worker_thread+0x798/0xbd0 [ 102.922285][ C1] kthread+0x304/0x3d4 [ 102.922294][ C1] ret_from_fork+0x10/0x20 [ 102.922302][ C1] irq event stamp: 3182297 [ 102.922306][ C1] hardirqs last enabled at (3182296): [] kcov_remote_start+0x190/0x560 [ 102.922317][ C1] hardirqs last disabled at (3182297): [] el1_brk64+0x20/0x54 [ 102.922328][ C1] softirqs last enabled at (3181802): [] handle_softirqs+0xc28/0xd98 [ 102.922337][ C1] softirqs last disabled at (3181821): [] __do_softirq+0x14/0x20 [ 102.922346][ C1] ---[ end trace 0000000000000000 ]--- [ 102.922961][ T40] ------------[ cut here ]------------ [ 102.922966][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 102.922981][ T40] Modules linked in: [ 102.922987][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 102.922997][ T40] Tainted: [W]=WARN [ 102.923000][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.923005][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 102.923017][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 102.923025][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 102.923035][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 102.923044][ T40] sp : ffff80008efe6ed0 [ 102.923047][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0000cdd6f890 [ 102.923059][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 102.923069][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 102.923080][ T40] x20: ffff000121810000 x19: ffff0000cdd6f800 x18: 1fffe00035bb1028 [ 102.923091][ T40] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 102.923101][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 102.923111][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 102.923122][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 102.923132][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 102.923142][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 102.923152][ T40] Call trace: [ 102.923155][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 102.923166][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 102.923177][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 102.923187][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 102.923198][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 102.923207][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 102.923216][ T40] ieee80211_iface_work+0x600/0xd3c [ 102.923224][ T40] cfg80211_wiphy_work+0x278/0x588 [ 102.923235][ T40] process_scheduled_works+0x91c/0x1250 [ 102.923244][ T40] worker_thread+0x798/0xbd0 [ 102.923253][ T40] kthread+0x304/0x3d4 [ 102.923261][ T40] ret_from_fork+0x10/0x20 [ 102.923268][ T40] irq event stamp: 276299 [ 102.923271][ T40] hardirqs last enabled at (276297): [] kcov_remote_start+0x190/0x560 [ 102.923281][ T40] hardirqs last disabled at (276299): [] el1_brk64+0x20/0x54 [ 102.923291][ T40] softirqs last enabled at (276286): [] ieee80211_ibss_work+0x2d0/0xd9c [ 102.923299][ T40] softirqs last disabled at (276298): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 102.923311][ T40] ---[ end trace 0000000000000000 ]--- [ 103.024039][ C1] ------------[ cut here ]------------ [ 103.024049][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 103.024078][ C1] Modules linked in: [ 103.024089][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 103.024102][ C1] Tainted: [W]=WARN [ 103.024105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.024111][ C1] Workqueue: events jump_label_update_timeout [ 103.024126][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.024135][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.024145][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.024155][ C1] sp : ffff80008ebe7150 [ 103.024158][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff000123621490 [ 103.024171][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.024183][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 103.024195][ C1] x20: ffff000121810000 x19: ffff000123621400 x18: 1fffe00035bb1028 [ 103.024207][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 103.024218][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.024229][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 103.024240][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.024252][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.024263][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 103.024274][ C1] Call trace: [ 103.024277][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.024290][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.024302][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.024313][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.024325][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 103.024336][ C1] ieee80211_scan_rx+0x450/0x928 [ 103.024346][ C1] ieee80211_rx_list+0x229c/0x3000 [ 103.024355][ C1] ieee80211_rx_napi+0x18c/0x370 [ 103.024364][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 103.024376][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 103.024385][ C1] tasklet_action_common+0x1dc/0x278 [ 103.024395][ C1] tasklet_action+0x68/0x8c [ 103.024403][ C1] handle_softirqs+0x2ec/0xd98 [ 103.024411][ C1] __do_softirq+0x14/0x20 [ 103.024420][ C1] ____do_softirq+0x14/0x20 [ 103.024429][ C1] call_on_irq_stack+0x30/0x48 [ 103.024437][ C1] do_softirq_own_stack+0x20/0x2c [ 103.024445][ C1] __irq_exit_rcu+0x1ac/0x428 [ 103.024453][ C1] irq_exit_rcu+0x14/0x84 [ 103.024461][ C1] el1_interrupt+0x40/0x60 [ 103.024472][ C1] el1h_64_irq_handler+0x18/0x24 [ 103.024482][ C1] el1h_64_irq+0x6c/0x70 [ 103.024490][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 103.024502][ C1] kick_all_cpus_sync+0x34/0x40 [ 103.024513][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 103.024523][ C1] __jump_label_update+0x31c/0x344 [ 103.024531][ C1] jump_label_update+0x428/0x4b8 [ 103.024542][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 103.024550][ C1] jump_label_update_timeout+0x28/0x3c [ 103.024562][ C1] process_scheduled_works+0x91c/0x1250 [ 103.024572][ C1] worker_thread+0x798/0xbd0 [ 103.024581][ C1] kthread+0x304/0x3d4 [ 103.024590][ C1] ret_from_fork+0x10/0x20 [ 103.024598][ C1] irq event stamp: 3183507 [ 103.024602][ C1] hardirqs last enabled at (3183506): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 103.024614][ C1] hardirqs last disabled at (3183507): [] el1_brk64+0x20/0x54 [ 103.024624][ C1] softirqs last enabled at (3182934): [] handle_softirqs+0xc28/0xd98 [ 103.024634][ C1] softirqs last disabled at (3183033): [] __do_softirq+0x14/0x20 [ 103.024643][ C1] ---[ end trace 0000000000000000 ]--- [ 103.025223][ T40] ------------[ cut here ]------------ [ 103.025228][ T40] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:2/40 [ 103.025243][ T40] Modules linked in: [ 103.025249][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT [ 103.025258][ T40] Tainted: [W]=WARN [ 103.025261][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.025266][ T40] Workqueue: events_unbound cfg80211_wiphy_work [ 103.025277][ T40] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.025285][ T40] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.025294][ T40] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.025303][ T40] sp : ffff80008efe6ed0 [ 103.025306][ T40] x29: ffff80008efe6f20 x28: 1ffff00011173571 x27: ffff0000d9a56890 [ 103.025317][ T40] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.025328][ T40] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008efe6fe0 [ 103.025339][ T40] x20: ffff000121810000 x19: ffff0000d9a56800 x18: 1fffe00035bb1028 [ 103.025349][ T40] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 103.025360][ T40] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.025370][ T40] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 103.025380][ T40] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.025390][ T40] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.025400][ T40] x2 : 0000000000000001 x1 : ffff0000c2499d80 x0 : 0000000000000000 [ 103.025411][ T40] Call trace: [ 103.025413][ T40] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.025424][ T40] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.025435][ T40] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.025445][ T40] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.025456][ T40] ieee80211_bss_info_update+0x5d0/0x944 [ 103.025466][ T40] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 103.025474][ T40] ieee80211_iface_work+0x600/0xd3c [ 103.025482][ T40] cfg80211_wiphy_work+0x278/0x588 [ 103.025492][ T40] process_scheduled_works+0x91c/0x1250 [ 103.025501][ T40] worker_thread+0x798/0xbd0 [ 103.025510][ T40] kthread+0x304/0x3d4 [ 103.025518][ T40] ret_from_fork+0x10/0x20 [ 103.025525][ T40] irq event stamp: 276695 [ 103.025528][ T40] hardirqs last enabled at (276693): [] kcov_remote_start+0x190/0x560 [ 103.025539][ T40] hardirqs last disabled at (276695): [] el1_brk64+0x20/0x54 [ 103.025548][ T40] softirqs last enabled at (276682): [] ieee80211_ibss_work+0x2d0/0xd9c [ 103.025557][ T40] softirqs last disabled at (276694): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 103.025569][ T40] ---[ end trace 0000000000000000 ]--- [ 103.126445][ C1] ------------[ cut here ]------------ [ 103.126455][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 103.126479][ C1] Modules linked in: [ 103.126488][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 103.126500][ C1] Tainted: [W]=WARN [ 103.126504][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.126509][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.126517][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.126527][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.126537][ C1] sp : ffff80008edc6ef0 [ 103.126540][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000d9a55c90 [ 103.126553][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.126565][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 103.126577][ C1] x20: ffff000121810000 x19: ffff0000d9a55c00 x18: 1fffe00035bb1028 [ 103.126588][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 103.126600][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.126611][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 103.126622][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.126633][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.126644][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 103.126656][ C1] Call trace: [ 103.126659][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.126671][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.126683][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.126694][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.126706][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 103.126717][ C1] ieee80211_scan_rx+0x450/0x928 [ 103.126727][ C1] ieee80211_rx_list+0x229c/0x3000 [ 103.126737][ C1] ieee80211_rx_napi+0x18c/0x370 [ 103.126745][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 103.126758][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 103.126766][ C1] tasklet_action_common+0x1dc/0x278 [ 103.126777][ C1] tasklet_action+0x68/0x8c [ 103.126785][ C1] handle_softirqs+0x2ec/0xd98 [ 103.126794][ C1] run_ksoftirqd+0x70/0xbc [ 103.126802][ C1] smpboot_thread_fn+0x4e4/0x97c [ 103.126811][ C1] kthread+0x304/0x3d4 [ 103.126820][ C1] ret_from_fork+0x10/0x20 [ 103.126833][ C1] irq event stamp: 24355171 [ 103.126837][ C1] hardirqs last enabled at (24355170): [] kcov_remote_start+0x190/0x560 [ 103.126850][ C1] hardirqs last disabled at (24355171): [] el1_brk64+0x20/0x54 [ 103.126862][ C1] softirqs last enabled at (24354976): [] handle_softirqs+0xc28/0xd98 [ 103.126872][ C1] softirqs last disabled at (24354981): [] run_ksoftirqd+0x70/0xbc [ 103.126882][ C1] ---[ end trace 0000000000000000 ]--- [ 103.127413][ T3847] ------------[ cut here ]------------ [ 103.127416][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 103.127431][ T3847] Modules linked in: [ 103.127437][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 103.127447][ T3847] Tainted: [W]=WARN [ 103.127449][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.127454][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 103.127466][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.127473][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.127482][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.127491][ T3847] sp : ffff80009a056ed0 [ 103.127494][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000d9a55490 [ 103.127505][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.127516][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 103.127527][ T3847] x20: ffff000121810000 x19: ffff0000d9a55400 x18: 1fffe00035bb1028 [ 103.127537][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 103.127548][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.127557][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 103.127568][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.127578][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.127588][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 103.127598][ T3847] Call trace: [ 103.127601][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.127611][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.127622][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.127633][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.127643][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 103.127653][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 103.127661][ T3847] ieee80211_iface_work+0x600/0xd3c [ 103.127669][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 103.127680][ T3847] process_scheduled_works+0x91c/0x1250 [ 103.127689][ T3847] worker_thread+0x798/0xbd0 [ 103.127698][ T3847] kthread+0x304/0x3d4 [ 103.127705][ T3847] ret_from_fork+0x10/0x20 [ 103.127713][ T3847] irq event stamp: 1493395 [ 103.127716][ T3847] hardirqs last enabled at (1493393): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 103.127727][ T3847] hardirqs last disabled at (1493395): [] el1_brk64+0x20/0x54 [ 103.127736][ T3847] softirqs last enabled at (1493378): [] ieee80211_ibss_work+0x2d0/0xd9c [ 103.127745][ T3847] softirqs last disabled at (1493394): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 103.127756][ T3847] ---[ end trace 0000000000000000 ]--- [ 103.228811][ C1] ------------[ cut here ]------------ [ 103.228822][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 103.228860][ C1] Modules linked in: [ 103.228872][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 103.228887][ C1] Tainted: [W]=WARN [ 103.228891][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.228897][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.228906][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.228916][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.228926][ C1] sp : ffff80008edc6ef0 [ 103.228930][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000d9a57c90 [ 103.228943][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.228955][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 103.228967][ C1] x20: ffff000121810000 x19: ffff0000d9a57c00 x18: 1fffe00035bb1028 [ 103.228979][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 103.228990][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.229001][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 103.229012][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.229024][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.229035][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 103.229046][ C1] Call trace: [ 103.229049][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.229062][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.229074][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.229086][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.229097][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 103.229108][ C1] ieee80211_scan_rx+0x450/0x928 [ 103.229118][ C1] ieee80211_rx_list+0x229c/0x3000 [ 103.229127][ C1] ieee80211_rx_napi+0x18c/0x370 [ 103.229136][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 103.229148][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 103.229157][ C1] tasklet_action_common+0x1dc/0x278 [ 103.229167][ C1] tasklet_action+0x68/0x8c [ 103.229176][ C1] handle_softirqs+0x2ec/0xd98 [ 103.229184][ C1] run_ksoftirqd+0x70/0xbc [ 103.229192][ C1] smpboot_thread_fn+0x4e4/0x97c [ 103.229201][ C1] kthread+0x304/0x3d4 [ 103.229210][ C1] ret_from_fork+0x10/0x20 [ 103.229220][ C1] irq event stamp: 24355415 [ 103.229223][ C1] hardirqs last enabled at (24355414): [] kcov_remote_start+0x190/0x560 [ 103.229235][ C1] hardirqs last disabled at (24355415): [] el1_brk64+0x20/0x54 [ 103.229246][ C1] softirqs last enabled at (24355220): [] handle_softirqs+0xc28/0xd98 [ 103.229256][ C1] softirqs last disabled at (24355225): [] run_ksoftirqd+0x70/0xbc [ 103.229266][ C1] ---[ end trace 0000000000000000 ]--- [ 103.229879][ T3847] ------------[ cut here ]------------ [ 103.229883][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 103.229898][ T3847] Modules linked in: [ 103.229904][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 103.229914][ T3847] Tainted: [W]=WARN [ 103.229917][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.229921][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 103.229932][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.229940][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.229949][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.229957][ T3847] sp : ffff80009a056ed0 [ 103.229960][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000d9a56090 [ 103.229971][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.229982][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 103.229992][ T3847] x20: ffff000121810000 x19: ffff0000d9a56000 x18: 1fffe00035bb1028 [ 103.230003][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 103.230013][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.230023][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 103.230033][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.230043][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.230053][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 103.230063][ T3847] Call trace: [ 103.230065][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.230076][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.230086][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.230097][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.230107][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 103.230117][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 103.230125][ T3847] ieee80211_iface_work+0x600/0xd3c [ 103.230133][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 103.230143][ T3847] process_scheduled_works+0x91c/0x1250 [ 103.230152][ T3847] worker_thread+0x798/0xbd0 [ 103.230161][ T3847] kthread+0x304/0x3d4 [ 103.230169][ T3847] ret_from_fork+0x10/0x20 [ 103.230176][ T3847] irq event stamp: 1502007 [ 103.230179][ T3847] hardirqs last enabled at (1502005): [] kcov_remote_start+0x190/0x560 [ 103.230188][ T3847] hardirqs last disabled at (1502007): [] el1_brk64+0x20/0x54 [ 103.230198][ T3847] softirqs last enabled at (1501992): [] ieee80211_ibss_work+0x2d0/0xd9c [ 103.230206][ T3847] softirqs last disabled at (1502006): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 103.230218][ T3847] ---[ end trace 0000000000000000 ]--- [ 103.331250][ C1] ------------[ cut here ]------------ [ 103.331260][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/1:5/5817 [ 103.331284][ C1] Modules linked in: [ 103.331294][ C1] CPU: 1 UID: 0 PID: 5817 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT [ 103.331306][ C1] Tainted: [W]=WARN [ 103.331309][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.331315][ C1] Workqueue: events jump_label_update_timeout [ 103.331330][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.331339][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.331349][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.331358][ C1] sp : ffff80008ebe7150 [ 103.331362][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d9a55890 [ 103.331374][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.331387][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 103.331399][ C1] x20: ffff000121810000 x19: ffff0000d9a55800 x18: 1fffe00035bb1028 [ 103.331412][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 103.331425][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.331437][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 103.331448][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.331459][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.331470][ C1] x2 : 0000000000000001 x1 : ffff0000ca1c9d80 x0 : 0000000000000000 [ 103.331481][ C1] Call trace: [ 103.331485][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.331497][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.331509][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.331521][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.331532][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 103.331543][ C1] ieee80211_scan_rx+0x450/0x928 [ 103.331553][ C1] ieee80211_rx_list+0x229c/0x3000 [ 103.331562][ C1] ieee80211_rx_napi+0x18c/0x370 [ 103.331571][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 103.331583][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 103.331592][ C1] tasklet_action_common+0x1dc/0x278 [ 103.331602][ C1] tasklet_action+0x68/0x8c [ 103.331610][ C1] handle_softirqs+0x2ec/0xd98 [ 103.331618][ C1] __do_softirq+0x14/0x20 [ 103.331627][ C1] ____do_softirq+0x14/0x20 [ 103.331636][ C1] call_on_irq_stack+0x30/0x48 [ 103.331644][ C1] do_softirq_own_stack+0x20/0x2c [ 103.331652][ C1] __irq_exit_rcu+0x1ac/0x428 [ 103.331660][ C1] irq_exit_rcu+0x14/0x84 [ 103.331668][ C1] el1_interrupt+0x40/0x60 [ 103.331679][ C1] el1h_64_irq_handler+0x18/0x24 [ 103.331689][ C1] el1h_64_irq+0x6c/0x70 [ 103.331696][ C1] smp_call_function_many_cond+0xfec/0x1590 (P) [ 103.331709][ C1] kick_all_cpus_sync+0x34/0x40 [ 103.331720][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 103.331729][ C1] __jump_label_update+0x31c/0x344 [ 103.331737][ C1] jump_label_update+0x428/0x4b8 [ 103.331748][ C1] __static_key_slow_dec_cpuslocked+0xc4/0x138 [ 103.331757][ C1] jump_label_update_timeout+0x28/0x3c [ 103.331768][ C1] process_scheduled_works+0x91c/0x1250 [ 103.331779][ C1] worker_thread+0x798/0xbd0 [ 103.331788][ C1] kthread+0x304/0x3d4 [ 103.331797][ C1] ret_from_fork+0x10/0x20 [ 103.331805][ C1] irq event stamp: 3186837 [ 103.331809][ C1] hardirqs last enabled at (3186836): [] kcov_remote_start+0x190/0x560 [ 103.331820][ C1] hardirqs last disabled at (3186837): [] el1_brk64+0x20/0x54 [ 103.331834][ C1] softirqs last enabled at (3186348): [] handle_softirqs+0xc28/0xd98 [ 103.331843][ C1] softirqs last disabled at (3186367): [] __do_softirq+0x14/0x20 [ 103.331852][ C1] ---[ end trace 0000000000000000 ]--- [ 103.332413][ T3847] ------------[ cut here ]------------ [ 103.332417][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 103.332433][ T3847] Modules linked in: [ 103.332438][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 103.332448][ T3847] Tainted: [W]=WARN [ 103.332451][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.332455][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 103.332467][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.332475][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.332483][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.332492][ T3847] sp : ffff80009a056ed0 [ 103.332495][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000d8534490 [ 103.332507][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.332518][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 103.332528][ T3847] x20: ffff000121810000 x19: ffff0000d8534400 x18: 1fffe00035bb1028 [ 103.332539][ T3847] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 103.332549][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.332559][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 103.332570][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.332580][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.332590][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 103.332600][ T3847] Call trace: [ 103.332603][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.332614][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.332624][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.332635][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.332645][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 103.332655][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 103.332664][ T3847] ieee80211_iface_work+0x600/0xd3c [ 103.332672][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 103.332682][ T3847] process_scheduled_works+0x91c/0x1250 [ 103.332691][ T3847] worker_thread+0x798/0xbd0 [ 103.332700][ T3847] kthread+0x304/0x3d4 [ 103.332708][ T3847] ret_from_fork+0x10/0x20 [ 103.332715][ T3847] irq event stamp: 1502495 [ 103.332718][ T3847] hardirqs last enabled at (1502493): [] kcov_remote_start+0x190/0x560 [ 103.332728][ T3847] hardirqs last disabled at (1502495): [] el1_brk64+0x20/0x54 [ 103.332738][ T3847] softirqs last enabled at (1502480): [] ieee80211_ibss_work+0x2d0/0xd9c [ 103.332746][ T3847] softirqs last disabled at (1502494): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 103.332758][ T3847] ---[ end trace 0000000000000000 ]--- [ 103.433632][ C1] ------------[ cut here ]------------ [ 103.433642][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 103.433666][ C1] Modules linked in: [ 103.433676][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 103.433688][ C1] Tainted: [W]=WARN [ 103.433691][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.433696][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.433705][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.433715][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.433724][ C1] sp : ffff80008edc6ef0 [ 103.433728][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000d8537890 [ 103.433741][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.433752][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 103.433764][ C1] x20: ffff000121810000 x19: ffff0000d8537800 x18: 1fffe00035bb1028 [ 103.433776][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 103.433788][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.433798][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 103.433810][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.433821][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.433836][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 103.433848][ C1] Call trace: [ 103.433851][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.433864][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.433876][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.433887][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.433899][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 103.433910][ C1] ieee80211_scan_rx+0x450/0x928 [ 103.433920][ C1] ieee80211_rx_list+0x229c/0x3000 [ 103.433929][ C1] ieee80211_rx_napi+0x18c/0x370 [ 103.433938][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 103.433950][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 103.433958][ C1] tasklet_action_common+0x1dc/0x278 [ 103.433969][ C1] tasklet_action+0x68/0x8c [ 103.433977][ C1] handle_softirqs+0x2ec/0xd98 [ 103.433985][ C1] run_ksoftirqd+0x70/0xbc [ 103.433994][ C1] smpboot_thread_fn+0x4e4/0x97c [ 103.434003][ C1] kthread+0x304/0x3d4 [ 103.434012][ C1] ret_from_fork+0x10/0x20 [ 103.434021][ C1] irq event stamp: 24355657 [ 103.434025][ C1] hardirqs last enabled at (24355656): [] kcov_remote_start+0x190/0x560 [ 103.434037][ C1] hardirqs last disabled at (24355657): [] el1_brk64+0x20/0x54 [ 103.434049][ C1] softirqs last enabled at (24355458): [] handle_softirqs+0xc28/0xd98 [ 103.434058][ C1] softirqs last disabled at (24355463): [] run_ksoftirqd+0x70/0xbc [ 103.434068][ C1] ---[ end trace 0000000000000000 ]--- [ 103.434621][ T3847] ------------[ cut here ]------------ [ 103.434625][ T3847] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:12/3847 [ 103.434640][ T3847] Modules linked in: [ 103.434646][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT [ 103.434655][ T3847] Tainted: [W]=WARN [ 103.434658][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.434663][ T3847] Workqueue: events_unbound cfg80211_wiphy_work [ 103.434675][ T3847] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.434683][ T3847] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.434692][ T3847] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.434701][ T3847] sp : ffff80009a056ed0 [ 103.434704][ T3847] x29: ffff80009a056f20 x28: 1ffff00011173571 x27: ffff0000d9997490 [ 103.434715][ T3847] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.434726][ T3847] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80009a056fe0 [ 103.434737][ T3847] x20: ffff000121810000 x19: ffff0000d9997400 x18: 1fffe00035bb1028 [ 103.434748][ T3847] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 103.434758][ T3847] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.434768][ T3847] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 103.434779][ T3847] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.434789][ T3847] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.434799][ T3847] x2 : 0000000000000001 x1 : ffff0000d1660000 x0 : 0000000000000000 [ 103.434809][ T3847] Call trace: [ 103.434812][ T3847] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.434823][ T3847] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.434839][ T3847] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.434851][ T3847] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.434864][ T3847] ieee80211_bss_info_update+0x5d0/0x944 [ 103.434873][ T3847] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 103.434882][ T3847] ieee80211_iface_work+0x600/0xd3c [ 103.434890][ T3847] cfg80211_wiphy_work+0x278/0x588 [ 103.434900][ T3847] process_scheduled_works+0x91c/0x1250 [ 103.434910][ T3847] worker_thread+0x798/0xbd0 [ 103.434918][ T3847] kthread+0x304/0x3d4 [ 103.434926][ T3847] ret_from_fork+0x10/0x20 [ 103.434933][ T3847] irq event stamp: 1502889 [ 103.434936][ T3847] hardirqs last enabled at (1502887): [] kcov_remote_start+0x190/0x560 [ 103.434946][ T3847] hardirqs last disabled at (1502889): [] el1_brk64+0x20/0x54 [ 103.434956][ T3847] softirqs last enabled at (1502876): [] ieee80211_ibss_work+0x2d0/0xd9c [ 103.434964][ T3847] softirqs last disabled at (1502888): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 103.434975][ T3847] ---[ end trace 0000000000000000 ]--- [ 103.536056][ C1] ------------[ cut here ]------------ [ 103.536067][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: ksoftirqd/1/23 [ 103.536094][ C1] Modules linked in: [ 103.536104][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT [ 103.536116][ C1] Tainted: [W]=WARN [ 103.536119][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.536125][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.536134][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.536144][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.536154][ C1] sp : ffff80008edc6ef0 [ 103.536158][ C1] x29: ffff80008edc6f40 x28: 1ffff00011173571 x27: ffff0000d9997c90 [ 103.536171][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.536183][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008edc7000 [ 103.536195][ C1] x20: ffff000121810000 x19: ffff0000d9997c00 x18: 1fffe00035bb1028 [ 103.536207][ C1] x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 [ 103.536218][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.536229][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000301 [ 103.536241][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.536252][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.536263][ C1] x2 : 0000000000000001 x1 : ffff0000c1ad0000 x0 : 0000000000000000 [ 103.536275][ C1] Call trace: [ 103.536278][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.536291][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.536303][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.536315][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.536326][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 103.536337][ C1] ieee80211_scan_rx+0x450/0x928 [ 103.536347][ C1] ieee80211_rx_list+0x229c/0x3000 [ 103.536356][ C1] ieee80211_rx_napi+0x18c/0x370 [ 103.536365][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 103.536378][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 103.536386][ C1] tasklet_action_common+0x1dc/0x278 [ 103.536397][ C1] tasklet_action+0x68/0x8c [ 103.536405][ C1] handle_softirqs+0x2ec/0xd98 [ 103.536413][ C1] run_ksoftirqd+0x70/0xbc [ 103.536422][ C1] smpboot_thread_fn+0x4e4/0x97c [ 103.536431][ C1] kthread+0x304/0x3d4 [ 103.536439][ C1] ret_from_fork+0x10/0x20 [ 103.536449][ C1] irq event stamp: 24356227 [ 103.536452][ C1] hardirqs last enabled at (24356226): [] kcov_remote_start+0x190/0x560 [ 103.536464][ C1] hardirqs last disabled at (24356227): [] el1_brk64+0x20/0x54 [ 103.536475][ C1] softirqs last enabled at (24356028): [] handle_softirqs+0xc28/0xd98 [ 103.536484][ C1] softirqs last disabled at (24356033): [] run_ksoftirqd+0x70/0xbc [ 103.536494][ C1] ---[ end trace 0000000000000000 ]--- [ 103.537027][ T3174] ------------[ cut here ]------------ [ 103.537031][ T3174] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: kworker/u8:8/3174 [ 103.537046][ T3174] Modules linked in: [ 103.537052][ T3174] CPU: 1 UID: 0 PID: 3174 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT [ 103.537062][ T3174] Tainted: [W]=WARN [ 103.537065][ T3174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.537070][ T3174] Workqueue: events_unbound cfg80211_wiphy_work [ 103.537081][ T3174] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.537089][ T3174] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.537098][ T3174] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.537107][ T3174] sp : ffff800099c96ed0 [ 103.537110][ T3174] x29: ffff800099c96f20 x28: 1ffff00011173571 x27: ffff0000d14dc490 [ 103.537122][ T3174] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.537132][ T3174] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff800099c96fe0 [ 103.537143][ T3174] x20: ffff000121810000 x19: ffff0000d14dc400 x18: 1fffe00035bb1028 [ 103.537154][ T3174] x17: 0000000000000003 x16: ffff800088b97000 x15: 0000000000000000 [ 103.537164][ T3174] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.537174][ T3174] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000200 [ 103.537185][ T3174] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.537195][ T3174] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.537205][ T3174] x2 : 0000000000000001 x1 : ffff0000cf4f1d80 x0 : 0000000000000000 [ 103.537215][ T3174] Call trace: [ 103.537218][ T3174] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.537229][ T3174] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.537240][ T3174] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.537250][ T3174] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.537261][ T3174] ieee80211_bss_info_update+0x5d0/0x944 [ 103.537271][ T3174] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 103.537279][ T3174] ieee80211_iface_work+0x600/0xd3c [ 103.537287][ T3174] cfg80211_wiphy_work+0x278/0x588 [ 103.537298][ T3174] process_scheduled_works+0x91c/0x1250 [ 103.537307][ T3174] worker_thread+0x798/0xbd0 [ 103.537316][ T3174] kthread+0x304/0x3d4 [ 103.537324][ T3174] ret_from_fork+0x10/0x20 [ 103.537331][ T3174] irq event stamp: 35547 [ 103.537334][ T3174] hardirqs last enabled at (35546): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 103.537346][ T3174] hardirqs last disabled at (35547): [] el1_brk64+0x20/0x54 [ 103.537355][ T3174] softirqs last enabled at (35532): [] ieee80211_ibss_work+0x2d0/0xd9c [ 103.537364][ T3174] softirqs last disabled at (35544): [] cfg80211_inform_single_bss_data+0x96c/0x19dc [ 103.537375][ T3174] ---[ end trace 0000000000000000 ]--- [ 103.638452][ C1] ------------[ cut here ]------------ [ 103.638462][ C1] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608, CPU#1: syz-executor/4699 [ 103.638488][ C1] Modules linked in: [ 103.638498][ C1] CPU: 1 UID: 0 PID: 4699 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT [ 103.638510][ C1] Tainted: [W]=WARN [ 103.638513][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.638519][ C1] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 103.638527][ C1] pc : __cfg80211_bss_update+0x1060/0x1608 [ 103.638537][ C1] lr : __cfg80211_bss_update+0x1600/0x1608 [ 103.638547][ C1] sp : ffff80008ebe7150 [ 103.638550][ C1] x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000d14dc890 [ 103.638563][ C1] x26: dfff800000000000 x25: ffff000121810190 x24: 0000000000000001 [ 103.638575][ C1] x23: ffff800088b9a000 x22: ffff000121810190 x21: ffff80008ebe7260 [ 103.638587][ C1] x20: ffff000121810000 x19: ffff0000d14dc800 x18: 0000000000000000 [ 103.638598][ C1] x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 [ 103.638610][ C1] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 103.638621][ C1] x11: 0000000000000000 x10: ffff60001912940a x9 : 0000000000000302 [ 103.638632][ C1] x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 [ 103.638643][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 [ 103.638654][ C1] x2 : 0000000000000001 x1 : ffff0000d3d61d80 x0 : 0000000000000000 [ 103.638665][ C1] Call trace: [ 103.638668][ C1] __cfg80211_bss_update+0x1060/0x1608 (P) [ 103.638681][ C1] cfg80211_inform_single_bss_data+0x980/0x19dc [ 103.638693][ C1] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 103.638704][ C1] cfg80211_inform_bss_frame_data+0x348/0x838 [ 103.638715][ C1] ieee80211_bss_info_update+0x5d0/0x944 [ 103.638726][ C1] ieee80211_scan_rx+0x450/0x928 [ 103.638736][ C1] ieee80211_rx_list+0x229c/0x3000 [ 103.638745][ C1] ieee80211_rx_napi+0x18c/0x370 [ 103.638754][ C1] ieee80211_handle_queued_frames+0xc8/0x17c [ 103.638767][ C1] ieee80211_tasklet_handler+0x20/0x30 [ 103.638775][ C1] tasklet_action_common+0x1dc/0x278 [ 103.638785][ C1] tasklet_action+0x68/0x8c [ 103.638794][ C1] handle_softirqs+0x2ec/0xd98 [ 103.638802][ C1] __do_softirq+0x14/0x20 [ 103.638811][ C1] ____do_softirq+0x14/0x20 [ 103.638820][ C1] call_on_irq_stack+0x30/0x48 [ 103.638836][ C1] do_softirq_own_stack+0x20/0x2c [ 103.638844][ C1] do_softirq+0x90/0xf8 [ 103.638853][ C1] __local_bh_enable_ip+0x240/0x35c [ 103.638862][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 103.638873][ C1] lock_sock_nested+0xb0/0x110 [ 103.638884][ C1] tcp_recvmsg+0x174/0x4d8 [ 103.638893][ C1] inet_recvmsg+0xb8/0xd8 [ 103.638902][ C1] sock_recvmsg+0xd4/0x170 [ 103.638912][ C1] sock_read_iter+0x1d4/0x288 [ 103.638922][ C1] vfs_read+0x498/0x8c8 [ 103.638933][ C1] ksys_read+0x12c/0x228 [ 103.638944][ C1] __arm64_sys_read+0x84/0x98