------------[ cut here ]------------ WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000f55b7000 x19: ffff0000f69fac50 x18: 0000000000000000 x17: ffff8000113f999c x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000f55b70c8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1191595 hardirqs last enabled at (1191594): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (1191594): [] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (1191595): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1191578): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1191578): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1191592): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1191592): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 0 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000f5ba8800 x19: ffff0000f69fac50 x18: 1fffe00033e6997e x17: ffff8000153bd000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000f5ba88c8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1202489 hardirqs last enabled at (1202487): [] kcov_remote_start+0x150/0x530 kernel/kcov.c:886 hardirqs last disabled at (1202489): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1202476): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1202476): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1202488): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1202488): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 0 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000d6031c00 x19: ffff0000f69fac50 x18: 1fffe00033e6997e x17: ffff8000153bd000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000d6031cc8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1230915 hardirqs last enabled at (1230913): [] kcov_remote_start+0x150/0x530 kernel/kcov.c:886 hardirqs last disabled at (1230915): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1230900): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1230900): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1230914): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1230914): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000d35d2400 x19: ffff0000f69fac50 x18: 1fffe00033e6db7e x17: ffff8000153bd000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000d35d24c8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1260107 hardirqs last enabled at (1260105): [] ___slab_alloc+0xca4/0xe90 mm/slub.c:3088 hardirqs last disabled at (1260107): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1260084): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1260084): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1260106): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1260106): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000cc16dc00 x19: ffff0000f69fac50 x18: 1fffe00033e6db7e x17: ffff8000153bd000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000cc16dcc8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1262137 hardirqs last enabled at (1262135): [] kcov_remote_start+0x150/0x530 kernel/kcov.c:886 hardirqs last disabled at (1262137): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1262124): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1262124): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1262136): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1262136): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000f5958800 x19: ffff0000f69fac50 x18: 1fffe00033e6db7e x17: ffff8000153bd000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000f59588c8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1289147 hardirqs last enabled at (1289145): [] kcov_remote_start+0x150/0x530 kernel/kcov.c:886 hardirqs last disabled at (1289147): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1289134): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1289134): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1289146): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1289146): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 0 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000e04ab800 x19: ffff0000f69fac50 x18: 00000000b4dce130 x17: dfff800000000000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000e04ab8c8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1354365 hardirqs last enabled at (1354363): [] ___slab_alloc+0xca4/0xe90 mm/slub.c:3088 hardirqs last disabled at (1354365): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1354338): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1354338): [] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] softirqs last enabled at (1354338): [] nsim_dev_trap_report_work+0x610/0x94c drivers/net/netdevsim/dev.c:851 softirqs last disabled at (1354364): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1354364): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 0 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000f81e9800 x19: ffff0000f69fac50 x18: 1fffe00033e6997e x17: ffff8000153bd000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000f81e98c8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1355051 hardirqs last enabled at (1355049): [] kcov_remote_start+0x150/0x530 kernel/kcov.c:886 hardirqs last disabled at (1355051): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1355038): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1355038): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1355050): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1355050): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 0 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 0 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000d541dc00 x19: ffff0000f69fac50 x18: 1fffe00033e6997e x17: ffff8000153bd000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000d541dcc8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1363421 hardirqs last enabled at (1363419): [] kcov_remote_start+0x150/0x530 kernel/kcov.c:886 hardirqs last disabled at (1363421): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1363408): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1363408): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1363420): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1363420): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000d312d400 x19: ffff0000f69fac50 x18: 1fffe00033e6db7e x17: ffff8000153bd000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000d312d4c8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1364405 hardirqs last enabled at (1364403): [] kcov_remote_start+0x150/0x530 kernel/kcov.c:886 hardirqs last disabled at (1364405): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1364390): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1364390): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1364404): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1364404): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] WARNING: CPU: 1 PID: 9 at net/wireless/scan.c:518 cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 Modules linked in: CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events_unbound cfg80211_wiphy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] pc : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] lr : cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 sp : ffff80001cb772b0 x29: ffff80001cb77320 x28: dfff800000000000 x27: ffff0000f6bd0190 x26: 1ffff00002a78070 x25: 0000000000000001 x24: 0000000000000000 x23: ffff0000f6bd0190 x22: ffff80001cb77440 x21: ffff0000f6bd01a0 x20: ffff0000c2d50000 x19: ffff0000f69fac50 x18: 1fffe00033e6db7e x17: ffff80018a057000 x16: ffff8000082dbd78 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001ed3f58a x12: 0000000000000000 x11: ff00800011252f1c x10: 0000000000000000 x9 : ffff800011252f1c x8 : ffff0000c09a8000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000c2d500c8 x4 : ffff80001cb77508 x3 : ffff800011251b64 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:518 [inline] cfg80211_bss_update+0x1cc0/0x1ccc net/wireless/scan.c:1908 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2509 [inline] cfg80211_inform_bss_frame_data+0x890/0x10f8 net/wireless/scan.c:2542 ieee80211_bss_info_update+0x640/0xa7c net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 net/mac80211/ibss.c:1638 ieee80211_iface_process_skb net/mac80211/iface.c:1685 [inline] ieee80211_iface_work+0x5a8/0xa4c net/mac80211/iface.c:1739 cfg80211_wiphy_work+0x1e0/0x220 net/wireless/core.c:433 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1389707 hardirqs last enabled at (1389706): [] ___slab_alloc+0xca4/0xe90 mm/slub.c:3088 hardirqs last disabled at (1389707): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1389676): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1389676): [] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701 softirqs last disabled at (1389698): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1389698): [] cfg80211_bss_update+0x84/0x1ccc net/wireless/scan.c:1837 ---[ end trace 0000000000000000 ]---