------------[ cut here ]------------ WARNING: net/wireless/scan.c:513 at cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline], CPU#1: klogd/4330 WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079, CPU#1: klogd/4330 Modules linked in: CPU: 1 UID: 0 PID: 4330 Comm: klogd Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] pc : __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:513 [inline] lr : __cfg80211_bss_update+0x1600/0x1608 net/wireless/scan.c:2079 sp : ffff80008ebe7150 x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f18e1c90 x26: dfff800000000000 x25: ffff0000f3310190 x24: 0000000000000001 x23: ffff800088b9a000 x22: ffff0000f3310190 x21: ffff80008ebe7260 x20: ffff0000f3310000 x19: ffff0000f18e1c00 x18: 0000000000000000 x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001983c20a x9 : 0000000000000302 x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 x2 : 0000000000000001 x1 : ffff0000d08f0000 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] (P) __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 (P) cfg80211_inform_single_bss_data+0x980/0x19dc net/wireless/scan.c:2406 cfg80211_inform_bss_data+0x1ec/0x2d04 net/wireless/scan.c:3266 cfg80211_inform_bss_frame_data+0x348/0x838 net/wireless/scan.c:3358 ieee80211_bss_info_update+0x5d0/0x944 net/mac80211/scan.c:230 ieee80211_scan_rx+0x450/0x928 net/mac80211/scan.c:364 __ieee80211_rx_handle_packet net/mac80211/rx.c:5427 [inline] ieee80211_rx_list+0x229c/0x3000 net/mac80211/rx.c:5720 ieee80211_rx_napi+0x18c/0x370 net/mac80211/rx.c:5743 ieee80211_rx include/net/mac80211.h:5449 [inline] ieee80211_handle_queued_frames+0xc8/0x17c net/mac80211/main.c:452 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:471 tasklet_action_common+0x1dc/0x278 kernel/softirq.c:-1 tasklet_action+0x68/0x8c kernel/softirq.c:989 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 invoke_softirq kernel/softirq.c:526 [inline] __irq_exit_rcu+0x1ac/0x428 kernel/softirq.c:758 irq_exit_rcu+0x14/0x84 kernel/softirq.c:775 __el1_irq arch/arm64/kernel/entry-common.c:531 [inline] el1_interrupt+0x40/0x60 arch/arm64/kernel/entry-common.c:543 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:548 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:586 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P) _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P) spin_unlock_irqrestore include/linux/spinlock.h:425 [inline] __wake_up_common_lock+0x5c/0x78 kernel/sched/wait.c:128 __wake_up_sync_key+0x20/0x2c kernel/sched/wait.c:193 sock_def_readable+0x208/0x6f4 net/core/sock.c:3661 unix_dgram_sendmsg+0xbb8/0x1078 net/unix/af_unix.c:2300 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 __sys_sendto+0x250/0x328 net/socket.c:2281 __do_sys_sendto net/socket.c:2288 [inline] __se_sys_sendto net/socket.c:2284 [inline] __arm64_sys_sendto+0xec/0x10c net/socket.c:2284 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 irq event stamp: 36369 hardirqs last enabled at (36368): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] hardirqs last enabled at (36368): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221 hardirqs last disabled at (36369): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (36098): [] __alloc_skb+0x1c0/0x610 net/core/skbuff.c:698 softirqs last disabled at (36109): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: net/wireless/scan.c:513 at cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline], CPU#1: klogd/4330 WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079, CPU#1: klogd/4330 Modules linked in: CPU: 1 UID: 0 PID: 4330 Comm: klogd Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] pc : __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:513 [inline] lr : __cfg80211_bss_update+0x1600/0x1608 net/wireless/scan.c:2079 sp : ffff80008ebe7150 x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f18e1890 x26: dfff800000000000 x25: ffff0000f3690190 x24: 0000000000000001 x23: ffff800088b9a000 x22: ffff0000f3690190 x21: ffff80008ebe7260 x20: ffff0000f3690000 x19: ffff0000f18e1800 x18: 0000000000000000 x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001b37c80a x9 : 0000000000000302 x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 x2 : 0000000000000001 x1 : ffff0000d08f0000 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] (P) __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 (P) cfg80211_inform_single_bss_data+0x980/0x19dc net/wireless/scan.c:2406 cfg80211_inform_bss_data+0x1ec/0x2d04 net/wireless/scan.c:3266 cfg80211_inform_bss_frame_data+0x348/0x838 net/wireless/scan.c:3358 ieee80211_bss_info_update+0x5d0/0x944 net/mac80211/scan.c:230 ieee80211_scan_rx+0x450/0x928 net/mac80211/scan.c:364 __ieee80211_rx_handle_packet net/mac80211/rx.c:5427 [inline] ieee80211_rx_list+0x229c/0x3000 net/mac80211/rx.c:5720 ieee80211_rx_napi+0x18c/0x370 net/mac80211/rx.c:5743 ieee80211_rx include/net/mac80211.h:5449 [inline] ieee80211_handle_queued_frames+0xc8/0x17c net/mac80211/main.c:452 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:471 tasklet_action_common+0x1dc/0x278 kernel/softirq.c:-1 tasklet_action+0x68/0x8c kernel/softirq.c:989 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 invoke_softirq kernel/softirq.c:526 [inline] __irq_exit_rcu+0x1ac/0x428 kernel/softirq.c:758 irq_exit_rcu+0x14/0x84 kernel/softirq.c:775 __el1_irq arch/arm64/kernel/entry-common.c:531 [inline] el1_interrupt+0x40/0x60 arch/arm64/kernel/entry-common.c:543 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:548 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:586 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P) _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P) spin_unlock_irqrestore include/linux/spinlock.h:425 [inline] __wake_up_common_lock+0x5c/0x78 kernel/sched/wait.c:128 __wake_up_sync_key+0x20/0x2c kernel/sched/wait.c:193 sock_def_readable+0x208/0x6f4 net/core/sock.c:3661 unix_dgram_sendmsg+0xbb8/0x1078 net/unix/af_unix.c:2300 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 __sys_sendto+0x250/0x328 net/socket.c:2281 __do_sys_sendto net/socket.c:2288 [inline] __se_sys_sendto net/socket.c:2284 [inline] __arm64_sys_sendto+0xec/0x10c net/socket.c:2284 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 irq event stamp: 36531 hardirqs last enabled at (36530): [] kcov_remote_start+0x190/0x560 kernel/kcov.c:911 hardirqs last disabled at (36531): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (36098): [] __alloc_skb+0x1c0/0x610 net/core/skbuff.c:698 softirqs last disabled at (36109): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: net/wireless/scan.c:513 at cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline], CPU#1: kworker/1:2/865 WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079, CPU#1: kworker/1:2/865 Modules linked in: CPU: 1 UID: 0 PID: 865 Comm: kworker/1:2 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] pc : __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:513 [inline] lr : __cfg80211_bss_update+0x1600/0x1608 net/wireless/scan.c:2079 sp : ffff80008ebe7150 x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f18e1490 x26: dfff800000000000 x25: ffff0000f3310190 x24: 0000000000000001 x23: ffff800088b9a000 x22: ffff0000f3310190 x21: ffff80008ebe7260 x20: ffff0000f3310000 x19: ffff0000f18e1400 x18: 00000000430b26d3 x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001983c20a x9 : 0000000000000302 x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 x2 : 0000000000000001 x1 : ffff0000c7aa1d80 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] (P) __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 (P) cfg80211_inform_single_bss_data+0x980/0x19dc net/wireless/scan.c:2406 cfg80211_inform_bss_data+0x1ec/0x2d04 net/wireless/scan.c:3266 cfg80211_inform_bss_frame_data+0x348/0x838 net/wireless/scan.c:3358 ieee80211_bss_info_update+0x5d0/0x944 net/mac80211/scan.c:230 ieee80211_scan_rx+0x450/0x928 net/mac80211/scan.c:364 __ieee80211_rx_handle_packet net/mac80211/rx.c:5427 [inline] ieee80211_rx_list+0x229c/0x3000 net/mac80211/rx.c:5720 ieee80211_rx_napi+0x18c/0x370 net/mac80211/rx.c:5743 ieee80211_rx include/net/mac80211.h:5449 [inline] ieee80211_handle_queued_frames+0xc8/0x17c net/mac80211/main.c:452 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:471 tasklet_action_common+0x1dc/0x278 kernel/softirq.c:-1 tasklet_action+0x68/0x8c kernel/softirq.c:989 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 do_softirq+0x90/0xf8 kernel/softirq.c:546 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:473 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:237 [inline] _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:245 spin_unlock_bh include/linux/spinlock.h:407 [inline] ptr_ring_consume_bh include/linux/ptr_ring.h:399 [inline] wg_packet_encrypt_worker+0x25c/0x1290 drivers/net/wireguard/send.c:293 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838 irq event stamp: 56605 hardirqs last enabled at (56604): [] kcov_remote_start+0x190/0x560 kernel/kcov.c:911 hardirqs last disabled at (56605): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (55768): [] spin_unlock_bh include/linux/spinlock.h:407 [inline] softirqs last enabled at (55768): [] ptr_ring_consume_bh include/linux/ptr_ring.h:399 [inline] softirqs last enabled at (55768): [] wg_packet_encrypt_worker+0x25c/0x1290 drivers/net/wireguard/send.c:293 softirqs last disabled at (55769): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: net/wireless/scan.c:513 at cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline], CPU#1: kworker/1:2/865 WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079, CPU#1: kworker/1:2/865 Modules linked in: CPU: 1 UID: 0 PID: 865 Comm: kworker/1:2 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] pc : __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:513 [inline] lr : __cfg80211_bss_update+0x1600/0x1608 net/wireless/scan.c:2079 sp : ffff80008ebe7150 x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f18e1090 x26: dfff800000000000 x25: ffff0000f3690190 x24: 0000000000000001 x23: ffff800088b9a000 x22: ffff0000f3690190 x21: ffff80008ebe7260 x20: ffff0000f3690000 x19: ffff0000f18e1000 x18: 00000000430b26d3 x17: 00000000ffff0000 x16: ffff000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001b37c80a x9 : 0000000000000302 x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 x2 : 0000000000000001 x1 : ffff0000c7aa1d80 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] (P) __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 (P) cfg80211_inform_single_bss_data+0x980/0x19dc net/wireless/scan.c:2406 cfg80211_inform_bss_data+0x1ec/0x2d04 net/wireless/scan.c:3266 cfg80211_inform_bss_frame_data+0x348/0x838 net/wireless/scan.c:3358 ieee80211_bss_info_update+0x5d0/0x944 net/mac80211/scan.c:230 ieee80211_scan_rx+0x450/0x928 net/mac80211/scan.c:364 __ieee80211_rx_handle_packet net/mac80211/rx.c:5427 [inline] ieee80211_rx_list+0x229c/0x3000 net/mac80211/rx.c:5720 ieee80211_rx_napi+0x18c/0x370 net/mac80211/rx.c:5743 ieee80211_rx include/net/mac80211.h:5449 [inline] ieee80211_handle_queued_frames+0xc8/0x17c net/mac80211/main.c:452 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:471 tasklet_action_common+0x1dc/0x278 kernel/softirq.c:-1 tasklet_action+0x68/0x8c kernel/softirq.c:989 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 do_softirq+0x90/0xf8 kernel/softirq.c:546 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:473 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:237 [inline] _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:245 spin_unlock_bh include/linux/spinlock.h:407 [inline] ptr_ring_consume_bh include/linux/ptr_ring.h:399 [inline] wg_packet_encrypt_worker+0x25c/0x1290 drivers/net/wireguard/send.c:293 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838 irq event stamp: 56771 hardirqs last enabled at (56770): [] kcov_remote_start+0x190/0x560 kernel/kcov.c:911 hardirqs last disabled at (56771): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (55768): [] spin_unlock_bh include/linux/spinlock.h:407 [inline] softirqs last enabled at (55768): [] ptr_ring_consume_bh include/linux/ptr_ring.h:399 [inline] softirqs last enabled at (55768): [] wg_packet_encrypt_worker+0x25c/0x1290 drivers/net/wireguard/send.c:293 softirqs last disabled at (55769): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: net/wireless/scan.c:513 at cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline], CPU#1: kworker/1:2/865 WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079, CPU#1: kworker/1:2/865 Modules linked in: CPU: 1 UID: 0 PID: 865 Comm: kworker/1:2 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] pc : __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:513 [inline] lr : __cfg80211_bss_update+0x1600/0x1608 net/wireless/scan.c:2079 sp : ffff80008ebe7150 x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f18e0c90 x26: dfff800000000000 x25: ffff0000f3310190 x24: 0000000000000001 x23: ffff800088b9a000 x22: ffff0000f3310190 x21: ffff80008ebe7260 x20: ffff0000f3310000 x19: ffff0000f18e0c00 x18: 0000000072251724 x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001983c20a x9 : 0000000000000303 x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 x2 : 0000000000000001 x1 : ffff0000c7aa1d80 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] (P) __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 (P) cfg80211_inform_single_bss_data+0x980/0x19dc net/wireless/scan.c:2406 cfg80211_inform_bss_data+0x1ec/0x2d04 net/wireless/scan.c:3266 cfg80211_inform_bss_frame_data+0x348/0x838 net/wireless/scan.c:3358 ieee80211_bss_info_update+0x5d0/0x944 net/mac80211/scan.c:230 ieee80211_scan_rx+0x450/0x928 net/mac80211/scan.c:364 __ieee80211_rx_handle_packet net/mac80211/rx.c:5427 [inline] ieee80211_rx_list+0x229c/0x3000 net/mac80211/rx.c:5720 ieee80211_rx_napi+0x18c/0x370 net/mac80211/rx.c:5743 ieee80211_rx include/net/mac80211.h:5449 [inline] ieee80211_handle_queued_frames+0xc8/0x17c net/mac80211/main.c:452 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:471 tasklet_action_common+0x1dc/0x278 kernel/softirq.c:-1 tasklet_action+0x68/0x8c kernel/softirq.c:989 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 do_softirq+0x90/0xf8 kernel/softirq.c:546 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:473 local_bh_enable include/linux/bottom_half.h:33 [inline] put_cpu_fpsimd_context arch/arm64/kernel/fpsimd.c:251 [inline] kernel_neon_begin+0x29c/0x400 arch/arm64/kernel/fpsimd.c:1940 class_ksimd_constructor arch/arm64/include/asm/simd.h:48 [inline] poly1305_blocks+0x110/0x204 lib/crypto/arm64/poly1305.h:30 poly1305_update+0x168/0x39c lib/crypto/poly1305.c:59 chacha20poly1305_crypt_sg_inplace+0x6d0/0xc30 lib/crypto/chacha20poly1305.c:304 chacha20poly1305_encrypt_sg_inplace+0x54/0x70 lib/crypto/chacha20poly1305.c:340 encrypt_packet drivers/net/wireguard/send.c:216 [inline] wg_packet_encrypt_worker+0x74c/0x1290 drivers/net/wireguard/send.c:297 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838 irq event stamp: 57705 hardirqs last enabled at (57704): [] kcov_remote_start+0x190/0x560 kernel/kcov.c:911 hardirqs last disabled at (57705): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (57656): [] local_bh_enable include/linux/bottom_half.h:33 [inline] softirqs last enabled at (57656): [] put_cpu_fpsimd_context arch/arm64/kernel/fpsimd.c:251 [inline] softirqs last enabled at (57656): [] kernel_neon_begin+0x294/0x400 arch/arm64/kernel/fpsimd.c:1940 softirqs last disabled at (57657): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: net/wireless/scan.c:513 at cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline], CPU#1: kworker/1:2/865 WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079, CPU#1: kworker/1:2/865 Modules linked in: CPU: 1 UID: 0 PID: 865 Comm: kworker/1:2 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] pc : __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:513 [inline] lr : __cfg80211_bss_update+0x1600/0x1608 net/wireless/scan.c:2079 sp : ffff80008ebe7150 x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f18e0890 x26: dfff800000000000 x25: ffff0000f3690190 x24: 0000000000000001 x23: ffff800088b9a000 x22: ffff0000f3690190 x21: ffff80008ebe7260 x20: ffff0000f3690000 x19: ffff0000f18e0800 x18: 0000000072251724 x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001b37c80a x9 : 0000000000000303 x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 x2 : 0000000000000001 x1 : ffff0000c7aa1d80 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] (P) __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 (P) cfg80211_inform_single_bss_data+0x980/0x19dc net/wireless/scan.c:2406 cfg80211_inform_bss_data+0x1ec/0x2d04 net/wireless/scan.c:3266 cfg80211_inform_bss_frame_data+0x348/0x838 net/wireless/scan.c:3358 ieee80211_bss_info_update+0x5d0/0x944 net/mac80211/scan.c:230 ieee80211_scan_rx+0x450/0x928 net/mac80211/scan.c:364 __ieee80211_rx_handle_packet net/mac80211/rx.c:5427 [inline] ieee80211_rx_list+0x229c/0x3000 net/mac80211/rx.c:5720 ieee80211_rx_napi+0x18c/0x370 net/mac80211/rx.c:5743 ieee80211_rx include/net/mac80211.h:5449 [inline] ieee80211_handle_queued_frames+0xc8/0x17c net/mac80211/main.c:452 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:471 tasklet_action_common+0x1dc/0x278 kernel/softirq.c:-1 tasklet_action+0x68/0x8c kernel/softirq.c:989 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 do_softirq+0x90/0xf8 kernel/softirq.c:546 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:473 local_bh_enable include/linux/bottom_half.h:33 [inline] put_cpu_fpsimd_context arch/arm64/kernel/fpsimd.c:251 [inline] kernel_neon_begin+0x29c/0x400 arch/arm64/kernel/fpsimd.c:1940 class_ksimd_constructor arch/arm64/include/asm/simd.h:48 [inline] poly1305_blocks+0x110/0x204 lib/crypto/arm64/poly1305.h:30 poly1305_update+0x168/0x39c lib/crypto/poly1305.c:59 chacha20poly1305_crypt_sg_inplace+0x6d0/0xc30 lib/crypto/chacha20poly1305.c:304 chacha20poly1305_encrypt_sg_inplace+0x54/0x70 lib/crypto/chacha20poly1305.c:340 encrypt_packet drivers/net/wireguard/send.c:216 [inline] wg_packet_encrypt_worker+0x74c/0x1290 drivers/net/wireguard/send.c:297 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838 irq event stamp: 57877 hardirqs last enabled at (57876): [] kcov_remote_start+0x190/0x560 kernel/kcov.c:911 hardirqs last disabled at (57877): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (57656): [] local_bh_enable include/linux/bottom_half.h:33 [inline] softirqs last enabled at (57656): [] put_cpu_fpsimd_context arch/arm64/kernel/fpsimd.c:251 [inline] softirqs last enabled at (57656): [] kernel_neon_begin+0x294/0x400 arch/arm64/kernel/fpsimd.c:1940 softirqs last disabled at (57657): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: net/wireless/scan.c:513 at cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline], CPU#1: kworker/1:2/865 WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079, CPU#1: kworker/1:2/865 Modules linked in: CPU: 1 UID: 0 PID: 865 Comm: kworker/1:2 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] pc : __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 lr : cfg80211_bss_expire_oldest net/wireless/scan.c:513 [inline] lr : __cfg80211_bss_update+0x1600/0x1608 net/wireless/scan.c:2079 sp : ffff80008ebe7150 x29: ffff80008ebe71a0 x28: 1ffff00011173571 x27: ffff0000f18e0490 x26: dfff800000000000 x25: ffff0000f3310190 x24: 0000000000000001 x23: ffff800088b9a000 x22: ffff0000f3310190 x21: ffff80008ebe7260 x20: ffff0000f3310000 x19: ffff0000f18e0400 x18: 1fffe00035bb1028 x17: ffff800125246000 x16: ffff80008ebe0000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001983c20a x9 : 0000000000000302 x8 : 0000000000000000 x7 : 00000000fffff448 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008605f884 x2 : 0000000000000001 x1 : ffff0000c7aa1d80 x0 : 0000000000000000 Call trace: cfg80211_bss_expire_oldest net/wireless/scan.c:500 [inline] (P) __cfg80211_bss_update+0x1060/0x1608 net/wireless/scan.c:2079 (P) cfg80211_inform_single_bss_data+0x980/0x19dc net/wireless/scan.c:2406 cfg80211_inform_bss_data+0x1ec/0x2d04 net/wireless/scan.c:3266 cfg80211_inform_bss_frame_data+0x348/0x838 net/wireless/scan.c:3358 ieee80211_bss_info_update+0x5d0/0x944 net/mac80211/scan.c:230 ieee80211_scan_rx+0x450/0x928 net/mac80211/scan.c:364 __ieee80211_rx_handle_packet net/mac80211/rx.c:5427 [inline] ieee80211_rx_list+0x229c/0x3000 net/mac80211/rx.c:5720 ieee80211_rx_napi+0x18c/0x370 net/mac80211/rx.c:5743 ieee80211_rx include/net/mac80211.h:5449 [inline] ieee80211_handle_queued_frames+0xc8/0x17c net/mac80211/main.c:452 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:471 tasklet_action_common+0x1dc/0x278 kernel/softirq.c:-1 tasklet_action+0x68/0x8c kernel/softirq.c:989 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 do_softirq+0x90/0xf8 kernel/softirq.c:546 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:473 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:237 [inline] _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:245 spin_unlock_bh include/linux/spinlock.h:407 [inline] ptr_ring_consume_bh include/linux/ptr_ring.h:399 [inline] wg_packet_encrypt_worker+0x120c/0x1290 drivers/net/wireguard/send.c:293 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838 irq event stamp: 58095 hardirqs last enabled at (58094): [] kcov_remote_start+0x190/0x560 kernel/kcov.c:911 hardirqs last disabled at (58095): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (58010): [] spin_unlock_bh include/linux/spinlock.h:407 [inline] softirqs last enabled at (58010): [] ptr_ring_consume_bh include/linux/ptr_ring.h:399 [inline] softirqs last enabled at (58010): [] wg_packet_encrypt_worker+0x120c/0x1290 drivers/net/wireguard/send.c:293 softirqs last disabled at (58011): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]---