syzbot

 sign-in | mailing list | source | docs
🐞 Open [904]
🐞 Fixed [143]
🐞 Invalid [1076]
⬇ Missing Backports [73]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

WARNING in ieee80211_link_release_channel

Status: upstream: reported C repro on 2025/08/02 09:20
Reported-by: syzbot+15b80e0eb09fd5403e49@syzkaller.appspotmail.com
First crash: 264d, last: 1d01h
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2026/04/09 upstream (ToT) 7f87a5ea75f0 C Failed due to an error; will retry later
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in ieee80211_link_release_channel wireless -1 syz done done 3 923d 963d 0/29 auto-obsoleted due to no activity on 2024/01/21 00:13
linux-6.6 WARNING in ieee80211_link_release_channel -1 91 5d19h 261d 0/2 upstream: reported on 2025/08/04 22:09

Sample crash report:
netlink: 'syz.0.18': attribute type 10 has an invalid length.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4474 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x16c/0x19c net/mac80211/chan.c:2017
Modules linked in:
CPU: 1 PID: 4474 Comm: syz.0.18 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ieee80211_link_release_channel+0x16c/0x19c net/mac80211/chan.c:2017
lr : ieee80211_link_release_channel+0x16c/0x19c net/mac80211/chan.c:2017
sp : ffff800021387100
x29: ffff800021387100 x28: ffff0000ce965c80 x27: dfff800000000000
x26: 1fffe00019d2cd68 x25: 1fffe0001a511000 x24: ffff0000ce966b42
x23: 1fffe00019d2cab5 x22: dfff800000000000 x21: 0000000000000000
x20: ffff0000ce966228 x19: ffff0000ce9655a8 x18: 0000000000000000
x17: ffff80001835a000 x16: ffff8000082d7db8 x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff00004270dd0 x12: 0000000000ff0100
x11: ff0080001135d160 x10: 0000000000000000 x9 : ffff80001135d160
x8 : ffff0000cf670000 x7 : ffff80001135d060 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d05a8
x2 : ffff0000cf670000 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ieee80211_link_release_channel+0x16c/0x19c net/mac80211/chan.c:2017
 ieee80211_link_stop+0x9c/0xc4 net/mac80211/link.c:72
 ieee80211_teardown_sdata net/mac80211/iface.c:855 [inline]
 ieee80211_if_change_type+0x1d8/0xc68 net/mac80211/iface.c:1995
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 5968
hardirqs last  enabled at (5967): [<ffff8000081fa554>] __cancel_work_timer+0x2c4/0x458 kernel/workqueue.c:3156
hardirqs last disabled at (5968): [<ffff800011a33e5c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4586): [<ffff800011184ebc>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (4586): [<ffff800011184ebc>] cfg80211_mgmt_registrations_update+0x444/0x840 net/wireless/mlme.c:509
softirqs last disabled at (4584): [<ffff800011184b88>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (4584): [<ffff800011184b88>] cfg80211_mgmt_registrations_update+0x110/0x840 net/wireless/mlme.c:482
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
wlan1: Failed check-sdata-in-driver check, flags: 0x0
WARNING: CPU: 1 PID: 4474 at net/mac80211/driver-ops.c:315 drv_unassign_vif_chanctx+0x358/0x638 net/mac80211/driver-ops.c:315
Modules linked in:
CPU: 1 PID: 4474 Comm: syz.0.18 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : drv_unassign_vif_chanctx+0x358/0x638 net/mac80211/driver-ops.c:315
lr : drv_unassign_vif_chanctx+0x358/0x638 net/mac80211/driver-ops.c:315
sp : ffff800021386fb0
x29: ffff800021386fb0 x28: 0000000000000000 x27: ffff0000ce964c80
x26: ffff0000ce966668 x25: dfff800000000000 x24: ffff0000ce9667b8
x23: 0000000000000000 x22: ffff0000d47c5000 x21: ffff0000ce9667b8
x20: ffff800017bea000 x19: ffff0000ce964c80 x18: 0000000000000000
x17: 0000000000000000 x16: ffff8000082d92bc x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff00004270d44 x12: 0000000000ff0100
x11: ff00800008194250 x10: 0000000000000000 x9 : 1b6fd392d62a8600
x8 : 1b6fd392d62a8600 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021386a38 x4 : ffff800015304cc0 x3 : ffff800008319678
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 drv_unassign_vif_chanctx+0x358/0x638 net/mac80211/driver-ops.c:315
 ieee80211_assign_link_chanctx+0x140/0x82c net/mac80211/chan.c:868
 __ieee80211_link_release_channel+0x29c/0x55c net/mac80211/chan.c:1799
 ieee80211_link_release_channel+0x130/0x19c net/mac80211/chan.c:2018
 ieee80211_link_stop+0x9c/0xc4 net/mac80211/link.c:72
 ieee80211_teardown_sdata net/mac80211/iface.c:855 [inline]
 ieee80211_if_change_type+0x1d8/0xc68 net/mac80211/iface.c:1995
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 6122
hardirqs last  enabled at (6121): [<ffff80000830fac4>] __up_console_sem+0xb4/0xfc kernel/printk/printk.c:261
hardirqs last disabled at (6122): [<ffff800011a33e5c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (6116): [<ffff8000081ac394>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (6116): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (6107): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
wlan1: Failed check-sdata-in-driver check, flags: 0x0
WARNING: CPU: 1 PID: 4474 at net/mac80211/driver-ops.h:156 drv_vif_cfg_changed net/mac80211/driver-ops.h:156 [inline]
WARNING: CPU: 1 PID: 4474 at net/mac80211/driver-ops.h:156 ieee80211_vif_cfg_change_notify+0x21c/0x25c net/mac80211/main.c:275
Modules linked in:
CPU: 1 PID: 4474 Comm: syz.0.18 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : drv_vif_cfg_changed net/mac80211/driver-ops.h:156 [inline]
pc : ieee80211_vif_cfg_change_notify+0x21c/0x25c net/mac80211/main.c:275
lr : drv_vif_cfg_changed net/mac80211/driver-ops.h:156 [inline]
lr : ieee80211_vif_cfg_change_notify+0x21c/0x25c net/mac80211/main.c:275
sp : ffff800021386fb0
x29: ffff800021386fb0 x28: ffff800015220000 x27: ffff800015220384
x26: ffff0000d47c5020 x25: 0000000000000000 x24: dfff800000000000
x23: 0000000000000000 x22: ffff0000ce966760 x21: ffff0000d2888e80
x20: ffff800017bea000 x19: ffff0000ce964c80 x18: ffff800011b9bf60
x17: 1fffe00033eaa57e x16: ffff8000082d92bc x15: ffff80001521d000
x14: 0000000000000001 x13: 1fffe00019a0d490 x12: 0000000000000000
x11: 0000000000000000 x10: ffff600019a0d491 x9 : 1b6fd392d62a8600
x8 : 1b6fd392d62a8600 x7 : ffff800008257984 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff8000082467b0
x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001
Call trace:
 drv_vif_cfg_changed net/mac80211/driver-ops.h:156 [inline]
 ieee80211_vif_cfg_change_notify+0x21c/0x25c net/mac80211/main.c:275
 ieee80211_assign_link_chanctx+0x6e8/0x82c net/mac80211/chan.c:905
 __ieee80211_link_release_channel+0x29c/0x55c net/mac80211/chan.c:1799
 ieee80211_link_release_channel+0x130/0x19c net/mac80211/chan.c:2018
 ieee80211_link_stop+0x9c/0xc4 net/mac80211/link.c:72
 ieee80211_teardown_sdata net/mac80211/iface.c:855 [inline]
 ieee80211_if_change_type+0x1d8/0xc68 net/mac80211/iface.c:1995
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 6238
hardirqs last  enabled at (6237): [<ffff800008257a18>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1374 [inline]
hardirqs last  enabled at (6237): [<ffff800008257a18>] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:5004
hardirqs last disabled at (6238): [<ffff800011a33e5c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (6206): [<ffff8000081ac394>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (6206): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (6125): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4474 at net/mac80211/iface.c:113 __ieee80211_recalc_idle net/mac80211/iface.c:113 [inline]
WARNING: CPU: 1 PID: 4474 at net/mac80211/iface.c:113 ieee80211_recalc_idle+0x298/0x338 net/mac80211/iface.c:149
Modules linked in:
CPU: 1 PID: 4474 Comm: syz.0.18 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __ieee80211_recalc_idle net/mac80211/iface.c:113 [inline]
pc : ieee80211_recalc_idle+0x298/0x338 net/mac80211/iface.c:149
lr : __ieee80211_recalc_idle net/mac80211/iface.c:113 [inline]
lr : ieee80211_recalc_idle+0x298/0x338 net/mac80211/iface.c:149
sp : ffff800021386fa0
x29: ffff800021386fa0 x28: 0000000000000000 x27: ffff800015220000
x26: ffff0000d47c5020 x25: 0000000000000000 x24: dfff800000000000
x23: 000000000000096c x22: 1fffe0001a5111d7 x21: dfff800000000000
x20: 0000000000000000 x19: ffff0000d2888e80 x18: ffff800011b9bf60
x17: 1fffe00033eaa57e x16: ffff8000082d7db8 x15: 0000000000000000
x14: 0000000000000007 x13: 1ffff00002a44071 x12: 0000000000ff0100
x11: ff00800011295aec x10: 0000000000000000 x9 : ffff800011295aec
x8 : ffff0000cf670000 x7 : ffff800011235704 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 __ieee80211_recalc_idle net/mac80211/iface.c:113 [inline]
 ieee80211_recalc_idle+0x298/0x338 net/mac80211/iface.c:149
 ieee80211_del_chanctx+0x35c/0x70c net/mac80211/chan.c:750
 ieee80211_free_chanctx+0x250/0x334 net/mac80211/chan.c:761
 __ieee80211_link_release_channel+0x3d4/0x55c net/mac80211/chan.c:1801
 ieee80211_link_release_channel+0x130/0x19c net/mac80211/chan.c:2018
 ieee80211_link_stop+0x9c/0xc4 net/mac80211/link.c:72
 ieee80211_teardown_sdata net/mac80211/iface.c:855 [inline]
 ieee80211_if_change_type+0x1d8/0xc68 net/mac80211/iface.c:1995
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 6266
hardirqs last  enabled at (6265): [<ffff800011a35e04>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (6265): [<ffff800011a35e04>] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (6266): [<ffff800011a33e5c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (6260): [<ffff8000081ac394>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (6260): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (6241): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
ODEBUG: init active (active state 0) object type: timer_list hint: 0x0
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 debug_print_object lib/debugobjects.c:515 [inline]
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
Modules linked in:
CPU: 1 PID: 4474 Comm: syz.0.18 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : debug_print_object lib/debugobjects.c:515 [inline]
pc : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
lr : debug_print_object lib/debugobjects.c:515 [inline]
lr : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
sp : ffff800021386fd0
x29: ffff800021386fd0 x28: dfff800000000000 x27: ffff0000d4dcb560
x26: ffff0000ce9659f8 x25: 0000000000000000 x24: 0000000000000003
x23: ffff800011bbb020 x22: ffff80001208c220 x21: 0000000000000000
x20: ffff800011bbb020 x19: ffff0000ce9659f8 x18: ffff800011b9bf60
x17: 6e6968207473696c x16: ffff8000082d92bc x15: 0000000000000000
x14: 0000000000000001 x13: 1fffe00033eaa5a3 x12: 0000000000ff0100
x11: ff00800008194250 x10: 0000000000000000 x9 : 1b6fd392d62a8600
x8 : 1b6fd392d62a8600 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021386a58 x4 : ffff800015304cc0 x3 : ffff800008538848
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 debug_print_object lib/debugobjects.c:515 [inline]
 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 debug_timer_init kernel/time/timer.c:777 [inline]
 debug_init kernel/time/timer.c:825 [inline]
 init_timer_key+0x54/0x498 kernel/time/timer.c:869
 ieee80211_sta_setup_sdata+0x2c8/0x5c4 net/mac80211/mlme.c:6522
 ieee80211_setup_sdata+0x7dc/0xa54 net/mac80211/iface.c:1844
 ieee80211_if_change_type+0x1e4/0xc68 net/mac80211/iface.c:1996
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 6572
hardirqs last  enabled at (6571): [<ffff80000830fac4>] __up_console_sem+0xb4/0xfc kernel/printk/printk.c:261
hardirqs last disabled at (6572): [<ffff800011a33e5c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (6518): [<ffff8000081ac394>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (6518): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (6269): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 1 PID: 4474 Comm: syz.0.18 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
Call trace:
 dump_backtrace+0x1c0/0x1ec arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack+0x30/0x40 lib/dump_stack.c:88
 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106
 dump_stack+0x1c/0x5c lib/dump_stack.c:113
 assign_lock_key+0x230/0x264 kernel/locking/lockdep.c:974
 register_lock_class+0x1ac/0x694 kernel/locking/lockdep.c:1287
 __lock_acquire+0x164/0x6800 kernel/locking/lockdep.c:4928
 lock_acquire+0x20c/0x63c kernel/locking/lockdep.c:5662
 __timer_delete_sync+0xa0/0x21c kernel/time/timer.c:1556
 timer_delete_sync kernel/time/timer.c:1629 [inline]
 del_timer_sync include/linux/timer.h:200 [inline]
 timer_fixup_init+0x40/0x70 kernel/time/timer.c:694
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 debug_timer_init kernel/time/timer.c:777 [inline]
 debug_init kernel/time/timer.c:825 [inline]
 init_timer_key+0x54/0x498 kernel/time/timer.c:869
 ieee80211_sta_setup_sdata+0x2c8/0x5c4 net/mac80211/mlme.c:6522
 ieee80211_setup_sdata+0x7dc/0xa54 net/mac80211/iface.c:1844
 ieee80211_if_change_type+0x1e4/0xc68 net/mac80211/iface.c:1996
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
------------[ cut here ]------------
ODEBUG: init active (active state 0) object type: timer_list hint: 0x0
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 debug_print_object lib/debugobjects.c:515 [inline]
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
Modules linked in:
CPU: 1 PID: 4474 Comm: syz.0.18 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : debug_print_object lib/debugobjects.c:515 [inline]
pc : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
lr : debug_print_object lib/debugobjects.c:515 [inline]
lr : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
sp : ffff800021386f40
x29: ffff800021386f40 x28: dfff800000000000 x27: ffff0000d4dcb560
x26: ffff0000ce9659f8 x25: 0000000000000000 x24: 0000000000000003
x23: ffff800011bbb020 x22: ffff80001208c220 x21: 0000000000000000
x20: ffff800011bbb020 x19: ffff0000ce9659f8 x18: ffff800011b9bf60
x17: 6e6968207473696c x16: ffff80000804309c x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff00004270d48 x12: 0000000000ff0100
x11: ff00800008194250 x10: 0000000000000000 x9 : 1b6fd392d62a8600
x8 : 1b6fd392d62a8600 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000213869d8 x4 : ffff800015304cc0 x3 : ffff80000a890350
x2 : ffff00019f552d10 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 debug_print_object lib/debugobjects.c:515 [inline]
 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 debug_timer_init kernel/time/timer.c:777 [inline]
 debug_init kernel/time/timer.c:825 [inline]
 init_timer_key+0x54/0x498 kernel/time/timer.c:869
 ieee80211_sta_setup_sdata+0x2c8/0x5c4 net/mac80211/mlme.c:6522
 ieee80211_setup_sdata+0x7dc/0xa54 net/mac80211/iface.c:1844
 ieee80211_if_change_type+0x1e4/0xc68 net/mac80211/iface.c:1996
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 6634
hardirqs last  enabled at (6633): [<ffff800011a35e04>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (6633): [<ffff800011a35e04>] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (6634): [<ffff8000083b4104>] __timer_delete_sync+0x78/0x21c kernel/time/timer.c:1555
softirqs last  enabled at (6628): [<ffff8000081ac394>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (6628): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (6575): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
ODEBUG: init active (active state 0) object type: timer_list hint: 0x0
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 debug_print_object lib/debugobjects.c:515 [inline]
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
Modules linked in:
CPU: 1 PID: 4474 Comm: syz.0.18 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : debug_print_object lib/debugobjects.c:515 [inline]
pc : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
lr : debug_print_object lib/debugobjects.c:515 [inline]
lr : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
sp : ffff800021386eb0
x29: ffff800021386eb0 x28: dfff800000000000 x27: ffff0000d4dcb560
x26: ffff0000ce9659f8 x25: 0000000000000000 x24: 0000000000000003
x23: ffff800011bbb020 x22: ffff80001208c220 x21: 0000000000000000
x20: ffff800011bbb020 x19: ffff0000ce9659f8 x18: ffff800011b9bf60
x17: 6e6968207473696c x16: ffff80000804309c x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff00004270d34 x12: 0000000000ff0100
x11: ff00800008194250 x10: 0000000000000000 x9 : 1b6fd392d62a8600
x8 : 1b6fd392d62a8600 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021386938 x4 : ffff800015304cc0 x3 : ffff80000a890350
x2 : ffff00019f552d10 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 debug_print_object lib/debugobjects.c:515 [inline]
 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 debug_timer_init kernel/time/timer.c:777 [inline]
 debug_init kernel/time/timer.c:825 [inline]
 init_timer_key+0x54/0x498 kernel/time/timer.c:869
 ieee80211_sta_setup_sdata+0x2c8/0x5c4 net/mac80211/mlme.c:6522
 ieee80211_setup_sdata+0x7dc/0xa54 net/mac80211/iface.c:1844
 ieee80211_if_change_type+0x1e4/0xc68 net/mac80211/iface.c:1996
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 6634
hardirqs last  enabled at (6633): [<ffff800011a35e04>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (6633): [<ffff800011a35e04>] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (6634): [<ffff8000083b4104>] __timer_delete_sync+0x78/0x21c kernel/time/timer.c:1555
softirqs last  enabled at (6628): [<ffff8000081ac394>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (6628): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (6575): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
ODEBUG: init active (active state 0) object type: timer_list hint: 0x0
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 debug_print_object lib/debugobjects.c:515 [inline]
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
Modules linked in:
CPU: 1 PID: 4474 Comm: syz.0.18 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : debug_print_object lib/debugobjects.c:515 [inline]
pc : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
lr : debug_print_object lib/debugobjects.c:515 [inline]
lr : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
sp : ffff800021386e20
x29: ffff800021386e20 x28: dfff800000000000 x27: ffff0000d4dcb560
x26: ffff0000ce9659f8 x25: 0000000000000000 x24: 0000000000000003
x23: ffff800011bbb020 x22: ffff80001208c220 x21: 0000000000000000
x20: ffff800011bbb020 x19: ffff0000ce9659f8 x18: ffff800011b9bf60
x17: 6e6968207473696c x16: ffff80000804309c x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff00004270d24 x12: 0000000000ff0100
x11: ff00800008194250 x10: 0000000000000000 x9 : 1b6fd392d62a8600
x8 : 1b6fd392d62a8600 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000213868b8 x4 : ffff800015304cc0 x3 : ffff80000a890350
x2 : ffff00019f552d10 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 debug_print_object lib/debugobjects.c:515 [inline]
 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 debug_timer_init kernel/time/timer.c:777 [inline]
 debug_init kernel/time/timer.c:825 [inline]
 init_timer_key+0x54/0x498 kernel/time/timer.c:869
 ieee80211_sta_setup_sdata+0x2c8/0x5c4 net/mac80211/mlme.c:6522
 ieee80211_setup_sdata+0x7dc/0xa54 net/mac80211/iface.c:1844
 ieee80211_if_change_type+0x1e4/0xc68 net/mac80211/iface.c:1996
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 6634
hardirqs last  enabled at (6633): [<ffff800011a35e04>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (6633): [<ffff800011a35e04>] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (6634): [<ffff8000083b4104>] __timer_delete_sync+0x78/0x21c kernel/time/timer.c:1555
softirqs last  enabled at (6628): [<ffff8000081ac394>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (6628): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (6575): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
ODEBUG: init active (active state 0) object type: timer_list hint: 0x0
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 debug_print_object lib/debugobjects.c:515 [inline]
WARNING: CPU: 1 PID: 4474 at lib/debugobjects.c:518 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
Modules linked in:
CPU: 1 PID: 4474 Comm: syz.0.18 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : debug_print_object lib/debugobjects.c:515 [inline]
pc : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
lr : debug_print_object lib/debugobjects.c:515 [inline]
lr : __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
sp : ffff800021386d90
x29: ffff800021386d90 x28: dfff800000000000 x27: ffff0000d4dcb560
x26: ffff0000ce9659f8 x25: 0000000000000000 x24: 0000000000000003
x23: ffff800011bbb020 x22: ffff80001208c220 x21: 0000000000000000
x20: ffff800011bbb020 x19: ffff0000ce9659f8 x18: ffff800011b9bf60
x17: 1fffe00033eaa57e x16: ffff80000804309c x15: ffff80001521d000
x14: 0000000000000001 x13: 1fffe00019a0d490 x12: 0000000000000000
x11: 0000000000000000 x10: ffff600019a0d491 x9 : 1b6fd392d62a8600
x8 : 1b6fd392d62a8600 x7 : 0000000000000004 x6 : ffff800008257984
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082467b0
x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001
Call trace:
 debug_print_object lib/debugobjects.c:515 [inline]
 __debug_object_init+0x2c4/0x42c lib/debugobjects.c:643
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 timer_fixup_init+0x50/0x70 kernel/time/timer.c:695
 debug_object_fixup lib/debugobjects.c:531 [inline]
 __debug_object_init+0x30c/0x42c lib/debugobjects.c:646
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 debug_timer_init kernel/time/timer.c:777 [inline]
 debug_init kernel/time/timer.c:825 [inline]
 init_timer_key+0x54/0x498 kernel/time/timer.c:869
 ieee80211_sta_setup_sdata+0x2c8/0x5c4 net/mac80211/mlme.c:6522
 ieee80211_setup_sdata+0x7dc/0xa54 net/mac80211/iface.c:1844
 ieee80211_if_change_type+0x1e4/0xc68 net/mac80211/iface.c:1996
 ieee80211_change_iface+0x68/0x400 net/mac80211/cfg.c:217
 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline]
 cfg80211_change_iface+0x718/0xf24 net/wireless/util.c:1209
 nl80211_set_interface+0x428/0x6fc net/wireless/nl80211.c:4240
 genl_family_rcv_msg_doit+0x204/0x308 net/netlink/genetlink.c:756
 genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]
 genl_rcv_msg+0x44c/0x640 net/netlink/genetlink.c:850
 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511
 genl_rcv+0x38/0x50 net/netlink/genetlink.c:861
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x5c8/0x938 net/socket.c:2518
 ___sys_sendmsg net/socket.c:2572 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2601
 __do_sys_sendmsg net/socket.c:2610 [inline]
 __se_sys_sendmsg net/socket.c:2608 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2608
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 6634
hardirqs last  enabled at (6633): [<ffff800011a35e04>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (6633): [<ffff800011a35e04>] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (6634): [<ffff8000083b4104>] __timer_delete_sync+0x78/0x21c kernel/time/timer.c:1555
softirqs last  enabled at (6628): [<ffff8000081ac394>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (6628): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (6575): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---

Crashes (107):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/26 09:07 linux-6.1.y 1989cd3d56e2 c6143aac .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/04/15 16:52 linux-6.1.y 8e8fc038cad5 c441f497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/04/08 04:22 linux-6.1.y 1989cd3d56e2 2c961e87 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/04/07 17:23 linux-6.1.y 1989cd3d56e2 628666c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/04/02 02:06 linux-6.1.y 1989cd3d56e2 0cb124d5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/03/27 19:55 linux-6.1.y 1989cd3d56e2 74a13a23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/03/18 09:20 linux-6.1.y f2ddafa93a25 c8810548 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/03/12 19:45 linux-6.1.y f2ddafa93a25 4efadf07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/03/10 05:56 linux-6.1.y f2ddafa93a25 6972f302 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/03/09 21:29 linux-6.1.y f2ddafa93a25 176bead5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/03/08 00:51 linux-6.1.y f2ddafa93a25 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/01/20 03:52 linux-6.1.y cd9b81672742 572effc1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/01/15 21:06 linux-6.1.y bec0e10ee67e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/01/15 08:12 linux-6.1.y bec0e10ee67e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/12/25 01:13 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/12/20 10:50 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/12/20 04:49 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/11/27 23:09 linux-6.1.y f6e38ae624cf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/11/24 18:58 linux-6.1.y f6e38ae624cf bf6fe8fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/11/21 11:35 linux-6.1.y f6e38ae624cf 280ea308 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/11/21 02:58 linux-6.1.y f6e38ae624cf 2cc4c24a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/11/19 16:35 linux-6.1.y f6e38ae624cf 26ee5237 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/11/10 11:56 linux-6.1.y f6e38ae624cf 4e1406b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/11/03 12:59 linux-6.1.y f6e38ae624cf 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/10/27 18:43 linux-6.1.y 8e6e2188d949 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/10/24 15:38 linux-6.1.y 8e6e2188d949 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/10/23 07:36 linux-6.1.y 8e6e2188d949 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2025/08/02 09:19 linux-6.1.y 3594f306da12 7368264b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in ieee80211_link_release_channel
2026/04/22 13:55 linux-6.1.y 7c87defbd336 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/04/21 08:20 linux-6.1.y 7c87defbd336 3f2e655b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/04/16 15:56 linux-6.1.y 8e8fc038cad5 4743f87d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/04/09 06:24 linux-6.1.y 1989cd3d56e2 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/04/07 15:55 linux-6.1.y 1989cd3d56e2 628666c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/04/06 19:01 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/03/31 00:16 linux-6.1.y 1989cd3d56e2 d0af506e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/03/26 04:01 linux-6.1.y 1989cd3d56e2 c6143aac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/03/24 04:46 linux-6.1.y f2ddafa93a25 baf8bf12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/03/10 20:56 linux-6.1.y f2ddafa93a25 4683d576 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/03/07 20:58 linux-6.1.y f2ddafa93a25 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/02/07 06:27 linux-6.1.y 0182cb5b74ee f20fc9f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/02/07 04:53 linux-6.1.y 0182cb5b74ee f20fc9f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/01/24 18:49 linux-6.1.y cd9b81672742 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/01/24 06:26 linux-6.1.y cd9b81672742 4f25b9b4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/01/21 23:33 linux-6.1.y cd9b81672742 8fc37797 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2026/01/20 19:07 linux-6.1.y cd9b81672742 06648d9c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2025/12/01 11:25 linux-6.1.y f6e38ae624cf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2025/11/25 07:40 linux-6.1.y f6e38ae624cf 64219f15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2025/11/24 20:04 linux-6.1.y f6e38ae624cf bf6fe8fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2025/11/22 01:22 linux-6.1.y f6e38ae624cf 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2025/11/05 14:23 linux-6.1.y f6e38ae624cf a6c9c731 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
2025/10/23 02:49 linux-6.1.y 8e6e2188d949 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in ieee80211_link_release_channel
* Struck through repros no longer work on HEAD.