------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at net/mac80211/rx.c:5312 ieee80211_rx_list+0x1b7c/0x2e00 net/mac80211/rx.c:5312 Modules linked in: CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.7.0-rc3-syzkaller-00298-g1b8af6552cb7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 RIP: 0010:ieee80211_rx_list+0x1b7c/0x2e00 net/mac80211/rx.c:5312 Code: 4a 59 6c fe 48 85 c0 0f 85 a4 01 00 00 e8 1c b3 89 f7 48 89 df e8 24 4a 6c fe e8 0f b3 89 f7 e9 45 e9 ff ff e8 05 b3 89 f7 90 <0f> 0b 90 e9 4c e9 ff ff e8 f7 b2 89 f7 66 81 e3 fc 00 bf a4 00 00 RSP: 0018:ffffc90000007c40 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89fdbe51 RDX: ffffffff8cc95900 RSI: ffffffff89fdd73b RDI: 0000000000000001 RBP: ffff8880774c9a00 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807e883068 R13: ffff8880774c9ad8 R14: ffff88807e880e20 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f63749c2fe8 CR3: 00000000347fa000 CR4: 0000000000350ef0 Call Trace: ieee80211_rx_napi+0xdd/0x400 net/mac80211/rx.c:5422 ieee80211_rx include/net/mac80211.h:4973 [inline] ieee80211_tasklet_handler+0xd6/0x130 net/mac80211/main.c:318 tasklet_action_common.constprop.0+0x242/0x3d0 kernel/softirq.c:780 __do_softirq+0x21a/0x8de kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:72 [inline] RIP: 0010:acpi_safe_halt+0x1b/0x20 drivers/acpi/processor_idle.c:113 Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c eb 07 0f 00 2d 77 35 ba 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f RSP: 0018:ffffffff8cc07d68 EFLAGS: 00000246 RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a7fe837 RDX: 0000000000000001 RSI: ffff8881400bc000 RDI: ffff8881400bc064 RBP: ffff8881400bc064 R08: 0000000000000001 R09: ffffed1017306dbd R10: ffff8880b9836deb R11: 0000000000000000 R12: ffff8880163e8800 R13: ffffffff8db1c9e0 R14: 0000000000000000 R15: 0000000000000000 acpi_idle_enter+0xc5/0x160 drivers/acpi/processor_idle.c:707 cpuidle_enter_state+0x83/0x500 drivers/cpuidle/cpuidle.c:267 cpuidle_enter+0x4e/0xa0 drivers/cpuidle/cpuidle.c:388 cpuidle_idle_call kernel/sched/idle.c:215 [inline] do_idle+0x319/0x400 kernel/sched/idle.c:282 cpu_startup_entry+0x50/0x60 kernel/sched/idle.c:380 rest_init+0x16f/0x2b0 init/main.c:730 arch_call_rest_init+0x13/0x30 init/main.c:827 start_kernel+0x39f/0x480 init/main.c:1072 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:555 x86_64_start_kernel+0xb2/0xc0 arch/x86/kernel/head64.c:536 secondary_startup_64_no_verify+0x166/0x16b ---------------- Code disassembly (best guess): 0: ed in (%dx),%eax 1: c3 ret 2: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) 9: 00 00 00 00 d: 66 90 xchg %ax,%ax f: 65 48 8b 04 25 c0 bc mov %gs:0x3bcc0,%rax 16: 03 00 18: 48 8b 00 mov (%rax),%rax 1b: a8 08 test $0x8,%al 1d: 75 0c jne 0x2b 1f: eb 07 jmp 0x28 21: 0f 00 2d 77 35 ba 00 verw 0xba3577(%rip) # 0xba359f 28: fb sti 29: f4 hlt * 2a: fa cli <-- trapping instruction 2b: c3 ret 2c: 0f 1f 00 nopl (%rax) 2f: 0f b6 47 08 movzbl 0x8(%rdi),%eax 33: 3c 01 cmp $0x1,%al 35: 74 0b je 0x42 37: 3c 02 cmp $0x2,%al 39: 74 05 je 0x40 3b: 8b 7f 04 mov 0x4(%rdi),%edi 3e: eb 9f jmp 0xffffffdf