------------[ cut here ]------------ WARNING: CPU: 0 PID: 2878 at net/wireless/scan.c:521 cfg80211_bss_expire_oldest net/wireless/scan.c:521 [inline] WARNING: CPU: 0 PID: 2878 at net/wireless/scan.c:521 __cfg80211_bss_update+0x219b/0x21b0 net/wireless/scan.c:1933 Modules linked in: CPU: 0 PID: 2878 Comm: kworker/u4:6 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:cfg80211_bss_expire_oldest net/wireless/scan.c:521 [inline] RIP: 0010:__cfg80211_bss_update+0x219b/0x21b0 net/wireless/scan.c:1933 Code: c7 c1 2c 66 8c 8e 80 e1 07 80 c1 03 38 c1 0f 8c 55 fc ff ff 48 c7 c7 2c 66 8c 8e e8 bf f2 f9 f7 e9 44 fc ff ff e8 b5 66 a1 f7 <0f> 0b 4c 8b 2c 24 e9 95 fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 f3 RSP: 0018:ffffc9000be67318 EFLAGS: 00010293 RAX: ffffffff89e6249b RBX: ffff88807de96400 RCX: ffff88802bca8000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: dffffc0000000000 R08: ffff88805df1b453 R09: 1ffff1100bbe368a R10: dffffc0000000000 R11: ffffed100bbe368b R12: ffff888078328190 R13: ffff888078328190 R14: 0000000000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000000 CR3: 0000000061243000 CR4: 00000000003506f0 Call Trace: cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2985 [inline] cfg80211_inform_bss_frame_data+0xadb/0x1330 net/wireless/scan.c:3016 ieee80211_bss_info_update+0x789/0x9f0 net/mac80211/scan.c:211 ieee80211_rx_bss_info net/mac80211/ibss.c:1124 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1613 [inline] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0 net/mac80211/ibss.c:1642 ieee80211_iface_process_skb net/mac80211/iface.c:1661 [inline] ieee80211_iface_work+0x730/0xc90 net/mac80211/iface.c:1715 cfg80211_wiphy_work+0x228/0x260 net/wireless/core.c:437 process_one_work kernel/workqueue.c:2657 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2734 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2815 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293