------------[ cut here ]------------
wlan1: Failed check-sdata-in-driver check, flags: 0x0
WARNING: net/mac80211/driver-ops.h:1723 at drv_can_activate_links net/mac80211/driver-ops.h:1723 [inline], CPU#0: kworker/u8:20/6723
WARNING: net/mac80211/driver-ops.h:1723 at ieee80211_set_active_links+0x4a0/0x8a0 net/mac80211/link.c:652, CPU#0: kworker/u8:20/6723
Modules linked in:
CPU: 0 UID: 0 PID: 6723 Comm: kworker/u8:20 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:drv_can_activate_links net/mac80211/driver-ops.h:1723 [inline]
RIP: 0010:ieee80211_set_active_links+0x4ec/0x8a0 net/mac80211/link.c:652
Code: 01 00 00 48 85 c0 49 8d 87 c8 ec ff ff 4c 0f 44 e8 41 0f b6 04 1e 84 c0 0f 85 2d 01 00 00 41 8b 14 24 48 8b 7c 24 10 4c 89 ee <67> 48 0f b9 3a e9 20 fd ff ff e8 f5 a2 68 f6 90 0f 0b 90 e9 87 fd
RSP: 0018:ffffc9000392f928 EFLAGS: 00010246
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802b840000
RDX: 0000000000000000 RSI: ffff8880290cc120 RDI: ffffffff90ada290
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000002
R10: 0000000000000010 R11: 0000000000000000 R12: ffff8880290cd928
R13: ffff8880290cc120 R14: 1ffff11005219b25 R15: ffff8880290cec70
FS:  0000000000000000(0000) GS:ffff88812488a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c37f77d CR3: 000000007ad22000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ieee80211_if_parse_active_links+0xe5/0x150 net/mac80211/debugfs_netdev.c:732
 wiphy_locked_debugfs_write_work+0xdd/0x120 net/wireless/debugfs.c:248
 cfg80211_wiphy_work+0x29e/0x420 net/wireless/core.c:541
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	01 00                	add    %eax,(%rax)
   2:	00 48 85             	add    %cl,-0x7b(%rax)
   5:	c0 49 8d 87          	rorb   $0x87,-0x73(%rcx)
   9:	c8 ec ff ff          	enter  $0xffec,$0xff
   d:	4c 0f 44 e8          	cmove  %rax,%r13
  11:	41 0f b6 04 1e       	movzbl (%r14,%rbx,1),%eax
  16:	84 c0                	test   %al,%al
  18:	0f 85 2d 01 00 00    	jne    0x14b
  1e:	41 8b 14 24          	mov    (%r12),%edx
  22:	48 8b 7c 24 10       	mov    0x10(%rsp),%rdi
  27:	4c 89 ee             	mov    %r13,%rsi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	e9 20 fd ff ff       	jmp    0xfffffd54
  34:	e8 f5 a2 68 f6       	call   0xf668a32e
  39:	90                   	nop
  3a:	0f 0b                	ud2
  3c:	90                   	nop
  3d:	e9                   	.byte 0xe9
  3e:	87 fd                	xchg   %edi,%ebp