------------[ cut here ]------------ WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at hwsim_check_sta_magic drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 [inline], CPU#0: syz.8.642/8639 WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x100c/0x1b10 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2241, CPU#0: syz.8.642/8639 Modules linked in: CPU: 0 UID: 0 PID: 8639 Comm: syz.8.642 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : hwsim_check_sta_magic drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 [inline] pc : mac80211_hwsim_tx+0x100c/0x1b10 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2241 lr : hwsim_check_sta_magic drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 [inline] lr : mac80211_hwsim_tx+0x100c/0x1b10 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2241 sp : ffff8000953c6ba0 x29: ffff8000953c6d00 x28: dfff800000000000 x27: 0000000000000000 x26: 0000000000000000 x25: ffff0000f1de3538 x24: ffff0000f1de7b00 x23: ffff0000fc4cac70 x22: 000000006d537749 x21: 1ffff00012a78db8 x20: dfff800000000000 x19: ffff0000c81a9a00 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 000000000086a892 x13: 0000000000000002 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000016b2 x8 : ffff800095f69000 x7 : 0000000000000000 x6 : 3e2d6c61636f6c26 x5 : ffff0000d60a1632 x4 : 0000000000000000 x3 : ffff800082eb1384 x2 : 0000000000000000 x1 : ffff0000c955d880 x0 : 0000000000000001 Call trace: hwsim_check_sta_magic drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 [inline] (P) mac80211_hwsim_tx+0x100c/0x1b10 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2241 (P) drv_tx net/mac80211/driver-ops.h:38 [inline] ieee80211_tx_frags+0x2f4/0x6d8 net/mac80211/tx.c:1755 __ieee80211_xmit_fast+0x7ac/0x17bc net/mac80211/tx.c:3850 ieee80211_mesh_xmit_fast+0x8e0/0xc84 net/mac80211/mesh.c:823 __ieee80211_subif_start_xmit+0x438/0xfcc net/mac80211/tx.c:4419 ieee80211_subif_start_xmit+0xe8/0x45c net/mac80211/tx.c:4661 __netdev_start_xmit include/linux/netdevice.h:5429 [inline] netdev_start_xmit include/linux/netdevice.h:5438 [inline] xmit_one net/core/dev.c:3937 [inline] dev_hard_start_xmit+0x1dc/0x794 net/core/dev.c:3953 __dev_queue_xmit+0xed4/0x2a9c net/core/dev.c:4926 dev_queue_xmit include/linux/netdevice.h:3461 [inline] packet_xmit+0x6c/0x314 net/packet/af_packet.c:277 packet_snd net/packet/af_packet.c:3113 [inline] packet_sendmsg+0x2eac/0x3de4 net/packet/af_packet.c:3145 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 __sys_sendto+0x250/0x328 net/socket.c:2281 __do_sys_sendto net/socket.c:2288 [inline] __se_sys_sendto net/socket.c:2284 [inline] __arm64_sys_sendto+0xec/0x10c net/socket.c:2284 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x19c/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 irq event stamp: 733 hardirqs last enabled at (732): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] hardirqs last enabled at (732): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221 hardirqs last disabled at (733): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:483 softirqs last enabled at (726): [] __alloc_skb+0x1c0/0x610 net/core/skbuff.c:698 softirqs last disabled at (728): [] local_bh_disable include/linux/bottom_half.h:20 [inline] softirqs last disabled at (728): [] rcu_read_lock_bh include/linux/rcupdate.h:902 [inline] softirqs last disabled at (728): [] __dev_queue_xmit+0x1fc/0x2a9c net/core/dev.c:4844 ---[ end trace 0000000000000000 ]---