------------[ cut here ]------------ WARNING: CPU: 1 PID: 23 at net/wireless/scan.c:1777 __list_del_entry_valid include/linux/list.h:124 [inline] WARNING: CPU: 1 PID: 23 at net/wireless/scan.c:1777 __list_del_entry include/linux/list.h:215 [inline] WARNING: CPU: 1 PID: 23 at net/wireless/scan.c:1777 list_del include/linux/list.h:229 [inline] WARNING: CPU: 1 PID: 23 at net/wireless/scan.c:1777 cfg80211_combine_bsses net/wireless/scan.c:1778 [inline] WARNING: CPU: 1 PID: 23 at net/wireless/scan.c:1777 __cfg80211_bss_update+0x1550/0x1ad8 net/wireless/scan.c:2018 Modules linked in: CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.15.0-rc7-syzkaller-00085-gd7fa1af5b33e #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : cfg80211_combine_bsses include/linux/list.h:124 [inline] pc : __cfg80211_bss_update+0x1550/0x1ad8 net/wireless/scan.c:2018 lr : __cfg80211_bss_update+0x1384/0x1ad8 net/wireless/scan.c:-1 sp : ffff800097716ee0 x29: ffff800097716fa0 x28: 0000000000000000 x27: 1fffe0001ae32602 x26: ffff0000d7193000 x25: dfff800000000000 x24: 0000000000000001 x23: ffff0000d0fb01a0 x22: ffff0000d7193010 x21: ffff0000cf3e0010 x20: ffff0000d7193010 x19: ffff0000cf3e0000 x18: 0000000000000000 x17: ffff0001fea8b870 x16: ffff80008adbe9e4 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000030000 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d7193410 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000cf3e00d0 x4 : ffff800097717150 x3 : ffff0000cf3e0040 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000d7193010 Call trace: __list_del_entry_valid include/linux/list.h:124 [inline] (P) __list_del_entry include/linux/list.h:215 [inline] (P) list_del include/linux/list.h:229 [inline] (P) cfg80211_combine_bsses net/wireless/scan.c:1778 [inline] (P) __cfg80211_bss_update+0x1550/0x1ad8 net/wireless/scan.c:2018 (P) cfg80211_inform_single_bss_data+0x964/0x1744 net/wireless/scan.c:2363 cfg80211_inform_bss_data+0x1ac/0x2fc4 net/wireless/scan.c:3222 cfg80211_inform_bss_frame_data+0x2f0/0x6dc net/wireless/scan.c:3317 ieee80211_bss_info_update+0x640/0x8b8 net/mac80211/scan.c:226 ieee80211_scan_rx+0x474/0x8bc net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5179 [inline] ieee80211_rx_list+0x1be0/0x25c4 net/mac80211/rx.c:5416 ieee80211_rx_napi+0x164/0x338 net/mac80211/rx.c:5439 ieee80211_rx include/net/mac80211.h:5179 [inline] ieee80211_handle_queued_frames+0xe8/0x17c net/mac80211/main.c:441 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:460 tasklet_action_common+0x2fc/0x3ec kernel/softirq.c:829 tasklet_action+0x68/0x8c kernel/softirq.c:855 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:968 smpboot_thread_fn+0x4d8/0x9cc kernel/smpboot.c:164 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 irq event stamp: 1329275 hardirqs last enabled at (1329274): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (1329274): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (1329275): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (1329260): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (1329260): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (1329265): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:968 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 23 at net/wireless/scan.c:1775 cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] WARNING: CPU: 1 PID: 23 at net/wireless/scan.c:1775 __cfg80211_bss_update+0x1540/0x1ad8 net/wireless/scan.c:2018 Modules linked in: CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W 6.15.0-rc7-syzkaller-00085-gd7fa1af5b33e #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] pc : __cfg80211_bss_update+0x1540/0x1ad8 net/wireless/scan.c:2018 lr : cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] lr : __cfg80211_bss_update+0x1540/0x1ad8 net/wireless/scan.c:2018 sp : ffff800097716ee0 x29: ffff800097716fa0 x28: 0000000000000000 x27: ffff0000d0fb0000 x26: ffff0000d7193400 x25: dfff800000000000 x24: 0000000000000002 x23: ffff0000d0fb01a0 x22: ffff0000cfacc01d x21: ffff0000cf3e0010 x20: 1fffe0001ae32691 x19: ffff0000cf3e0000 x18: 0000000000000000 x17: ffff0001fea8b870 x16: ffff80008adbe9e4 x15: 0000000000000001 x14: 1fffe0001ae3260f x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001ae32610 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c1b95b80 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000cf3e00d0 x4 : ffff800097717150 x3 : ffff80008a4a2030 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000006 Call trace: cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] (P) __cfg80211_bss_update+0x1540/0x1ad8 net/wireless/scan.c:2018 (P) cfg80211_inform_single_bss_data+0x964/0x1744 net/wireless/scan.c:2363 cfg80211_inform_bss_data+0x1ac/0x2fc4 net/wireless/scan.c:3222 cfg80211_inform_bss_frame_data+0x2f0/0x6dc net/wireless/scan.c:3317 ieee80211_bss_info_update+0x640/0x8b8 net/mac80211/scan.c:226 ieee80211_scan_rx+0x474/0x8bc net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5179 [inline] ieee80211_rx_list+0x1be0/0x25c4 net/mac80211/rx.c:5416 ieee80211_rx_napi+0x164/0x338 net/mac80211/rx.c:5439 ieee80211_rx include/net/mac80211.h:5179 [inline] ieee80211_handle_queued_frames+0xe8/0x17c net/mac80211/main.c:441 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:460 tasklet_action_common+0x2fc/0x3ec kernel/softirq.c:829 tasklet_action+0x68/0x8c kernel/softirq.c:855 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:968 smpboot_thread_fn+0x4d8/0x9cc kernel/smpboot.c:164 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 irq event stamp: 1329281 hardirqs last enabled at (1329280): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline] hardirqs last enabled at (1329280): [] exit_to_kernel_mode+0xc0/0xf0 arch/arm64/kernel/entry-common.c:95 hardirqs last disabled at (1329281): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (1329260): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (1329260): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (1329265): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:968 ---[ end trace 0000000000000000 ]---