slab radix_tree_node start ffff88804906a000 pointer offset 24 size 576
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 0 P4D 0 
Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 30 Comm: kworker/u4:2 Not tainted 6.14.0-rc2-syzkaller-g04f41cbf03ec #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0000:ffffc90000007c78 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 1ffff1100920d404 RCX: 2b62e77785a70b00
RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff88804906a018
RBP: ffffc90000007eb0 R08: ffffffff81a1108c R09: 1ffffffff28a8917
R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff81a8d327
R13: ffff88804906a020 R14: 0000000000000000 R15: ffff88804906a018
FS:  0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000000e938000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rcu_do_batch kernel/rcu/tree.c:2546 [inline]
 rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2802
 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
 do_softirq+0x11b/0x1e0 kernel/softirq.c:462
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:389
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 cfg80211_inform_single_bss_data+0x162d/0x1ee0 net/wireless/scan.c:2383
 cfg80211_inform_bss_data+0x3c3/0x5820 net/wireless/scan.c:3222
 cfg80211_inform_bss_frame_data+0x3bb/0x720 net/wireless/scan.c:3317
 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226
 ieee80211_rx_bss_info net/mac80211/ibss.c:1102 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1581 [inline]
 ieee80211_ibss_rx_queued_mgmt+0x1993/0x2e00 net/mac80211/ibss.c:1608
 ieee80211_iface_process_skb net/mac80211/iface.c:1611 [inline]
 ieee80211_iface_work+0x8dc/0xf90 net/mac80211/iface.c:1665
 cfg80211_wiphy_work+0x2f0/0x490 net/wireless/core.c:435
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3317
 worker_thread+0x870/0xd30 kernel/workqueue.c:3398
 kthread+0x7a9/0x920 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0000:ffffc90000007c78 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: 1ffff1100920d404 RCX: 2b62e77785a70b00
RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff88804906a018
RBP: ffffc90000007eb0 R08: ffffffff81a1108c R09: 1ffffffff28a8917
R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff81a8d327
R13: ffff88804906a020 R14: 0000000000000000 R15: ffff88804906a018
FS:  0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000000e938000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400