------------[ cut here ]------------ WARNING: net/wireless/scan.c:1788 at __list_del_entry_valid include/linux/list.h:132 [inline], CPU#1: ksoftirqd/1/23 WARNING: net/wireless/scan.c:1788 at __list_del_entry include/linux/list.h:223 [inline], CPU#1: ksoftirqd/1/23 WARNING: net/wireless/scan.c:1788 at list_del include/linux/list.h:237 [inline], CPU#1: ksoftirqd/1/23 WARNING: net/wireless/scan.c:1788 at cfg80211_combine_bsses net/wireless/scan.c:1789 [inline], CPU#1: ksoftirqd/1/23 WARNING: net/wireless/scan.c:1788 at __cfg80211_bss_update+0x1550/0x1ad8 net/wireless/scan.c:2035, CPU#1: ksoftirqd/1/23 Modules linked in: CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_combine_bsses include/linux/list.h:132 [inline] pc : __cfg80211_bss_update+0x1550/0x1ad8 net/wireless/scan.c:2035 lr : __cfg80211_bss_update+0x1384/0x1ad8 net/wireless/scan.c:-1 sp : ffff800096366e80 x29: ffff800096366f40 x28: 0000000000000000 x27: 1fffe00019114b02 x26: ffff0000c88a5800 x25: dfff800000000000 x24: 0000000000000001 x23: ffff0000cc1e01a0 x22: ffff0000c88a5810 x21: ffff0000d64f0810 x20: ffff0000c88a5810 x19: ffff0000d64f0800 x18: 0000000000000000 x17: 00000000ffff0000 x16: 0000000000000000 x15: 0000000000000001 x14: 1fffe0001dbbde8f x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001dbbde90 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d64f1010 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000d64f08d0 x4 : ffff8000963670f0 x3 : ffff800089dbe990 x2 : 0000000000000001 x1 : 0000000000000000 x0 : ffff0000c88a5810 Call trace: __list_del_entry_valid include/linux/list.h:132 [inline] (P) __list_del_entry include/linux/list.h:223 [inline] (P) list_del include/linux/list.h:237 [inline] (P) cfg80211_combine_bsses net/wireless/scan.c:1789 [inline] (P) __cfg80211_bss_update+0x1550/0x1ad8 net/wireless/scan.c:2035 (P) cfg80211_inform_single_bss_data+0x968/0x1734 net/wireless/scan.c:2369 cfg80211_inform_bss_data+0x1a4/0x2fd8 net/wireless/scan.c:3228 cfg80211_inform_bss_frame_data+0x314/0x738 net/wireless/scan.c:3319 ieee80211_bss_info_update+0x640/0x8b8 net/mac80211/scan.c:230 ieee80211_scan_rx+0x4b4/0x8fc net/mac80211/scan.c:359 __ieee80211_rx_handle_packet net/mac80211/rx.c:5287 [inline] ieee80211_rx_list+0x1d1c/0x2804 net/mac80211/rx.c:5544 ieee80211_rx_napi+0x164/0x338 net/mac80211/rx.c:5567 ieee80211_rx include/net/mac80211.h:5216 [inline] ieee80211_handle_queued_frames+0xe8/0x17c net/mac80211/main.c:452 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:471 tasklet_action_common+0x2fc/0x3ec kernel/softirq.c:925 tasklet_action+0x68/0x8c kernel/softirq.c:953 handle_softirqs+0x31c/0xc88 kernel/softirq.c:622 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:1063 smpboot_thread_fn+0x4d8/0x9cc kernel/smpboot.c:160 kthread+0x5ac/0x70c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 irq event stamp: 1206035 hardirqs last enabled at (1206034): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (1206034): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (1206035): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (1206014): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (1206014): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (1206021): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:1063 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: net/wireless/scan.c:1786 at cfg80211_combine_bsses net/wireless/scan.c:1786 [inline], CPU#1: ksoftirqd/1/23 WARNING: net/wireless/scan.c:1786 at __cfg80211_bss_update+0x1540/0x1ad8 net/wireless/scan.c:2035, CPU#1: ksoftirqd/1/23 Modules linked in: CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_combine_bsses net/wireless/scan.c:1786 [inline] pc : __cfg80211_bss_update+0x1540/0x1ad8 net/wireless/scan.c:2035 lr : cfg80211_combine_bsses net/wireless/scan.c:1786 [inline] lr : __cfg80211_bss_update+0x1540/0x1ad8 net/wireless/scan.c:2035 sp : ffff800096366e80 x29: ffff800096366f40 x28: 0000000000000000 x27: ffff0000cc1e0000 x26: ffff0000d64f1000 x25: dfff800000000000 x24: 0000000000000002 x23: ffff0000cc1e01a0 x22: ffff0000daca401d x21: ffff0000d64f0810 x20: 1fffe0001ac9e211 x19: ffff0000d64f0800 x18: 0000000000000000 x17: 00000000ffff0000 x16: 0000000000000000 x15: 0000000000000001 x14: 1fffe00019114b0f x13: 0000000000000000 x12: 0000000000000000 x11: ffff600019114b10 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c1b25580 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000d64f08d0 x4 : ffff8000963670f0 x3 : ffff800089dbe990 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000006 Call trace: cfg80211_combine_bsses net/wireless/scan.c:1786 [inline] (P) __cfg80211_bss_update+0x1540/0x1ad8 net/wireless/scan.c:2035 (P) cfg80211_inform_single_bss_data+0x968/0x1734 net/wireless/scan.c:2369 cfg80211_inform_bss_data+0x1a4/0x2fd8 net/wireless/scan.c:3228 cfg80211_inform_bss_frame_data+0x314/0x738 net/wireless/scan.c:3319 ieee80211_bss_info_update+0x640/0x8b8 net/mac80211/scan.c:230 ieee80211_scan_rx+0x4b4/0x8fc net/mac80211/scan.c:359 __ieee80211_rx_handle_packet net/mac80211/rx.c:5287 [inline] ieee80211_rx_list+0x1d1c/0x2804 net/mac80211/rx.c:5544 ieee80211_rx_napi+0x164/0x338 net/mac80211/rx.c:5567 ieee80211_rx include/net/mac80211.h:5216 [inline] ieee80211_handle_queued_frames+0xe8/0x17c net/mac80211/main.c:452 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:471 tasklet_action_common+0x2fc/0x3ec kernel/softirq.c:925 tasklet_action+0x68/0x8c kernel/softirq.c:953 handle_softirqs+0x31c/0xc88 kernel/softirq.c:622 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:1063 smpboot_thread_fn+0x4d8/0x9cc kernel/smpboot.c:160 kthread+0x5ac/0x70c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 irq event stamp: 1206043 hardirqs last enabled at (1206042): [] irqentry_exit+0x1b4/0x2f4 kernel/entry/common.c:219 hardirqs last disabled at (1206043): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (1206014): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (1206014): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:650 softirqs last disabled at (1206021): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:1063 ---[ end trace 0000000000000000 ]---