------------[ cut here ]------------
WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1622 rb_insert_bss+0xf0/0x220 net/wireless/scan.c:1622
Modules linked in:
CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
RIP: 0010:rb_insert_bss+0xf0/0x220 net/wireless/scan.c:1622
Code: 28 00 0f 85 f3 00 00 00 31 ff 89 de 48 8b 6d 00 e8 65 f1 1a f7 85 db 79 89 e8 1c ef 1a f7 48 83 c5 10 eb 87 e8 11 ef 1a f7 90 <0f> 0b 90 e8 08 ef 1a f7 89 d8 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e
RSP: 0018:ffffc900001e72f0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a7f1433
RDX: ffff88801d6a0000 RSI: ffffffff8a7f146f RDI: 0000000000000005
RBP: ffff88807e8181a0 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807fc9c420
R13: dffffc0000000000 R14: ffff888033077070 R15: ffff888033077000
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c2b4be1 CR3: 0000000028964000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 cfg80211_insert_bss net/wireless/scan.c:1667 [inline]
 __cfg80211_bss_update+0xa1f/0x2440 net/wireless/scan.c:2003
 cfg80211_inform_single_bss_data+0x7af/0x1de0 net/wireless/scan.c:2330
 cfg80211_inform_bss_data+0x205/0x3ba0 net/wireless/scan.c:3189
 cfg80211_inform_bss_frame_data+0x272/0x7a0 net/wireless/scan.c:3284
 ieee80211_bss_info_update+0x311/0xab0 net/mac80211/scan.c:226
 ieee80211_scan_rx+0x474/0xac0 net/mac80211/scan.c:340
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5232 [inline]
 ieee80211_rx_list+0x1bd7/0x2970 net/mac80211/rx.c:5469
 ieee80211_rx_napi+0xdd/0x400 net/mac80211/rx.c:5492
 ieee80211_rx include/net/mac80211.h:5163 [inline]
 ieee80211_handle_queued_frames+0xd5/0x130 net/mac80211/main.c:441
 tasklet_action_common+0x251/0x3f0 kernel/softirq.c:811
 handle_softirqs+0x213/0x8f0 kernel/softirq.c:561
 run_ksoftirqd kernel/softirq.c:950 [inline]
 run_ksoftirqd+0x3a/0x60 kernel/softirq.c:942
 smpboot_thread_fn+0x661/0xa30 kernel/smpboot.c:164
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>