------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at net/mac80211/rx.c:5329 ieee80211_rx_list+0x15e3/0x2980 net/mac80211/rx.c:5329
Modules linked in:
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:ieee80211_rx_list+0x15e3/0x2980 net/mac80211/rx.c:5329
Code: 23 51 55 fe 48 85 c0 0f 85 0a 01 00 00 e8 15 38 d8 f6 48 89 df e8 7d 32 55 fe e8 08 38 d8 f6 e9 cd ee ff ff e8 fe 37 d8 f6 90 <0f> 0b 90 e9 d4 ee ff ff e8 f0 37 d8 f6 44 89 ef e8 08 d1 d2 ff 31
RSP: 0018:ffffc90000007c68 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8ae2f750
RDX: ffffffff8e097740 RSI: ffffffff8ae30ab2 RDI: 0000000000000001
RBP: ffff88806b6c0640 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806a70b0c8
R13: ffff88806b6c0718 R14: ffff88806a708e40 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff888097820000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000c27a1d3 CR3: 0000000045908000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
ieee80211_rx_napi+0xdc/0x410 net/mac80211/rx.c:5439
ieee80211_rx include/net/mac80211.h:5179 [inline]
ieee80211_handle_queued_frames+0xd5/0x130 net/mac80211/main.c:441
tasklet_action_common+0x281/0x400 kernel/softirq.c:811
handle_softirqs+0x216/0x8e0 kernel/softirq.c:561
__do_softirq kernel/softirq.c:595 [inline]
invoke_softirq kernel/softirq.c:435 [inline]
__irq_exit_rcu+0x109/0x170 kernel/softirq.c:662
irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
instr_sysvec_call_function arch/x86/kernel/smp.c:257 [inline]
sysvec_call_function+0xa4/0xc0 arch/x86/kernel/smp.c:257
asm_sysvec_call_function+0x1a/0x20 arch/x86/include/asm/idtentry.h:710
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline]
RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:749
Code: 4c 01 c7 4c 29 c2 e9 6e ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 f8 21 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
RSP: 0018:ffffffff8e007e18 EFLAGS: 00000206
RAX: 000000000022f17d RBX: 0000000000000000 RCX: ffffffff8b64a339
RDX: 0000000000000000 RSI: ffffffff8dbbee4d RDI: ffffffff8bf3d4c0
RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10056465bd
R10: ffff88802b232deb R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff8e097740 R14: ffffffff9083f510 R15: 0000000000000000
default_idle_call+0x6d/0xb0 kernel/sched/idle.c:117
cpuidle_idle_call kernel/sched/idle.c:185 [inline]
do_idle+0x391/0x510 kernel/sched/idle.c:325
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:423
rest_init+0x16b/0x2b0 init/main.c:743
start_kernel+0x3e9/0x4d0 init/main.c:1099
x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:513
x86_64_start_kernel+0xb0/0xc0 arch/x86/kernel/head64.c:494
common_startup_64+0x13e/0x148
----------------
Code disassembly (best guess):
0: 4c 01 c7 add %r8,%rdi
3: 4c 29 c2 sub %r8,%rdx
6: e9 6e ff ff ff jmp 0xffffff79
b: 90 nop
c: 90 nop
d: 90 nop
e: 90 nop
f: 90 nop
10: 90 nop
11: 90 nop
12: 90 nop
13: 90 nop
14: 90 nop
15: 90 nop
16: 90 nop
17: 90 nop
18: 90 nop
19: 90 nop
1a: 90 nop
1b: f3 0f 1e fa endbr64
1f: eb 07 jmp 0x28
21: 0f 00 2d d3 f8 21 00 verw 0x21f8d3(%rip) # 0x21f8fb
28: fb sti
29: f4 hlt
* 2a: fa cli <-- trapping instruction
2b: c3 ret
2c: cc int3
2d: cc int3
2e: cc int3
2f: cc int3
30: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1)
37: 00 00 00 00
3b: 90 nop
3c: 90 nop
3d: 90 nop
3e: 90 nop
3f: 90 nop