wlan1: Trigger new scan to find an IBSS to join
------------[ cut here ]------------
WARNING: net/mac80211/scan.c:1245 at ieee80211_request_ibss_scan+0x608/0x688 net/mac80211/scan.c:1245, CPU#0: kworker/u8:18/9202
Modules linked in:
CPU: 0 UID: 0 PID: 9202 Comm: kworker/u8:18 Tainted: G             L      syzkaller #0 PREEMPT 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x608/0x688 net/mac80211/scan.c:1245
lr : ieee80211_request_ibss_scan+0x608/0x688 net/mac80211/scan.c:1245
sp : ffff800095547860
x29: ffff8000955478a0 x28: dfff800000000000 x27: ffff0000f2c70fb0
x26: 0000000000000006 x25: 0000000000000001 x24: 0000000000000002
x23: ffff0000f2c72b08 x22: ffff0000f2c70f60 x21: ffff0000f2c70f60
x20: 1fffe0001e58e1f6 x19: 0000000000000000 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000001 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000000003 x9 : 0000000000000000
x8 : 0000000000000000 x7 : ffff80008048c60c x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000861bb014
x2 : 0000000000000000 x1 : ffff0000cf740000 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x608/0x688 net/mac80211/scan.c:1245 (P)
 ieee80211_sta_find_ibss net/mac80211/ibss.c:-1 [inline]
 ieee80211_ibss_work+0xb48/0xd98 net/mac80211/ibss.c:1635
 ieee80211_iface_work+0xcc4/0xd3c net/mac80211/iface.c:1845
 cfg80211_wiphy_work+0x278/0x588 net/wireless/core.c:538
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0x788/0x10b8 kernel/workqueue.c:3405
 worker_thread+0x798/0xbd0 kernel/workqueue.c:3486
 kthread+0x304/0x3d4 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838
irq event stamp: 163832
hardirqs last  enabled at (163831): [<ffff800086910d38>] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline]
hardirqs last  enabled at (163831): [<ffff800086910d38>] __arm64_exit_to_kernel_mode+0x64/0x78 arch/arm64/kernel/entry-common.c:60
hardirqs last disabled at (163832): [<ffff80008690cc28>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445
softirqs last  enabled at (163826): [<ffff800085fdf5d0>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (163826): [<ffff800085fdf5d0>] __cfg80211_get_bss+0x4cc/0x818 net/wireless/scan.c:1653
softirqs last disabled at (163824): [<ffff800085fdf228>] spin_lock_bh include/linux/spinlock.h:348 [inline]
softirqs last disabled at (163824): [<ffff800085fdf228>] __cfg80211_get_bss+0x124/0x818 net/wireless/scan.c:1625
---[ end trace 0000000000000000 ]---