wlan1: Trigger new scan to find an IBSS to join ------------[ cut here ]------------ WARNING: net/mac80211/scan.c:1240 at ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1240, CPU#0: kworker/u8:7/892 Modules linked in: CPU: 0 UID: 0 PID: 892 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Workqueue: events_unbound cfg80211_wiphy_work pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1240 lr : ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1240 sp : ffff80009df577a0 x29: ffff80009df577e0 x28: 0000000000000006 x27: 0000000000000001 x26: 0000000000000002 x25: ffff0000d7c50ec8 x24: ffff0000d7c529f0 x23: 0000000000000000 x22: ffff0000d7c50e80 x21: dfff800000000000 x20: 1fffe0001af8a1d9 x19: 0000000000000000 x18: 1fffe0003377d090 x17: ffff80008f86e000 x16: ffff800080537e24 x15: 0000000000000001 x14: 1ffff00013beae84 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700013beae85 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c8785580 x7 : ffff80008afa5cd8 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000006 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1240 (P) ieee80211_ibss_work+0xb2c/0xd54 net/mac80211/ibss.c:-1 ieee80211_iface_work+0xff4/0x106c net/mac80211/iface.c:1812 cfg80211_wiphy_work+0x27c/0x49c net/wireless/core.c:438 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3421 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 irq event stamp: 162190 hardirqs last enabled at (162189): [] raw_spin_rq_unlock_irq+0x14/0x24 kernel/sched/sched.h:1570 hardirqs last disabled at (162190): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (162180): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (162180): [] __cfg80211_get_bss+0x4c0/0x6f4 net/wireless/scan.c:1644 softirqs last disabled at (162178): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (162178): [] __cfg80211_get_bss+0x11c/0x6f4 net/wireless/scan.c:1616 ---[ end trace 0000000000000000 ]--- bridge0: port 2(bridge_slave_1) entered blocking state bridge0: port 2(bridge_slave_1) entered forwarding state netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed