------------[ cut here ]------------
WARNING: net/wireless/scan.c:1194 at cfg80211_scan_done+0x2d5/0x460 net/wireless/scan.c:1193, CPU#0: kworker/u4:18/3242
Modules linked in:
CPU: 0 UID: 0 PID: 3242 Comm: kworker/u4:18 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:cfg80211_scan_done+0x2d5/0x460 net/wireless/scan.c:1193
Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 fe b0 00 cc e8 3a 94 13 f7 90 0f 0b 90 e9 25 fe ff ff e8 2c 94 13 f7 90 <0f> 0b 90 e9 db fe ff ff e8 1e 94 13 f7 48 8d 3d 97 1b e5 04 67 48
RSP: 0018:ffffc9000caef8e0 EFLAGS: 00010293
RAX: ffffffff8aad7124 RBX: ffff88800dba0418 RCX: ffff888000c50000
RDX: 0000000000000000 RSI: ffffffff8bc09540 RDI: ffffffff8bc09500
RBP: ffffc9000caef9a8 R08: ffffffff8f824277 R09: 1ffffffff1f0484e
R10: dffffc0000000000 R11: fffffbfff1f0484f R12: ffff88800dba0400
R13: ffff88800dba0478 R14: dffffc0000000000 R15: ffff8880585a0720
FS:  0000000000000000(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa32068a000 CR3: 0000000048558000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 __ieee80211_scan_completed+0x550/0xb20 net/mac80211/scan.c:505
 cfg80211_wiphy_work+0x2ab/0x450 net/wireless/core.c:438
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>