wlan1: Trigger new scan to find an IBSS to join
------------[ cut here ]------------
WARNING: CPU: 0 PID: 2763 at net/mac80211/scan.c:1235 ieee80211_request_ibss_scan+0x624/0x6a4 net/mac80211/scan.c:1235
Modules linked in:
CPU: 0 UID: 0 PID: 2763 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x624/0x6a4 net/mac80211/scan.c:1235
lr : ieee80211_request_ibss_scan+0x624/0x6a4 net/mac80211/scan.c:1235
sp : ffff8000a28477a0
x29: ffff8000a28477e0 x28: 0000000000000001 x27: ffff0000d3a608d0
x26: ffff0000d3a60ea0 x25: 0000000000000006 x24: ffff0000d3a629c0
x23: 0000000000000000 x22: 0000000000000c80 x21: dfff800000000000
x20: 1fffe0001a74c1d4 x19: 0000000000000000 x18: 0000000000000000
x17: ffff80010c583000 x16: ffff80008052a464 x15: 0000000000000001
x14: 1ffff00014508e80 x13: 0000000000000000 x12: 0000000000000000
x11: ffff700014508e81 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000cefd3d00 x7 : ffff80008056556c x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x624/0x6a4 net/mac80211/scan.c:1235 (P)
 ieee80211_ibss_work+0xb2c/0xd54 net/mac80211/ibss.c:-1
 ieee80211_iface_work+0xff4/0x106c net/mac80211/iface.c:1775
 cfg80211_wiphy_work+0x294/0x49c net/wireless/core.c:435
 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
irq event stamp: 407478
hardirqs last  enabled at (407477): [<ffff80008b01c524>] irqentry_exit+0xd8/0x108 kernel/entry/common.c:214
hardirqs last disabled at (407478): [<ffff80008b016974>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434
softirqs last  enabled at (407472): [<ffff80008a6e73b0>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (407472): [<ffff80008a6e73b0>] __cfg80211_get_bss+0x4d8/0x6f4 net/wireless/scan.c:1644
softirqs last disabled at (407470): [<ffff80008a6e700c>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (407470): [<ffff80008a6e700c>] __cfg80211_get_bss+0x134/0x6f4 net/wireless/scan.c:1616
---[ end trace 0000000000000000 ]---