wlan1: Trigger new scan to find an IBSS to join ------------[ cut here ]------------ WARNING: CPU: 0 PID: 1832 at net/mac80211/scan.c:1236 ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1236 Modules linked in: CPU: 0 UID: 0 PID: 1832 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Workqueue: events_unbound cfg80211_wiphy_work pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1236 lr : ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1236 sp : ffff8000a04177a0 x29: ffff8000a04177e0 x28: 0000000000000006 x27: 0000000000000001 x26: 0000000000000002 x25: ffff0000dcde0ec8 x24: ffff0000dcde29f0 x23: 0000000000000000 x22: ffff0000dcde0e80 x21: dfff800000000000 x20: 1fffe0001b9bc1d9 x19: 0000000000000000 x18: 1fffe000337db690 x17: ffff80008f57e000 x16: ffff8000805292d8 x15: 0000000000000001 x14: 1ffff00014082e84 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700014082e85 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cb2c9ec0 x7 : ffff800080491734 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1236 (P) ieee80211_ibss_work+0xb2c/0xd54 net/mac80211/ibss.c:-1 ieee80211_iface_work+0xff4/0x106c net/mac80211/iface.c:1770 cfg80211_wiphy_work+0x294/0x49c net/wireless/core.c:435 process_one_work+0x7e8/0x155c kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3427 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 irq event stamp: 334706 hardirqs last enabled at (334705): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1558 [inline] hardirqs last enabled at (334705): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:5073 hardirqs last disabled at (334706): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (334698): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (334698): [] __cfg80211_get_bss+0x4d8/0x6f4 net/wireless/scan.c:1644 softirqs last disabled at (334696): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (334696): [] __cfg80211_get_bss+0x134/0x6f4 net/wireless/scan.c:1616 ---[ end trace 0000000000000000 ]---