wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
------------[ cut here ]------------
WARNING: CPU: 0 PID: 1612 at net/mac80211/scan.c:1225 ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
Modules linked in:
CPU: 0 PID: 1612 Comm: kworker/u4:5 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
lr : ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
sp : ffff800025407880
x29: ffff8000254078c0 x28: ffff0000f62f0930 x27: ffff0000f62f0ee0
x26: 0000000000000006 x25: ffff0000f62f2b70 x24: 0000000000000000
x23: 0000000000000c80 x22: 1fffe0001ec5e1dc x21: ffff0000f62f5eb8
x20: 0000000000000000 x19: dfff800000000000 x18: ffff800011b8bf60
x17: 6f7774656e205353 x16: ffff8000082d0ff8 x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff00004a80ec0 x12: 0000000000ff0100
x11: ff00800011261778 x10: 0000000000000000 x9 : ffff800011261778
x8 : ffff0000cfc0b780 x7 : ffff800011261298 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d0490
x2 : ffff0000cfc0b780 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
 ieee80211_sta_merge_ibss net/mac80211/ibss.c:1315 [inline]
 ieee80211_ibss_work+0xac0/0xd68 net/mac80211/ibss.c:1708
 ieee80211_iface_work+0x9bc/0xa34 net/mac80211/iface.c:1755
 cfg80211_wiphy_work+0x1d8/0x218 net/wireless/core.c:433
 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292
 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 1080100
hardirqs last  enabled at (1080099): [<ffff80000830f9ac>] __up_console_sem+0xb4/0xfc kernel/printk/printk.c:261
hardirqs last disabled at (1080100): [<ffff800011a288ec>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (1080082): [<ffff800011283ccc>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (1080082): [<ffff800011283ccc>] ieee80211_ibss_work+0x2a8/0xd68 net/mac80211/ibss.c:1701
softirqs last disabled at (1080080): [<ffff800011283b00>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (1080080): [<ffff800011283b00>] ieee80211_ibss_work+0xdc/0xd68 net/mac80211/ibss.c:1690
---[ end trace 0000000000000000 ]---
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered forwarding state
IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered forwarding state
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready