wlan0: Trigger new scan to find an IBSS to join
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4431 at net/mac80211/scan.c:1228 ieee80211_request_ibss_scan+0x710/0x790 net/mac80211/scan.c:1228
Modules linked in:
CPU: 0 UID: 0 PID: 4431 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-syzkaller-g9aa9b43d689e #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x710/0x790 net/mac80211/scan.c:1228
lr : ieee80211_request_ibss_scan+0x710/0x790 net/mac80211/scan.c:1228
sp : ffff8000a07c77a0
x29: ffff8000a07c77e0 x28: ffff0000d13fdbf8 x27: 0000000000000000
x26: ffff0000d13f8e80 x25: 0000000000000006 x24: 0000000000000c80
x23: ffff0000d13fa9a8 x22: dfff800000000000 x21: ffff0000d13f88d0
x20: 1fffe0001a27f1d0 x19: 0000000000000000 x18: 1fffe000337dc876
x17: 0000000000000000 x16: ffff80008051eb44 x15: 0000000000000001
x14: 1ffff000140f8e80 x13: 0000000000000000 x12: 0000000000000000
x11: ffff7000140f8e81 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000d2f9db80 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000a07c71d8 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000020 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x710/0x790 net/mac80211/scan.c:1228 (P)
 ieee80211_ibss_work+0xb28/0xd50 net/mac80211/ibss.c:-1
 ieee80211_iface_work+0xca8/0xd20 net/mac80211/iface.c:1744
 cfg80211_wiphy_work+0x2a8/0x48c net/wireless/core.c:435
 process_one_work+0x7e8/0x155c kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3402
 kthread+0x5fc/0x75c kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847
irq event stamp: 1648826
hardirqs last  enabled at (1648825): [<ffff80008aec8cb0>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline]
hardirqs last  enabled at (1648825): [<ffff80008aec8cb0>] exit_to_kernel_mode+0xc0/0xf0 arch/arm64/kernel/entry-common.c:95
hardirqs last disabled at (1648826): [<ffff80008aec67ac>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511
softirqs last  enabled at (1648804): [<ffff80008a5a8ad8>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (1648804): [<ffff80008a5a8ad8>] __cfg80211_get_bss+0x4d8/0x6f4 net/wireless/scan.c:1633
softirqs last disabled at (1648802): [<ffff80008a5a8734>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (1648802): [<ffff80008a5a8734>] __cfg80211_get_bss+0x134/0x6f4 net/wireless/scan.c:1605
---[ end trace 0000000000000000 ]---