------------[ cut here ]------------
WARNING: net/wireless/scan.c:1194 at cfg80211_scan_done+0x2d5/0x460 net/wireless/scan.c:1193, CPU#0: kworker/u4:1/13
Modules linked in:
CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:cfg80211_scan_done+0x2d5/0x460 net/wireless/scan.c:1193
Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 ba 42 12 f7 90 0f 0b 90 e9 25 fe ff ff e8 ac 42 12 f7 90 <0f> 0b 90 e9 db fe ff ff e8 9e 42 12 f7 48 8d 3d 87 0a 03 05 67 48
RSP: 0018:ffffc900001f78a0 EFLAGS: 00010293
RAX: ffffffff8aaf7f44 RBX: ffff888011412218 RCX: ffff88801c298000
RDX: 0000000000000000 RSI: ffffffff8be094c0 RDI: ffffffff8be09480
RBP: ffffc900001f7968 R08: ffffffff8fa24077 R09: 1ffffffff1f4480e
R10: dffffc0000000000 R11: fffffbfff1f4480f R12: ffff888011412200
R13: ffff888011412278 R14: dffffc0000000000 R15: ffff888043758720
FS:  0000000000000000(0000) GS:ffff88808d22a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1453c7a6b0 CR3: 0000000039dda000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 __ieee80211_scan_completed+0x550/0xb20 net/mac80211/scan.c:505
 cfg80211_wiphy_work+0x2ab/0x450 net/wireless/core.c:438
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>