wlan1: Trigger new scan to find an IBSS to join
------------[ cut here ]------------
WARNING: CPU: 1 PID: 42 at net/mac80211/scan.c:1236 ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1236
Modules linked in:
CPU: 1 UID: 0 PID: 42 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1236
lr : ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1236
sp : ffff8000990c77a0
x29: ffff8000990c77e0 x28: 0000000000000006 x27: 0000000000000001
x26: 0000000000000002 x25: ffff0000d5328ec8 x24: ffff0000d532a9f0
x23: 0000000000000000 x22: ffff0000d5328e80 x21: dfff800000000000
x20: 1fffe0001aa651d9 x19: 0000000000000000 x18: 1fffe000337dfe90
x17: ffff80008f57e000 x16: ffff8000805292d8 x15: 0000000000000001
x14: 1ffff00013218e48 x13: 0000000000000000 x12: 0000000000000000
x11: 00000000b5b28e51 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000c1c53d80 x7 : ffff8000805638d4 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1236 (P)
 ieee80211_ibss_work+0xb2c/0xd54 net/mac80211/ibss.c:-1
 ieee80211_iface_work+0xff4/0x106c net/mac80211/iface.c:1770
 cfg80211_wiphy_work+0x294/0x49c net/wireless/core.c:435
 process_one_work+0x7e8/0x155c kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3427
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
irq event stamp: 857470
hardirqs last  enabled at (857469): [<ffff800080559f90>] vprintk_store+0x898/0xac8 kernel/printk/printk.c:2329
hardirqs last disabled at (857470): [<ffff80008ade9670>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434
softirqs last  enabled at (857466): [<ffff80008a4b9324>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (857466): [<ffff80008a4b9324>] __cfg80211_get_bss+0x4d8/0x6f4 net/wireless/scan.c:1644
softirqs last disabled at (857464): [<ffff80008a4b8f80>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (857464): [<ffff80008a4b8f80>] __cfg80211_get_bss+0x134/0x6f4 net/wireless/scan.c:1616
---[ end trace 0000000000000000 ]---
netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
bridge_slave_1: left allmulticast mode
bridge_slave_1: left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
bridge_slave_0: left allmulticast mode
bridge_slave_0: left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): Released all slaves
hsr_slave_0: left promiscuous mode
hsr_slave_1: left promiscuous mode
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
veth1_macvtap: left promiscuous mode
veth0_macvtap: left promiscuous mode
veth1_vlan: left promiscuous mode
veth0_vlan: left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed