wlan1: Trigger new scan to find an IBSS to join
------------[ cut here ]------------
WARNING: CPU: 0 PID: 39 at net/mac80211/scan.c:1225 ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
Modules linked in:
CPU: 0 PID: 39 Comm: kworker/u4:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
Workqueue: phy4 ieee80211_iface_work
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
lr : ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
sp : ffff80001cd178e0
x29: ffff80001cd17920 x28: ffff0000dc410930 x27: ffff0000dc410ee0
x26: 0000000000000006 x25: ffff0000dc412b70 x24: 0000000000000000
x23: 0000000000000c80 x22: 1fffe0001b8821dc x21: ffff0000dc415eb8
x20: 0000000000000000 x19: dfff800000000000 x18: ffff800011a5bd40
x17: 1fffe00033ee7b7e x16: ffff8000082cb864 x15: ffff80001504d000
x14: 0000000000000100 x13: 1ffff00002a0a0b1 x12: 0000000000ff0100
x11: ff00800011146444 x10: 0000000000000000 x9 : ffff800011146444
x8 : ffff0000c4320000 x7 : ffff800011145f64 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082cacfc
x2 : ffff0000c4320000 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
 ieee80211_sta_find_ibss net/mac80211/ibss.c:-1 [inline]
 ieee80211_ibss_work+0xb14/0xd60 net/mac80211/ibss.c:1705
 ieee80211_iface_work+0x9bc/0xa34 net/mac80211/iface.c:1755
 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292
 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 1988054
hardirqs last  enabled at (1988053): [<ffff800008253370>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1367 [inline]
hardirqs last  enabled at (1988053): [<ffff800008253370>] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:5003
hardirqs last disabled at (1988054): [<ffff8000118fa220>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (1988038): [<ffff800010fc6fe0>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (1988038): [<ffff800010fc6fe0>] cfg80211_get_bss+0x48c/0x850 net/wireless/scan.c:1564
softirqs last disabled at (1988036): [<ffff800010fc6c90>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (1988036): [<ffff800010fc6c90>] cfg80211_get_bss+0x13c/0x850 net/wireless/scan.c:1538
---[ end trace 0000000000000000 ]---