------------[ cut here ]------------
WARNING: CPU: 1 PID: 41 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x1b8/0x220 net/mac80211/offchannel.c:404
Modules linked in:
CPU: 1 UID: 0 PID: 41 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : ieee80211_start_next_roc+0x1b8/0x220 net/mac80211/offchannel.c:404
lr : ieee80211_start_next_roc+0x1b8/0x220 net/mac80211/offchannel.c:404
sp : ffff800099297870
x29: ffff800099297870 x28: 0000000000000001 x27: dfff800000000000
x26: ffff0000ca557018 x25: ffff0000d2992ac8 x24: ffff0000d29929c8
x23: ffff0000d2990ea0 x22: ffff0000d29928e0 x21: dfff800000000000
x20: ffff0000caeb6320 x19: ffff0000d2990e60 x18: 1fffe0003379be88
x17: ffff80008f7de000 x16: ffff800080528464 x15: 0000000000000001
x14: 1fffe0001a5320cc x13: 0000000000000000 x12: 0000000000000000
x11: ffff800093323be8 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000c1c5bd00 x7 : ffff80008a6a94c8 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010
x2 : 0000000000000006 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
 ieee80211_start_next_roc+0x1b8/0x220 net/mac80211/offchannel.c:404 (P)
 __ieee80211_scan_completed+0x7dc/0xae0 net/mac80211/scan.c:528
 ieee80211_scan_work+0x140/0x1840 net/mac80211/scan.c:1184
 cfg80211_wiphy_work+0x294/0x49c net/wireless/core.c:435
 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
irq event stamp: 1012342
hardirqs last  enabled at (1012341): [<ffff800080420c48>] queue_work_on+0xfc/0x18c kernel/workqueue.c:2394
hardirqs last disabled at (1012342): [<ffff80008b00e86c>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434
softirqs last  enabled at (1012328): [<ffff80008a95cf80>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (1012326): [<ffff80008a95cf4c>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0