wlan1: Trigger new scan to find an IBSS to join
------------[ cut here ]------------
WARNING: net/mac80211/scan.c:1245 at ieee80211_request_ibss_scan+0x5ec/0x66c net/mac80211/scan.c:1245, CPU#0: kworker/u8:15/5393
Modules linked in:
CPU: 0 UID: 0 PID: 5393 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x5ec/0x66c net/mac80211/scan.c:1245
lr : ieee80211_request_ibss_scan+0x5ec/0x66c net/mac80211/scan.c:1245
sp : ffff800098a67820
x29: ffff800098a67860 x28: 0000000000000006 x27: 0000000000000001
x26: 0000000000000002 x25: ffff0000f3c70f88 x24: ffff0000f3c72ad8
x23: 0000000000000000 x22: ffff0000f3c70f40 x21: dfff800000000000
x20: 1fffe0001e78e1f1 x19: 0000000000000000 x18: 1fffe00035c08220
x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff0001ae04110c
x14: 0000000000000001 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : 0000000000000000 x7 : ffff80008047caa0 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008606a1d4
x2 : 0000000000000000 x1 : ffff0000d1223a00 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x5ec/0x66c net/mac80211/scan.c:1245 (P)
 ieee80211_sta_find_ibss net/mac80211/ibss.c:-1 [inline]
 ieee80211_ibss_work+0xb40/0xd9c net/mac80211/ibss.c:1660
 ieee80211_iface_work+0xfd0/0x1048 net/mac80211/iface.c:1871
 cfg80211_wiphy_work+0x288/0x598 net/wireless/core.c:513
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0x79c/0x1098 kernel/workqueue.c:3397
 worker_thread+0x754/0xba0 kernel/workqueue.c:3478
 kthread+0x2f8/0x3c8 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:842
irq event stamp: 284698
hardirqs last  enabled at (284697): [<ffff8000867a27cc>] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline]
hardirqs last  enabled at (284697): [<ffff8000867a27cc>] arm64_exit_to_kernel_mode+0x80/0x94 arch/arm64/kernel/entry-common.c:62
hardirqs last disabled at (284698): [<ffff80008679e6f8>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:429
softirqs last  enabled at (284692): [<ffff800085e9c774>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (284692): [<ffff800085e9c774>] __cfg80211_get_bss+0x3d8/0x720 net/wireless/scan.c:1643
softirqs last disabled at (284690): [<ffff800085e9c4b8>] spin_lock_bh include/linux/spinlock.h:348 [inline]
softirqs last disabled at (284690): [<ffff800085e9c4b8>] __cfg80211_get_bss+0x11c/0x720 net/wireless/scan.c:1615
---[ end trace 0000000000000000 ]---