wlan1: Trigger new scan to find an IBSS to join
------------[ cut here ]------------
WARNING: net/mac80211/scan.c:1240 at ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1240, CPU#0: kworker/u8:24/6767
Modules linked in:
CPU: 0 UID: 0 PID: 6767 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1240
lr : ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1240
sp : ffff8000a51777a0
x29: ffff8000a51777e0 x28: 0000000000000006 x27: 0000000000000001
x26: 0000000000000002 x25: ffff0000d6a28ec8 x24: ffff0000d6a2a9f0
x23: 0000000000000000 x22: ffff0000d6a28e80 x21: dfff800000000000
x20: 1fffe0001ad451d9 x19: 0000000000000000 x18: 1fffe0003377d090
x17: ffff80008f86e000 x16: ffff8000805378ac x15: 0000000000000001
x14: 1ffff00014a2ee84 x13: 0000000000000000 x12: 0000000000000000
x11: ffff700014a2ee85 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000d4135580 x7 : ffff80008049e510 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 000000000000000b x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x618/0x698 net/mac80211/scan.c:1240 (P)
 ieee80211_ibss_work+0xb2c/0xd54 net/mac80211/ibss.c:-1
 ieee80211_iface_work+0xff4/0x106c net/mac80211/iface.c:1812
 cfg80211_wiphy_work+0x27c/0x49c net/wireless/core.c:438
 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257
 process_scheduled_works kernel/workqueue.c:3340 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3421
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
irq event stamp: 69948
hardirqs last  enabled at (69947): [<ffff80008049e5a4>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1570 [inline]
hardirqs last  enabled at (69947): [<ffff80008049e5a4>] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:4995
hardirqs last disabled at (69948): [<ffff80008af902dc>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412
softirqs last  enabled at (69940): [<ffff80008a65156c>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (69940): [<ffff80008a65156c>] __cfg80211_get_bss+0x4c0/0x6f4 net/wireless/scan.c:1644
softirqs last disabled at (69938): [<ffff80008a6511c8>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (69938): [<ffff80008a6511c8>] __cfg80211_get_bss+0x11c/0x6f4 net/wireless/scan.c:1616
---[ end trace 0000000000000000 ]---