wlan1: Trigger new scan to find an IBSS to join
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4413 at net/mac80211/scan.c:1225 ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
Modules linked in:
CPU: 0 PID: 4413 Comm: kworker/u4:5 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: phy10 ieee80211_iface_work
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
lr : ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
sp : ffff8000213d78e0
x29: ffff8000213d7920 x28: ffff0000dcb88930 x27: ffff0000dcb88ee0
x26: 0000000000000006 x25: ffff0000dcb8ab70 x24: 0000000000000000
x23: 0000000000000c80 x22: 1fffe0001b9711dc x21: ffff0000dcb8deb8
x20: 0000000000000000 x19: dfff800000000000 x18: ffff800011abbcc0
x17: 1fffe00033ed797e x16: ffff8000082ca408 x15: 0000000040000000
x14: 0000000000000002 x13: 1ffff00002a180b1 x12: 0000000000ff0100
x11: ff008000111a80b8 x10: 0000000000000000 x9 : ffff8000111a80b8
x8 : ffff0000d1611bc0 x7 : ffff8000111a7bd8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c98a0
x2 : ffff0000d1611bc0 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
 ieee80211_sta_find_ibss net/mac80211/ibss.c:-1 [inline]
 ieee80211_ibss_work+0xb14/0xd60 net/mac80211/ibss.c:1705
 ieee80211_iface_work+0x9bc/0xa34 net/mac80211/iface.c:1747
 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292
 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 266714
hardirqs last  enabled at (266713): [<ffff800008251f14>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1367 [inline]
hardirqs last  enabled at (266713): [<ffff800008251f14>] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:5003
hardirqs last disabled at (266714): [<ffff80001195cc30>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (266698): [<ffff800011028c54>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (266698): [<ffff800011028c54>] cfg80211_get_bss+0x48c/0x850 net/wireless/scan.c:1564
softirqs last disabled at (266696): [<ffff800011028904>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (266696): [<ffff800011028904>] cfg80211_get_bss+0x13c/0x850 net/wireless/scan.c:1538
---[ end trace 0000000000000000 ]---