wlan1: Trigger new scan to find an IBSS to join ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7386 at net/mac80211/scan.c:1235 ieee80211_request_ibss_scan+0x624/0x6a4 net/mac80211/scan.c:1235 Modules linked in: CPU: 0 UID: 0 PID: 7386 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Workqueue: events_unbound cfg80211_wiphy_work pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : ieee80211_request_ibss_scan+0x624/0x6a4 net/mac80211/scan.c:1235 lr : ieee80211_request_ibss_scan+0x624/0x6a4 net/mac80211/scan.c:1235 sp : ffff8000a52077a0 x29: ffff8000a52077e0 x28: 0000000000000001 x27: ffff0000d7a308d0 x26: ffff0000d7a30ea0 x25: 0000000000000006 x24: ffff0000d7a329c0 x23: 0000000000000000 x22: 0000000000000c80 x21: dfff800000000000 x20: 1fffe0001af461d4 x19: 0000000000000000 x18: 1fffe0003378f088 x17: ffff80008f7ee000 x16: ffff80008052aa64 x15: 0000000000000001 x14: 1ffff00014a40e80 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700014a40e81 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c8809e80 x7 : ffff800080493090 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: ieee80211_request_ibss_scan+0x624/0x6a4 net/mac80211/scan.c:1235 (P) ieee80211_ibss_work+0xb2c/0xd54 net/mac80211/ibss.c:-1 ieee80211_iface_work+0xff4/0x106c net/mac80211/iface.c:1775 cfg80211_wiphy_work+0x294/0x49c net/wireless/core.c:435 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 irq event stamp: 2082254 hardirqs last enabled at (2082253): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1531 [inline] hardirqs last enabled at (2082253): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:5105 hardirqs last disabled at (2082254): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (2082246): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (2082246): [] __cfg80211_get_bss+0x4d8/0x6f4 net/wireless/scan.c:1644 softirqs last disabled at (2082244): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (2082244): [] __cfg80211_get_bss+0x134/0x6f4 net/wireless/scan.c:1616 ---[ end trace 0000000000000000 ]--- GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog