------------[ cut here ]------------
WARNING: CPU: 1 PID: 4783 at net/wireless/scan.c:1194 cfg80211_scan_done+0x2c0/0x4b4 net/wireless/scan.c:1193
Modules linked in:
CPU: 1 UID: 0 PID: 4783 Comm: kworker/u8:8 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : cfg80211_scan_done+0x2c0/0x4b4 net/wireless/scan.c:1193
lr : cfg80211_scan_done+0x2c0/0x4b4 net/wireless/scan.c:1193
sp : ffff8000a3bb77a0
x29: ffff8000a3bb7820 x28: 1fffe0001b9da0cf x27: 1ffff00014776ef8
x26: dfff800000000000 x25: ffff80008f7be768 x24: ffff0000d6e101b8
x23: ffff0000d6e12a08 x22: ffff0000dced0600 x21: ffff0000d6e10700
x20: ffff0000dced0618 x19: ffff0000dced0678 x18: 1fffe000337a0688
x17: ffff80008f7be000 x16: ffff80008b007230 x15: 0000000000000002
x14: 1ffff00014776efc x13: 0000000000000000 x12: 0000000000000000
x11: ffff700014776efe x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000d4a05b80 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff8000a3bb77f0 x4 : ffff0000dced0610 x3 : ffff80008a6ce868
x2 : 0000000000000010 x1 : ffff80008b6577c0 x0 : 0000000000000001
Call trace:
 cfg80211_scan_done+0x2c0/0x4b4 net/wireless/scan.c:1193 (P)
 __ieee80211_scan_completed+0x4ec/0xae0 net/mac80211/scan.c:501
 ieee80211_scan_work+0x140/0x1840 net/mac80211/scan.c:1184
 cfg80211_wiphy_work+0x294/0x49c net/wireless/core.c:435
 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x958/0xed8 kernel/workqueue.c:3400
 kthread+0x5fc/0x75c kernel/kthread.c:463
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844
irq event stamp: 1473802
hardirqs last  enabled at (1473801): [<ffff800083126e98>] class_irqsave_destructor include/linux/irqflags.h:266 [inline]
hardirqs last  enabled at (1473801): [<ffff800083126e98>] __free_object+0x508/0x720 lib/debugobjects.c:524
hardirqs last disabled at (1473802): [<ffff80008b001bfc>] el1_brk64+0x1c/0x48 arch/arm64/kernel/entry-common.c:574
softirqs last  enabled at (1473760): [<ffff80008ad69260>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (1473760): [<ffff80008ad69260>] batadv_nc_purge_paths+0x2f4/0x37c net/batman-adv/network-coding.c:471
softirqs last disabled at (1473758): [<ffff80008ad6903c>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (1473758): [<ffff80008ad6903c>] batadv_nc_purge_paths+0xd0/0x37c net/batman-adv/network-coding.c:442
---[ end trace 0000000000000000 ]---