wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') CPU: 1 UID: 0 PID: 42 Comm: kworker/u8:3 Not tainted 6.16.0-rc1-syzkaller-g19272b37aa4f #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: events_unbound cfg80211_wiphy_work Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:466 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 dump_stack+0x1c/0x28 lib/dump_stack.c:129 ubsan_epilogue+0x14/0x48 lib/ubsan.c:233 __ubsan_handle_out_of_bounds+0xd0/0xfc lib/ubsan.c:455 ieee80211_request_ibss_scan+0x524/0x790 net/mac80211/scan.c:1223 ieee80211_ibss_work+0xb28/0xd50 net/mac80211/ibss.c:-1 ieee80211_iface_work+0xca8/0xd20 net/mac80211/iface.c:1744 cfg80211_wiphy_work+0x2a8/0x48c net/wireless/core.c:435 process_one_work+0x7e8/0x155c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3321 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3402 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 ---[ end trace ]---