------------[ cut here ]------------ WARNING: CPU: 0 PID: 41 at net/wireless/scan.c:1194 cfg80211_scan_done+0x2c0/0x4b4 net/wireless/scan.c:1193 Modules linked in: CPU: 0 UID: 0 PID: 41 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 Workqueue: events_unbound cfg80211_wiphy_work pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cfg80211_scan_done+0x2c0/0x4b4 net/wireless/scan.c:1193 lr : cfg80211_scan_done+0x2c0/0x4b4 net/wireless/scan.c:1193 sp : ffff8000992977c0 x29: ffff800099297840 x28: 1fffe0001902860f x27: 1ffff00013252efc x26: dfff800000000000 x25: ffff80008f7de768 x24: ffff0000f50801b8 x23: ffff0000f5082a08 x22: ffff0000c8143000 x21: ffff0000f5080700 x20: ffff0000c8143018 x19: ffff0000c8143078 x18: 1fffe00033797688 x17: ffff80008f7de000 x16: ffff80008b0178d8 x15: 0000000000000002 x14: 1ffff00013252f00 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700013252f02 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c2595b80 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff800099297810 x4 : ffff0000c8143010 x3 : ffff80008a6deba8 x2 : 0000000000000010 x1 : ffff80008b668700 x0 : 0000000000000001 Call trace: cfg80211_scan_done+0x2c0/0x4b4 net/wireless/scan.c:1193 (P) __ieee80211_scan_completed+0x4ec/0xae0 net/mac80211/scan.c:501 ieee80211_scan_work+0x140/0x1840 net/mac80211/scan.c:1184 cfg80211_wiphy_work+0x294/0x49c net/wireless/core.c:435 process_one_work+0x7e8/0x155c kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 irq event stamp: 921632 hardirqs last enabled at (921631): [] class_irqsave_destructor include/linux/irqflags.h:266 [inline] hardirqs last enabled at (921631): [] __free_object+0x508/0x720 lib/debugobjects.c:524 hardirqs last disabled at (921632): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (921606): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (921606): [] batadv_nc_purge_paths+0x2f4/0x37c net/batman-adv/network-coding.c:471 softirqs last disabled at (921604): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (921604): [] batadv_nc_purge_paths+0xd0/0x37c net/batman-adv/network-coding.c:442 ---[ end trace 0000000000000000 ]--- bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves