------------[ cut here ]------------ WARNING: CPU: 0 PID: 4070 at net/wireless/scan.c:1182 cfg80211_scan_done+0x2c8/0x4b0 net/wireless/scan.c:1181 Modules linked in: CPU: 0 UID: 0 PID: 4070 Comm: kworker/u8:8 Not tainted 6.16.0-rc2-syzkaller-ge04c78d86a96 #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: events_unbound cfg80211_wiphy_work pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : cfg80211_scan_done+0x2c8/0x4b0 net/wireless/scan.c:1181 lr : cfg80211_scan_done+0x2c8/0x4b0 net/wireless/scan.c:1181 sp : ffff8000a11177c0 x29: ffff8000a1117820 x28: ffff0000f4588700 x27: 1fffe0001a9db80c x26: 1ffff00014222ef8 x25: dfff800000000000 x24: ffff0000f45881b8 x23: ffff0000d4edc060 x22: ffff0000f458a9f0 x21: ffff0000d4edc070 x20: ffff8000a11177e0 x19: ffff0000d4edc000 x18: 1fffe00033bdb476 x17: ffff80008e25e000 x16: ffff80008a376964 x15: 0000000000000002 x14: 1ffff00014222efc x13: 0000000000000000 x12: 0000000000000000 x11: ffff700014222efe x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d24bbd00 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff8000a11177f0 x4 : ffff0000d4edc080 x3 : ffff800089a647c4 x2 : 0000000000000010 x1 : ffff80008a96c720 x0 : 0000000000000001 Call trace: cfg80211_scan_done+0x2c8/0x4b0 net/wireless/scan.c:1181 (P) __ieee80211_scan_completed+0x4ec/0xae0 net/mac80211/scan.c:501 ieee80211_scan_work+0x140/0x18c4 net/mac80211/scan.c:1177 cfg80211_wiphy_work+0x2a8/0x48c net/wireless/core.c:435 process_one_work+0x7e8/0x155c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3321 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3402 kthread+0x5ac/0x70c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 irq event stamp: 750990 hardirqs last enabled at (750989): [] class_irqsave_destructor include/linux/irqflags.h:266 [inline] hardirqs last enabled at (750989): [] __free_object+0x528/0x71c lib/debugobjects.c:524 hardirqs last disabled at (750990): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (750954): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (750954): [] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] softirqs last enabled at (750954): [] nsim_dev_trap_report_work+0x67c/0x9fc drivers/net/netdevsim/dev.c:851 softirqs last disabled at (750952): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (750952): [] nsim_dev_trap_report drivers/net/netdevsim/dev.c:816 [inline] softirqs last disabled at (750952): [] nsim_dev_trap_report_work+0x5f4/0x9fc drivers/net/netdevsim/dev.c:851 ---[ end trace 0000000000000000 ]--- bridge0: port 1(bridge_slave_0) entered blocking state bridge0: port 1(bridge_slave_0) entered forwarding state bridge0: port 2(bridge_slave_1) entered blocking state bridge0: port 2(bridge_slave_1) entered forwarding state wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50