wlan1: Trigger new scan to find an IBSS to join
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4452 at net/mac80211/scan.c:1225 ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
Modules linked in:
CPU: 0 PID: 4452 Comm: kworker/u4:10 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
lr : ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
sp : ffff800020a47880
x29: ffff800020a478c0 x28: ffff0000dd3d8910 x27: ffff0000dd3d8ec0
x26: 0000000000000006 x25: ffff0000dd3dab50 x24: 0000000000000000
x23: 0000000000000c80 x22: 1fffe0001ba7b1d8 x21: ffff0000dd3dde98
x20: 0000000000000000 x19: dfff800000000000 x18: ffff800011b9bf60
x17: 0000000000000000 x16: ffff8000082d1110 x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff00004148ec0 x12: 0000000000ff0100
x11: ff0080001126fe0c x10: 0000000000000000 x9 : ffff80001126fe0c
x8 : ffff0000d5945340 x7 : ffff80001126f92c x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d05a8
x2 : ffff0000d5945340 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 ieee80211_request_ibss_scan+0x558/0x5e8 net/mac80211/scan.c:1225
 ieee80211_sta_find_ibss net/mac80211/ibss.c:-1 [inline]
 ieee80211_ibss_work+0xb14/0xd68 net/mac80211/ibss.c:1705
 ieee80211_iface_work+0x9bc/0xa34 net/mac80211/iface.c:1755
 cfg80211_wiphy_work+0x1d8/0x218 net/wireless/core.c:433
 process_one_work+0x7f8/0x13a4 kernel/workqueue.c:2292
 worker_thread+0x8c4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 3923690
hardirqs last  enabled at (3923689): [<ffff80000830fac4>] __up_console_sem+0xb4/0xfc kernel/printk/printk.c:261
hardirqs last disabled at (3923690): [<ffff800011a38914>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (3923678): [<ffff8000110ea3f8>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (3923678): [<ffff8000110ea3f8>] cfg80211_get_bss+0x48c/0x84c net/wireless/scan.c:1558
softirqs last disabled at (3923676): [<ffff8000110ea0a8>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (3923676): [<ffff8000110ea0a8>] cfg80211_get_bss+0x13c/0x84c net/wireless/scan.c:1532
---[ end trace 0000000000000000 ]---
IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready