------------[ cut here ]------------
WARNING: CPU: 1 PID: 5982 at net/mac80211/chan.c:92 ieee80211_chanctx_reserved_chandef net/mac80211/chan.c:90 [inline]
WARNING: CPU: 1 PID: 5982 at net/mac80211/chan.c:92 ieee80211_chsw_switch_hwconf net/mac80211/chan.c:1422 [inline]
WARNING: CPU: 1 PID: 5982 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 net/mac80211/chan.c:1638
Modules linked in:

CPU: 1 PID: 5982 Comm: syz.2.37 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:ieee80211_chanctx_reserved_chandef net/mac80211/chan.c:92 [inline]
RIP: 0010:ieee80211_chsw_switch_hwconf net/mac80211/chan.c:1422 [inline]
RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 net/mac80211/chan.c:1638
Code: 48 89 df e8 a4 8d d8 f7 e9 d6 fc ff ff e8 4a 19 80 f7 eb 24 e8 43 19 80 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 32 19 80 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 24 19 80 f7 48 8b 7c 24 08 4c 8b 74
RSP: 0018:ffffc90004f86e00 EFLAGS: 00010283
RAX: ffffffff8a06c812 RBX: 0000000000000001 RCX: 0000000000080000
RDX: ffffc9000b909000 RSI: 000000000000644e RDI: 000000000000644f
RBP: dffffc0000000000 R08: ffffffff911bc5c7 R09: 1ffffffff22378b8
R10: dffffc0000000000 R11: fffffbfff22378b9 R12: 0000000000000001
R13: ffff88805d0fe659 R14: ffff88805d152d48 R15: ffff888024142200
FS:  00007fe08cf486c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000040 CR3: 0000000024c10000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ieee80211_link_use_reserved_context+0x37b/0x5c0 net/mac80211/chan.c:1927
 __ieee80211_csa_finalize net/mac80211/cfg.c:3669 [inline]
 ieee80211_csa_finalize+0x571/0xeb0 net/mac80211/cfg.c:3708
 __ieee80211_channel_switch net/mac80211/cfg.c:3983 [inline]
 ieee80211_channel_switch+0xad5/0xe80 net/mac80211/cfg.c:3999
 rdev_channel_switch+0xeb/0x240 net/wireless/rdev-ops.h:1111
 nl80211_channel_switch+0xb02/0x1130 net/wireless/nl80211.c:10338
 genl_family_rcv_msg_doit+0x21a/0x310 net/netlink/genetlink.c:971
 genl_family_rcv_msg net/netlink/genetlink.c:1051 [inline]
 genl_rcv_msg+0x611/0x7a0 net/netlink/genetlink.c:1066
 netlink_rcv_skb+0x235/0x4c0 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1075
 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline]
 netlink_unicast+0x7b1/0x930 net/netlink/af_netlink.c:1346
 netlink_sendmsg+0x8d0/0xbf0 net/netlink/af_netlink.c:1899
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x61b/0x980 net/socket.c:2595
 ___sys_sendmsg+0x2a6/0x360 net/socket.c:2649
 __sys_sendmsg net/socket.c:2678 [inline]
 __do_sys_sendmsg net/socket.c:2687 [inline]
 __se_sys_sendmsg+0x1d0/0x2c0 net/socket.c:2685
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe08bf9ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe08cf48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fe08c215fa0 RCX: 00007fe08bf9ce59
RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
RBP: 00007fe08c032e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe08c216038 R14: 00007fe08c215fa0 R15: 00007ffc0923f3f8
 </TASK>
irq event stamp: 2291
hardirqs last  enabled at (2293): [<ffffffff816b41bb>] vprintk_store+0x9fb/0xd50 kernel/printk/printk.c:2297
hardirqs last disabled at (2294): [<ffffffff816b3954>] vprintk_store+0x194/0xd50 kernel/printk/printk.c:2206
softirqs last  enabled at (2192): [<ffffffff81525883>] __do_softirq kernel/softirq.c:612 [inline]
softirqs last  enabled at (2192): [<ffffffff81525883>] invoke_softirq kernel/softirq.c:452 [inline]
softirqs last  enabled at (2192): [<ffffffff81525883>] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661
softirqs last disabled at (2167): [<ffffffff81525883>] __do_softirq kernel/softirq.c:612 [inline]
softirqs last disabled at (2167): [<ffffffff81525883>] invoke_softirq kernel/softirq.c:452 [inline]
softirqs last disabled at (2167): [<ffffffff81525883>] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5982 at net/mac80211/chan.c:1423 ieee80211_chanctx_reserved_chandef net/mac80211/chan.c:92 [inline]
WARNING: CPU: 1 PID: 5982 at net/mac80211/chan.c:1423 ieee80211_chsw_switch_hwconf net/mac80211/chan.c:1422 [inline]
WARNING: CPU: 1 PID: 5982 at net/mac80211/chan.c:1423 ieee80211_vif_use_reserved_switch+0x1110/0x2900 net/mac80211/chan.c:1638
Modules linked in:
CPU: 1 PID: 5982 Comm: syz.2.37 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:ieee80211_chsw_switch_hwconf net/mac80211/chan.c:1423 [inline]
RIP: 0010:ieee80211_vif_use_reserved_switch+0x1110/0x2900 net/mac80211/chan.c:1638
Code: df e8 a4 8d d8 f7 e9 d6 fc ff ff e8 4a 19 80 f7 eb 24 e8 43 19 80 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 32 19 80 f7 0f 0b <0f> 0b e9 b7 f5 ff ff e8 24 19 80 f7 48 8b 7c 24 08 4c 8b 74 24 30
RSP: 0018:ffffc90004f86e00 EFLAGS: 00010283
RAX: ffffffff8a06c812 RBX: 0000000000000001 RCX: 0000000000080000
RDX: ffffc9000b909000 RSI: 000000000000644e RDI: 000000000000644f
RBP: dffffc0000000000 R08: ffffffff911bc5c7 R09: 1ffffffff22378b8
R10: dffffc0000000000 R11: fffffbfff22378b9 R12: 0000000000000001
R13: ffff88805d0fe659 R14: ffff88805d152d48 R15: ffff888024142200
FS:  00007fe08cf486c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1ddcbf2b60 CR3: 0000000024c10000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 ieee80211_link_use_reserved_context+0x37b/0x5c0 net/mac80211/chan.c:1927
 __ieee80211_csa_finalize net/mac80211/cfg.c:3669 [inline]
 ieee80211_csa_finalize+0x571/0xeb0 net/mac80211/cfg.c:3708
 __ieee80211_channel_switch net/mac80211/cfg.c:3983 [inline]
 ieee80211_channel_switch+0xad5/0xe80 net/mac80211/cfg.c:3999
 rdev_channel_switch+0xeb/0x240 net/wireless/rdev-ops.h:1111
 nl80211_channel_switch+0xb02/0x1130 net/wireless/nl80211.c:10338
 genl_family_rcv_msg_doit+0x21a/0x310 net/netlink/genetlink.c:971
 genl_family_rcv_msg net/netlink/genetlink.c:1051 [inline]
 genl_rcv_msg+0x611/0x7a0 net/netlink/genetlink.c:1066
 netlink_rcv_skb+0x235/0x4c0 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1075
 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline]
 netlink_unicast+0x7b1/0x930 net/netlink/af_netlink.c:1346
 netlink_sendmsg+0x8d0/0xbf0 net/netlink/af_netlink.c:1899
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x61b/0x980 net/socket.c:2595
 ___sys_sendmsg+0x2a6/0x360 net/socket.c:2649
 __sys_sendmsg net/socket.c:2678 [inline]
 __do_sys_sendmsg net/socket.c:2687 [inline]
 __se_sys_sendmsg+0x1d0/0x2c0 net/socket.c:2685
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fe08bf9ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe08cf48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fe08c215fa0 RCX: 00007fe08bf9ce59
RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
RBP: 00007fe08c032e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe08c216038 R14: 00007fe08c215fa0 R15: 00007ffc0923f3f8
 </TASK>
irq event stamp: 2473
hardirqs last  enabled at (2475): [<ffffffff816b41bb>] vprintk_store+0x9fb/0xd50 kernel/printk/printk.c:2297
hardirqs last disabled at (2476): [<ffffffff816b3954>] vprintk_store+0x194/0xd50 kernel/printk/printk.c:2206
softirqs last  enabled at (2192): [<ffffffff81525883>] __do_softirq kernel/softirq.c:612 [inline]
softirqs last  enabled at (2192): [<ffffffff81525883>] invoke_softirq kernel/softirq.c:452 [inline]
softirqs last  enabled at (2192): [<ffffffff81525883>] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661
softirqs last disabled at (2167): [<ffffffff81525883>] __do_softirq kernel/softirq.c:612 [inline]
softirqs last disabled at (2167): [<ffffffff81525883>] invoke_softirq kernel/softirq.c:452 [inline]
softirqs last disabled at (2167): [<ffffffff81525883>] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661
---[ end trace 0000000000000000 ]---
wlan1: failed to finalize CSA, disconnecting