------------[ cut here ]------------ WARNING: CPU: 1 PID: 11 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x4e4/0x594 net/mac80211/ibss.c:500 Modules linked in: CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 Workqueue: phy5 ieee80211_csa_finalize_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ieee80211_ibss_csa_beacon+0x4e4/0x594 net/mac80211/ibss.c:500 lr : ieee80211_ibss_csa_beacon+0x4e4/0x594 net/mac80211/ibss.c:500 sp : ffff80001cb57a20 x29: ffff80001cb57a30 x28: 1fffe0001ec792b5 x27: ffff0000f63c95a8 x26: dfff800000000000 x25: ffff0000f63c9ac8 x24: 0000000000000000 x23: ffff0000ddc20740 x22: ffff0000f63c9ad8 x21: 0000000000000002 x20: ffff0000f63c8c80 x19: 0000000000000000 x18: 1fffe00033e7697e x17: ffff80001537d000 x16: ffff8000082dd244 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe0001bb8402a x12: 0000000000000000 x11: ff008000113d3a78 x10: 0000000000000000 x9 : ffff8000113d3a78 x8 : ffff0000c09ab800 x7 : ffff80001122daf4 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000006 x1 : ffff800011cedc80 x0 : 0000000000000000 Call trace: ieee80211_ibss_csa_beacon+0x4e4/0x594 net/mac80211/ibss.c:500 ieee80211_ibss_finish_csa+0x234/0x318 net/mac80211/ibss.c:555 ieee80211_set_after_csa_beacon net/mac80211/cfg.c:3546 [inline] __ieee80211_csa_finalize net/mac80211/cfg.c:3602 [inline] ieee80211_csa_finalize+0x450/0xbf8 net/mac80211/cfg.c:3625 ieee80211_csa_finalize_work+0xdc/0x12c net/mac80211/cfg.c:3650 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 4027482 hardirqs last enabled at (4027481): [] __local_bh_enable_ip+0x1f8/0x37c kernel/softirq.c:426 hardirqs last disabled at (4027482): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (4027480): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (4027480): [] cfg80211_get_bss+0x4b8/0x888 net/wireless/scan.c:1558 softirqs last disabled at (4027478): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (4027478): [] cfg80211_get_bss+0x144/0x888 net/wireless/scan.c:1532 ---[ end trace 0000000000000000 ]--- wlan1: failed to finalize CSA, disconnecting