------------[ cut here ]------------ WARNING: CPU: 1 PID: 4188 at net/wireless/core.h:235 ASSERT_WDEV_LOCK net/wireless/core.h:235 [inline] WARNING: CPU: 1 PID: 4188 at net/wireless/core.h:235 cfg80211_ch_switch_notify+0x2c0/0x524 net/wireless/nl80211.c:17540 Modules linked in: CPU: 1 PID: 4188 Comm: kworker/u4:8 Not tainted 5.15.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: phy8 ieee80211_csa_finalize_work pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ASSERT_WDEV_LOCK net/wireless/core.h:235 [inline] pc : cfg80211_ch_switch_notify+0x2c0/0x524 net/wireless/nl80211.c:17540 lr : ASSERT_WDEV_LOCK net/wireless/core.h:235 [inline] lr : cfg80211_ch_switch_notify+0x2c0/0x524 net/wireless/nl80211.c:17540 sp : ffff800020827a70 x29: ffff800020827a70 x28: 1fffe0001cd62ad7 x27: 1fffe0001cd62a51 x26: ffff800014ac0000 x25: ffff0000d6ef05c0 x24: dfff800000000000 x23: 1ffff00002958069 x22: 0000000000000000 x21: ffff0000e6b14c90 x20: ffff0000e6b14000 x19: ffff0000e6b156c0 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000084c5eb8 x15: 000000000000000c x14: ffff0000c63eb680 x13: 0000000000ff0100 x12: ffffffffffffffff x11: 0000000000000000 x10: 0000000000000000 x9 : ffff0000c63eb680 x8 : ffff8000112cbd30 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000100 x2 : ffff0000e6b162a0 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: ASSERT_WDEV_LOCK net/wireless/core.h:235 [inline] cfg80211_ch_switch_notify+0x2c0/0x524 net/wireless/nl80211.c:17540 __ieee80211_csa_finalize net/mac80211/cfg.c:3256 [inline] ieee80211_csa_finalize+0x674/0xd70 net/mac80211/cfg.c:3263 ieee80211_csa_finalize_work+0xec/0x134 net/mac80211/cfg.c:3288 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310 worker_thread+0x910/0x1034 kernel/workqueue.c:2457 kthread+0x37c/0x45c kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 irq event stamp: 155268 hardirqs last enabled at (155267): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] hardirqs last enabled at (155267): [] _raw_spin_unlock_irqrestore+0xac/0x158 kernel/locking/spinlock.c:194 hardirqs last disabled at (155268): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396 softirqs last enabled at (155254): [] spin_unlock_bh include/linux/spinlock.h:408 [inline] softirqs last enabled at (155254): [] cfg80211_put_bss+0x1dc/0x230 net/wireless/scan.c:2623 softirqs last disabled at (155252): [] spin_lock_bh include/linux/spinlock.h:368 [inline] softirqs last disabled at (155252): [] cfg80211_put_bss+0x38/0x230 net/wireless/scan.c:2621 ---[ end trace 55f21c87916db523 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4188 at net/wireless/core.h:235 ASSERT_WDEV_LOCK net/wireless/core.h:235 [inline] WARNING: CPU: 1 PID: 4188 at net/wireless/core.h:235 cfg80211_ch_switch_notify+0x2c0/0x524 net/wireless/nl80211.c:17540 Modules linked in: CPU: 1 PID: 4188 Comm: kworker/u4:8 Tainted: G W 5.15.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: phy7 ieee80211_csa_finalize_work pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ASSERT_WDEV_LOCK net/wireless/core.h:235 [inline] pc : cfg80211_ch_switch_notify+0x2c0/0x524 net/wireless/nl80211.c:17540 lr : ASSERT_WDEV_LOCK net/wireless/core.h:235 [inline] lr : cfg80211_ch_switch_notify+0x2c0/0x524 net/wireless/nl80211.c:17540 sp : ffff800020827a70 x29: ffff800020827a70 x28: 1fffe0001cd5ead7 x27: 1fffe0001cd5ea51 x26: ffff800014ac0000 x25: ffff0000d6a605c0 x24: dfff800000000000 x23: 1ffff00002958069 x22: 0000000000000000 x21: ffff0000e6af4c90 x20: ffff0000e6af4000 x19: ffff0000e6af56c0 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000084c5eb8 x15: 000000000000000c x14: ffff0000c63eb680 x13: 0000000000ff0100 x12: ffffffffffffffff x11: 0000000000000000 x10: 0000000000000000 x9 : ffff0000c63eb680 x8 : ffff8000112cbd30 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000100 x2 : ffff0000e6af62a0 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: ASSERT_WDEV_LOCK net/wireless/core.h:235 [inline] cfg80211_ch_switch_notify+0x2c0/0x524 net/wireless/nl80211.c:17540 __ieee80211_csa_finalize net/mac80211/cfg.c:3256 [inline] ieee80211_csa_finalize+0x674/0xd70 net/mac80211/cfg.c:3263 ieee80211_csa_finalize_work+0xec/0x134 net/mac80211/cfg.c:3288 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310 worker_thread+0x910/0x1034 kernel/workqueue.c:2457 kthread+0x37c/0x45c kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 irq event stamp: 156030 hardirqs last enabled at (156029): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] hardirqs last enabled at (156029): [] _raw_spin_unlock_irqrestore+0xac/0x158 kernel/locking/spinlock.c:194 hardirqs last disabled at (156030): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396 softirqs last enabled at (156018): [] spin_unlock_bh include/linux/spinlock.h:408 [inline] softirqs last enabled at (156018): [] cfg80211_put_bss+0x1dc/0x230 net/wireless/scan.c:2623 softirqs last disabled at (156016): [] spin_lock_bh include/linux/spinlock.h:368 [inline] softirqs last disabled at (156016): [] cfg80211_put_bss+0x38/0x230 net/wireless/scan.c:2621 ---[ end trace 55f21c87916db524 ]---