------------[ cut here ]------------
WARNING: CPU: 0 PID: 6284 at net/mac80211/chan.c:493 _ieee80211_change_chanctx+0xdc/0x474 net/mac80211/chan.c:493
Modules linked in:
CPU: 0 PID: 6284 Comm: kworker/u4:16 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
Workqueue: phy5 ieee80211_csa_finalize_work
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : _ieee80211_change_chanctx+0xdc/0x474 net/mac80211/chan.c:493
lr : _ieee80211_change_chanctx+0xdc/0x474 net/mac80211/chan.c:493
sp : ffff8000212778f0
x29: ffff8000212778f0 x28: dfff800000000000 x27: 1fffe0001eb1ad07
x26: dfff800000000000 x25: ffff0000f58d6838 x24: 0000000000000006
x23: 0000000000000000 x22: ffff0000f58d6830 x21: ffff0000db5c1e00
x20: ffff0000db5c1e00 x19: ffff0000f59a8e80 x18: 1fffe00033e6997e
x17: ffff8000153bd000 x16: ffff800011bb65f8 x15: 0000000000000000
x14: 000000000000000d x13: 0000000000ff0100 x12: ffff800017c9ab88
x11: ff008000114cc648 x10: 0000000000000000 x9 : ffff8000114cc648
x8 : ffff0000da360000 x7 : ffff8000114cc4f8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff0000f58d6830
x2 : ffff0000db5c1e00 x1 : ffff800017c9ab40 x0 : 0000000000000006
Call trace:
 _ieee80211_change_chanctx+0xdc/0x474 net/mac80211/chan.c:493
 ieee80211_change_chanctx net/mac80211/chan.c:530 [inline]
 ieee80211_recalc_chanctx_chantype+0x568/0x5d4 net/mac80211/chan.c:823
 ieee80211_vif_use_reserved_switch+0x1434/0x23e0 net/mac80211/chan.c:1685
 ieee80211_link_use_reserved_context+0x308/0x544 net/mac80211/chan.c:1922
 __ieee80211_csa_finalize net/mac80211/cfg.c:3593 [inline]
 ieee80211_csa_finalize+0x42c/0xbf8 net/mac80211/cfg.c:3625
 ieee80211_csa_finalize_work+0xdc/0x12c net/mac80211/cfg.c:3650
 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
 kthread+0x254/0x2e0 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 3122818
hardirqs last  enabled at (3122817): [<ffff800011c9daec>] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:159 [inline]
hardirqs last  enabled at (3122817): [<ffff800011c9daec>] _raw_spin_unlock_irq+0x3c/0x90 kernel/locking/spinlock.c:202
hardirqs last disabled at (3122818): [<ffff800011bb2834>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (3122746): [<ffff80000d6aafac>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (3122746): [<ffff80000d6aafac>] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline]
softirqs last  enabled at (3122746): [<ffff80000d6aafac>] nsim_dev_trap_report_work+0x610/0x94c drivers/net/netdevsim/dev.c:851
softirqs last disabled at (3122744): [<ffff80000d6aaf2c>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (3122744): [<ffff80000d6aaf2c>] nsim_dev_trap_report drivers/net/netdevsim/dev.c:816 [inline]
softirqs last disabled at (3122744): [<ffff80000d6aaf2c>] nsim_dev_trap_report_work+0x590/0x94c drivers/net/netdevsim/dev.c:851
---[ end trace 0000000000000000 ]---