------------[ cut here ]------------ WARNING: CPU: 1 PID: 4916 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x58e/0x640 Modules linked in: CPU: 1 PID: 4916 Comm: kworker/u4:11 Not tainted 6.1.111-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: phy28 ieee80211_iface_work RIP: 0010:ieee80211_ibss_csa_beacon+0x58e/0x640 net/mac80211/ibss.c:500 Code: f7 c6 05 93 b2 61 04 01 48 c7 c7 30 be 21 8c be fd 01 00 00 48 c7 c2 c0 be 21 8c e8 bc 05 47 f7 e9 7d fe ff ff e8 72 d4 66 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 61 d4 66 f7 0f 0b e9 d9 fa RSP: 0018:ffffc900048973d8 EFLAGS: 00010287 RAX: ffffffff8a23dace RBX: ffff8880592ab5d8 RCX: 0000000000100000 RDX: ffffc900176dd000 RSI: 0000000000000f94 RDI: 0000000000000f95 RBP: ffff88805882dad2 R08: dffffc0000000000 R09: fffffbfff223b85c R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805882dad8 R13: ffff88805882cc80 R14: ffff8880592a8760 R15: ffff88805882daf8 FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5d6b8656c0 CR3: 0000000068df7000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ieee80211_set_csa_beacon net/mac80211/cfg.c:3696 [inline] __ieee80211_channel_switch net/mac80211/cfg.c:3826 [inline] ieee80211_channel_switch+0x12f9/0x21c0 net/mac80211/cfg.c:3866 ieee80211_ibss_process_chanswitch+0xba5/0xf80 net/mac80211/ibss.c:888 ieee80211_rx_mgmt_spectrum_mgmt net/mac80211/ibss.c:927 [inline] ieee80211_ibss_rx_queued_mgmt+0x1321/0x2dd0 net/mac80211/ibss.c:1662 ieee80211_iface_process_skb net/mac80211/iface.c:1653 [inline] ieee80211_iface_work+0x7aa/0xce0 net/mac80211/iface.c:1707 process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292 worker_thread+0xa47/0x1200 kernel/workqueue.c:2439 kthread+0x28d/0x320 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295