------------[ cut here ]------------ changed & (BSS_CHANGED_BEACON | BSS_CHANGED_BEACON_ENABLED) && sdata->vif.type != NL80211_IFTYPE_AP && sdata->vif.type != NL80211_IFTYPE_ADHOC && sdata->vif.type != NL80211_IFTYPE_MESH_POINT && sdata->vif.type != NL80211_IFTYPE_OCB WARNING: net/mac80211/driver-ops.c:473 at drv_link_info_changed+0x13c/0x880 net/mac80211/driver-ops.c:468, CPU#0: kworker/u8:12/8070 Modules linked in: CPU: 0 UID: 0 PID: 8070 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:drv_link_info_changed+0x13c/0x880 net/mac80211/driver-ops.c:468 Code: 83 fb 01 75 1f e8 04 5a b2 f6 eb 32 e8 fd 59 b2 f6 eb 2b 83 fb 03 74 21 83 fb 05 75 07 e8 ec 59 b2 f6 eb 1a e8 e5 59 b2 f6 90 <0f> 0b 90 e9 be 01 00 00 e8 d7 59 b2 f6 eb 05 e8 d0 59 b2 f6 49 8d RSP: 0018:ffffc9000341f980 EFLAGS: 00010293 RAX: ffffffff8b135ccb RBX: 0000000080000000 RCX: ffff88802e4b5d00 RDX: 0000000000000000 RSI: ffffffff9006d500 RDI: 0000000080000000 RBP: ffff8880558b0f40 R08: ffff88802e4b5d00 R09: 0000000000000004 R10: 0000000000000005 R11: 0000000000000000 R12: ffff888055e5ce40 R13: ffff888055e5ef60 R14: 0000000000000200 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8f809c1fa8 CR3: 000000000e74a000 CR4: 00000000003526f0 Call Trace: ieee80211_offchannel_stop_vifs+0x249/0x560 net/mac80211/offchannel.c:122 _ieee80211_start_next_roc+0x5c6/0xa70 net/mac80211/offchannel.c:366 cfg80211_wiphy_work+0x2cf/0x460 net/wireless/core.c:538 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245