Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 38.107747][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.109706][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.113378][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.123266][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.125201][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.128017][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.136988][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.138941][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.141610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.151160][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.156746][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.159199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.171144][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.174241][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.179536][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.188038][ T288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.190101][ T288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.196414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.205610][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.207566][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.213092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.240791][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 38.243565][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.246069][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.248783][ T288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.250750][ T288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 38.254210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.257869][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.259900][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.263191][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.384697][ T4307] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 38.420188][ T4309] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 38.564277][ T4310] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 38.596274][ T4312] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program executing program executing program executing program [ 38.736552][ T4311] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program [ 38.779263][ T4308] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program [ 38.907440][ T4313] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 38.954530][ T4316] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 39.047731][ C0] ------------[ cut here ]------------ [ 39.049066][ C0] WARNING: CPU: 0 PID: 4318 at net/mac80211/tx.c:4934 __ieee80211_beacon_get+0x148c/0x19cc [ 39.051383][ C0] Modules linked in: [ 39.052290][ C0] CPU: 0 PID: 4318 Comm: syz-executor693 Not tainted 6.1.140-syzkaller #0 [ 39.054449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.056861][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 39.058825][ C0] pc : __ieee80211_beacon_get+0x148c/0x19cc [ 39.060281][ C0] lr : __ieee80211_beacon_get+0x148c/0x19cc [ 39.061757][ C0] sp : ffff800008007920 [ 39.062806][ C0] x29: ffff800008007ad0 x28: ffff800008007b3c x27: ffff0000c39bb458 [ 39.064771][ C0] x26: ffff0000d76b8ea0 x25: ffff0000c3bfd400 x24: ffff0000da270c80 [ 39.066847][ C0] x23: 0000000000000000 x22: 0000000000000001 x21: ffff700001000f34 [ 39.068888][ C0] x20: ffff0000da272790 x19: dfff800000000000 x18: 0000000000000000 [ 39.070848][ C0] x17: 00000000ffff0000 x16: ffff8000082d076c x15: 0000000000000000 [ 39.072919][ C0] x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 39.074990][ C0] x11: ff0080001120cf80 x10: 0000000000000000 x9 : ffff80001120cf80 [ 39.076917][ C0] x8 : ffff0000d89a1bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 39.078871][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001120bd9c [ 39.080875][ C0] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 39.082921][ C0] Call trace: [ 39.083701][ C0] __ieee80211_beacon_get+0x148c/0x19cc [ 39.085006][ C0] ieee80211_beacon_get_tim+0x68/0x444 [ 39.086254][ T4315] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 39.086325][ C0] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 39.089976][ C0] __iterate_interfaces+0x204/0x484 [ 39.091230][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 39.093016][ C0] mac80211_hwsim_beacon+0xc8/0x1b8 [ 39.094302][ C0] __hrtimer_run_queues+0x44c/0xc64 [ 39.095644][ C0] hrtimer_run_softirq+0x160/0x400 [ 39.096935][ C0] handle_softirqs+0x318/0xc6c [ 39.098079][ C0] __do_softirq+0x14/0x20 [ 39.099159][ C0] ____do_softirq+0x14/0x20 [ 39.100323][ C0] call_on_irq_stack+0x24/0x4c [ 39.101454][ C0] do_softirq_own_stack+0x20/0x2c [ 39.102629][ C0] __irq_exit_rcu+0x23c/0x43c [ 39.103760][ C0] irq_exit_rcu+0x14/0x84 [ 39.104811][ C0] el1_interrupt+0x38/0x54 [ 39.105858][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.107165][ C0] el1h_64_irq+0x64/0x68 [ 39.108210][ C0] caches_clean_inval_pou+0x7c/0x84 [ 39.109487][ C0] __set_pte_at+0x70/0x3b0 [ 39.110507][ C0] do_set_pte+0x39c/0x49c [ 39.111430][ C0] finish_fault+0x560/0x65c [ 39.112506][ C0] handle_mm_fault+0x1ae4/0x2fd4 [ 39.113742][ C0] __get_user_pages+0x338/0x798 [ 39.114920][ C0] populate_vma_page_range+0x1f4/0x298 [ 39.116310][ C0] __mm_populate+0x208/0x330 [ 39.117403][ C0] vm_mmap_pgoff+0x1cc/0x284 [ 39.118524][ C0] ksys_mmap_pgoff+0xd0/0x5a0 [ 39.119654][ C0] __arm64_sys_mmap+0xf8/0x110 [ 39.120900][ C0] invoke_syscall+0x98/0x2bc [ 39.121982][ C0] el0_svc_common+0x138/0x258 [ 39.123184][ C0] do_el0_svc+0x58/0x13c [ 39.124223][ C0] el0_svc+0x58/0x138 [ 39.125166][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.126404][ C0] el0t_64_sync+0x18c/0x190 executing program executing program [ 39.127532][ C0] irq event stamp: 13693 [ 39.128529][ C0] hardirqs last enabled at (13692): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 39.131082][ C0] hardirqs last disabled at (13693): [] el1_dbg+0x24/0x80 [ 39.133239][ C0] softirqs last enabled at (12302): [] handle_softirqs+0xaf8/0xc6c [ 39.135666][ C0] softirqs last disabled at (13533): [] __do_softirq+0x14/0x20 [ 39.138100][ C0] ---[ end trace 0000000000000000 ]--- executing program [ 39.220954][ T4318] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 40.242394][ C1] sched: RT throttling activated executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 43.430731][ T4366] __nla_validate_parse: 47 callbacks suppressed [ 43.430745][ T4366] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 43.470645][ T4361] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program [ 43.594186][ T4365] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program [ 43.654493][ T4370] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program [ 43.774054][ T4371] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program [ 43.830419][ T4372] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program [ 43.948268][ T4369] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program executing program [ 44.008823][ T4367] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program [ 44.122923][ T4373] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program [ 44.185101][ T4375] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 48.546367][ T4431] __nla_validate_parse: 48 callbacks suppressed [ 48.546379][ T4431] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 48.584194][ T4430] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program executing program executing program [ 48.732522][ T4433] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 48.758791][ T4434] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. executing program executing program executing program [ 48.912108][ T4437] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'. [ 48.932595][ T4432] netlink: 32 bytes leftover after parsing attributes in process `syz-executor693'.