------------[ cut here ]------------
WARNING: CPU: 1 PID: 5187 at net/mac80211/tx.c:5040 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5040 [inline]
WARNING: CPU: 1 PID: 5187 at net/mac80211/tx.c:5040 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5035 [inline]
WARNING: CPU: 1 PID: 5187 at net/mac80211/tx.c:5040 __ieee80211_beacon_get+0x14ac/0x16b0 net/mac80211/tx.c:5469
Modules linked in:
CPU: 1 UID: 0 PID: 5187 Comm: udevd Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5040 [inline]
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5035 [inline]
RIP: 0010:__ieee80211_beacon_get+0x14ac/0x16b0 net/mac80211/tx.c:5469
Code: 00 89 df 44 89 e6 e8 a3 b9 ee f6 44 38 e3 72 a1 e8 79 b8 ee f6 48 89 ef e8 51 92 46 f7 31 ed e9 9c fe ff ff e8 65 b8 ee f6 90 <0f> 0b 90 e9 86 f6 ff ff 48 89 c6 48 c7 c7 a0 18 2d 90 48 89 04 24
RSP: 0018:ffffc90000a18b70 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8aab5262
RDX: ffff88801f788000 RSI: ffffffff8aab5bdb RDI: 0000000000000001
RBP: ffffc90000a18c20 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000002 R12: ffff888079693c00
R13: 0000000000000041 R14: ffff88805a9a8d80 R15: ffff88805a9aa9d0
FS: 00007f96d5169280(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055556a057808 CR3: 00000000338ea000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
ieee80211_beacon_get_tim+0xa7/0x280 net/mac80211/tx.c:5596
ieee80211_beacon_get include/net/mac80211.h:5635 [inline]
mac80211_hwsim_beacon_tx+0x4ea/0xa10 drivers/net/wireless/virtual/mac80211_hwsim.c:2311
__iterate_interfaces+0x2e5/0x640 net/mac80211/util.c:758
ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:794
mac80211_hwsim_beacon+0x105/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2345
__run_hrtimer kernel/time/hrtimer.c:1739 [inline]
__hrtimer_run_queues+0x20a/0xae0 kernel/time/hrtimer.c:1803
hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1820
handle_softirqs+0x213/0x8f0 kernel/softirq.c:561
__do_softirq kernel/softirq.c:595 [inline]
invoke_softirq kernel/softirq.c:435 [inline]
__irq_exit_rcu+0x109/0x170 kernel/softirq.c:662
irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:kasan_save_stack+0x28/0x60 mm/kasan/common.c:44
Code: 90 90 66 0f 1f 00 41 54 31 c0 b9 40 00 00 00 41 89 f4 55 89 fd 31 d2 be 40 00 00 00 53 48 81 ec 00 02 00 00 48 89 e3 48 89 df 48 ab 48 89 df e8 dd 43 89 ff 44 89 e1 89 ea 48 89 df 89 c6 e8
RSP: 0018:ffffc90003797768 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffffc90003797768 RCX: 0000000000000020
RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffc90003797868
RBP: 0000000000000d40 R08: 0000000000000000 R09: 0000000000000000
R10: ffff88807ca4d9c0 R11: 0000000000000001 R12: 0000000000000001
R13: 0000000000000032 R14: 0000000000000032 R15: ffffffff84608de0
kasan_save_track+0x14/0x30 mm/kasan/common.c:68
poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
kasan_kmalloc include/linux/kasan.h:260 [inline]
__do_kmalloc_node mm/slub.c:4298 [inline]
__kmalloc_noprof+0x21c/0x510 mm/slub.c:4310
kmalloc_noprof include/linux/slab.h:905 [inline]
kzalloc_noprof include/linux/slab.h:1037 [inline]
tomoyo_encode2+0x100/0x3e0 security/tomoyo/realpath.c:45
tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80
tomoyo_realpath_from_path+0x19d/0x720 security/tomoyo/realpath.c:283
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_perm+0x276/0x460 security/tomoyo/file.c:822
security_inode_getattr+0x116/0x290 security/security.c:2372
vfs_getattr fs/stat.c:243 [inline]
vfs_fstat+0x4b/0xd0 fs/stat.c:265
vfs_fstatat+0xbc/0xf0 fs/stat.c:364
__do_sys_newfstatat+0xa2/0x130 fs/stat.c:530
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f96d4d165f4
Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8
RSP: 002b:00007ffe882a0018 EFLAGS: 00000206 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 00007f96d4dee460 RCX: 00007f96d4d165f4
RDX: 00007ffe882a0020 RSI: 00007f96d4db3130 RDI: 000000000000000c
RBP: 000055dbda135480 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000206 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffe882a05b8 R15: 000000000000000a
----------------
Code disassembly (best guess):
0: 90 nop
1: 90 nop
2: 66 0f 1f 00 nopw (%rax)
6: 41 54 push %r12
8: 31 c0 xor %eax,%eax
a: b9 40 00 00 00 mov $0x40,%ecx
f: 41 89 f4 mov %esi,%r12d
12: 55 push %rbp
13: 89 fd mov %edi,%ebp
15: 31 d2 xor %edx,%edx
17: be 40 00 00 00 mov $0x40,%esi
1c: 53 push %rbx
1d: 48 81 ec 00 02 00 00 sub $0x200,%rsp
24: 48 89 e3 mov %rsp,%rbx
27: 48 89 df mov %rbx,%rdi
* 2a: f3 48 ab rep stos %rax,%es:(%rdi) <-- trapping instruction
2d: 48 89 df mov %rbx,%rdi
30: e8 dd 43 89 ff call 0xff894412
35: 44 89 e1 mov %r12d,%ecx
38: 89 ea mov %ebp,%edx
3a: 48 89 df mov %rbx,%rdi
3d: 89 c6 mov %eax,%esi
3f: e8 .byte 0xe8