------------[ cut here ]------------
WARNING: CPU: 0 PID: 11053 at kernel/time/hrtimer.c:927 hrtimer_forward+0x228/0x360 kernel/time/hrtimer.c:927
Modules linked in:
CPU: 0 PID: 11053 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:hrtimer_forward+0x228/0x360 kernel/time/hrtimer.c:927
Code: 80 3c 02 00 0f 85 f2 00 00 00 4c 89 6b 20 e8 8f c4 10 00 4c 89 f0 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 78 c4 10 00 <0f> 0b 45 31 f6 eb dd e8 6c c4 10 00 31 ff 48 89 ee e8 12 c0 10 00
RSP: 0018:ffffc90000007da8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8880638fd838 RCX: ffffffff81657488
RDX: ffff888024d31bc0 RSI: ffffffff81657618 RDI: 0000000000000001
RBP: 00000000061a8000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000002ca6c4f330 R14: 0000000000000001 R15: ffff8880638fd850
FS:  00007fa2936dc700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000015a0004 CR3: 0000000011fb2000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 mac80211_hwsim_beacon+0x17e/0x1c0 drivers/net/wireless/mac80211_hwsim.c:1791
 __run_hrtimer kernel/time/hrtimer.c:1519 [inline]
 __hrtimer_run_queues+0x609/0xea0 kernel/time/hrtimer.c:1583
 hrtimer_run_softirq+0x19d/0x390 kernel/time/hrtimer.c:1600
 __do_softirq+0x2cb/0xad5 kernel/softirq.c:298
 asm_call_irq_on_stack+0xf/0x20
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
 do_softirq_own_stack+0xaa/0xd0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:393 [inline]
 __irq_exit_rcu kernel/softirq.c:423 [inline]
 irq_exit_rcu+0x18a/0x1b0 kernel/softirq.c:435
 sysvec_apic_timer_interrupt+0x4d/0x100 arch/x86/kernel/apic/apic.c:1096
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628
RIP: 0010:preempt_schedule_irq+0x49/0xa0 kernel/sched/core.c:5340
Code: 00 48 b8 00 00 00 00 00 fc ff df 48 89 dd 48 c1 ed 03 48 01 c5 bf 01 00 00 00 e8 a2 91 28 f8 e8 dd 58 55 f8 fb bf 01 00 00 00 <e8> 42 ce ff ff 9c 58 fa f6 c4 02 75 27 bf 01 00 00 00 e8 b0 79 28
RSP: 0018:ffffc9000178f0e8 EFLAGS: 00000202
RAX: 0000000000001eb9 RBX: ffff888024d31bc0 RCX: ffffffff815a9b57
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffed10049a6378 R08: 0000000000000001 R09: ffffffff8fe6f867
R10: fffffbfff1fcdf0c R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 irqentry_exit_cond_resched kernel/entry/common.c:393 [inline]
 irqentry_exit_cond_resched kernel/entry/common.c:385 [inline]
 irqentry_exit+0x7a/0xa0 kernel/entry/common.c:423
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628
RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x30 kernel/rcu/update.c:278
Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 65 81 05 60 e0 dc 76 00 00 00 f0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <8b> 05 4e 0b ea 04 85 c0 74 21 8b 05 1c 3c ea 04 85 c0 74 17 65 48
RSP: 0018:ffffc9000178f1b0 EFLAGS: 00000282
RAX: 0000000000000000 RBX: 000000000045e219 RCX: 0000000000000001
RDX: 1ffff110049a64a8 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000000045e219 R08: 0000000000000000 R09: ffffffff8fe6f7a7
R10: fffffbfff1fcdef4 R11: 0000000000000001 R12: ffffc9000178f2d8
R13: 0000000000000000 R14: ffff888024d31bc0 R15: 0000000000000100
 rcu_read_lock include/linux/rcupdate.h:643 [inline]
 is_bpf_text_address+0x3b/0x1a0 kernel/bpf/core.c:700
 kernel_text_address kernel/extable.c:151 [inline]
 kernel_text_address+0xbd/0xf0 kernel/extable.c:120
 __kernel_text_address+0x9/0x30 kernel/extable.c:105
 unwind_get_return_address+0x51/0x90 arch/x86/kernel/unwind_orc.c:318
 arch_stack_walk+0x93/0xe0 arch/x86/kernel/stacktrace.c:26
 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121
 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:48
 kasan_set_track mm/kasan/common.c:56 [inline]
 __kasan_kmalloc.constprop.0+0xc2/0xd0 mm/kasan/common.c:461
 slab_post_alloc_hook mm/slab.h:512 [inline]
 slab_alloc_node mm/slub.c:2889 [inline]
 slab_alloc mm/slub.c:2897 [inline]
 kmem_cache_alloc+0x145/0x350 mm/slub.c:2902
 kmem_cache_zalloc include/linux/slab.h:672 [inline]
 sctp_chunkify+0x4b/0x2e0 net/sctp/sm_make_chunk.c:1356
 _sctp_make_chunk+0x149/0x260 net/sctp/sm_make_chunk.c:1429
 sctp_make_data net/sctp/sm_make_chunk.c:1450 [inline]
 sctp_make_datafrag_empty+0x164/0x230 net/sctp/sm_make_chunk.c:740
 sctp_datamsg_from_user+0x615/0x1230 net/sctp/chunk.c:262
 sctp_sendmsg_to_asoc+0x1291/0x2190 net/sctp/socket.c:1841
 sctp_sendmsg+0x103b/0x1d20 net/sctp/socket.c:2013
 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:817
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg+0xd3/0x130 net/socket.c:672
 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2336
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2390
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2423
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45e219
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fa2936dbc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
RDX: 00000000000000fc RSI: 00000000200006c0 RDI: 0000000000000005
RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c
R13: 00007ffcb70d4bbf R14: 00007fa2936dc9c0 R15: 000000000119bf8c