------------[ cut here ]------------
WARNING: CPU: 1 PID: 4551 at net/mac80211/tx.c:4934 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4934 [inline]
WARNING: CPU: 1 PID: 4551 at net/mac80211/tx.c:4934 __ieee80211_beacon_get+0x1520/0x1aac net/mac80211/tx.c:5255
Modules linked in:
CPU: 1 PID: 4551 Comm: kworker/u4:14 Not tainted 6.1.118-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: phy39 ieee80211_iface_work
pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4934 [inline]
pc : __ieee80211_beacon_get+0x1520/0x1aac net/mac80211/tx.c:5255
lr : __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4934 [inline]
lr : __ieee80211_beacon_get+0x1520/0x1aac net/mac80211/tx.c:5255
sp : ffff8000080178c0
x29: ffff800008017a80 x28: ffff700001002f2c x27: ffff0000d174ec00
x26: ffff000107600ea0 x25: ffff0000cb2de258 x24: ffff800008017b20
x23: ffff0000cedfc258 x22: ffff0000cb2dcc80 x21: 0000000000000000
x20: ffff0000cb2de790 x19: dfff800000000000 x18: 1fffe000367a3376
x17: ffff80019e3f6000 x16: ffff8000084f280c x15: 0000000000000000
x14: 0000000000000007 x13: ffff0000da475340 x12: 0000000000ff0100
x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011be5680
x8 : ffff0000da475340 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800011be4418
x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4934 [inline]
 __ieee80211_beacon_get+0x1520/0x1aac net/mac80211/tx.c:5255
 ieee80211_beacon_get_tim+0xb4/0x4ec net/mac80211/tx.c:5342
 ieee80211_beacon_get include/net/mac80211.h:5249 [inline]
 mac80211_hwsim_beacon_tx+0x1fc/0x94c drivers/net/wireless/mac80211_hwsim.c:2086
 __iterate_interfaces+0x204/0x484 net/mac80211/util.c:788
 ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 net/mac80211/util.c:824
 mac80211_hwsim_beacon+0xcc/0x1c8 drivers/net/wireless/mac80211_hwsim.c:2142
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x4b0/0xdc0 kernel/time/hrtimer.c:1753
 hrtimer_run_softirq+0x158/0x21c kernel/time/hrtimer.c:1770
 handle_softirqs+0x318/0xd58 kernel/softirq.c:571
 __do_softirq+0x14/0x20 kernel/softirq.c:605
 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80
 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:893
 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0x264/0x4d4 kernel/softirq.c:654
 irq_exit_rcu+0x14/0x84 kernel/softirq.c:666
 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline]
 el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:486
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581
 arch_local_irq_enable arch/arm64/include/asm/irqflags.h:35 [inline]
 preempt_schedule_irq+0x84/0x1b8 kernel/sched/core.c:6869
 arm64_preempt_schedule_irq arch/arm64/kernel/entry-common.c:265 [inline]
 __el1_irq arch/arm64/kernel/entry-common.c:474 [inline]
 el1_interrupt+0x4c/0x68 arch/arm64/kernel/entry-common.c:486
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581
 __debug_check_no_obj_freed lib/debugobjects.c:963 [inline]
 debug_check_no_obj_freed+0x114/0x478 lib/debugobjects.c:1009
 slab_free_hook mm/slub.c:1699 [inline]
 slab_free_freelist_hook mm/slub.c:1750 [inline]
 slab_free mm/slub.c:3661 [inline]
 __kmem_cache_free+0x258/0x4b4 mm/slub.c:3674
 kfree+0xcc/0x1b8 mm/slab_common.c:988
 ieee80211_bss_info_update+0x874/0xc78 net/mac80211/scan.c:223
 ieee80211_rx_bss_info net/mac80211/ibss.c:1120 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline]
 ieee80211_ibss_rx_queued_mgmt+0x954/0x27a0 net/mac80211/ibss.c:1638
 ieee80211_iface_process_skb net/mac80211/iface.c:1668 [inline]
 ieee80211_iface_work+0x5c4/0xa90 net/mac80211/iface.c:1722
 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2292
 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864
irq event stamp: 10062603
hardirqs last  enabled at (10062602): [<ffff800012293db8>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (10062602): [<ffff800012293db8>] exit_to_kernel_mode+0xe8/0x118 arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (10062603): [<ffff8000122919a4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (10062584): [<ffff800011999624>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (10062584): [<ffff800011999624>] cfg80211_bss_update+0xf5c/0x1d28 net/wireless/scan.c:1900
softirqs last disabled at (10062597): [<ffff800008020174>] __do_softirq+0x14/0x20 kernel/softirq.c:605
---[ end trace 0000000000000000 ]---