------------[ cut here ]------------
WARNING: CPU: 1 PID: 5138 at net/mac80211/tx.c:5034 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5034 [inline]
WARNING: CPU: 1 PID: 5138 at net/mac80211/tx.c:5034 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5029 [inline]
WARNING: CPU: 1 PID: 5138 at net/mac80211/tx.c:5034 __ieee80211_beacon_get+0x14aa/0x16b0 net/mac80211/tx.c:5461
Modules linked in:
CPU: 1 PID: 5138 Comm: syz-executor102 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5034 [inline]
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5029 [inline]
RIP: 0010:__ieee80211_beacon_get+0x14aa/0x16b0 net/mac80211/tx.c:5461
Code: 00 89 df 44 89 e6 e8 35 c2 40 f7 44 38 e3 72 a3 e8 6b c8 40 f7 48 89 ef e8 53 64 91 f7 31 ed e9 9e fe ff ff e8 57 c8 40 f7 90 <0f> 0b 90 e9 88 f6 ff ff 48 89 c6 48 c7 c7 e0 bb 6e 8f 48 89 04 24
RSP: 0018:ffffc90000a08b90 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a4d6a62
RDX: ffff888023468000 RSI: ffffffff8a4d73d9 RDI: 0000000000000001
RBP: ffffc90000a08c40 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000003 R12: ffff88807d7a7800
R13: 0000000000000041 R14: ffff88807e390ca0 R15: ffff88807e392750
FS: 0000555582a3f480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5f2c13e228 CR3: 0000000076e4a000 CR4: 0000000000350ef0
Call Trace:
ieee80211_beacon_get_tim+0xa7/0x280 net/mac80211/tx.c:5588
ieee80211_beacon_get include/net/mac80211.h:5552 [inline]
mac80211_hwsim_beacon_tx+0x48d/0x880 drivers/net/wireless/virtual/mac80211_hwsim.c:2296
__iterate_interfaces+0x2d5/0x580 net/mac80211/util.c:772
ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:808
mac80211_hwsim_beacon+0x105/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2326
__run_hrtimer kernel/time/hrtimer.c:1692 [inline]
__hrtimer_run_queues+0x20f/0xc20 kernel/time/hrtimer.c:1756
hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1773
__do_softirq+0x21b/0x8de kernel/softirq.c:554
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu kernel/softirq.c:633 [inline]
irq_exit_rcu+0xb9/0x120 kernel/softirq.c:645
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:116 [inline]
RIP: 0010:lock_release+0xd3/0x6a0 kernel/locking/lockdep.c:5767
Code: 48 0f a3 1d cf bb 32 0e 0f 82 10 04 00 00 48 c7 c3 b8 76 9f 8f 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 <48> 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b7 04 00 00 8b
RSP: 0018:ffffc900046272b0 EFLAGS: 00000216
RAX: dffffc0000000000 RBX: ffffffff8f9f76b8 RCX: ffffffff816c8739
RDX: 0000000000000000 RSI: ffffffff8b6eb460 RDI: ffffffff8d239b28
RBP: 1ffff920008c4e58 R08: 0000000000000000 R09: fffffbfff1f3e862
R10: ffffffff8f9f4317 R11: 0000000000000001 R12: ffffffff8d7b49e0
R13: ffffffff817a17d0 R14: 000000000003d40c R15: ffff888023468000
rcu_lock_release include/linux/rcupdate.h:308 [inline]
rcu_read_unlock include/linux/rcupdate.h:783 [inline]
is_bpf_text_address+0x94/0x1a0 kernel/bpf/core.c:769
kernel_text_address kernel/extable.c:125 [inline]
kernel_text_address+0x8d/0x100 kernel/extable.c:94
__kernel_text_address+0xd/0x40 kernel/extable.c:79
unwind_get_return_address+0x7c/0xe0 arch/x86/kernel/unwind_orc.c:369
arch_stack_walk+0xc1/0x170 arch/x86/kernel/stacktrace.c:26
stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
__kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:541
__call_rcu_common.constprop.0+0x9a/0x790 kernel/rcu/tree.c:2734
dentry_free+0xc2/0x160 fs/dcache.c:376
__dentry_kill+0x498/0x600 fs/dcache.c:622
shrink_kill fs/dcache.c:1048 [inline]
shrink_dentry_list+0x140/0x5d0 fs/dcache.c:1075
shrink_dcache_parent+0xe2/0x530 fs/dcache.c:1509
d_invalidate fs/dcache.c:1592 [inline]
d_invalidate+0x143/0x290 fs/dcache.c:1577
proc_invalidate_siblings_dcache+0x45c/0x760 fs/proc/inode.c:142
release_task+0xe65/0x1b10 kernel/exit.c:282
wait_task_zombie kernel/exit.c:1189 [inline]
wait_consider_task+0x17c2/0x4150 kernel/exit.c:1416
do_wait_thread kernel/exit.c:1479 [inline]
__do_wait+0x1e2/0x890 kernel/exit.c:1597
do_wait+0x219/0x540 kernel/exit.c:1631
kernel_wait4+0x16c/0x280 kernel/exit.c:1790
__do_sys_wait4+0x15f/0x170 kernel/exit.c:1818
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xd5/0x260 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7f5f2c0ec567
Code: 89 7c 24 10 48 89 4c 24 18 e8 85 a8 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 d5 a8 02 00 8b 44
RSP: 002b:00007fff7839fa90 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: ffffffffffffffda RBX: 0000000000106b32 RCX: 00007f5f2c0ec567
RDX: 0000000040000001 RSI: 00007fff7839fae0 RDI: 00000000ffffffff
RBP: 0000000000000062 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000293 R12: 00007fff7839fae0
R13: 00007fff7839fb40 R14: 000000000000002e R15: 431bde82d7b634db
----------------
Code disassembly (best guess):
0: 48 0f a3 1d cf bb 32 bt %rbx,0xe32bbcf(%rip) # 0xe32bbd7
7: 0e
8: 0f 82 10 04 00 00 jb 0x41e
e: 48 c7 c3 b8 76 9f 8f mov $0xffffffff8f9f76b8,%rbx
15: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
1c: fc ff df
1f: 48 89 da mov %rbx,%rdx
22: 48 c1 ea 03 shr $0x3,%rdx
26: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx
* 2a: 48 89 d8 mov %rbx,%rax <-- trapping instruction
2d: 83 e0 07 and $0x7,%eax
30: 83 c0 03 add $0x3,%eax
33: 38 d0 cmp %dl,%al
35: 7c 08 jl 0x3f
37: 84 d2 test %dl,%dl
39: 0f 85 b7 04 00 00 jne 0x4f6
3f: 8b .byte 0x8b