------------[ cut here ]------------ WARNING: CPU: 0 PID: 5216 at net/mac80211/tx.c:5040 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5040 [inline] WARNING: CPU: 0 PID: 5216 at net/mac80211/tx.c:5040 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5035 [inline] WARNING: CPU: 0 PID: 5216 at net/mac80211/tx.c:5040 __ieee80211_beacon_get+0x14ac/0x16b0 net/mac80211/tx.c:5469 Modules linked in: CPU: 0 UID: 0 PID: 5216 Comm: udevd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5040 [inline] RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5035 [inline] RIP: 0010:__ieee80211_beacon_get+0x14ac/0x16b0 net/mac80211/tx.c:5469 Code: 00 89 df 44 89 e6 e8 f3 b8 f4 f6 44 38 e3 72 a1 e8 c9 b7 f4 f6 48 89 ef e8 91 e2 4b f7 31 ed e9 9c fe ff ff e8 b5 b7 f4 f6 90 <0f> 0b 90 e9 86 f6 ff ff 48 89 c6 48 c7 c7 20 6b 2d 90 48 89 04 24 RSP: 0018:ffffc90000007b70 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a99f902 RDX: ffff888075bd0000 RSI: ffffffff8a9a027b RDI: 0000000000000001 RBP: ffffc90000007c20 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807596e400 R13: 0000000000000041 R14: ffff888064500d80 R15: ffff8880645029d8 FS: 00007f409a54fc80(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555571d92808 CR3: 00000000759b6000 CR4: 0000000000350ef0 Call Trace: ieee80211_beacon_get_tim+0xa7/0x280 net/mac80211/tx.c:5596 ieee80211_beacon_get include/net/mac80211.h:5632 [inline] mac80211_hwsim_beacon_tx+0x4ea/0xa00 drivers/net/wireless/virtual/mac80211_hwsim.c:2311 __iterate_interfaces+0x2e8/0x640 net/mac80211/util.c:775 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:811 mac80211_hwsim_beacon+0x105/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2345 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x20d/0xae0 kernel/time/hrtimer.c:1803 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1820 handle_softirqs+0x216/0x8f0 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:655 irq_exit_rcu+0x9/0x30 kernel/softirq.c:671 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x70 kernel/kcov.c:217 Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 c4 1e 75 7e 65 8b 05 c5 1e 75 7e 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 RSP: 0018:ffffc90003a37cd8 EFLAGS: 00000202 RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffffff84b83cbd RDX: ffff888075bd0000 RSI: 0000000000000000 RDI: 0000000000000007 RBP: 00007ffd660f0e78 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000fe0 R11: 0000000000000000 R12: 00007ffd660f0e78 R13: ffff888046062220 R14: 0000000000000fe0 R15: 00007ffd660f0e78 strncpy_from_user+0x6b/0x2d0 lib/strncpy_from_user.c:123 getname_flags.part.0+0x8f/0x550 fs/namei.c:150 getname_flags include/linux/audit.h:322 [inline] getname+0x8d/0xe0 fs/namei.c:223 getname_maybe_null include/linux/fs.h:2796 [inline] vfs_fstatat+0xdf/0xf0 fs/stat.c:361 __do_sys_newfstatat+0xa2/0x130 fs/stat.c:530 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f409a1165f4 Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 RSP: 002b:00007ffd660f09d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 0000558f8181d1af RCX: 00007f409a1165f4 RDX: 00007ffd660f09e8 RSI: 00007ffd660f0e78 RDI: 00000000ffffff9c RBP: 00007ffd660f0a78 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd660f0e78 R13: 00007ffd660f09e8 R14: 0000558fb0c2d910 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 84 00 test %al,(%rax) 2: 00 00 add %al,(%rax) 4: 00 00 add %al,(%rax) 6: 90 nop 7: 90 nop 8: 90 nop 9: 90 nop a: 90 nop b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: f3 0f 1e fa endbr64 1b: 65 48 8b 15 c4 1e 75 mov %gs:0x7e751ec4(%rip),%rdx # 0x7e751ee7 22: 7e 23: 65 8b 05 c5 1e 75 7e mov %gs:0x7e751ec5(%rip),%eax # 0x7e751eef * 2a: a9 00 01 ff 00 test $0xff0100,%eax <-- trapping instruction 2f: 48 8b 34 24 mov (%rsp),%rsi 33: 74 1d je 0x52 35: f6 c4 01 test $0x1,%ah 38: 74 43 je 0x7d 3a: a9 00 00 0f 00 test $0xf0000,%eax 3f: 75 .byte 0x75